View
15
Download
0
Category
Preview:
Citation preview
Head Of Cyber Security, Cisco Switzerland
Bremtane Moudjeb
CyberSecurity Day
Crypto-Jacking 1.3Tbps DDoS Network Malware
145M Users Atlanta - SamSam Croatia Attacks
Another Crazy Year!
DDoS
Data Destruction
Monetary TheftPhishing
Rogue Software
Man in the MiddleTrojans
Drive by Downloads
Data Manipulation
Wiper Attacks
Botnets
RansomwareAdvanced Persistent Threats
Unpatched Software
Spyware/Malware
Data/IP Theft
Malvertising
DEFENDERSTireless
ATTACKERS
Relentlessvs
CyberSecurity Challenges
Rapid Containment
Intelligence drivenIncident Response
Threat Visibility
Workplace
desktops
Business
apps
Critical
infrastructure
Back Then… Internet
…it was all about Perimeter Security…
…and a Big Fat Firewall!
Business appsSalesforce, Office 365,
G Suite, etc.
Branch office
Critical infrastructureAmazon, Rackspace,
Windows Azure, etc.
Roaming laptops &IoT Devices
Workplace
desktops
Business
apps
Critical
infrastructure
Internet
But Now: The way we work has changed
Collapse of The Old Security ModelSymptoms of Failure
of organizations use 6 to>50 security vendors 65%
of organizations use 6to >50 security productsTB of Logs
But yet, little
visibility
500K+
Firewall Rules
80+
Security
Tools
200
Days
Average
breach
detectio
n time
100%
of
Organizations
compromised
55%
Blind To Threats
44%of alerts are NOT
investigated
49%of legitimate
alerts are NOTremediated
Malicious Binaries and Encryption
Increase
November 2016
Attackers embrace encryption to conceal their command-and-control activity
19%
12% Increase
268%70%
50%
38%
Global Encrypted Web Traffic Malicious Sandbox Binaries with Encryption
October 2017
3.6Pb 46.8K+ 4.8M+
624M+ 126 $429K+
45min to change the game
$516M
ArchitectureIntegrated
PortfolioBest of breed
IntelligenceCloud-Delivered
© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
00I00 I00I0I II0I0I 0II0I I0I00I0I0 0II0I0II 0I00I0I I0 00
III00II 0II00II I0I0II0II0 I0 I0 I00 00I0 I000 0II0 00
III00II I000I0I I000I0I I000I0I II 0I00 I0I000 0II0 00
00I I0I0I0 I0I0III000 I0I00I0I 0II0I0 I00I0I0I0I 000
II0II0I0I0I I0I0I0I 0I0I0I0I 0I0I00I0 I0I0I0I 0II0I0I0I
0II00 I00I0I0 0I00I0I I00I0I0 I0I0I0I 0I0I0I 0I0I0I0
00I0I0 0I0I0I0 I0I0I00I 0I0I 0I0I 0I0I I0I0I 0I00I0I
III00II 0II00II I0I000 0II0 00I0I00 I0 I000I0I 0II 0I0I0I
II0III0I 0II0II0I II00I0I0 0I00I0I00 I0I0 I0I0 I00I0I001.5 millionDaily malware samples
600 billionDaily email messages
16 billionDaily web requests
20 billionThreats blocked daily
250+threat intel researchers; 24 – 7 – 365
Millionsof telemetry agents
4Global data centers
Over 100 Threat intelligence partners
Email Malware/Endpoint Network IntrusionsWeb/URL Network Analysis DNS/IP
Portfolio Backed by Superior Threat Intelligence
III00II I000I0I I000I0I I000I0I II 0I00 I0I000 0II0 00
00I I0I0I0 I0I0III000 I0I00I0I 0II0I0 I00I0I0I0I 000
0II00 I00I0I0 0I00I0I I00I0I0 I0I0I0I 0I0I0I 0I0I0I0
20B 250M S
4MP
1M
C
700K
FZ
800K972M
T
P
1MThreats blocked daily
Cisco’s Security Investments $6B Invested to Radically Change How the Industry
NAC addition
Messaging and Web Security Appliance
Cloud Security
UTM
Security Analytics
NGIPS / Anti-Malware
Sandbox
2004 20072009
2012
20132014
2016
Consulting
Advanced
Threat
Protection
Portcullis
Consulting
Network
As A
Sensor
Cloud Security
2017Observable
Networks
Multi-Factor
Authentication
Automated Policy
Context Awareness
Event Visibility
Threat Intel/Enforcement
Integrated Architecture
Enterprise Mobility Management
Network Traffic Security Analytics
Cloud Workload Protection
Web Security
Email Security
Advanced Threat
Secure SD-WAN / Routers
Identity and Network Access Control
Secure Internet Gateway
