BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Least Privilege Can Help Solve IT Negligence

Posted March 19, 2012    Peter McCalister

The Ponemon Institute along with Trend Micro recently surveyed more than 700 ITprofessionals on the subject of the human factor in data breaches. According to the survey, 78 percent of respondents have experienced a data breach as a result of negligent or malicious employees or other insiders. This doesn’t surprise us here at BeyondTrust. We deal with businesses and organizations every day that are looking for solutions to mitigate insider attacks regardless if it’s intentional or negligent misuse of privilege.

Every enterprise has good people and bad people. Between dumb IT errors and spur-of-the-moment decisions, an environment where users have unlimited access to company resources is a dangerous place.

The survey also identified the top 10 practices employees routinely engage in that put companies at greater risk. The most popular risky practice is connecting computers to the Internet through an insecure wireless network. This employee practice can be easily resolved by using BeyondTrust PowerBroker Desktops which allows restricted users to maintain authorized computer settings such as, connecting to local printers, IP configuration settings to connect to a wireless networks, even the ability to change time zones. Another common risky practice among negligent employees is reusing the same password and username on different websites. This can be put to a stop by deploying PowerBroker Identity Services, a centralized enterprise solution to authenticate users in the same way across all platforms, which can enforce user password policy for password aging, history, etc.

The BeyondTrust ecosystem creates a least privilege environment within enterprises to reduce the risk of insider threats. Monitoring and alerts, reporting, and management tools siphon through web and code based interfaces to centrally control requested network tasks. As enterprises begin to pay more attention to privilege and access, they begin to embrace the principal of least privilege as it relates to improving overall security.

Leave a Reply

Additional articles

6

A Quick Look at MS14-068

Posted November 20, 2014    BeyondTrust Research Team

Microsoft recently released an out of band patch for Kerberos.  Taking a look at the Microsoft security bulletin, it seems like there is some kind of issue with Kerberos signatures related to tickets. Further information is available in the Microsoft SRD Blogpost So it looks like there is an issue with PAC signatures.  But what…

Tags:
, , , ,
Password Game Show

Managing Shared Accounts for Privileged Users: 5 Best Practices for Achieving Control and Accountability

Posted November 20, 2014    Scott Lang

How do organizations ensure accountability of shared privileged accounts to meet compliance and security requirements without impacting administrator productivity? Consider these five best practices…

Tags:
, , , , , ,
Triggering MS14-066

Triggering MS14-066

Posted November 17, 2014    BeyondTrust Research Team

Microsoft addressed CVE-2014-6321 this Patch Tuesday, which has been hyped as the next Heartbleed.  This vulnerability (actually at least 2 vulnerabilities) promises remote code execution in applications that use the SChannel Security Service Provider, such as Microsoft Internet Information Services (IIS). The details have been scarce.  Lets fix that. Looking at the bindiff of schannel.dll, we see a…

Tags:
, , , , ,