Page 68 - Cyber Defense eMagazine April 2021 Edition

Solarwinds Was A Dangerous Precedent – How

Can the Supply Chain Be Secured?

By Gregory Cardiet, Senior Director, Security Engineering at Vectra

upply chain cyber attacks are nothing new, but the latest SolarWinds incident is the starkest
Sreminder yet that complacency comes with a price. The SolarWinds attack affected servers of at
least 18,000 customers in the supply chain, many of which were high value government organisations.

Too many organisations remain overinvested in old-school perimeter defence solutions, such as
sandboxing, IDS, and next generation Firewall, despite mounting evidence of their deficiencies, and
simply ‘building higher security walls’ does not do the trick anymore. Furthermore, SOC still rely on very
simplistic rules based on logs and looking for anomalies of user activities, making it difficult to find
malicious offenders within the noise created by such rules. So, what can be done to fill the gap and
prevent organisations from becoming a statistic in the next supply chain attack?

68 Cyber Defense eMagazine – April 2021 Edition
Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.