M-Trends 2015 セキュリティ最前線からの視点

•

0 gefällt mir•3,864 views

の業種で発生したセキュリティ・インシデント数百件の分析結果、統計情報、事例研究を元に、APT攻撃（Advanced Persistent Threat：高度で持続的な標的型攻撃）で使用されるツールや手口が過去1年間でどのように進化したかを示しています

脅威レポート

7
傾向2：
狙われる小売企業
4
U.S. Department of Homeland Security and U.S. Secret Service. “Backoff Malware: Infection Assessment.” August
2014.

10
•
•
•

13
•
•

15
•
•
•

18
•
•

Weitere ähnliche Inhalte

Mehr von FireEye, Inc.

M-Trends 2015 : Les nouvelles du front

M-Trends 2015 : Les nouvelles du front

M-Trends 2015 : Les nouvelles du front

5 Reasons Cyber Attackers Target Small and Medium Businesses

5 Reasons Cyber Attackers Target Small and Medium Businesses

5 Reasons Cyber Attackers Target Small and Medium Businesses

As vehicles become both increasingly complex and better connected to the Internet, their increased connectivity makes them even more vulnerable to advanced cyber attacks. This report looks at the five most concerning potential threats created by vehicle software vulnerabilities — including various threat scenarios, their likelihood of occurring and their potential impact — and offers suggestions on how to address this growing cyber security challenge.

Connected Cares: The Open Road For Hackers

Connected Cares: The Open Road For Hackers

Connected Cares: The Open Road For Hackers

Mandiant’s annual threat report reveals key insights, statistics and case studies illustrating how the tools and tactics of advanced targeted attackers, including the Advanced Persistent Threat (APT), have evolved over the last year. The report, based on hundreds of advanced threat investigations, also shares approaches that organizations can take to improve the way they detect, respond to, and contain complex breaches. For the latest M-Trends report, https://www.fireeye.com/mtrends

M-Trends® 2012: An Evolving Threat

M-Trends® 2012: An Evolving Threat

M-Trends® 2012: An Evolving Threat

In 2010, Mandiant's first M-Trends report detailed how the Advanced Persistent Threat (APT) successfully compromised its victims. In 2011, the attackers continued to expand their targets and innovated their techniques. In this report, those attack techniques are explored further and key steps you can take are identified so you can address the threat in your enterprise. For the latest M-Trends report, visit https://www.fireeye.com/mtrends

M-Trends® 2011: When Prevention Fails

M-Trends® 2011: When Prevention Fails

M-Trends® 2011: When Prevention Fails

The inaugural M-Trends report details threat intelligence learned while conducting intrusion investigations for the U.S. government, the defense industrial base, and commercial organizations. This report focuses on the Advanced Persistent Threat (APT), and outlines trends, techniques, and real details of how the APT successfully compromises any target it desires. For the latest M-Trends report, visit https://www.fireeye.com/mtrends

M-Trends® 2010: The Advanced Persistent Threat

M-Trends® 2010: The Advanced Persistent Threat

M-Trends® 2010: The Advanced Persistent Threat

Cloud computing and bring-your-own-device (BYOD) workplace policies are expanding the endpoints in IT infrastructures — and more complexity when it comes to investigating cyber attacks. The SANS 2013 Report on Digital Forensics and Incident Response Survey reveals some of the major difficulties that security professionals face in this new environment and how to better prepare for future investigations. Collecting responses from more than 450 security professionals across a range of industries and company sizes, the survey found that nearly 90 percent of respondents had conducted at least one forensics investigation within the last two years. But just 54 percent called their digital forensics capabilities “reasonably effective.” For the latest threat intelligence reports, visit https://www.fireeye.com/current-threats/threat-intelligence-reports.html

SANS 2013 Report: Digital Forensics and Incident Response Survey

SANS 2013 Report: Digital Forensics and Incident Response Survey

SANS 2013 Report: Digital Forensics and Incident Response Survey

The law of unintended consequences strikes again. In an effort to address security risks in enterprise IT systems and the critical data in them, numerous security standards and requirement frameworks have emerged over the years. But most of these efforts have had the opposite effect — diverting organizations’ limited resources away from actual cyber defense toward reports and compliance. Recognizing this serious problem, the U.S. National Security Agency (NSA) in 2008 launched Critical Security Controls (CSCs), a prioritized list of controls likely to have the greatest impact in protecting organizations from evolving real-world threats. This SANS Institute survey of nearly 700 IT professionals across a range of industries examines how well the CSCs are known in government and industry and how they are being used. For the latest threat intelligence reports, visit https://www.fireeye.com/current-threats/threat-intelligence-reports.html.

SANS 2013 Report on Critical Security Controls Survey: Moving From Awareness ...

SANS 2013 Report on Critical Security Controls Survey: Moving From Awareness ...

SANS 2013 Report on Critical Security Controls Survey: Moving From Awareness ...

