{"data":{"news":{"items":[{"title":"Mr.","date":"2022-12-21 15:46:07","id":4335,"author":"1","blurb":"","blurb_image_uid":"https://dxfpracgmlczp.cloudfront.net/2022/12/1672122094994_image 3.png","blurb_expanded_image_uid":null,"article":"\n\t\n\n\n

SINGAPORE, December 21, 2022 – ESET, a global leader in digital security, announces Champion placement in the Canalys Global Security Leadership Matrix 2022. Canalys is a leading global technology market analyst firm providing an overall assessment of the leading cybersecurity vendors with established channel programs. ESET’s sustained revenue growth, including a 30% increase in the MSP segment, combined with its quality of account management and overall ease of doing business, has maintained high ratings among its partners.

\n\n

ESET’s Partner Program focuses on establishing long-term engagement, which helped maintain high feedback ratings from its partners. ESET’s network now consists of more than 10,000 MSPs and 24,000 resellers, and MSPs remain a core part of ESET’s strategy. The company has strengthened its proposition by enabling MSPs to offer XDR solutions, including ESET Inspect and ESET Inspect Cloud, previously only available to enterprise accounts.

\n\n

For more than 30 years, ESET has continued to invest heavily in multiple layers of proprietary technology that prevent breaches of its customers’ endpoints and systems by both known and never-before-seen threats. \"Our objective is to provide the digital security that keeps an organization’s systems working smoothly and securely,\" said Ignacio Sbampato, the chief business officer at ESET. \"We believe that we offer our Partners access to the most densely multi-layered technology there is, allowing them to focus on what matters most to them – their own business’ progress.\"

\n\n

As a privately owned, tech-focused company, ESET has always taken a science-based, security-first approach, with early adoption of machine learning and cloud computing power to develop its global threat intelligence systems. The company has continuously been named a champion, a top player, and a leader in the industry for its business solutions.

\n\n\n","article_image_uid":"https://dxfpracgmlczp.cloudfront.net/2022/12/1672122111028_image 3.png","article_expanded_image_uid":null,"article_image_caption":"ESET logo","publications":"5","tags":"Cybersecurity,cyber attacks,multi-layered defence technology,ESET","category":"Products & Technologies"},{"title":"Mr.","date":"2020-04-30 16:32:04","id":2195,"author":"1","blurb":"","blurb_image_uid":"https://dxfpracgmlczp.cloudfront.net/2020/04/1588235852500_blue-and-yellow-graph-on-stock-market-monitor-159888.jpg","blurb_expanded_image_uid":null,"article":"\n\t\n\n\n

In what has been referred to as an “unprecedented anomaly”, cyber criminals are increasingly targeting the financial services sector during the COVID-19 coronavirus pandemic, with attacks on banks and other financial institutions spiking by 38% between February and March to account for 52% of all attacks observed by VMware’s Carbon Black Cloud.

\n\n

The sudden shift observed by Carbon Black threat researchers Patrick Upatham and Jim Treinen was also reflected by equally sharp declines in other verticals. Retail, for example, accounted for 31% of observed threats in February, but this dropped to 1.6% in March, suggesting that the shutdown of vast swathes of the industry has caused cyber criminals to turn their attention elsewhere.

\n\n

Equally, healthcare, which usually falls in the top three verticals for targeting by malicious actors, ended March as the seventh most frequently attacked industry.

\n\n

“As the COVID-19 battle continues globally, it is clear attackers will continue to target vulnerable populations and organisations,” wrote Upatham and Treinen in a blog detailing their findings.

\n\n

“As the VMware Carbon Black Threat Analysis Unit (TAU) has found, attackers have been using COVID-19 to launch phishing attacks, fake apps/maps, trojans, backdoors, cryptominers, botnets and ransomware. Increased vigilance and visibility into enterprise-wide endpoint activity are more paramount than ever.”

\n\n

Upatham and Treinen revealed that of the 52% of attacks targeting the financial services sector in March 2020, 70.9% of those came from the Kryptik trojan, a particularly nefarious and persistent threat, which targets victims through malicious installers and them tries to acquire admin rights to make registry modifications to let it execute each time a Windows machine boots.