Switches and Access Points
Next-Gen FW/IPS
Cloud Access Security
Cisco Threat Intelligence
Cisco Platform Exchange
Cisco Threat Response
An integrated portfolio creates value for customers
Open APIs · Developer Environment · Services
Best of Breed Portfolio
EndpointNetwork Cloud
Leading Threat Intelligence
Cisco Threat ResponseDeploy Policy
InvestigateDetect Remediate
3rd Parties150
security tech
partners
© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Automation: Breach Response
If malware gets in
Detection under 3.5 HOURS
Removed automatically from
endpoints
Blocked across Network, endpoints
and cloud
It Is Confirmed By The Market
Secure Mail Gateway NGIPS Network Access Ctrl
Symantec
Niche Players Visionairies
Challengers Leaders
Abili
ty to E
xecute
Completeness of VisionAs of June 2015
Microsoft
Intel SecurityTrend Micro
Mimecast
Websense
BAE Systems
Barracuda Networks
Sophos
Clearswift
Fortinet
DellTrustwave
WatchGuard Technologies
Proofpoint
Niche Players Visionairies
Challengers Leaders
Abili
ty to E
xecute
Completeness of VisionAs of December 2017
McAfeeTrend Micro
Vectra Networks
FireEyeAlert Logic
NSFOCUS
Venustech
Hillstone Networks
Niche Players Visionairies
Challengers Leaders
Abili
ty to E
xecute
Completeness of VisionAs of December 2014
Auconet
ForeScoutTechnologies
ArubaNetworks
Bradford Networks
Portnox
Impulse Point
Pulse Secure
Extreme Networks
InfoExpress
Good news…
© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
of Cisco customers buy
Cisco Security
12%
Did I Really Say “Good news”?
© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
GREAT Year for CyberSecurity
#1 CyberSecurity Company
Umbrella
49%Policy & Access
29%Adv. Threat Sec
40%
*Including services and products
merci
grazie
mahalo
obrigado
terima kasih
dank u
graciasobrigadatakk
ačiū
a dank
спасибоarigatôתודה
Ďakujem Дякую
chnorakaloutioun
xвала
tack
děkuji
dziękuję
Баярлалааευχαριστώ
grazzi
감사합니다
ngiyabonga
choukrane
paldieskop khun
diolch
hvala
danke
shukran
faleminderit
dankie
mulţumes
blagodariagràcies
Xièxièshukriya
tak
kiitosteşekkür ederim
nandri
köszönöm
tänan
dhanyavād
благодаря
Благодарамthank you
Secured Digital HealthCareFelix Platter© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Security Architecture
DNA + ACI + Collaboration
Digital HealthCare320 beds – 700 employees
Demo:The Architectural Advantage in Action
New 3.5h TTD!
2 Flow Analysis with Stealthwatch
3 Threat Analytics CTAFlow Collector 1
Global Threat Intelligence
ISE
Healthcare EndpointDynamic quarantine5
4 Information Sharing to ISE
The New IT RealityIt’s more difficult to establish user and device trust
1Apps are availableon-premises plusvia IaaS and SaaS
2Employees, contractors, others access these apps with BYOD and mobile devices
3
Attackers most often cause data breaches by directly accessing these apps via compromised passwords and devices
Any User, Any Device, Any Application, Any Location
New expectations for being able to deliver trust
Verify device via compliance check
and agentless inspection
Verify user via multi-factor authentication
Establish Trust
Intent-based networking
Wherever there is an access decision on your
network (on-prem or VPN) or off your network
Trust-based policy
Single sign-on to multiple apps via Cisco or 3rd-party
Adaptive AccessUsers
Devices
Apps
What’s Next?
2H FY19
Enriched capabilities
• Enhanced cloud-delivered firewall as Service
• Enhanced web proxy
• New Managed offerings
1H FY19
Deep inspection
• SD-WAN & Meraki integration
• Cloud-delivered firewall
• Full web proxy
My Commitment
TEAM SOLUTIONS SECURITY+ +
Your Commitment
PARTNERSHIP OPEN TRUST+ +
Building The Future
Lead Together
Recommended