The Threat Landscape in the Era of Directed Attacks - Webinar

21
THREAT LANDSCAPE IN THE ERA OF DIRECTED ATTACKS #ThreatTalk

Transcript of The Threat Landscape in the Era of Directed Attacks - Webinar

Page 1: The Threat Landscape in the Era of Directed Attacks - Webinar

THREAT LANDSCAPE IN THE ERA OF DIRECTED ATTACKS#ThreatTalk

Page 2: The Threat Landscape in the Era of Directed Attacks - Webinar

THESE SLIDES ARE AN EXCERPTFROM A LIVE KASPERSKY WEBINAR

BROADCAST ON 6TH MAY 2014TO ACCESS THE WEBINAR PLEASE VISIT

HTTP://OW.LY/WHFAR

Page 3: The Threat Landscape in the Era of Directed Attacks - Webinar

ROEL SCHOUWENBERGPRINCIPAL SECURITY RESEARCHER GLOBAL RESEARCH & ANALYSIS TEAMKASPERSKY LAB

Page 4: The Threat Landscape in the Era of Directed Attacks - Webinar

HEARTBLEED – CVE-2014-0160

4

Back to the fundamentals

Triaging is painful

Keys to the kingdom?

Page 5: The Threat Landscape in the Era of Directed Attacks - Webinar

5

Significant portion of the market still running XP

First ‘eternal zero-day’ discovered

IE Zero-day different to recent flash Zero-day

END OF XP

Page 6: The Threat Landscape in the Era of Directed Attacks - Webinar

ACTORS AND MOTIVES HAVE CHANGED

Page 7: The Threat Landscape in the Era of Directed Attacks - Webinar

NEW PLATFORMS AND TECHNOLOGIES

Attack surface keeps increasing

Diversification / BYOD

Mobile payments

Page 8: The Threat Landscape in the Era of Directed Attacks - Webinar

METHOD OF ENTRY

8

Phishing

Web browsing – watering holes

Page 9: The Threat Landscape in the Era of Directed Attacks - Webinar

NON-TARGETED MALWARE

9

Financial/ID theft malware

Ransomware

May not run in virtual environment

Page 10: The Threat Landscape in the Era of Directed Attacks - Webinar

ESPIONAGE

Zero day needed?

Widening platform support

Targeting supply chain

More and more verticals affected

More actors involved

Page 11: The Threat Landscape in the Era of Directed Attacks - Webinar

SABOTAGE

11

DDoS attacks have become a major problem

BCP 38/84

Wiper attacks as seen in cyberweapons

Page 12: The Threat Landscape in the Era of Directed Attacks - Webinar

THE FUTURE

12

Will CNE and CNA converge?

Page 13: The Threat Landscape in the Era of Directed Attacks - Webinar

INCREASED FOCUS ON VIRTUAL ENVIRONMENTS

Back to the fundamental

Page 14: The Threat Landscape in the Era of Directed Attacks - Webinar

VM SPECIFIC THREAT SCENARIOS

EoP / Escape to Host

Network traffic sniffing

Modifying master virtual disks

Lost audit trails

Hyper-visor level attacks

Page 15: The Threat Landscape in the Era of Directed Attacks - Webinar

ERIK DEVINECHIEF SECURITY OFFICERINFORMATION SERVICESRIVERSIDE MEDICAL CENTER

Page 16: The Threat Landscape in the Era of Directed Attacks - Webinar

CorporationEmployees

Cloud Services

Data Loss

Malware and Vulnerabilities

Business Associates

Mobile Devices/

Employees

Hackers

MITIGATING THE TOP 7 THREATS

Page 17: The Threat Landscape in the Era of Directed Attacks - Webinar

WHY IT’S MOVING AND CHANGINGGovernment regulations changing

Privacy

Security

Technical and operational control

Environment changing

Electronic transmission of data

BYOD

Technology changes (virtualization, OS, patient portals, physician portals, vendor portals)

Threats are changing

Malware

Hackers internal/external

Page 18: The Threat Landscape in the Era of Directed Attacks - Webinar

NOW HOW DO WE MITIGATE…

Policy and Procedures Education Technical Controls

Monitoring and Logging

Audit and Risk Assessment

Page 19: The Threat Landscape in the Era of Directed Attacks - Webinar

What are your Security Initiatives?Know your data, network, endpoints and users, then apply the rules!

