Dr Christian Schwartz on information security and what we can learn from incidents like WannaCry.

22. June 2017

Christian, as a consultant in information security, it’s important that you pay close attention to current security incidents. Why’s that?
That’s right. Apart from our consulting services for companies, we closely observe incidents in the IT security environment. We especially follow up on and analyse successful attacks, such as the latest example of WannaCry.
Genau wie von unseren Kollegen im Bereich Security Analysis & Pentest im Übrigen. Dort allerdings mehr aus technischer Sicht.
Why do those analyses play such an important role for your consultation services?
Our department focuses on the holistic integration of IT security into corporate processes. Apart from technology, processes and people play a crucial role in that context. Large scale attacks, such as WannaCry, usually target multiple of those areas. Our work is about figuring out how such an attack could have been prevented so we can protect our clients from similar attacks in the future. For this purpose we reconstruct how the attack could be carried out successfully.
What conclusions could you draw from this case?
The attack mainly showed us how vulnerable IT systems are and that in some companies IT security unfortunately still only plays a minor role. After all, the infection with the malicious code did not necessarily have to assume the proportions it did. That’s why my brief article on “WannaCry” is subtitled “A Wake-Up Call for Information Security.”
Read the full article.

Also interesting:

usd AG Partner to PCI SSC GEAR 2022-2024

usd AG Partner to PCI SSC GEAR 2022-2024

The PCI Security Standards Council (PCI SSC) has reappointed usd AG to the Global Executive Assessor Roundtable (GEAR). Since 2018, the GEAR has enabled a direct exchange between PCI assessors and the PCI Security Standards Council (PCI SSC). Every two years, leading...

Security Advisory for CleverReach

Security Advisory for CleverReach

The analysts at usd HeroLab examined CleverReach as part of their security analyses. This revealed a vulnerability in the  Authentication Bypass Using an Alternate Path or Channel, which was reported to the manufacturer as part of the Responsible Disclosure...

Security Advisories for CA Harvest

Security Advisories for CA Harvest

The analysts at usd HeroLab examined the CA Harvest Software Change Manager as part of their security analyses. This revealed a vulnerability in the CSV export functionality, which was reported to the manufacturer as part of the Responsible Disclosure Policy. The...

Categories

Categories