Cyber Threat XChange: A New Approach to Managing Security

Transcription

1 Cyber Threat XChange: A New Approach to Managing Security

2 Cyber Threat XChange Kevin Charest, HCSC HITRUST Alliance

3 The Evolving Threat Landscape Cysiv LLC HITRUST Alliance

4 Evolving Threat Landscape: H Mega breaches rise even as GDPR penalties loom 259 reported data breaches in US in H (+16%) 71% of breaches were to healthcare organizations 15 of 259 were mega breaches (> 1 million records) Business Compromise exceeds expectations $12.5 Billion Cumulative Global Loss (Oct 2013 May 2018) HITRUST Alliance

5 Evolving Threat Landscape: H (continued) Serious vulnerabilities (Meltdown & Spectre) discovered in hardware make patching even more challenging 602 Trend Micro ZDI Advisories published in H without published patches SCADA vulnerability advisories increase (+30% vs H1-2017) Cryptocurrency mining detections more than doubles while ransomware remains an enterprise threat 47 new cryptocurrency miner malware families detected HITRUST Alliance

6 Background: Strategic Context of Threat Management & Response HITRUST Alliance

7 Partnership : CONNECTED DECEPTIVE ENHANCED Advanced honeypots and decoy nets Active monitoring by threat experts Access to Threat experts Advanced threat detection solutions IOC data from other participants Intelligence augmentation from threat experts Share and access data from community BASIC Alerts, Bulletins and Reports HITRUST Alliance

8 The Path Forward: Opportunities for Improvement Design CTX next for big data Threat data augmentation More advanced / responsive technology platform More sensors and better visibility (endpoints, network, datacenter, cloud) More intelligent detection & context (data science / AI to help with volume of events) HITRUST Alliance

9 The Path Forward New Company HITRUST Alliance

10 Introducing Cysiv Partha Panda, Cysiv CEO HITRUST Alliance

11 HITRUST Alliance

12 Partnership: Launched yesterday Advanced Managed Security Services Combines: Expertise Cyber Intel Technology Consumption-based pricing (No CapEx) In business 30 years $1.5B revenue Consistently profitable Market-leading products Global cyber intelligence ~7000 employees / 50 countries +500k commercial customers HITRUST Alliance

13 Paths to Better Security Security Controls Breadth Management Integration MSSP Detection & Response AMSS Cyber Risk Management as a Service MDR Log Analysis Monitoring & Response Threat Hunting & Analytics HITRUST Alliance

14 Cyber Risk Management as a Service Extend and elevate enterprise security operations & capabilities Large Trend Micro Enterprise Customers Key Target Customers HITRUST Cyber Threat XChange (CTX) Customers Related Professional Services Product Deployment Digital Forensics & Incident Response Service Levels (24x7x365) Monitoring (L1) Monitoring & Management (L2) Services Available Hybrid Cloud Security Trend Micro Deep Security Network IPS Trend Micro TippingPoint Advanced Threat Detection Trend Micro Deep Discovery User Protection Trend Micro Smart Protection Complete Deception 3 rd Party Solution Other (future) Trend Micro / 3 rd Party Solutions Cysiv Command Security Operations & Analytics Platform

15 Technology Differentiators Spotlight on these Cysiv Command Cysiv Connector Trend Micro Solutions 3 rd Party Security Controls Intel Threats Vulnerabilities Exploits Cyber Threat Exchange Contextual Information Expertise Deployment & Integration Security Engineering Incident Response Intel Hunting Data Science HITRUST Alliance

16 Cysiv Command: Key Benefits Threat detection reduces logs to key indicators and highly accurate detections to help facilitate incident discovery and prioritization Tiered data storage keeps costs low Community sharing of both IOC s and automation rules helps optimize from trusted peers Cysiv LLC. Full access to dashboards & reports allows you to co- manage or monitor HITRUST Alliance

17 Cyber Threat Exchange HITRUST Alliance

18 CONSUMPTION-BASED PRICING Pay only for the security you consume No CapEx HITRUST Alliance

19 Sabre & Cysiv Roy Mellinger, Sabre CISO HITRUST Alliance

20 Global technology provider to the travel industry 425,000+ travel agents 400+ airline customers 900,000+ hotel options 140+ countries 10,000+ employees 4,000+ technologists HITRUST Alliance

21 The Future Of Travel: A Large And Growing Market $1.6T Global travel gross bookings value, % Projected annual global travel growth, through 2020 PLAN SHOP PURCHASE TRAVEL RETURN HITRUST Alliance

22 Security Challenges Ineffective Log Management Skills Shortage Product Complexity Rising Costs HITRUST Alliance

23 Reasons Sabre is Partnering with Cysiv Product Portfolio Threat Intel / expertise Automation / Data-science Collaborative Approach Better Management of Security Controls SOC at economy of scale HITRUST Alliance

24 Cyber(Risk(Management(as(a(Service Incident Response workflow created to counter threats to Sabre. Related(Professional(Services Product& Deployment&& &&Digital&Forensics&&&Incident&Response Service(Levels 24x7x365& Monitoring&& &&&&24x7x365& Monitoring&&&Management Services(Available Sabre is sponsor member of the Cysiv Travel & Leisure Cyber Threat Exchange Hybrid(Cloud( Security Trend& Micro Deep&Security Network( IPS Trend& Micro& TippingPoint Advanced( Threat( Detection Trend& Micro& Deep&Discovery User( Protection Trend& Micro& Smart&Protection& Complete Cysiv (Command Security&Operations&&&Analytics&Platform Deception 3 rd Party Solution Other((future) Trend& Micro&/ 3 rd Party&Solutions <Icon goes here> <Icon goes here> <Icon goes here> HITRUST Alliance

25 Cyber Threat Exchange Sharing Threat Intelligence Across Trusted Communities HITRUST Alliance

26 Cyber Threat Exchange Sharing Threat Intelligence Across Trusted Communities Possible Participants HITRUST Alliance

27 à Expo à Cyber Security 3:30pm à cysiv.com à By Invitation, Launch 5:00pm Yellow Rose Ballroom à partha_panda@cysiv.com HITRUST Alliance