Verizon, in collaboration with 50 other organizations (including FireEye) analyzed 100,000 Data breach incidents, what they found might surprise you. Interesting – when you look across all industries, the 4 largest share of incidents fall into four categories – insider misuse, physical theft / loss, miscellaneous errors and crime ware. We won’t focus on all of these, but of particular note when you look at incidents with confirmed data breaches, two categories stand out: payment card skimmers and cyber espionage. According to Verizon’s cyber threat group, the two fastest growing threats to the enterprise are Denial of Service attacks and Cyber Espionage.

1. How Secure are You?

2. A bunch of guys drinking brewskies?

3. One day in 2013 . . . .

4. The past month . . .
May 1 – DOJ indicts five PRC PLA Officers on 31 counts including theft of trade secrets, and economic espionage
May 15 - Lockheed admits cyber-attacks into its systems have quadrupled since 2007
May 23 - eBay admits to massive cyber-attack affecting 145million users
May 29 - Spotify tells eBay 'Me, too' as cyber attack compromises 40 million user accounts
May 29 – FireEye reports that Cyberattacks spiked as Russia annexed Crimea
May 30 - Brazilian government hit by cyber attack
June 1 - Western intelligence agencies in consensus predict a "powerful computer attack"from two malware software
programs known as GOZeuS and CryptoLocker.
June 3 – Justice Department indicts Russian cyber-criminal mastermind on 14 counts related to the GOZeuS and
CryptoLocker malware software programs
June 13 -- P.F. Chang's China Bistro breached. The breach has resulted in the probable loss of sensitive debit and credit card
information of its customers.

5. Security Incident Patterns

6. 92% of security incidents can be described
by just nine patterns*
* Based on analysis of over 100,000 incidents from between 2004 and 2013

7. POS Intrusions = 1% Crimeware = 19%
Web App Attacks = 8% Card Skimmers = 1%
Insider Misuse = 19% DoS Attacks = 2%
Physical Theft/Loss = 16% Cyber-espionage = 1%
Misc. Errors = 27% Everything Else = 8%
Based on analysis of over 100,000 incidents from between 2004 and 2013
Share of Incidents, All Industries

8. OF MISUSE
ATTACKS
HAPPENED
ACROSS THE
CORPORATE LAN.
85%
What is it?
When employees (or ex-employees) with access
rights use their privileges to access data, either in
person or over the network.
Is my industry a target?
A wide range of industries were represented: real
estate; public sector; mining; administrative and
others.
Insider Misuse

9. OF ALL
THEFT/LOSS
HAPPENED IN
THE WORK AREA.
43%
What is it?
The loss or theft of laptops, USB keys, printed
papers and other information assets, mostly from
offices, but also from vehicles and homes.
Is my industry a target?
Accidents happen anywhere — but 45% of all
incidents in the healthcare sector fit this profile.
Public sector was also a big contributor.
Physical Theft and Loss

10. What is it?
Any mistake that compromises security,
such as accidentally posting private data to a
public site, or failing to dispose of
documents or assets securely.
Is my industry a target?
Industries that communicate with the public
— such as public sector, administration,
education and healthcare — suffer most.
Miscellaneous Errors
OF ERRORS
INVOLVED
PRINTED
DOCUMENTS.
49%

11. THE MAJORITY OF
CRIMEWARE
INCIDENTS START VIA
WEB ACTIVITY, NOT
LINKS OR
ATTACHMENTS IN
EMAIL.
What is it?
Any use of malware (often web-based) to
compromise systems such as servers and
desktops. This pattern includes phishing.
Is my industry a target?
We found public sector, information, utilities, and
manufacturing were most at risk.
Crimeware

12. 86%
OF SKIMMING
ATTACKS WERE
ON ATMS.
What is it?
The physical installation of a “skimmer” on an
ATM, forecourt gas pump or POS terminal, to read
your card data as you pay.
Is my industry a target?
Banks and retailers are the primary targets, but
anybody that processes card “cardholder present”
transaction is vulnerable — like healthcare
providers.
Payment Card Skimmers

13. +115%
MORE POWERFUL
BOTNETS AND
REFLECTION ATTACKS
HAVE HELPED DRIVE
THE SCALE OF DOS
ATTACKS UP 115%
SINCE 2011.
What is it?
Attackers use “botnets” of PCs and powerful
servers to overwhelm an organization’s systems
and applications with malicious traffic, causing
normal business to grind to a halt.
Is my industry a target?
Attacks are often on mission-critical transactional
systems in finance, retail and similar sectors.
Denial of Service

14. 3x
THIS YEAR’S DATA SET
SHOWS A THREEFOLD
INCREASE IN
ESPIONAGE ATTACKS
YEAR ON YEAR.
What is it?
When state-affiliated actors breach an
organization, often via targeted phishing attacks,
and after intellectual property.
Is my industry a target?
Not just a problem for government and military
organizations, but professional, manufacturing,
mining, transportation and public sector are all
popular targets.
Cyber-espionage

15. Take aways . . .
• The physical component is important in both the physical and digital
domain – exercise vigilance, be paranoid, expect the unexpected.
• Ensure you are aware of your surroundings.
• Where possible use a credit vs. debit card.
• Vet your employees.
• Limit access to critical systems and data.
• Have a security audit performed routinely to ensure your enterprise is
optimized for security – you can pay a little now or a lot later. You
decide.

16. Links
• Metcalf Incident: “Assault on California Power Station Raises Alarm on Potential
for Terrorism”
http://online.wsj.com/news/articles/SB100014240527023048511045793591419
41621778
• Milken Institute “High Stakes in Cyber Security”
http://www.milkeninstitute.org/presentations/mediapage.taf?ID=4818
• Verizon Data Breach Investigation Report:
http://www.verizonenterprise.com/DBIR/
• The New Threat Landscape: http://www.fireeye.com/info-
center/videos/?video=new_threat_landscape