CYBERSECURITY - STRATEGIES. What any company or enterprise must have in mind regarding cybersecurity.

Transcription

1 CYBERSECURITY - STRATEGIES What any company or enterprise must have in mind regarding cybersecurity.

2 Million SOME NUMBERS SECURITY INCIDENTS GROWTH Security Incidents Million incidents per year ,339 incoming attacks per day - everyday 2

3 MAKE SURE YOU ARE NOT AN EASY TARGET 4 /5 cyber attacks rely on bugs in outdated software 75% of attacks are opportunity based 30% of computers are already infected 3

4 WE ANALYZE & PROCESS EVERY DAY BILLION MALWARE SAMPLES ANDROID MALWARE SAMPLES ONLINE REPUTATION QUERIES 4

5 IF YOUR BUSINESS IS AT STAKE, WE TAKE RISK OUT OF THE EQUATION. 64% more reported security incidents in 2014* Potential fine for being non-compliant with Singapore Personal Data Protection Act average financial loss for mid sized businesses due to security incidents in 2014* 5 * PWC Global State of Information Security Survey 2015 calculation for companies with 100 million $ - 1 billion $ yearly revenue Based on reported incidents. Dark figures to be expected much higher.

6 CYBER SECURITY IS A PROCESS Understand your risk, know your attack surface, uncover weak spots PREDICT PREVENT Minimize attack surface, prevent incidents React to breaches, mitigate the damage, RESPOND DETECT Recognize incidents and threats, isolate and analyze and learn contain them 6

7 OUR CYBER SECURITY OFFERING ATTACK SURFACE ASSESSMENT Riddler Threat level assessment Attack surface mapping VULNERABILITY & PATCH MANAGEMENT Radar Vulnerability scanning Vulnerability management Software Updater Automatic patch management SERVICES Professional services Consulting & coaching For all areas of the security strategy ADVANCED THREAT PROTECTION Incident detection & response service platform Security monitoring & alerting Incident response PREDICT RESPOND PREVENT DETECT ENDPOINT & NETWORK SECURITY SUITES Protection Service for Business Device & server security Mobile security Central management As a service Business Suite Device & server security Virtual Security Central management On-site 7

8 SECURITY WALLPAPER #1 Get rid of #2 Back-up and #3 Protect the #4 Assume that #13 Educate, train, Windows XP ASAP Synchronize mobile devices as mobile devices will get feedback well get lost #5 Consider a VPN #6 Up-to-date, #7Patch Now and #8 Ensure your for you mobile state-of-the art Sec patch correctly Virtual Environment workers Solution is safe #9 Control web #10 Secure critical #11 Block applets #12 Protect your acccess and content transactions with an from unknow extra layer sources 8

9 #1 GET RID OF WINDOWS XP #1 Get rid of Windows XP ASAP Support for Windows XP is already finished. Basically any hacker knows that patches won t be released for this O.S. Operating systems launched after Windows XP were designed with security as a priority, so are a far better option *Source: 9

10 #2 BACK UP AND SYNCHRONIZE Ransomware malware is getting more and more common; and once you get infected there s no sure way to break the encryption. So, have a safe, offline backup to ensure you can restore your operation. #2 Back-up and Synchronize 10 *Source:

11 #3, #4 and #5: MOBILE DEVICES F-Secure did two actions last year to raise awareness about BYOD safety. By placing a free Wi-Fi hotspot on a London financial center we could make 250 people log at it; we collected 30MB of data in less than 30 minutes, including POP3 s, complete with sender addresses and even passwords. Without encryption there is no security #3 Protect the mobile #4 Assume devices that as well mobile #5 Consider devices will a VPN get lost for you mobile workers *Source: 11

12 The second one was with UK Parliament. We repeat the experiment to test how politicians would protect their privacy. The results when they logged to our free wi-fi? It was possible to hijack a social media account for the first one As the second one was making a VoIP call we could record his conversation. Easily. The third one we just got his and password. Than it was possible to log as him in other web services as well. *Source: 12

13 MORE DATA Only 36 percent of the researched companies have a mobile device management solution Only 37 percent provided mobile security for phones and tablets Only 50 percent used VPNs Only 1 in 4 can remote wipe a lost or robbed device. And this got a lot worse for SMBs 13 *Source:

