barracuda backup v6 - system source · why barracuda backup: ... • cloud-based tool integrated...

63
Welcome Racing & Ransomware!

Upload: others

Post on 19-Apr-2020

10 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Welcome

Racing & Ransomware!

Page 2: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting
Page 3: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

System Source & Barracuda:

Barracuda Partner since 2013

Why Barracuda Backup:

Combines onsite & cloud backup

Comprehensive, cost-effective local & offsite backups

DR solutions

Deduplication and compression

Easy deployment and administration

Small, Mid-size and Larger organizations

Page 4: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Ransomware and Advanced ThreatsAvoid Falling Victim to These Cyber Threats

Tony Foxen, Channel Manager, Mid-Atlantic & Virginia

Page 5: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

In The News…

Page 6: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Everywhere…

1 5 8

27

60

125

0

25

50

75

100

125

150

2012 2013 2014 2015 2016 2017

Variants

Cre

ate

d

Source: SC Media, Ransomware Attack Study, 2017

Page 7: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Indiscriminate

Of ALL organizations were infectedby ransomware30%

Source: Osterman Research, Inc. 2017

Page 8: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

It’s High Impact

Average Cost of a Breach

$3.8MAverage Cost Per Stolen Record

$154

Source: Ponemon Institute, May 2015

Page 9: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

What will the next morph bring?

Does your payment really mean you are free and clear?

How long before Ransomware payments are temporary?

Will one payment unlock you forever?

When will ransomware morph into “protection ware?”

Page 10: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Is It Getting Worse?

Page 11: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Security Threats are Common

29%

Source: Osterman Research, Inc. 2017

Of organizations had malware infiltrate through an unknown source

Page 12: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Security Threats are Common

25%

51%

13% 11%

0%

20%

40%

60%

80%

100%

None 1 to 5 6 to 10 More than 10

Source: Osterman Research, Inc. 2017

Page 13: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Decision Makers’ Concerns

32%

38%

63%

68%

69%

70%

54%

49%

34%

29%

30%

25%

16%

13%

3%

3%

1%

5%

0% 20% 40% 60% 80% 100%

Physical theft

Business email compromise

Ransomware

Phishing through email

Malware infiltration via web browsing

Malware infiltration through email

High Medium Low

Source: Osterman Research, Inc. 2017

Page 14: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Many tools are not solving the problem

Source: Osterman Research, Inc. 2017

Of organizations report that malware is getting worse51%

Page 15: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

OK, So It Is Getting Worse… But Why?

Page 16: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Economic Motivation

Page 17: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Increasing Sophistication

Page 18: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Data Is Everywhere

Page 19: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Anatomy of a Hack

Page 20: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Multi-Vector Attack

ReconnaissanceLateral

Movement

Malware

Installation

Damage, Deface,

or StealCompromise Obfuscation

Page 21: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Multi-Vector Attack

Reconnaissance

Compromise

Lateral Movement

Malware Installation

Obfuscation

Damage, Deface, or Steal

Headquarters

CRM Web App Exchange

Page 22: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Multi-Vector Attack

Reconnaissance

Compromise

Lateral Movement

Malware Installation

Obfuscation

Damage, Deface, or Steal

Headquarters

CRM Web App Exchange

Page 23: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Multi-Vector Attack

Reconnaissance

Compromise

Lateral Movement

Malware Installation

Obfuscation

Damage, Deface, or Steal

Headquarters

CRM Web App Exchange

John Kimble

Director of IT, Universal Imports

1d

Page 24: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Multi-Vector Attack

Reconnaissance

Compromise

Lateral Movement

Malware Installation

Obfuscation

Damage, Deface, or Steal

Headquarters

CRM Web App Exchange

Hi Doug,

Your credentials will expire today. In order to

keep working without a disruption, please click

here to update.

