Upload File

delivering integrated cyber defense in the cloud generationmobile device protection machine learning...

  • Home
  • Documents
  • Delivering Integrated Cyber Defense in the Cloud GenerationMobile Device Protection Machine Learning Anti-Malware Engine Black/White Listing File Reputation File Prevalence and Frequency
16
Delivering Integrated Cyber Defense in the Cloud Generation Panagiotis Sotiriou Senior Presales Consultant Greece, Cyprus & Romania

Upload: others

Post on 08-Jul-2020

0 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: Delivering Integrated Cyber Defense in the Cloud GenerationMobile Device Protection Machine Learning Anti-Malware Engine Black/White Listing File Reputation File Prevalence and Frequency

Delivering Integrated Cyber Defense in the Cloud Generation

Panagiotis Sotiriou

Senior Presales Consultant

Greece, Cyprus & Romania

Page 2: Delivering Integrated Cyber Defense in the Cloud GenerationMobile Device Protection Machine Learning Anti-Malware Engine Black/White Listing File Reputation File Prevalence and Frequency

Copyright © 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY

The Big Numbers

Internet Security Threat Report Volume 23 | Copyright © 2018 Symantec Corporation SYMANTEC PROPRIETARY– Limited Use Only

Page 3: Delivering Integrated Cyber Defense in the Cloud GenerationMobile Device Protection Machine Learning Anti-Malware Engine Black/White Listing File Reputation File Prevalence and Frequency

Copyright © 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY

One attack per month in...

NotPetyaM.E.Docs, 96% ofinitial infectionsin Ukraine

CCleanerMulti staged, selectinginterestingtargets for follow-up

Internet Security Threat Report Volume 23

Copyright © 2018 Symantec Corporation SYMANTEC

PROPRIETARY– Limited Use Only

Page 4: Delivering Integrated Cyber Defense in the Cloud GenerationMobile Device Protection Machine Learning Anti-Malware Engine Black/White Listing File Reputation File Prevalence and Frequency

Copyright © 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY

Complex User Definition

Evolving Data Attack Surface

Expanding Perimeter

Multi-Phased, Multi-Staged Attacks

4

Page 5: Delivering Integrated Cyber Defense in the Cloud GenerationMobile Device Protection Machine Learning Anti-Malware Engine Black/White Listing File Reputation File Prevalence and Frequency

Copyright © 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY

Complex User Definition

RegionalOffice

Headquarters Data Center

Security Stack

5

Page 6: Delivering Integrated Cyber Defense in the Cloud GenerationMobile Device Protection Machine Learning Anti-Malware Engine Black/White Listing File Reputation File Prevalence and Frequency

Copyright © 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY

Complex User Definition

RegionalOffice

Headquarters Data Center

RoamingUsers

Security Stack

6

Page 7: Delivering Integrated Cyber Defense in the Cloud GenerationMobile Device Protection Machine Learning Anti-Malware Engine Black/White Listing File Reputation File Prevalence and Frequency

Copyright © 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY

Evolving Data Attack Surface

RegionalOffice

Headquarters Data Center

RoamingUsers

Security Stack

7

Page 8: Delivering Integrated Cyber Defense in the Cloud GenerationMobile Device Protection Machine Learning Anti-Malware Engine Black/White Listing File Reputation File Prevalence and Frequency

Copyright © 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY

Direct Connect Creates Expanded Networks to ProtectThe Expanding Network

RegionalOffice

Headquarters Data Center

RoamingUsers

SSL Encryption

SSL Encryption

Security StackSSL Encryption

8

Page 9: Delivering Integrated Cyber Defense in the Cloud GenerationMobile Device Protection Machine Learning Anti-Malware Engine Black/White Listing File Reputation File Prevalence and Frequency

