Flying spiders, snakes, and ghosts are long gone. The software we use every day is being turned against us, and it’s now the stuff of nightmares. Known good processes are being hijacked to deliver malware on our systems and ransomware has become one of the most widespread and damaging threats internet users now face. What’s more, these threats are evading traditional defences. Sleep better at night. Join Sophos pro, Paul Biant as he shows us how Sophos’s Intercept X, EXP and Phish Threat technology can work together to prevent modern cyber-attacks, including crypto ransomware.

1. Protect Your Business
Against Ransomware
May 2017
Lars Putteneers
Sales Engineer

2. Endpoint Security
has reached a
Tipping Point
• Attacks are from
within the perimeter,
focused on Software
Exploits
• Ransomware reaches
$1.2B in damages
• Lack of Threat
Intelligence after a
Breach

3. Driving the Paradigm Shift to Next-Generation
3
ADVANCED
MALWARE
ZERO DAY
EXPLOITS
LIMITED
VISIBILITY

4. TRADITIONAL MALWARE ADVANCED THREATS
The Evolution of Sophos Endpoint Security
From Anti-Malware to Anti-Exploit to Next-Generation
Exposure
Prevention
URL Blocking
Web Scripts
Download Rep
Pre-Exec
Analytics
Generic Matching
Heuristics
Core Rules
File
Scanning
Signatures
Known Malware
Malware Bits
Run-Time
Signatureless
Behavior Analytics
Runtime Behavior
Exploit
Detection
Technique
Identification

5. EXECUTABLE
FILES
MALICIOUS
URLS
UNAUTHORIZED
APPS
REMOVABLE
MEDIA
EXPLOIT
PREVENTION
MS FILES
& PDF
!
ADVANCED
CLEAN
RANSOMWARE
PREVENTION
INCIDENT
RESPONSE
DETECT RESPONDPREVENTBEFORE IT REACHES DEVICE BEFORE IT RUNS ON DEVICE
NEXT GENERATION ENDPOINT
90% OF DATA BREACHES ARE
FROM EXPLOITS KITS
>90% OF EXPLOIT ATTEMPTS USE
KNOWN VULNERABILITIES
AND YET…
MORE THAN 60% OF IT STAFF
LACK INCIDENT RESPONSE SKILLS

7. Introducing Sophos Intercept X
ADVANCED
MALWARE
ZERO DAY
EXPLOITS
LIMITED
VISIBILITY
Anti-Exploit
Prevent Exploit Techniques
• Signatureless Exploit Prevention
• Protects Patient-Zero / Zero-Day
• Blocks Memory-Resident Attacks
• Tiny Footprint & Low False Positives
No User/Performance Impact
No File Scanning
No Signatures
Automated Incident Response
• IT Friendly Incident Response
• Process Threat Chain Visualization
• Prescriptive Remediation Guidance
• Advanced Malware Clean
Root-Cause Analysis
Faster Incident Response
Root-Cause Visualization
Forensic Strength Clean
Detect Next-Gen Threats
• Stops Malicious Encryption
• Behavior Based Conviction
• Automatically Reverts Affected Files
• Identifies source of Attack
Anti-Ransomware
Prevent Ransomware Attacks
Roll-Back Changes
Attack Chain Analysis

8. DEMO

30. Sophos Intercept X
ADVANCED
MALWARE
ZERO DAY
EXPLOITS
LIMITED
VISIBILITY
Anti-Exploit
Prevent Exploit Techniques
• Signatureless Exploit Prevention
• Protects Patient-Zero / Zero-Day
• Blocks Memory-Resident Attacks
• Tiny Footprint & Low False Positives
No User/Performance Impact
No File Scanning
No Signatures
Automated Incident Response
• IT Friendly Incident Response
• Process Threat Chain Visualization
• Prescriptive Remediation Guidance
• Advanced Malware Clean
Root-Cause Analysis
Faster Incident Response
Root-Cause Visualization
Forensic Strength Clean
Detect Next-Gen Threats
• Stops Malicious Encryption
• Behavior Based Conviction
• Automatically Reverts Affected Files
• Identifies source of Attack
Anti-Ransomware
Prevent Ransomware Attacks
Roll-Back Changes
Attack Chain Analysis

31. Deployment Options
31
Sophos Endpoint Protection
(Central managed, standard or advanced)
Antivirus and endpoint
solutions from other
vendors
SOPHOS INTERCEPT X

32. Deployment Options
32
Sophos Enterprise Console
(SEC)
Protection Features Only
Anti-Exploit
CryptoGuard
Anti-Ransomware
Clean
SOPHOS ENDPOINT EXPLOIT PREVENTION
(EXP)

33. Deployment Options
33
Sophos Central Server Protection
Advanced
Protection Features Only
• Anti-Ransomware (CryptoGuard )
SOPHOS CRYPTOGUARD FOR SERVER

34. Taking Your Endpoints To The Next-Generation
34
ADVANCED
MALWARE
ZERO DAY
EXPLOITS
LIMITED
VISIBILITY

36. 36
Start Trial Now: www.sophos.com/intercept-x
Lars.putteneers@sophos.com