M-Trends 2015 セキュリティ最前線からの視点

•

0 likes•3,864 views

の業種で発生したセキュリティ・インシデント数百件の分析結果、統計情報、事例研究を元に、APT攻撃（Advanced Persistent Threat：高度で持続的な標的型攻撃）で使用されるツールや手口が過去1年間でどのように進化したかを示しています

脅威レポート

7
傾向2：
狙われる小売企業
4
U.S. Department of Homeland Security and U.S. Secret Service. “Backoff Malware: Infection Assessment.” August
2014.

10
•
•
•

13
•
•

15
•
•
•

18
•
•

More Related Content

More from FireEye, Inc.

M-Trends 2015 : Les nouvelles du front

M-Trends 2015 : Les nouvelles du front

M-Trends 2015 : Les nouvelles du front

5 Reasons Cyber Attackers Target Small and Medium Businesses

5 Reasons Cyber Attackers Target Small and Medium Businesses

5 Reasons Cyber Attackers Target Small and Medium Businesses

As vehicles become both increasingly complex and better connected to the Internet, their increased connectivity makes them even more vulnerable to advanced cyber attacks. This report looks at the five most concerning potential threats created by vehicle software vulnerabilities — including various threat scenarios, their likelihood of occurring and their potential impact — and offers suggestions on how to address this growing cyber security challenge.

Connected Cares: The Open Road For Hackers

Connected Cares: The Open Road For Hackers

Connected Cares: The Open Road For Hackers

Mandiant’s annual threat report reveals key insights, statistics and case studies illustrating how the tools and tactics of advanced targeted attackers, including the Advanced Persistent Threat (APT), have evolved over the last year. The report, based on hundreds of advanced threat investigations, also shares approaches that organizations can take to improve the way they detect, respond to, and contain complex breaches. For the latest M-Trends report, https://www.fireeye.com/mtrends

M-Trends® 2012: An Evolving Threat

M-Trends® 2012: An Evolving Threat

M-Trends® 2012: An Evolving Threat

In 2010, Mandiant's first M-Trends report detailed how the Advanced Persistent Threat (APT) successfully compromised its victims. In 2011, the attackers continued to expand their targets and innovated their techniques. In this report, those attack techniques are explored further and key steps you can take are identified so you can address the threat in your enterprise. For the latest M-Trends report, visit https://www.fireeye.com/mtrends

M-Trends® 2011: When Prevention Fails

M-Trends® 2011: When Prevention Fails

M-Trends® 2011: When Prevention Fails

The inaugural M-Trends report details threat intelligence learned while conducting intrusion investigations for the U.S. government, the defense industrial base, and commercial organizations. This report focuses on the Advanced Persistent Threat (APT), and outlines trends, techniques, and real details of how the APT successfully compromises any target it desires. For the latest M-Trends report, visit https://www.fireeye.com/mtrends

M-Trends® 2010: The Advanced Persistent Threat

M-Trends® 2010: The Advanced Persistent Threat

M-Trends® 2010: The Advanced Persistent Threat

Cloud computing and bring-your-own-device (BYOD) workplace policies are expanding the endpoints in IT infrastructures — and more complexity when it comes to investigating cyber attacks. The SANS 2013 Report on Digital Forensics and Incident Response Survey reveals some of the major difficulties that security professionals face in this new environment and how to better prepare for future investigations. Collecting responses from more than 450 security professionals across a range of industries and company sizes, the survey found that nearly 90 percent of respondents had conducted at least one forensics investigation within the last two years. But just 54 percent called their digital forensics capabilities “reasonably effective.” For the latest threat intelligence reports, visit https://www.fireeye.com/current-threats/threat-intelligence-reports.html

SANS 2013 Report: Digital Forensics and Incident Response Survey

SANS 2013 Report: Digital Forensics and Incident Response Survey

SANS 2013 Report: Digital Forensics and Incident Response Survey

The law of unintended consequences strikes again. In an effort to address security risks in enterprise IT systems and the critical data in them, numerous security standards and requirement frameworks have emerged over the years. But most of these efforts have had the opposite effect — diverting organizations’ limited resources away from actual cyber defense toward reports and compliance. Recognizing this serious problem, the U.S. National Security Agency (NSA) in 2008 launched Critical Security Controls (CSCs), a prioritized list of controls likely to have the greatest impact in protecting organizations from evolving real-world threats. This SANS Institute survey of nearly 700 IT professionals across a range of industries examines how well the CSCs are known in government and industry and how they are being used. For the latest threat intelligence reports, visit https://www.fireeye.com/current-threats/threat-intelligence-reports.html.

