Smau Milano 2016 - Paola Presutto, Microsoft
ā¢
0 likesā¢238 views
This document discusses cybersecurity threats and the Windows 10 defense stack. It summarizes that cyber threats pose a material risk to businesses, with the average cost of a data breach being $3.5 million. It then outlines the Windows 10 defense stack, which aims to protect devices from threats pre-breach and detect and respond to breaches post-breach. Key elements of the defense stack include Windows Defender, Device Guard, Windows Hello for identity protection, and Windows Defender Advanced Threat Protection.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Smau Milano 2016 - Paola Presutto, Microsoft
Similar to Smau Milano 2016 - Paola Presutto, Microsoft (20)
More from SMAU
More from SMAU (20)
Recently uploaded
Recently uploaded (20)
Smau Milano 2016 - Paola Presutto, Microsoft
- 1. Paola Presutto Sr Technical Evangelist - Microsoft @PiperITaPRO Windows 10 ā There are no limits
- 2. Source: McKinsey, Ponemon Institute, Verizon CYBER THREATSARE A M A T E R I A L R I S K TO YOUR BUSINESS Impact of lost productivity and growth Average cost of a data breach (15% YoY increase) $3.0 TR ILLION $3.5 MILLION Corporate liability coverage. $500 MILLION āCYBER SECURITY IS A CEO ISSUE.ā - M C K I N S E Y
- 3. ATTACKS HAPPEN FAST AND ARE HARD TO STOP If an attacker sends an email to 100 people in your companyā¦ ā¦23 people will open itā¦ ā¦11 people will open the attachmentā¦ ā¦and six will do it in the first hour.
- 4. EVOLUTION OF ATTACKS Mischief Script Kiddies Unsophisticated Fraud and Theft Organized Crime More sophisticated Damage and Disruption Nations, Terror Groups, Activists Very sophisticated and well resourced
- 5. RANSOMWARE
- 6. ANATOMY OF AN ATTACK Malicious Attachment Execution Stolen Credential Use Internet Service Compromise Kernel-mode Malware Kernel Exploits Pass-the-Hash Malicious Attachment Delivery Browser or Doc Exploit Delivery Phishing Attacks ENTER ESTABLISH EXPAND ENDGAME NETWORK DEVICE USER
- 7. PASS-THE-HASH Browser or Doc Exploit Execution ANATOMY OF AN ATTACK Theft of sensitive information, disruption of government. PHISHING NETWORK DEVICE USER ENDGAME http://natoint.com/900117-spain-forces-conclude-mission-in-central-african-republic/
- 8. PASS-THE-HASH Browser or Doc Exploit Execution ANATOMY OF AN ATTACK Theft of sensitive information, disruption of government. PHISHING NETWORK DEVICE USER ENDGAME Land on exploit page Exploit runs Redirected to legitimate page Total Elapsed Time: 00:00.1
- 10. THE WINDOWS 10 DEFENSE STACK PROTECT, DETECT & RESPOND PRE-BREACH POST-BREACH Windows Defender ATP Breach detection investigation & response Device protection Device Health attestation Device Guard Device Control Security policies Information protection Device protection / Drive encryption Enterprise Data Protection Conditional access Threat resistance SmartScreen AppLocker Device Guard Windows Defender Network/Firewall Built-in 2FA Account lockdown Credential Guard Microsoft Passport Windows Hello :) Identity protection Breach detection investigation & response Device protection Information protection Threat resistance Conditional Access Windows Defender ATP Device integrity Device control BitLocker and BitLocker to Go Windows Information Protection SmartScreen Windows Firewall Microsoft Edge Device Guard Windows Defender Windows Hello :) Credential Guard Identity protection
- 11. POST-BREACHPRE-BREACH Breach detection investigation & response Device protection Identity protection Information protection Threat resistance Windows 7 Security features
- 12. POST-BREACHPRE-BREACH Breach detection investigation & response Device protection Identity protection Information protection Threat resistance Windows 10 Security on Legacy or Modern Devices (Upgraded fromWindows 7 or 32-bit Windows 8)
- 13. POST-BREACHPRE-BREACH Breach detection investigation & response Device protection Identity protection Information protection Threat resistance Windows 10 Security on Modern Devices (FreshInstall or upgraded from 64-bit Windows 8 )
- 14. Device Protection Biometrics sensors Virtualization Cryptographic processing Device integrity
- 15. TRADITIONAL PLATFORM STACK Device Hardware Kernel Windows Platform Services Apps
- 16. VIRTUALIZATION BASED SECURITY WINDOWS 10 Kernel Windows Platform Services Apps Kernel SystemContainer Trustlet#1 Trustlet#2 Trustlet#3 Hypervisor Device Hardware Windows Operating System Hyper-VHyper-V