Copyright © 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY

Multi-Phased and Multi-Staged Attacks

RegionalOffice

Headquarters Data Center

RoamingUsers

Security Stack

SSL Encryption

SSL Encryption

SSL Encryption

9

Page 10: Delivering Integrated Cyber Defense in the Cloud GenerationMobile Device Protection Machine Learning Anti-Malware Engine Black/White Listing File Reputation File Prevalence and Frequency

Copyright © 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY

Ensuring Safe Cloud UsageInnovation for the Cloud Generation:

RegionalOffice

Headquarters Data Center

RoamingUsers

10

Page 11: Delivering Integrated Cyber Defense in the Cloud GenerationMobile Device Protection Machine Learning Anti-Malware Engine Black/White Listing File Reputation File Prevalence and Frequency

Copyright © 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY

Full Packet Capture

Threat Forensics

Incident Workflow

Network Recording Reconstruction

Forensics & Recording

API Cloud Integration

Data Origination and Destination Awareness

Federated User-Based Policy Enforcement

Data Discovery and Machine Learning

Classification

Real-TimeBi-Directional DLP

Data Sovereignty

Cipher and Tokenization

Inline Enforcement Based on Policy

Encryption &Tokenization

Regulatory

Big Data Visualization

Compliance Standards, Reporting

& Enforcement

Reporting &Audit

Mobile Device Protection

Machine Learning

Anti-Malware Engine

Black/White Listing

File Reputation

File Prevalence and Frequency

Endpoint

WebProtection

Internet Classification

Malnet & Reputation

Machine Learning

Multi-Language

Real-Time Risk Scoring

Isolation of Web Traffic

Analytics &Intelligence

Cloud SOC

Anomaly Detection

User Risk Analysis

Cloud Application Risk Scoring

Artificial Intelligence

Integrated Cloud Data Analysis

API Cloud Integration

Machine Learning Data Algorithms

Real-Time Data Aggregation

Data Visualization and Compliance

Reporting

Access &Authorization

Inline Policy Enforcement

Federated Identity Integration

Granular Access Policy for Thousands of Cloud Applications

Advanced Malware

Customizable Detonation

Environments

Real-Time Detonation and

File Analysis

Evasion & Obfuscation

Detection

Visibility &Discovery

Application Identification

Library

Risks Scoringper Application

Compliance Reporting for Sanctioned &

Unsanctioned Apps

Light-weight agents

Low latency communications

Anomaly Detection

Cloud-based PKI & Device Certification

Compliance with IoT Standards

Device / IoT

Messaging

Targeted Attack Protection

Malware & Spam Filtering

Data Loss Prevention

Encryption

Anti-Phishing

Protection &Security

Compliance &Governance

Demands of the Cloud GenerationNeeds Across the Cloud Continuum

11

Page 12: Delivering Integrated Cyber Defense in the Cloud GenerationMobile Device Protection Machine Learning Anti-Malware Engine Black/White Listing File Reputation File Prevalence and Frequency

Copyright © 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY

12

Protection &Security

Compliance &Governance

Forensics & Recording

Real-TimeBi-Directional DLP

Encryption &Tokenization

Reporting &Audit

Endpoint

WebProtection

Analytics &Intelligence

Integrated Cloud Data Analysis

Access &Authorization

Advanced Malware

Visibility &Discovery

Device / IoT

Messaging

Demands of the Cloud GenerationVendor Sprawl Across the Cloud Continuum

Page 13: Delivering Integrated Cyber Defense in the Cloud GenerationMobile Device Protection Machine Learning Anti-Malware Engine Black/White Listing File Reputation File Prevalence and Frequency

