Uploaded byDuo Security
How To Stop Targeted Attacks And Avoid “Expense In Depth” With Strong Authentication
The document presents insights on stopping targeted attacks and avoiding 'expense in depth' through strong authentication, featuring speakers from Forrester Research, Duo Security, and the University of Tennessee. Key topics include the necessity of a robust security strategy, the importance of strong authentication, and the implementation of multi-factor authentication strategies. The discussion highlights the evolution of security in response to rising user-targeted attacks and emphasizes a zero trust environment as crucial for effective defense.
More Related Content
![Overview of the Cyber Kill Chain [TM]](https://cdn.slidesharecdn.com/ss_thumbnails/cybersecuritykillchain8-161209191549-thumbnail.jpg?width=640&height=640&fit=bounds)
Similar to How To Stop Targeted Attacks And Avoid “Expense In Depth” With Strong Authentication
![Vibe Coding vs. Spec-Driven Development [Free Meetup]](https://cdn.slidesharecdn.com/ss_thumbnails/vibecodingvsspecdrivendevelopment-251209105622-43f455e7-thumbnail.jpg?width=640&height=640&fit=bounds)
How To Stop Targeted Attacks And Avoid “Expense In Depth” With Strong Authentication
- 1. How To StopTargeted Attacks And Avoid “Expense In Depth” With Strong Authentication Presented by Duo Security with guests Forrester Research and University of Tennessee, Knoxville September 25, 2014 #duowebinar
- 2. Agenda Rick Holland,Forrester Research How To Stop Targeted Attacks and Avoid “Expense In Depth” with Strong Authentication Brian Kelly, Duo Security How Duo Helps You Avoid “Expense In Depth” Bob Hillhouse, University of Tennessee, Knoxville A Case for Multi-factor Authentication #duowebinar
- 3. How To StopTargeted Attacks And Avoid “Expense In Depth” With Strong Authentication Rick Holland, Principal Analyst Forrester Research #duowebinar
- 4. Agenda › Targetedattacks! › Targeted-Attack Hierarchy Of Needs › Recommendations © 2014 Forrester Research, Inc. Reproduction Prohibited
- 5. APT! © 2014Forrester Research, Inc. Reproduction Prohibited
- 6. Heartbleed OpenSSL vulnerability exploited to compromise SSL VPN © 2014 Forrester Research, Inc. Reproduction Prohibited
- 7. Adversaries are onshopping sprees © 2014 Forrester Research, Inc. Reproduction Prohibited
- 8. Except the adversaryisn’t being timed © 2014 Forrester Research, Inc. Reproduction Prohibited
- 9. We are hyperfocused on the © 2014 Forrester Research, Inc. Reproduction Prohibited WRONG things
- 10. Anything but the data © 2014 Forrester Research, Inc. Reproduction Prohibited Malware sandboxes Alert driven security Perimeter security controls
- 11. Agenda › Targetedattacks! › Targeted-Attack Hierarchy Of Needs › Recommendations © 2014 Forrester Research, Inc. Reproduction Prohibited
- 12. Targeted-Attack Hierarchy OfNeeds © 2014 Forrester Research, Inc. Reproduction Prohibited
- 13. Targeted-Attack Hierarchy OfNeeds © 2014 Forrester Research, Inc. Reproduction Prohibited
- 14. Targeted-Attack Hierarchy OfNeeds Need No. 1: An Actual Security Strategy © 2014 Forrester Research, Inc. Reproduction Prohibited
- 15. Silver bullets, forinvestment not defense © 2014 Forrester Research, Inc. Reproduction Prohibited
- 16. Expense in Depth © 2014 Forrester Research, Inc. Reproduction Prohibited
- 17. Targeted-Attack Hierarchy OfNeeds Need No. 2: A Dedication To Recruiting And Retaining Staff © 2014 Forrester Research, Inc. Reproduction Prohibited
- 18. Lack of staffis a problem © 2014 Forrester Research, Inc. Reproduction Prohibited
- 19. Targeted-Attack Hierarchy OfNeeds Need No. 3: A Focus On The Fundamentals © 2014 Forrester Research, Inc. Reproduction Prohibited
- 20. A Focus OnThe Fundamentals © 2014 Forrester Research, Inc. Reproduction Prohibited
- 21. Forrester’s Zero Trustmodel © 2014 Forrester Research, Inc. Reproduction Prohibited
- 22. Forrester’s Zero Trustmodel © 2014 Forrester Research, Inc. Reproduction Prohibited
- 23. Zero Trust isfundamental © 2014 Forrester Research, Inc. Reproduction Prohibited
- 24. Strong Authentication ›Strong authentication is critical for disrupting attackers © 2014 Forrester Research, Inc. Reproduction Prohibited
- 25. Strong Authentication ›Strong auth is critical for disrupting attackers › Protect your VPNs and Citrix but don’t forget about SaaS applications › Consider step up authentication for admins © 2014 Forrester Research, Inc. Reproduction Prohibited
- 26. Least privilege ›Privileged accounts need to be monitored and audited › Don’t share local admin passwords across all hosts › Work towards a data classification program © 2014 Forrester Research, Inc. Reproduction Prohibited
- 27. Detecting lateral movement › Segment your network › Deploy visibility to key ingress/egress chokepoints › NETFLOW can be used for lateral movement detection © 2014 Forrester Research, Inc. Reproduction Prohibited
- 28. Agenda › Targetedattacks! › Targeted-Attack Hierarchy Of Needs › Recommendations © 2014 Forrester Research, Inc. Reproduction Prohibited
- 29. Return on Expensein Depth? © 2014 Forrester Research, Inc. Reproduction Prohibited
- 30. Recommendations › Evaluateyour potential investments › What provides greatest marginal return on your investment? › What technology reduces the greatest attack surface? © 2014 Forrester Research, Inc. Reproduction Prohibited
- 31. Thank you RickHolland rholland@forrester.com Twitter: @rickhholland
- 32. How Duo HelpsYou Avoid “Expense In Depth” Brian Kelly, Principal Product Marketing Manager Duo Security #duowebinar
- 33. Adoption of cloud,mobile, and BYOD is accelerating dramatically # # & ☁#☁# IT 1.0: Mainframe IT 2.0: Client/Server IT 3.0: Cloud/Mobile
- 34. # # & & & ☁#☁# 1995 2000 2005 2010 & Data Breaches Along this same timeline we’ve also seen dramatic growth in user-targeted attacks
- 35. # # & & & ☁#☁# 1995 2000 2005 2010 & Data Breaches Why?
