How to Counter Cybersecurity Attacks - Trust No One

©2017 AKAMAI | FASTER FORWARDTM
The Akamai Platform and 
How To Counter Attacks
Henrik Eriksson 
Service Line Manager  
Akamai

NO ONE IS SAFE

CYBER CRIMEPOLITICAL 
HACKTIVISM
GLORY HOUNDS STATE-
SPONSORED
Today’s Expanding Threat Landscape:
Who & Why

PHISHING
Today’s Expanding Threat Landscape:
How
IoT ATTACKSVULNERABILITIES

Grow revenue opportunities with fast, personalized
web experiences and manage complexity from peak
demand, mobile devices and data collection.
!6
TRUST NO ONE
DDoS // BOTS // ZERO TRUST // IDENTITY

!7
An attack of just 
1.3 Tbps is enough
to cripple entire
countries
Just imagine  
what 1000 Tbps
could do…
The scale of attacks will continue to grow
20152013 2017 20232021
100 Gbps
1 Tbps
10 Tbps
100 Tbps
1000 Tbps
2019
We’re seeing  
> 1 Tbps today

Attackers are exploiting the imbalance in core capacity  
(and billions of insecure IoT devices)
Cloud  
Data Centers

Akamai provides a defensive shield to absorb attack traffic…
and block application-layer attacks
KONA
KONA
KONA
KONA
KONA
KONA
KONA
KONA
KONA
KONA
KONA
KONA

!10
TRUST NO ONE

Bots are  
taking over

search engine
bots, SEO  
bots, ad bots
performance bots,
vulnerability
scanner bots 
partner bots
aggregator bots,  
media bots
hacker botsgray  
marketer  
bots
scraper botsspam bots
The Bot LandscapeGood Bad
respond  
fast
prioritize
services  
you use
deprioritize  
& monitor
deprioritize
serve
alternate
content
block serve
alternate
content
reply
‘invalid ID’

Powerful insight into
neuromuscular actions
Adaptive response  
based on bot behavior
Uses machine-learning to  
protect against evolving bots
Proven ability to stop credential abuse
Akamai Bot Manager

Customer Success with Bot Manager
MAJOR ASIAN  
AIRLINE
Eliminated bad bot activity
responsible for >80%  
of trafﬁc, generating
massive cost savings.
MAJOR NORTH AMERICAN
RETAILER
Defended against a 700-850k
TPM (transactions per minute)
attack from scraper bots  
trying to capitalize on a  
limited availability item.
MAJOR NORTH AMERICAN
FINANCIAL INSTITUTION
Emergency integration while  
the customer was under attack.
Blocked a Credential Stuffing
campaign of 2.5 million requests
over 24 hours from >10K IPs.
TOP 10 GLOBAL  
FINANCIAL INSTITUTION
Reduced fraud from account
hacking by 50X. Direct losses
dropped from nearly $100K per
day to just $1-2K per day.

!15
TRUST NO ONE

>50%OF BREACHES ARE TRIGGERED FROM INSIDE

“The idea of a corporate  
perimeter becomes quaint,  
even dangerous.”
YOUR ENTERPRISE
DATA
APPS
EMPLOYEES BADACTOR
PERIMETER  
(VPN, SECURE WEB GATEWAY, ETC.)
CONTRACTOR
x
Traditionally, you protect your internal apps with a perimeter defense

YOUR ENTERPRISE
DATA
APPS
EMPLOYEES BADACTOR
PERIMETER  
(VPN, SECURE WEB GATEWAY, ETC.)
CONTRACTOR
Today, you need to protect your internal apps  
just as if they were external
APP
YOUR EXTERNAL APPS
You protect your external
apps with multiple layers  
of defense (e.g. Kona)
Authentication
Web App Firewall
DDoS Protection
Bot Protection
And More…
x

Enable MFA & SSO across  
on-prem, IaaS & SaaS apps
Provide clientless,  
app-specific access
Secure access to all enterprise apps
Akamai for Zero Trust
Eliminate the need for  
a corporate network
Full protection for  
internal apps

CUSTOMER SUCCESS: 
MAJOR AIRLINE
Internal attacks that
Akamai blocked in
first week
SQL 
Injection36 Cross Site
Scripting33 Command
Injection19 PHP  
Injection3

Leveraging DNS intelligence to detect
malware and suspicious activity
Enterprise  
Threat Protector
Real-time intelligence based  
on delivering 1.7 trillion DNS  
queries per day
Enforce compliance and  
your acceptable use policy  
quickly and uniformly
Protect your workforce  
and your data without  
complexity or hardware

CUSTOMER SUCCESS: 
LUXURY ITALIAN  
FASHION BRAND
Akamai Enterprise Threat Protector identified Bedep
malware in the AC system trying to exfiltrate data

!23
TRUST NO ONE

Regulation
&
Compliance
Customer Identity
&
Access Management
Digital Services
&
Transformation
Omnichannel,
IoT, KYC &
Personalisation
The challenges
with identity

Secure your
customer identities  
& protect against  
identity fraud
CIAM consists of three key  
functions delivered as a service:
Optimize user
experience  
& marketing  
efforts
CIAM increases the
user’s security and
privacy, while improving
end user engagement
and brand loyalty
Manage  
your online
customer
identities
What is CIAM?

!26
TRUST NO ONE

!27
TRUST NO ONE
PEOPLE

!28
Security Operations Center
• Human intelligence to respond to evolving threats
• Monitor effectiveness of attack mitigation
• Customer communication and coordination
• Global 24x7x365 coverage
Managed Security Services
• Ongoing evaluation of application security
posture
• WAF rule analysis and customization
• Real-time analysis of attack vectors and
multi-dimensional security threats

Cambridge
Ft. Lauderdale
Krakow
Bangalore
Tokyo
24x365
Security Operations
Centers monitoring &
mitigating attacks
5
Global locations 
with hundreds of 
security experts
200+
Security certifications
including: CISSP, GSEC, GIAC, 
CISA, CEH, GWAPT, 
GPEN and MSIS
Akamai  
Global
SOCC

demand, mobile devices and data collection.Thank you.

How to Counter Cybersecurity Attacks - Trust No One

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (20)

Ähnlich wie How to Counter Cybersecurity Attacks - Trust No One

Ähnlich wie How to Counter Cybersecurity Attacks - Trust No One (20)

Mehr von Elisabeth Bitsch-Christensen

Mehr von Elisabeth Bitsch-Christensen (15)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

How to Counter Cybersecurity Attacks - Trust No One