Empfohlen
Empfohlen
Weitere ähnliche Inhalte
Was ist angesagt?
Was ist angesagt? (20)
Ähnlich wie Cisco Connect 2018 Thailand - Changing the security equation demetris booth_cisco_no video
Ähnlich wie Cisco Connect 2018 Thailand - Changing the security equation demetris booth_cisco_no video (20)
Mehr von NetworkCollaborators
Mehr von NetworkCollaborators (20)
Kürzlich hochgeladen
Kürzlich hochgeladen (20)
Cisco Connect 2018 Thailand - Changing the security equation demetris booth_cisco_no video
- 2. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Changing The Security Equation Demetris Booth
- 3. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Evolution of security and the internet Don’t get into strangers’ cars Don’t meet people from the internet Don’t put your sensitive financial information on the internet Literally summon strangers from the internet to get into their car and have them bill your credit card
- 4. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Global security challenges People • Talent Crunch • High Demanded Expertise • Increased Costs Digital Disruption, Massive Scale • 50B Devices Connected by 2020 • $19T Opportunity Security Industry • Rapidly expanding number of security companies • Not interoperable • Not open Active Adversaries • Attack surface • Threat Actors • Attack Sophistication Dynamic Threat Landscape Changing Business Models Complexity and Fragmentation Shortage of Cybersecurity Experts
- 5. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Current situation and outlook ASEAN is a prime target for cyber attack... ... and the threat landscape is bound to escalate over time Rising Systemic Risk • Increasing trade and business linkages will make the region as strong as its weakest link Sustained under-investment • Diverging national priorities and different paces of digital evolution will lead to persistent under-investment Persistently porous cyber defenses • Caused by limited intelligence sharing, increasing vulnerability to Advanced Persistent Threats Larger attack surfaces leading to complexity in monitoring and response • Due to technology developments (IT/OT convergence, Multi-cloud, increased share of encrypted traffic) Policy preparedness and institutional oversight is extremely low • Lack of strategic mindset around policy and governance • Absence of a unifying framework • Significant under-investment Absence of a holistic approach by businesses • Cyber risk is seen as IT rather than business risk Nascent local cybersecurity industry together with limited buyer awareness • Fragmentation • Multi vendor/product landscape leading to operational complexity • Paucity of skilled talent Cybersecurity in ASEAN 1. Based on Market capitalization of Top 1000 listed companies across SEA in 2017 Source: A.T. Kearney interviews and analysis
- 6. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential ASEAN countries have emerged as launchpads for cyber attack either as vulnerable hotbeds or as trusted, well-connected hubs Blocked suspicious web activity by country of origin (expected ratio = 1.0) Chile Peru Panama Belize United States Canada Venezuela Italy France Germany Ukraine Turkey Romania Russia China Malaysia Australia Indonesia Vietnam • Malaysia and Indonesia are global hotspots for major blocked suspicious web activities—up to 3.5 times the standard ratio • Vietnam is amongst the top 5 countries from which attacks on IoT devices originated Source: A.T. Kearney research report
- 7. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential National Strategy development Legislation Governance and operational entities International cooperation Awareness Capacity building Sector – specific focus Singapore Malaysia Philippines Thailand Indonesia Vietnam Rest of ASEAN Absent Initiated / Proposed Established & Operational Level of policy preparedness across ASEAN remains low across most countries, with lack of a unifying framework Only Singapore and Malaysia have operational National strategies Progress on legislation and governance remains fairly slow Source: A.T. Kearney, Interviews, Press clippings Most regional efforts focused on Capacity Building
- 8. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Identify Identify End Point Network Content Cloud Analytics IOT SIEM Managed & Professional Security Services Protect Defect Respond Recover Product Design & Development Services Vendor positioning across the security value chain Product/Product Implementation &/or Monitoring Services Technology Capability Specialist Holistic Solutions Provider Regional System Integrators & Managed Service Providers Consulting & Services Providers Product & Technology of others Product & Technology of others Focused on limited set of products they supply Fragmented vendor landscape with few holistic providers … Large number of localized MSS providers with limited regional mobility Source: Industry interviews, A.T.Kearney analysis …and several hundred small niche players Rely on others Large number of product specialists with varied capabilities Very few holistic solutions providers, perpetuating “best of breed as an industry practice” Emerging regional systems integrators facing challenges in expanding across the value chain.
