INTRODUCING GEN V PROTECTIONS AGAINST ATTACK · The Global Risks Report 2018 ... Botnet > <...

Daniel Safar|Country manager, CZR region

INTRODUCING GEN V PROTECTIONS AGAINST ATTACK

WE LIVEIN AN AMAZINGWORLD

WE LIVE LONGER

Source: ourworldindata.org

LIFE EXPECTANCY

WE HAVE BETTER LIVING STANDARDS

EXTREME POVERTY% of population living in poverty

[Protected] Distribution or modification is subject to approval

WE GET BETTER EDUCATION

% of literate population

LITERACY

THE ERA OF DIGITAL TRANSFORMATION

CONNECTING TO THE CLOUD AND MOBILE

#1 Taxi company owns no cars

#1 Accommodation company owns no real estate

#1 media provider creates no content

#1 fastest growing TV network lays

no cables

#1 Valuable retailer has no inventory

DISRUPTIVE BUSINESS MODELS

THE CHANGE IS HAPPENING NOW

2016 MOBILE OVERTAKEN DESKTOP

WHATSAPP OVERTAKEN VOICE

SOCIAL MEDIA OVERTAKES TV AS

MAIN SOURCE OF NEWS

THE INFRASTRUCTURE IS CHANGING NOW

CLOUDMOBILE

SERVERIOT

VIRTUALIZATION

FOR THE BAD ACTORS ASWELL AS THE GOOD GUYS

CHANGES CREATE NEW OPPORTUNITIES

Security is the biggest barrier to IoT adoption

Security Concerns Continue Amid Cloud Adoption

Cybersecurity Is Biggest Risk of Autonomous Cars

InformationWeek

Bloomberg

“”

WAS 2017 A CYBER-SECURITY WAKE-UP CALL ?

WannaCryThousands of enterprises in over 99 countries

NotPetyaCompletely shutting down an entire country and impacting over 60 more

The Global Risks Report 2018

Generations of Attacks and Protections

Gen ILate 1980s –PC attacks - standalone

Gen IIMid 1990s –Attacks from the internet

Networks

Gen IIIEarly 2000s -Exploiting vulnerabilities in applications

Applications

The Anti Virus

The Firewall

Intrusion Prevention (IPS)

Gen IV2010 -Polymorphic Content

Payload

SandBoxingand Anti-Bot

Where are we ?

1990 2000 2010 2015 2017

THREATS

PROTECTIONSNetworks

Gen II

Applications

Gen III

Payload

Gen IV

GRADE I

GRADE II

GRADE III

GRADE V

GRADE IV

Enterprises are between

Gen 2-3

2018 – GEN V OF ATTACKS

Large scale (across country and industry)

State-sponsored technologies

Multi-vector (network, cloud, mobile)

GEN IV PROTECTION IS NO LONGER ENOUGH!

Gen IV

PAYLOAD

SandBoxingand Anti-Bot

2010 -Polymorphic Content

WE NEED PREVENTION (NOT-JUST DETECTION)

COVERING OUR WEAKEST POINTS – CLOUD, MOBILE

REAL-TIME ACTION

President How can I create

value for customers?

CIODo we have

up-to-the-second information everywhere we need it?

LEADERS MAKE MAJOR BUSINESS DECISIONS DAILYEVERY MAJOR DECISION EVOKES SECURITY RISKS

CEOHow can technology

transform my business?

CFODo I comply with

regulations?

CMOWill online marketing make a

difference?

HOW DO YOUINNOVATE, INSPIRE AND COMPETE WHILE REMAINING SECURE?

PATCHWORK OF POINT

SOLUTIONS.

COMPLEX SOLUTIONS

WITH UNCERTAIN

SECURITY COVERAGE.

