Ural Security System Center has offered a domestic IT technology to detect security threats to internal data of companies. It will also enable to minimize material damage from external attacks, which have increased significantly over the past month, Evgeny Baklushin, Senior Analyst of USSC, reported on Thursday at "BIT Urals 2022" conference held in Yekaterinburg.
"On average, it takes specialists 101 days to detect one cybersecurity incident. What will happen if we detect a cybersecurity incident during the first day? Almost all the damage will be remedied. What are the ways to detect and prevent cybersecurity incidents? <…> We offer a honeypot technology. In the past, this technology mainly scanned the external Internet network," he said.
Baklushin cited data from the National Cybersecurity Incident Response and Coordination Center (NCIRT), according to which the number of cybersecurity incidents from August 27, 2020 to February 23, 2022 (78 weeks) was 589. This number increased almost by four times, up to 2.2 thousand cybersecurity incidents, in one week from February 24 to March 2. The number of cyber attacks decreased up to 1.5 thousand cybersecurity incidents from March 3 to March 30. Among those who were attacked were systems and assets of critical information infrastructure, financial and public sectors, healthcare, and food industry.
According to the senior analyst of the company, it is offered to apply the technology not to monitor the external network, but to monitor the internal one, and it will enable to detect intruder's actions. The technology operates as bait for a hacker, simulating a real vulnerable subsystem. Several operating modes, acquisition of sophisticated information, and low requirements for computing resources are required for this.
The conference "Information Technology Security – BIT Ural 2022" is taking place in Yekaterinburg on April 7. It is an inter-industry event dedicated to information security issues. The conference was initiated and organized by the Association of Chief Information Security Officer (ACISO). It is regional in nature and gathers all specialists of the Ural Federal District on its site.