Seminář Check Point - Bezpečnost bez kompromisů 23.6.2016, Praha Petr Kadrmas, SE Eastern Europe, Check Point

1. NADAV PELEG
HEAD OF MOBILE
SECURITY
MOBILE
SECURITY
Petr Kadrmas
SE Eastern Europe

2. YOU DON’T NEED TO
BREAK A WINDOW TO
BREAK INTO A HOUSE
YOU JUST NEED
SOMEONE TO
LET YOU IN

3. MOBILE USERS ARE

4. 3 VECTORS OF
Network Attacks OS ExploitsInfected Apps

5. DAMAGES
Tracking
Location
Stealing
Emails
Stealing
Contacts list
Microphone
Recordings
Taking
Photos
Stealing
Passwords
Hijacking
Messages

6. MAJOR ATTACKS

7. MISCONCEPTIONS
ABOUT MOBILE
SECURITY
#1
"EMM/MDM
can protect me."
#2
"Secure Container
can protect me."
#4
"iPhone is immune
against threats."
#5
"Mobile AV can
protect me."
#3
"It’s not a top
priority."

8. Container
EMM
1,200
Devices
BYOD
400

9. INFECTED
DEVICES
Credential
Stealers
Unauthorized
Root Kits
mRATs
Keyloggers

10. IT IS
A BIG DEAL

11. #1 #2 #3
#4 #5
"EMM/MDM
can protect me"
"Secure Container
can protect me"
"iPhone is immune
against threats"
"Mobile AV can
protect me"
MISCONCEPTIONS
ABOUT MOBILE
SECURITY
"It’s not a top
priority."

12. WHAT ABOUT
is iPhone immune
to threats?
iOS?

13. CAN YOU TRUST
3rd PARTY APP STORES?
25PP.com vShare.com
150M users, 25% iOS.
15,000 iOS apps
more than 40M users,
8M downloads a day

14. XcodeGhost
Collects user
and device data
and sends to
C&C server
Over 4,000
malicious apps in
Apple App Store
Source: blog.checkpoint.com

15. Side Stepper

16. BUT STILL…
ANDROID IS 17 TIMES MORE
PRONE TO THREATS THAN iOS*
Time gap from
vulnerability to fix
Only 20%
update Android OS
Google Play is less
secured than Apple
App Store
*Source: Check Point Mobile Threat Prevention Intelligence

17. WHAT ABOUT
Can mobile anti-virus
really protect me?
ANTI-VIRUS?

18. HOW MOBILE
ANTI-VIRUS
WORKS?
SIGNATURES
can be easily bypassed
by obfuscation

19. Bypassing AV Detection of Mobile Spyware

20. Malware
detected by
Anti Virus

21. Obfuscation
tool for
Android
apps Obfuscated version of
Phonetail app created

22. Malware
bypassed AV
inspection

23. UNKNOWN
MALWARE
AV CANNOT
PROTECT
AGAINST

24. #1 #2 #3
#4 #5
"EMM/MDM
can protect me"
"Secure Container
can protect me"
"iPhone is immune
against threats"
"Mobile AV can
protect me"
MISCONCEPTIONS
ABOUT MOBILE
SECURITY
"It’s not a top
priority."

25. MOBILE
SECURITY
BUILDING
BLOCKS
Mobile Device
Management
Policy Enforcement
Secure
Containers
Data Leakage
Prevention
Anti-Virus,
App Reputation
Known Threats
Mobile Threat Prevention
Unknown Threats and Zero Day

26. MOBILE THREAT PREVENTION
Advanced Threat
Detection and Mitigation
Best Mobile Threat
Catch Rate
Full Visibility
Simple Deployment

27. MDM
EMM

28. ©2015 Check Point Software Technologies Ltd. 28
Threat Technologies
Advanced App
Analysis
Sandboxing (Emulation)
Advanced Static Code
Analysis
Uncovers new malware
and targeted exploits
Network Anomaly
Detection
Wi-Fi Man-in-the-Middle
(MitM) attacks
Evasive botnets and
time bomb malware
Host Threat
Analysis
Malicious
Configurations
Exploits and file system
manipulation
Threat Framework
Multi-dimensional
Risk/Trust assessments
Accurate risk
classifications to
effectively mitigate risk
[Protected] Non-confidential content

29. MAXIMUM
LEVEL OF
SECURITY

30. WITHOUT
IMPACTING
USABILITY
It’s All About the End
User Experience

31. ©2015 Check Point Software Technologies Ltd. 31
Taking Mobile Security Beyond
Mobile Threat Prevention
[Restricted] ONLY for designated groups and individuals​
Mobile Threat
Prevention
Threat Prevention for
mobile devices
Capsule
Cloud
Protect laptops
when off the
business network
Capsule
Workspace & Docs
Protect business data
on mobile devices
Target solutions for mobile use-cases

32. ©2015 Check Point Software Technologies Ltd. 32
Capsule Workspace
Protect business data E V E RY W H E R E
*****
SECURELY log-in
EASILY ACCESS
business applications
PLACE ONLY business information under
IT’s control

33. ©2015 Check Point Software Technologies Ltd. 33
SECURITY FOLLOWS THE DOCUMENT
Classify
Share
Encrypt
Capsule Docs

34. THANK YOU