Securing Your Non-Human Identities from Attacks
- OCTOBER 14TH, 2024
- 2min read
Introduction
The rapid growth of non-human identities, like bots and AI, is creating more attack surfaces for cyberattacks. These attacks, often referred to as NHI attacks, are becoming increasingly common.
Common vulnerabilities that contribute to NHI attacks include weak security practices like infrequent password changes, insufficient logging and monitoring, and excessive account privileges.
Understanding Non-Human Identities
- Non-human identities are digital representations of entities that are not human. They include:
- API keys: Unique codes that allow applications to access and interact with services.
- OAuth Tokens: Temporary credentials granted to third-party applications to access user data on behalf of the user.
- Service Accounts: Special accounts used by applications or services to perform tasks without requiring human intervention.
- Bots: Automated software programs that can perform tasks or interact with users.
- Secrets: Sensitive information like passwords, encryption keys, or access tokens that are crucial for security.
Best Practices for Securing Non-Human Identities
- Monitoring: Keep a close eye on NHI behaviour, regularly check OAuth app authorisations, and protect against third-party apps.
- Secure Management Practices: Take inventory of all NHIs and scan regularly to check for unused NHI for deletion or revocation.
- Credential Rotation: Rotate secrets, tokens and API keys regularly and change default passwords in service accounts.
- Access Control: Grant NHIs only necessary permissions, use firewalls and network segmentation, monitor network activity, encrypt sensitive data, back up regularly, and implement robust access controls.
- Multifactor Authentication (MFA): Implement robust authentication measures by using multifactor authentication (MFA), strong, unique passwords, and considering biometric options like fingerprint or facial recognition.
- Regular Updates and Patches: Ensure all software and firmware are updated with the latest security patches, using automated tools to streamline the process.
- Network Security: Use firewalls to control network traffic and prevent unauthorised access, segment your network to isolate critical systems, and monitor network activity for suspicious behaviour.
- User Awareness: Provide comprehensive training to staff on the risks associated with non-human identities and how to prevent attacks, including best practices for securing devices and accounts.
Explore more CIL Advisories
Phishing Emails
IntroductionPhishing attacks are becoming increasingly sophisticated, with malicious actors exploiting current events like the Paris 2024 Olympics Games to run…
DECEMBER 16TH, 2024
Read More
Preventing Deep Fake Scams
IntroductionMalicious actors always find creative ways to defraud unsuspecting individuals; deep fake scams are one of the latest ways with…
DECEMBER 9TH, 2024
Read More
Trouble Looms: Ransomware Attacks on the Rise
IntroductionRansomware is a type of malware which prevents you from accessing your device and the data stored on it, usually…
DECEMBER 2ND, 2024
Read MoreNever miss a CIL Security Advisory
Stay informed with the latest security updates and insights from CIL.