14 SO, WHAT TO KEEP IN MIND ON BYOD AND ON- THE-GO WORKING? 14

15 FREEDOME FOR BUSINESS EXTENDING THE PSB SECURITY PLATFORM TO MOBILE FLEETS FOR ANDROID AND IOS DEVICES FREEDOME VPN AND WIFI PROTECTION APP AND WEB PROTECTION MOBILE FLEET MANAGEMENT

16 CONNECTION PROTECTION APPLICATION PROTECTION BROWSING PROTECTION MANAGED ANTI-THEFT SECURITY MONITORING PASSWORD ENFORCEMENT FLEET & DEVICE INFO TRACKING PROTECTION VIRTUAL LOCATION

17 #6 CHOOSE THE CORRECT SECURITY SOLUTION You need to guarantee a reliable, up-todate security solution that handles known malware and zero-day threats as well. The difference between a pure antivirus and a security solution is the difference between 99 and 99,9% filtering: that s 43K malware! #6 Up-to-date, state-of-the art Sec Solution 17 *Source:

18 AV IS DEAD? SO CHOOSE A SECURITY SOLUTION, NOT AN AV Choose a solution that has: URL/Web access filtering 2. HTTP, et cetera protocol scanning 3. Exploit detection. 4. Network ("cloud") reputation queries 5. Sandboxing and file based heuristics 6. Traditional file scanning ( The dead AV still useful!) 7. Memory scanning 8. Runtime heuristics and memory scanning

19 SOFTWARE UPDATER #7 FIREWALL IDS/IPS PORT APPLICATION BROWSING PROTECTION CONNECTION CONTROL WEB CONTENT CONTROL WEB TRAFFIC SCANNING MALWARE SCANNING ADVANCED PROTECTION #10 #9 #10 SIGNATURE DEFINITIONS OBJECT REPUTATION CHECKS (ORSP) Proactive Protection - DEEPGUARD 19

20 Key in reaching 100% detection rate over 24 subsequent months DEEPGUARD. Unmatched protection against advanced 0-Day threats Sophisticated technology, with heuristic, behavior and reputation analysis

21 Global protection against emerging threats in 60 secs from initial detection REAL-TIME PROTECTION Immediate coverage drastically reduces the window of exposure to new malware Greatly reduces the lifetime & efficiency of otherwise dangerous malware

22 Take something into account: Do you have a dedicated IT person to handle the security policies? If you do, consider an on premise solution. If not, it is better to choose a cloud-based solution with a Security-as-a-Service model. 22 *Source:

23 OPTION 1 CLOUD-BASED PROTECTION SERVICEFOR BUSINESS Secure your Business. Wherever it takes you.

24 WINDOWS MAC ANDROID IOS SERVERS

25 OPTION 2 WORKSTATIONS Client Security Premium VIRTUAL SECURITY Scanning and Reputation Server WEB TRAFFIC Internet Gatekeeper BUSINESS SUITE PREMIUM ONSITE SOLUTION WITH FULL CONTROL WINDOWS SERVERS Server Security Premium EXCHANGE and Server Security Premium POLICY MANAGER CITRIX AND TERMINAL SERVERS Server Security Premium SHAREPOINT and Server Security Premium LINUX Linux Security EMC STORAGE and Server Security Premium 25

26 #7 OUT-OF-DATE SOFTWARE IS A SIGNIFICANT SECURITY RISK #7 Patch Now and patch correctly 83% AND YET 87% 83% of TOP10 malware could have been avoided with up-to-date software 87% of corporate computers miss critical updates 26

27 IS WINDOWS BASED PATCH MANAGEMENT ENOUGH? 12% Are in operating system 3% Miscellaneous 85% Are in 3 rd party software 27 Source;

28 #8 ENSURE YOUR VIRTUAL ENVIRONMENT (REALLY) IS SAFE #8 Ensure your Virtual Environment is safe 28 A UK study shows that 85% of enterprises risk the protection level in virtual environments by trusting the same AV solutions as they do in their physical environments. A Gartner study shows that 60% of virtual environments are more open to security risks A virtual security solution can, however, be as secure as the traditional solutions when the security agent is a part of the solution. When optimized in the right way, the performance level does not suffer but your environment will still retain the best possible protection level *Source:

29 SECURITY FOR VIRTUAL AND CLOUD ENVIRONMENTS Policy Manager F-Secure Applications Server Security S.O. Virtual Machine Virtual Machine Virtual Machine Virtual Machine Aplicações Aplicações Aplicações Aplicações Client Security Client Security Premium Server Security Server Security and Server Security S.O. S.O. S.O. S.O. Virtualization Platform

