PEOPLE CENTRIC SECURITY THE NEW

Transcription

1 PEOPLE CENTRIC SECURITY THE NEW PARADIGM IN CYBERSECURITY David Karlsson SE Nordics March Proofpoint, Inc.

2 Proofpoint at a Glance LEADING CUSTOMERS DEEP SECURITY DNA UNIQUE VISIBILITY PARTNERS & AQUISITIONS 59 Fortune threat ops and research team 6B+ messages processed daily 40K+ customers ~21% revenue invested in R&D 500B+ node threat graph CLOUDMARK 90%+ renewal rate 300K+ daily malware samples 8B+ URLs per day Proofpoint, Inc.

3 Industry trends Proofpoint, Inc.

4 Shifts in the Industry Threats use social engineering, not vulnerabilities Shift to cloud & mobile creates new threat vectors, data exposure fraud becomes #1 source of loss 99%+ Rely on user to run malicious code 70% Malicious links are credential phishing $5.3B Direct losses since January 2015, up 2,370% 40,203 Organizations victimized in the US alone Source: FBI Proofpoint, Inc.

5 A People-Centric View of Vulnerability High Value Access to critical systems Access to sensitive data Authority over teams with access Highly targeted Highly sophisticated High volumes Highly Attacked High Risk Targets Highly Vulnerable Vulnerable devices or networks Interacts with malicious content Highly visible Proofpoint, Inc.

6 #1 Threat Vector $ Invented Hello, WWW! Spam Malware Spear Phishing Social Eng Attacks Data Breaches Ransomware BEC $712 Per employee $3.7M Per company $1B+ For large breaches $5B In 2017 $5.3B worldwide Source: CSOonline.com, Cybersecurity ventures, Nucleus Research, FBI Proofpoint, Inc.

7 Organisations Underinvest in ; Attackers Don t IT Security Industry Attack Vectors Network 62% Endpoint 18% Web 12% 8% Other 90%+ of sophisticated attacks target people, largely via Source: Gartner (2017 forecast) Source: Verizon DBIR, Trend Micro, FEYE, etc Proofpoint, Inc.

8 The Great Migration to Office 365 & Cloud 67% 78% of enterprises have told Gartner that they will migrate to Office 365 by % 38% 43% 60% Will use 3rd party tools to protect Office Proofpoint, Inc.

9 In the Sights of the Actor Proofpoint, Inc.

10 Everyone is Targeted All Size Organizations All Industries All Roles Average # BEC Attacks Per Company Targeted 2017-Q2 Manufacturing 44 Telecommunications 39 Technology 38 Energy/Utilities 31 Automotive 26 Financial Services 23 Retail 22 Transportation 20 Healthcare 19 CFO HR FINANCE PAYROLL COO 47% 25% 13% 8% 5% Source: Proofpoint Threat Research Proofpoint, Inc.

11 The Fraud Challenge $5.3B Reported Losses Due to BEC (FBI) 2/3 Impostor s are Domain-spoofing Attacks (Proofpoint) 95% Enterprise Network Attacks Begin with Spear Phishing (SANS Institute) $100M 150% 45% Stolen by 1 Person Spoofing Business Partners (US DOJ) YoY Increase of Consumer Phishing (APWG) Conversion Rate for Consumer Fraud (Google) Proofpoint, Inc.

12 Solutions to help Proofpoint, Inc.

13 Advanced Security Protection Targeted Attack Protection arrives Security Impostor Dynamic Anti-Virus SPAM Virus Classification Malware DDOSReputation Phishing Attachment Malicious Defense Attachments Advanced Threats Advanced Threats URL Defense Malicious URLs TAP SaaS Defense Fraud Protection Executive Impersonation Supply-chain Phishing Fraud Domain Fraud (BEC) Defense Discover Consumer Phishing Look Alike Business Continuity Remediation TRAP Response Business Continuity Continuity Information Protection Exfiltration Protecting Insider Threats Sensitive Information Regulatory Compliance Encryption DLP SaaS Protection leaves Proofpoint, Inc.

14 Advanced Security Protection Targeted Attack Protection arrives Security Impostor Dynamic Anti-Virus SPAM Virus Classification Malware DDOSReputation Phishing Attachment Malicious Defense Attachments Advanced Threats Advanced Threats URL Defense Malicious URLs TAP SaaS Defense Fraud Protection Executive Impersonation Supply-chain Phishing Fraud Domain Fraud (BEC) Defense Discover Consumer Phishing Look Alike Business Continuity Remediation TRAP Response Business Continuity Continuity Information Protection Exfiltration Protecting Insider Threats Sensitive Information Regulatory Compliance Encryption DLP SaaS Protection leaves Proofpoint, Inc.

15 Delivering People-Centric Security RISK VISIBILITY PREVENT DEFEND RESPOND THREAT PROTECTION Stop Fraud Stop Threats Orchestrate Response INFORMATION PROTECTION Limit Data Exposure Protect Data Access Stop Data Loss USER PROTECTION Simulate Attacks Isolate Web Browsing Train Users Proofpoint, Inc.

16 WIN A RING AT THE PROOFPOINT STAND. Visibility. It matters in all types of security: network and home. Take a Threat Discover Risk Assessment to win a Ring Video Doorbell and you could walk away with a better view of who s knocking on your door at home Proofpoint, Inc.

17 Thank You! Proofpoint, Inc.