Cisco Cybersecurity #10YearChallenge
1 like217 views
The document discusses cybersecurity and Cisco's threat intelligence and security solutions. It provides information about Cisco's Talos threat intelligence group, including that it analyzes over 1.5 million malware samples daily. It also summarizes Cisco's security portfolio, including the Cisco Umbrella cloud security solution, Cisco Stealthwatch for network visibility and threat detection, and Cisco Cloud Email Security for protection against email threats.
Cisco Cybersecurity #10YearChallenge
- 1. Financial Security Summit Percy Camus Cisco Systems Perú Cybersecurity Sales Specialist pecamus@cisco.com
- 2. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential CyberSecurity #10YearChallenge
- 3. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
- 4. Malware Client applications Operating systems Mobile Devices VOIP phones Routers & switches Printers C & C Servers Network Servers Cisco Firepower NGFW Users File transfers Web applications Application protocols Typical NGFW Mayor visibilidad, mejor protección Se necesita mayor visibilidad contextual Threats Typical IPS
- 5. Cisco TALOS – Grupo Inteligencia de Amenazas 00I00 I00I0I II0I0I 0II0I I0I00I0I0 0II0I0II 0I00I0I I0 00 II0III0I 0II0II0I II00I0I0 0I00I0I00 I0I0 I0I0 I00I0I00 III00II 0II00II I0I0II0II0 I0 I0 I00 00I0 I000 0II0 00 III00II I000I0I I000I0I I000I0I II 0I00 I0I000 0II0 00 00I I0I0I0 I0I0III000 I0I00I0I 0II0I0 I00I0I0I0I 000 II0II0I0I0I I0I0I0I 0I0I0I0I 0I0I00I0 I0I0I0I 0II0I0I0I 0II00 I00I0I0 0I00I0I I00I0I0 I0I0I0I 0I0I0I 0I0I0I0 00I0I0 0I0I0I0 I0I0I00I 0I0I 0I0I 0I0I I0I0I 0I00I0I III00II 0II00II I0I000 0II0 00I0I00 I0 I000I0I 0II 0I0I0I III00II 0II00II 0I0I0I0I 0I I0 I00 000II0 I0I0 0II0 00 24 – 7 – 365 Operations 100 TB Of Data Received Daily 1.5 MILLION Daily Malware Samples 600 BILLION Daily Email Messages 16 BILLION Daily Web Requests MILLIONS Of Telemetry Agents 4 Global Data Centers Over 100 Threat Intelligence Partners 250+ Full Time Threat Intel Researchers Deploy the world's largest traffic monitoring network Leverage industry-leading threat analytics
- 6. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Vida social Vida virtual
- 7. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Cambio tecnológico Cambio agresivo
- 8. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Enfocada en Infraestructura Enfocada en el usuario
- 9. © 2019 Cisco and/or affiliates. All rights reserved. | CONFIDENTIAL INFORMATION PROPERTY OF DUO SECURITY, INC. Tres puntos claves que deben hacer Verificar el usuario Verificar el dispositivo Control de acceso 1 2 3 Adaptive Multi Factor Authentication (MFA) Algo que tienes (pej. celular) Algo que conoces (pej. password) Algo que tú eres (pej. biometría) © Cisco and/or affiliates. All rights reserved. | CONFIDENTIAL INFORMATION PROPERTY OF DUO SECURITY, INC.
- 10. © 2019 Cisco and/or affiliates. All rights reserved. | CONFIDENTIAL INFORMATION PROPERTY OF DUO SECURITY, INC. REST APIS WEB SDK RADIUS SAML OIDC CustomVPN RA SSO RRAS Multicloud Email/MSFT On-Prem Empieza aquí Luego extiende a Duo MFA soporta tus aplicaciones de trabajo
- 11. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Empresas grandes Empresas pequeñas
- 12. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Seguridad perimetral FW | AV| Routers Movilidad, IoT, SSL Encryption
- 13. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Encrypted Traffic Analytics Nuestra solución es la única que provee visibilidad y detección de malware sin desencriptar Criptografía complianceMalware en tráfico cifrado
- 14. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Network Sensors NetFlow Alert data Enhanced NetFlow Crypto Audit Telemetry Global-to-local knowledge correlation results in higher precision of threat findings Stealthwatch enhanced analytics and machine learning reduces threat investigation time Enhanced NetFlow with encrypted traffic analytics from Cisco’s newest switches and routers Flow Collector(s) NetFlow + proxy telemetry The Stealthwatch Management Console provides aggregated, Cognitive Analytics enhanced malware detection Encrypted Traffic Analytics cognitive.cisco.com Cognitive Analytics
- 15. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Cryptographic Compliance & Auditing
- 16. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Perfil de tráfico 2009 Perfil de tráfico 2019 87% del tráfico de correo era SPAM 39% del tráfico de correo es SPAM
- 17. Segue 2 Cisco Cloud Email Security (CES) Nuestros clientes indican que una solución de seguridad de correo debe incluir: (https://www.cisco.com/c/dam/en/us/products/se/2018/11/Collateral/esg-info-email-security.pdf) 72% 70% 68% 68% 64% 60% Malware Protection Data Encryption Phishing Protection Email authentication Continuous monitoring Threat intelligence Las amenazas de correo electrónico cuestan a las organizaciones tiempo y dinero. Las organizaciones necesitan una cobertura completa y deben evaluar si sus proveedores de correo electrónico SaaS los han dejado expuestos.
- 18. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2009 2019 Vulnerabilidad Exploit: Conflicker Vulnerabilidad Exploit: Wannacry
- 19. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2009 2019 Robo de bancos Cryptomining
- 20. Cisco Umbrella Malware C2 Callbacks Phishing Cryptomining HQ Sandbox NGFW Proxy Netflow AV AV Sucursal Router/UTM AV AV ROAMING AV 1era Línea Beneficios Bloquea el malware antes que toque la empresa Contiene el malware en caso que ya esté adentro Internet más rápido Provisionamiento en minutos
- 21. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2009 2019 Impacto $ Impacto $$$
- 22. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential 2019 Impacto 60% 85% 1M Ataques son inevitables Visibilidad tardía Crecimiento superficie de ataque 1 Cisco Digital Business Infographic Story 2 2016 Verizon Data Breach Investigations Report and Forrester research 3 Gartner de los servicios digitales sufrirán afectación de disponibilidad debido a la falta de manejo de riesgo y respuesta3 De los incidentes no serán detectados en semanas o más Nuevos dispositivos por hora en 2020
- 23. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential Colaboradores móviles con múltiples dispositivos Pédida de visibilidad Una Nueva Era de Digitalización… Trae una Nueva Era de retos de Seguridad Más dispositivos IoT conectados cada día Crece superficie de ataque Workloads moviéndose al Cloud Pérdida de control Amenazas persistentes Gran probabilidad de brecha
- 24. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Potenciar la Red para proveer Visibilidad, Segmentación y protección contra Amenazas Visibilidad “Ver todo” Segmentación “Reducir la superficie de ataque” Threat Protection “Detener la brecha”
- 25. GRACIAS