Comments on reports that a hacking group in China is one of the first to have targeted “air-gapped” networks that are not directly connected to the Internet, Franklyn Jones, CMO of Spikes Security (www.spikes.com), explained:
Franklyn Jones, CMO of Spikes Security (www.spikes.com)
“Whenever you run two separate networks in an effort to be more secure, it’sstill impossible to control human behavior. In this case, humans manually moved data from an insecure computer to a secure computer via a flash drive – and transferred malware in the process. Ideally, one system should provide the security and web content isolation necessary to prevent malware from entering the network in the first place.”
FireEye released a 69-page technical report on Sunday on the group, which it calls APT (Advanced Persistent Threat) 30, which targeted organizations in southeast Asia and India.
Spikes Security, founded by former PayPal/Tesla/SpaceX tech lead Branden Spikes, specializes in this security area – its AirGap browser isolation system prevents all browser-borne malware from entering a network.
Duo Security RSAC 2015 – Register to win a free Quadcopter
About Spikes Security
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.