Trustwave SpiderLabs Uncovers Ov3r_Stealer Malware Spread via Phishing and Facebook Advertising. Learn More

Trustwave SpiderLabs Uncovers Ov3r_Stealer Malware Spread via Phishing and Facebook Advertising. Learn More

Managed Detection & Response

Eliminate active threats with 24/7 threat detection, investigation, and response.

Co-Managed SOC (SIEM)

Maximize your SIEM investment, stop alert fatigue, and enhance your team with hybrid security operations support.

Advisory & Diagnostics

Advance your cybersecurity program and get expert guidance where you need it most.

Penetration Testing

Test your physical locations and IT infrastructure to shore up weaknesses before exploitation.

Database Security

Prevent unauthorized access and exceed compliance requirements.

Email Security

Stop email threats others miss and secure your organization against the #1 ransomware attack vector.

Digital Forensics & Incident Response

Prepare for the inevitable with 24/7 global breach response in-region and available on-site.

Firewall & Technology Management

Mitigate risk of a cyberattack with 24/7 incident and health monitoring and the latest threat intelligence.

Microsoft Exchange Server Attacks
Stay protected against emerging threats
Rapidly Secure New Environments
Security for rapid response situations
Securing the Cloud
Safely navigate and stay protected
Securing the IoT Landscape
Test, monitor and secure network objects
Why Trustwave
About Us
Awards and Accolades
Trustwave SpiderLabs Team
Trustwave Fusion Security Operations Platform
Trustwave Security Colony
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Trustwave PartnerOne Program
Join forces with Trustwave to protect against the most advance cybersecurity threats

Two Challenging Areas Where Security Pros Are Making Strides

The recently released 2018 Security Pressures Report from Trustwave highlighted the diverse points of pain facing security professionals. In case you were wondering, there is more than enough torment to go around.

But the report, now in its fifth year, zeroed in on some bright spots where infosec practitioners are making progress - two in particular, which should help you stay upbeat amid these tumultuous times.


1) Secure Development Taking a Seat in the Front

The pressure to rush IT projects before they are security ready is decreasing. The bulk of 1,600 leaders and decision makers polled in the 2018 Security Pressures Report revealed that their organization still emphasizes speed to market over security (58 percent) when it comes to the completion of IT projects. But the divide continues to shrink, as that number has plummeted 20 percentage points over the last five years.

The steep decline is apparent proof that businesses are applying more diligence into their software design process to help ensure vulnerabilities are kept to minimum once the project is placed into production.

This is a hopeful sign that the message of security is proliferating companywide. As a result, management may be easing development deadlines so that operational requirements, including security testing, can comfortably fit into the scope of these projects. As well, the improving numbers point toward better security understanding and appreciation among development teams and enhanced support and enablement from their peers from the IT and security department.

In general, there appears greater recognition that the earlier in the lifecycle that security is integrated, the cost is far less than if it is added at the end. Baked in is cheaper than bolted on.


2) Bells and Whistles. Who Needs 'Em?

Generally speaking, a system, device or application with fewer functions is more secure than one with many functions because it contains less code that can be exploited by unauthenticated users, in the process creating a smaller attack surface. Put another way, less is sometimes more.

The same logic applies to security solutions - but in a different kind of way.

As we've lamented many times in this space, organizations often lack the appropriate in-house skills and other resources, such as time and headcount, to address the sheer number of threats they must face. If they are unable to correctly operate a feature-filled security product, it may end up just collecting dust - especially if it was only purchased to satisfy a compliance auditor. SIEM is notorious for going underused.

Even large companies that make considerable investment in security will struggle in the face of advanced threats if they are replete of the appropriate talent needed to adopt and deploy security technologies.

Which brings us back to the Security Pressures Report: Only 56 percent of respon­dents (down eight percentage points from last year's report and a whop­ping 18 percentage points from two years ago) reported feeling pressure to select and purchase security technologies containing all the latest features. However, for those 56 percent of respondents still feeling coercion to adopt and deploy the security technology de rigueur, 31 percent do not believe they have the adequate resources to get them up and running.

A legitimate alternative is to turn to a managed security services provider whose technical savvy should not only help you properly assess and configure your security products for optimal performance, but also help you detect and respond to threats - in some cases by having access to its own security operations centers, which are staffed around the clock with experts who have in-depth knowledge and experience working with complex network environments for highly distributed environments.


Obviously if you're doing neither of these things - 1) advocating for software designers and better security during the development lifecycle and 2) opting for skills over any additional "feature creep" within your network - you should start as soon as possible, if for no other reason than to share in the good news that smarter security is winnable.

Dan Kaplan is manager of online content at Trustwave and a former IT security reporter and editor.

Latest Trustwave Blogs

Defending Healthcare Databases: Strategies to Safeguard Critical Information

The healthcare sector continues to be a primary target for threat actors, with 2023 seeing a record number of data breaches and compromised records. While successful attacks are inevitable, it’s...

Read More

Trustwave SpiderLabs: Ransomware Gangs Dominate 2024 Education Threat Landscape

The security teams manning the defenses at the higher education and primary school system levels often find themselves being tested by threat actors taking advantage of the sector's inherent cyber...

Read More

LockBit Takedown: Law Enforcement Disrupts Operations, but Ransomware Threats Likely to Persist

The news that US, UK, and other international law enforcement agencies disrupted LockBit is welcome, as stopping any threat group activity is always a positive. The unfortunate aspect is this blow...

Read More