{"id":2361,"date":"2018-12-12T10:53:05","date_gmt":"2018-12-12T14:53:05","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=2361"},"modified":"2018-12-20T13:23:18","modified_gmt":"2018-12-20T17:23:18","slug":"barracuda-networks-public-cloud-security-changes-2019-predictions","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/barracuda-networks-public-cloud-security-changes-2019-predictions\/","title":{"rendered":"Barracuda Networks: Public Cloud Security Changes and Other 2019 Predictions"},"content":{"rendered":"

\"Barracuda<\/p>\n

‘Tis\u00a0the season for 2019 cybersecurity predictions. In SIEM, digital transformation, public cloud security, the cybersecurity staffing, and the interrelation of identity and security analytics dominated the 2018 conversation.<\/span><\/p>\n

What will 2019 hold for these essential issues in SIEM? To get some perspectives, we spoke with experts from security<\/a> solution provider Barracuda Networks<\/a>.<\/span><\/p>\n

\t\t\t

<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n

Here are their key predictions from Barracuda Networks<\/a>, edited slightly for readability: <\/span><\/p>\n

In 2019, public cloud security will become more automated and attackers will get stealthier<\/b><\/h4>\n

Tim Jefferson, VP, Public Cloud, Barracuda Networks<\/span><\/i><\/p>\n

The public cloud market is maturing, and we expect to see a huge appetite for cloud security<\/a> in 2019. Businesses aren\u2019t just experimenting with the public cloud anymore, and now that more customers have critical infrastructure and workloads on platforms like AWS and Microsoft Azure, they\u2019re realizing they need purpose-built cloud security solutions to help them protect workloads moving to these platforms.<\/span><\/p>\n

As workload migration accelerates to the public cloud, security risk professionals will need to get more actively involved in their DevOps team\u2019s processes so they can automate the application of governance and compliance controls. It\u2019s not about dictating what tools the team uses, but verifying that controls are being met and helping the builders build securely. <\/span><\/p>\n

After all, configuration errors can be easy to make as people try to use new cloud services they might not fully understand. That\u2019s why I expect to see more teams embracing automation to continuously monitor cloud security and remediate problems automatically.<\/span><\/p>\n

Providing these types of automated cloud security controls will be more important than ever in the year ahead because cybercriminals are getting better at finding compromised credentials or access keys and exploiting them. <\/span><\/p>\n

In fact,<\/span> Gartner predicts<\/span><\/a> that by 2020, 80 percent of cloud breaches will be due to customer misconfiguration, mismanaged credentials, or insider theft\u2014not cloud provider vulnerabilities. Cybercriminals will also get more clever at using compromised accounts in ways that will be difficult to detect. <\/span><\/p>\n

Instead of using a massive amount of new resources for cryptomining, which causes a noticeable spike in usage, they\u2019re starting to use already-approved resources and stealing some cycles from those instead, which is easier to hide. I expect to see more attacks like that in 2019.<\/span><\/p>\n

2019 will be the tipping point for the cyber security skills gap<\/b><\/h4>\n

Michael Flouton, VP, Product Ops and Security Strategy, Barracuda Networks<\/span><\/i><\/p>\n

While it\u2019s long been known that the cybersecurity industry has a significant skills gap problem, what\u2019s lesser known is that this gap is also increasing. In October 2018,<\/span> (ISC) revealed<\/span><\/a> that the global cyber skills gap now stands at three million, with 63% of businesses lacking the cyber skills to actually keep threats at bay.<\/span><\/p>\n

The balance between the resources, skills, and expertise of the \u201cgood guys\u201d who are fighting attacks and the \u201cbad guys\u201d who are launching the attacks in the first place is a very delicate one.<\/span><\/p>\n

In 2019, get ready for a skills gap tipping point. As cyber attackers\u2019 tactics become ever more sophisticated and, more importantly, harder to spot, they demand ever more hours of the good guys\u2019 time to identify and stop.<\/span><\/p>\n

A recent example of a new style attack that takes way more work to detect, investigate, and clean up are the account takeover incidents that we\u2019ve observed. They involve attackers stealing the email credentials of employees and using them to send emails from the user’s real account. Because the attackers cover their tracks\u2014for example by deleting sent emails\u2014often the only way people know they\u2019ve been breached is when they get mysterious out-of-office responses.<\/span><\/p>\n

Added to this, many organizations are finding it harder and harder to recruit and retain cyber specialists to help them keep the bad guys at bay. Which means they\u2019re relying on fewer people with the skills and expertise needed to protect their organization. These decreasing human resources will come to a head in 2019, where I predict that organizations will stop being able to keep up with investigating these \u201cstealth<\/a>\u201d cyber attacks.<\/span><\/p>\n

Account takeovers and email threats will get up close and personal in 2019<\/b><\/h4>\n

Asaf Cidon, VP of Email Security, Barracuda Networks<\/span><\/i><\/p>\n

Account takeover is one of the biggest threat vectors in the cybersecurity industry today. More and more organizations are getting hit, and the attacks are getting more and more targeted. Attackers are moving away from the relatively standard phishing email<\/a>, as they are finding that strategically targeting business executive accounts is much more lucrative.<\/span><\/p>\n

In 2019, the level of personalization in these attacks will reach new heights. Specific tactics that are beginning to gain traction include:<\/span><\/p>\n