The State of End-User Security—Global Data from 30,000+ Websites

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

SESSION ID:
#RSAC
Andreas Baumhof
The State of End-User Security
Global Data from 30,000+
Websites
MBS-F02
Chief Technolog...

#RSAC
Goal of this talk
2
Everybody talks mobile, but do we really know what’s out there?
What is hype, what is myth?
Prov...

#RSAC
ThreatMetrix Digital Identity Network
3
All data presented in this talk is powered by the ThreatMetrix Digital Ident...

#RSAC
Digital Identity Network
4
Consists mainly of Financial Services, Online Retailers and Social
Media sites
Main use c...

#RSAC
Explosion of mobile transactions
5

#RSAC
Mobile share of transactions
6

#RSAC
Mobile Statistics for Top Digital Nations
7

#RSAC
Mobile Transaction Trends - Daily
8

#RSAC
Threat view

#RSAC
2004 – First virus for mobile (Cabir)
10

#RSAC
Security is not an afterthought anymore
11

#RSAC
So why is this skyrocketing?
12
792 14,259 89,556 403,002
1,612,008
5,158,426
11,864,379
2011 2012 e2013 e2014 e2015...

#RSAC
Software with the most vulnerabilities in 2015
13
Source: http://www.cvedetails.com/
In iOS9: 4 CVE’s with Impact:
“...

#RSAC
Mobile traffic is different
14
Traditional security
measures don’t work as
well as they did in the
past

#RSAC
Most high risk transactions are still from the
non-mobile channel
15

#RSAC
Browser spoofing is one of the most common
“attacks”
16

#RSAC
Browser spoofing is significantly higher on
mobile than on non-mobile
17

#RSAC
Detailed statistics

#RSAC
Mobile and Non-mobile OS is converging
19
Data is for all transactions, not just mobile transactions

#RSAC
iOS is leading the charge
20

#RSAC
Reversed picture if we look at the high risk
transactions
21

#RSAC
Jailbroken devices
22

#RSAC
Jailbreak detection methods
23
Most common identifier for Jailbreak
file:///private/var/lib/cydia
file:///private/va...

#RSAC
How are people connecting?
24

#RSAC
Location is important
25
On a native mobile device, location can be obtained in many
ways
GPS
IP (True IP, DNS IP, …...

#RSAC
How accurate is the IP Address Location?
26
Connection type: Cellular

#RSAC
How accurate is the IP Address Location?
27
Connection type: Wifi

#RSAC
IP Address Anomalies
28
Interesting anomalies can be found by interrogating the IP
address of the device and compari...

#RSAC
Other anomalies (Xposed)
29
Still on a very low level (< 0.1%), but growing

#RSAC
Device Encryption
30
Android only

#RSAC
Surprisingly, mobile app transactions represent
more high risk transactions
31

#RSAC
Myths / Assumptions

#RSAC
Operating systems are converging
33
Windows 10
Mac OS/X – iOS
Android – Chrome
When is an OS a mobile OS?

#RSAC
Different OS’s have different attack surface
34
No surprise
Ecosystem
Mobile Ecosystem
is much more diverse

#RSAC
Jailbreaking
35
Jailbroken devices are not as commonly used on a global scale
But they do represent a significantly ...

#RSAC
OS anomalies
36
There are plenty of anomalies with mobile traffic that is there for
the taking
Browser-string vs TCP...

#RSAC
Take advantage of additional information
from mobile devices

#RSAC
Mobile Location
38
IP Address Location
DNS IP Address Location
Hardware / GPS Location
Carrier Location

#RSAC
Huge amount of forensics information available
39
Jailbreak detection
Root Cloaking detection
OS anomalies
Mobile Ap...

#RSAC
Conclusion

#RSAC
Mobile is part of the omni-channel
✔✗

#RSAC
Rich data + advanced models = win
42

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

Building Digital Trust: The role o... by Accenture Technology 52938 views
Responsible Data Uses: Privacy, Se... by Aurélie Pols 1300 views

View on Slideshare

1 of 42 Ad

View on Slideshare

1 of 42 Ad