Beyond the Fortress Network Security Strategies
•Télécharger en tant que PPTX, PDF•
0 j'aime•150 vues
Information Security has traditionally been about controlling the access to data. We build massive and complex network security to ensure that our data is protected. The problem is that as we become more Cloud based and mobile that Fortress we built around our network has become less effective. 80%+ of hacks are coming from inside of that fortress via phishing style attacks. We need a new approach and new tools to securing our data. This presentation looks at the old way and why it failed, as well as the tools that Microsoft Office 365 and EM-S provide to secure out data in the new world, no matter where it resides.
Recommandé
Contenu connexe
Tendances
Tendances (20)
Similaire à Beyond the Fortress Network Security Strategies
Similaire à Beyond the Fortress Network Security Strategies (20)
Plus de David Broussard
Plus de David Broussard (16)
Dernier
Dernier (20)
Beyond the Fortress Network Security Strategies
- 1. Beyond the Fortress Network David C. Broussard Principal Consultant @dbroussa @CloudWhisperers Blogs.catapultsystems.com/dbroussard
- 5. Security in the old mindset
- 6. What are we concerned about again?
- 15. Core questions about security
- 17. DELIVERY Employee A opens infected email on workstation2 A Malware EXPLOITATION Employee B opens infected email using mobile device2 BMalware Infected phone disables Antivirus; and compromised credentials used to access Email service 3Control Evasion Password/Hash Dumping 3 Threat Actor gather credentials on compromised machine COMMAND AND CONTROL Credentials harvested after Employee attempts login to bogus site 2 4 Threat Actors move laterally within network using compromised credentials Compromised Credential ACTIONS ON OBJECTIVE 5 Threat Actors use compromised devices/accounts to exfiltrate PII 48 Hours 200+ Days PII Leak/Exfiltrate Data Threat Actor targets employees via phishing campaign1 Phishing 3 Compromised credentials used to access service
- 20. Data Loss Prevention and Encryption
- 21. Threat Detection and Prevention − − − −
- 22. Tools that you didn’t know you had
Notes de l'éditeur
- Focused on access to data as opposed to securing the data itself Deny malicious users from accessing data except from inside of our secure network The cloud is seen as insecure primarily because we (IT) no longer can restrict access to the information Or can we? However, even the Fortress Network didn’t work completely What about email? Didn’t we lose control of that document once we hit send?
- Build high walls around our data Firewalls Network segments VPNs NTFS permissions Build deep defense in depth DMZs Detonation Chambers Pre-scan incoming requests (honey traps, URL scans) Malware protection Malicious link detection Spam and virus software on desktops and servers Interior security was much less strenuous Virus scans Malware But assumption was if you had access you could do anything