SANS 2013 Report on Critical Security Controls Survey: Moving From Awareness ...

SANS 2013 Report on Critical Security Controls Survey: Moving From Awareness ...

SANS 2013 Report on Critical Security Controls Survey: Moving From Awareness ...

With malware attacks growing more sophisticated, swift, and dangerous by the day — and billions of dollars spent to combat them — surprisingly few organizations have a grip on the problem. Only 20 percent of security professionals surveyed by Information Security Media Group (ISMG) rated their incident response program “very effective.” Nearly two-thirds struggle to detect APTs, limiting their ability to defend today’s most pernicious threats. In addition, more than 60 percent struggle with the speed of detection, and more than 40 percent struggle with the accuracy of detection. Those shortcomings give attackers more time to steal data and embed their malware deeper into targeted systems. For the latest threat intelligence reports, visit https://www.fireeye.com/current-threats/threat-intelligence-reports.html.

2013 Incident Response Survey

2013 Incident Response Survey

2013 Incident Response Survey

The Internal Signs of Compromise

The Internal Signs of Compromise

The Internal Signs of Compromise

The Board and Cyber Security

The Board and Cyber Security

The Board and Cyber Security

FireEye Cyber Defense Summit 2016 Now What - Before & After The Breach

FireEye Cyber Defense Summit 2016 Now What - Before & After The Breach

FireEye Cyber Defense Summit 2016 Now What - Before & After The Breach

Proatively Engaged: Questions Executives Should Ask Their Security Teams

Proatively Engaged: Questions Executives Should Ask Their Security Teams

Proatively Engaged: Questions Executives Should Ask Their Security Teams

Like water, cybercrime moves effortlessly around obstacles. Today, security-conscious enterprises and federal governments choose FireEye™ for industry-leading protection against advanced cybercrime and targeted attacks. FireEye stops advanced malware, zero-day and targeted APT attacks. FireEye’s appliances supplement traditional and next-generation firewalls, IPS, AV, and gateways, adding integrated multi-stage protection against today’s multi-vectored Web, email, and file-based threats.

FireEye Advanced Threat Protection - What You Need to Know

FireEye Advanced Threat Protection - What You Need to Know

FireEye Advanced Threat Protection - What You Need to Know

FireEye Advanced Threat Report

FireEye Advanced Threat Report

FireEye Advanced Threat Report

More from FireEye, Inc. (15)

M-Trends 2015 : Les nouvelles du front

M-Trends 2015 : Les nouvelles du front

M-Trends 2015 : Les nouvelles du front

5 Reasons Cyber Attackers Target Small and Medium Businesses

5 Reasons Cyber Attackers Target Small and Medium Businesses

5 Reasons Cyber Attackers Target Small and Medium Businesses

Connected Cares: The Open Road For Hackers

Connected Cares: The Open Road For Hackers

Connected Cares: The Open Road For Hackers

M-Trends® 2012: An Evolving Threat

M-Trends® 2012: An Evolving Threat

M-Trends® 2012: An Evolving Threat

M-Trends® 2011: When Prevention Fails

M-Trends® 2011: When Prevention Fails

M-Trends® 2011: When Prevention Fails

M-Trends® 2010: The Advanced Persistent Threat

M-Trends® 2010: The Advanced Persistent Threat

M-Trends® 2010: The Advanced Persistent Threat

SANS 2013 Report: Digital Forensics and Incident Response Survey

SANS 2013 Report: Digital Forensics and Incident Response Survey

SANS 2013 Report: Digital Forensics and Incident Response Survey

SANS 2013 Report on Critical Security Controls Survey: Moving From Awareness ...

