Zero-day mitigation controls

- [Instructor] Zero-day attacks occur…when a vulnerability is identified in a production system…before a patch or fix is available from the manufacturer.…Basically, if someone can find a software bug in Windows…before Microsoft can,…then a zero-day vulnerability exists.…Preventing zero-day vulnerabilities…from being exploited is extremely challenging.…After all, if somebody knew…the vulnerability already existed,…then they probably would have already fixed it, right?…How can you discover…that a zero-day vulnerability exists though?…Well, the best way that security researchers have used…to find zero-days is to use a honeypot or a honeynet.…

A honeypot is a system that's designed to be vulnerable…and placed on the internet so people will try to attack it.…These attacks are then studied by researchers…and often zero-days are found through this observation.…In addition to using honeypots…to learn about new exploits and attacks,…researchers will also monitor the hacking community…and explore the dark web.…Zero-day vulnerabilities and exploits…