Protecting your bank against cyberattacks (Part 2 of 3)

With data breaches making more headlines, security remains top-of-mind for financial institutions. Despite robust security controls, banks can still be vulnerable to threats. 

According to the most recent Verizon Data Breach Report reviewing over 5,000 breaches, the top three threats were:

  1. Social Engineering

  2. Basic Web Application Attacks

  3. System Intrusion

In our last article, Tony highlighted social engineering breaches, along with some key elements of an employee awareness program. 

Basic web application attacks occur when a malicious hacker breaks into your web application, most likely hosted on the Internet. Because of the push to make everything digital and accessible to users, we can often prioritize function over security. This means there are a lot of web applications that have been pushed into production with vulnerabilities. 

A ‘basic’ attack would be one covered by the OWASP Top Ten. If you haven’t heard of the OWASP, it is an organization dedicated to application security. It publishes helpful security guides and recommendations to help reduce cybersecurity exposures. So, to reduce this type of attack on your company you can:

  • Ask your developers to review the OWASP Top Ten

  • Implement a Secure Development Life Cycle (SDLC)

  • Insert a code vulnerability scanner like Sonar Cube to help identify issues before it’s too late

  • Hire a penetration tester to check the web application before it goes production

In part 3, learn about system intrusion attacks and protective measures you can take.

Read Part 3: Protecting Your Bank Against Cyberattacks

Because of the push to make everything digital and accessible to users, a lot of web applications have been pushed into production with vulnerabilities.
— Tony Asher, Asher Security

About Asher Security

We protect your critical information assets by securing your data, detecting malicious attempts, and preventing the compromise of confidentiality, availability, and integrity of crown jewels at the core of your business. More at ashersecurity.com.

About Micah Group

Micah is the intelligent lending platform for fast, efficient credit decisions. From application to approval, it turns a weeks-long process into days or minutes. Micah automates spreading and credit memos, so lenders can spend more time on customer experience and analysis. More at micah-group.com.

Previous
Previous

Protecting your bank against cyberattacks (Part 3 of 3)

Next
Next

Protecting your bank against cyberattacks (Part 1 of 3)