Cyber Privacy is an important subset of your computer security regime which includes Anti-Virus, Anti-Malware and perimeter defense tools like Firewalls and Intrusion Prevention Systems (IPS). Most security products today focus on resolving problems based on known vulnerabilities and inbound traffic whereas Privacy is concerned specifically with data loss prevention.
This two part series discusses the different types of defense mechanisms available and how they differ from BlackFog’s approach to threat detection and prevention.
Perimeter Defense and Firewalls
Firewalls are perimeter defense tools that have been the cornerstone of threat prevention for well over a decade. They can block specific ports, endpoints and known vulnerabilities effectively. Since they exist at the gateway they provide an invisible layer of detection for devices within the network.
The challenge for firewalls and most perimeter defense tools is that they only work against well known vulnerabilities and attack vectors. Cyber threats have evolved considerably and now focus on completely different vectors to carry out their attacks. Instead of targeting known channels for weakness (which is always the first stage) they focus on specific channels and protocols that are already open.
Since primary access to the Internet is through a web browser, cyber attacks now focus on weaknesses in browsers and the HTTP/S protocol itself. With more than 80% of your exposure to the Internet through this mechanism cyber criminals utilize this to target you and effectively bypass firewall rules. By leveraging this open port (typically 80 or 443) cyber criminals are able to create tunnels through your network and communicate back to their command and control servers (C&C servers) at will.
Anti-Virus Tools
In contrast to firewalls, anti-virus (AV) tools focus on the device itself. These tools are great at removing the problem once it is discovered. While clearly and important part of your toolkit once you have been infected they do little to prevent problems in the first place.
Anti-virus tools use a technique known as signature detection. When threats have been discovered researchers fingerprint the files, providing a unique signature that can be used to detect these problems on your device. The signatures are then added to a database which is then sent back to all the clients running the vendor’s software ready for the next detection scan.
Like perimeter defense tools, anti-virus tools focus on known vulnerabilities and therefore cannot adapt to future threats. In the next article we will explain how BlackFog approaches the problem of data loss and privacy protection using preventative techniques.
Related Posts
Ongoing: New Ransomware Gangs in 2024
Ransomware gangs continue to break records and BlackFog will track all new ransomware gangs in 2024.
Healthcare Industry Targeted by Cybercrime
Why is the healthcare industry targeted so frequently? In 2023, there were 136 publicized attacks, a 134% increase from the year before.
What Should a Company do After a Data Breach? Key Steps you Need to Know About
Does your firm know what to do in the immediate aftermath of discovering a data breach?
Does Your Business Have an Effective Data Security Policy?
What should firms include when creating a comprehensive data security policy?
The State of Ransomware 2024
BlackFog's state of ransomware report measures publicly disclosed and non-disclosed attacks globally.
Lake Dallas ISD Chooses BlackFog to Prevent Data Exfiltration
Lake Dallas ISD serves about 4,000 students in Denton County uses BlackFog's anti data exfiltration to protect the school district and ensure data doesn’t end up in the hands of cybercriminals.