100% Endpoint Protection dank Machine Learning, EDR & Deception?

Transcription

1 100% Endpoint Protection dank Machine Learning, EDR & Deception? <REFERENT> <JOB TITLE> 13. Februar 2018

2 Evolving Threat Landscape Hard to keep up with significant growth and sophistication in cyber threats 1,000,000 Per DAY new malware variants detected on the endpoints in % Increase in targeted attacks 36% Increase of ransomware in B Identities exposed in data breaches in the last 8 years 18.4M Mobile malware infections blocked by Symantec Source: Symantec ISTR Report 2017 Copyright 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY 3

3 POINT PRODUCTS = DISJOINTED SECURITY Endpoint Security Challenges / Chaos SHORTAGE OF SECURITY PERSONNEL MOBILE MALWARE AV VENDOR EVOLVING THREATS LANDSCAPE STEALTHY ATTACKS TARGETED THREATS RANSOM- WARE Roaming users BYOD Ownership Form-factor Location EDR VENDOR WEB VENDOR VENDOR VULNERABLE MOBILE WORKFORCE OPERATIONAL COMPLEXITY Copyright 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY 4

4 SEP Security Framework SINGLE AGENT Copyright 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY 7

5 SEP Security Framework SEP 14 or SEP Cloud: DISCOVER BLOCK SINGLE AGENT REMEDIATE REPORT Copyright 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY 8

6 SEP Security Framework EDR: EXPOSE PRIORITIZE SINGLE AGENT INVESTIGATE HUNT CONTAIN RESOLVE Copyright 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY 10

7 SEP Security Framework SEP Deception: DEPLOY DECEPTORS MONITOR SINGLE AGENT ALERT ANALYZE Copyright 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY 13

8 SEP Security Framework SEP Hardening: ANALYZE Risk Insight: VISUALIZE ISOLATE HARDEN SINGLE AGENT ANALYZE BENCHMARK Copyright 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY 15

9 SEP: Verteidigung in der Breite 2.0 Verbesserter Schutz vor Targeted Attacks und Zero-Days mit mehrschichtigem Schutz Patentiertes System für Cloud Abfragen zum Scan von unbekannten Bedrohungen NETWORK FIREWALL & INTRUSION PREVENTION DEVICE CONTROL & SYSTEM LOCKDOWN MEMORY EXPLOIT MITIGATION REPUTATION ANALYSIS ADVANCED MACHINE LEARNING EMULATOR DECEPTION BEHAVIOR MONITORING NETWORK FIREWALL & INTRUSION PREVENTION Blocks malware before it spreads to your machine and controls traffic Control file, registry, and device access and behavior; whitelisting, blacklisting, etc. Blocks zeroday exploits against vulnerabilities in popular software Determines safety of files and websites using the wisdom of the community Pre-execution detection of new and evolving threats Virtual machine detects malware hidden using custom packers Identify breaches by deceiving attackers with bait Monitors and blocks files that exhibit suspicious behaviors Blocks malware before it spreads to your machine and controls traffic INCURSION INFECTION INFESTATION and EXFILTRATION Copyright 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY 17

10 SEP: Verteidigung in der Breite 2.0 Verbesserter Schutz vor Targeted Attacks und Zero-Days mit mehrschichtigem Schutz Patentiertes System für Cloud Abfragen zum Scan von unbekannten Bedrohungen POWER ERASER HOST INTEGRITY SECURE WEB GATEWAY INTEGRATION SEP EDR (ATP 3.0) Aggressive remediation of hard-to-remove pre-existing infections Quarantine, detect unauthorized change, conduct damage assessment and ensures compliance Use APIs to orchestrate a response from Secure Web Gateway Full endpoint capture and record. Real-time IOC hunting, correlation and response. REMEDIATE Copyright 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY 18

11 SEP Family Provides Complete Endpoint Security with a Single Agent Deception Application Isolation & Control Mobile Threat Defense Anti-Malware Endpoint Detection & Response Advanced Malware Protection Copyright 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY 19

12 Sprechen Sie uns an!