WAN security threat landscape and best mitigation practices. Rex Stover Vice President, Americas, Enterprise & ICP Sales

Transcription

1 WAN security threat landscape and best mitigation practices. Rex Stover Vice President, Americas, Enterprise & ICP Sales

2 The Cost of Cybercrime Sony $171m PlayStation 3 data breach (April 2011) $3 trillion Cybercrime Cost Source: ISACA Global Payments RSA $94m $66m 1.5 million credit card records stolen (April 2012) SecureID intellectual property breach (March 2011) Target $61m 40 million credit and debit cards stolen (December 2013) $67 billion Annual Security Investments Source: Gartner State of South Carolina LinkedIn $14m $0.5 - $1.0m 1.9 million Social Security numbers stolen (October 2012) 6 million passwords stolen (June 2012) 2

3 An Increasingly Sophisticated Landscape 42.8M Security incidents increased by 48%, to 42.8 million, the equivalent of 120,000 attacks a day. The average cost of managing and mitigating data breaches rose to $2.7m per incident, over a third more than in Attacks are more frequent, sophisticated, and damaging to an enterprise Price Waterhouse Coopers Global State of Information Security Survey

4 Organisations must assume they are compromised, and, therefore, invest in detective capabilities that provide continuous monitoring for patterns and behaviours indicative of malicious intent. Malware Is Already Inside Your Organisation; Deal With It Gartner 2014 The Need for a New Approach At Risk: Revenue Reputation Profitability Long-Term Trust 4

5 Network Threat Intelligence Network threats may be categorized as: Threats you know about. Threats you don t know about. Threats you only find out about after a compromise. Most security services rely on recognizing known threats rather than new or constantly changing threats. Our Threat Management Service continuously scans for threats in real-time, self-learns, and provides actionable threat identification. It is designed to identify known, unknown and even threats that have compromised your security but have yet to do harm to your organization 5

6 Mining data that is already available in your network can provide real-time intelligence for advanced threat mitigation Harvesting data from existing network elements: Routers Firewalls Next Generation Firewalls Web Proxy Unified Threat Management Advance Persistent Threat Secure Web Gateways Intrusion Prevention System/ Intrusion Prevention Detection Distributed Denial Of Service 6

7 The Need for a New Layer of Network Defense Responsive security - Moving from Prevention to Detection Unified Threat Management, Next Generation Firewalls, Secure Web Gateways, Intrusion Detection Systems, Intrusion Prevention Systems Web Application Firewall, Denial of Service, etc. Network & Application Security Risk & Compliance Tools Vulnerability Assessment Security Information and Event Management, etc. A new layer of defense, complementing existing ones and maximizing value of logs already generated & collected Non-intrusive and an OS independent solution for rapid deployment Threat aggregation and behavioral analysis identifies threats in their infancy Real-time mitigation recommendations Expands the visibility of existing security systems and hardware Expands the lifespan of existing security solutions, driving cost efficiency 7

8 What Does MOREAL Deliver? Access advance analytics and actionable reports via a single intuitive dashboard View network health, utilization & security in real-time MOREAL gives you a complete view of your network health and security to identify existing and emerging threats in real-time. It has been designed to self-learn and leverage a continually evolving global threat database Leverage a global threat database that uses Big Data and crowdsourcing to identify emerging threats Use an advance correlation engines for known & unknown threats identification, now penetrating and already existing in your network Deploy enhanced security simply and quickly via pure cloud solution with hybrid options available. Pay as you grow subscription with low total cost of ownership 8

9 5 Steps to Recognizing Cyber Attack Patterns 1 MOREAL continuously receives logs from customer Network Elements. Customer MOREAL 2 MOREAL correlates the logs between Network Elements to get a big picture of all network activity. Network Elements Logs 3 MOREAL checks network activity behavior with external threat intelligence and identifies threats. MOREAL Threat Intelligence Platform 4 MOREAL advises customer of threat and recommended remedial action. Threat Alerts 5 MOREAL provides SINGLE SCREEN consolidated view of all network threats. All flows in real time All this happens in REAL TIME 9

10 Dynamic external threat search & aggregation Network Element logs from Customer 1. Network element logs are created and shared with MOREAL 2. Logs are correlated with the global threat database 3. Behavioral Analysis evaluates regular behavior of that network and its users Global Threat DB Threat Logic Behavioral Analytics 4. Threat Logic scoring of the probability of threat Dashboard 5. Real-Time analysis of threat and recommendations for mitigation 6. All steps are visible to the user via the dashboard Alert 7. Threat alerts to customer via the dashboard, an or SMS Admin 8. Admin or PCCW Global SOC Takes Action 10

11 Global Threat Intelligence Threat DB is a database of global cyber attacks, constantly updated from multiple sources Threat DB: Threats normalized & indexed Customers CERTs Academia Industry Leaders Etc. ü ü ü Security Research Incident Handling Feeds Normalization 11

12 The MOREAL Difference Real-Time Intelligence MOREAL gives you the ability to identify threats to your organization based on its data mining capabilities and traffic pattern recognition Global Security MOREAL has been deployed on PCCW Global s network and is capturing data on potential threats globally and on a daily basis Enhancing Security Solutions MOREAL extends the life of your existing security solutions and adds a layer of proactive and real-time threat intelligence Long-Term Learning MOREAL s threat database is continually learning and evolving to protect your organization from present and future threats 12

13 Managed Security Services Portfolio from PCCW Global PCCW Global offers a suite of Managed Security Services that are designed to optimize and protect your network Managed Firewall Hosted Firewall PCCW Global offers a suite of Managed Security Services that are designed to optimize and protect your network Anti Distributed Denial of Service Threat Management Service 13

14 Contact Rex Stover Vice President, Americas, Enterprise Sales PCCW Global +1 (703)