Data that exists is data that’s vulnerable.
In 2021, relying on outdated technology to handle new and often extreme cybersecurity threats in a unreliable and quickly progressing circumstances isn’t a all-inclusive or doable strategy. With unstoppable and mounting cyberattacks part of daily reality, ultramodern protection against them has never been needed more to keep infrastructure safety, privacy, and keep functioning supply chains.
Infrastructure software’s purpose is to improve the efficiency and performance of a company/entity’s operations and technology platform. Google and Facebook’s data breaches and bugs definitively show how extremely large and powerful companies are also likely to get attacks. The larger a company, the more security risk they take on. Breaches are also very costly for corporations to absorb. Given that, it’s not surprising the cybersecurity market is projected to reach $111 billion by 2025 from $20 million in 2020.
When it comes to cybersecurity, focusing on defense alone without incorporating prevention at the earliest developmental stages addresses only a part of the problem, treating the symptom instead of tackling and correcting the cause.
Risk assessment has to incorporate the whole picture to be effective. Otherwise, theft, breach, ransomware, and other malicious attacks are most likely coming soon. Sally Jelen writes in “Cyber Counterintelligence: When Defense Alone is no Longer Enough:
“Defensive cyber counterintelligence are actions taken to identify and deflect adversaries before they attack. The purpose of defensive CCI is to protect the organization against vulnerabilities and internal and external threats. In addition to traditional security measures such as firewalls, IDS’s, anti-virus solutions and encryption, defensive CCI consists of penetration testing, vulnerability assessment and management, threat intelligence, threat hunting and more.”
With many people working from home answering Covid-19 restrictions and remotely accessing servers, this multilocational traffic and increased data exchange across networks means more risk. When access is no longer compartmentalized to a given limited physical space, it expands attackers’ range, opportunities, and options to touch. One pathway is third-party vendors hackers working for Russia used this route when they attacked utilities in the US, reaching the control rooms and causing blackouts.
Rising to meet the change and challenge is NanoVMs, stepping in and stepping up cybersecurity at a foundational level, partially through strategic subtraction in their design scheme. Founded in 2015, the company received $2.4 million in funding, gaining recognition in their 5 target markets: healthcare, finance, government, energy, and telecom. Along with $170K from the Department of Energy, they’ve received a multi-award contract from the US Air Force, and have run trials with Amgen. Nanos recently launched NanosC2.
Employing unikernels, defined as “simply an application that has been boiled down to a small, get, light-weight video machine,” their patented operating system “shrinks applications into small video machines” to fortify security at a basic level, creating standalones that work together with other standalones. The application has no operating system, users or shell. As a single application, the defense is in the construction. No other applications can run on it, shutting down an attacker’s access point. Their approach is prevention through omission, a difficult design defense strategy that shuts down hackers by leaving out the tools they use to infiltrate.
NanoVMs accomplishes multiple objectives within one operating system. It increases speed although also improving performance and reducing costs, making protection and systemic improvement one and the same.
“Security is a real burning issue when it comes to the infrastructure,” says CEO and founder Ian Eyberg. What we’re really doing is kind of upgrading the software infrastructure for the modern-day company.”