\n\n

Without the appropriate visibility tools, it can be very hard to spot because it tends to delete its executable file after running to obfuscate itself.

\n\n

While overall volumes of cyber crime have remained relatively constant as the pandemic has developed, Carbon Black’s analysts said they had seen a clear correlation between notable coronavirus-related news and cyber attacks.

\n\n

“Cyber criminals often exploit fear and uncertainty during major world events by launching cyber attacks,” they said. “These attacks are often performed with social engineering campaigns leveraging malicious emails that lure victims to install malware that steals financial data and other valuable personal information or, in some cases, turns a user’s computer into a cryptomining zombie.”

\n\n

For example, Carbon Black observed a 48% spike in attacks over baseline levels on 30 January, the day the US announced its first case of COVID-19; a 64% spike on 29 February, when multiple US states declared public emergencies; a 28% spike on 8 March, when Italy went into full lockdown; and a 22% spike on 11 March, when the World Health Organization declared COVID-19 a pandemic.

\n\n

Upatham and Treinen said their findings highlighted the importance of incorporating threat data analytics services into organisational cyber security postures to help security teams keep pace and stay ahead of attackers by observing wider trends in behaviour.

\n\n

“Without big data analytics, companies can only focus on finding and stopping known methods and attacks, which leaves them vulnerable to new and emerging attacks,” they said. “Security teams must be able to predict and prevent not only known attacks, but future and unknown ones, too.

\n\n

“Innovative processes like big data analytics take advantage of all available data – unfiltered endpoint data, event streams, attackers’ tactics and techniques, global threat intelligence, and more – to provide the most comprehensive protection possible.”
\n

\n\n\n","article_image_uid":"https://dxfpracgmlczp.cloudfront.net/2020/04/1588235854414_blue-and-yellow-graph-on-stock-market-monitor-159888.jpg","article_expanded_image_uid":null,"article_image_caption":"Article by Alex Scroxton, ComputerWeekly.com","publications":"5","tags":"cyber attacks","category":"Others"},{"title":"Mr.","date":"2020-01-28 09:51:19","id":1985,"author":"1","blurb":"","blurb_image_uid":"https://dxfpracgmlczp.cloudfront.net/2020/01/1580177046825_markus-spiske-3Tf1J8q9bBA-unsplash.jpg","blurb_expanded_image_uid":null,"article":"\n\t\n\n\n

High-street banks are still struggling to offer foreign exchange services, three weeks after Travelex shut down its computer systems after cyber gangsters installed sophisticated malware that encrypted the company’s data.

\n\n

Barclays Bank, HSBC, First Direct, Virgin, Clydesdale and Tesco Bank, which rely on Travelex for foreign exchange services, have confirmed that they are still unable to offer online exchange services or process orders for foreign currency.

\n\n

The news comes after Travelex, which employs 9,000 people in 70 countries, said on Friday that it had begun to restore some IT services to some of its outlets in the UK, as part of a phased programme to restore services worldwide. Travelex websites in 21 countries were out of action yesterday, displaying messages alerting customers to a “virus” attack that had disrupted its foreign exchange services. Only its websites in South Africa and Brazil have not been affected. An assistant in a Travelex outlet confirmed that the bureau was unable to take card payments for foreign currency, had only limited stocks of some currencies, and was unable to request further supplies of currencies that were running short from Travelex.

\n\n

Travelex CEO Tony D’Souza said in a video statement on Friday that the company was beginning to restore some IT services at its UK outlets. “We have started with those capabilities of the business which impact our customers most, forex services and our VAT refunds, which we are bringing back in a phased way,” he said.

\n\n

Staff in retail outlets have been forced to record transactions with pen and paper since cyber attackers used the Sodinokibi ransomware to encrypt sensitive data – including the names of clients and bank account and transaction details – on the company’s computer systems.