John

John KimbleYour password is expiring

To Douglas Quade

Page 25: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Multi-Vector Attack

Reconnaissance

Compromise

Lateral Movement

Malware Installation

Obfuscation

Damage, Deface, or Steal

Headquarters

CRM Web App Exchange

Page 26: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Multi-Vector Attack

Reconnaissance

Compromise

Lateral Movement

Malware Installation

Obfuscation

Damage, Deface, or Steal

Headquarters

CRM Web App Exchange

Identity

Credentials

Data

Page 27: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Multi-Vector Attack

Reconnaissance

Compromise

Lateral Movement

Malware Installation

Obfuscation

Damage, Deface, or Steal

Headquarters

CRM Web App Exchange

UN: dquade

PW: 12345

Page 28: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Multi-Vector Attack

Reconnaissance

Compromise

Lateral Movement

Malware Installation

Obfuscation

Damage, Deface, or Steal

Headquarters

CRM Web App Exchange

UN: dquade

PW: 12345

APT

Page 29: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Multi-Vector Attack

Reconnaissance

Compromise

Lateral Movement

Malware Installation

Obfuscation

Damage, Deface, or Steal

Headquarters

CRM Web App Exchange

APT

Page 30: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Multi-Vector Attack

Reconnaissance

Compromise

Lateral Movement

Malware Installation

Obfuscation

Damage, Deface, or Steal

Headquarters

CRM Web App Exchange

APT

Page 31: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Multi-Vector Attack

Reconnaissance

Compromise

Lateral Movement

Malware Installation

Obfuscation

Damage, Deface, or Steal

Headquarters

CRM Web App Exchange

APT

$

Page 32: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Multi-Vector Attack

Reconnaissance

Compromise

Lateral Movement

Malware Installation

Obfuscation

Damage, Deface, or Steal

Headquarters

CRM Web App Exchange

APT

$

Page 33: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Multi-Vector Attack

Reconnaissance

Compromise

Lateral Movement

Malware Installation

Obfuscation

Damage, Deface, or Steal

Headquarters

APT

CRM ExchangeWeb App

$

Page 34: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Multi-Vector Attack

Headquarters

APT

CRM ExchangeWeb App

$

SaaS

Office 365 Exchange

Public Cloud

Web App

Page 35: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Multi-Vector Attack

Headquarters

APT

CRM ExchangeWeb App

$

SaaS

Office 365 Exchange

Public Cloud

Web App

Page 36: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Headquarters

APT

CRM ExchangeWeb App

$

SaaS

Office 365 Exchange

Public Cloud

Web App

Multi-Vector Attack

Cloud providers are responsible for security OF the cloud

YOU are responsible for security IN the cloud

Page 37: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

What We Learned Threats

Page 38: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

What We Learned

Threat Vectors

Threats

Page 39: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

What We Learned

Attack Surfaces

Threat Vectors

Threats

Page 40: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

How Can Barracuda Help?

Page 41: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

The Need for End-to-end Security

Detect Prevent Recover

Page 42: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Detect

Page 43: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Detect Email Threats

Barracuda Email Threat Scanner• Cloud-based tool integrated with Office 365

• Scans Office 365 email accounts for advanced threats

• Identifies senders of threats

• Provides you with reports and recommendations

• Free

Scan your Office 365 account for latent threats

Page 44: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Detect Web Application Threats

Barracuda Vulnerability Manager• Scan web applications for vulnerabilities

• Provides detailed vulnerability scan reports

• Integrated with Barracuda WAF

• Free

Scan your web applications for vulnerabilities

Page 45: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Prevent

Page 46: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Prevent Email-Borne Threats

Barracuda Essentials• Comprehensive security, archiving, and backup

solution for Office 365 or Exchange

• Compatible with on-premises and hybrid configurations

• Built on proven Barracuda SaaS solutions

Secure your email

Page 47: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Prevent Typosquatting

Barracuda Link Protection• Secures against typosquatted domains

• Foreign language spelling (exemple.com)

• Homograph (examρle.com)

• Misspelling based on typo (examlpe.com)

• Different top-level domain (example.org)

• Provides integrated end-user security training

Train your users

Page 48: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Prevent Hacks

Barracuda Web Application Firewall• Application security and DDoS protection

• Load balancing and server health monitoring

• Inbound and outbound inspection

• Granular identity and access management

Secure your web applications from vulnerabilities

Page 49: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Prevent Hacks

Barracuda Vulnerability Remediation Service• Everything BVM offers plus:

• Remediate vulnerabilities automatically on a Barracuda WAF

• Schedulable or on-demand

• Manage vulnerability workflow/lifecycle

• Free

Simplify and streamline your

web application deployments

Page 50: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Prevent Network Breaches

Barracuda NextGen Firewall• Powerful network firewall

• Full application control

• Full user awareness

• Intelligent traffic management

• Comprehensive security layers

• Centrally manage all functions

Secure your network perimeter

Page 51: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Prevent Spyware

Barracuda Web Security• Filters content, malware, social media and rogue

application threats

• Enforce corporate web usage policies

• Protect against web-based threats

• Monitor network and user activity

• Secure laptops and mobile devices

Secure your users everywhere

Page 52: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Prevent Advanced Threats

Barracuda Advanced Threat Protection• Comprehensive, real-time, defense-in-depth

• Against all threats

• Across all threat vectors

• On all attack surfaces

• Layered threat detection optimized for speed, accuracy, and coverage

• Global threat intelligence network

Secure against threats in real time

Page 53: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Global Threat Intelligence

Page 54: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Benefits of the Layered Approach

Layered pre-filtering for faster response times• ~ 95% of attacks are caught through the pre-filters within seconds

High performance CPU emulation sandbox• Detects threats designed to evade traditional sandboxes

• Provides detailed reports for auditing and forensics

Machine learning for increased efficiency and accuracy• Analysis results are shared across layers to cover threats

• Minimal false positives

Page 55: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Recover

Page 56: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Recover By Regularly Backing Up Your Data

Barracuda Backup• Comprehensive, cloud-integrated solution for

protecting your environment

• Simple to deploy and easy to manage

• Replaces multi-vendor piecemeal backup solutions

Use Backup to protect your data

Page 57: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

A Comprehensive Solution

Page 58: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Our Security Platform

Secure against all threats

On all threat vectors

Across all attack surfaces

Any Cloud

From Anywhere

Any App

Any User

Any Platform

Page 59: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Simplified IT 30-Day free evaluation

Simple pricing model

24x7 support

4 Year Hardware Refresh

Page 60: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Moving Forward

Page 61: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Next Steps

Consider your current security posture or…

Contact us for an risk assessment

Get a free Office365 Email Threat Scan• http://scan.barracuda.com

Get a free Web Application Scan• http://appscan.barracuda.com

Page 62: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

Thank You

Page 63: Barracuda Backup v6 - System Source · Why Barracuda Backup: ... • Cloud-based tool integrated with Office 365 • Scans Office 365 email accounts for advanced threats ... protecting

THANKS!

Evaluations & Door Prizes

Learning Center Offer

3 Races Each with Prizes For:

Fastest Time!

Most Enthusiastic!

Best Rookie Driver!