Why effective testing is essential to keep pace with advancing threats. Issue 2 (February 2021)

• Record Type: Journal Article
• Authors: Williams, Ed
• Is Part Of: Computer fraud & security. Issue 2(2021)
• Page Start: 12
• Page End: 15
• Publication Date: 2021-02
• Subjects: Computer crimes -- Periodicals; Computers -- Access control -- Periodicals; 364.168
• DOI: 10.1016/S1361-3723(21)00019-1
• Languages: English
• ISSNs: 1361-3723

Abstract

Abstract : It is well understood that there is no single best way to keep an organisation secure against cyberthreats. Every enterprise has its own unique configuration of network infrastructure, hardware and software applications, as well as its own risk profile and security priorities. With so many variables, the combinations are close to infinite – and so is the potential for security vulnerabilities. Outdated or misconfigured systems and applications can create easy attack paths for any threat actors who discover them – and this is increasingly easy for them to do thanks to the use of automated tools. Every enterprise has its unique network infrastructure, hardware and software applications. With so many variables, the potential for security vulnerabilities is high. Security testing is the key to discovering and closing these vulnerabilities before they are exploited. However, businesses often fail to utilise testing effectively. Using automated tools to identify the bulk of vulnerabilities and deeper human-led testing to find more advanced threats, organisations can keep pace with the advancing capabilities of adversaries and close off vulnerabilities before they can be exploited, says Ed Williams, SpiderLabs at Trustwave.