Free Newsletter
Register for our Free Newsletters
Newsletter
Zones
Access Control
LeftNav
Alarms
LeftNav
Biometrics
LeftNav
Detection
LeftNav
Deutsche Zone (German Zone)
LeftNav
Education, Training and Professional Services
LeftNav
Government Programmes
LeftNav
Guarding, Equipment and Enforcement
LeftNav
Industrial Computing Security
LeftNav
IT Security
LeftNav
Physical Security
LeftNav
Surveillance
LeftNav
View All
Other Carouselweb publications
Carousel Web
Defense File
New Materials
Pro Health Zone
Pro Manufacturing Zone
Pro Security Zone
Web Lec
 
ProSecurityZone Sponsor
 
ProSecurityZone Sponsor
 
ProSecurityZone Sponsor
 
ProSecurityZone Sponsor
 
ProSecurityZone Sponsor
 
ProSecurityZone Sponsor
 
 
News

Database as a service plaform for malware

Imperva : 12 December, 2013  (Technical Article)
Hacker intelligence initiative report reveals the use of database as a service technology as a new cyber-criminal malware platform
Database as a service plaform for malware

Imperva has released its latest Hacker Intelligence Initiative report, “Assessing the Threat Landscape of DBaaS.” Through an in-depth analysis of malware that used a shared hosting database for its Command and Control and drop server, Imperva discovered a new malware platform for cybercriminals: Database as a Service (DBaaS). The report concludes that by bringing data one step closer to hackers, DBaaS makes it possible for hackers to compromise an organization’s database without accessing its network – ultimately increasing the risk of a data breach.

“Our research suggests that we will soon see autonomous malware targeting internal databases within organizations – which we believe would lead to a greater risk of infection and compromise within a network,” said Amichai Shulman, chief technology officer at Imperva. “Organizations need to take the risks posed by cloud services into consideration as they decide which data they want to store externally, and adopt a mitigation strategy accordingly.”

While the perceived risk of cloud services is already high, the report identifies two factors in particular that increase risk to corporate data: the relative ease of accessing cloud databases, as well as the ease of quickly turning a legitimate foothold on these servers into a privilege escalation attack. Key findings also include:

* Malware is now capable of connecting to both local and remote databases to retrieve, manipulate and exfiltrate information.
* Malware can make use of DBaaS for botnet management (eg, Command & Control as well as Dropper functionality).
* Cloud databases are prone to attacks via both privilege escalation and exposed vulnerabilities, as opposed to on-premise databases, which are mostly compromised via privilege escalation.

Bookmark and Share
 
Home I Editor's Blog I News by Zone I News by Date I News by Category I Special Reports I Directory I Events I Advertise I Submit Your News I About Us I Guides
 
   © 2012 ProSecurityZone.com
Netgains Logo