T ARGET : YOU! Theyre hacking us, the employees. LinkedIn: A - - PowerPoint PPT Presentation
Y U: T HE T ARGET Kurt Willey Beth Tinsman T ARGET : YOU! Theyre hacking us, the employees. LinkedIn: A reconnaissance map to . . . company hierarchies. Email: a way to inject a virus inside the organizaGon network, bypassing the
OMG I’M IN THE WRONG PRESENTATION!
OMG I’M IN THE WRONG PRESENTATION!
have had credit cards replaced?
all is nearly impossible.
unGl successful.
recruit malware engineers give a rate of between $2,000 and $5,000 a month.
COUNTRY
WAGES, 2012 Estonia $4,923 Brazil $4,172 Russia $1,794 Moldova $595
– Davenport Schools
– Closed bids hacked by compeGtor
– UMB (insider threats) – Stolen bank credenGals via a – Schnuck’s trojan/keylogger – Marshall’s – Proxy server – Sony – Spam botnet – EMC
– Payroll informaGon
– Windows XP exploit typically sells for $50-$150k – Exploit kits: once underground, now public links
– US Chamber of Commerce (China) – Stuxnet (Iran)
– Poland, Russia, the “stans” – Organized crime connecGons – IT interest and limited job opportuniGes
– Takes Gme to implement, and technology changes quickly – Mistakes happen – Inconvenient to users – RepeGGve tasks get boring – Resistant to change
– OrganizaGonal effort is required
– ROI - spend more than the compeGtor – TesGng and implemenGng – Difficult to measure non-occurrence
– Responsible for coordinaGon, evaluaGon, governance and integraGon – Backups – Support (talking the language) – Part of the team to idenGfy data, not solely responsible
– They have a supporGng role in how data moves through the organizaGon.
– Security Analysis – Impact Analysis – Asset Exposure – Risk Analysis – Risk MiGgaGon – Security Review
– What do you have that is desirable? – Where is located and who has authority? – What is at risk if that informaGon falls outside the
QUALITATIVE Risk Analysis and Safeguarding Also, classificaGon and quanGtaGve methods
– Built into Windows 7 (UlGmate and Enterprise) – ApplicaGon-aware firewall – Third-party applicaGons
– 75% of aKacks use publicly known vulnerabiliGes in commercial sofware that could be prevented by regular patching – Systems – Sofware
– Webinars – Once/year or single use apps – New technology – Slows systems – False posiGves
– Systems – Sofware
– Restricts customizaGon – No new applicaGons – Support
– StaGsGcs – Training – Outliers, Logs, Reports, Baselines, Audits
– the average Gme is five months
and sohware – Inventory, risks, responsible parGes
– Web – File access – System event logs – System process logs
– Web (in and out) – Email – ApplicaGon control
the end) to validate – aka “audit”(self, CPA, IT companies) – Password audits – Wireless audits – Social Engineering
– Call in the pro’s (your IT staff, us, etc.) – Keep a chain of custody – Find out if the breach is sGll open – Stop the bleeding – Find out what they stole – Figure out who you must tell