Dark Reading's Advanced Threats Tech Center is your gateway to a deeper, more technical level of news and analysis on the newest and most sophisticated cybersecurity threats. Written for security and IT professionals, the Advanced Threats Tech Center is designed to provide in-depth information and perspective on next-generation attacks, exploits, and vulnerabilities, as well as recommendations on how to stop them.

Breaking News

How To Detect And Root Out Sophisticated Malware
New report offers insights on excising that hard-to-detect malware

Malware 'Licensing' Could Stymie Automated Analysis
The use of encryption and digital-rights management techniques by the authors of malicious code could make automated analysis of malware take longer and require human intervention more often

SCADA/Smart-Grid Vendor Adopts Microsoft's Secure Software Development Program
Meanwhile, utilities lag when it comes to cyberattack preparedness and risk management at the executive and board level

More Stories:

• Cyberspies Target Victims Via 'Strategic' Drive-by Website Attacks
• Targeted Attack Infiltrates At Least 20 Companies
• IBM Profiles The New CSO, Security Exec
• Advanced Attacks Call For New Defenses
• Iranian Cyberthreat To U.S. A Growing Concern
• Microsoft: Conficker Worm Remains 'Ongoing' Threat
• Security Teams Need Better Intel, More Offense
• Iran: Oil Industry Hit By Malware Attack

MORE NEWS >>>

By The Numbers

External Threats Dominate Attack Landscape

Only four percent of data breaches in 2011 had an internal threat component - nearly all came from external attackers.

Source: Verizon Data Breach Investigations Report 2011

Blog

How the increased level and sophistication of of targeted attacks since 2008 may impact this year's U.S. Presidential election campaigns

read more >

Advanced Threats Reports

Rooting Out Sophisticated Malware
As malware gets increasingly sophisticated, so, too, must the technology and strategies we use to detect and eradicate it (or, better yet, stop it before it ever makes it onto network systems). There is no one product or product category that can do the job alone. Instead, security professionals must become familiar with--and adept at using--a combination of technologies. Security pros must also become skilled at connecting the dots among sometimes innocuous-seeming events to root out trouble. In this report, we examine the tools, technologies and strategies that can ease some of the burden.

How Did They Get In? A Guide to Tracking Down The Source of an APT
If you think that your organization hasn't been affected by an advanced persistent threat, you probably haven't looked hard enough. Identifying that your organization is under attack is difficult enough; determining the scope of infiltration and damage presents a whole new level of challenge. To effectively protect against APTs, security pros will need to employ an arsenal of tools in a coordinated fashion, as well as develop new understandings of and approaches to system and data exploits. Here's a short and simple guide to this challenge.

Detecting and Defending Against Advanced Persistent Threats
APTs are a growing problem for enterprises big and small. Protecting your organization from these targeted threats requires constant vigilance, ongoing employee training and a concerted effort to align security systems to address every phase of an APT. Companies also need to develop a remediation and response plan if, despite best efforts, defenses are breached.

Other reports from the Advanced Threats Tech Center:

• Smarter, Stealthier, Sneakier Malware
• Secure Software Development Lifecycles: Reducing Risk Throughout the App Dev Process
• Stuxnet Reality Check: Are You Prepared for a Similar Attack?
• Malware War: How Malicious Code Authors Battle to Evade Detection

Advanced Threats Newsfeed

• Lookingglass Announces New Cyber Threat Alert And Warning Capability, CyberHUD
• New Research From Fidelis Security Systems And IANS Shows Heightened Need For Advanced Threat Defense
• McAfee and Intel Announce Critical Infrastructure Protection
• Infrax Systems (IFXY) Launches Smart Grid's SPIDer
• DOD Announces Expansion Of Defense Industrial Base Voluntary Cybersecurity Information Sharing Activities
• Wurldtech Provides Testing Accreditation For Siemens CERT Lab

MORE NEWSFEED >>>