Kaspersky Enterprise Cybersecurity Powered by HuMachine TM. Intelligence. Freddy Girón. Nexsys LAtam

Transcription

1 Kaspersky Enterprise Cybersecurity Powered by HuMachine TM Intelligence Freddy Girón Nexsys LAtam

2 Cuales son los principales desafíos de Seguridad que tienen las empresas y corporaciones hoy en día.

3 Tendencias tecnológicas y Amenazas Nosotros entendemos las Tendencias globales y las Amenazas ellas traen Ciudades inteligentes Comercio en línea Infraestructura critica en rieso Desafíos para proteger la data y la privacidad Internet de las cosas Consumismo y movilidad Big data Automóviles inteligentes Fragmentación del internet Virtualización y la Nube 3 Merger of cybercrime and APTs Supply chain attacks Decreasing cost of APTs Amenazas moviles Wipers & cyber-sabotage Trends and Threats Ataques a ciudades inteligentes Targeting hotel networks Ransomware in Targeted Attacks Financial phishing attacks Malware for ATMs Ataques dirigidos Online banking at risk Attacks on PoS terminals IoT botnets Massive data leaks Threats to Smart Cities Cyber-mercenaries Comercialización de APTs Hacktivism Vulnerabilidades en Autos Ransomware

4 Our Major Discoveries FLAME GAUSS RED OCTOBER CARETO /THE MASK REGIN EQUATION DUQU 2.0 SOFACY LAZARUS LURK PROJECT- SAURON Active since Detection May 2012 July 2012 January 2013 February 2014 Spring of Classification Cyber-espionage malware Cyber-espionage campaigns Series of cyber-espionage campaigns Complex cyberattack platform Cyber-espionage malware Cyber-espionage & sabotage, financial attacks Cybercriminal operation Cyber-espionage malware Description Spreads over a local network or via a USB-stick Records screenshots, audio, keyboard activity and network traffic Sophisticated Toolkit with modules that perform a variety of functions One of the first massive global espionage campaigns Contains Russian language text in the code notes Complex toolset with malware, rootkit, bootkit, one of the most advanced APTs ever Attacks devices Running on Windows, Mac OS X & Linux The first Cyberattack platform known to penetrate and monitor GSM networks in addition to other standard spying tasks Equation malware is able to infect the hard drive firmware, it uses interdiction technique to infect Victims, and mimics criminal malware A highly Sophisticated malware platform exploiting up to three 0-day vulnerabilitiess Sofacy (also known as Fancy Bear, Sednit, STRONTIUM and APT28 ) is a highly professional threat actor. Suspected of a connection with the notorious Miniduke actors, Sofacy has been notable for its extensive use of 0-day exploits A group believed to be behind the attack on Sony Pictures Entertainment in 2014 and the Central Bank of Bangladesh in Responsible for data destruction and financial theft as well as conventional cyber-espionage operations against multiple businesses around the world The gang responsible for creating infected computers networks that resulted in the theft of more than $45M. from banks, other financial institutions and businesses since The group was looking for a way into remote banking services so that it could steal money from customer accounts A threat actor attacking state organizations with a unique set of tools for each victim, making traditional indicators of compromise almost useless. Project- Sauron deliberately avoids patterns, customizing its implants and infrastructure for each individual target, and never reusing them Targets 6 >600 specific targets Our Major Discoveries The vast majority of victims were located in Lebanon diplomatic and governmental agencies >10,000 victims in 31 countries Up to 100 victims among telecoms, government entities, multinational political bodies and others Up to 1,000 high-profile victims in nanotechnology, nuclear industry and other industries, as well as activists, mass media & others Malware infections linked to the P5+1 events and venues for high level meetings between world leaders Military and government entities worldwide Media, financial institutions, Casinos, Software developers for investment companies, Crypto-currency businesses Banks, other financial institutions and businesses Mainly state organizations. Over 30 victims in Russia, Iran and Rwanda

