It is tempting as a security practitioner to think you can prevent every attack. Especially in a people-strapped industry, why wouldn’t you want to? If we could just use technology and prevent attacks, we wouldn’t need that many new security practitioners after all.
Prevention is definitely a good strategy, and has prompted much investment from both the VCs and security teams. For instance, recently we’ve seen remote browser isolation (RBI) – essentially using disposable containers for internet browsing – grow in popularity. RBI was even named one of the top security technologies in 2017 by Gartner.
Read why David Pearson, Principal Threat Researcher at Awake Security, thinks that in order to be successful with RBI and really any preventative strategy, organizations must “always be threat modeling” on Help Net Security.