M 3 AAWG: Hosting Past, Present & Future
|
|
|
- Mervyn Lloyd
- 7 years ago
- Views:
Transcription
1 M 3 AAWG: Hosting Past, Present & Future Justin Lane - BlueHost and M3AAWG Hosting Co-Chair Jesse Sowell, PhD and M3AAWG Advisor 5 May 2016 LACNIC 25, La Habana, Cuba
2 Hosting: Not a Big Issue, Right? For many years the Community looked at Hosting Companies like this picture. We where a small area that did not look to be that important.
3 A Brief History of Hosting Hosting Companies in the beginning where a small part of the overall environment. Most of the Hosting Companies at the time offered plans that gave their clients 20-50MB of space to use for their websites. ESP s and ISP s where much bigger players.
4 What Hosting Offers Hosting Companies were able to offer all the services needed to get a company online and ready to service their customers. Services CMS, and Webdesign Hardware from Dedicated Servers or Colocation Servers to Shared or Virtual Server Space Bandwidth for your Business, Dedicated Ips and SSL Services Access to Hardware that most smaller businesses were not able to afford on their own.
5 What is Happening Today? As the community got better at policing ISP s, ESP s and other problem areas, the criminal elements began to migrate to the Hosting Platforms. With Hosting Companies these criminal elements were even better positioned to carry out their plans. And in the beginning we were not prepared to address these problems.
6 Abuse in Hosting A Hosting Company is the one stop shop for their customers needs in so many areas. This also means Hosts are open to abuse from many different areas Spammers, creating spam campaigns. Hackers breaking into Customer sites. Being used as targets or sources for malware or botnet infections. Phishing sites. Child Exploitation.
7 What Happened Next MAAWG recognized the need to address the problems that were developing in the Hosting Industry. And decided on a plan. Approach Hosting Companies to engage with the industry. Once engaged we created the Hosting SIG to address the problems Hosts face. Encouraged the Hosting Companies to design their Best Common Practices. With the help of industry experts we designed the Hosting and Cloud Best Common Practices
8 Why MAAWG Could Help Provide a Trusted Forum & Framework for Open Discussion of Abuse Issues in an Atmosphere of Confidentiality and Cooperation Develop & Publish Best Common Practices & Position Statements Recommendations Not Rules Encourages Reluctant Firms toward Accepted Practices i.e., M 3 AAWG Port 25 BCP Global Impact Many M 3 AAWG Papers Referenced in Standards Technical Outreach to Global Partners London Action Plan and EastWest Institute (2013 Cyber Security Award for China & India Work) Provide Technical and Operational Guidance to Government, Internet & Public Policy Agencies Developing New Internet Policies and Legislation. M 3 AAWG Papers Referenced in Government Reports.
9 Hosting, What We Are Today.
10 Today, Hosting Companies Have a HUGE Impact on the Ecosystem. Because of all the various services that they offer. The Basic services Hosting Companies offers their clients have not changed. But our technology has. Everything has improved, we are faster, stronger and larger than we ever thought possible. And as technology gets better we pass that on to our customers.
11 How Does M 3 AAWG Help? Because you can t effectively or efficiently fight online abuse alone Because you can t protect your end-users and customers in a vacuum M 3 AAWG is a Global Trusted Community for Sharing Information, Techniques, Research
12 Our Urgency and Dedication Malware & Crime Have Intensified Growth of the Underground Economy New Attack Vectors Identified Constantly Mobile in Cybercriminal's Sight Today s Threats Require Multi-Discipline, Global Response Cut Across Fields of Specialty, Technologies, Silos Borderless Crimes Demand Global Cooperation Outreach to Developing Online Countries Shared Expertise and Proven Recommendations
13 What hosting Companies Need to Know M3AAWG members have created BCPs that help simplify the issues. These documents are designed so that it does not matter if the hosting company is one person working out of his house or a company of thousands, they can be used by anyone. The goal is to make sure that the needed information is easy to understand and easy to start implementing.