\n\n

Travelex said it is introducing systems that will enable staff to record transactions “electronically”, starting with its outlets in the UK, but declined to say whether this meant anything more sophisticated than giving staff access to a spreadsheet or word document. The company faced demands for a $6m ransom to decrypt its computers after hackers infiltrated its computer network in the early hours of New Year’s Day. Travelex has not disclosed whether it has paid the ransom. Travelex left critical security weaknesses in the Pulse Secure virtual private network (VPN) servers it uses to provide staff with remote internet access to its central computers unpatched – leaving the company’s networks vulnerable to attacks by criminals for eight months.

\n\n

D’Souza said Travelex had been working with a world-renowned cyber expert to contain the ransomware attack and was shifting its attention to remediation and recovery. “Our focus is on bringing systems up and running in such a way that we are not just returning to business as usual, but actually creating a stronger business,” he said. “We are enhancing and upgrading some systems along the way.”

\n\n

The company said it is in an “advanced” state of restoring its VAT refund service. The service allows overseas visitors to reclaim VAT on their spending in the UK from Travelex outlets at Heathrow Airport. Staff have been recording transactions using pen and paper, but will be able to record transactions “electronically” once the service is up and running.

\n\n

In Qatar, Travelex posted a notice on its website saying that the company had cleared its systems which were back online, and operating in stores as normal, on 7 January 2020. It said, “Travelex Qatar customer data is not being sent to any central database in the UK”.

\n\n

Travelex has hired Brunswick, which describes itself as strategic advisory firm, to manage its communications about the crisis. Brunswick offers specialist services designed to minimise damage to organisations’ reputation following successful cyber attacks. The company’s website says: “There may be an external perception of responsibility, even culpability by the company. How companies prepare for, respond to and lead after an attack is more important than the attack itself.”

\n\n

Travelex has been criticised for being slow to explain to the public why its services were offline, with websites displaying notices saying they were unavailable because of “planned maintenance” for days after the company was hit.

\n\n

Britain’s high-street banks that rely on Travelex for online foreign currency services said this week that they had been unable to resume foreign exchange services disrupted by the cyber attack. HSBC and First Direct said they were unable to take orders for foreign exchange online, through telephone banking or in branches, but had told customers they would restore travel money services once it is safe to do so.

\n\n

Barclays Bank has apologised to customers and said it was working with Travelex to get its foreign exchange services up and running as quickly as possible. Clydesdale Bank and Halifax displayed notices on their websites saying their travel money services were not available.

\n\n

A spokesperson for Virgin Bank said: “Our focus is on bringing back a safe and secure service for customers as quickly as possible and we remain in regular dialogue with Travelex on achieving this.” A Tesco Bank spokesman said: “We are working very closely with Travelex as they continue with their recovery process. We will update our own customers once we are able to restart ordering for travel money.” Tesco was able to supply currency through 360 bureaus in Tesco supermarkets, operated by Travelex, the spokesman said.

\n\n

UK Finance, a trade body that represents banks and financial services companies, said there may be delays before Travelex gets its services up and running again, and its partner banks restore their services. “Individual firms have their own processes in place to ensure there is no risk to customers,” the spokesperson said. “This could lead to a delay between Travelex restoring its systems and partner firms being able to begin offering related services again.”

\n\n

Travelex’s Abu Dhabi-based parent company, financial services firm Finablr, said on 7 January that it expected the cyber attack on Travelex to have no material financial impact on the group. Finablr said it continues to monitor the situation closely and will update the market as required.

\n\n

D’Souza said last week that Travelex’s bureau outlets had been able to continue offering services manually. “We are a largely transactional business,” he said. “It is a relatively small proportion of our end customers who use the online service – most of them go into a bureau.”

