The Internal Threat Encyclopedia lists and dates dozens of potential threats and ranks them on a five-part scale, ranging from ‘extremely critical’ to ‘not critical’. The newest threats – such as Timbuktu, TightVNC and PC-Duo – are included and described with information on manufacturer, systems affected, relevant links and date added.
In addition, the site contains monthly charts showing how internal network risk trends have changed in the past year, an internal security Tips and Tricks section, articles on recent internal security incidents, an overview of internal threats and a wide array of other resources.
When and why external threats are not enough
“While companies like McAfee and Symantec have online databases of external security threats, to date no-one has developed an encyclopedia of internal threats. We wanted to be the first to do it,” said Alan Komet, vice-president of Promisec. “Internal threats are rising at an alarming rate, and are the biggest risk to a company’s security. Our Black List database has detection for over 1,000 programs today, and continues to expand on a monthly basis. We hope our encyclopedia will raise awareness of the growing problem and educate the market so that companies can take proactive steps to prevent internal security disasters which can destroy them in an instant.”
The Internal Threat Encyclopedia is part of the Promisec Risk Center, a resource for real-time statistics highlighting the most significant internal network threats as well as those that are newly discovered. The Risk Center identifies existing levels of insider threats, unveils emerging network security risks and provides strategies to protect against their presence.
To gain immediate access to the Promisec Risk Center for Internal Network Threats, visit the link on the right hand panel of this page and register to receive instant updates on emerging internal network threats as they are found by Promisec’s researchers. A separate link (also listed) takes you direct to the encyclopedia.
Clean from internal threats?
Promisec conducts extensive research on the latest internal network security risks, writes research papers, and reports on recent trends. In its latest audit of more than 100,000 PCs and servers across a wide range of industries, the company found that not even one organisation was completely clean from internal threats, and the minimum number of threats found was three.
In addition, the trend showed an alarming rise in internal security threats in just the past year alone, with some threats increasing by more than 200-fold from 2007 to 2008. The research can be viewed at the Promisec Risk Center.
Visit the Promisec web site to learn how to improve enterprise endpoint security (see the link on the right hand side of this page)
