Counter APT through Architecture

Here you will find insights how to counter advanced persistent threat using specific architectural designs.

soon ;-)

APT List

Here I will publish APT's.

Date	Name	Target	Probable creators1	Related to
June 2010	Stuxnet	Iran	US and/or Israel	-
March 2011	RSA securID*	US	China	-
September 2011	DuQu	unknown	unknown	Stuxnet

*Does the RSA SecureID have an APT name?

1 We may never know who really created the APT's however this is deducted from the fact who has the most to gain from this.

What is APT ?

APT is an acronym for Advanced Persistent Threat.
It is a politically correct name for countries that hack into your systems for strategically control or industrial espionage. I found very little on the internet and a lot of scare tactics but as an IT & Security specialist I am interested in the techniques to counter APT.

How do you keep undesired individuals out of your network when their budget is easily a hundred times bigger than your security budget. I therefor believe in open
information and methodology, security by obscurity is not an option with these
guys. I will consult with experts and specialists in the field of security.

It is also a platform to honor the girls and guys in the field that on a day to day basis secure your company, deciding which vulnerability to tackle first when there is a shortage of time, budget, expertise or even backing from the board. It takes many years to become a senior admin while you can train a kid hacking in a week. Now let’s see if we can keep not only the script kiddies but also the truly gifted hackers outside of your network.

The way I see it we will always play catch up, our strength is in numbers and the willingness to help each other.

Feel free to help me gather information about APT for me to publish and comment. E-mail counterapt@2ndo.nl or joine me at LinkedIn