Background to the need to understand and manage externally disclosed assets

In recent years, the number of assets exposed to the outside world has rapidly increased as companies have increasingly adopted digital transformation and cloud usage and remote work have become widespread. On the other hand, cyberattacks have evolved into attacks that target externally disclosed assets for which companies have insufficient countermeasures, and are causing significant damage to companies, including leaks of personal information and business suspensions. Under these circumstances, a method called Attack Surface Management (ASM), which identifies and manages assets that can be attacked, is attracting attention.

The important points for companies to implement ASM are the "comprehensiveness" and "accuracy" of domain research. If there is an omission in the investigation of the initial seed domain, the discovery of IPs and associated devices will also be omitted, and ultimately the discovery of risks will also be omitted. In addition, if unrelated domains are managed, a large amount of noise will be generated, which will place an operational burden on removing the noise, resulting in a delay in the original purpose of detecting and dealing with risks.

Service features

• Specialists who are familiar with cyber attack methods will investigate from the same perspective as the attacker from the domain of the customer's head office and group companies.
• Based on manual investigations that do not rely solely on tools, it is possible to thoroughly identify assets that the customer is unaware of, including domains, stray servers, and overseas locations.

Overall image of ASM using ULTRA RED + domain research service

Service details