Cymbel

Mitigating Modern Malware Risks Using a Zero Trust Model

Due to changes in technologies and the motives and methods of attackers, traditional Prevention, Detection, and Response controls no longer effectively mitigate the risks of confidential data compromises.

Thousands of applications bypass stateful inspection firewalls. Tech savvy users go through proxy servers undetected. Anti-virus products detect only a fraction of the malware used to compromise devices.

End users are baited using phishing and other social  engineering techniques to click on links which take them to malware-laden web pages. You can be compromised by simply opening a malicious email! Corporate web applications are relentlessly attacked and compromised despite improvements in Secure Development Life Cycle.

This means you can no longer "trust" any network, device, or user. This is Zero Trust.

Cymbel has adapted to the Zero Trust Model with a set of  practical principles to mitigate the risks of modern malware.

          1. Balance budget across Prevention, Detection, Response
Prevention
          2. Re-establish a network-based Positive Control Model 
          3. Establish a host-based Positive Control Model 
          4. Create a Logical Perimeter which includes remote and mobile workers
          5. Safely enable allowed applications
          6. Use a specialized anti-phishing email protection service
Detection
          7. Use behavioral analysis to detect compromised systems and malicious insiders
          8. Leverage a threat intelligence service
Response
          9. Use log analysis to understand the events leading to a device compromise
        10. Use Full Packet Capture to shorten incident analysis time
        11. Use a distributed forensics control to scan thousands of hosts in hours

For more information see Cymbel's Zero Trust Principles and Cymbel's Solutions.