Intel Security predictions provide insights for 2017 and future of cloud and Internet of Things security; poses six challenges industry must address
NEWS HIGHLIGHTS
- McAfee Labs predicts 14 security developments for 2017
- Identifies 11 cloud threats, three legal hurdles, and 10 vendor actions likely to occur in the next four years
- Makes 21 predictions regarding Internet of Things security threats, legal actions, and vendor responses in next four years
- Identifies six “hard to solve” challenges for the cybersecurity industry to overcome
LONDON, UK. Intel Security today released its McAfee Labs 2017 Threats Predictions Report, which identifies 14 threat trends to watch in 2017, the most critical developments to watch for in cloud security and the Internet of Things (IoT) security, and the six most difficult-to-solve challenges facing the cybersecurity industry.
The report reflects the informed opinions of 31 Intel Security thought leaders. It examines current trends in cybercrime and makes predictions about what the future may hold for organisations working to take advantage of new technologies to both advance their businesses and provide better security protection.
Raj Samani, CTO EMEA at Intel Security commented:
“This time of year there’s a lot of buzz around the latest technology trends of the new year. With everything from machine learning, IoT, drones and the impending ubiquity of the cloud, gradually changing the face of consumer and corporate tech as we know it, hackers are rubbing their hands together at the prospect of new avenues and tools for attack.
“To overcome the designs of cyber criminals, we need to go beyond understanding the threat landscape to changing the defender-attacker dynamic. This means focusing on six key areas: We need to make it harder for hackers to obtain information and more expensive for them to launch an attack. Meanwhile on the corporate side we must improve visibility, better identify exploitation of legitimacy, improve protection for decentralised data, and detect and protect in agentless environments.”
2017 Threats Predictions
The 2017 threats predictions run the gamut, including threats around ransomware, sophisticated hardware and firmware attacks, attacks on “smart home” IoT devices, the use of machine learning to enhance social engineering attacks, and an increase in cooperation between industry and law enforcement:
- Ransomware attacks will decrease in the second half of 2017 in volume and effectiveness.
- Windows vulnerability exploits will continue to decline, while those targeting infrastructure software and virtualization software will increase.
- Hardware and firmware will be increasingly targeted by sophisticated attackers.
- Hackers using software running on laptops will attempt “dronejackings” for a variety of criminal or hacktivist purposes.
- Mobile attacks will combine mobile device locks with credential theft, allowing cyber thieves to access such things as banks accounts and credit cards.
- IoT malware will open backdoors into the connected home that could go undetected for years.
- Machine learning will accelerate the proliferation of and increase the sophistication of social engineering attacks.
- Fake ads and purchased “likes” will continue to proliferate and erode trust.
- Ad wars will escalate and new techniques used by advertisers to deliver ads will be copied by attackers to boost malware delivery capabilities.
- Hacktivists will play an important role in exposing privacy issues.
- Leveraging increased cooperation between law enforcement and industry, law enforcement takedown operations will put a dent in cybercrime.
- Threat intelligence sharing will make great developmental strides in 2017.
- Cyber espionage will become as common in the private sector and criminal underworld as it is among nation-states.
- Physical and cybersecurity industry players will collaborate to harden products against digital threats.
For more information on the 2017 McAfee Labs predictions, please see the blog post entitled “2017 Predictions Blog”.
Cloud Security and Internet of Things Predictions
McAfee Labs also provided predictions for IoT and Cloud security during the next two to four years, including threat, economic, policy, and regional trends likely to shape each area. Gathering insights from Intel Security researchers, the following predictions also anticipate the responses we expect to see from device manufacturers, cloud service providers, and security vendors.
The Cloud predictions touched on topics such as trust in the cloud, storage of intellectual property, antiquated authentication, east-west and north-south attack vectors, gaps in coverage between service layers, for-hire hackers in the cloud, “denial of service for ransom” attacks, IoT implications for cloud security models, laws and litigation versus innovation, movement of data across borders, biometrics as cloud enablers, cloud access security brokers (CASBs), protection of data at rest and in motion, machine learning, cyber insurance, and ongoing conflicts pitting speed, efficiency, and cost against control, visibility, and security in cloud offerings.
The IoT predictions focused on cybercrime economics, ransomware, hacktivism, nation-state attacks on criminal infrastructure, challenges for device makers, privacy threats and opportunities, encryption, behavioral monitoring, and cyber insurance and risk management.
Six Critical Industry Challenges
The difficult-to-solve problems section of the report challenges the industry to improve threat defence effectiveness by reducing information asymmetry between defenders and attackers, making attacks more expensive or less profitable, improving visibility into cyber events, better identifying exploitation of legitimacy, improving protection for decentralized data, and detecting and protecting in agentless environments.
For more information, please read the full report: McAfee Labs 2017 Threats Predictions Report.
[su_box title=”About Intel Security” style=”noise” box_color=”#336588″][short_info id=’59593′ desc=”true” all=”false”][/su_box]
The opinions expressed in this post belong to the individual contributors and do not necessarily reflect the views of Information Security Buzz.