Emerging Threat Landscape Clause Samples

Emerging Threat Landscape. The table below summarises the main future trends identified. Ransomware The emergence of open source ransomware programmes on GitHub and hacking forums is expected to further spur the growth of these attacks in 2017. Alternatively, cyber criminals without the skills to create their own malware can 52 ▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇▇▇▇▇.▇▇▇/cyber-attacks-in-the-healthcare-sector/. Concerns were also confirmed at recent healthcare events, e.g. UK eHealth Week. 53 ▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇▇▇▇▇▇.▇▇.▇▇/2017/03/13/thousands_of_nhs_staff_details_lost_in_breach_of_it_contr actors_server/. 54 ▇▇▇▇▇://▇▇▇.▇▇▇▇▇.▇▇▇/2017/03/medical-devices-next-security-nightmare/, February 2017. outsource it with the ransomware as a service (RaaS) model, which provides automatically generated ransomware executables. The emergence of self-propagating ransomware with the same kind of characteristics traditionally found in network worms, such as Conficker is also on the list of predictions. This will result in a breed of ransomware designed to produce endless duplicates of itself, spreading the infection across an entire network. All businesses will be vulnerable as attack targets, whether they are a Fortune 500 company, a family-run business or a utility company, and will therefore need much more focused approaches to cyber risk management55. Internet’s Building Blocks Some of the most impactful attacks are expected to be directed at the building blocks on which the Internet runs, rather than innovative technology. In use of IoT devices to launch the Mirai botnet was innovative but its impact came from targeting part of the Internet’s critical infrastructure. Domain Name Servers providers translate human readable domain names into internet addresses, acting as the phonebook of the Internet; this helps users find the websites they are looking for. There are many critical internet services, other than DNS, including website hosting, email, database servers, authentication and authorisation. Whilst they are not all vulnerable to the same attack methodology as DNS, a successful attack on one could have an equally far reaching impact. Rather than attacking a single website an attacker could target an upstream provider critical to the functioning of an organisation, such as DNS. An attack on upstream services would affect many organisations, serving to obfuscate the actual target or other simultaneous attacks. Attacks on industrial connected devices will continue to increase As more industrial systems become ...