Upload File

the prescription for protection - avoid treatment errors to the malware problem

  • Home
  • Technology
  • The Prescription for Protection - Avoid Treatment Errors To The Malware Problem
23
© 2016 JURINNOV, LLC All Rights Reserved. The Prescription for Protection Avoid Treatment Errors to the Malware Problem Advanced Persistent Threats Summit Eric Vanderburg and Bogdan Salamakha JUNE 15, 2016

Upload: eric-vanderburg

Post on 15-Apr-2017

274 views

Category:

Technology


1 download

Report

TRANSCRIPT

Page 1: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

© 2016 JURINNOV, LLC All Rights Reserved.

The Prescription for ProtectionAvoid Treatment Errors to the Malware

Problem

Advanced Persistent Threats Summit

Eric Vanderburg and Bogdan Salamakha

JUNE 15, 2016

Page 2: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

© 2016 JURINNOV, LLC All Rights Reserved.

Eric VanderburgDirector of Cybersecurity

Over 40 certificationsLicensed private investigatorMBA with an IS concentration BS, Technology AAB, Computer Information Systems18 years experience in information assurance and cybersecurityAuthorExpert witness

Page 3: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

© 2016 JURINNOV, LLC All Rights Reserved.

Bogdan SalamakhaPenetration Tester and Security Researcher

MPSC (Metasploit Pro Certified Specialist)Penetration tester and security researcherOperates JURINNOV’s honeynetSpecializations include: Vulnerability assessmentEthical hackingSecurity analysisIncident response

Page 4: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

© 2016 JURINNOV, LLC All Rights Reserved.

Traditional Malware

Your data or your money

Encrypts or blocks access to data and demands money to gain access

Examples:

Reveton

CryptoLocker

CryptoWall

General viruses, trojans and worms• Spread quickly

• Destroy data

• Open backdoors

• Make computers sluggish

• Hijacks browser sessions

• Steals data

Coordinated malware

• The cloud for crooks• Over 700 million bots

worldwide• 12% of bots active• Malicious bots responsible

for 29% of worldwide Internet traffic

• 90% of security events are from bot activity

Ransomware Bots

Page 5: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

Right Client - AuthenticationThey come to you in sheep's clothing, but inwardly they are ferocious wolves.-Matthew 7:15 NIV

Page 6: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

© 2016 JURINNOV, LLC All Rights Reserved.

Right Client - Authentication Drive by malware•Web filtering• Block Javascript for sites unless you need it• Ad blocking• Browser updates

Software downloads• AppLocker• Java application signature verification•Microsoft code signing• Utilize official app stores • Microsoft Store• Ubuntu Software Center

Page 7: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

© 2016 JURINNOV, LLC All Rights Reserved.

Right Client - Authentication Mobile apps•Utilize official repositories• Read reviews•Developer reputation•Developer professionalism

Email attachments•Discretionary execution• Protected mode•Macros

Page 8: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

Right Route – Gaps and StrategiesProductivity is never an accident. It is always the result of a commitment to excellence, intelligent planning, and focused effort. -Paul J. Meyer

Page 9: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

© 2016 JURINNOV, LLC All Rights Reserved.

Right Route – Gaps and Strategies•Gap assessments• SWOT• Priorities•Vision•Data inventory Data classification• Patient information• Engineering documents• Competitive advantage information / IP• Financial information

Page 10: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

© 2016 JURINNOV, LLC All Rights Reserved.

Right Route – Gaps and Strategies• Identify best practices• Security governance framework• Policies and procedures• Top level support• Trained staff• Identify required third parties

Page 11: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

© 2016 JURINNOV, LLC All Rights Reserved.

What is greatest threat for your industry?

Page 12: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

Right Drug – Security ControlsI am dying from the treatment of too many physicians. -Alexander the Great

Page 13: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

© 2016 JURINNOV, LLC All Rights Reserved.

Right Drug

Technical controls

Procedural controls

Training

Page 14: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

© 2016 JURINNOV, LLC All Rights Reserved.

Network Security

NAC

Firewall

IPS / IDS

Content security

Wireless

Monitoring

Security Management

Compliance

Security Operations

System Management

Vulnerability Management

Patch Management

Change Management

Data Security

Encryption

DLP

Database Security

Identity and Access

Management

Federation

Web access management

Provisioning

Directories

Authentication

Virtualization

Segmentation

Hypervisor isolation

Parent/child relationships

Hypervisor authentication

Cloud

Provider resiliency

Data exchange protocols

Incident detection / notification

Application Security

Security Development

Web Application Assessment

Application Testing

Web Application

Firewalls

Endpoint Security

Remote Access / VPN

Device Control

Disk Encryption

Mobile Security

A/V

Right Drug – Technical Controls

Page 15: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

© 2016 JURINNOV, LLC All Rights Reserved.

Right Drug – Procedural Controls• Incident response• Ticket escalation and tracking• Customize for: • Traditional malware• Bots• Ransomware• Procedures

Page 16: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

© 2016 JURINNOV, LLC All Rights Reserved.

Right Drug – Procedural Controls•Investigative procedures• Evidence handling• Third party services•Notification procedures• Customer notifications• Legal requirements• Public relations•Incident debriefs•Table top exercise / scenario

Page 17: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

© 2016 JURINNOV, LLC All Rights Reserved.

Right Drug – Training• Incident reporting• Recognizing spam and phishing• Data classifications• Data sensitivity levels• Data availability levels• Storage locations• Transmission restrictions• Passwords• Warning signs

Page 18: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

Right Dose – Security and Business BalanceI tried being reasonable, I didn't like it. –Clint Eastwood

Page 19: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

© 2016 JURINNOV, LLC All Rights Reserved.

