Breaches Happen: Be Prepared

by Stephen Northcutt
Sept. 1, 2017 0 comments SANS Institute Encryption & Authentication risk management

Computer viruses are yesterday’s news; automated attacks that morph rapidly, concealing themselves through encryption and deceptive packaging, are the new hotness. Such camouflage makes purely signature-based detection obsolete and gives malware an advantage. At the same time, marketing companies, popular websites and governments are collecting vast quantities of web surfing and computer usage data, with new techniques such as “canvas fingerprinting,” a method to distinguish individual users that uses a web browser’s canvas element (a feature of HTML5) to identify individuals for phishing and other information-based attacks without the use of cookies.1