Infosecurity White Papers

  1. Ten Must-Have Features of a Modern SIEM

    This white paper presents ten must-have features of an innovative and effective SIEM capable of handling evolving threats.

  2. Five Reasons Why You Need a Cloud-Native Web Application Firewall

    The best way to protect your business from harmful incoming web traffic is to block it with a powerful web application firewall (WAF).

  3. Red Teaming: How to Identify Gaps in Your Security Strategy by Thinking Like the Enemy

    This guide explains what red teaming is, how to get the most from it and the business benefits it brings.

  4. Best Practices for GDPR & CCPA Compliance

    AccessData has worked with Osterman Research to conduct an in-depth survey of North American organizations with regard to their plans for GDPR and CCPA compliance. This whitepaper provides an overview of the survey findings.

  5. Ponemon Report: Trends in the Cost of Web Application & Denial of Service Attacks

    The purpose of this research is to understand changes in the cost and consequences of web application and denial of service attacks.

  6. PAM - A Key Element in ISO 27001 Compliance

    This white paper looks at sections of the standard that apply directly and indirectly to PAM, using the example of the WALLIX Bastion to highlight how a PAM solution can help companies achieve the ISO 27001 certification.

  7. Anatomy of a Cyber-Attack

    How does an organization “protect” themselves from a breach? In this whitepaper, learn how to determine network health before proceeding with advisory engagements.

  8. Navigating a Security Wasteland

    In this whitepaper, Cybrary discusses how “managing your enterprise security organization like a small business” is pivotal when it comes to application & cloud security.

  9. Security Threats: Is That a Trojan in Your Pocket?

    The popularity, portability and precarious security mobile devices an attractive target for cybercriminals. It is time to get serious about mobile security. Start with a corporate mobility policy to define your mobile security strategy, and deploy an EMM solution to make it happen.

  10. C-Suite IT Execs Call for Federal Privacy Rules

    Companies in the US are meeting new security and privacy regulations head on and they’re ready for more. When it arrives, though, they’d like more clarity.

  11. The Gamer Theory of Threat Hunting

    Gamify your threat hunting experience! Many organizations are shifting to iterative threat hunting exercises based around intelligence operations. This paper outlines gamified threat hunting levels, and key concepts ‘hunt gamers’ should focus on.

  12. Deteque Threat Report 2018

    Deteque is a division of Spamhaus and integrated with a global network of service providers and a community of researchers who have been dedicated to combating DNS abuse since 2008. Each year the research team at Spamhaus’ Malware Labs publishes its findings and this Report builds on the threat landscape of 2017 with latest figures from 2018 to date.

  13. Building Your Bullet Proof Incident Response Plan

    This whitepaper looks at the current state of corporate cyber security when even the largest organizations are often overwhelmed by the volume of flagged incidents and unknown files that need to be investigated. Meanwhile, businesses’ and customers’ sensitive information is at risk of being compromised by the needle in the haystack: the major threat hiding in plain sight among false positives.

  14. Stopping Data Exfiltration and Malware Spread Through DNS

    Recent research from IDC predicts worldwide spending on security-related hardware, software, and services will reach $119.9 billion in 2021.

  15. A Fresh Look at Security Analytics

    Most enterprises are at least discussing security analytics. But how are they actually deploying these tools? And with what levels of automation and orchestration?

  16. Investing in Cyber Insurance: the What, the Why and the How

    Just as the expectations that a business will experience a cyber incident are increasing, so too are the costs of recovering from those breaches. As of 2018, the global average cost of a data breach is $3.6 million, or about $141 per stolen data record.

  17. A Practical Guide To Outsourcing Your Service Desk

    For businesses new to outsourcing their services, outsourcing the service desk functionality can be an easy first step.

  18. Building Your Response Plan: Critical Steps and Best Practices

    These days, businesses of all sizes need to be concerned about cyber attacks. The attack size and frequency have continued to rise. What’s more, the DDoS underground has made it easier for anyone – even without technical skills – to launch a damaging DDoS attack.

  19. SANS 2018 Threat Hunting Survey Results

    Threat hunting is an approach that drives security benefits across the organization. This paper looks at the state of threat hunting and provides approaches organizations can take to amplify their threat hunting programs.

  20. How to Include a Preventative Measure into your Detection & Response

    You’ve fortified your defences. You follow industry best prac¬tices. You’ve purchased the latest and greatest technology. Yet attackers still penetrate your defences. In a world where it’s expected that attackers will successfully breach your perimeter, what chance can you possibly have to protect your business?

What’s hot on Infosecurity Magazine?