SANS 2013 Report on Critical Security Controls Survey: Moving From Awareness ...

SANS 2013 Report on Critical Security Controls Survey: Moving From Awareness ...

2013 Incident Response Survey

2013 Incident Response Survey

2013 Incident Response Survey

The Internal Signs of Compromise

The Internal Signs of Compromise

The Internal Signs of Compromise

The Board and Cyber Security

The Board and Cyber Security

The Board and Cyber Security

FireEye Cyber Defense Summit 2016 Now What - Before & After The Breach

FireEye Cyber Defense Summit 2016 Now What - Before & After The Breach

FireEye Cyber Defense Summit 2016 Now What - Before & After The Breach

Proatively Engaged: Questions Executives Should Ask Their Security Teams

Proatively Engaged: Questions Executives Should Ask Their Security Teams

Proatively Engaged: Questions Executives Should Ask Their Security Teams

FireEye Advanced Threat Protection - What You Need to Know

FireEye Advanced Threat Protection - What You Need to Know

FireEye Advanced Threat Protection - What You Need to Know

FireEye Advanced Threat Report

FireEye Advanced Threat Report

FireEye Advanced Threat Report

Recently uploaded

Utilizing Ballerina for Cloud Native Integrations

Utilizing Ballerina for Cloud Native Integrations

Utilizing Ballerina for Cloud Native Integrations

論文紹介: The Surprising Effectiveness of PPO in Cooperative Multi-Agent Games

論文紹介: The Surprising Effectiveness of PPO in Cooperative Multi-Agent Games

論文紹介: The Surprising Effectiveness of PPO in Cooperative Multi-Agent Games

新人研修　後半 2024/04/26の勉強会で発表されたものです。

新人研修　後半 2024/04/26の勉強会で発表されたものです。

新人研修　後半 2024/04/26の勉強会で発表されたものです。

iPride Co., Ltd.

LoRaWAN スマート距離検出デバイスDS20L日本語マニュアル

LoRaWAN スマート距離検出デバイスDS20L日本語マニュアル

LoRaWAN スマート距離検出デバイスDS20L日本語マニュアル

CRI Japan, Inc.

論文紹介：Selective Structured State-Spaces for Long-Form Video Understanding

論文紹介：Selective Structured State-Spaces for Long-Form Video Understanding

論文紹介：Selective Structured State-Spaces for Long-Form Video Understanding

Amazon SES を勉強してみるその３2024/04/26の勉強会で発表されたものです。

Amazon SES を勉強してみるその３2024/04/26の勉強会で発表されたものです。

Amazon SES を勉強してみるその３2024/04/26の勉強会で発表されたものです。

iPride Co., Ltd.

NewSQLの可用性構成パターン（OCHaCafe Season 8 #4 発表資料）

NewSQLの可用性構成パターン（OCHaCafe Season 8 #4 発表資料）

NewSQLの可用性構成パターン（OCHaCafe Season 8 #4 発表資料）

NTT DATA Technology & Innovation

Amazon SES を勉強してみるその２2024/04/26の勉強会で発表されたものです。

Amazon SES を勉強してみるその２2024/04/26の勉強会で発表されたものです。

Amazon SES を勉強してみるその２2024/04/26の勉強会で発表されたものです。

iPride Co., Ltd.

Observabilityは従来型の監視と何が違うのか（キンドリルジャパン社内勉強会：2022年10月27日発表）

Observabilityは従来型の監視と何が違うのか（キンドリルジャパン社内勉強会：2022年10月27日発表）

Observabilityは従来型の監視と何が違うのか（キンドリルジャパン社内勉強会：2022年10月27日発表）

Hiroshi Tomioka

LoRaWANスマート距離検出センサー DS20L カタログ LiDARデバイス

LoRaWANスマート距離検出センサー DS20L カタログ LiDARデバイス

LoRaWANスマート距離検出センサー DS20L カタログ LiDARデバイス

CRI Japan, Inc.

