Top 5 Security Threats for 2012
Aarij M Khan Director of Product Marketing HP Enterprise Security
2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice 1
AGENDA
A Quick Recap of
2011
Major Security Trends
Security Threats for 2012
How To
Stay Secure
201 The Year In Review 1
Number Of Breaches : 414 Records Compromised : Over 22 Million Lack Of Knowledge About Breaches
Cause Unspecified : 5 out of 10 Exposed Records Unknown : 6 out of 10
* Identity Theft Resource Center
1. Advanced Persistent Threat
Advanced Persistent Threats Have a Pattern
Acquire target, sneak in, hop around Get privileged access to critical assets
(Impact takes time)
(Perimeter doesnt help)
Conduct the espionage at length
(Early detection matters)
EMC/RSA SecurID
Epsilon
SK Communications
What happened in the RSA breach?
5:00 AM 8:30 AM 8:31 AM
Finance person receives a junk email
Opens to see 2012 Recruitment plan with .xls file
Rat program installed utilizing Adobe Flash vulnerability
NEXT DAY / 12:01AM
8:32 AM
NMAP scan of network to collect sensitive information
Poison Ivy malware is initiated
OVER THE NEXT 10 DAYS
11TH DAY / 12:05 AM
12TH DAY
Collect data over a period of time
Split file, encrypt, ftp to good.mincesur.com
RSA is in the headlines
2. BYOD Mobile Devices
Mobile Computers A New Frontier
March 201 - BlackBerry 1 Security Breach
RIMM says Turn Off JavaScript
New Mobile Malware
Android Breaches
May Allow data access Jun Google removes 10 apps Dec Record calls, send SMS Dec Access device location
Popular and Open Deadly Combination
3. Cloud Environments
Cloud Services Adoption
Cloud Services Attacked
Amazon Cloud EC2 Breach
50% users affected by breach Malware spreading across EC2 Financial Malware on EC2
4. Cyber Warfare
Politically Motivated Hacker Groups
Anonymous
WikiLeaks Hacks Irish Opposition Website Hacks Church Webcast Hacks NATO Website Hacks Texas Police Chiefs Association Servers Hacks Syrian Ministry Of Defense Website Hacks database of Military Supply Company Hacks bart.gov and steals thousands of passwords
Previous CyberAttacks
Aug 2011
: Shady RAT attacks IOC, UN and several governments : International Monetary Fund attacked, data stolen : Google China Aurora breach, Data and IP stolen
June 2011 Jan 2010
March 2009 2008
: GhostNet downloads classified documents from government and private servers in over 100 countries : Middle Eastern US Military Facility infiltrated, digital beachhead may have been established in classified Pentagon networks : South Ossetia War Russian, Georgian and Azerbaijan targeted : Estonia comes under cyber attack
2008
April 2007
5. Corporate Espionage and Insider Threat
Enabler Consumerization Of IT
More Data Is Stored Digitally
Paper Based Systems Out-of-Date Electronic Processes
Insider Definition Changes
Includes contractors, remotes
Easier To Profit
Organized Crime Growing Black Market
* datalossdb.com
Insider Information Theft At The Top
Material Information = High Value
Gaining unfair advantage Looking for personal gain
Sources of Risk
Intellectual property theft Financial and Identity data Medical and Personal Health records Point of Sale at retail locations Email addresses
New Requirements Intelligent Monitoring and Integrated Security
Cyber crime is increasing
Threat and risks are expanding in frequency and intensity
And traditional security solutions are falling short!
Technology
Application Scanning Firewall IPS SIEM Anti-X Web
Information
End Point Applications Network Scanners Compliance User IT Operations
Traditional Solutions
Bolted On Architecture-Specific Lacking Automation Limited Context
Bolted On Architecture-Specific Lacking Automation Limited Context
Multiple Technologies
Lots of Information
No Intelligence
HP has the on ly s ecu r it y in t elligen ce plat for m that gives clients the insight to pr oact iv ely m an age their specific enterprise threats and r is k s .
HP Security Intelligence Platform
Security Intelligence Platform
Information
Establish complete Visibility across all applications and systems Analyze vulnerabilities in applications and operations to understand risk Respond adaptively to build defenses against the exploitation of vulnerabilities Measure security effectiveness and risk across people, process, and technology to improve over time
Operations
Applications
Security Services
HP ESP Security Solutions
Universal Log Management Regulatory Compliance Proactive Network Security Insider Threat Intelligence
Advanced Threat Intelligence
Privacy Breach Intelligence
Date Leakage Monitoring
Application Security
THANK YOU
25
