How to Counter Cybersecurity Attacks - Trust No One
1 like127 views
The document discusses Akamai's platform in countering cyber attacks, emphasizing the need for security against DDoS, bot attacks, and the importance of a zero trust approach for both internal and external applications. It presents case studies highlighting successful deflection of major security threats, malware identification, and customer success in managing bot traffic and credential abuse. The content underscores the evolving threat landscape and the necessity of advanced security measures to protect customer identities and ensure compliance.
How to Counter Cybersecurity Attacks - Trust No One
- 1. ©2017 AKAMAI | FASTER FORWARDTM The Akamai Platform and How To Counter Attacks Henrik Eriksson Service Line Manager Akamai
- 2. ©2017 AKAMAI | FASTER FORWARDTM
- 3. ©2017 AKAMAI | FASTER FORWARDTM NO ONE IS SAFE
- 4. ©2017 AKAMAI | FASTER FORWARDTM CYBER CRIMEPOLITICAL HACKTIVISM GLORY HOUNDS STATE- SPONSORED Today’s Expanding Threat Landscape: Who & Why
- 5. ©2017 AKAMAI | FASTER FORWARDTM PHISHING Today’s Expanding Threat Landscape: How IoT ATTACKSVULNERABILITIES
- 6. ©2017 AKAMAI | FASTER FORWARDTM Grow revenue opportunities with fast, personalized web experiences and manage complexity from peak demand, mobile devices and data collection. !6 TRUST NO ONE DDoS // BOTS // ZERO TRUST // IDENTITY
- 7. ©2017 AKAMAI | FASTER FORWARDTM Grow revenue opportunities with fast, personalized web experiences and manage complexity from peak demand, mobile devices and data collection. !7 An attack of just 1.3 Tbps is enough to cripple entire countries Just imagine what 1000 Tbps could do… The scale of attacks will continue to grow 20152013 2017 20232021 100 Gbps 1 Tbps 10 Tbps 100 Tbps 1000 Tbps 2019 We’re seeing > 1 Tbps today
- 8. ©2017 AKAMAI | FASTER FORWARDTM Grow revenue opportunities with fast, personalized web experiences and manage complexity from peak demand, mobile devices and data collection. Attackers are exploiting the imbalance in core capacity (and billions of insecure IoT devices) Cloud Data Centers
- 9. ©2017 AKAMAI | FASTER FORWARDTM Grow revenue opportunities with fast, personalized web experiences and manage complexity from peak demand, mobile devices and data collection. Akamai provides a defensive shield to absorb attack traffic… and block application-layer attacks KONA KONA KONA KONA KONA KONA KONA KONA KONA KONA KONA KONA
- 10. ©2017 AKAMAI | FASTER FORWARDTM Grow revenue opportunities with fast, personalized web experiences and manage complexity from peak demand, mobile devices and data collection. !10 TRUST NO ONE DDoS // BOTS // ZERO TRUST // IDENTITY
- 11. ©2017 AKAMAI | FASTER FORWARDTM Bots are taking over
- 12. ©2017 AKAMAI | FASTER FORWARDTM search engine bots, SEO bots, ad bots performance bots, vulnerability scanner bots partner bots aggregator bots, media bots hacker botsgray marketer bots scraper botsspam bots The Bot LandscapeGood Bad respond fast prioritize services you use deprioritize & monitor deprioritize serve alternate content block serve alternate content reply ‘invalid ID’
- 13. ©2017 AKAMAI | FASTER FORWARDTM Grow revenue opportunities with fast, personalized web experiences and manage complexity from peak demand, mobile devices and data collection. Powerful insight into neuromuscular actions Adaptive response based on bot behavior Uses machine-learning to protect against evolving bots Proven ability to stop credential abuse Akamai Bot Manager
- 14. ©2017 AKAMAI | FASTER FORWARDTM Customer Success with Bot Manager MAJOR ASIAN AIRLINE Eliminated bad bot activity responsible for >80% of traffic, generating massive cost savings. MAJOR NORTH AMERICAN RETAILER Defended against a 700-850k TPM (transactions per minute) attack from scraper bots trying to capitalize on a limited availability item. MAJOR NORTH AMERICAN FINANCIAL INSTITUTION Emergency integration while the customer was under attack. Blocked a Credential Stuffing campaign of 2.5 million requests over 24 hours from >10K IPs. TOP 10 GLOBAL FINANCIAL INSTITUTION Reduced fraud from account hacking by 50X. Direct losses dropped from nearly $100K per day to just $1-2K per day.
