Security Market Intelligence: Security Risks, Compliance Challenges Fuel Security Spend

Transcription

1 Security Market Intelligence: Security Risks, Compliance Challenges Fuel Security Spend Robert Westervelt IDC Data Security Practice Twitter.com/rwestervelt

2 Talking Points Data Breaches & Modern Attacks Security Buyer Trends Endpoint & Network Security IoT Security Opportunity Top Spending Industries Security M&A Activity IDC Visit us at IDC.com and follow us on 2

3 IDC Visit us at IDC.com and follow us on 3

4 Attacker Sophistication Targeted/Multi-Stage Attacks Coordinated Attacks Evasion; VM Detection Toolkits Multiple Plugins Vulnerability Growth 99% Hit Known Flaws Exploits Are Automated Adobe; Microsoft Messaging Risks 91% Ransomware 89% Organized Crime 63% File Attachments

5 Maintenance Data Breaches: A Costly Toll Phishing Attack Account Credential Theft Attachment 26 People Involved Recon Activity $180,000 In Overnight Payroll Transfers IDC Visit us at IDC.com and follow us on 5

6 Plastics Maker Data Breaches: A Costly Toll Gameover-Zeus victim Phishing attack Account credential theft Keystroke logger $374K two wire transfers Banks detected activity following $500K attempt IDC Visit us at IDC.com and follow us on 6

7 Agricultural Business Data Breaches: A Costly Toll Brute force attack 37 failed login attempts over six days. Electronic funds transfers, wire transfers, ACH payments $223,500 in three wire transfers over three days IDC Visit us at IDC.com and follow us on 7

8 Buying Trends: Top Spending Priorities 83% Secure Cloud MSSPs 90% Network 63% Data IDC Visit us at IDC.com and follow us on 8 8

9 Endpoint Security Spending: Midmarket 61.7% 51.7% 42.6% 37.4% Modern Antivirus ENDPOINT/PC DESKTOP SCANNING FOR OR NOTEBOOK VIRUSES/OTHER Endpoint ANTIMALWARE MALWARE Response (ANTIVIRUS, & ANTISPOOFWARE, Remediation ETC.) Joint IDC-The Channel Company Survey LAPTOP ENCRYPTION ENDPOINT DLP Response to Ransomware Outbreak Compliance Initiatives IoT Concerns (Healthcare) IDC Visit us at IDC.com and follow us on 9

10 Endpoint Security Specialized Threat Analysis and Protection CAGR Corporate 4.4% Consumer 2.4% Symantec McAfee Trend Micro Kaspersky Lab Cylance Crowdstrike Carbon Black SentinelOne Sophos Webroot ESET Malwarebytes Palo Alto Traps Check Point Ransomware key driver Buyers seek fresh endpoint security products Influencers vary by company Networking System admins CISO/CIO Next-gen Antivirus Antivirus coupled with response Containerization and Isolation IDC Visit us at IDC.com and follow us on 10

11 Network Security Spending: Midmarket 63% 56% 43% 41% MODERN NETWORK SECURITY INFRASTRUCTURE TO SUPPORT ADVANCED THREAT DETECTION MANAGED SECURITY SERVICES REFRESH OF STANDARD NETWORK SECURITY PRODUCTS Joint IDC-The Channel Company Survey SECURITY INITIATIVES TO SUPPORT SOFTWARE DEFINED NETWORKING ARCHITECTURE IDC Visit us at IDC.com and follow us on 11

12 Network Security Specialized Threat Analysis and Protection CAGR Firewall/UTM 10.7% IDP 5.3% Cisco Systems Check Point Palo Alto Networks Fortinet Juniper Sophos Trend Micro FireEye Arbor Networks CounterTack Vendors build out sandboxing, targeted attack defense solutions Check Point updated R80 management console; Pushing SandBlast offering. Cisco Systems: Meraki security product line Fortinet: Acquired Meru Networks; Launches cloud security service FireEye: Adding flexible offerings IDC Visit us at IDC.com and follow us on 12

13 IoT Security and Costs: Key Concerns Q. What do you think will hinder the deployment of an Internet of Things (IoT) solution within your organization in the next two years? Security and/or privacy concerns 27.0% Upfront costs Other IT priorities 19.3% 22.1% No budget allocated Concern about technology stability Ongoing costs Unclear or unproven ROI Fear or reality of deployment complexity Lack of a holistic solution Lack of skills internally 18.5% 17.5% 17.3% 16.0% 14.7% 14.6% 14.3% Security and/or budget are the top inhibitors for half of European companies. Other IT priorities are difficult to overcome. 0% 5% 10% 15% 20% 25% 30% Source: IDC's Global IoT Decision Maker Survey, August

14 Midmarket Security Spend: Top Five Industries 1 Manufacturing: Efficiency improvements/iot; IT-OT 3 Legal: Top industry for targeted attacks w/oil & gas 2 4 Banking/Finance: Cognitive technologies, biometrics for payments; blockchain Education: Confidentiality, PII protection; open, collaborative environment; connectivity 14 5 Healthcare: IoT; PII; Balance security and patient care IDC Visit us at IDC.com and follow us on IDC U.S. SMB Security Update

15 Disruption: Security Market M&A 8x Earnings Biggest Acquirers: Cisco Symantec Microsoft IBM EMC Symantec Symantec Dell Accenture Carbon Black Sophos Malwarebytes Palo Alto Forcepoint Acquisition Blue Coat LifeLock EMC/RSA Endgame Confer Invincea Saferbytes LightCyber Skyfence IBM Agile 3 Cisco Trend Micro MicroFocus CloudLock HPE TippingPoint HPE Security IDC Visit us at IDC.com and follow us on 15

16 The Road Ahead: Security Market Opportunity Endpoint Consolidation is Coming Network Security Vendors Adding Cloud, Endpoint Buyers Seek Cloud Security, Managed Services IoT Analytics Prompts Security Opportunity Create A Security Blueprint: Guide customers through the security maturity curve. Consider frameworks: 20 Critical Security Controls Center for Internet Security