The Threat Landscape in the Era of Directed Attacks - Webinar

THREAT LANDSCAPE IN THE ERA OF DIRECTED ATTACKS#ThreatTalk

THESE SLIDES ARE AN EXCERPTFROM A LIVE KASPERSKY WEBINAR

BROADCAST ON 6TH MAY 2014TO ACCESS THE WEBINAR PLEASE VISIT

HTTP://OW.LY/WHFAR

ROEL SCHOUWENBERGPRINCIPAL SECURITY RESEARCHER GLOBAL RESEARCH & ANALYSIS TEAMKASPERSKY LAB

HEARTBLEED – CVE-2014-0160

Back to the fundamentals

Triaging is painful

Keys to the kingdom?

Significant portion of the market still running XP

First ‘eternal zero-day’ discovered

IE Zero-day different to recent flash Zero-day

END OF XP

ACTORS AND MOTIVES HAVE CHANGED

NEW PLATFORMS AND TECHNOLOGIES

Attack surface keeps increasing

Diversification / BYOD

Mobile payments

METHOD OF ENTRY

Phishing

Web browsing – watering holes

NON-TARGETED MALWARE

Financial/ID theft malware

Ransomware

May not run in virtual environment

ESPIONAGE

Zero day needed?

Widening platform support

Targeting supply chain

More and more verticals affected

More actors involved

SABOTAGE

DDoS attacks have become a major problem

BCP 38/84

Wiper attacks as seen in cyberweapons

THE FUTURE

Will CNE and CNA converge?

INCREASED FOCUS ON VIRTUAL ENVIRONMENTS

Back to the fundamental

VM SPECIFIC THREAT SCENARIOS

EoP / Escape to Host

Network traffic sniffing

Modifying master virtual disks

Lost audit trails

Hyper-visor level attacks

ERIK DEVINECHIEF SECURITY OFFICERINFORMATION SERVICESRIVERSIDE MEDICAL CENTER

CorporationEmployees

Cloud Services

Data Loss

Malware and Vulnerabilities

Business Associates

Mobile Devices/

Employees

Hackers

MITIGATING THE TOP 7 THREATS

WHY IT’S MOVING AND CHANGINGGovernment regulations changing

Privacy

Security

Technical and operational control

Environment changing

Electronic transmission of data

Technology changes (virtualization, OS, patient portals, physician portals, vendor portals)

Threats are changing

Malware

Hackers internal/external

NOW HOW DO WE MITIGATE…

Policy and Procedures Education Technical Controls

Monitoring and Logging

Audit and Risk Assessment

What are your Security Initiatives?Know your data, network, endpoints and users, then apply the rules!

CONCLUSIONS AND TAKEAWAYS

New technologies present new opportunities and challenges

All platforms need protecting in an era of targeted attacks

Prioritise which assets to protect most and then segregate them

Data integrity attacks on the horizon

FOR MORE INFORMATION WATCH THE ON DEMAND WEBINAR REGISTER HERE: HTTP://OW.LY/WHFAR

FEEL FREE TO ASK QUESTIONS:@KASPERSKYLABB2B#THREATTALK

MORE INFO ON SECURITY FOR BUSINESS WWW.KASPERSKY.COM//BUSINESS

B2B BLOGHTTP://BUSINESS.KASPERSKY.COM

THANK YOU!

The Threat Landscape in the Era of Directed Attacks - Webinar

Internet

Defending Against Attacks by Modeling Threat Behaviors · Defending Against Attacks by Modeling Threat Behaviors ... possible threats • Identify potential ... STRIDE addresses some

Network Security Part II: Attacks The Insider Threat

Web Browser Attacks - Summer 2006 Threat Landscape · 1 Web Browser Attacks: Summer 2006 Threat Landscape Lenny Zeltser July 25, 2006

The Threat Environment: Attackers and Their Attacks Chapter 1

Threat Modeling of Banking Malware-Based Attacks - … · PART III-Using PASTA™ for threat modeling of banking-malware attacks . OWASP ... Perform a risk assessment of online banking

Forensic Analysis of Advanced Persistent Threat Attacks in

Planning Considerations: Complex Coordinated … Considerations: Complex Coordinated Terrorist Attacks i Table of Contents Complex Coordinated Terrorist Attacks: Threat Background

INSIDER THREAT: PREVENTING DIRECT ACTION ATTACKS … › dtic › tr › fulltext › u2 › 1038631.pdf · 2018-01-16 · INSIDER THREAT: PREVENTING DIRECT ACTION ATTACKS WITHIN

Microwave Weapon Attacks- Organized Stalking of Individuals With Directed Energy Weapons

DDoS attacks: Understanding the Threat

The heightened threat of cyber attacks is fueling payment ... · The heightened threat of cyber attacks is fueling payment losses — how should your business respond? | 2 ... •

Assessing Targeted Attacks in Incident Response Threat ... · PDF fileAssessing Targeted Attacks in Incident Response Threat Correlation ... Indicators, Actors • Ensure ... Assessing

Threat modelling of historical attacks with CySeMoL838530/FULLTEXT01.pdf · Threat modelling of historical attacks with CySeMoL CARL SVENSSON KTH ROYAL INSTITUTE OF TECHNOLOGY SCHOOL

The Surging Threat of Telephony Denial of Service Attacks

Terrorist Attacks US International Tourism Development · In the long run it will negatively affect macroeconomic values. ... terrorism is a threat whose aim is directed at stressing

Trend Micro Threat Management Systemla.trendmicro.com/media/ds/threat-management-system-datasheet-e… · Threat Management System ... to exploitation. ... advanced attacks Automated

Threat of Adversarial Attacks on Deep Learning in Computer ...€¦ · N. Akhtar, A. Mian: Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey FIGURE 1. Example

The Evolution of Cyber Attacks and Next Generation Threat

By Judith Graham heart-attacks/ The Deadly Threat of Silent Heart Attacks

System Vulnerabilities and Denial of Service Attacks€¦ · System Vulnerabilities and Denial of Service Attacks Introduction and Threat Overview Denial of Service Threats DoS Attacks: