This document discusses the challenges of securing websites and monitoring for web defacement attacks. It notes that traditional prevention-focused security strategies are obsolete against advanced attacks. Approximately 70% of breaches are discovered by external parties like law enforcement or customers rather than internal detection. Restoring compromised websites can take days or weeks. The document advocates adopting a comprehensive approach to web security that includes protection, detection, response, recovery and review capabilities. This includes technologies like web application scanning, web application firewalls, intrusion detection, website monitoring, file integrity monitoring and backup/restoration solutions.

1. WebOrion Anti Web
Defacement Solution
Navigating the
Web Security
Landscape
Lionel Lim
GSEC, GCIH, GCIA, GWAPT
Solution Specialist
Featured in:
1

2. The Evolution of the Web
2

3. 1.Dynamic Design using modern frameworks
How much has the Web changed?
3
Minimalism, Flat Design with Playful Interface

4. 1.Dynamic Design using modern frameworks
How much has the Web changed?
4

5. How much has the Web changed?
5
2. Responsive Interface for Web & Mobile

6. How much has the Web changed?
6
3. Increased Functionality & Complexity

7. Challenges Faced

8. 1. Approximately 70% of breaches were
discovered by external parties…for e.g.
• Law Enforcement
• Customers
• Partners
• Unrelated parties
Key Challenge #1
8
Source: Verizon Data Breach Report

9. 2. >50% of companies take months to discover the compromise
Key Challenge #2
9
Source: Verizon Data Breach Report

10. 3. Additional days/weeks are spent on restoration!
Key Challenge #3
10
Source: Verizon Data Breach Report

11. Key Challenge #4
11
Gartner’s Assertion:
“Advanced targeted attacks make prevention-centric strategies
obsolete”
Key Challenges
 Information security can no longer prevent advanced targeted
attacks.
 Too much information security spending has focused on the
prevention of attacks and not enough has gone into security
monitoring and response capabilities.
Prevention is Futile in 2020
[Gartner – 27 Jan 2016]

12. Limitations to Traditional Monitoring
Methods
Static Integrity Checks only
•Dynamic websites with frequently changing content will
be hard to monitor
e.g. Google analytics script, randomizer script
Requires HW/SW Installation on server
•May cause interruption to main web service
•Not practical for externally hosted websites
Using humans to eyeball websites
•not scalable and may not detect hidden malicious
scripts!
12

13. Challenges with Backup & Restoration of
Websites
Traditional Backup and Restore may take
several days!
•Manual and resource intensive process
Platform and Webserver Architecture
Dependent
•Requires in-depth knowledge and analysis of the
web platform and server architecture
Risks of unfixed security vulnerabilities
•Attacker can exploit the same vulnerabilities if
the root security issue is not fixed!
13

14. 14
Trends in Web Security

15. Shocking Facts you did not know…..!
There are around a million websites defaced every year.
15

16. Web Defacement Attacks & Patterns
There are around 100K successful monthly defacement.
55.1% of the defacement attacks are actually Re-Defacements.
16

17. Adopt a Comprehensive Approach To Secure
your Web !
“Protection alone is futile.
Investing in the entire chain will be more effective”
PROTECTION
DETECTION
RESPONSERECOVERY
REVIEW
Web Application
Security Scanning
Web Application Firewall
DDOS Protection Solution
Intrusion Detection Solution
Website Monitoring Solution
File Integrity Solution
Backup and Restoration Solution 17

18. Food For Thought
• Are you prepared for the
business implications of
a compromise?
• Are you doing enough to
secure your websites?
18

19. Key Takeaways
• Modernizing the way you secure your websites
• Exploring new techniques and approaches to
secure your assets
19
Lionel Lim
Solution Specialist
Banff Cyber Technologies