Kaseya Connect 2013: Security Today – Comprehensive Implementation of Kaseya to Defend Against Threats
•Download as PPTX, PDF•
0 likes•760 views
System and data hacking has become a multi-billion dollar organized business across the globe. In this session recent high-profile attacks will be discussed and Senior Product Specialist, Jason Dettbarn will also project the direction of security vulnerabilities. Kaseya best-practices will be highlighted allowing you to guard against these attacks.
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Kaseya Connect 2013: Security Today – Comprehensive Implementation of Kaseya to Defend Against Threats
Similar to Kaseya Connect 2013: Security Today – Comprehensive Implementation of Kaseya to Defend Against Threats (20)
More from Kaseya
More from Kaseya (20)
Recently uploaded
Recently uploaded (20)
Kaseya Connect 2013: Security Today – Comprehensive Implementation of Kaseya to Defend Against Threats
- 1. Security Today Comprehensive Security Approach with Kaseya Jason Dettbarn Senior Technology Analyst
- 2. Security Today - News - Agenda Historical Security Breaches Los Alamos StuxNet Security Breaches Lockheed Martin NYTimes Apple Facebook
- 3. Security Today – Tech - Agenda Core Kaseya management & monitoring Agent Check-in Threshold USB Blocking Failed Login Attempts / Locked Accounts App Blocking Patching Windows Patching 3rd Party Software Patching Anti-Virus Profile Best Practices Managing Intrusive Scanning
- 4. 4 Richard Feynman – Los Alamos
- 5. 5 Richard Feynman – Safe Cracking
- 6. 6 Richard Feynman – Safe Cracking
- 7. 7 Richard Feynman – Safe Cracking Play in the lock – 18, 19, 20, 21, 22
- 8. 8 Richard Feynman – Safe Cracking (1) Total Combinations Now
- 9. 9 Richard Feynman – Safe Cracking (2) A Typical Combination Max Time = 12 min & Average = 6 min
- 10. 10 Richard Feynman – Safe Cracking (3) Pre Worked Combination Average = 1 - 2 min
- 11. 11 Richard Feynman – Safe Cracking
- 12. 12 The Inflection point – 06-08 • 2006 – 200k unique threat identified • 2007 – 15 Million unique threat • Signature DB explodes • Cybercrime becomes a Business
- 14. 14 Botnets • Zombie War • Botherder • Conficker (Kido) was 6 million • TDL-4 botnet of 4 - 4.5 million • Accelerated Discovery of Multi year threats
- 15. 15 Malware Dragnet Snags Millions of Infected PCs • Botnet – 35 Million Strong?
- 16. 16 Kaseya Security Stack Endpoint Monitoring & Hardening Antivirus Kaseya Antivirus Kaseya Endpoint Security AntiMalware Kaseya AntiMalware Remediation Agent Procedures Monitoring Service Desk & PSA Scheduling & Management Monitoring Passwords USB Block Processes
- 18. 18 Service…
- 19. 19 Healthcare…
- 20. 20 Financial…
- 21. 21 Average…
- 22. 22 Staggering Economics • Cybercriminals earning > $100 Billion/Yr • Sophistication + Organization Increase – Organized Crime – Infrastructure – Affiliate Programs – Botnets + Malware kits • Who would do that? – Opportunist – Governments – Terror Organization – Hacktivists
- 23. 23 Online Bank Robberies • Clampi Trojan – Targeting English speaking countries – Goal: steal log-in and PW – DB of of 4500 different financial sites • Wake, capture, sleep, transfer, classify – Years of observation – Learn user activities – Transfer money in lots of under 10K – Recruited money mules – Banks are not responsible for SMB $ Lost
- 24. 24 Distributed Computing Folding@Home (Stanford Program)SETI @Home
- 25. 25 True power
- 26. 26 Botnet Virus Millions of dormant blackhat botnets available for purchase
- 27. 27 Stuxnet Virus Break Into Hardened Nuclear Facilities?
