The network-security landscape is ever-changing. As technology gets sophisticated, so do the threats. The Internet explosion exposed corporate networks to even teenagers sitting in their garages at home. The hackers of those days were continuously trying to test the security of various systems and networks. Some were simply seeking some sort of intellectual high, while others were fueled by more treacherous motives, such as revenge or stealing for profit.
Hacking these days is very organized and focused. It involves a lot of planning, collaboration, and persistence. Contemporary hackers are no more just the amateur individuals of yesteryears. On one hand, you need to protect your network from hackers working for rich corporations and nation states. On the other, you are up against ideology-driven hacktivism. In addition to these, the biggest challenge for governments and defense establishments is cyber-terrorism.
These days your network is perpetually under one attack or the other. So, it is not enough if you just ensure that all the doors and windows to your network are locked, and the alarm is turned on. In addition to alerting on intrusions, malware, and policy violations, your security system needs to provide you complete visibility into your network. Some of the things that you need to continuously monitor are:
The current users on your network
The devices on your network
The applications being used on your network
The type and quantity of traffic traversing your network
The source and destination of the traffic
This section discusses some of the current threats to your network and how you can use Trellix IPS to mitigate those threats.