\n\n\n","article_image_uid":"https://dxfpracgmlczp.cloudfront.net/2020/01/1580177049188_markus-spiske-3Tf1J8q9bBA-unsplash.jpg","article_expanded_image_uid":null,"article_image_caption":"","publications":"5","tags":"cyber attacks","category":"Case Studies"},{"title":"Mr.","date":"2019-11-01 10:34:59","id":1834,"author":"1","blurb":"","blurb_image_uid":"https://dxfpracgmlczp.cloudfront.net/2019/11/1572576281033_artificial-intelligence-blur-close-up-546819.jpg","blurb_expanded_image_uid":null,"article":"\n\t\n\n\n

Singapore’s Cyber Security Agency (CSA) has drawn up a masterplan to help secure operational technology (OT) systems used in critical information infrastructure (CII) sectors, including transportation, energy, and water.

\n\n

Speaking at the opening of Singapore International Cyber Week 2019, Singapore’s senior minister and coordinating minister for national security, Teo Chee Hean, said the blueprint is necessary in light of growing cyber threats and cyber crime.

\n\n

“We must address these threats so that we can provide assurance to the public as we press on with our smart nation initiatives,” said Teo. “Threats to OT systems that control our critical physical systems are among the most pressing cyber threats facing us today.”

\n\n

Noting that the unprecedented attack on the Ukrainian power grid in December 2015 had taken down power subsystems, disrupting the power supply to a quarter of a million people, Teo said similar threats are being taken seriously in Singapore.

\n\n

Developed together with industry partners, Teo said the OT cyber security masterplan will guide the development of capabilities to secure systems in an OT environment and mitigate emerging threats to those systems.

\n\n

He added that the masterplan has outlined plans to train more OT cyber security professionals with advanced cyber security skills, and to establish an OT cyber security information sharing and analysis centre with the Global Resilience Federation (GRF).

\n\n

Managed by the Asia-Pacific business unit of GRF, the centre will serve as a threat information sharing hub for companies in energy, water and other CII sectors in Singapore.

\n\n

“Singapore offers a strong economy, a highly educated workforce, a central location, and an environment friendly to trade and investment,” said Mark Orsi, president of GRF. “Because of its status as a commercial hub and geopolitical factors, it is a target for cyber threats.”

\n\n

Using proven tools and technologies, the GRF said member companies, through the centre, will be able to securely exchange details of OT and IT threats and attacks on their organisations, to prevent, mitigate and contain any damage caused by threat actors.

\n\n

Another area that the CSA is looking into is the security of the internet of things (IoT). With the number of IoT devices projected to reach over 64 billion globally by 2025, Teo said such devices will provide a “greatly expanded attack surface” through which malicious cyber activities can be carried out.

\n\n

To better address IoT security threats, the CSA has worked with the Netherlands’ ministry of economic affairs and climate policy on a study to identify IoT security challenges in areas including governance, ecosystem development and standards.

\n\n

The study has made recommendations for action by countries and industries. “For example, the study proposes an evaluation regime for IoT devices to provide consumers with greater transparency of the security of IoT devices already in the market,” said Teo.

\n\n

The government, considered a CII sector in Singapore, is also beefing up the security of its own systems. Building on its bug bounty initiative in 2018, the government is starting a vulnerability disclosure programme that will enable white hat hackers and cyber security researchers to report vulnerabilities they have discovered in any internet-facing government system or application.

\n\n

“Through this programme, we hope to send the signal that we have a shared responsibility together with cyber security defenders locally and internationally to make our cyber space safer and more resilient,” said Teo.

\n\n\n","article_image_uid":"https://dxfpracgmlczp.cloudfront.net/2019/11/1572576278253_artificial-intelligence-blur-close-up-546819.jpg","article_expanded_image_uid":null,"article_image_caption":"By Aaron Tan, TechTarget","publications":"5","tags":"Cybersecurity,cyber attacks","category":"Others"},{"title":"Mr.","date":"2019-10-11 14:48:00","id":1815,"author":"1","blurb":"\n\t\n\n\n

DDoS attacks top the list of primary security concerns for mobile operators now that 5G wireless is advancing as the number of connected devices grows.

