TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

F5 Labs

What Is the Principle of Least Privilege and Why is it Important?

2020-12-21 · Read original ↗

ATT&CK techniques detected

3 predictions
T1078.004Cloud Accounts
54%
"in part to a firewall that had been assigned excessive privileges, allowing it to run commands and access data in cloud - based storage it should not have had access to. 3 - in 2019 and 2020, multiple data breaches exposed the personal information of millions of users, and in one…"
T1486Data Encrypted for Impact
45%
"or ransomware and, in turn, reduce the chances of it spreading throughout the organization. finally, depending on the industry or type of business, many organizations must comply with laws and regulatory requirements, such as the eu ’ s general data protection regulation ( gdpr )…"
T1525Implant Internal Image
39%
"in part to a firewall that had been assigned excessive privileges, allowing it to run commands and access data in cloud - based storage it should not have had access to. 3 - in 2019 and 2020, multiple data breaches exposed the personal information of millions of users, and in one…"

Summary

Least privilege reduces risk to organizations by granting users only the privileges they need to do their jobs—and nothing more.