14 How M 3 AAWG for Hosting Helps Participating in M 3 AAWG has made my job easier and made me more effective at my job Hosting Company Anti-Abuse Manager M 3 AAWG Members are Experts in Spam, Phishing, Malware Areas of Urgent Concern to the Hosting Community Brings Together Needed Resources Blacklisting Groups Security Researchers Identifying Upcoming Threats Colleagues Who Have Dealt with Threats Collaborate with Others Working on Similar Problems Avoid Costly Trial and Error Implement More Effective Anti-Abuse Measures
15 Contributing to Standards Provide Input into RFCs and Other Standards RFC 6449 Complaint Feedback Loop Operational Best Practice Recommendations RFC 6561 Recommendations for the Remediation of Bots in ISP Networks RFC [...] Abuse Reporting Format (ARF) RFC 6376 (DKIM) and draft-kucherawy-dmarc-base-13.txt (DMARC) Have Substantial Input from M 3 AAWG Members and Technical Advisers
16 Hosting Vital to Ecosystem Health Kicked Off Best Practices Work in 2014 Published in Q We are thrilled to collaborate with M 3 AAWG on this important best practices initiative and focus on implementation within this community. Christian Dawson, i2c chairman and co-founder We took on this work at M 3 AAWG because of the pivotal role hosting companies play in the ecosystem... Michael Adkins, M 3 AAWG Chairman of the Board
17 M 3 AAWG Anti-Abuse BCPs for Hosting and Cloud Service Providers See - Best Practices Jointly Published by the i2c and M 3 AAWG to Reduce Spamvertising, Malware, Other Online Threats Outlines Needed Hygiene and Security to Improve Operations and Better Protect End-Users Reasonable Steps that Can Be Integrated into a Company s Basic Operations and Policies Developed by Industry Professionals Facing These Challenges Every Day
18 How can the Hosting BCP Help? Covers Types of Abuse, Prevention, Detection, Identification, Remediation Institute Effective New Client Vetting Before Allowing Customers on Your Network Require Customers to Keep Current on All Software Updates Consider Hardware-based Intrusion Detection Systems (IDS) Use Software-based Security Scans and Firewalls Implement Internal Network Telemetry Reporting When a Problem Is Found, Best Practices Recommend When to Suspend Service or Terminate Customer Use Network Operators Feedback Loops to Identify Abusive Sent from Your Service and Help Identify Potential Problems
19 Where to Start?... Prevention! Vet customers before they can cause a problem! Hosting providers are at the mercy of their clients worst practices. Providers must have some type of vetting process to proactively identify malicious clients before they undertake abusive activities. A sound vetting process prior to provisioning will help the provider determine the difference between the truly bad actors and the customer who simply needs some guidance on proper online conduct. Vetting of clients is integral to maintaining a good reputation, decreasing costs and decreasing online abuse.
20 What Comes Next? Education! You and your teams need to know what threats to watch out for. The only problem with that is that the threat landscape is constantly changing. Thankfully none of us are alone in this battle. It is essential that lines of communication are set up with reputable reporting groups to help maximize your ability to correct problems as they occur.
21 M 3 AAWG Resources M 3 AAWG Website Exclusive Members-Only Documents and Resources on the Members Section of Website Public Accounts - Anyone (members & non-members) can access these: YouTube Channel - Twitter Facebook Page - Google+ page - search for maawg Private Groups - M 3 AAWG members are welcome to join: Facebook Group - LinkedIn Group M 3 AAWG
22 Some Current Threats SnowShoe Spammers - Currently one of the hardest threats for Hosting Companies to combat. Why? Because most of these spammers will open multiple accounts with Hosting Companies and then do nothing with them. For a while, once they start using those accounts they are not flooding outbound MTAs they are only sending a few hundred s. This while it may be caught does not match the normal profile of a spammer.
23 SnowShoe Spammers Current Best Practices for combating these issues. Vetting your new customers. Using strict vetting practices and maintaining data on past problem customers. The additional bonus of having strict Vetting policies is a lower amount of fraudulent accounts across the board. Third party reports. Because of the relatively small amount of mail sent from these types of spammers, it is essential to have trusted feedback sources. They maintain large networks of honeypots that help identify these trends. Limit the access new customers have to the system. Setting limits for s sent per hour with a new customer is one example of how to prevent some of the problems at the outset.
24 Current Threats Continued Malware and Botnets Phishing Virus Payloads Combating these Threats, once again starts with proper vetting. Your Feedback loops will also be a major point of contact to help combat these issues. Internal systems designed to check for malware, botnet, phishing etcetera is another needed process to secure your network. Finally educating customers on proper security, for their accounts and home pc s.
25 Hosting Committee - Our Purpose Addresses Issues with Cloud Storage Security, Identifying and Removing Illegitimate Accounts, Protecting Hosting Servers Against DoS and Other Attacks Why M 3 AAWG for Hosting Works M 3 AAWG Members Experts in Spam, Phishing, Malware Areas of Urgent Concern to the Hosting Community Brings Together Needed Resources Blocklisting Groups Security Researchers Identifying Upcoming Threats Colleagues Who Have Dealt with Threats Collaborate with Others Working on Similar Problems Avoid Costly Trial and Error Implement More Effective Anti-Abuse Measures
26 Up And Coming Threats The Cloud
27 Cloud Hosting Cloud Technology has dramatically changed the landscape for Hosting Companies. While the Virtual Hosting Environment has dramatically increased the services Hosts can offer their clients, it is also bringing with it new types of abuse. With the Cloud, a server can easily be spun up in minutes, be provisioned and online ready to go to work.
28 Abuse in The Cloud We have already started to see some of the possible abuse scenarios, Targeted Phishing or Spam Campaigns that are up for a relatively short time, then the server is deleted and gone from a Host's system. Currently we are in the process of updating the BCP to reflect the issue we are just discovering that affect the cloud. Working with Abuse Reporters and Hosting Providers we are trying to address the new abuse vectors.