5

6 Endpoint Security The leading multi-layered endpoint protection platform, based on Next Gen cybersecurity technologies

7 True Cybersecurity True cybersecurity doesn t just prevent cybersecurity incidents: it predicts, detects and responds to them effectively, flexibly and reliably. Our comprehensive portfolio of solutions achieves all this. thanks to our unique combination of HuMachine TM intelligence and an Adaptive approach, protecting your business rigorously against Next Gen and all other kinds of threats and minimizing the damage an incident could cause. Reliable Efficient Adaptive For 20 years, we have developed the most tested, most awarded solutions and technologies that protect 400 million users worldwide To detect effectively we use our global cyberbrain combined with machine learning algorithms and powered by the unequalled expertise The whole product portfolio is built to help implement the completely adaptive security architecture cycle of Prediction, Prevention, Detection and Response 9 True Cybersecurity

8 Endpoint Threats are evolving every day Targeted attacks and malware campaigns 325,000 New Endpoint Threats per day Increased threats to Mac machines Continued exploitation of vulnerabilities in 3rd party software Dramatic increase in Ransomware Exponential growth of mobile malware 10 Endpoint Threats

9 Multi-Layered Protection powered by Machine Learning The best security foundation possible Kaspersky Lab s industry-leading protection against known, unknown and advanced threats File, Web and Mail Threat Prediction Cloud-based Intelligence Anti-Ransomware Protection HIPS and Network Threat Protection Exploit Prevention Machine Learning and Behavior Detection 38 Multi-Layered Protection POWERFUL MULTI-LAYERED PROTECTION FROM ALL FORMS OF CYBER-THREAT

10 Kaspersky Endpoint Security Kaspersky Security Center VULNERABILITY MANAGEMENT Vulnerability detection & patch management plus extended client management capabilities Including SIEM support DATA PROTECTION fully integrated data encryption Including 2-stage authentication THREAT PREVENTION Protection against known, unknown and advanced threats based on machine learning ADVANCED CONTROL TOOLS 12 Endpoint Security MOBILE SECURITY smartphone and tablet security and management Including self-service portal and web console Application, device and web controls Including Default Deny test environment

11 Kaspersky Lab ENTERPRISE Solutions & Services

12 Kaspersky Adaptive Security Framework PREDICT Threat Intelligence sharing Defense Strengthening PREVENT Security Assessment Penetration Testing Custom Reports Embedded Security Cybersecurity Awareness Professional Services Expert Analysts Threat Intelligence Portal APT Reports Endpoint Security Cloud Security THREAT INTELLIGENCE RISK MITIGATION Machine Learning HuMachine Big Data / Threat Intelligence SECURITY INCIDENT MANAGEMENT CONTINUOUS MONITORING Endpoint Detection & Response Anti Targeted Attack Managed Protection Malware Analysis Digital Forensics Incident Response Premium Support Threat Data Feeds Targeted Attack Discovery APT Reports Endpoint Detection & Response RESPOND Effective Countermeasures Multi-Vector Discovery DETECT 14 Kaspersky Adaptive Security Framework

13 Kaspersky Enterprise Security Solutions Technological Anti Targeted Attack Discovering and mitigating the risk associated with advanced threats and targeted attacks Endpoint Security The leading multi-layered endpoint protection platform, based on Next Gen cybersecurity technologies Cloud Security Borderless security engineered for your hybrid cloud environment Cybersecurity Services Threat Intelligence, Security Training, Incident Response and Risk Assessment from the world leader Security Operations Center Empowering your SOC with the tools and information to efficiently detect and remediate threats Fraud Prevention Proactive detection of cross-channel fraud in Real Time By Industry Financial Services Cybersecurity Raising security levels through predicting, preventing and responding to financially motivated cybercrime Telecom Cybersecurity Securing telecoms data, applications and networks against the most advanced cyberthreats. Healthcare Cybersecurity Protecting IT networks, medical equipment and confidential clinical data from cyberthreats Data Center Security Empowering your data center to detect and respond to the most advanced cyberthreats Government Cybersecurity Meeting the most stringent security requirements of government organizations and related public bodies Industrial Cybersecurity Specialized protection for industrial control systems 15 Enterprise Security Solutions