\n\n\n","blurb_image_uid":"https://dxfpracgmlczp.cloudfront.net/2019/10/1570776691561_neo-urban-1734495_1920.jpg","blurb_expanded_image_uid":null,"article":"\n\t\n\n\n

The next generation of mobile networking technology -- the highly anticipated 5G -- will improve the speed and responsiveness of wireless networks when deployed, but it is already raising questions for mobile operators, specifically about the implications of 5G security.

\n\n

Commercial 5G is in the early stages of becoming a reality and will continue to grow. In "Opportunities and Challenges in a 5G Connected Economy," a recent report from market research firm Business Performance Innovation Network, in partnership with security vendor A10 Networks, looked at the security concerns 5G brings to the mobile industry.

\n\n

"Security is a top concern for 5G operators, almost equal to increasing capacity and throughput," the report said, reporting that 94% of respondents expect the growth of 5G to increase security and reliability concerns for 5G mobile operators.

\n\n

5G concerns can be looked at in two ways, according to Paul Nicholson, senior director of product marketing at A10 Networks. One concern is the increase of traffic and devices. Whenever technology changes, unexpected issues often arise. There is new technology with 5G, but operators are also moving to a cloud, software-type environment, so they have to secure that, he said, adding security works differently with different components.

\n\n

Despite the high level of concern, the study also revealed most mobile operators still have significant work to do in building the security foundation needed to support 5G.

\n\n

While the majority of survey respondents said they intend to upgrade security tools -- such as firewalls -- to work better with 5G, only 11% have actually implemented the upgrades.

\n\n

A full 79% of survey respondents said their companies are taking 5G requirements into consideration with their current security investments. Another 17% said they are already looking at it.

\n\n

The top security concerns include core network security, with 72% of respondents rating it very important; 60% are concerned with endpoint security and 38% with security management and staffing requirements.

\n\n

Core network security concerns include upgrading different types of firewalls given the increased traffic and scalability of 5G. Only a small percentage of respondents have upgraded their firewalls already, while more than half said they plan to.

\n\n

"The need to upgrade the Gi firewall at the Evolved Packet Core is widely recognized as a critical need for improving 5G security, while it also delivers significant benefits to existing 4G networks," the report said.

\n\n

"[Mobile operators] also need to think about external forces, like volumetric DDoS [distributed denial-of-service] attacks, which are coming in from the outside to try to disrupt service," Nicholson said.

\n\n

The threat of DDoS attacks
\nThe deployment of 5G will open a lot of networking possibilities due to its improvements in speed, capacity and latency. Those advances, however, also open up the possibility for more severe attacks.

\n\n

One of the most significant security concerns of respondents was the possibility of DDoS attacks -- 63% said advances in DDoS protection were important to their future ability to address larger and more sophisticated attacks.

\n\n

"Today, A10 [Networks] knows that there are 23 million DDoS weapons out there poised to attack on demand," Nicholson said, citing the spread of the Mirai botnet that followed DDoS attacks in 2016.

\n\n

"The most recent was a 1.7 terabit attack against GitHub using misconfigured Memcached servers in a reflection attack," he said. "Reflection attacks are still the biggest attacks we see today with multiple types of devices being used."

\n\n

DDoS attacks often target internet-connected devices, so as the number of devices continues to grow and as 5G network deployments increase and connect to more devices, DDoS threats could lead to more attacks -- not only in frequency but in how far and fast the attacks could spread.

\n\n

"When we get to the 5G world, there's going to be a lot more connected devices, and they're going to be capable of generating traffic at a much higher rate," Nicholson said. "With the DDoS weapons, we think this is just the tip of the iceberg."

\n\n\n","article_image_uid":"https://dxfpracgmlczp.cloudfront.net/2019/10/1570776687436_neo-urban-1734495_1920.jpg","article_expanded_image_uid":null,"article_image_caption":"Article by Madelyn Bacon, Associate Site Editor at TechTarget","publications":"5","tags":"Cybersecurity,cyber attacks,DDoS","category":"Others"},{"title":"Mr.","date":"2019-09-20 16:53:41","id":1782,"author":"1","blurb":"\n\t\n\n\n

Having an IoT device in your home makes your entire home network significantly more vulnerable to attack. Your devices may already be part of a botnet without you knowing it.

