Attack Worries Increase as Pandemic Continues

by By Timothy Chiu, VP of Marketing on July 13, 2020

Security Boulevard recently wrote about a Deloitte survey of executives decision makers, a survey that found 69% of these executives expect the number and size of cyber events targeting their organizations to increase in the coming year. The survey polled 880 C-suite executives about their concerns business resiliency during the current pandemic. The survey also found 24% are worried about greater exposure to both insider threats and other kinds of nefarious activity. The ability to provide uninterrupted security coverage was also reported by 22% as a top concern. And 57% of the organizations queried, reported plans to increase their security spend in an effort to combat these issues. The article also included an interview with Deloitte’s Deborah Golden, US Cyber & Strategic Risk leader, Deloitte Risk & Financial Advisory and provided her insights on the recent survey.

With the expected continued increase in attacks, it’s a good time to review your security posture. Part of the security you should be thinking about is around your web applications and application workloads. With the new requirement to include RASP (Runtime Application Self-Protection) as part of your security framework in the NIST SP800-53 revision 5 draft, there’s an increased impetus to start looking at RASP solutions to bolster your application security.

K2 Cyber Security offers an ideal runtime protection security solution that detects true zero-day attacks, while at the same time generates the least false positives and alerts. Rather than rely on technologies like signatures, heuristics, fuzzy logic, machine learning or AI, we use a deterministic approach to detect true zero-day attacks, without being limited to detecting attacks based on prior attack knowledge. Deterministic security uses application execution validation, and verifies the API calls are functioning the way the code intended. There is no use of any prior knowledge about an attack or the underlying vulnerability, which gives our approach the true ability to detect new zero-day attacks. Our technology has 8 patents granted/pending, and has no false alerts.

We have also published a video, The Need for Deterministic Security. The video explains why the technologies used in today’s security tools, including web application firewalls (WAFs) fail to prevent zero day attacks and how deterministic security fills the need for detecting zero day attacks. The video covers why technologies like artificial intelligence, machine learning, heuristics, fuzzy logic, pattern and signature matching fail to detect true zero day attacks, giving very specific examples of attacks where these technologies work, and where they fail to detect an attack.

The video also explains why deterministic security works against true zero day attacks and how K2 uses deterministic security. Watch the video now.