- 17. THE WINDOWS 10 DEFENSE STACK PROTECT, DETECT & RESPOND PRE-BREACH POST-BREACH Conditional Access Windows Defender ATP Breach detection investigation & response Device protection Device integrity Device control Information protection BitLocker and BitLocker to Go Windows Information Protection Threat resistance SmartScreen Windows Firewall Microsoft Edge Device Guard Windows Defender Windows Hello :) Credential Guard Identity protection Device protection Device integrity Device control Threat resistance SmartScreen Windows Firewall Microsoft Edge Device Guard Windows Defender
- 18. MICROSOFT EDGE: DESIGNED FOR SECURE BROWSING Eliminate vulnerabilities before attackers can find them Contain the damage when vulnerabilities are discovered Break exploitation techniques used by attackers Prevent navigation to known exploit sites Keep our customers safe when browsing the web Objective Make it difficult and costly for attackers to find and exploit vulnerabilities in Microsoft Edge Strategy Tactics ļ ļ Microsoft Edge is the most secure browser Microsoft has ever shipped
- 19. WINDOWS DEFENDER APPLICATION GUARD Hypervisor Device Hardware Kernel Apps Windows Platform Services Kernel Windows Platform Services Microsoft Edge Kernel System Container Critical System Processes Windows Defender Application Guard Container Windows Operating System Hyper-V Hyper-V HARDWARE ISOLATION
- 20. WINDOWS DEFENDER ADVANCED THREAT PROTECTION DETECT ADVANCED ATTACKS AND REMEDIATE BREACHES Unique threat intelligence knowledge base Unparalleled threat optics provide detailed actor profiles 1st and 3rd party threat intelligence data. Rich timeline for investigation Easily understand scope of breach. Data pivoting across endpoints. Deep file and URL analysis. Behavior-based, cloud-powered breach detection Actionable, correlated alerts for known and unknown adversaries. Real-time and historical data. Built into Windows No additional deployment & Infrastructure. Continuously up-to-date, lower costs.
- 21. THE WINDOWS 10 DEFENSE STACK PROTECT, DETECT & RESPOND PRE-BREACH POST-BREACH Conditional Access Windows Defender ATP Breach detection investigation & response Device protection Device integrity Device control Information protection BitLocker and BitLocker to Go Windows Information Protection Threat resistance SmartScreen Windows Firewall Microsoft Edge Device Guard Windows Defender Windows Hello :) Credential Guard Identity protection Windows Hello :) Credential Guard Identity protection Threat resistance SmartScreen Windows Firewall Microsoft Edge Device Guard Windows Defender
- 22. USER IDENTITY & AUTHENTICATION Windows 10
- 23. shhh! Easily mishandled or lost (Hint: The user is the problem) SHARED SECRETS
- 24. ļ Improved security ļ Fingerprintand facialrecognition ļ Ease of use ļ Impossible to forget ļ VBS support BIOMETRIC MODALITIES
- 25. THE WINDOWS 10 DEFENSE STACK PROTECT, DETECT & RESPOND PRE-BREACH POST-BREACH Conditional Access Windows Defender ATP Breach detection investigation & response Device protection Device integrity Device control Information protection BitLocker and BitLocker to Go Windows Information Protection Threat resistance SmartScreen Windows Firewall Microsoft Edge Device Guard Windows Defender Windows Hello :) Credential Guard Identity protection Windows Hello :) Credential Guard Identity protection Information protection BitLocker and BitLocker to Go Windows Information Protection
- 26. Data Leakage 2HIPPA Secure Now, āA look at the cost of healthcare data breaches,ā Art Gross, March 30, 2012 Have accidentallysent sensitive informationto the wrong person1 58% ā¦of senior managersadmit to regularly uploadingwork files to a personal email or cloud account1 87% Average per record cost of a data breachacross all industries2 $240 PER RECORD 1Stroz Friedberg, āOn The Pulse: Information Security In American Business,ā 2013
- 27. DEVICE PROTECTION DATA SEPARATION LEAK PROTECTION SHARING PROTECTION DEVICE PROTECTION BitLocker enhancements in Windows 8.1 InstantGo 3rd party adoption Protect system and data when device is lost or stolen Containment Data separation DATA SEPARATION Prevent unauthorized users and apps from accessing and leaking data LEAK PROTECTION Protect data when shared with others, or shared outside of organizational devices and control SHARING PROTECTION YOUR INFORMATION PROTECTION NEEDS
- 28. SHARING PROTECTION Protect all file types, everywhere they go, cloud, email, BYOD, ā¦ Support for all commonly used devices and systems ā Windows, OSX, iOS, Android Support for B2B and B2B via Azure AD Support for on premise and cloud based scenarios (e.g.: Office 365) Seamless easy to provision and support for FIPS 140-2 regulation and compliance Rights Management Services
- 29. Your security depends on a platform where: APPS MUST EARN TRUST BEFORE USE DEVICE GUARD
- 30. Ā© 2016 Microsoft Corporation. All rights reserved.