2 ms·
What is the reasonable defense against this? Intercepting firewalls like bluecoat are notoriously overbroad (and arguably open up MITM attacks on https). Des
by ergothus 8y ago
What is the reasonable defense against this?
Intercepting firewalls like bluecoat are notoriously overbroad (and arguably open up MITM attacks on https). Desktop/laptop malware scanners notoriously use up CPU at murphaicly inconvenient moments.
Educating users is great, but attacks are getting sophisticated and it only takes one mistake.
Absent great intrusion detection, which I assume is not trivial, one that mistake is made, you have big problems. What is a realistic approach?
- totony 8y agohttps://en.wikipedia.org/wiki/Principle_of_least_privilege https://en.wikipedia.org/wiki/Principle_of_least_privilege - Using a good OS (e.g. Linux w/ SELinux) - Not giving admin access - Block non-authorized peripherals - Lock down network You don't have to educate users if they can't make mistakes.
- jaxtellerSoA 8y ago> Desktop/laptop malware scanners notoriously use up CPU at murphaicly inconvenient moments. This isn't true at all. Sure for many "traditional" AV solutions it might be. But there is a pretty strong growing trend to use "next-gen" endpoint/AV protection that is extremely lightweight, so much so that users won't see any impact at all. https://www.sentinelone.com/ https://www.sentinelone.com/ https://www.crowdstrike.com/ https://www.crowdstrike.com/ https://www.carbonblack.com/ https://www.carbonblack.com/