Paul Henry’s 2011 Malware Trends
•Download as PPT, PDF•
2 likes•431 views
Join security and forensics expert, Paul Henry, to learn about the latest malware trends and more importantly, practical steps you can take to better protect your organization from evolving threats. Learn: • How social media and removable devices have become new, targeted paths into your network • Why traditional defenses are not effective in the unending arms race with financially motivated “bad guys” • How to ensure an effective depth-in-defense security strategy that includes application whitelisting
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Paul Henry’s 2011 Malware Trends
Similar to Paul Henry’s 2011 Malware Trends (20)
More from Lumension
More from Lumension (20)
Recently uploaded
Recently uploaded (20)
Paul Henry’s 2011 Malware Trends
- 1. Paul Henry’s 2011 Malware Trends
- 2. Today’s Speaker Paul Henry Security & Forensics Analyst MCP+I, MCSE, CCSA, CCSE, CFSA, CFSO, CISSP,-ISSAP, CISM, CISA, CIFI, CCE SANS Institute Instructor
- 3. Today’s Agenda Shift in IT Risk and Threat Landscape 2011 Malware Trends Practical Steps to Prevent Malware Q&A
- 5. The Shifting IT Risk and Threat Landscape… and the Impact to Your Information
- 7. Web Applications are the Leading Attack Path The applications we use today for productivity Collaborative / Browser-based / Open Source Social Communities, Gadgets, Blogging and Widgets open up our networks to increasing risk everyday. Source: Verizon, 2010 Data Breach Investigations Report
- 12. Click Jacking On Facebook
- 13. Spear Phishing On Facebook
- 14. Sniffing Passwords On Facebook
- 15. Be Sure to Change to HTTPS Account>Account Settings>Account Security and select the secure browsing / HTTPS checkbox and your FB visit including your login will be encrypted
- 16. Trend 2: Better Tools For The Bad Guys
- 17. Trend 3: Traditional Defenses are Not Keeping Up
- 20. Why Question Big Money In Fake AV? Over 500,000 Unique Fake AV Binaries in the last Q of 2010
- 21. Trend 5: Stuxnet – A Game Changer
- 22. It Is Not Over Yet
- 24. Practical Steps to Prevent Malware
- 28. Manage the Removable Devices in Your Environment *Worldwide State of The Endpoint Report 2009 Without Enforcement, Your Policy has No Teeth!
- 30. Q&A
Editor's Notes
- © Copyright 2008 - Lumension Security
- Web application vulnerabilities continue to be the attack vector of choice The web continues to be a common path of infection. Among web-based malware, we distinguish auto-executed “drive-by downloads” from those involving user interaction. Many of the latter incorporate a social engineering aspect (“click to clean your system”). The web installation vector is more opportunistic in nature than the “installed by attacker” variety that usually targets a pre-selected victim. Once the system is infected, the malware alerts an external agent who will then initiate further attacks. The web is a popular vector for the simple reason of that’s where the users are. Overly-trusting browsers and users operating with administrative privileges only add to this popularity. While not extremely common, we did observe several cases in which malware was coded directly into an existing program or script. This, of course, requires access to the system but also knowledge of how the code works. Not surprisingly, these often involve malicious insiders who developed the code or administer the system on which it runs. However, a few very interesting cases of this type were committed by outsiders. One of these involved an external agent that had access to the system for over six months. During this time, he studied the input/output process and developed a custom script to siphon data when new accounts were created.
- Why am I picking on Facebook? More than 500 million people are on it. Search any company name Find an employee Send them a message leading them to a malicious site Compromise their PC Surf their VPN in to the company network
- Vulnerabilities affecting a typical end-user PC from 2007-2009 almost doubled from 220 to 420 and its expected to double again in 2010 (Secunia Half Year Report 2010) A PC with 50 programs installed had 3.5 times more vulnerabilities in the 24 third party programs installed than in the 26 Microsoft programs installed. It is expected that this ratio will increase to 4.4 in 2010. ( Secunia Half Year Report 2010) Discover: Gain complete visibility of all IT assets, both managed and unmanaged. Assess: Perform a deep analysis and thorough OS, application and security configuration vulnerability assessments. Prioritize: Focus on your most critical security risks first. Remediate: Automatically deploy patches to an entire network per defined policy to support all OS’s and applications. Report: Provide operational and management reports that consolidate discovery, assessment and remediation information on a single management console.