BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Least Privilege Can Reduce Malware

Posted March 23, 2012    Peter McCalister

If you’re like most companies, you’ve invested heavily in antivirus software. But are you stillmalware security having to deal with the latest viruses, trojans, and ransomware? Are you having to wait until your AV provider can fix the latest bugs and get you the cure, while your network is left open and unprotected? Instead of asking why that is, there are better questions to ask. Like is there a way to prevent or limit malware from ever entering your IT environment.

To answer this question, you need to understand that most malware attacks are successful because the code hijacks administrator credentials of an individual or program, and uses those credentials to enter into the computer or network. This is a form of indirect misuse of privilege- because the owner of those credentials isn’t even aware they are responsible for the infection. And how does one prevent this misuse of privilege? The answer is pretty simple- don’t let all users run around with administrator credentials. Implementing a least privilege solution on physical, virtual, and cloud environments stops this problem in its tracks. Without administrator credentials, there are no access points to your company’s secure information.

The good news is that eliminating administrator credentials for your users doesn’t mean a change in productivity. With the correct solution and proper implementation, your employees will be able to do their jobs and more without the risk of malware and data breaches looming over your head. Click here for more information.

Leave a Reply

Additional articles

How To Implement The Australian Signals Directorate’s Top 4 Strategies

Posted October 20, 2014    Morey Haber

The Australian Signals Directorate (ASD), also known as the Defence Signals Directorate, has developed a list of strategies to mitigate targeted cyber intrusions. The recommended strategies were developed through ASD’s extensive experience in operational cyber security, including responding to serious security intrusions and performing vulnerability assessments and penetration testing for Australian government agencies. These recommendations…

Tags:
, , , ,
asp-mvc

Exploiting MS14-059 because sometimes XSS is fun, sometimes…

Posted October 17, 2014    BeyondTrust Research Team

This October, Microsoft has provided a security update for System.Web.Mvc.dll which addresses a ‘Security Feature Bypass’. The vulnerability itself is in ASP.NET MVC technology and given its wide adoption we thought we would take a closer look. Referring to the bulletin we can glean a few useful pieces of information: “A cross-site scripting (XSS) vulnerability exists…

Tags:
4bestpracticesaudits-blog

Four Best Practices for Passing Privileged Account Audits

Posted October 16, 2014    Chris Burd

Like most IT organizations, your team may periodically face the “dreaded” task of being audited. Your process for delegating privileged access to desktops, servers, and infrastructure devices is a massive target for the auditor’s microscope. An audit’s findings can have significant implications on technology and business strategy, so it’s critical to make sure you’re prepared…

Tags:
, , , ,