Copyright © 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY

Symantec Integrated Cyber Defense Cloud Platform

End

po

int

Web

Pro

tect

ion

Ad

v. M

alw

are

Fore

nsi

cs &

R

eco

rdin

g

An

alyt

ics

&In

telli

gen

ce

Encr

ypti

on

&To

ken

izat

ion

Clo

ud

Dat

aA

nal

ysis

Bi-

Dir

ecti

on

alD

LP

Acc

ess

&A

uth

ori

zati

on

Rep

ort

ing

&

Au

dit

Vis

ibili

ty &

Dis

cove

ry

Dev

ice

/ Io

T

Mes

sagi

ng

Delivering a Simplified Security ModelConsolidating Cloud Security

13

Page 14: Delivering Integrated Cyber Defense in the Cloud GenerationMobile Device Protection Machine Learning Anti-Malware Engine Black/White Listing File Reputation File Prevalence and Frequency

Copyright © 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY

Web Isolation

Endpoint Protection

Mobile

WebSecurityService

DLPSecure Web Gateway

RiskInsight

MessagingGateway

Web Application Firewall

Advanced Threat Protection

MalwareAnalysis

EndpointManagement

Endpoint Protection

& EDR

Endpoint Protection

CloudVIP

Identity

LocalIntelligence

File

UR

L

Wh

itel

ist

Bla

cklis

t

Cer

tifi

cate

Mac

hin

e Le

arn

ing

SIEM Integration

Data Center Security

EncryptionContent Analysis

Performance Optimization

Cloud DLP CASB

Email Security

WorkloadProtection

Cloud Sandbox

Encryption

Risk &Compliance

Management

EncryptedTraffic

ManagementSecurity Analytics

Third Party Ecosystem

ON

P

RE

MIS

ES

CLO

UD

Cloud Data Protection

StorageProtection

Cyber SecurityServices

14

SOC Workbench

ON

P

RE

MIS

ES

Integrated Cyber Defense Platform

Page 15: Delivering Integrated Cyber Defense in the Cloud GenerationMobile Device Protection Machine Learning Anti-Malware Engine Black/White Listing File Reputation File Prevalence and Frequency

Copyright © 2017 Symantec Corporation SYMANTEC PROPRIETARY- LIMITED USE ONLY 15https://www.symantec.com/integration

https://www.symantec.com/integration
Page 16: Delivering Integrated Cyber Defense in the Cloud GenerationMobile Device Protection Machine Learning Anti-Malware Engine Black/White Listing File Reputation File Prevalence and Frequency

Thank you


Abusing File Processing in Malware Detectors for Fun and Profit

Prevalence of Helminthes Parasites of Oreochromis ...article.aascit.org/file/pdf/9230778.pdf · 80 Uneke Bilikis Iyabo: Prevalence of Helminthes Parasites of Oreochromis niloticus

Protecting Your Network from Malware - Akamai...and data exfiltration are growing in volume, sophistication, and prevalence. More than 250,000 new malicious programs are registered

Metamorphic Malware 1 Metamorphic Malware Research

Script-based malware detection in Online Banking · PDF file · 2015-06-08Script-based malware detection in online banking – security overview ... Script-based malware detection

Malwarebytes Anti-Malware User Guide · PDF file• For Premium subscription licenses, ... Windows 10 (32/64-bit), ... Malwarebytes Anti-Malware User Guide 5

Back to the Future with Document Malware - SANS · Back to the Future with Document Malware SANS DFIR Summit ... Insert -> Object -> Text from File -> HTML file containing ... May

Malware Propagation - University of Cincinnatigauss.ececs.uc.edu/Courses/c6056/pdf/virus-prop.pdfMalware Propagation Virus: Malware that inserts a copy of itself into another file,

Malware Fails Best Bugs in Malware Felix Leder [Malware ... · 1 Malware Fails Best Bugs in Malware Felix Leder [Malware Detection Team] [email protected] 5. desember 2011 malware

Intrusion Detection and Malware Analysis - Malware collection134.2.173.140/lehre/ws10/ids-malware/12-malware-collection.pdf · Intrusion Detection and Malware Analysis Malware collection