29 How The Process Works By Bringing Reporters and Providers together we are able to create a realistic picture of the problem and formulate an acceptable response. Usually neither side gets everything they want, however they usually get what they need. When looking at the problem of overall response time to abuse reports by Hosting Companies. We have tried to come at the problem from multiple sides. Currently we have two initiatives that are addressing this.
30 What you could Normally see. Reporter: Hosting Companies are just ignoring my reports. It has been three days and the problem is still up. Host: Today I only have 3,000 new abuse reports! And none of them are in the same format! Both groups have legitimate problems. Working together we try to address these issues and create real solutions.
31 Exploring Solutions Report Format for Inbound Phishing Reporting (LARTS) A Policy Paper on Formatting Proper Complaint Submissions Pilot to Improve the Effectiveness and Actionability of Exploit Reports Jointly with M 3 AAWG Brand SIG These projects are designed to improve response time for both sides. By having standard reporting formats it opens the possibilities for Hosting Companies to automate many types of reports. Dedicated trusted reporters allows Hosts to respond faster with a greater degree of trust.
32 Hosting Committee Ongoing and Future Work Expanding our Current BCP with regards to Cloud Hosting. DNS Provider Best Practices Phase Two of Our Best Practices Work Port 25 for Hosting Companies Possible Policy Paper Report Format for Inbound Phishing Reporting (LARTS) A Policy Paper on Formatting Proper Complaint Submissions Pilot to Improve the Effectiveness and Actionability of Exploit Reports Jointly with M 3 AAWG Brand SIG
33 A Few Published M 3 AAWG Papers: M 3 AAWG/LAP Operation Safety-Net Global Best Practices Mobile Messaging Best Practices for Service Providers Anti-Abuse BCPs for Hosting & Cloud Service Providers TLS for Mail: M 3 AAWG Recommendations Benefits and Deployment of Telephony Honeypots Position on Appending Anti-Phishing Best Practices for ISPs and Mailbox Providers (updated) Mitigating Abuse of Web Messaging Systems Complaint Feedback Loop Best Current Practices Overview of DNS Security - Port 53 Protection Mitigating Large Scale Bot Infections in Residential Networks Use of a Walled Garden (Chinese, French, Spanish Translations) Managing Port 25 (French, German Translations)
34 Hosting Videos See Hosting Playlist on M 3 AAWG YouTube Channel Outlining Hosting Best Practices Improving Your Business with the M 3 AAWG Anti-Abuse Best Common Practices for Hosting and Cloud Service Providers Value of M 3 AAWG to Hosting Companies How the M 3 AAWG Hosting SIG Can Help You; Fighting Spam, Phishing, Malware and Emerging Threats
35 M3AAWG MEETINGS For More information please contact: Fabricio Pessoa Graciela Martinez Meeting Schedule
Anti-Phishing Best Practices for ISPs and Mailbox Providers
Anti-Phishing Best Practices for ISPs and Mailbox Providers Version 2.01, June 2015 A document jointly produced by the Messaging, Malware and Mobile Anti-Abuse Working Group (M 3 AAWG) and the Anti-Phishing
Fraud and Abuse Policy
Fraud and Abuse Policy 2015 FRAUD AND ABUSE POLICY 2015 1 Contents 4. Introduction 6. Policy Goal 7. Combatting Customer Fraud and Abuse 8. Reporting Breaches 9. How Alleged Breaches Will Be Investigated
Why Spamhaus is Your Best Approach to Fighting Spam
Page 1 of 10 Executive Summary The spam problem is evolving and while overall spam volumes are down, the problems are getting worse. No longer just a nuisance wasting resources and time, spam is now a
The Growing Problem of Outbound Spam
y The Growing Problem of Outbound Spam An Osterman Research Survey Report Published June 2010 SPONSORED BY! #$!#%&'()*(!!!!"#$!#%&'()*( Osterman Research, Inc. P.O. Box 1058 Black Diamond, Washington 98010-1058
FIRST WORKING DRAFT FOR PUBLIC COMMENT. StopBadware s Best Practices for Web Hosting Providers: Responding to Malware Reports.
StopBadware s Best Practices for Web Hosting Providers: Responding to Malware Reports Introduction Malware poses a serious threat to the open Internet; a large and growing share of malware is distributed
Evaluating DMARC Effectiveness for the Financial Services Industry
Evaluating DMARC Effectiveness for the Financial Services Industry by Robert Holmes General Manager, Email Fraud Protection Return Path Executive Summary Email spoofing steadily increases annually. DMARC
Cyber Security. An Executive Imperative for Business Owners. 77 Westport Plaza, St. Louis, MO 63416 p 314.439.4700 f 314.439.4799
Cyber Security An Executive Imperative for Business Owners SSE Network Services www.ssenetwork.com 77 Westport Plaza, St. Louis, MO 63416 p 314.439.4700 f 314.439.4799 Pretecht SM by SSE predicts and remedies
4 Messaging Technology
4 Messaging Technology Previously this was published as the Email Technical Report. From this volume we have changed the name to Messaging Technology. Messaging Technology 4.1 Introduction Messaging Technology
Man, Machine and DDoS Mitigation
Man, Machine and DDoS Mitigation The case for human cyber security expertise Automated DDoS mitigation poses risks Distributed denial of service (DDoS) attacks can overwhelm DDoS appliances Today s DDoS
User Documentation Web Traffic Security. University of Stavanger
User Documentation Web Traffic Security University of Stavanger Table of content User Documentation... 1 Web Traffic Security... 1 University of Stavanger... 1 UiS Web Traffic Security... 3 Background...
