In recent years, the methods and trends of cyberattacks on companies have changed, and many incidents targeting vulnerable systems facing the Internet have occurred. Intrusions that used the web and email, which were the mainstream in the past, have become difficult to exploit due to the multi-layered defense and monitoring at each company, and the enhancement of EDR and endpoint protection functions in browsers. This is because attack surfaces (poorly managed servers and network devices) that can bypass defenses are a good entry point for attackers. In fact, critical vulnerabilities have been discovered one after another, and there have been many serious incidents in which they were exploited in state-sponsored advanced targeted attacks and exposed ransomware attacks. With the utilization of IT and the discovery of vulnerabilities, there is a high possibility that such Attack Surfaces will continue to increase in the future, and Attack Surface Management will be necessary to understand and deal with Attack Surfaces related to your company.

However, it is extremely difficult for an organization to discover stray assets such as servers and network equipment that are not managed by the information systems department. For this reason, Macnica networks has released a service that supports companies' Attack Surface Management by discovering externally disclosed assets that may be related to customers and providing advice on how to deal with and correct them.

In the Attack Surface Management service, specialists who are well versed in cyberattack methods identify customer-related assets from the same perspective as attackers by tracing related domains, IP address connections, etc. from the domain of the customer's headquarters and group companies. to hold. Based on a manual survey that does not rely solely on tools, it is possible to comprehensively identify assets including domains, stray servers, and overseas bases that the customer is not aware of. In addition, the survey results will report realistic risks based on threat trends related to threats and vulnerabilities that target Japanese organizations owned by our company. Customers will be able to identify servers and network devices that are inadequately managed and implement appropriate cyber-attack countermeasures.