Does the term "novel attack" resonate with security teams? or does "unknown attack" resonate better? What would you consider novel/unknown attacks? Does your current threat detection solution detect novel/unknown attacks?

4.3k viewscircle icon1 Upvotecircle icon3 Comments
Sort by:
Director of Information Security in Services (non-Government)2 years ago

Novel attack resonates more. These attacks may include multiple stages and exploit vulnerabilities to perform an EDR bypass, C2, or ransomware. 

Lightbulb on1
CISO in Software2 years ago

I always think of 0-day vulns and associated attacks as novel.

CISO (CISO) in Healthcare and Biotech2 years ago

Novel attack certainly resonates more. Unknown attacks are only unknown until forensics figure it out.  A robust incident detection and response system (SIEM, UEBA, XDR) should be able to detect unusual activity and let your SOC investigate. them.

Content you might like

None11%

1-538%

6-1023%

11-2018%

21-493%

50+1%

I don't know4%

View Results

We don't use any 3rd-party scripts17%

We can't monitor or restrict 3rd-party script behavior on our website31%

We trust vendors based on initial reviews20%

We test scripts periodically17%

We use Web Privacy Management, WebAppSec, or PriSec Software9%

We outsource website privacy and app security monitoring services3%

Other (please describe)

View Results