\n\n\n","blurb_image_uid":"https://dxfpracgmlczp.cloudfront.net/2019/09/1568969651514_Back in the D.D.o.S. How Not to Become a Russian Cyberattack Tool.png","blurb_expanded_image_uid":null,"article":"\n\t\n\n\n

I don’t know with what weapons World War IV will be fought, but World War III will be fought with printers, video decoders, and VoIP phones.

\n\n

An IoT DDOS Attack Is Not Science Fiction

\n\n

Breached IoT devices were used to target computer networks in attacks recently brought to light by Microsoft, which attributed them to Strontium (aka Fancy Bear, aka APT28), a Russian state hacker group linked to the military intelligence agency GRU.

\n\n

In April of this year, Microsoft Threat Intelligence Center security researchers discovered that the aforementioned IoT devices on multiple locations were communicating with servers owned by Strontium.

\n\n

Further analysis showed that the Strontium group compromised the popular IoT devices through default manufacturer passwords and a security vulnerability to which a security patch was not installed. Using the compromised devices, the hackers entered corporate networks, running a network scan to find more compromised devices on the networks and local subnets. Their ultimate objective is unknown to the researchers.

\n\n

Microsoft researchers mentioned the fact that there are more IoT devices than PCs and mobile phones combined. “These simple attacks taking advantage of weak device management are likely to expand as more IoT devices are deployed in corporate environments,” wrote the researchers.

\n\n

IOT Botnets Will Only Increase in Number

\n\n

IoT vulnerabilities are easily utilized to carry out DDoS attacks because IoT devices are inherently unsafe; most of them have default credentials, which users don’t bother changing, or none at all, and updating their firmware is a messy job, unfit for the ordinary end-user.

\n\n

DDoS attacks, short for distributed denial of service, are one of the most feared kinds of cyberattacks out there. In a DDoS attack, a server is flooded with endless requests until it slows down, eventually crashing. The requests may be sent from an army of zombies, resulting in IoT devices being breached and infected without their owners’ knowledge.

\n\n

One of the worst IoT-fueled DDoS attacks shut down large swaths of the web for hours in 2016 by attacking DNS provider Dyn, causing a so-called outage of major internet platforms across North America and Europe.

\n\n

You may be oblivious to your router having taken part in one of those attacks. It still may seem like it was the work of zombies. Recent analysis of thousands of our clients discovered an average of two security problems per ISP router, the router provided by your internet service provider. Common problems include empty WiFi passwords or using the less-than-secure wireless security protocol (WPA) method.

\n\n

That could get you in trouble if someone decides to take action—legal or retaliatory—against attacking machines.

\n\n

Microsoft’s experts have a slew of suggestions on how corporations can make IoT devices more secure.

\n\n

Here are the tips adapted for private users:

\n\n

Change the device’s credentials as soon as you get them; change them routinely as long as the device is in use.
Avoid exposing IoT devices directly to the internet, or create custom access controls to limit exposure.
Use a separate network for IoT devices if possible.
Set up a routine of updating software and firmware, patching all vulnerabilities.
Monitor IoT device activity for abnormal behavior.
Routinely audit any identities and credentials that have authorized access to IoT devices. Are there users that aren’t supposed to be there?
If your devices are deployed or managed by a third-party, like a service company, require a copy of their security practices and ask for a periodic report on the security status and health of the devices.
If there’s anything suspicious going on, disconnect the device from the network, revoke any privileges, and shut it down until it can be inspected by a professional.

\n\n

A connected world can be an easier world to manage, but it gives anyone with the means or desire an easy way to wreak havoc.

