Indicators of Exposure: Skybox pioneers new approach to reducing the attack surface
Shannon RaganJun 2, 2016
Skybox has defined a new term to identify potential attack vectors – indicators of exposure (IOEs). With the release of our new attack surface visualization solution, Skybox® Horizon, we’re delivering a way for security teams to see their network in total, but also layer in the ways in which they are exposed to risk and prioritize that risk in a broader context.
Traditionally, the attack surface – all the ways an organization is at risk of a cyberattack – has been thought of only in terms of vulnerabilities. But IOEs consider other exploitable attack vectors, such as network security misconfigurations and risky firewall access rules, as well as new, exposed or concentrations of vulnerabilities.
The Skybox® Security Suite consolidates information from more than 90 networking and security devices, including firewall rules and policies and device policies, into a visual, interactive model. Skybox also normalizes more than 25 vulnerability and threat intelligence feeds, and analyzes that data against network and security control information. This gives security teams an accurate picture of vulnerabilities actually putting their network at risk.
Similar to indicators of compromise (IOCs) used to detect attacks that may have occurred, IOEs give insight into potential exploitable attack vectors before an incident actually takes place. By understanding these risks within the context of network, security teams can better prioritize security management efforts and be prepared to contain attacks quickly.
Horizon is the first solution to empower security teams to find and manage IOEs, helping them to reduce their attack surface. Using contextual intelligence gained from consolidating and analyzing data from various sources, Horizon harnesses IOE understanding to create a visual, interactive model linking network topology, network connections, business units, organizational hierarchy and IOEs in one picture.
With a unified view of the attack surface and in-depth understanding to exploitable attack vectors in your network, security teams can focus on critical exposures, quickly see how to cut off exfiltration routes to prevent data breaches and have the intelligence necessary for a strategy to systematically reduce risk.
Attending Infosecurity Europe? Don’t miss Skybox CEO and Founder Gidi Cohen’s strategy talk The Visible Attack Surface – What it is and Why it Matters on June 8.
Learn more about Skybox Horizon, the first-of-its-kind attack surface visualization solution powered by the indicators of exposure approach.
Read the whitepaper on the importance of understanding Indicators of Exposure in order to prevent data breaches, respond faster to emerging threats and ongoing attacks and reduce risks