e live in a world that is networked together, where companies rely on networked systems and their data is stored in the cloud. The year 2018 will bring more connectivity, digital transformation initiatives, and data to companies, along with a number of new cybersecurity threats and landscape changes making cybersecurity one of the most crucial issues that need to be addressed in the present scenario.
Let’s just take a quick look to what we witnessed in 2017. This year incidents like WannaCry and Netya illustrate, our adversaries are becoming more and more creative in how they architect their attacks. But in the end, it’s more about who has not been breached vs who is the latest.
The world of cybersecurity witnessed changes frequently with security experts trying to gain know-how about what is happening and how they can mitigate it. The universal fact is that we have to accept that we can’t protect everything, but we can find a way to control what matters the most.
2018 will be a year where security will become part of the fabric in how we work. Below are my cybersecurity predictions that I believe will continue to impact the technology industry in 2018.
n Shift in focus from protection to prevention
An ounce of prevention is worth a pound of cure, so the saying goes. Historically IT organisations focused heavily on perimeter network security to protect their networks from cyberattacks. Protection at the perimeter edge works well for data moving towards the protected assets. However, recent breaches have shown that perimeter security alone isn’t sufficient to combat advanced persistent threats. By focusing on more proactive and offensive approaches, rather than strictly defensive, that help detect and respond to possible threats rather than react, it is possible to stop threats before they expose the organisation to risk. Your security setup will need to focus on detection, response, and remediation. That’s where the cybersecurity fight is today. In the future it will most likely move to prediction of what’s coming before anything happens.
n More IoT attacks will be motivated by financial gain than chaos
It’s only a matter of time before every house and company is connected through the Internet of Things (IoT). We predict that as many as 1 million new connections per hour will be added to the internet by 2020 expanding the attack surface and making IoT vulnerabilities more critical and more dangerous. IoT will move from being seen as a massive security risk in the enterprise, to a critical part of an Enterprise’s security posture. To meet the security challenges of the IoT — an attack surface that is both growing rapidly and becoming increasingly difficult to monitor and manage, a proactive and dynamic approach to security, and a layered defence strategy, are the keys to protecting IoT devices from infection and attack — or at least, mitigating the impact when some are inevitably compromised by adversaries.
n Continued growth in the use of ransomware and cyber-extortion tools
Unfortunately, ransomware attacks will almost certainly become more pervasive and varied during 2018. Some attacks will adhere to the brute-force model of infect, lock and extort, while others will be more sophisticated. Evolutions in ransomware, such as the growth of Ransomware-as-a-Service, will make it easier for criminals, regardless of skill set, to carry out these attacks. It turns out that ransomware generated a lot of cash for criminals, an estimated $1 billion in 2016. In the future, ransomware will not merely target individual users, but also target entire networks.
Given that ransomware can penetrate organisations in multiple ways, reducing the risk of ransomware infections requires a portfolio-based approach, rather than a single product. Often, victims of ransomware choose to pay the ransom, because they have no other means by which to restore their systems and data. Don’t pay the ransom. Create strong plans for system and data recovery as soon as possible, including backing up all systems daily.
n Many enterprises will give priority to cloud security
More applications and servers are moving to the cloud to take advantage of cost savings, scalability, and accessibility. As a result of this, cloud environments will be a potential target of security breaches. Cloud is a journey and cloud security must be a driver, not an afterthought.
[Scott Manson is Cybersecurity Lead — Middle East and Africa, Cisco]