知識ゼロの営業マンでもできた！超速で初心者を脱する、悪魔的学習ステップ3選.pptx

知識ゼロの営業マンでもできた！超速で初心者を脱する、悪魔的学習ステップ3選.pptx

知識ゼロの営業マンでもできた！超速で初心者を脱する、悪魔的学習ステップ3選.pptx

論文紹介：Video-GroundingDINO: Towards Open-Vocabulary Spatio-Temporal Video Groun...

論文紹介：Video-GroundingDINO: Towards Open-Vocabulary Spatio-Temporal Video Groun...

論文紹介：Video-GroundingDINO: Towards Open-Vocabulary Spatio-Temporal Video Groun...

Recently uploaded (12)

Utilizing Ballerina for Cloud Native Integrations

Utilizing Ballerina for Cloud Native Integrations

Utilizing Ballerina for Cloud Native Integrations

論文紹介: The Surprising Effectiveness of PPO in Cooperative Multi-Agent Games

論文紹介: The Surprising Effectiveness of PPO in Cooperative Multi-Agent Games

論文紹介: The Surprising Effectiveness of PPO in Cooperative Multi-Agent Games

新人研修　後半 2024/04/26の勉強会で発表されたものです。

新人研修　後半 2024/04/26の勉強会で発表されたものです。

新人研修　後半 2024/04/26の勉強会で発表されたものです。

LoRaWAN スマート距離検出デバイスDS20L日本語マニュアル

LoRaWAN スマート距離検出デバイスDS20L日本語マニュアル

LoRaWAN スマート距離検出デバイスDS20L日本語マニュアル

論文紹介：Selective Structured State-Spaces for Long-Form Video Understanding

論文紹介：Selective Structured State-Spaces for Long-Form Video Understanding

論文紹介：Selective Structured State-Spaces for Long-Form Video Understanding

Amazon SES を勉強してみるその３2024/04/26の勉強会で発表されたものです。

Amazon SES を勉強してみるその３2024/04/26の勉強会で発表されたものです。

Amazon SES を勉強してみるその３2024/04/26の勉強会で発表されたものです。

NewSQLの可用性構成パターン（OCHaCafe Season 8 #4 発表資料）

NewSQLの可用性構成パターン（OCHaCafe Season 8 #4 発表資料）

NewSQLの可用性構成パターン（OCHaCafe Season 8 #4 発表資料）

Amazon SES を勉強してみるその２2024/04/26の勉強会で発表されたものです。

Amazon SES を勉強してみるその２2024/04/26の勉強会で発表されたものです。

Amazon SES を勉強してみるその２2024/04/26の勉強会で発表されたものです。

Observabilityは従来型の監視と何が違うのか（キンドリルジャパン社内勉強会：2022年10月27日発表）

Observabilityは従来型の監視と何が違うのか（キンドリルジャパン社内勉強会：2022年10月27日発表）

Observabilityは従来型の監視と何が違うのか（キンドリルジャパン社内勉強会：2022年10月27日発表）

LoRaWANスマート距離検出センサー DS20L カタログ LiDARデバイス

LoRaWANスマート距離検出センサー DS20L カタログ LiDARデバイス

LoRaWANスマート距離検出センサー DS20L カタログ LiDARデバイス

知識ゼロの営業マンでもできた！超速で初心者を脱する、悪魔的学習ステップ3選.pptx

知識ゼロの営業マンでもできた！超速で初心者を脱する、悪魔的学習ステップ3選.pptx

知識ゼロの営業マンでもできた！超速で初心者を脱する、悪魔的学習ステップ3選.pptx

論文紹介：Video-GroundingDINO: Towards Open-Vocabulary Spatio-Temporal Video Groun...

論文紹介：Video-GroundingDINO: Towards Open-Vocabulary Spatio-Temporal Video Groun...

論文紹介：Video-GroundingDINO: Towards Open-Vocabulary Spatio-Temporal Video Groun...

M-Trends 2015 セキュリティ最前線からの視点

1. 脅威レポート

2.

9. 7 傾向2：狙われる小売企業 4 U.S. Department of Homeland Security and U.S. Secret Service. “Backoff Malware: Infection Assessment.” August 2014.

11. 9

12. 10 • • •

17. 15 • • •

27.

29.