Despite years of investment in preventive security measures such as firewalls, IDS/IPS, and Anti-virus, most enterprises are succumbing to sophisticated targeted attacks. These advanced threats are carefully orchestrated to side step those preventive measures and find the cracks in an organization's defenses to compromise email, take over control of end points and exfiltrate data. The revelation by Google that they suspected China of hacking into their systems using social networks to induce employees to click on malicious links should come as no surprise in light of similar revelations over the past six years. As long as organizations rely on purely preventive technologies, instead of real-time monitoring techniques, they will continue to succumb to advanced threats that target their data, networks, and people.
intelligentanalysis.pdf