The document discusses the evolution of secure networks and ransomware threats. It provides statistics on ransomware payments, infections rates, and earnings. It also outlines the history of exploit kits used to propagate malware and discusses mitigation techniques like deploying new detection mechanisms using static and dynamic file analysis as well as machine learning. The document advocates for removing information silos and leveraging software-defined secure networks to utilize threat intelligence across an organization's entire network and ecosystem for improved detection and enforcement.

1. The Evolution of Secure Networks
Mark Bullen
Sr Systems Engineer
Juniper Networks

2. RANSOMWARE

3. Average Ransomware Payment $ 1xBitcoin ($420 USD)
Data provided by www.smartdatacollective.com/
Ransomware by the Numbers
Yearly Earnings $393M
Infection Rate 70,000/day
Average Payouts/Day 2600 (3.5%)
Daily Earnings $1.01M

4. Propagation

5. The Exploit Kit….
A history of the Exploit Kit
Blackhole 2012
Nuclear 2012
Angler 2014-2016
Neutrino 2014- Active
RIG 2014 -Active

6. Exploit Kit Drive-by Circulations July-August 2016
Data provided by malware.dontneedcoffee.com

7. Mitigation

8. Deploy New Detection Mechanisms
Static & Dynamic File Analysis
Examples of Static Analysis Traits Examples of Dynamic Analysis Actions

9. Machine Learning
Known Bad Traits
Known Good Traits

10. Evasive Behaviors

11. Removing the Silo’s
Exchange and Consume Global Threat Information
EnforceCollect Share

12. Software-Defined Secure Network (SDSN)
Leverage entire network and
ecosystem for threat intelligence
and detection
Utilize any point of the network as
a point of enforcement
Dynamically execute policy
across all network elements
including third party devices
Your
Enterprise
Network
Threat
IntelligenceEnforcement
Detection
Enforcement
Detection
Cloud-based
Threat Defense
Dynamic and Adaptive
Policy Engine
Policy
Campus
&
Branch
DC
Public
Cloud
Private
Cloud

13. Merci / thank You!

14. References
forums.juniper.net/t5/Security-Now
www.krebsonsecurity.com
www.malwarebytes.com
malware.dontneedcoffee.com
www.smartdatacollective.com
www.symantec.com
www.trendmicro.com
www.verizonenterprise.com/verizon-insights-lab/dbir/
cyboxproject.github.io
stixproject.github.io
taxiiproject.github.io