30 SECURITY FOR VIRTUAL AND CLOUD ENVIRONMENTS (OPTIMIZED) Policy Manager Aplicações Server Security S.O. Appliance Virtual Scanning and Reputation Server S.O. cache F-Secure Virtual Machine Virtual Machine Virtual Machine Virtual Machine Aplicações Aplicações Aplicações Aplicações Client Security Offload Scanning Agent Client Security Premium Offload Scanning Agent Server Server Security Security Offload Scanning Agent and Server Security Offload Scanning Agent S.O. S.O. S.O. S.O. Virtualization Platform

31 #9 CONTROL WEB ACCESS AND CONTENT #9 Control web acccess and content You should guarantee that employees cannot access the harmful sites in the first place as 90% of normal attacks come through the web. 31 Source:

32 IMPROVED PRODUCTIVITY THROUGH CONTROLLED ACCESS A 20% INCREASE COMPARED TO LAST YEAR 69% 89% 4% 2013 of all respondents said they waste at least some time at work on a daily basis. The number of people in this year s survey who reported wasting time at work every day is up to a whopping 89% OF PEOPLE SURVEYED WASTE AT LEAST HALF THE AVERAGE WORKDAY ON NON WORK-RELATED TASKS. 32 Source:

33 WHERE S THE WASTE? 89% 31% waste roughly 30 minutes daily 31% waste roughly 1 hour daily 16% waste roughly 2 hours daily 6% waste roughly 3 hours daily 2% waste roughly 4 hours daily 2% waste 5 or more hours 24% GOOGLE 15% FACEBOOK 14% LINKEDIN 33 Source:

34 #10 SECURE CRITICAL TRANSACTIONS WITH AN EXTRA PROTECTION LAYER Secure connections matters as there is financial loss when online banking credentials and money from the bank account is stolen. Also and maybe even wors, business secrets can be stolen if cloud-based CRM credentials are stolen #10 Secure critical transactions with an extra layer 34

35 CONNECTION CONTROL STOP THE ATTACKS BEFORE THEY ENTER Banks have secured the connection from browser to the bank and the online banking servers The weakest links: The online bank users and their browsers Phishing Trojans 35

36 #11 Block applets from unknown sources #11 BLOCK APPLETS FROM UNKNOWN SOURCES Exploit kits are sets of tools that criminals use to create crimeware campaigns, and largely attempt to infect computers with malware that exploits vulnerabilities in software. Exploit kits have historically been proficient at exploiting vulnerabilities in Java and older versions of Microsoft Windows, but exploits targeting Flash have become more prominent in Source:

37 STOP MOST OF THE WEB ATTACKS Block 100% of Java applets and Windows malware that come from unknown sources you do not trust. Technologies targeted by exploit kits in % FLASH 28% JAVA 10% WINDOWS 5% SILVERLIGHT Source: hxxp:// contagiodata.blogspot.fi/2014/12/exploit-kits-2014.html 37 F-Secure Confidential

38 #12 PROTECT YOUR WHATEVER IT IS #12 Protect your e- mail whatever it is! The most common ways for malware to manifest are still trough browsing and . More and more we see macro-based and spear-phishing attacks, so it is a general good idea to simply avoid receiving such s. Protection begins first and foremost with strong security, as most of the attachments, files and links are delivered through . All standard best practices apply, but pay more attention to capabilities such as attachment stripping and scanning, in addition to link reputation checks and security. It doesn t matter if you have your in house or on-thecloud: Either protect your mail server or choose a gateway to avoid spam and phishing messages. Source:

39 CHOOSE YOUR OWN WAY TO GET PROTECTION ENCRYPTION SPAM DETECTION VIRUS PROTECTION PROTECTION SERVICE FOR Cloud service, hosted by F-Secure MESSAGING SECURITY GATEWAY On site, self managed, appliance or VMware 39

40 40 #13 EDUCATE, TRAIN, GET FEEDBACK Malware can easily breach all your barriers if the employees do not adhere to basic security practices, or do not know what to do. For example, developers posting questions online about a technical problem they have give valuable information about the company and the systems used. Training also needs to be continuous, as the ways to lure employees to risky behavior keep on developing, and employees might not stick to the guidance. *Source: #13 Educate, train, get feedback

41