Three billion IT security attacks

WHY CARE?

EVOLVING

Security threats are moving fast

BIG AND ORGANISED

The threat is huge, crossing geography and national

boundaries

EVERYONE IS DIGITAL

Risk is not just an IT problem, it’s a problem for any organisation that uses IT

NTT’s breadth and scope allowed it to analyse three billion IT security attacks in 2013

Cyber Security

in Global Business

Threat risk

identified as #3

More than

Threats

new

malware

51,000 Mobile

of critical

having been affected by cyber attacks.

infrastructure providers report

80%

95%of losses could be reduced by focused investment

We are all targetsAttacks by Industry

20

15

10

5

0

Education

Energy & Utilities

Finance

Gaming/Entertainment

GovernmentHealthcare

Hospitality

Manufacturing

Non-Profit

RetailTechnology

Transportation

Business Services

Construction/Real Estate

12%

1% 1% 1%0%

5% 6%

19%

6%

13%14%

3%

10% 10%

Kinds of AttacksThe increasing targets of attacks are applications… and the individuals using them.

Attacks by Category

34%

15%10%

8%

8%

6%

5%

5%

9%Client Botnet Activity

Suspicious

Network Manipulation

Service Specific Attack

Web Application Attack

Application Specific Attack

DoS/DDoS

Reconnaissance

Others

Findings

Basic security measures are required, not

optional. #1 Counter Measure to the changing THREATS

77% of the organisations involved had no incident response team, policies or procedures in place

71% of new malware goes undetected when analysed in a sandbox

Performing

Regular Vulnerability scans significantly reduces your Risk

Over 50% of vulnerabilities were already known some dating back to2004

Risk is shaped dynamically. Security threats are increasingly complex. We must modernise our thinking. The new perimeter is ME.

Missing Basic Controls

43% of incident response engagements were the result of

malware.

No Response Plan increases costs

Most of the costs associated with responding to incidents are due to

inadequate planning, missing basic controls and lack of formal training.

x

xxx

x

xxx

Modern attacks must be defended in-depth with network malware detection and purpose-built

solutions.

Defence in Depth

What can you do?

Address the eroding perimeter

Use effective patch

management

1 3

2 4Define and test incident response

Take advantage of new

technologies and techniques

Who is NTT?

Network coverage in 160 countries

Direct presence in 72 countries

243 data centres

Over 220 thousand employees

Sources :

Global Threat Intelligence Report - NTT Group

k index

NQ Mobile’s 2013 Midyear Mobile Security Report

2012 McKinsey & Co. “Cyber-safe: Key elements to prevent and respond to security threats”

www.nttict.com