- 28. 28 How Did They Do It USB Drives Dropped in Parking Lot (leveraging autorun on the USB)
- 29. 29 How infections occur • “But, if its not broken?…” • Un-Patched Software • Spammed Infections • Legit website that’s been infected • Phishing • Trojans • Bots, botnets, botherders – Botherder Command and Control • TDL-4 4.5 million • Mac via Flashfake (700K) • Android botnet discovered 7/2012 • USB, MSD • File transfers and Replication systems – Dropbox, LogMeIn
- 30. Security ‘Today’ What Changed? Moving to the Cloud, data is not within network walls Distributed workforce More web enabled client applications More public individual information on Social Net Patching Windows Patching 3rd Party Software Patching Anti-Virus Profile Best Practices Managing Intrusive Scanning
- 31. Security ‘Today’ Spear Phishing - Leveraging Social Media to target Phishing Emails
- 32. Security & Vulnerability Agenda Kaseya Specific Core Kaseya management & monitoring Agent Check-in Threshold USB Blocking Failed Login Attempts / Locked Accounts App Blocking Patching Windows Patching 3rd Party Software Patching Anti-Virus Profile Best Practices Managing Intrusive Scanning
- 33. 33 Security solutions on endpoints Antivirus Antimalware URL Blocking Local Firewall Device blocking Application blocking Logfile Monitoring Regular System Audits OS Patching Application Patching Remote System Tracking System Wiping
- 34. Agent Check-in Threshold Monitoring -> Alerts -> Agent Check-in Set Max ‘off-the-reservation’ alert
- 35. Core Kaseya Capabilities USB Blocking - Activate Agent Procedure for USB Blocking
- 36. Failed Login / Locked Accounts Event Log Monitoring - Set Event Sets (Failure Audit)
- 37. App Blocking Application Blocking - Agent -> Application Blocker
- 38. Patching Windows Patching - Auto Approve, Initial Update, Patch Reports
- 39. Patching Kaseya Software Deployment & Update - Auto Deploy & Approve/Update
- 40. Kaseya AntiVirus Install, Profile Management, Scan Scheduling - Active Dexter Malware - Leading Industry A/V - Kaspersky v6.0.4.1424
- 41. 41 Kaseya Security Stack Endpoint Monitoring & Hardening Antivirus Kaseya Antivirus Kaseya Endpoint Security AntiMalware Kaseya AntiMalware Remediation Agent Procedures Monitoring Service Desk & PSA Scheduling & Management Monitoring Passwords USB Block Processes
- 42. Questions? Jason Dettbarn Senior Security Analyst jason.dettbarn@kaseya.com
Editor's Notes
- Was growing at the same rate as computer resources needed for a signature based approachHuristicsBut its not that vulnerabilities disclosures proportionally grew… its that Malware became a business.7500 X larger in one year.
- Was growing at the same rate as computer resources needed for a signature based approachHuristicsBut its not that vulnerabilities disclosures proportionally grew… its that Malware became a business.7500 X larger in one year.
- Was growing at the same rate as computer resources needed for a signature based approachHuristicsBut its not that vulnerabilities disclosures proportionally grew… its that Malware became a business.7500 X larger in one year.
- Was growing at the same rate as computer resources needed for a signature based approachHuristicsBut its not that vulnerabilities disclosures proportionally grew… its that Malware became a business.7500 X larger in one year.
- Was growing at the same rate as computer resources needed for a signature based approachHuristicsBut its not that vulnerabilities disclosures proportionally grew… its that Malware became a business.7500 X larger in one year.
- Was growing at the same rate as computer resources needed for a signature based approachHuristicsBut its not that vulnerabilities disclosures proportionally grew… its that Malware became a business.7500 X larger in one year.
- Was growing at the same rate as computer resources needed for a signature based approachHuristicsBut its not that vulnerabilities disclosures proportionally grew… its that Malware became a business.7500 X larger in one year.
- Was growing at the same rate as computer resources needed for a signature based approachHuristicsBut its not that vulnerabilities disclosures proportionally grew… its that Malware became a business.7500 X larger in one year.
- Was growing at the same rate as computer resources needed for a signature based approachHuristicsBut its not that vulnerabilities disclosures proportionally grew… its that Malware became a business.7500 X larger in one year.
- Gordon Moore8000 last year~21 exploits a DAY“the only way to keep up, is to stay ahead” KFBut its not that vulnerabilities disclosures proportionally grew… its that Malware became a business.Exponential growth cycleEvery one vigilant
- APT are targeted for industry or companiesConficker (Kido) was 6 million 2009AMC’s Wildly successful Walking Dead is a preminition… 17 billion deviced connected to the Internet
- Sept 19thMicrosoft Corp. made headlines when it scored an unconventional if not unprecedented legal victory: Convincing a U.S. court to let it seize control of a Chinese Internet service provider’s network as part of a crackdown on piracy.computer stores in China were selling PCs equipped with Windows operating system versions that were pre-loaded with the “Nitol” malware, and that these systems were phoning home to subdomains at 3322.org. The software giant subsequently identified thousands of sites at 3322.org that were serving Nitol and hundreds of other malware strains, and convinced a federal court in Virginia to grant it temporary control over portions of the dynamic DNS provider.They seized control over more than 70,000 domains that were closely associated with distributing hundreds of strains of malware. Microsoft said that within hours of the takeover order being granted, it saw more than 35 million unique Internet addresses phoning home to those 70,000 malicious domains.
- Espionage, coupe, regime, changewe feed the botnetsHacked, we fund these operations.
- Discovered in 2009 After 2 years in the wild.100 million in losses in the US aloneAtlanta-based SecureWorks, recently published a paper calling it "one of the largest and most professional thieving operations on the Internet."Targeting companies that interact with banksSand Springs Oklahoma School District. The thieves then submitted a series of bogus payroll payments, totaling more than $150,000, to accomplices they had hired throughout the United States.One tool company in Georgia that lost $435,000A single case handled by the FBI involved 300 incidents, $70 million in losses and 3,000 mules, according to Conroy McNelley. Also hit allot of school systems as well as state and local government
- When Conficker reached its peak in 2009 = 6 million zombie machinesGigaFlops Floating Point Operations Per Second.Distributed computing on steriodsSecurity through obscurity as ineffective as hiding in the upstairs closet when your house is on fire.
- Open a bank accountTransfer the $ to somewhere.RSA digital certificate two factor auth – HR highest authority, lowest tech apptitude - email that cost 71 Million dollars