Survey identifies security blind spots as organizations tackle advanced threats

Published: Wednesday, 28 August 2019 09:19

As the quantity and frequency of advanced threats continue to accelerate, a new SANS Institute survey, ‘Effectively Addressing Advanced Threats’, found that a continued lack of visibility and the complexity of managing data across on-premises and cloud infrastructures further complicates the battle against such threats.

The survey, sponsored by IBM Security, highlights key technology challenges and limitations that organizations are self-identifying in their efforts to detect and respond to highly sophisticated cyberattacks. SANS Institute surveyed 366 security and IT professionals across various industries to gain insights into how they deal with advanced threats.

According to the findings, 48 percent of respondents said they lack visibility into data that is processed within their organizations. Access to sensitive data by insecure, unmanaged devices or individuals as well as a lack of geolocation information of the data were also identified as concerning blind spots to organizations.

When asked about the major barriers to detecting and remediating advanced threats, nearly half of the respondents emphasized an inability to understand or baseline normal user activities, with shortage of funding and resources coming in as a close second. Conversely, account or credential hijacking and privileged user abuse topped the list of major threats and risks realized within respondents’ environments.

The survey also looked at the challenges that respondents face within their cloud infrastructures, and found that a lack of visibility remains at the core of their limitations. When it comes to major gaps in the security analytics of their cloud-based infrastructure: