Its hard-to-detect online attacks: Stonesoft
By siliconindia
|
Tuesday, 19 October 2010, 19:09 IST
Bangalore: Finnish data security vendor, Stonesoft found that event the strongest of which is used by the financial industry, is exposed to a new kind of online attack. It has found a new threat category of advanced evasion techniques (AETs), which simultaneously combine different evasions in several layers of networks, and in the process become invisible for security gear, reports Reuters.
The tools that the hackers often use to penetrate network security are nothing new, AETs package them in new ways to let attackers bypass most firewalls and intrusion detection and prevention systems (IPS) without being detected. This could give them access to data on secure corporate networks and allow them to plant further attacks.
While finding protection from a new attack might sometimes take time, security vendors can usually find it and update defences relatively quickly. The problem with advanced evasion techniques is not just new attacks, but that AETs can create millions of combinations from a few dozen different evasions.
Stonesoft has alerted authorities about its findings, and it thinks others have also likely found similar technologies.