- 15. ©2017 AKAMAI | FASTER FORWARDTM Grow revenue opportunities with fast, personalized web experiences and manage complexity from peak demand, mobile devices and data collection. !15 TRUST NO ONE DDoS // BOTS // ZERO TRUST // IDENTITY
- 16. ©2017 AKAMAI | FASTER FORWARDTM Grow revenue opportunities with fast, personalized web experiences and manage complexity from peak demand, mobile devices and data collection. >50%OF BREACHES ARE TRIGGERED FROM INSIDE
- 17. ©2017 AKAMAI | FASTER FORWARDTM Grow revenue opportunities with fast, personalized web experiences and manage complexity from peak demand, mobile devices and data collection. “The idea of a corporate perimeter becomes quaint, even dangerous.” YOUR ENTERPRISE DATA APPS EMPLOYEES BADACTOR PERIMETER (VPN, SECURE WEB GATEWAY, ETC.) CONTRACTOR x Traditionally, you protect your internal apps with a perimeter defense
- 18. ©2017 AKAMAI | FASTER FORWARDTM Grow revenue opportunities with fast, personalized web experiences and manage complexity from peak demand, mobile devices and data collection. YOUR ENTERPRISE DATA APPS EMPLOYEES BADACTOR PERIMETER (VPN, SECURE WEB GATEWAY, ETC.) CONTRACTOR Today, you need to protect your internal apps just as if they were external APP YOUR EXTERNAL APPS You protect your external apps with multiple layers of defense (e.g. Kona) Authentication Web App Firewall DDoS Protection Bot Protection And More… x
- 19. ©2017 AKAMAI | FASTER FORWARDTM Grow revenue opportunities with fast, personalized web experiences and manage complexity from peak demand, mobile devices and data collection. Enable MFA & SSO across on-prem, IaaS & SaaS apps Provide clientless, app-specific access Secure access to all enterprise apps Akamai for Zero Trust Eliminate the need for a corporate network Full protection for internal apps
- 20. ©2017 AKAMAI | FASTER FORWARDTM CUSTOMER SUCCESS: MAJOR AIRLINE Internal attacks that Akamai blocked in first week SQL Injection36 Cross Site Scripting33 Command Injection19 PHP Injection3
- 21. ©2017 AKAMAI | FASTER FORWARDTM Grow revenue opportunities with fast, personalized web experiences and manage complexity from peak demand, mobile devices and data collection. Leveraging DNS intelligence to detect malware and suspicious activity Enterprise Threat Protector Real-time intelligence based on delivering 1.7 trillion DNS queries per day Enforce compliance and your acceptable use policy quickly and uniformly Protect your workforce and your data without complexity or hardware
- 22. ©2017 AKAMAI | FASTER FORWARDTM CUSTOMER SUCCESS: LUXURY ITALIAN FASHION BRAND Akamai Enterprise Threat Protector identified Bedep malware in the AC system trying to exfiltrate data
- 23. ©2017 AKAMAI | FASTER FORWARDTM Grow revenue opportunities with fast, personalized web experiences and manage complexity from peak demand, mobile devices and data collection. !23 TRUST NO ONE DDoS // BOTS // ZERO TRUST // IDENTITY
- 24. ©2017 AKAMAI | FASTER FORWARDTM Regulation & Compliance Customer Identity & Access Management Digital Services & Transformation Omnichannel, IoT, KYC & Personalisation The challenges with identity
- 25. ©2017 AKAMAI | FASTER FORWARDTM Secure your customer identities & protect against identity fraud CIAM consists of three key functions delivered as a service: Optimize user experience & marketing efforts CIAM increases the user’s security and privacy, while improving end user engagement and brand loyalty Manage your online customer identities What is CIAM?
- 26. ©2017 AKAMAI | FASTER FORWARDTM Grow revenue opportunities with fast, personalized web experiences and manage complexity from peak demand, mobile devices and data collection. !26 TRUST NO ONE DDoS // BOTS // ZERO TRUST // IDENTITY
- 27. ©2017 AKAMAI | FASTER FORWARDTM Grow revenue opportunities with fast, personalized web experiences and manage complexity from peak demand, mobile devices and data collection. !27 TRUST NO ONE PEOPLE
- 28. ©2017 AKAMAI | FASTER FORWARDTM Grow revenue opportunities with fast, personalized web experiences and manage complexity from peak demand, mobile devices and data collection. !28 Security Operations Center • Human intelligence to respond to evolving threats • Monitor effectiveness of attack mitigation • Customer communication and coordination • Global 24x7x365 coverage Managed Security Services • Ongoing evaluation of application security posture • WAF rule analysis and customization • Real-time analysis of attack vectors and multi-dimensional security threats
- 29. ©2017 AKAMAI | FASTER FORWARDTM Grow revenue opportunities with fast, personalized web experiences and manage complexity from peak demand, mobile devices and data collection. Cambridge Ft. Lauderdale Krakow Bangalore Tokyo 24x365 Security Operations Centers monitoring & mitigating attacks 5 Global locations with hundreds of security experts 200+ Security certifications including: CISSP, GSEC, GIAC, CISA, CEH, GWAPT, GPEN and MSIS Akamai Global SOCC
- 30. ©2017 AKAMAI | FASTER FORWARDTM
- 31. ©2017 AKAMAI | FASTER FORWARDTM Grow revenue opportunities with fast, personalized web experiences and manage complexity from peak demand, mobile devices and data collection.Thank you.