Attack Methods of the Authentication Breach
Limit Privilege; don't give any employee more privileges than the employee absolutely needs to do the job. Most successful authentication security attacks target are known vulnerabilities for which patches already exist; however, continuously monitor your network products. Organizations network produces a continuous stream of audit information: firewalls, intrusion detection systems, routers, servers, printers, etc. Most of it is irrelevant, but some of it contains footprints from successful attacks.
According to Fahmida Y. Rashid, Dark Reading, “Treating our adversaries as random and unpredictable is counterproductive. We may be able to reduce the majority of attacks by focusing on a handful of attack patterns,” (¶ 9). Organizations authentication breach were successful arise from some of the following:
• Vulnerabilities of Social Networking Sites
• Corporate espionage; Risk of information leakage
• Vendors’ and suppliers’ security vulnerabilities
Vulnerabilities; Ssocial networks are designed to facilitate sharing of personal information, and the more data a person discloses, the more valuable he or she is to the service. Unfortunately, these sites have poor track records for security controls. They don't encourage users to select strong passwords, and passwords on these sites never expire. These exact password are commonly used in organizations. Organizations must encourage the use of a unique password for every web site and internal service; passwords shouldn't be able to be guessed simply by looking at the personal information on the user's social network profile.
Corporate espionage is attempting to obtain trade secrets by dishonest means or spying directed toward discovering the secrets of a rival manufacturer or other industrial company. Rival companies will search through public records in order to make guesses about a company’s actions, often a recently laid off or fired employee may be disgruntled enough to give out private information for a small or large price. However, this particularly practice is not too successful. More high technology corporate espionage involves spyware, programs which give more complete information about a employees’ computer user. These programs can allow one to hack into the private files of another computer, or record the keystrokes of a keyboard user. That is why it is crucial for firms to adopt a defensive posture against this ever-persistent threat.
Vendors’ and suppliers’ supply chain has become targeted and compromised because many complex systems are built differently from the leading organization security structure. Ensuring the integrity of software supply chains is a more difficult problem because of the increased use of offshore development, the relative ease of cloning software. Organizations best practice is to incorporate a system of checks and balances, oversight, accountability, and verification of reliability throughout each aspect of the business supply chain in order to ensure that the supply cannot be compromised. Security best practices must be applied appropriately to reduce the level of risk associated with any vendor or supply because the security supply chain is only as strong as its weakest organization security structure.