With malware attacks growing more sophisticated, swift, and dangerous by the day — and billions of dollars spent to combat them — surprisingly few organizations have a grip on the problem. Only 20 percent of security professionals surveyed by Information Security Media Group (ISMG) rated their incident response program “very effective.” Nearly two-thirds struggle to detect APTs, limiting their ability to defend today’s most pernicious threats. In addition, more than 60 percent struggle with the speed of detection, and more than 40 percent struggle with the accuracy of detection. Those shortcomings give attackers more time to steal data and embed their malware deeper into targeted systems. For the latest threat intelligence reports, visit https://www.fireeye.com/current-threats/threat-intelligence-reports.html.

2013 Incident Response Survey

2013 Incident Response Survey

2013 Incident Response Survey

The Internal Signs of Compromise

The Internal Signs of Compromise

The Internal Signs of Compromise

The Board and Cyber Security

The Board and Cyber Security

The Board and Cyber Security

FireEye Cyber Defense Summit 2016 Now What - Before & After The Breach

FireEye Cyber Defense Summit 2016 Now What - Before & After The Breach

FireEye Cyber Defense Summit 2016 Now What - Before & After The Breach

Proatively Engaged: Questions Executives Should Ask Their Security Teams

Proatively Engaged: Questions Executives Should Ask Their Security Teams

Proatively Engaged: Questions Executives Should Ask Their Security Teams

Like water, cybercrime moves effortlessly around obstacles. Today, security-conscious enterprises and federal governments choose FireEye™ for industry-leading protection against advanced cybercrime and targeted attacks. FireEye stops advanced malware, zero-day and targeted APT attacks. FireEye’s appliances supplement traditional and next-generation firewalls, IPS, AV, and gateways, adding integrated multi-stage protection against today’s multi-vectored Web, email, and file-based threats.

FireEye Advanced Threat Protection - What You Need to Know

FireEye Advanced Threat Protection - What You Need to Know

FireEye Advanced Threat Protection - What You Need to Know

FireEye Advanced Threat Report

FireEye Advanced Threat Report

FireEye Advanced Threat Report

Mehr von FireEye, Inc. (15)

M-Trends 2015 : Les nouvelles du front

M-Trends 2015 : Les nouvelles du front

M-Trends 2015 : Les nouvelles du front

5 Reasons Cyber Attackers Target Small and Medium Businesses

5 Reasons Cyber Attackers Target Small and Medium Businesses

5 Reasons Cyber Attackers Target Small and Medium Businesses

Connected Cares: The Open Road For Hackers

Connected Cares: The Open Road For Hackers

Connected Cares: The Open Road For Hackers

M-Trends® 2012: An Evolving Threat

M-Trends® 2012: An Evolving Threat

M-Trends® 2012: An Evolving Threat

M-Trends® 2011: When Prevention Fails

M-Trends® 2011: When Prevention Fails

M-Trends® 2011: When Prevention Fails

M-Trends® 2010: The Advanced Persistent Threat

M-Trends® 2010: The Advanced Persistent Threat

M-Trends® 2010: The Advanced Persistent Threat

SANS 2013 Report: Digital Forensics and Incident Response Survey

SANS 2013 Report: Digital Forensics and Incident Response Survey

SANS 2013 Report: Digital Forensics and Incident Response Survey

SANS 2013 Report on Critical Security Controls Survey: Moving From Awareness ...

SANS 2013 Report on Critical Security Controls Survey: Moving From Awareness ...

SANS 2013 Report on Critical Security Controls Survey: Moving From Awareness ...

2013 Incident Response Survey

2013 Incident Response Survey

2013 Incident Response Survey

The Internal Signs of Compromise

The Internal Signs of Compromise

The Internal Signs of Compromise

The Board and Cyber Security

The Board and Cyber Security

The Board and Cyber Security

FireEye Cyber Defense Summit 2016 Now What - Before & After The Breach

FireEye Cyber Defense Summit 2016 Now What - Before & After The Breach

FireEye Cyber Defense Summit 2016 Now What - Before & After The Breach

Proatively Engaged: Questions Executives Should Ask Their Security Teams

Proatively Engaged: Questions Executives Should Ask Their Security Teams

Proatively Engaged: Questions Executives Should Ask Their Security Teams

FireEye Advanced Threat Protection - What You Need to Know

FireEye Advanced Threat Protection - What You Need to Know

FireEye Advanced Threat Protection - What You Need to Know

FireEye Advanced Threat Report

FireEye Advanced Threat Report

FireEye Advanced Threat Report

M-Trends 2015 セキュリティ最前線からの視点

1. 脅威レポート

2.

9. 7 傾向2：狙われる小売企業 4 U.S. Department of Homeland Security and U.S. Secret Service. “Backoff Malware: Infection Assessment.” August 2014.

11. 9

12. 10 • • •

17. 15 • • •

27.

29.