Maximum Security with Minimum Impact : Going Beyond Next Gen

Transcription

1 SESSION ID: SP03-W10 Maximum Security with Minimum Impact : Going Beyond Next Gen Wendy Moore Director, User Protection Trend

2 Hyper-competitive Cloud Rapid adoption Social Global Mobile IoT Connected

3 3 Copyright 2017 Trend Micro Inc.

4

5

6 Complex Networks Cloud and Virtualization Consumerization

7 90% 65% 80% Had Had zero-day network or Had active Command and Control unknown attacks in their or malware exploits networks 7 Copyright 2017 Trend Micro Inc. Source: Live proof of concepts 2016

8 Beyond Next Gen Security Smart Optimized Connected

9 KNOWN BAD KNOWN GOOD Years ago, the threat landscape was black and white 9 Copyright 2016 Trend Micro Incorporated. All rights reserved.

10 KNOWN BAD KNOWN GOOD Anti Malware Blacklisting Whitelisting Application Control A number of classic threat defense techniques tackle these Content Filtering Encryption 10 Copyright 2016 Trend Micro Incorporated. All rights reserved.

11 Zero-day attacks UNKNOWN Targeted attacks Ransomware Now, the grey is growing and is much harder to defend against Business Compromise Lateral movement 11 Copyright 2016 Trend Micro Incorporated. All rights reserved.

12 12 Copyright 2016 Trend Micro Incorporated. All rights reserved.

13 Everything Has Pros and Cons Application Whitelisting Blocks all unknown apps Only stops EXEs Behavioral Analysis Recognizes behavior CPU intensive Exploit Protection Blocks vulnerabilities that threats exploit Can t block threats that don t exploit app/os vulnerabilities Machine Learning EXE file detection Higher false positives, needs to be trained with specific file types 13 Copyright 2016 Trend Micro Incorporated. All rights reserved.

14 Multiple Techniques Sandbox Analysis Intrusion Prevention Application Control Machine Learning Blend of Techniques Global Threat Intelligence Integrity Monitoring Behavioral Analysis Anti-Malware & Content Filtering Response & Containment

15 The Right Technique At The Right Time Web & File Reputation Exploit Prevention Application Control Variant Protection Pre-execution Machine Learning Behavioral Analysis & Runtime Machine Learning Safe files allowed Sandbox Analysis Malicious files blocked

16 Optimized Sandbox Analysis Intrusion Prevention Network Security Application Control Machine Learning Hybrid Cloud Security Behavioral Analysis Anti-Malware & Content Filtering Response & Containment Integrity Monitoring Endpoint Security

17 Global Threat Intelligence Connected Network Security Hybrid Cloud Security Endpoint Security

18 Threat Defense Lifecycle Coverage Enable rapid response through shared threat intelligence and delivery of real-time security updates Assess potential vulnerabilities and proactively protect endpoints, servers and applications RESPOND PROTECT Gain centralized visibility across the system, and analyze and assess impact of threats DETECT Detect advanced malware, behavior and communications invisible to standard defenses

19 Beyond Next Gen Security Smart Cross-generational blend of threat defense techniques Optimized Designed for and integrated with leading platforms and applications Connected Centralized visibility and control and automatic sharing of threat intelligence

20 Next Steps? Evaluate if you are using everything your existing solutions have to offer Identify gaps in each key domain: hybrid cloud, network and endpoint Look for solutions that: Continue to evolve threat protection techniques to address new threats Cover entire threat protection lifecycle: protect, detect, respond Share threat intelligence amongst security layers Give you centralized visibility and control 20

21 Thank You! Visit