Imperva Cloud WAF. How to Protect Your Website from Hackers. Hackers. *Bots. Legitimate. Your Websites. Scrapers. Comment Spammers
How to Protect Your from Hackers Web attacks are the greatest threat facing organizations today. In the last year, Web attacks have brought down businesses of all sizes and resulted in massive-scale data
Anti-Spam Measures Survey 2009. Pascal Manzano ENISA
Anti-Spam Measures Survey 2009 Pascal Manzano ENISA Do you remember what happen on June 25 th? Methodology Online questionnaire open from May until July 2009 Questionnaire used providers best practices
Doyourwebsitebot defensesaddressthe changingthreat landscape?
WHITEPAPER Doyourwebsitebot defensesaddressthe changingthreat landscape? Don tletbotsturnaminorincident intoamegasecuritybreach 1.866.423.0606 Executive Summary The website security threat landscape has
How Traditional Firewalls Fail Today s Networks And Why Next-Generation Firewalls Will Prevail
How Fail Today s Networks And Why Will Prevail Why your current firewall may be jeopardizing your security, and how you can counter today s threats, manage web 2.0 apps and enforce acceptable-use policies.
Panda Cloud Email Protection
Panda Cloud Email Protection 1. Introduction a) What is spam? Spam is the term used to describe unsolicited messages or messages sent from unknown senders. They are usually sent in large (even massive)
How To Ensure Your Email Is Delivered
Everything You Need to Know About Delivering Email through Your Web Application SECTION 1 The Most Important Fact about Email: Delivery is Never Guaranteed Email is the backbone of the social web, making
Post-Send Vetting Techniques... 6 Methodology... 6
Messaging Anti-Abuse Working Group (MAAWG) Vetting Best Common Practices (BCP) November 2011 Introduction... 1 Why Vet?... 2 Pre-Send Vetting Techniques... 2 Corporate Entity Formation and History... 2
www.pandasecurity.com 100% Malware-Free E-mail: A Guaranteed Approach
100% Malware-Free E-mail: A Guaranteed Approach 2 100% Malware-Free E-mail: A Guaranteed Approach Panda Security's Mail Filtering Managed Service Guarantees Clean E-mail Table of Contents Table of Contents...
Security from the Cloud
Security from the Cloud Remote Vulnerability Scanning Writer: Peter Technical Review: David Contact: info@hackertarget.com Published: April 2008 Summary: This white paper describes advantages of using
WHITEPAPER. SendGrid Deliverability Guide V2. Everything You Need to Know About Delivering Email through Your Web Application
WHITEPAPER SendGrid Deliverability Guide V2 Everything You Need to Know About Delivering Email through Your Web Application The Most Important Fact about Email: Delivery is Never Guaranteed Email is the
KASPERSKY SECURITY INTELLIGENCE SERVICES. EXPERT SERVICES. www.kaspersky.com
KASPERSKY SECURITY INTELLIGENCE SERVICES. EXPERT SERVICES www.kaspersky.com EXPERT SERVICES Expert Services from Kaspersky Lab are exactly that the services of our in-house experts, many of them global
Advanced Persistent. From FUD to Facts. A Websense Brief By Patrick Murray, Senior Director of Product Management
A Websense Brief By Patrick Murray, Senior Director of Product Management Advanced Persistent Threats: From FUD to Facts With Websense, you can stay a step ahead of the threats. From our roots in web filtering,
Introducing IBM s Advanced Threat Protection Platform
Introducing IBM s Advanced Threat Protection Platform Introducing IBM s Extensible Approach to Threat Prevention Paul Kaspian Senior Product Marketing Manager IBM Security Systems 1 IBM NDA 2012 Only IBM
A Small Business Approach to Big Business Cyber Security. Brent Bettis, CISSP 23 September, 2014
A Small Business Approach to Big Business Cyber Security Brent Bettis, CISSP 23 September, 2014 1 First, a Video http://www.youtube.com/watch?v=cj8wakqwlna 2 3 Agenda Threat Landscape Strategic Initiatives
Protection against DDoS and WEB attacks. Michael Soukonnik Radware Ltd michaels@radware.com
Protection against DDoS and WEB attacks Michael Soukonnik Radware Ltd michaels@radware.com Landscape Ponemon Research 2012: Cyber security threats Cyber security threats according to risk mitigation priority
Microsoft s cybersecurity commitment
Microsoft s cybersecurity commitment Published January 2015 At Microsoft, we take the security and privacy of our customers data seriously. This focus has been core to our culture for more than a decade
Content Security: Protect Your Network with Five Must-Haves
White Paper Content Security: Protect Your Network with Five Must-Haves What You Will Learn The continually evolving threat landscape is what makes the discovery of threats more relevant than defense as
Security workshop Protection against botnets. Belnet Aris Adamantiadis Brussels 18 th April 2013
Security workshop Belnet Aris Adamantiadis Brussels 18 th April 2013 Agenda What is a botnet? Symptoms How does it work? Life cycle How to fight against botnets? Proactive and reactive NIDS 2 What is a
Global Network Pandemic The Silent Threat Darren Grabowski, Manager NTT America Global IP Network Security & Abuse Team
Global Network Pandemic The Silent Threat Darren Grabowski, Manager NTT America Global IP Network Security & Abuse Team The Internet is in the midst of a global network pandemic. Millions of computers
POLIWALL: AHEAD OF THE FIREWALL
POLIWALL: AHEAD OF THE FIREWALL FIREWALL HISTORY Since the earliest days of the Internet, when hackers sat in their darkened basements dialing into networks with dial-up modems, both network threats and
Who s Doing the Hacking?
