![\"\"](\"\/wp-content\/uploads\/2022\/10\/image-3.png\")
<\/figure>\n\n\n\n- \n
- Firewalls establish a barrier between the external network, typically the internet, and your internal business network<\/li>\n\n\n\n
- Web and mail traffic scanning tools do exactly that: scan your users\u2019 incoming and outgoing HTTP and email traffic<\/li>\n\n\n\n
- Endpoint anti-virus software helps prevent malware on your users\u2019 devices using a variety of scanning and detection techniques<\/li>\n<\/ul>\n\n\n\n
As for Admin By Request\u2026 we\u2019ll get to that further on.<\/p>\n\n\n\n
All of these security tools help to decrease the percentage of malware that manages to infiltrate your IT environment, and with each layer, the opening for infiltration narrows.<\/p>\n\n\n\n
However, there is still an opening – the biggest vulnerability of them all:<\/p>\n\n\n\n
Local administrator rights.<\/p>\n\n\n\n
One Small Gap in your Network Security, One Giant Doorway for Attackers<\/h2>\n\n\n\n
This single vulnerability can be catastrophic for your company.<\/p>\n\n\n\n
Many hackers today have financial motivation and create complex ransomware programs that often begin the process of infiltrating the system by targeting the end user.<\/p>\n\n\n\n
From here, malware can vertically escalate to a more privileged position from which point it can access the core of the operating system (as is the case with\u00a0RobbinHood ransomware<\/a>) or horizontally propagate across the network by stealing user credentials of the same privilege level.<\/p>\n\n\n\n
Both situations spell huge data breaches and subsequent disaster \u2013 and are much more common that you may realise.<\/p>\n\n\n\n
In late March this year hackers gained access to hotel giant, Marriot, by obtaining the login details of two employees of the franchise. 5.2 million people were affected by the data breach which stole names, addresses, and contact information \u2013 all a result of hackers gaining access to just two<\/em> user accounts.<\/p>\n\n\n\n
Mid-last year the US Defence Information Systems Agency (DISA), which employs over 8000 military and civilian staff, suffered a data breach that wasn\u2019t discovered<\/em> until February 11th of this year \u2013 almost a year after the hackers gained initial access. The breach compromised employee\u2019s PII (Personal Identifiable Information) and social security numbers, but the exact details of the breach, and those affected, have not been disclosed.<\/p>\n\n\n\n
Admin By Request: The Funnel of Love (well, of safety at least)<\/h2>\n\n\n\n
With Admin By Request, nothing needs<\/em> to be disclosed when it comes to unauthorised activity \u2013 because this software prevents unauthorised activity from occurring in the first place.<\/p>\n\n\n\n
Somewhere between 80 and 100% of vulnerabilities can be eliminated by eliminating local administrator rights. But that\u2019s not always practical: your users need admin rights to be able to do simple day to day tasks, such as installing media players or PDF readers.<\/p>\n\n\n\n
So how do you find a happy medium between keeping your system safe and keeping productivity at a maximum?<\/p>\n\n\n\n
By simply managing<\/em> privileged access.<\/p>\n\n\n\n
Funnel your Users: Managing User Access<\/h3>\n\n\n\n
Admin By Request is A Privileged Access Management (PAM) solution. It deals with the open doorway that is your user endpoints, allowing you to revoke admin rights so that malware has a much harder job of gaining entry to your IT system.<\/p>\n\n\n\n
With Admin By Request, you can choose who gets what access.<\/p>\n\n\n\n
The software\u2019s sub settings allow you to create different access rules for organizational groups. You can set tight access restrictions for some users and allow more leniency for others who might need higher privileges on a more regular basis, such as the IT team.<\/p>\n\n\n\n
Admin By Request keeps you safe by reducing the number of potentially vulnerable privileged users – but what about productivity? What do your limited-access users do when they need to run programs and processes that require administrator credentials?<\/p>\n\n\n\n
Funnelling out: How it Works<\/h3>\n\n\n\n
Admin By Request provides four ways for users to do such tasks without elevating them to full-time privileged users.<\/p>\n\n\n\n
These methods include:<\/p>\n\n\n\n
- \n
- Whitelisting commonly used applications ahead of time<\/li>\n\n\n\n
- Allowing users to request elevation of an app, which can then be run with administrator privileges<\/li>\n\n\n\n
- Allowing users to request a timed elevated session, which gives them administrative access to their system for the duration of the session<\/li>\n\n\n\n
- Providing a one-time-use PIN to a user (who may fall outside the scope that allows them to use either of the previous two self-initiated methods). The PIN allows them to gain elevated access for a period of time.<\/li>\n<\/ul>\n\n\n\n
Read more about these elevation methods here<\/a>.<\/p>\n\n\n\n
These techniques prioritise security by:<\/p>\n\n\n\n
o Whitelisting and elevating apps<\/em> rather than giving the user local administrator rights and<\/p>\n\n\n\n
o Applying the concept of Just-in-time (JIT) elevation \u2013 only elevating privileges when and where they are absolutely necessary.<\/p>\n\n\n\n
Just like that, Admin By Request balances security and productivity.<\/p>\n\n\n\n
![\"\"\/](\"https:\/\/www.adminbyrequest.com\/Images\/Blogs\/balance(1).png\")
<\/figure>\n\n\n\nShedding Some Light: Stay in the Know<\/h3>\n\n\n\n
As well as managing who gets access to what, Admin By Request\u2018s auditlog allows you to stay on top of what\u2019s going on when users request administrator access.<\/p>\n\n\n\n
When a user requests to run an application as administrator or begins an elevated session, the processes that occur during this period are recorded in the Admin By Request auditlog. This means installs and uninstalls are visible, and any attempt at privilege escalation is immediately detectable and can be addressed accordingly.<\/p>\n\n\n\n
You won\u2019t have to worry about discovering a data breach that happened almost a year ago with Admin By Request\u2019s auditlog tracking every administrator-move \u2013 with requests for admin elevation and the auditlog being accessible from your phone via the Admin By Request app.<\/p>\n\n\n\n
Funnel Vision: When \u2018100% Safe\u2019 Isn\u2019t Really That Safe<\/h2>\n\n\n\n
Admin By Request tackles the end-user vulnerability, and with it, 80 to 100% of vulnerabilities within your network. But what about that other potential 20%?<\/p>\n\n\n\n
This is where the anti-malware portion of the malware protection funnels comes back into play.<\/p>\n\n\n\n
Single end-point anti-virus solutions often claim to be 100% successful at detecting malware. But with the ever-growing and mutating malware threats appearing every year, no anti-malware engine can realistically claim 100% safety and security.<\/p>\n\n\n\n
Admin By Request recognises that eliminating 80 to 100% of vulnerabilities isn\u2019t guaranteeing you 100% security – so they have integrated with Opswat\u2019s MetaDefender Cloud to get you as close to 100% as possible.<\/p>\n\n\n\n
![\"\"\/](\"https:\/\/www.adminbyrequest.com\/Images\/Blogs\/Detection%20Efficacy%20Overview-01.png\")
<\/figure>\n\n\n\n