14 Cybersecurity Training DIGITAL FORENSICS STANDARD AND ADVANCED Develop and enhance practical skills in searching for digital cybercrime tracks and analyzing different types of data to uncover attack timelines and sources Kaspersky Security Training INCIDENT RESPONSE Guidance through all stages of the incident response process, ensuring successful remediation MALWARE ANALYSIS AND REVERSE ENGINEERING STANDARD AND ADVANCED Understand how to analyze malicious software, collect IOCs, write signatures to detect malware, and restore infected files and documents 16 Incident Response

15 Incident Response DIGITAL FORENSICS Analysis of the acquired digital evidence and reconstruction of the attack chronology and logic, revealing the root cause of the incident Kaspersky Incident Response MALWARE ANALYSIS Gaining a complete understanding of the behavior and objectives of specific malware files INCIDENT RESPONSE Covering the entire incident investigation cycle to completely eliminate the threat to your organization 17 Incident Response

16 Kaspersky Lab In The Market

17 Independent Awards & Recognition 100% 80% Score of TOP 3 places In 2016 Kaspersky Lab products participated in 78 independent tests and reviews. Our products were awarded 55 firsts and achieved 70 top-three finishes. Symantec Kaspersky Lab 1st places 55 Participation in 78 tests/reviews TOP 3 = 90% 55 first places* 10 second places* 60% VIPRE Sophos Avira ESET Bitdefender 5 third places* 40% 20% BullGuard Quick Heal F-Secure G DATA Avast Microsoft AVG Intel Security (McAfee) Trend Micro * Notes: According to summary results of independent tests in 2016 for corporate, consumer and mobile products. Summary includes independent tests conducted by : AV- Comparatives, AV-Test, SELabs, MRG Effitas, VirusBulletin, ICSA Labs. Tests performed in these programs assess all protection technologies against known, unknown and advanced threats. The size of the bubble reflects the number of 1st places achieved. No of independent tests/reviews 0% *78 independent tests completed by Kaspersky Lab products in 2016 alongside 15 competitors 19 Independent Awards & Recognition

18 Six Years a Leader in Gartner s Magic Quadrant CHALLENGERS LEADERS 2017 marks Kaspersky Lab s sixth time as a Leader in Gartner s Magic Quadrant. It s also the year we mark our company s 20th anniversary. We view consistently high performance as a hallmark of true leadership, and Kaspersky Sophos Trend Micro Lab s success is built on True Cybersecurity: protecting the authenticity of your digital Intel Security Microsoft Symantec Kaspersky Lab world using the latest technologies combined with the best of human expertise. True Cybersecurity means always moving forward, always working to stay one step ahead of cyberthreats, wherever they may originate. ABILITY TO EXECUTE Eset Cylance 360 Enterprise Security Group SentinelOne Carbon Black F-Secure Panda Security CrowdStrike Invincea Webroot AhnLab Malwarebytes Palo Alto Networks Bitdefender Comodo G Data Software NICHE PLAYERS VISIONARIES COMPLETENESS OF VISION As of January Six Years a Leader in Gartner s Magic Quadrant Gartner Magic Quadrant Leaders are selected for completeness of vision, and the ability to execute and deliver on that vision. We believe this kind of leadership and vision is why Kaspersky Lab s 400 million users worldwide trust us to future-proof their security.111 Source: Magic Quadrant for Endpoint Protection Platforms, 30 January 2017 GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally, and is used herein with permission. All rights reserved. This graphic was published by Gartner, Inc. as part of a larger research document and should be evaluated in the context of the entire document. The Gartner document is available upon request from the link. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner 's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to th is research, including any warranties of merchantability or fitness for a particular purpose.

19 Technology and OEM Partners ~120 their industry leaders trust us to protect customers Technology Integration Private Labelling / Co-branding Pre-installation / Bundling Preload 21 Technology and OEM Partners

20 Let s Talk? Kaspersky Lab Freddy Girón González Nexsys Latam