Most security technologies today stay

• Looking for yesterday’s signatures

• Detection instead of prevention

ONE STEPBEHIND

THE TRADITIONAL APPROACH

Virus > < Anti-Virus

Malicious Websites > < URL Filtering

Intrusion > < Intrusion Prevention

Botnet > < Anti-Bot

High Risk Applications > < Application Control

NOW IMAGINE THE FUTUREOF CYBER SECURITY

[Protected] Distribution or modification is subject to approval

A future in which security is

managed with fewer people,

with less capital investment

and a smaller footprint on

the network. And yet, with

BETTER SECURITY

IMAGINE

CHECK POINT

PROVIDES YOUTHATFUTURE

Introducing GEN 5 PROTECTIONAgainst MEGA ATTACKS

WHAT INGREDIENTS DO WE NEED ?

SAAS SECURITY

ADAPTIVE CLOUD

SECURITY

MOBILE APP SCANNING

SDN MICRO-SEGEMENTATION

CLOUD SECURITY

AUTO-SCALE

ORCHESTRATION

ACCOUNT TAKEOVER

PREVENTION

HYPERVISOR LEVEL SECURITY

PUBLIC-CLOUD AUTOPROVISION

MOBILE CODE ANALYSIS

MOBILE AI AND MACHINE LEARNING

DISK ENCRYPTION

MEDIA ENCRYPTION

MOBILE SMS PHISHING

MOBILE MAN IN THE MIDDLE

ATTACKBLUETOOTH

ATTACK DETECTION

SS7 ATTACK PREVENTION

ADVANCED JAILBREAK

PROTECTION

MEMORY ANALYSIS

THREAT EXTRACTION

HUMAN INTERACTION SIMULATION

INTRUSION PREVENTION

DOMAIN PREDICTION

MACHINE LEARNING

ANTI-RANSOMWARE

CPU LEVEL SANDBOX

ENDPOINT FORENSICS

CAMPAIGN HUNTING

IMAGE FILE SANITIZER

ENDPOINT EXPLOITATION

DETECTION

FLASH EMULATION

INTRUSION PREVENTION

DOMAIN PREDICTION

DECOYS & TRAPS

ANTI-RANSOMWARE

CPU LEVEL SANDBOX

CPU EXPLOIT DETECTOR

MACRO ANALYSIS

OS-LEVEL SANDBOX

DROPPED FILES EMULATION

TRANSPARENT HTTPS

INSPECTION

STATIC ANALYZER

LOW LATENCY FIREWALL

INTEGRATED PACKET

CAPTURE

SCALABLE IDENTITY ACCESS

VIRTUAL SYSTEMS (VSX)

MULTICORE VPN

SECURE-XL

SSL INSPECTION

NATIONWIDE PROTECTION

VERTICAL SCALING

ZONE-BASED SECURITY

CONTENT AWARENESS

NETWORK ENCRYPTION

ICS/SCADA PROTECTION

APPLICATION CONTROL

USER-CHECK

URL FILTERING

HTTP 2.0

DLPICS/SCADA

PROTECTION

LARGE SCALE MANAGEMENT

REST APIS

SECURITY ADVISOR

SECURITY MANAGEMENT

PORTAL

EVENT CORRELATION

MOBILE MAN IN THE MIDDLE

ATTACK

MEMORY ANALYSIS

THREAT EXTRACTION

NETWORK ENCRYPTION

REST APIs ORCHESTRATION

CPU LEVEL SANDBOX

ADAPTIVE CLOUD

SECURITY CLOUD

SECURITY AUTO-SCALE

MAKING GEN V POSSIBLE

MOBILE MAN IN THE

MIDDLE ATTACK

MEMORY ANALYSIS

THREAT EXTRACTION

NETWORK ENCRYPTION

REST APIs ORCHESTRATION

CPU LEVEL SANDBOX

ADAPTIVE CLOUD

SECURITY CLOUD

SECURITY AUTO-SCALE

HOW DO WE MOVE TO GEN V OF SECURITY?

You Need a Small Army of Security Technologies

MachineLearning

CPU-LevelSandboxing

LOOKS IMPOSSIBLE?

