Cyber security finding new ways to stop hackers

A different kind of information security firm is attempting to trap cyber criminals, according to a recent report in the Financial Times that also suggested traditional methods of averting attacks are proving unsuccessful.

Recent attacks on firms such as  Home Depot, JPMorgan and Sony Pictures have been given much press attention, demonstrating that hackers have been able to get around firewalls built to protect company networks.

However, according to the Financial Times’ San Francisco-based cyber security correspondent, Hannah Kuchler, firms are beginning to adopt new methods to trick criminals into hacking fake computers – along with decoy files and software – in order to ambush them. Hackers are easy to recognise, as no activity is expected on these fake computers.

Cyber security experts are then able to observe the actions taken in a bid to understand what is being searched for, possibly also learning the identity of the hackers, so that other detection systems can be notified.

A hacking expert at Tangible Security, Allen Harper, said the new deceptive method could change the game, as it enhances current protections which depend on matching threats to patterns that have already been seen. The new approaches could also help to close unknown software holes, called ‘zero-days’, should hackers be seen employing them in such controlled environments.

Such methods may be commonplace at some point in the future but, for now, firms need to take advantage of current defences. For most companies, this will be enough, as more advanced hacking strategies tend to be reserved for companies as big as Home Depot and Sony Pictures. Therefore, filling cyber security jobs with professionals utilising tried and tested methods should be more than sufficient.