Detection of malware in a file using Cybersecurity

Malware Analysis and Antivirus Technologies: Kernel Malware & A Look at Malware … · 2011-08-16 · Malware Analysis and Antivirus Technologies: Kernel Malware & A Look at Malware

Malware and anti-malware (fun with Trojans) - Z. …z.cliffe.schreuders.org/edu/FS/Malware and anti-malware... · 2014-04-02 · Malware and anti-malware (fun with Trojans) ... with

Reversing & malware analysis training part 3 windows pe file format basics

Evading next-gen AV using A.I. - DEF CON CON 25/DEF CON 25 presentations/DEFCON...Evading next-gen AV using A.I. ... Malware variant not a PE file Change in file breaks behavior Malware

Malware Slums: Measurement and Analysis of Malware on ...homepage.cs.uiowa.edu/~mshafiq/files/malware... · Malware Slums: Measurement and Analysis of Malware on Traffic Exchanges

Malware Protection Test September 2017 - AV-Comparatives · Malware Protection Test - September 2017 - 4 - Introduction The Malware Protection Test is an enhancement of the File Detection

Automated Malware Analysis Report for IMG-FILE

File Policies and Malware Protection - CiscoFordetailsaboutMalwarelicenses,see: •MalwareLicensesforFirepowerThreatDefenseDevices •MalwareLicensesforClassicDevices HowtoConfigure

Malware & Anti-Malware

C5 MS Word Template Accessible - ricardocalix.com€¦ · Web viewMachine learning cybersecurity . File-less malware analysis. LAB 2: Writing a cLAssifier for file-less malware. Lab

Forensic Investigation & Malware Analysis against Targeted ...–For root cause of malware infection, we can trace back timeline based on the timestamps •Registry File Extraction

Malwarebytes Anti-Malware vs. Competitors · File: Malwarebytes_Antivirus_vs_Competitors.docx Edition 1 . Malwarebytes Anti-Malware vs. Seven Endpoint Security Products PassMark Software

ICSA 1998 Computer Virus Prevalence Survey - Security  · Web viewICSA 1998 Computer Virus Prevalence Survey. ... and Word documents are now ... 1704.A File 1704 8 Casper File 1

Mr201401 consideration for indicators of malware likeness based on static file information

Stopping Ransomware and Polymorphic Malware · PDF file4 Stopping Ransomware and Polymorphic Malware ... just clicking on the file name in “Application Inventory” or on the events

Who uses the internet to gamble? - EASGeasg.org/media/file/conferences/novagorica2008/...• Problem gambling prevalence among online gambler = 5.0% (DSM-IV) • Problem gambling prevalence

TB Disease Prevalence Survey Pakistan 2010-11 · PDF file•TB Disease Prevalence Survey Pakistan 2010-11 ... Sample size /# cluster Infection rate TB Prevalence X-ray AFB SSM 1960-62

Chapter 3 Controlling Files. Chapter 3 Overview The file system and file access rights Executable files Computer viruses and malware Policies for file

Experiences in Enterprise Searching: Tips, Techniques, and ... · High-performance, read-only remote file system mount: F-Secure. Malware sandbox to run unknown binaries: Malware

Understanding Malware - · PDF file•HTTP Bot •Banking Trojan Understanding malware ... - Packer info - Anti-virus detection info Activity of - File system - Registry - Process

C5 MS Word Template Accessible · Web viewMachine learning cybersecurity File-less malware analysis LAB 2: Writing a cLAssifier for file-less malware Lab Description: This lab is

Intelligent file scoring system for malware detection from ... · Intelligent File Scoring System for Malware Detection from the Gray List Yanfang Ye ⁄ Dept. of Computer Science

Using File Relationships in Malware Classification File... · Using File Relationships in Malware Classification Nikos Karampatziakis, Cornell/Microsoft Jay Stokes, Microsoft Research

Paragon File System Link technology powers malware ......Paragon File System Link technology powers malware scanner for FixMeStick® Paragon File System Link technology embedded into