Who s Doing the Hacking? 1 HACKTIVISTS Although the term hacktivist refers to cyber attacks conducted in the name of political activism, this segment of the cyber threat spectrum covers everything from
POLIWALL: AHEAD OF THE FIREWALL
POLIWALL: AHEAD OF THE FIREWALL FIREWALL HISTORY Since the earliest days of the Internet, when hackers sat in their darkened basements dialing into networks with dial-up modems, both network threats and
The Importance of a Multistakeholder Approach to Cybersecurity Effectiveness
The Importance of a Multistakeholder Approach to Cybersecurity Effectiveness Abstract Area: ROADMAP FOR THE FURTHER EVOLUTION OF THE INTERNET GOVERNANCE ECOSYSTEM Entitled by: Cristine Hoepers, Klaus Steding-Jessen,
Why Your Business Needs a Website: Ten Reasons. Contact Us: 727.542.3592 Info@intensiveonlinemarketers.com
Why Your Business Needs a Website: Ten Reasons Contact Us: 727.542.3592 Info@intensiveonlinemarketers.com Reason 1: Does Your Competition Have a Website? As the owner of a small business, you understand
Balancing Cloud-Based Email Benefits With Security. White Paper
Balancing Cloud-Based Email Benefits With Security White Paper Balancing Cloud-Based Email Benefits With Security Balancing Cloud-Based Email Benefits With Security CONTENTS Trouble Spots in Cloud Email
Availability Digest. www.availabilitydigest.com. Prolexic a DDoS Mitigation Service Provider April 2013
the Availability Digest Prolexic a DDoS Mitigation Service Provider April 2013 Prolexic (www.prolexic.com) is a firm that focuses solely on mitigating Distributed Denial of Service (DDoS) attacks. Headquartered
Promoting Network Security (A Service Provider Perspective)
Promoting Network Security (A Service Provider Perspective) Prevention is the Foundation H S Gupta DGM (Technical) Data Networks, BSNL hsgupta@bsnl.co.in DNW, BSNL 1 Agenda Importance of Network Security
Before the. Committee on Energy and Commerce Subcommittee on Communications and Technology United States House of Representatives
Testimony of Fiona M. Alexander Associate Administrator, Office of International Affairs National Telecommunications and Information Administration United States Department of Commerce Before the Committee
Nine Steps to Smart Security for Small Businesses
Nine Steps to Smart Security for Small Businesses by David Lacey Co-Founder, Jericho Forum Courtesy of TABLE OF CONTENTS INTRODUCTION... 1 WHY SHOULD I BOTHER?... 1 AREN T FIREWALLS AND ANTI-VIRUS ENOUGH?...
