Access Management Email Security internet security mobile device security

1. AGENDA
1 Information Security
2 Access management
3
Internet / Email Security
4
Mobile Device Security

2. Username and password theft results
in $800,000 loss in two days
Cyber criminals used a compromised PC to rob more than $800,000 from Hillary
Machinery, according to the Dallas Morning News. From the username and
password, criminals accessed the corporateaccount at Plains Capital Bank in Plano, Texas.
The bank had a twofactor authentication process using hard-coded IP addresses. Cyber
criminals spoofed the IP address on the desktop, defeating the security measures and
transferring $800,000 over a two-day period.

4. Threats to Internet / Email Security

5. World-Wide Attack Trends
900M
Network Intrusion Attempts
150,000
800M
Infection Attempts
Blended Threats
(CodeRed, Nimda, Slammer)
700M 125,000
600M Denial of Service
(Yahoo!, eBay) 100,000
500M
Malicious Code 75,000
400M Mass Mailer Viruses
(Love Letter/Melissa) Infection
300M Attempts*
50,000
Zombies
Network
200M
Polymorphic Viruses Intrusion 25,000
100M (Tequila) Attempts**
0 0
1996 1997 1998 1999 2000 2001 2002 2003
*Analysis by Symantec Security Response using data from Symantec, IDC & ICSA; 2003 estimated **Source: CERT

6. Spam Continues to Grow and
Evolve

7. The Bullet is Fired
Code Red doubled its infection rate every
37 minutes. Slammer doubled every 8.5 seconds, and infected 90%
of unprotected servers in 10 minutes!
Exploits now appearing just 5 days after the
vulnerability is publicly disclosed!
At its peak, 1 out of every 12 emails was infected with
MyDoom!

8. Growth and Impact of Email Fraud
Cost Description Source
$60 Cost of Identity Theft in last 5 years in US FTC
Billion
600 Individual time spent recovering from Identity Identity Theft
hours Theft Resource
Center
3.4% US Population fallen victim to Identity Theft Gartner
In Canada, 13,000 cases of Identify Theft Computer
reported World Canada
3% Estimated number of people reporting fraud to FTC
FTC
3.5 Number of FDIC fraud messages caught by Symantec
million Brightmail in one week in January 2004

9. .
48% of Companies Faced Social Engineering Attacks Claims Survey
Social engineering attacks are on the rise and large companies are incurring huge
losses due to them, a new report has revealed.
According to a report commissioned by Check Point Software Technologies, 48
percent of large companies have been targeted with more than 25 successful
social engineering attacks in the past two years.
The report, which surveyed 850 IT and security professionals with companies in
North America, Europe, Australia, and New Zealand, also revealed that for each
social engineering attack, companies incurred losses between $25,000 and
$100,000

10. Mobile Hacking Nearly Doubled In 2011
The figures come from data collected by Symantec, which reported blocking more
than 5.5 billion malicious attacks in 2011, up 81% increase from 2010, while the
number of Web attacks blocked per day increased by 36% percent.
In addition, the number of unique malware variants Symantec tracked increased to
403 million.
The study also noted that approximately 1.1 million identities were stolen per data
breach on average in 2011, a dramatic increase over the amount seen in any other
year.