- 36. What’s new inIT 3.0? ‣ Users ‣ Access from anywhere ‣ “Zero Trust” environment ‣ Devices ‣ Mobile proliferation ‣ BYOD acceptance ‣ Services ‣ Diminishing perimeter ‣ Platform and Software -as-a-Service & ☁#☁#
- 37. What’s new inSecurity 3.0? ‣ Users ‣ Access from anywhere ‣ “Zero Trust” environment ‣ Devices ‣ Mobile proliferation ‣ BYOD acceptance ‣ Services ‣ Diminishing perimeter ‣ Platform and Software -as-a-Service Better OS and app security …but, limited endpoint control Better service security …but, limited network visibility
- 38. What’s new inSecurity 3.0? ‣ Users ‣ Access from anywhere ‣ “Zero Trust” environment ‣ Devices ‣ Mobile proliferation ‣ BYOD acceptance ‣ Services ‣ Diminishing perimeter ‣ Platform and Software -as-a-Service User-targeted attacks Credentials are easily stolen • Phished • Guessed • Keylogged • Sniffed • Cracked • Reused • Bypassed
- 39. 100% OF BREACHES involve stolen credentials — Mandiant Source: mandiant.com/threat-landscape and M-Trends annual reports
- 40. advanced adversary willcompromise your environment and accomplish their goal. The Targeted Attack Figure 2 The Hierarchy Targeted-Attack Hierarchy Of Of Needs Needs Detection and response Prevention An integrated portfolio that enables orchestration A focus on the fundamentals A dedication to recruiting and retaining staff An actual security strategy 107121 Source: Forrester Research,
- 41. advanced adversary willcompromise your environment and accomplish their goal. The Targeted Attack Figure 2 The Hierarchy Targeted-Attack Hierarchy Of Of Needs Needs Detection and response Prevention An integrated portfolio that enables orchestration A focus on the fundamentals A dedication to recruiting and retaining staff An actual security strategy 107121 Source: Forrester Research, Back to Basics ‣ Patch, harden, update (everything) ‣ Segment data, services, networks ‣ Review access controls (often) ‣ Inspect endpoints, enforce policy ‣ Require strong authentication
- 42. Legacy two-factor authenticationsolutions overlook TCO On boarding Deployment $ # ✉ $ $ $ Management Login ⚠ ⏲
- 43. Duo Security minimizescost throughout 2FA lifecycle On boarding Deployment ☁ . Management Login /
- 44. Thousands Getting BetterSecurity, Not Just More duosecurity.com/success-stories
- 45. A Case ForMulti-Factor Authentication Bob Hillhouse, Associate CIO and CISO University of Tennessee, Knoxville #duowebinar
- 46. Cast ▪ TheUniversity of Tennessee, Knoxville ▪ 57 merchants across campus ▪ 130 Users; 150 Devices ▪ The UT Office of the Treasurer ▪ The Office of Information Technology (OIT)
- 47. Act I -Prelude ▪ PCI-DSS Requirement 8.3 – Incorporate two-factor authentication for remote access to the network by employees, administrators, and third parties… ▪ 150 devices in the PCI-Subnet require Remote Desktop Services (RDP)
- 48. Act II –The Timeline ▪ 8:00 AM ▪ 8:15 AM ▪ 8:30 AM ▪ 9:00 AM
- 49. Act III –Prologue ▪ 2013 – The end of strong password-only security. – http://duo.sc/utk-vid
- 50. Epilogue ▪ ComplianceGoal was met ▪ Next: Two-Factor Authentication for all central IT staff using the VPN – 200 additional users ▪ Next: Two-Factor Authentication for all VPN Users – Usage Patterns – Establish scope (Campus-wide? Privileged Users Only?)
- 51. Questions + Answers#duowebinar Rick Holland, Forrester Research rholland@forrester.com @rickhholland Brian Kelly, Duo Security bkelly@duosecurity.com @resetbrian Bob Hillhouse, University of Tennessee, Knoxville bob@utk.edu @ut_oit