SSDP REFLECTION DDOS ATTACKS
TLP: AMBER GSI ID: 1079 SSDP REFLECTION DDOS ATTACKS RISK FACTOR - HIGH 1.1 OVERVIEW / PLXsert has observed the use of a new reflection and amplification distributed denial of service (DDoS) attack that
Cisco Cloud Email Security Interoperability with Microsoft Office 365
White Paper Cisco Cloud Email Security Interoperability with Microsoft Office 365 We ve all been witness to the cloud evolution and the technologies that have been driven by moving operations and resources
Top 10 Tips to Keep Your Small Business Safe
Securing Your Web World Top 10 Tips to Keep Your Small Business Safe Protecting your business against the latest Web threats has become an incredibly complicated task. The consequences of external attacks,
Email Migration Project Plan for Cisco Cloud Email Security
Sales Tool Email Migration Project Plan for Cisco Cloud Email Security 2014 Cisco and/or its affiliates. All rights reserv ed. This document is Cisco Conf idential. For Channel Partner use only. Not f
Email Security Guide
Email Security Guide Introduction No organization can afford to operate without an email security strategy. The risk landscape is constantly changing with new threats surfacing every day. This white paper
WEBTHREATS. Constantly Evolving Web Threats Require Revolutionary Security. Securing Your Web World
Securing Your Web World WEBTHREATS Constantly Evolving Web Threats Require Revolutionary Security ANTI-SPYWARE ANTI-SPAM WEB REPUTATION ANTI-PHISHING WEB FILTERING Web Threats Are Serious Business Your
Practical guide for secure Christmas shopping. Navid
Practical guide for secure Christmas shopping Navid 1 CONTENTS 1. Introduction 3 2. Internet risks: Threats to secure transactions 3 3. What criteria should a secure e-commerce page meet?...4 4. What security
DDoS Attacks Can Take Down Your Online Services
DDoS Attacks Can Take Down Your Online Services Dr. Bill Highleyman Managing Editor, Availability Digest Continuity Insights New York 2014 October 8, 2014 editor@availabilitydigest.com Who Am I? Dr. Bill
How To Protect Yourself From A Dos/Ddos Attack
RELEVANT. INTELLIGENT. SECURITY White Paper In Denial?...Follow Seven Steps for Better DoS and DDoS Protection www.solutionary.com (866) 333-2133 In Denial?...Follow Seven Steps for Better DoS and DDoS
Commtouch RPD Technology. Network Based Protection Against Email-Borne Threats
Network Based Protection Against Email-Borne Threats Fighting Spam, Phishing and Malware Spam, phishing and email-borne malware such as viruses and worms are most often released in large quantities in
security changes with Orange focus on your business, we focus on your security
security changes with Orange focus on your business, we focus on your security the only constant in security is change New uses and new technologies, proliferation of platforms and new workspaces in a
Securing Cloud-Based Email
White Paper Securing Cloud-Based Email A Guide for Government Agencies White Paper Contents Executive Summary 3 Introduction 3 The Risks Posed to Agencies Running Email in the Cloud 4 How FireEye Secures
ZNetLive Malware Monitoring
Introduction The criminal ways of distributing malware or malicious software online have gone through a change in past years. In place of using USB drives, attachments or disks to distribute viruses, hackers
European developer & provider ensuring data protection User console: Simile Fingerprint Filter Policies and content filtering rules
Cloud Email Firewall Maximum email availability and protection against phishing and advanced threats. If the company email is not protected then the information is not safe Cloud Email Firewall is a solution
Best Practices Top 10: Keep your e-marketing safe from threats
Best Practices Top 10: Keep your e-marketing safe from threats Months of work on a marketing campaign can go down the drain in a matter of minutes thanks to an unforeseen vulnerability on your campaign
THE DMARC GUIDE. Understanding DMARC for Securing Email
THE DMARC GUIDE Understanding DMARC for Securing Email The History - Introduction Email despite its importance, ubiquity, and staying power has never been secure. Prior attempts at security have failed
PineApp Anti IP Blacklisting
PineApp Anti IP Blacklisting Whitepaper 2011 Overview ISPs outbound SMTP Services Individual SMTP relay, not server based (no specific protection solutions are stated between the sender and the ISP backbone)
DNS Changer Remediation Study
DNS Changer Remediation Study The following study was presented by Georgia Tech researchers at the M 3 AAWG 27 th General Meeting February 19, 2013, San Francisco M 3 AAWG Messaging, Malware and Mobile
HOW TO PREVENT SPAM AND MALWARE IN MAIL MOST EFFECTIVELY Index 1. Battling the increase in malware 2 2. Addressing the surplus of spam 3 3. The mail server A critical vulnerability 4 3.1 Denial of Service
FBI CHALLENGES IN A CYBER-BASED WORLD
FBI CHALLENGES IN A CYBER-BASED WORLD Federal Bureau of Investigation Assistant General Counsel Robert Bergida 202-651-3209 Overview Cyber Threats FBI Mission FBI Response Terrorism remains the FBI s top
Symantec Cyber Threat Analysis Program Program Overview. Symantec Cyber Threat Analysis Program Team
Symantec Cyber Threat Analysis Program Symantec Cyber Threat Analysis Program Team White Paper: Symantec Security Intelligence Services Symantec Cyber Threat Analysis Program Contents Overview...............................................................................................
INTRODUCTION DEVELOPMENT AND PHENOMENA
INTRODUCTION DEVELOPMENT AND PHENOMENA ITU, ICB4PAC 02.03.2011, Vanuatu Prof. Dr. Marco Gercke, Director Cybercrime Research Institute Cybercrime Page: 1 GENERAL INTRODUCTION Cybercrime Seite: 2 CYBERCRIME
M 3 AAWG Compromised User ID Best Practices
Messaging, Malware and Mobile Anti-Abuse Working Group M 3 AAWG Compromised User ID Best Practices Table of Contents 1. Executive Summary... 1 2. Scope of this Document... 2 3. Definitions... 2 4. How
Email deliverability: The good, the bad and the ugly
Email deliverability: The good, the bad and the ugly An Experian Data Quality White Paper March 2015 CONTENTS Introduction...1 The good...2 Open rate...2 Click-through rate...3 Authentication...4 The bad...4
eprism Email Security Appliance 6.0 Intercept Anti-Spam Quick Start Guide
eprism Email Security Appliance 6.0 Intercept Anti-Spam Quick Start Guide This guide is designed to help the administrator configure the eprism Intercept Anti-Spam engine to provide a strong spam protection
Manage the unexpected
Manage the unexpected Navigate risks and thrive Today s business world is threatened by a multitude of online security risks. But many organizations simply do not have the resources or expertise to combat
GlobalSign Malware Monitoring
GLOBALSIGN WHITE PAPER GlobalSign Malware Monitoring Protecting your website from distributing hidden malware GLOBALSIGN WHITE PAPER www.globalsign.com CONTENTS Introduction... 2 Malware Monitoring...
