top 6 dangers of not inspecting ssl traffic - a10 networks

1
IN 2017 MORE THAN HALF of the network attacks targeting enterprises will use encrypted traffic to bypass controls 5 LESS THAN 20% of organizations with a firewall, an IPS or a UTM appliance decrypt inbound or outbound SSL traffic 4 $73.3 BILLION was spent on information security worldwide in 2014 2 , yet organizations still suffered over 2,000 data breaches 3 PERFORMANCE CAN DROP 75% + for firewalls when decrypting SSL traffic 29.1% of traffic was encrypted in 2015 67% of traffic will be encrypted in 2016 100%? of traffic will be encrypted in future Future 2016 2015 SSL TRAFFIC IS ON THE RISE INVESTMENTS ARE FALLING SHORT, LEAVING GAPING HOLES IN CORPORATE DEFENSES INVESTMENTS ARE FALLING SHORT, LEAVING GAPING HOLES IN CORPORATE DEFENSES By 2016, it’s estimated that 67 percent of Internet traffic will be encrypted. 1 Although encryption can be used for good—improving message confidentiality and integrity—it can also be used as a means to conceal hackers’ activities. Without SSL inspection in place, your business could fall victim to the kind of encrypted traffic that has malicious intent behind it. MALICIOUS ATTACHMENT SENT OVER SMTPS DRIVE-BY DOWNLOAD FROM AN HTTPS SITE MALICIOUS FILE IN INSTANT MESSAGING STOLEN DATA SENT VIA EMAIL OR TO CLOUD STORAGE SITES COMMAND AND CONTROL SERVER COMMUNICATION MALWARE RECEIVING C&C UPDATES FROM SOCIAL MEDIA SITES A dedicated SSL inspection platform gives businesses the power to decrypt and analyze trafficto protect key systems and data. UNCOVER HIDDEN THREATS GAIN VISIBILITY WITHOUT DEGRADING NETWORK PERFORMANCE MAXIMIZE UPTIME PREVENT DATA BREACHES HOW ATTACKERS ARE HIDING IN ENCRYPTED TRAFFIC WHAT BUSINESSES CAN DO TO EXPOSE THREATS Find out how A10 Thunder ® Application Delivery Controller (ADC) with SSL Insight Technology can help your organization defend itself against malicious encrypted traffic. Call 1-408-325-8616 or visit a10networks.com/contact-us today. 1. Sandvine Global Internet Phenomena Spotlight: Encrypted Internet Traffic report, May 2015. Traffic Is On the Rise source: Sandvine Global Internet Phenomena Spotlight: Encrypted Internet Traffic report, May 2015. Please note that Sandvine is unable to classify approximately 6 percent of traffic. 2. Gartner report: Forecast: Information Security, Worldwide, 2013-2019, July 24, 2015. 2Q15 Update. 3. Verizon 2015 Data Breach Investigations Report (stat: 2,122 confirmed breaches), July 24, 2015. 4. Based on the finding that “less than 20% of organizations with a firewall, an intrusion prevention system (IPS) or a unified threat management (UTM) appliance decrypt inbound or outbound SSL traffic” from Gartner, “Security Leaders Must Address Threats from Rising SSL Traffic,” December 2013, refreshed in January 2015. 5. Gartner, “Security Leaders Must Address Threats from Rising SSL Traffic,” December 2013, refreshed in January 2015. ©2015 A10 Networks, Inc. All rights reserved. The A10 logo, and A10 Networks are trademarks or registered trademarks of A10 Networks, Inc. in the United States and other countries. All other trademarks are property of their respective owners. Part Number: A10-GR-70198-EN-01 SEP 2015

Upload: balazs-antok

Post on 14-Apr-2017

107 views

Category:

Internet


1 download

TRANSCRIPT

Page 1: Top 6 dangers of not inspecting SSL traffic - A10 Networks

IN 2017

MORE THAN HALFof the network attacks targeting enterprises will use encrypted traffic to bypass controls5

LESS THAN

20%of organizations with a firewall, an IPS or a UTM

appliance decrypt inbound or outbound SSL traffic4

$73.3BILLION

was spent on information security worldwide in 20142, yet organizations still suffered over 2,000 data breaches3

PERFORMANCE CAN DROP

75%+for firewalls when decrypting SSL traffic

29.1% of traffic was encrypted in 2015

67% of traffic will be encrypted in 2016

100%? of traffic will be encrypted in futureFuture20162015

SSL TRAFFIC IS ON THE RISE

INVESTMENTS ARE FALLINGSHORT, LEAVING GAPING HOLES

IN CORPORATE DEFENSES

INVESTMENTS ARE FALLINGSHORT, LEAVING GAPING HOLES

IN CORPORATE DEFENSES

By 2016, it’s estimated that 67 percent of Internet traffic will be encrypted.1

Although encryption can be used for good—improving message

confidentiality and integrity—it can also be used as a means to conceal

hackers’ activities. Without SSL inspection in place, your business could fall

victim to the kind of encrypted traffic that has malicious intent behind it.

MALICIOUS ATTACHMENT SENT OVER SMTPS

DRIVE-BY DOWNLOAD FROM

AN HTTPS SITE

MALICIOUS FILE IN INSTANT MESSAGING

STOLEN DATA SENT VIA EMAIL OR TO CLOUD

STORAGE SITES

COMMAND AND CONTROL SERVER COMMUNICATION

MALWARE RECEIVINGC&C UPDATES FROMSOCIAL MEDIA SITES

A dedicated SSL inspection platform gives businesses the

power to decrypt and analyze traffic—

to protect key systems and data.

UNCOVER HIDDEN THREATS

GAIN VISIBILITY WITHOUT DEGRADING NETWORK PERFORMANCE

MAXIMIZE UPTIME

PREVENT DATA BREACHES

HOW ATTACKERS ARE HIDINGIN ENCRYPTED TRAFFIC

WHAT BUSINESSES CAN DOTO EXPOSE THREATS

Find out how A10 Thunder® Application Delivery Controller (ADC)

with SSL Insight™ Technology can help your organization defend itself

against malicious encrypted traffic.

Call 1-408-325-8616 or visit a10networks.com/contact-us today.

1. Sandvine Global Internet Phenomena Spotlight: Encrypted Internet Traffic report, May 2015. Traffic Is On the Rise source: Sandvine Global Internet Phenomena Spotlight: Encrypted Internet Traffic report, May 2015. Please

note that Sandvine is unable to classify approximately 6 percent of traffic.

2. Gartner report: Forecast: Information Security, Worldwide, 2013-2019, July 24, 2015. 2Q15 Update.

3. Verizon 2015 Data Breach Investigations Report (stat: 2,122 confirmed breaches), July 24, 2015.

4. Based on the finding that “less than 20% of organizations with a firewall, an intrusion prevention system (IPS) or a unified threat management (UTM) appliance decrypt inbound or outbound SSL traffic” from Gartner, “Security Leaders Must Address

Threats from Rising SSL Traffic,” December 2013, refreshed in January 2015.

5. Gartner, “Security Leaders Must Address Threats from Rising SSL Traffic,” December 2013, refreshed in January 2015.

©2015 A10 Networks, Inc. All rights reserved. The A10 logo, and A10 Networks are trademarks or registered trademarks of A10 Networks, Inc. in the United States

and other countries. All other trademarks are property of their respective owners.

Part Number: A10-GR-70198-EN-01 SEP 2015