Definição complexa do usuário. Superfície de ataque de dados em evolução. Perímetro em expansão. Ataques em diversas etapas

Transcrição

1

2 Definição complexa do usuário Superfície de ataque de dados em evolução Perímetro em expansão Ataques em diversas etapas

3 Estrutura de segurança Datacenter da sede Escritório regional

4 Estrutura de segurança Datacenter da sede Escritório regional Usuários móveis Dispositivos pessoais

5 Estrutura de segurança Datacenter da sede Escritório regional Usuários móveis Dispositivos pessoais

6 Criptografia SSL Estrutura de segurança Datacenter da sede Criptografia SSL Escritório regional Criptografia SSL Usuários móveis Dispositivos pessoaisdispositivos da IOT

7 Criptografia SSL Estrutura de segurança Datacenter da sede Criptografia SSL Escritório regional Criptografia SSL Usuários móveis Dispositivos pessoaisdispositivos da IOT

8 Datacenter da sede Escritório regional Usuário s móveis Dispositivos pessoaisdispositivos da IOT

9

10 Arquivo URL Whitelist Blacklist Certificado Aprendizagem automática Cyber Security Services

11 ON PREMISES CLOUD File URL Whitelist Blacklist Certificate Machine Learning Third Party Ecosystem Endpoint Cloud Cloud Secure Web Gateway VIP Identity Cloud DLP Security CASB Managed PKI Data Center Security Cloud Sandbox Website Security Encryption Cloud Data Protection SOC Workbench Cyber Security Services Secure Web Gateway DLP Encrypted Traffic Management Security Analytics IT System Management Malware Analysis Web Application Firewall Risk Insight Local Intelligence Endpoint Protection EDR Content Analysis Encryption Data Center Security Performance Optimization Compliance Management Advanced Threat Protection Secure Mail Gateway SIEM Integration Copyright 2016 Symantec Corporation 11

12 FORNECEDOR TREINAMENTO PADRÃO

13 REALIDADE 928 aplicações 1 dos funcionários admitem utilizar aplicações não aprovadas 1 Fonte: 1 CIO Insight PERCEPÇÃO 30 a 40 aplicações Fonte: 1 Elastica Q Shadow Data Report

14

15 WannaCry Ransomware Basics of the Attack Security Stack Internet Microsoft announces SMB vulnerability and patch within MS Shadowbrokers release EternalBlue in their datadump which exploits this Microsoft SMB vulnerability WannaCry is seen in the wild and initial compromise vector unknown WannaCry encrypts files for ransom on host and propagates to other unpatched/unprotected hosts Copyright 2017 Symantec Corporation 15

16 Symantec s Timeline of WannaCry Symantec Blocked 22M Attempted Attacks Over Hundreds of Thousands of Endpoints Continuous Protection Critical Systems Protection (CSP) Data Center Security (DCS) Cloud Workload Protection (CWP) IT Management System (ITMS) Control Compliance Suite (CCS) Malware Analysis / Cynic MSSP Cyber Security Services Microsoft announces vulnerability MS and releases patch Symantec delivers protection to block SMB exploitation of MS including blocking for EternalBlue for SEP14, SEP12 and Norton WannaCry is first seen in the wild March 14 April 14 May 2 May 12 1AM Central US May 12 3PM Central US ShadowBrokers release EternalBlue Symantec Endpoint Advanced Machine Learning and Norton automatically block most variants of WannaCry Symantec Global Intelligence Network instantly adapts providing protection to SEP14 and Blue Coat ProxySG Symantec delivers further updates to protect against potential new variants for SEP14, SEP12 and Norton Copyright 2017 Symantec Corporation 16

17 Dynamically Stopping the WannaCry Impact SEP Automatically Protected Customers via Several Techniques Superior Protection Highest Efficacy with Low FPs Better Performance Easy Integration with SWG & Security Infrastructure Advanced Machine Learning Pre-execution detection of new and evolving threats using advanced machine learning Zero-Day Exploit Protection Known and unknown vulnerabilities prevented with Memory Exploit Mitigation (MEM) Emulator Real-time sandbox reveals threats that use encryption to evade detection Intrusion Prevention Prevent lateral movement of threats across host based services Intelligent Threat Cloud Real-time cloud lookup provides a 70% reduction in daily update size Performance Enhancements Faster real-time threat protection with near-zero added latency Enabling Integrations REST API Bluecoat integrations Copyright 2017 Symantec Corporation 17