Course 4202: Fraud Awareness and Cyber Security Workshop (3 days)
Course introduction It is vital to ensure that your business is protected against the threats of fraud and cyber crime and that operational risk processes are in place. This three-day course provides an
Whitepaper on AuthShield Two Factor Authentication and Access integration with Microsoft outlook using any Mail Exchange Servers
Whitepaper on AuthShield Two Factor Authentication and Access integration with Microsoft outlook using any Mail Exchange Servers By INNEFU Labs Pvt. Ltd Table of Contents 1. Overview... 3 2. Threats to
White Paper. Intelligent DDoS Protection Use cases for applying DDoS Intelligence to improve preparation, detection and mitigation
White Paper Intelligent DDoS Protection Use cases for applying DDoS Intelligence to improve preparation, detection and mitigation Table of Contents Introduction... 3 Common DDoS Mitigation Measures...
Complete Website Security
Symantec TM Complete Website Security Symantec is the world s leading provider of Internet trust, authentication and security solutions. Symantec TM Complete Website Security offers you SSL management
When Reputation is Not Enough. Barracuda Email Security Gateway s Predictive Sender Profiling. White Paper
When Reputation is Not Enough Barracuda Email Security Gateway s Predictive Sender Profiling White Paper As spam continues to evolve, Barracuda Networks remains committed to providing the highest level
white paper Malware Security and the Bottom Line
Malware Security Report: Protecting Your BusineSS, Customers, and the Bottom Line Contents 1 Malware is crawling onto web sites everywhere 1 What is Malware? 2 The anatomy of Malware attacks 3 The Malware
Tahoe Tech Group serves as your technology partner with a focus on providing cost effective and long term solutions.
Tahoe Tech Group LLC Cyber Security Briefing Truckee Donner Chamber of Commerce March 6, 2015 Tahoe Tech Group serves as your technology partner with a focus on providing cost effective and long term solutions.
This session was presented by Jim Stickley of TraceSecurity on Wednesday, October 23 rd at the Cyber Security Summit.
The hidden risks of mobile applications This session was presented by Jim Stickley of TraceSecurity on Wednesday, October 23 rd at the Cyber Security Summit. To learn more about TraceSecurity visit www.tracesecurity.com
ENISA s Study on the Evolving Threat Landscape. European Network and Information Security Agency
ENISA s Study on the Evolving Threat Landscape European Network and Information Security Agency Agenda Introduction to ENISA Preliminary remarks The ENISA report Major findings Conclusions 2 ENISA The
Securing Your Business with DNS Servers That Protect Themselves
Product Summary: The Infoblox Secure DNS Solution mitigates attacks on DNS servers by intelligently recognizing various attack types and dropping attack traffic while responding only to legitimate queries.
Malware & Botnets. Botnets
- 2 - Malware & Botnets The Internet is a powerful and useful tool, but in the same way that you shouldn t drive without buckling your seat belt or ride a bike without a helmet, you shouldn t venture online
AVG AntiVirus. How does this benefit you?
AVG AntiVirus Award-winning antivirus protection detects, blocks, and removes viruses and malware from your company s PCs and servers. And like all of our cloud services, there are no license numbers to
The What, Why, and How of Email Authentication
The What, Why, and How of Email Authentication by Ellen Siegel: Director of Technology and Standards, Constant Contact There has been much discussion lately in the media, in blogs, and at trade conferences
Spear Phishing Attacks Why They are Successful and How to Stop Them
White Paper Spear Phishing Attacks Why They are Successful and How to Stop Them Combating the Attack of Choice for Cybercriminals White Paper Contents Executive Summary 3 Introduction: The Rise of Spear
Trend Micro Hosted Email Security Stop Spam. Save Time.
