Posts tagged 'enterprise'

When security policies and security testing meet…

Security solutions can stop you getting things done. They can make mistakes, interpreting your actions as malicious. And then block your work. But they can also blindly follow security policies set by the IT department. Sometimes they do both! How can you predict which products will be most accurate after you buy them?

Custom security policies

Your business most likely doesn’t rely entirely on the detections and protections offered by security solutions. IT usually needs to make a least some configuration changes. Default settings should be good, but businesses commonly make their own adjustments. Every company has its own characteristics and one size definitely does not fit all.

Posted on May 3rd, 2022 by Simon PG Edwards and tagged 2022, configuration, cyber security, enterprise, security testing

Simulated or real attacks in cybersecurity testing?

There are many different ways to test cybersecurity products. Most of the common approaches are useful when evaluating a service or system, but they each have pros and cons. In this article we outline the basic differences and limitations. Can you achieve realistic cybersecurity testing?

Posted on April 20th, 2022 by SE Labs Team and tagged 2022, cyber security, enterprise, penetration testing, realism, realistic cybersecurity testing, security testing, simulated attacks, standards, test like hackers

A strategic alternative to penetration testing.

Is Microsoft’s anti-virus good enough? Are the ‘next-gen’ endpoint products as good as they claim? Is our combination of anti-malware and whitelisting giving us full threat coverage? Enterprises are asking themselves, and SE Labs, these questions all the time. The good news is, we can help provide an answer.

Posted on April 13th, 2022 by Simon PG Edwards and tagged 2022, buying decision, configuration, cyber security, enterprise, hacking, security testing, standards, targeted attacks

By understanding the rules of security testing.

The reports below contain security testing results. You can compare the performance of a variety of products that claim to protect you against online threats. This, in theory, will help individuals and businesses choose the best security product.

Rules of engagement

But these are free reports. How can you trust that the high-scoring vendors didn’t just pay for their ranking? Do you suspect that some low-scoring vendors dropped out of the report? Or asked to be retested until they scored better?

What are the rules behind the scenes in security testing?

ENDPOINT PROTECTION: NEW REPORTS ONLINE!

Posted on April 8th, 2022 by Simon PG Edwards and tagged 2022, cyber security, enterprise, EPS, home user, security testing, small business, standards, test results

SE Labs tested IronNet IronDefense against a range of hacking attacks.

The SE Labs Enterprise Advanced Security test is compatible with a wide range of security products and services. This includes NDR. Our latest network detection report is now available!

IronNet IronDefense vs. APTs

Our targeted attack testing is compatible with the MITRE ATT&CK framework, which means we based our work on the industry standard way to illustrate attacks.

Posted on March 15th, 2022 by SE Labs Team and tagged 2022, cyber security, EAS, enterprise, NDR, network security, security testing, standards, test results

How security vendors work with SE Labs.

SE Labs works with security companies to help develop and validate their products. When a security company works with SE Labs it gains two main benefits. If the product performs well it gains a much sought-after award. If it encountered problems the testing team will provide valuable information to help fix the issues.

Posted on March 9th, 2022 by SE Labs Team and tagged 2022, cyber security, enterprise, security testing, security vendor

See our presentation video from the AMTSO Town Hall meeting.

Network detection and response products monitor networks for attacks. They look for related information too, to help detect and recover from breaches.

Network detection and response: TESTED!

SE Labs has applied its Enterprise Advanced Security testing methods to network detection and response products. In this video we explain how and why we test the way we do.

Posted on March 8th, 2022 by SE Labs Team and tagged 2021, cyber security, EAS, enterprise, NDR, network security, security testing, security vendor, standards

Transcriptions of the DE:CODED podcast are now available.

Sometimes you just want to scan a wall of text to find the details you need. That’s impossible with a podcast. You often find yourself listening to different episodes, trying to find the nugget of information you half-remember hearing.

Read our podcast

To help make our podcasts more accessible we have published full transcripts of each episode. Series One is complete and we’ll continue to transcribe Series Two when we start publishing its episodes.

Posted on February 28th, 2022 by SE Labs Team and tagged cyber security, enterprise, home user, podcast, small business, transcription

The Enterprise Advanced Security testing programme includes new attack groups.

Our Enterprise Advanced Security (EAS) tests can assess any security software, hardware appliance, cloud service or combination thereof. Always evolving, these tests have expanded to include new attacks.

(These tests were originally called the Breach Response test. We renamed them for a number of reasons.)

Hackers and way they hack

Research on real attacker behaviour is a fundamental element of our EAS testing. Our team looks at the real-world behaviour of advanced threat groups, known as Advanced Persistent Threats (APTs).

Posted on February 16th, 2022 by SE Labs Team and tagged 2022, apt, cyber security, enterprise, Enterprise Advanced Security, security testing, security vendor, threat series, ttp

Real-world security reports don’t always reflect your real world.

What makes a real-world security test useful? Does it need to provide a full assessment of a product or service? An assessment that is directly relevant for all potential customers? Or does it need to give just a taste of how effective a product can be?

The perfect security test

Tests can vary in how they are run and the level of information that they provide. Not all tests are equally reliable or even useful. But one thing they all have in common is that they aren’t perfect. Let’s look at how tests are limited, how you can interpret them and what the future holds.

Posted on January 26th, 2022 by Simon PG Edwards and tagged 2022, configuration, cyber security, enterprise, security testing, security vendor, standards