\n\n\n","article_image_uid":"https://dxfpracgmlczp.cloudfront.net/2019/09/1568969653857_Back in the D.D.o.S. How Not to Become a Russian Cyberattack Tool.png","article_expanded_image_uid":null,"article_image_caption":"Article by Igor Rabinovich, CEO and founder of Akita | Illustration: © IoT For All","publications":"5","tags":"Cybersecurity,cyber attacks","category":"Others"},{"title":"Mr.","date":"2019-03-29 21:23:54","id":1554,"author":"1","blurb":"

Mitsubishi Electric Corporation has developed a multi-layered defence technology that protects connected vehicles from cyber attacks

\n","blurb_image_uid":"https://dxfpracgmlczp.cloudfront.net/2019/03/1553865943378_blurb.jpg","blurb_expanded_image_uid":null,"article":"

Mitsubishi Electric Corporation has developed a multi-layered defence technology that protects connected vehicles from cyber attacks by strengthening their head unit’s defense capabilities.

\n\n

The technology will enable more secure vehicle systems in vehicles that are equipped for connection to external networks.

\n\n

Vehicles with communication functions provide connections to the internet and/or mobile devices such as smartphones. These vehicles are vulnerable to cyber attacks and even malicious remote control in extreme cases.

\n\n

Mitsubishi Electric’s new multi-layered defence technology prevents cyber attacks through a variety of robust security features, including an intrusion detection system without high-load processing and a secure-boot technology that quickly verifies software integrity during the boot process.

\n\n

It achieves robust security of the vehicle by strengthening the security functions of the automotive head unit, the vehicle’s main link with the internet. The developed technology is adapted from multi-layered defense technology originally developed for critical infrastructure, such as systems for electric power, natural gas, water, chemicals and petroleum, as well as for vehicle systems while requiring only limited machine resources.

\n\n

The technology detects cyber attacks targeting the control of the vehicle and the automotive head unit. Load processing is reduced through a focus on attack activities.

\n\n

The Fast Secure Boot technology enables faster and more secure boots that verify the integrity of the vehicle’s software embedded in the automotive head unit. The technology requires less than 10% of the time for a normal boot-up sequence compared with conventional technology.

\n\n

\n","article_image_uid":"https://dxfpracgmlczp.cloudfront.net/2019/03/1553865947815_main.jpg","article_expanded_image_uid":null,"article_image_caption":"","publications":"5","tags":"cyber attacks,cyber defence technology for cars,connected cars,securing vehicle systems,malicious remote control,multi-layered defence technology,intrusion detection system","category":"Products & Technologies"},{"title":"Mr.","date":"2019-03-29 21:11:47","id":1553,"author":"1","blurb":"

The Internet without passwords: Prediction or pipe dream?

\n","blurb_image_uid":"https://dxfpracgmlczp.cloudfront.net/2019/03/1553865266971_blurb.jpg","blurb_expanded_image_uid":null,"article":"

Nobody likes using passwords. Users find them inconvenient and difficult to remember and companies are increasingly finding them inadequate for their security needs. Despite this, the username-password combination has remained the go-to authentication method for decades.

\n\n

The ability of passwords to keep cybercriminals at bay is poor at best. A Verizon Data Breach Investigations Report revealed that 81% of major data breaches are traced back to a single compromised identity.

\n\n

The resulting cost is tremendous. A Frost and Sullivan study last year, showed that the economic loss in Asia Pacific due to cybersecurity incidents can hit a staggering US$1.745 trillion, more than 7% of the region’s total GDP!

\n\n

The root of the problem lies in the fact that older authentication systems are based on a shared secrets model, where the user’s credentials are known by both sides of the transaction. Typically, users are required to have complex, unique passwords for each account that feature a mix of numbers and letters. However, an average user today has over 90 online accounts, and this makes it impractical to continue using this model.

\n\n

In the meantime, as online services build their consumer base, user credentials (both usernames and passwords) are typically stored in a central data server or location. A single successful breach can allow cybercriminals to gain access to millions of username-password pairs, which are then resold on the Dark Web. This leads to credential stuffing, which has quietly become a major plague to businesses worldwide – with upwards of 80% of attempted e-commerce site log-ins being stuffing attempts.

\n\n

As many consumers reuse passwords, the stuffing success rate ranges around 2%, which is costing businesses dearly (US$5 billion in the United States alone in 2017 according to Shape Security).

