How to combat reconnaissance
Stopping the success of the attacker during the reconnaissance stage is crucial to stopping attacks before they develop further. If an attacker does not gain access to critical details about a system, they will end up using either trial and error methods or basing their plans on guesswork. For major attacks, such as advanced persistent attacks that cost huge sums of money to plan, the attackers cannot afford to use uncertain information to make major plans that may end up costing them a lot of money in the end. Therefore, thwarting attacker efforts at the beginning will help to either delay the attacks happening or stop the attacks altogether.
The best way to combat the successful completion of reconnaissance by attackers is to completely understand your network as an organization. You need to know details such as:
- All the technologies that are used in the system and the network
- Any possible cracks within the system
The best...