- 9. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Urgent call to action across ASEAN Source: A.T. Kearney analysis Secure sustained regional commitment for cybersecurity • Pursue a commitment to address the regional cybersecurity spending gap • Define and track impact-oriented cybersecurity metrics through a cyber- hygiene dashboard Elevate cybersecurity on the regional policy agenda • Concerted coordination to steer the implementation of an Rapid Action Cybersecurity (RAC) Framework • Elevate cybersecurity to the top of the agenda in economic dialogue (i.e. Establish regional co-ordination platform, multilateral agreement to have “cybersafe” trading partners) Build the next wave of cybersecurity capability • Develop the next generation of security professionals • Strengthen the local cybersecurity industry through deeper cooperation and collaboration with global players • Drive R&D around emerging threat vectors (AI, etc.) • Implement an active defense mindset in corporate sector • Instill a culture around sharing threat intelligence • Extend cyber resilience across the supply chain (i.e. to business partners, etc.) • Implement Regional PPP and encourage Industry alliances Fortify the Ecosystem
- 10. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Changing the equation People Policy & Process Technology • Networking Academy 20 years • 7.8 million students across 180 countries • 1.26 million students in Asia Pacific & Japan • 90,000 security students trained globally in FY17 & 10,000 students in Asia Pacific & Japan • Security & Trust Organization • Engages world governments to help shape national cybersecurity policy agenda • INTERPOL collaboration to share threat intelligence & best practices • Integrated architectural approach • New era of networking & security is foundational • Security enables digital transformation
- 11. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Cisco’s Security architecture – security that works together Threat Intelligence – Services Endpoint CloudNetwork 4.6 Hours Reduced Time To Detection | On Average 184 Days To Detect A Breach In ASEAN
- 12. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Security capabilities integrated throughout the network Digital Network Architecture Network visibility Network Segmentation 360° visibility Real-time analysis of data and traffic to provide visibility and intelligence across the network Dynamic control Software-defined segmentation for effective and consistent policy application Comprehensive automation Integrated solutions that augment your capabilities and reduce manual processes
- 13. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Malicious binaries and encryption Increase November 2016 Attackers embrace encryption to conceal command-and-control activity 19% 12% Increase 268%70% 50% 38% Global Encrypted Web Traffic Malicious Sandbox Binaries with Encryption October 2017
- 14. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential The Cisco network with Encrypted Traffic Analytics Known malware traffic Known benign traffic Extract observable features in the data Employ machine learning techniques to build detectors Malware detected in Encrypted Traffic
- 15. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Deep Visibility Context Control Malware will get in. You must prevent what you can, but you can never prevent 100% of attacks. So what’s needed to protect against threats that get in? Securing the endpoint PC MobileLinux Mac on the endpoint
- 16. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential AMP for Endpoints Prevent Prevent attacks and block malware in real time Detect Continuously monitor to reduce time to detection Respond Accelerate investigations and remediate faster and more effectively
- 17. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential SEE Once Threat Endpoint security in action 17 AMP Cloud1 Threat Grid2 Security Intelligence Endpoint AMP for Endpoint Enforce Everywhere 3 Endpoint CloudNetwork
- 18. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Cisco AMP for Endpoints Excels in ‘The Evolving Effectiveness of Endpoint Protection Solutions’ Report AMP for Endpoints named a Leader Cisco named a Visionary for AMP for Endpoints Gartner 2018 Magic Quadrant for Endpoint Protection Platforms Gartner evaluated 12 endpoint security products, including Cisco AMP for Endpoints IDC Marketscape: Worldwide Endpoint Specialized Threat Analysis and Protection 2017 Vendor Assessment
- 19. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential It’s a multicloud world
- 20. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Modern data centers are incredibly complex
- 21. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Securing the data center
- 22. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 22 Security everywhere architecture W W W 22
- 23. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential PROTECTING YOUR NETWORK
- 24. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Deeper data + more context = better security We analyze massive amounts of data — 19.7 billion threats blocked daily Our real-time datasets are diverse, global, and live 600 Billion Email samples 16 Billion Web requests 3.4 Billion AMP queries 160 Countries worldwide 100 Billion Internet requests 12,000 Enterprise customers 80 Million Daily active users
- 25. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Why Cisco Security 5K People Strong #1 Cisco Priority Threat Researchers 250 Invested Billions Sourcefire Lancope Neohapsis OpenDNS ThreatGRID Cognitive Portcullis CloudLock Faster Finding Breaches 100x Ongoing Innovation Best of breed portfolio Integrated Threats Blocked Daily 19.7B Fortune 100 use Cisco Security 88% Security Effectiveness 99%