27
How to Detect & Resolve Today’s High Profile Threats Ayehu Guy Nadivi, Sr. Director of Business Development Sharon Cohen, Professional Services Manager OPSWAT Taeil Goh, Chief Technology Officer George Prichici, Product Manager

How to Detect and Resolve Today's High-Profile Threats

Embed Size (px)

Citation preview

Page 1: How to Detect and Resolve Today's High-Profile Threats

How to Detect & Resolve

Today’s High Profile

Threats

Ayehu

Guy Nadivi, Sr. Director of Business Development

Sharon Cohen, Professional Services Manager

OPSWAT

Taeil Goh, Chief Technology Officer

George Prichici, Product Manager

Page 2: How to Detect and Resolve Today's High-Profile Threats

Guy Nadivi

Sr. Director,

Business Development

Sharon Cohen, CISM

IT & Security Professional Services

Manager

Taeil Goh

CTO

George Prichici

Product Manager

Today’s Webinar is Presented by:

Page 3: How to Detect and Resolve Today's High-Profile Threats

SF & DC

USA

Veszprém

Hungary

Tokyo

Japan

Timisoara

Romania

London

UK

Ho Chi Minh City

Vietnam

Global Offices

Company highlights

OPSWAT named one of top 500

World’s Hottest Security Companies

• Founded in 2002

• Headquartered in San Francisco

• Offices in Hungary, Japan, Romania, UK, and Vietnam

• Global 24/7 support

• More than 1,000 customers worldwide

• 300 technical partners

• 3 patents

• 14 years of growth

• 140 FTE’s

• 90 engineers

Page 4: How to Detect and Resolve Today's High-Profile Threats

Metadefender - Core Technology

Page 5: How to Detect and Resolve Today's High-Profile Threats

OPSWAT Research

Page 6: How to Detect and Resolve Today's High-Profile Threats

OPSWAT research The value of individual antimalware engines

Page 7: How to Detect and Resolve Today's High-Profile Threats

OPSWAT research

The value of Metadefender

antimalware package

https://www.metadefender.com/stats

Page 8: How to Detect and Resolve Today's High-Profile Threats
Page 9: How to Detect and Resolve Today's High-Profile Threats

OPSWAT research The power of many overcome the power of few

Page 10: How to Detect and Resolve Today's High-Profile Threats

After 11 days, 23 out of 43

engines detect the threat

17 out of 43 engines detect

the threat after 3 days

On the first scan,

only 4 engines

detect the threatMetadefender exposure times:

Metadefender 4: 36 hours

Metadefender 8: 36 hours

Metadefender 12: 36 hours

Metadefender 16: zero-day

Metadefender 20: zero-day

Metadefender 30: zero-day

OPSWAT research Faster outbreak detection – from days to hours

Page 11: How to Detect and Resolve Today's High-Profile Threats

OPSWAT research Outbreak Report

Page 12: How to Detect and Resolve Today's High-Profile Threats

False Alarm

Page 13: How to Detect and Resolve Today's High-Profile Threats

OPSWAT research Outbreaks or False Positives?

Page 14: How to Detect and Resolve Today's High-Profile Threats

Assumes all

files are bad

Removes embedded

scripts and macros

Rebuilds files, retaining

usability and formatting

Content Disarm & ReconstructionSanitize productivity documents

Page 15: How to Detect and Resolve Today's High-Profile Threats

Enhanced Data Sanitization

Page 16: How to Detect and Resolve Today's High-Profile Threats

FOUNDED:

2007

(bootstrapped)

FOUNDERS:

Gabby Nizri

Yaron Levy

FUNDING:

July 2015: $3M

Series A, BGV & KEC

(Palo Alto & NY)

CUSTOMERS:

150+

Mid-Large Ent.

(and growing)

OFFICES:

Tel Aviv

New York

Bay Area

GROWTH:

Rapid!

(Consecutive

Record Years)

PRODUCT:

eyeShare™ v4.8

first GA 2009

About Ayehu

Page 17: How to Detect and Resolve Today's High-Profile Threats

People don’t scale very well

Why are Security

Teams Falling

Behind?

Page 18: How to Detect and Resolve Today's High-Profile Threats

"A report from Cisco puts the global figure at one million

cybersecurity job openings. Demand is expected to rise to

6 million globally by 2019, with a projected shortfall of 1.5

million."

- Michael Brown, CEO at Symantec, the world’s largest security software vendor

Why Not Just Hire More People?

Page 19: How to Detect and Resolve Today's High-Profile Threats

Automation

can be a

Force

Multiplier

Page 20: How to Detect and Resolve Today's High-Profile Threats

"The automation and coordination aspects of an integrated

threat defense help to reduce time to detection,

containment, and remediation. Reducing false positives

helps security teams focus on what matters most."

- Cisco 2016 Annual Security Report (page 63)

Cisco’s View on Security Automation

Page 21: How to Detect and Resolve Today's High-Profile Threats

eyeShare

Self-Service Portal

Event

Scan

Results

Suggestions Remediating Actions

Remediating Actions (automatic)

Automating Threat Defense

Page 22: How to Detect and Resolve Today's High-Profile Threats

Speed of

Response is

CRITICAL to

Defeating

Threats

Page 23: How to Detect and Resolve Today's High-Profile Threats

No Programming Required !

Over 500 pre-built activities

Over 150 pre-built workflows / playbooks

Easy-to-use drag-and-

drop interface

Building an Automated Security Playbook

Page 24: How to Detect and Resolve Today's High-Profile Threats

Integrating with your Infrastructure

Page 25: How to Detect and Resolve Today's High-Profile Threats

Demo Time

Page 26: How to Detect and Resolve Today's High-Profile Threats

Questions?

Page 27: How to Detect and Resolve Today's High-Profile Threats

Thank You!

Guy NadiviSr. Director of Business Development

E [email protected]

Sharon CohenProfessional Services Manager

E [email protected]

O +1 (800) 652-5601

2000 University Ave., Ste. 600

E. Palo Alto, CA 94303

http://www.ayehu.com/

Taeil GohChief Technology Officer

E [email protected]

George PrichiciProduct Manager

E [email protected]

O +1 (415) 590-7300

398 Kansas St.

San Francisco, CA 94103

www.opswat.com