Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Alex Michael | Empowering End Users: Your Frontline Cyber Security Defence
Similar to Alex Michael | Empowering End Users: Your Frontline Cyber Security Defence (20)
More from Pro Mrkt
More from Pro Mrkt (14)
Recently uploaded
Recently uploaded (20)
Alex Michael | Empowering End Users: Your Frontline Cyber Security Defence
- 1. <ALEX MICHAEL> SonicWall EmpoweringEnd Users: Your Frontline CyberSecurityDefence
- 2. EMPOWERING END USERS: YOUR FRONTLINE CYBER SECURITY DEFENSE Alex Michael SonicWallSalesEngineer
- 4. © Copyright SonicWALL WHAT ARE INSIDER THREATS? •An insider threat is a malicious threat to an organization that comes from people within the organization •The threat may involve fraud, theft of information or sabotage
- 5. © Copyright SonicWALL WHO ARE THE INSIDER THREATS • Malicious Insiders • Disgruntled employees • Business associates • Negligent Insiders • Lazy practices • Employees in a hurry! • Having an off/bad day! • Contractors •Infiltrators • Ex employees • Hackers acquiring access details/vulnerabilities from people within the organization
- 6. 6
- 8. © Copyright SonicWALL SOCIAL ENGINEERING •Chivalry! •Tailgating •Being polite •Locking your laptop • Don’t worry, you wont offend anyone! •Phishing • Email continues to be the attack vector of choice • Your default trust level of emails should be low
- 9. SonicWall Solution – Cloud App Security 9 Next-Gen Security for SaaS Apps Anti-phishing Ransomware & Zero day protection Account Takeover DLP & Compliance SonicWall Cloud App Security Protect email, data and user credentials for Office 365, G Suite and other SaaS apps
- 10. © Copyright SonicWALL MEMORY STICKS AND THUMB DRIVES •Iranian nuclear power program, 2010 • Stuxnet • Supposedly delivered via a memory stick • Targeted SCADA systems causing substantial damage •Overwhelming curiosity! • Who has salvaged/repurposed an errant memory stick? • If you are going to look at memory stick contents…
- 11. © Copyright SonicWALL SONICWALL CAPTURE CLIENT • Next-generation behavior-based antivirus • Stop malware before or as they execute • Evaluate suspicious code • Reporting on your security posture • Enforces compliance and security • Supports the inspection of encrypted traffic
- 12. Firewalls Capture Advanced Threat Protection • Multi-engine sandbox detects more threats than single sandbox technology • Broad file type analysis and operating system support • Can block until verdict at the gateway (HTTP/S only) • Rapid deployment of threat intelligence • Reporting and alerts SMAEmail Security
- 13. © Copyright SonicWALL PASSWORDS •Common issues • Sharing your password • Obvious passwords • Passwords that do not expire • Passwords on post-it notes •Two factor authentication
- 14. © Copyright SonicWALL BYPASSING THE PROCESSES •Are processes in place? •Positions of privilege. One rule for some… •“It’s time consuming!” •There is a balance. It has to be found!
- 15. SOLUTIONS
- 16. © Copyright SonicWALL EDUCATION! •Are company policies being adhered to? •Are the users aware of the security systems in place? •Set expectations. There may be a minor inconvenience •Security vs Speed
- 17. © Copyright SonicWALL LAYER YOUR SECURITY •Firewalls •Email security •Cloud application security •End point protection •Sandboxing. SonicWall ATP •Secure remote access •Encryption. Securing encrypted traffic
- 18. © Copyright SonicWALL INCREASE THE VISIBILITY OF YOUR SOLUTIONS •Audit • Do not let your configurations stagnate! •Reporting • Do not let alerts disappear down a black hole • Tweak the information you are being given or it will be ignored •Management • A simple, easy to use management platform can still be secure
- 20. “THE PRICE OF FREEDOM IS ETERNAL VIGILANCE”
- 22. THANK YOU!
Editor's Notes
- An insider threat is a malicious threat to an organization that comes from people within the organization, such as employees, former employees, contractors or business associates, who have inside information concerning the organization's security practices, data and computer systems. The threat may involve fraud, the theft of confidential or commercially valuable information, the theft of intellectual property, or the sabotage of computer systems.
- Whats missing? Human error/negligence