MIRACLES TAKE A LITTLE LONGER.(Charles Alexandre de Calonne, 1794)

THE IMPOSSIBLE WE

DO IMMEDIATELY

THIS WORKS !YOU CAN MAKE IT POSSIBLE

MachineLearning

CPU-LevelSandboxing

ThreatExtraction

Virtual Firewall

Endpoint Detection

& Response

Human Behavioral Analytics

DataEncryption

Data LeakPrevention

Anti-Bot FlashDetonation

URLFiltering

FirewallICS/ SCADA Protection

MachineLearning

ProxyNetwork

EncryptionAnti-

RansomwareZero

PhishingMobile Threat

PreventionCPU-Level

Sandboxing

HTTPS Inspection

Intrusion Prevention

Anti-Virus DDOSHypervisor

Level SecurityApplication

Control

T H E C Y B E R S E C U R I T Y A R C H I T E C T U R E O F T H E F U T U R E

THE F IRST CONSOLIDATED SECURITY ACROSS NETWORKS ,

CLOUD , AND MOBILE , PROVIDING THE HIGHEST LEVEL

OF THREAT PREVENTION .

ACROSS ALL NETWORKS, CLOUDS AND MOBILE

ONE SECURITY PLATFORM

Leveraging unified threat intelligence & open interfaces

PREEMPTIVETHREAT PREVENTION

Blocking the most sophisticated attacks before they happen

Single Management, Modular Policy

Management & integrated threat visibility

CONSOLIDATED SYSTEM

THANK YOU

INTRODUCING GEN V PROTECTIONS AGAINST ATTACK · The Global Risks Report 2018 ... Botnet > <...

Documents

ANALISI DELLE BOTNET DI NUOVA GENERAZIONE ...Le Botnet • Reti di host (Bot), connessi ad Internet, controllati da un’unica entità: il Botmaster 2/19 • Il codice malevolo dell’infezione

Botnet Infiltration

Your Botnet is My Botnet : Analysis of a Botnet Takeover

TRITON AP-EMAIL › sites › default › files › ... · red bot (botnet), la seguridad que brinda Forcepoint™ TRITON Email ... • Drip DLP para identificar en qué punto se

Shuabang Botnet

רשתות BOTNET

Paper Presentation - "Your Botnet is my Botnet : Analysis of a Botnet Takeover"

Resilient Botnet Command and Control with Tor - … · Resilient Botnet Command and Control with Tor Dennis Brown July 2010. Introduction ... Add SOCKS5 support to bot

Conficker Botnet

Mirai botnet

The Bot Stops Here: Removing the BotNet Threat - Public and Higher Ed Security Summit - Eric Vanderburg

Bot and Botnet Taxonomy

Worm DDos Spam - SecurityCN.net · CNCERT/CC CNCERT/CC CNCERTCC_TR_2005-001(Draft) Worm DDos Spam Phishing Spyware Botnet [1] Bot DDos DDos Bot: ±Robo Bot

BotNets- Cyber Torrirism - AFRINIC · Page 6 Botnet originator (bot herder, bot master) starts the process•Bot herder sends viruses, worms, etc. to unprotected PCs » Direct attacks

BEM-VINDOS · (Bot/Zombie) Cybercriminal (Botmaster) social media posts Botnet Connection Command & Control Server (c2) Control EMSISOFT Spam emails Infected websites Multiplication

Tracing Botnet in Taiwan - FIRST Botnet Analysis Module (BAM) – C&C Tracer – Botnet Tracer The Botnet in Taiwan – Case Study Ⅰ IRC Botnet ... Tracing Botnet in Taiwan Author:

Botnet Classification

Your Botnet is My Botnet: Analysis of a Botnet Takeoverchris/research/doc/ccs09... · 2020-06-06 · Your Botnet is My Botnet: Analysis of a Botnet Takeover Brett Stone-Gross, Marco

Botnet slide

IS10 06 botnets - TU Berlin · 2016-08-31 · 11 Botnet Propagation Each bot can scan IP space for new victims Automatically • Each bot contains hard-coded list of IRC servers’