Assume an Intelligent Attacker: Enterprises must consider that an intelligent attacker is not going to walk into defenses as they are designed. Rather, the intelligent attacker is going to seek to find the easiest, fastest, and potentially the cheapest way to defeat the enterprises’ defenses and achieve the attack objective. Enterprises must look at themselves from the attacker’s perspective and design their defenses accordingly. Design Defenses to Detect and Delay: While it is certainly nice to prevent attacks in the first place, prevention will inevitably fail or be defeated. When failure or
...more