Page 20: The Threat Landscape in the Era of Directed Attacks - Webinar

CONCLUSIONS AND TAKEAWAYS

New technologies present new opportunities and challenges

All platforms need protecting in an era of targeted attacks

Prioritise which assets to protect most and then segregate them

Data integrity attacks on the horizon

Page 21: The Threat Landscape in the Era of Directed Attacks - Webinar

FOR MORE INFORMATION WATCH THE ON DEMAND WEBINAR REGISTER HERE: HTTP://OW.LY/WHFAR

FEEL FREE TO ASK QUESTIONS:@KASPERSKYLABB2B#THREATTALK

MORE INFO ON SECURITY FOR BUSINESS WWW.KASPERSKY.COM//BUSINESS

B2B BLOGHTTP://BUSINESS.KASPERSKY.COM

THANK YOU!


Network Security Part II: Attacks The Insider Threat.

Network Security Part II: Attacks The Insider Threat.

Directed Energy Attacks & Mind Assault - Www-raven1-Net

Directed Energy Attacks & Mind Assault - Www-raven1-Net

DDoS attacks: Understanding the Threat

DDoS attacks: Understanding the Threat

NETSCOUT THREAT INTELLIGENCE REPORT · NETSCOUT Threat Intelligence LETTER FROM NETSCOUT THREAT INTELLIGENCE Today, attackers can release enormous terabit-per second-scale DDoS attacks

NETSCOUT THREAT INTELLIGENCE REPORT · NETSCOUT Threat Intelligence LETTER FROM NETSCOUT THREAT INTELLIGENCE Today, attackers can release enormous terabit-per second-scale DDoS attacks

Trends in Advanced Threat Protection NZISF - isaca.org John Martin - Trends... · Trends in Advanced Threat Protection ... Targeted Attacks / Advanced Persistent Threat 1995 ... the

Trends in Advanced Threat Protection NZISF - isaca.org John Martin - Trends... · Trends in Advanced Threat Protection ... Targeted Attacks / Advanced Persistent Threat 1995 ... the

By Judith Graham heart-attacks/ The Deadly Threat of Silent Heart Attacks.

By Judith Graham heart-attacks/ The Deadly Threat of Silent Heart Attacks.

Assessing Targeted Attacks in Incident Response Threat ... · PDF fileAssessing Targeted Attacks in Incident Response Threat Correlation ... Indicators, Actors • Ensure ... Assessing

Assessing Targeted Attacks in Incident Response Threat ... · PDF fileAssessing Targeted Attacks in Incident Response Threat Correlation ... Indicators, Actors • Ensure ... Assessing

CHARGEN-Based DrDoS Attacks: A Growing Marketplace and DDoS Threat

CHARGEN-Based DrDoS Attacks: A Growing Marketplace and DDoS Threat

Frontal Attacks - From basic compromise to Advanced Persistent Threat

Frontal Attacks - From basic compromise to Advanced Persistent Threat

Certified Threat Intelligence Analyst...04 Certified Threat Intelligence Analyst Why Organizations Need A Threat Intelligence Team Traditional approaches to malicious attacks are slowly

Certified Threat Intelligence Analyst...04 Certified Threat Intelligence Analyst Why Organizations Need A Threat Intelligence Team Traditional approaches to malicious attacks are slowly

Using Advanced Threat Analytics to Prevent Privilege Escalation Attacks

Using Advanced Threat Analytics to Prevent Privilege Escalation Attacks

BillGates Botnet Malware Used in Large DDoS Attacks | Threat ...

BillGates Botnet Malware Used in Large DDoS Attacks | Threat ...

The Surging Threat of Telephony Denial of Service Attacks

The Surging Threat of Telephony Denial of Service Attacks

Cyber Attacks: An Emerging Threat to Satellites

Cyber Attacks: An Emerging Threat to Satellites

Managing the Threat of DoS Attacks

Managing the Threat of DoS Attacks

Terrorist Attacks US International Tourism Development · In the long run it will negatively affect macroeconomic values. ... terrorism is a threat whose aim is directed at stressing

Terrorist Attacks US International Tourism Development · In the long run it will negatively affect macroeconomic values. ... terrorism is a threat whose aim is directed at stressing

The Growing Threat of DDoS attacks

The Growing Threat of DDoS attacks

Threat Advisory: Man-In-The-Middle Attacks Target iOS and Android ...

Threat Advisory: Man-In-The-Middle Attacks Target iOS and Android ...

Defenses against Distributed Denial of Service Attacks · Defenses against Distributed Denial of Service Attacks Internet Threat: DDoS Attacks §Denial of Service (DoS) attack: consumption

Defenses against Distributed Denial of Service Attacks · Defenses against Distributed Denial of Service Attacks Internet Threat: DDoS Attacks §Denial of Service (DoS) attack: consumption

The Rising Threat of DDoS Attacks: Is Your Business at Risk?

The Rising Threat of DDoS Attacks: Is Your Business at Risk?