ntxissacsc5 gold 1--mimecast email resiliency- erez-haimowicz

NTXISSA Cyber Security Conference November 10-11, 2017 @NTXISSA #NTXISSACSC5

Email Security Growing in threats, quickening in pace

Erez Haimowicz

Enablement and Security

Mimecast

11-10-17

NTXISSA.orgNTXISSA.orgNTXISSA.orgNTXISSA.org


Email: The Ultimate App

With demanding business and user requirements

24 X 7 Email Availability

ContinuousMission-critical Mobile

.2

NTXISSA.orgNTXISSA.org


Cyber Resilience

The technology that provides the best possible multi-layered

protection

MULTILAYERED SECURITY

A solution that allows you to continue to work while the issue

is resolved

CONTINUITY

The knowledge that no matter what, you can get back to the

last known good state

REMEDIATION



Countdown to a breach

Verizon 2016 Data Breach Investigations Report (DBIR)

100 Seconds average time-to-first-click



91% of all incidents start with a phish

Wired



You can no longer stand in front of your board and say that you wont have an attack.

As we all know, its now a case of when.



What those attacking look like



Your company

is at risk if

you.. You have certain letters in your domain name You accept resumes on your website

You have a team of people in finance

You have a profile

Your life is deemed interesting enough to be on

Your company is at RISK if you



Do You Have a Page Like This On Your Website?



Real life examples with email



Imagine being able to stop EVERY malicious file

We all know the risks

Trust your users not to click?



Who Says Attacks Need to Involve Malware?



Compromised AccountsStolen User Credentials

Utilize Corp Web mail to spread attack internally or externally to partners/customers

Careless UsersSending sensitive data internally such as projects and PII

Oops, sent it to the wrong Michael

Malicious InsidersPurposely distributing malware or malicious URLs

Internal threats!



Flawed - The technology23% open the phish & click

Confidetial |



To run an attack

You dont even need to know how to code

Source: Forbes.com - "Ransomware As A Service Being Offered For

$39 On The Dark Net" 7/15/16



AND to bypass sandboxes.

FUD (Fully Undetectable) Crypting Services to avoid AV detection

AND to bypass sandboxes

FUD (Fully Undetectable) Crypting Services to avoid AV Detection



Confidential |

At Risk - The human firewall11% open the phish & run the attachment



HEY STRANGERS - Please send me files



Click to View Dupe



You cant fix stupid



Whatever we do, theyre still around and getting creative



Your business

needs a cyber resilience strategy

ARCHIVING

SECURITY

CONTINUITY



29

Thank you


ntxissacsc5 gold 1--mimecast email resiliency- erez-haimowicz

Internet