Trend Micro Hosted Email Security Stop Spam. Save Time. How Hosted Email Security Inbound Filtering Adds Value to Your Existing Environment A Trend Micro White Paper l March 2010 1 Table of Contents Introduction...3
11 emerging. trends for DIGITAL MARKETING FINANCIAL SERVICES. By Clifford Blodgett. Demand Generation and Digital Marketing Manager
11 emerging DIGITAL MARKETING trends for FINANCIAL SERVICES By Clifford Blodgett Demand Generation and Digital Marketing Manager Exploiting your Technology Vendors Customer Engagement and Maintaining a
The business case for managed next generation firewalls. Six reasons why IT decision makers should sit up and take notice
The business case for managed next generation firewalls Six reasons why IT decision makers should sit up and take notice THREATWATCH Cyber threats cost the UK economy 27 billion pounds a year 92 percent
Protect your brand from phishing emails by implementing DMARC 1
Protect your brand from phishing emails by implementing DMARC 1 Message from the Certified Senders Alliance supported by AOL, Microsoft and Google In the following article we want to clarify why marketers
e-shot Unique Deliverability
e-shot Unique Deliverability Email Deliverability What is Email Deliverability? Email deliverability s aim is to maximise the number of email messages that reach the intended recipients inboxes. It is
Smart Network Data Services Windows Live & MSN Hotmail Postmaster Services
Smart Network Data Services Windows Live & MSN Hotmail Postmaster Services Eliot Gillum Development Manager, Hotmail and Windows Live Mail NANOG 37 June 7, 2006 Agenda Postmaster Services SNDS Problem
A Practitioner's Guide to Spam Traps
A Practitioner's Guide to Spam Traps Don t wait for it to happen to understand the risks and implications Ken Magill, The Magill Report Austin Bliss, FreshAddress Sal Tripi, Publishers Clearing House Sam
DDoS Attacks: The Latest Threat to Availability. Dr. Bill Highleyman Managing Editor Availability Digest
DDoS Attacks: The Latest Threat to Availability Dr. Bill Highleyman Managing Editor Availability Digest The Anatomy of a DDoS Attack Sombers Associates, Inc. 2013 2 What is a Distributed Denial of Service
Stop advanced targeted attacks, identify high risk users and control Insider Threats
TRITON AP-EMAIL Stop advanced targeted attacks, identify high risk users and control Insider Threats From socially engineered lures to targeted phishing, most large cyberattacks begin with email. As these
ADDING NETWORK INTELLIGENCE TO VULNERABILITY MANAGEMENT
ADDING NETWORK INTELLIGENCE INTRODUCTION Vulnerability management is crucial to network security. Not only are known vulnerabilities propagating dramatically, but so is their severity and complexity. Organizations
SECURITY REIMAGINED SPEAR PHISHING ATTACKS WHY THEY ARE SUCCESSFUL AND HOW TO STOP THEM. Why Automated Analysis Tools are not Created Equal
WHITE PAPER SPEAR PHISHING ATTACKS WHY THEY ARE SUCCESSFUL AND HOW TO STOP THEM Why Automated Analysis Tools are not Created Equal SECURITY REIMAGINED CONTENTS Executive Summary...3 Introduction: The Rise
Threat Intelligence UPDATE: Cymru EIS Report. www.team- cymru.com
Threat Intelligence Group UPDATE UPDATE: SOHO Pharming A Team Cymru EIS Report Powered Page by T1eam Threat Intelligence Group of 5 C ymru s This is an update on the SOHO Pharming case we published a little
E-MAIL FILTERING FAQ
V8.3 E-MAIL FILTERING FAQ COLTON.COM Why? Why are we switching from Postini? The Postini product and service was acquired by Google in 2007. In 2011 Google announced it would discontinue Postini. Replacement:
isheriff CLOUD SECURITY
isheriff CLOUD SECURITY isheriff is the industry s first cloud-based security platform: providing fully integrated endpoint, Web and email security, delivered through a single Web-based management console
Comprehensive Anti-Spam Service
Comprehensive Anti-Spam Service Chapter 1: Document Scope This document describes how to implement and manage the Comprehensive Anti-Spam Service. This document contains the following sections: Comprehensive
Before the House Committee on the Judiciary Subcommittee on Crime, Terrorism, and Homeland Security United States House of Representatives
Before the House Committee on the Judiciary Subcommittee on Crime, Terrorism, and Homeland Security United States House of Representatives Online Pharmacies And The Problem of Internet Drug Abuse Statement
EMERGING THREATS & STRATEGIES FOR DEFENSE. Stephen Coty Chief Security Evangelist @StephenCoty
EMERGING THREATS & STRATEGIES FOR DEFENSE Stephen Coty Chief Security Evangelist @StephenCoty Industry Analysis 2014 Data Breaches - Ponemon Ponemon 2014 Data Breach Report *Statistics from 2013 Verizon
Email Correlation and Phishing
A Trend Micro Research Paper Email Correlation and Phishing How Big Data Analytics Identifies Malicious Messages RungChi Chen Contents Introduction... 3 Phishing in 2013... 3 The State of Email Authentication...
Malware Monitoring Service Powered by StopTheHacker
Technical Resources Malware Monitoring Service Powered by StopTheHacker StopTheHacker Dashboard User Guide End User Version CONTENTS Introduction... 3 Account Activation... 3 How to Log into Your Account...
The Increasing Risks from Email
The Increasing Risks from Email ABSTRACT With organisations now facing a growing number of security threats and an increasingly regulated and compliance driven business environment, ensuring security and