Serious Discussion Which layer of defense contributes the most to your overall security?

[Jonny Quest]

Never using computer.

Or a smartphone?

 

[Zero Knowledge]

Or a smartphone?

You think kingpins go near a phone or computer in a country that allows extradition? Probably not.

 

[BSONE]

Ok, if you are looking at a single platform agnostic silver bullet, I would say a secure DNS with both Malware and Ad blocking active.

 

[Victor M]

silver bullet

But to be a silver bullet, it has to stop hackers too.

 

[Victor M]

I think asking for the major defense technology used only answers the real question partially. The real question is - how do we stop attacks?

Since we can't know of all the attack vectors and 0 days, my approach is to address the methods of obtaining persistence. When the attacker cannot obtain persistence, then her efforts will be in vain. She can land on my box, but she can't do anything.

Use Application Control, that will take care of denying foreign executables. Then take care of interpreters running foreign scripts. Then take care of denying LoLBins. Additionally restrict exe's from running from user writable paths. Just go down the list of Mtre Attack's Persistence column. They are all mitigatable IMHO. That's the game plan to follow.

It is systematic, and addresses all known persistence TTPs in automated malware and hand-on-keyboard adversary attacks..

 

[JoeN]

AdBlocker is my No1