From Strategy To Tactics - Targeting And Protecting Privileged Accounts
•
0 j'aime•209 vues
Talking about the recent breaches both strategically and tactically.
Recommandé
Recommandé
Contenu connexe
Tendances
Tendances (20)
En vedette
En vedette (20)
Similaire à From Strategy To Tactics - Targeting And Protecting Privileged Accounts
Similaire à From Strategy To Tactics - Targeting And Protecting Privileged Accounts (20)
Dernier
Dernier (20)
From Strategy To Tactics - Targeting And Protecting Privileged Accounts
- 1. SESSION ID: #RSAC Lavi Lazarovitz From Strategy to Tactics: Targeting and Protecting Privileged Accounts GPS1-F01 Security Researcher Cyberark @LaviLazarovitz
- 2. #RSAC Squirrels Vs. Hackers * https://www.washingtonpost.com/news/the-switch/wp/2016/01/12/are-squirrels-a-bigger-threat-to-the-power-grid-than-hackers/ 2
- 6. #RSAC The Reality The Reality Outside: The Reality Inside: Attackers cut power Operators could not interfere 6
- 7. #RSAC The Role of Privileged Accounts Initial foothold IT to OT Shutdown power 1 2 3 7
- 8. #RSAC The End (Of The Heist) 8
- 9. #RSAC Swift System SWIFTNet 6.1+ billion FIN messages 99.999% SWIFTNet availability 99.999% FIN availability 11,000+ Institutions connected to SWIFT 200+ Countries & territories connected 9
- 10. #RSAC The Compromised Path PERIMETER ITNETWORK SWIFT-CONNECTED SYSTEMS RTGS SNL 32 compromised machines 10
- 12. #RSAC The Role of Privileged Accounts Initial foothold IT to Swift Execute orders 1 2 3 12
- 13. #RSAC The Strategy “With regard to narrow passes, if you can occupy them first, let them be strongly garrisoned and await the advent of the enemy.” Sun Tzu 13
- 14. #RSAC DEMO
- 15. #RSAC Highly Threatening Accounts The Root Cause
- 16. #RSAC 10% 50% 100% Low Medium High Network Risk Benchmark
- 17. #RSAC 17% 44% 39% Low risk: <10% Medium risk: 10-50% High risk: >50% Those Are Our Networks
- 18. #RSAC Narrowing The Pass #1 Domain accounts Local accounts One-time passwords Zoning credentials 18
- 19. #RSAC Narrowing The Pass #2 - Passwords Eliminate common passwords
- 20. #RSAC Narrowing The Pass #2 - Passwords Introducing Easy-Peasy https://github.com/CyberArkLabs/EasyPeasy
- 21. #RSAC WiFi Routers, Smart TVs Privileged Service Accounts Routers, Firewalls, Hypervisors, Databases, Applications Routers, Firewalls, Servers, Databases, Applications Laptops, Tablets, Smartphones Power Plants, Factory Floors Narrowing The Pass #3 – Service Accounts
- 22. #RSAC WiFi Routers, Smart TVs Compromised Privileged Service Accounts Laptops, Tablets, Smartphones Power Plants, Factory Floors Routers, Firewalls, Hypervisors, Databases, Applications Routers, Firewalls, Servers, Databases, Applications Narrowing The Pass #3 – Service Accounts
- 23. #RSAC Narrowing The Pass #3 – Service Accounts Crackable service accounts Introducing Risky-SPNs https://github.com/CyberArkLabs/RiskySPN
- 24. #RSAC Strategy to Tactics Respond Respond live to malicious activity Protect Secure and manage privileged credentials Monitor Monitor privileged accounts usage
- 25. #RSAC Strategy to Tactics Narrow the passes, monitor and respond Privileged Accounts 25
- 26. #RSAC Q&A 26
- 27. #RSAC Thank You Lavi.Lazarovitz Security research @Cyberark Lavi.Lazarovitz@cyberark.com