Trend Micro A World Safe for Exchanging Digital Information

Transcription

1 Trend Micro A World Safe for Exchanging Digital Information Kimmo Vesajoki, Country Manager Copyright 2014 Trend Micro Inc.

2 Trend Micro 26 years focused on security software, now largest pure-play Consistent A World Safe for Exchanging Digital Information Headquartered in Japan, Tokyo Exchange Nikkei Index (4704) 8 consecutive years on Dow Jones Sustainability Indexes Customers include 48 of top 50 global corporations employees, 38 business units worldwide Enterprise Midsize Business 500k commercial customers & 155M endpoints protected Consumers r Small Business 2

3 Global Risks Landscape

4

5 DATA BREACH 70M RECORDS 2013 PROFITS DOWN 34% HUNDREDS OF CIVIL LAWSUITS TOTAL COST $1B CIO RESIGNATION MARCH 14 CEO RESIGNATION MAY 14

6 Cost of an Incident Direct costs: Investigation of an incident using external professionals averages 100k Labor costs for own personnel (ppl x time x salary) Indirect costs: Probability x Cost = Expected Moneraty Value of Incident If probability for incident is 1% and cost of incident is X, then expected monetary value of incident is X * 1% Some avegares to help in risk calculation: Average cost for data breach is calculated to be $1,6 - $1,8 million USD Average size of data breach is 100'000 stolen records

7 Today s Attacks: Social, Sophisticated, Stealthy! Gathers intelligence about organization and individuals Targets individuals using social engineering Attackers Establishes link to Command & Control server Extracts data of interest can go undetected for months! Moves laterally across network seeking valuable data Employ ees

8 Menu for Full Service Hacking monthly onetime Malware Checking $30 $50 Botnet Framework $40 $125 Bulletproof Hosting $52 $0 Exploit Kit $38 $120 DDOS Attack for 24 Hours $70 $205 Dropper File and Crypt $8 $80 Modules Total: $238 $600

9 You May Already Have Next-Gen Firewall Intrusion Detection (IDS) Intrusion Prevention (IPS) Known threats Traditional AV /Web Gateways Existing security is focused on known threats & signatures

10 But that May Not Be Enough Advanced reconnaissance Spear-phishing s Embedded payloads Unknown malware & exploits Dynamic command and control (C&C) servers BYOD and remote employees create a broad attack surface Next-Gen Firewall Intrusion Detection (IDS) Intrusion Prevention (IPS) Traditional AV /Web Gateways Advanced methods can evade traditional defenses

11 BYOD, Shadow IT & Phishing compromising organizations information security 91% targeted attacks begin with spear-phishing 1 4 million malicious and high-risk Android apps 2 1 in 5 use Dropbox at work, 3 used in 97% of Fortune 500 1: Trend Micro: Spear Phishing Most Favored APT Attack Bait, Nov : Trend Micro Annual Report 2014, Feb : Global survey of 1300 enterprise customers; Shadow IT in the Enterprise, Nasuni, Sept 2012

12 Cyber Threats Attackers Consumerization Cloud & Virtualization Employees IT

13 Cyber Threats Attackers Consumerization Cloud & Virtualization Employees IT

14 CENTRALIZED VISIBILITY & CONTROL

15 GLOBAL SENSOR NETWORK Collects More Information in More Places Hundreds of millions of sensors 16 billion threat queries daily GLOBAL THREAT INTELLIGENCE Accurately Analyzes & Identifies Threats Faster Identifies new threats 50x faster than average (NSS Labs) PROACTIVE PROTECTION Blocks Real-World Threats Sooner 250M threats blocked daily 500k new threats identified per day Copyright 2014 Trend Micro Inc. Source: All values from Trend Micro Smart Protection Network statistics, July 2014

16

17 Confidential Copyright 2013 Trend Micro Inc.

18 Confidential Copyright 2013 Trend Micro Inc.

19 Confidential Copyright 2013 Trend Micro Inc.

20 Risk Management Recommendations 1. Conduct Pen test of all third parties. 2. Use Two-factor authentication. 3. Utilize a host based intrusion prevention system. 4. Deploy file integrity monitoring. 5. Implement virtual shielding for zero day exploits. 6. Deploy both an MDM and Mobile Application Reputation software. 7. Deploy Sandbox Cloud Apps. 8. Implement whitelisting. 9. Manage the crypto keys for your cloud data. 10. Web Application Security (OWASP). 11. Deploy context aware Threat Intelligence. 12. Utilize a Breach Detection System.

21

22 CENTRALIZED VISIBILITY & CONTROL

23 Market leadership A Leader in the MQ for Endpoint Protection 13 consecutive years #1 in protection and performance Magic Quadrant for Endpoint Protection Platforms, Gartner, January (Aug Sept 2014 Real World Protection test) (Sept 2013 Feb 2014 test results) Copyright 2014 Trend Micro Inc. IDC, Worldwide Endpoint Security Forecast and 2013 Vendor Shares, August 2014 experton Group, Cloud Vendor Benchmark, June NSS Labs Breach Detection Tests Best new product of the year at Network computing awards 2013

24 A world safe for exchanging digital information The world s largest pure-play security software company Founded Headquarters 2013 Sales Customers 1988, United States Tokyo, Japan $1.1B USD 500,000 businesses, Millions of consumers Employees in 50+ Countries 96% of the top 50 global corporations. Copyright 2014 Trend Micro Inc. 100% of the top 10 automotive companies. 100% of the top 10 telecom companies. 80% of the top 10 banks. 90% of the top 10 oil companies. 24

25 Questions?

26 Thank you!