The dramatic rise in malicious code designed to evade detection, specifically from network sandboxes, caused industry analysts to suggest the deployment of multiple network sandboxes for the same network. Learn how to maximize protection from advanced persistent threats by using multiple security engines within the same sandbox and best practices to stop advanced malware including ransomware. (Source: RSA Conference USA 2017)

1. SESSION ID:SESSION ID:
#RSAC
Dmitriy Ayrapetov
The Strategic Advantage of Adaptive
Multi-Engine Advanced Threat
Protection
SPO2-W03
Executive Director
SonicWall

2. #RSAC
ThreatReport Key Findings

3. #RSAC
SSL/TLS
Encryption
SECURITYINDUSTRYADVANCES
Exploit Kit
Decline
Point-of-Sale
Malware
Decline
Unique Malware
Sample Decline

4. #RSAC
POS Malware Decline

5. #RSAC
SSL/TLS Encryption
SSL/TLS-encrypted traffic grew by 34 percent, partly in response to growing cloud app adoption

6. #RSAC
SSL/TLS Encryption
of web
connections
were
SSL/TLS-
encrypted
62%

7. #RSAC
Exploit kits
Fall of dominant exploit kits
Angler, Nuclear
and Neutrino left a void
that smaller exploit kit
variants evolved to fill
Angler,
Nuclear and
Neutrino
Rig
Takedown of dominant exploit
kit families due in part to law
enforcement efforts

8. #RSAC
Unique Malware Sample Decline
VOLUME
of unique
malware
samples
Total
malware
attack
ATTEMPTS
2015 2016
8.19B
7.87B
2015 2016
64M 60M
6.25%
Decrease

9. #RSAC
CYBERCRIMINALADVANCES
Android
Malware
IoT DDoS
Attacks
Ransomware SSL/TLS
Encrypted
Malware

10. #RSAC
Ransomware
Ransomware is the
payload of choice for
malicious email
campaigns and
exploit kits
30.9
136.7
204.2
266.5
Q1CY16 Q2CY16 Q3CY16 Q4CY16
Quarterly Growth in Millions
Year-Over-Year Growth
167x
Year-Over-Year
Increase
Growth in Ransomware Attacks
2014 2015 2016
3.2
million
3.8
million
million
638
© Copyright SonicWall

11. #RSAC
U.K. companies
were almost
3x as likely
as U.S. companies
to be targeted
with ransomware
Ransomware
U.S. companies
experienced the
greatest number
of ransomware attacks

12. #RSAC
IoT DDoS Attacks
IoT devices were
compromised
on a massive
scale due to
poorly designed
security features,
making way for
DDoS attacks
Top 3 countries targeted by DDoS attacks in November
during the height of the Mirai botnet surge

13. #RSAC
Android
Malware
Android devices saw
increased security
protections but
remained vulnerable
to overlay attacks
Top Android Malware Attack
Techniques in 2016
Screen Overlays
DressCode
HummingBad
Metasploit
Self-installing
Apps

14. #RSAC
Building a better zero-day malware trap
Effective advanced threat protection requires:
1. Multi-layer threat analysis technology - thwart evasion
2. Inspection of encrypted and unencrypted traffic
3. Ability to analyze many file types, sizes, operating systems
4. Ability to block suspicious files from entering the network until verdict
5. Rapid deployment of new malware signatures across the network

15. #RSAC
The complete 2017 SonicWall
Annual Threat Report is
available online.
https://www.SonicWall.com/whitepaper/2017-SonicWall-annual-threat-report8121810/

16. #RSAC
Q&A

17. #RSAC
BACKUP