itb-nz logo
Story image

Proofpoint launches feature to identify most targeted users

13 Dec 2018

Cybersecurity and compliance company Proofpoint has announced the availability of Proofpoint Targeted Attack Protection’s (TAP) Attack Index capability, a solution that provides security teams with a people-centric view into their organisation’s security posture.

With Proofpoint’s Attack Index, security administrators gain the unique ability to identify the very attacked people (VAPs) within their company and select policies and controls to better secure those users.

“One of the largest security industry misconceptions is that most cyber attacks target top executives and management,” says Proofpoint cybersecurity strategy senior vice president Ryan Kalember.

“While these VIPs do receive attention from cybercriminals, our research and new Attack Index clearly demonstrate that very attacked people are often employees located deeper within an organisation with access to systems and processes that attackers can target to extract value.

“We’ve developed a people-centric Attack Index to help our customers identify their most targeted people, understand the spectrum of attacks targeting each employee, and create a tailored security approach to protect each individual user.”

When observing an organisation’s attack profile, security teams must balance the number of incoming threats with each threat’s severity.

Users with the highest threat volume do not always represent the users that pose the most risk. Likewise, the lowest threat volume does not always equal the lowest risk as highly targeted threats are often more dangerous than widespread threat campaigns.

Proofpoint’s Attack Index is a weighted composite score of all threats sent to an individual in an organisation.

It scores threats on a scale of 0-1,000 based on four key factors:

  • Cybercriminal sophistication
  • Spread and focus of attack targeting
  • Attack type
  • Overall attack volume 

Organisations can now investigate the threats targeting their organisation to better understand the risks users face based on their role, duties, and access.

For example, roles with high levels of access are often targeted with credential theft while roles that manage sensitive data are frequently targeted with trojans and keyloggers.

With this visibility and insight, security teams can tailor their security policies, solutions, and training to help mitigate their VAP risk and prioritise where and how to apply controls to protect those most at risk.

Proofpoint’s Attack Index also ranks individuals, groups and the overall organisation, to provide security teams with the documentation necessary to discuss security and risk with their stakeholders.

Its threat severity scoring system highlights the most severe threats targeting the organisation and the most targeted users.

With a people-centric lens, security teams can clearly indicate the need for enhanced security controls and security awareness training by identifying their most susceptible users that would directly benefit from increased protection.

Story image
Spark boosts rural wireless broadband capacity to meet COVID-19 demand
Spark has boosted its rural wireless broadband capacity in a bid to meet demand following the COVID-19 lockdown.More
Story image
Micro Focus launches solutions designed to aid modernisation
“Through new insight-driven tools, application program interface (API) development capabilities and robust deployment options, these Micro Focus solutions give developers new ways to work with complex COBOL and mainframe systems while delivering on a cloud strategy.”More
Story image
Closing the cloud skills gap: How certification can maximise cloud investments & keep staff happy
You probably wouldn’t buy an expensive computer program if you didn’t know how to use it. Yet so many organisations invest in costly cloud programs, without having the necessary skills and training on board to make the most of the program.More
Link image
Red Hat Ansible enables next generation network operations
To understand the power of a Red Hat and its IT automation ecosystem, get in touch with OSS Group.More
Story image
Why DX is not complete without a transformed security architecture
Secure Access Services Edge (SASE) is the process by which core WAN edge capabilities like SD-WAN, routing, and WAN optimisation at branch locations are integrated with cloud-based security services like secure web gateways, firewall-as-a-service, cloud access security brokers, and more.More
Story image
AIOps and the evolution of IT infrastructure monitoring
As companies adapt to ongoing digital transformation, they will soon realise that they need more than just a dedicated IT team to view and manage the company’s IT infrastructure. That’s where AIOps comes in.More