\n\n

Hence, the cycle of data breaches continues.

\n\n

The shared secret problem is not new, and the industry has posited several approaches over the years to resolve the issue. The most prevalent is the use of one-time passwords (or OTPs) to provide a second factor of authentication (2FA).

\n\n

Closer to home, Singapore has mandated the use of OTPs for all sensitive e-government transactions since July 2016, and most of essential government e-services now require 2FA. Additionally, banks here are legally obliged to implement 2FA at login.

\n\n

This second layer of authentication, with a one-time password delivered in conjunction with dedicated OTP devices, mobile apps or via SMS, has certainly strengthened security, but at the cost of simplicity and user experience – which is awkward at best, forcing users to juggle devices and/or toggle between apps. And OTPs are still shared secrets (albeit with shorter longevity) that are susceptible to replay attacks via spear-phishing and other means - which leads to account takeovers.

\n\n

Clearly passwords are a failed methodology, and OTPs present significant usability challenges while not adequately mitigating security risks. Just as we do not use Windows 95 or dial-up modems anymore, it is time for us to upgrade our authentication processes.

\n\n

But is an Internet without passwords really possible?

\n\n

Enter the FIDO Alliance

\n\n

Established in 2013, FIDO (Fast Identity Online) Alliance is a non-profit group comprised of technology industry partners working together to establish standards for strong authentication. FIDO is the industry’s answer to the world’s password problem, with leading companies spanning borders and industries collectively focused on creating open standards and an ecosystem of supporting products and programmes that enable simpler and stronger user authentication.

\n\n

Core to the FIDO approach is the introduction of the concept of the FIDO Authenticator, which is a secure part of a device where user authentication credentials are stored as private keys - unique to each service or log-in. These keys are established at point of account registration, at which point the service provider stores a corresponding public key on their server.

\n\n

When the user returns to the site or app, she first verifies herself through a simple gesture such as swiping a finger, entering a PIN, speaking into a microphone, inserting a second–factor device or pressing a button. A challenge/response dialogue takes place behind the scenes that matches the private and public keys that also includes critical metadata about both the authenticator and the website or app that is entirely unique -- thereby eliminating the threat of phishing or account takeover.

\n\n

Keeping the private key resident to the device brings added privacy benefits as the consumer is always in possession of his authentication data. This localised authentication is well aligned with regulations in Europe such as revised Payment Services Directive and General Data Protection Regulation. It also addresses common users’ fears associated with misuse of their biometric credentials -- which are well founded as the theft of biometrics from centralised repositories could cause irreparable harm as it impossible to revoke one’s fingerprint or iris scan.

\n\n

FIDO’s approach also does away with the requirement to store credentials in a centralised repository -- which both changes the threat landscape for would-be hackers and begins to de-risk the authentication process for the service provider by limiting their downstream exposure in the event of a data breach.

\n\n

By utilising public key cryptography techniques, smart devices can be used to provide stronger authentication without burdening users.

\n\n

Passwords still prevail today for restricting access to and protecting data and information. This outdated approach creates risk for consumers and businesses alike, and in doing so threatens the integrity of the connected economy.

\n\n

Fortunately, leading companies from all corners of the world have rallied together in industry bodies such as the FIDO Alliance to create industry-wide solutions that will modernise the user authentication process.

\n\n

FIDO’s approach to authentication allows organisations to better protect data and information while, at the same time, enhance user experience and reducing friction.

\n\n

A world without passwords is finally in the making.

\n\n

\n","article_image_uid":"https://dxfpracgmlczp.cloudfront.net/2019/03/1553865271490_main.jpg","article_expanded_image_uid":null,"article_image_caption":"","publications":"5","tags":"internet password,data breaches,Cybersecurity,credential stuffing,2FA,OTP,cyber attacks,FIDO","category":"Products & Technologies"}],"pageInfo":{"hasNextPage":false,"hasPreviousPage":false,"totalCount":8,"totalPages":0,"currentIndex":0}}}}