FOOD FOR THOUGHT
ZERO-DAY Vulnerabilities
Zero-day vulnerabilities are software flaws that leave users exposed to cyber-attacks before a patch or workaround is available. In short, a vulnerability exists but has not yet been patched.
The simple reason for the patch not being available is BECAUSE - The Defenders and Creators – people who are Security researchers and people who are developers - have not yet become aware of them.
Playing the Devil’s advocate here – With the above in context, I want to use another term - Probability as used in RISK Management.
It can be simply defined as “When the outcome of an event is unknown or unsure, it is best to discuss this in terms of probability- how likely something is going to happen”.
Food for Thought
1) Can end customers trust the plethora of applications, operating systems, network devices, security devices deployed in their premises to REBOUND BACK and resume business operations after a ZERO-DAY vulnerability has been targeted by a ZERO-DAY Exploit.
2) Is “Defense-In-Depth” the ANSSWER to this scourge or Security Pandemic as I would like to call it. OR
3) should organization’s look at “DEPTH-OF- DEFENSE” in addition to “DEFENSE-IN-DEPTH”. which to me means “Continuous Monitoring and Validation in a Consistent manner".
To make this happen an organization would need multiple tools and technologies in the areas of Artificial Intelligence, Machine Learning, Threat Intelligence, Analysis, Co-relation, Detection and Response.
So while we find answers to these questions , our customers and we as security professionals can continue to remain confused.
FOOD FOR THOUGHT
Cardiac death vs. brain death
The most common and accepted form of death is cardiac death—the absence of the heart contracting and pumping blood due to a disturbance in its electrical activity.
A less common type of death is brain death—the irreversible absence of all brain activity.
- The world is moving towards an application based digital economy.
- Risk Management and Governance in all shapes and forms has become more CRITICAL, then ever before.
- People perform processes using technology to produce the desired results.
- Results contribute to the fulfilment of Objectives, Goals and Missions to achieve the overall Enterprise Vision.
- Risks to People, Process and Technology interfere with EFFECTIVE and EFFICIENT production of Results.
- Attacks on organization’s digital assets are on the rise.
All matured organizations – the Leaders, with advanced GRC processes understand one aspect better than the followers- COMMON SENSE.
Many organizations are Brain Dead and are fast galloping towards a Cardiac Death, unless they put in corrective measures.
Do you agree?
