Stock Exchanges in the Line of Fire-Morphology of Cyber Attacks
•Als PPTX, PDF herunterladen•
0 gefällt mir•1,356 views
Stock exchanges are constantly targeted by cyber attacks. This presentation discusses several real life attacks cases studies discussing attack vectors, motivations, impacts and mitigation techniques.
Empfohlen
Empfohlen
Weitere ähnliche Inhalte
Mehr von Radware
Mehr von Radware (20)
Kürzlich hochgeladen
Kürzlich hochgeladen (20)
Stock Exchanges in the Line of Fire-Morphology of Cyber Attacks
- 1. Session ID: HT-R33 Session Classification: Intermediate
- 3. ► ► ►
- 5. Network Impact Sever Business Impact Sever
- 7. Attack Confirmed Pipe FW Web Vector Satur- Measurement CPU Server ation 100% Outage UDP Flood 44 Mbps X X HTTP Flood 40K Concurrent Con. X X Empty Connection Flood 5.2K PPS X X FIN+ACK 4 Mbps X X
- 8. “Stock exchange hit by hackers” “Attack on stock exchange triggers halt in trade”
- 11. Network Impact Low Business Impact None
- 12. “Stock exchange IT have been working intensively to resolve all issues” “Experts successfully implemented a protection against the attacks” “Additional measures were taken such as a redundant New Site”
- 14. Network Impact None Business Impact None
- 15. Legitimate traffic monitoring TCP connection flood detection and mitigated immediately
- 16. Network Impact None Business Impact None
- 17. Attack begins but quickly mitigated
- 19. ► ► ► ► ►
- 21. Psychological Impact Static Content HTTP Flood Trade Trade/Financial Disruption Announcements Firewall L3 Router Internet Pipe Trading API
- 22. Psychological Impact Static Content UDP Flood Trade Trade/Financial Disruption Announcements Firewall L3 Router Internet Pipe Trading API
- 23. Psychological Impact Static Content SYN Flood Trade Trade/Financial Disruption Announcements Firewall L3 Router Internet Pipe Trading API
- 24. Protection HTTP Flood UDP Flood SYN Flood Stock Exchange
- 25. Protection HTTP Flood UDP Flood SYN Flood Stock Exchange
- 26. Protection HTTP Flood Attackers will UDP Flood eventually find the weakest link! SYN Flood Stock Exchange Slow Rate Flood Image Download Flood
- 28. Political/Hacktivist’s Bull’s Eye (Realistic)
- 31. Legitimate Bypass CDN Attack Directly
- 32. ► ►
- 33. Pragma: no-cache
- 34. ► ► ► ► ►
- 36. Attack Heads Up Reconnaissance Test Fire Begins Service Service Disruption Disruption Automatic Manual New Attack Mitigation Mitigation Mitigation Vectors Continued Attack Ends Forensic
- 38. Attack Attack Period Period “Peace” “Peace” Period Period Time Pre-attack Post-attack Phase Pre-attack Phase Phase Automatic Mitigation (no time for human interaction)
- 39. THE SECURITY GAP Attacker has time to bypass automatic mitigation. Defenders have no skill/capacity to sustain it. “Peace” Period “Peace” Period Attack Period Pre-attack Post-attack Phase Phase
- 40. 45% 40% 35% 30% Procedures 25% 20% Human skills 15% Equipment 10% 5% 0% Before During After Radware 2012 Global Application and Network Security Report
- 41. Be prepared for prolonged attacks! THE SECURITY GAP Attacker has time to bypass automatic mitigation. “Peace” Period Defenders have no skill/capacity to sustain it. “Peace” Period Attack Period Pre-attack Post-attack Phase Phase
- 42. Counterattack RT Intel Active Mitigation 24x7x365 Trained Experienced
- 44. ► ► ►
- 46. ► ► ►