Right Dose – Finding the Balance• Defining an acceptable minimum• Compliance requirements• Due diligence• Industry standards• Competitive analysis•Risk analysis• Impact + likelihood vs. cost to remediate

Acceptable Minimum

Risk analysis

Competitors

Compliance & Standards

Page 20: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

© 2016 JURINNOV, LLC All Rights Reserved.

Right Dose – Security and Business Balance• Combining similar controls• Streamlining existing controls• SSO• Automation• Start with security• Solicit feedback and involvement

Page 21: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

Right Time – Staying up to Date“The early bird gets the worm, but the second mouse gets the cheese.”― Willie Nelson

Page 22: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

© 2016 JURINNOV, LLC All Rights Reserved.

Right Time – Staying up to Date• Don’t stop now!• Awareness• Continuous improvement and Metrics• Updates and NAC• Right place in the adoption curve

Page 23: The Prescription for Protection - Avoid Treatment Errors To The Malware Problem

© 2016 JURINNOV, LLC All Rights Reserved.

Questions


Safety Medication errors. Chapter Topics Medical errors Medication errors Prescription filling process in community and hospital pharmacy practices Medication

MALWARES MALWARE REVIEWED ISE DE Malware Reviewed · MALWARES There are public reports about spreading of malware named as ServHelper malware. It is a backdoor malware used by attacker

Computer Virology and Mobile Malware Detection · 2019-03-14 · Outline •Introduction •Computer Virology • Malware taxonomy • Encrypted malware •Malware Detection •Mobile

Evaluating Open Source Malware Sandboxes with Linux malware

Intrusion Detection and Malware Analysis - Malware collection

Prescription and Medication Errors

LEADER MANUAL · such as adherence improvement, prescription drug abuse prevention, reduction of medication errors, and quality improvements in health care provider–patient communication

Intrusion Detection and Malware Analysis - Malware collection134.2.173.140/lehre/ws10/ids-malware/12-malware-collection.pdf · Intrusion Detection and Malware Analysis Malware collection

Malware and Anti-Malware Seminar by Benny Czarny

Reversing malware analysis training part8 malware memory forensics

Malware Analysis and Antivirus Technologies: Kernel Malware & A Look at Malware … · 2011-08-16 · Malware Analysis and Antivirus Technologies: Kernel Malware & A Look at Malware

Generics/Non prescription medicines - Non-prescription ... · Generics/Non prescription medicines - Non-prescription switching ... Scientific Technical IPCL OTC ... Non prescription

Practical Malware Analysis: Ch 11: Malware Behavior

Prescription Chart with Omissions and Errors (space for

Reversing malware analysis trainingpart9 advanced malware analysis

Advanced malware analysis training session6 malware sandbox analysis

Android Malware Exposed-Evolution of Android Malware

Chapter 8 Malware - FTMS · – Boot virus – Logic Bomb virus – Directory virus – Resident virus. CSCA0101 Computing Basics 8 Malware Types of Malware ... Malware Types of Malware

Windows Malware Firewall: Remove Windows Malware Firewall

Errors Requesting appropriate tests Writing prescription Reading prescription Sample collection Sampling times environmental factors Drug interferences

Mr. M Raj Kumar...Mr. M Raj Kumar Dean of Academics Department of Pharmaceutics HANDLING OF PRESCRIPTION PARTS OF PRESCRIPTION ERRORS IN PRESCRIPTIONS …

Malware - courses.cs.washington.edu · 2015. 5. 15. · Malware • Malicious’code’often’masquerades’as’good’ software’or’attaches’itself’to’good’software’

Module 14: Medication Reconciliation · Excerpt from “Medication Errors Involving Reconciliation Failures” (Santell, 2006) “A doctor wrote a prescription for the antibiotic

Prescription for Improving Patient Safety: Addressing ... · PDF filePrescription for Improving Patient Safety: Addressing Medication Errors A report from The Medication Errors Panel

Malware Analysis Analysis.pdf · Definisi Malware Analysis • What is a malware? • Malware (malicious software) ... Malware Sinkronisasi Token • Pelaku: Zeus Banking Trojan •

Malware and anti-malware (fun with Trojans) - Z. …z.cliffe.schreuders.org/edu/FS/Malware and anti-malware... · 2014-04-02 · Malware and anti-malware (fun with Trojans) ... with

Improving accuracy of malware detection by …...FFRI, Inc. Background – malware and its detection 4 Increasing malware Targeted Attack (Unknown malware) Malware generators Obfuscators

BD Life Sciences · Where do laboratory test errors occur? 2,3,4 Doctor’s test prescription Patient identification Needle & Tube selection Tube labelling Sample collection Sample

Ch 12: Covert Malware Launching - samsclass.info · Practical Malware Analysis Ch 12: Covert Malware Launching Last revised: 4-10-17. Hiding Malware • Malware used to be visible

Prescription Errors and Beyond-use Date

Chapter 12 Medication Safety Chapter 12 Topics Medical Errors Medication Errors Prescription-Filling Process in Community and Hospital Pharmacy PracticePrescription-Filling

Medication Administration Errors in a Mental Health Hospital · •In 52% (80/153) of the administration errors the pharmacist believed a lack of thoroughness when reading the prescription

THE EVOLUTION OF MALWARE & FUTURE MALWARE MITIGATION

MEDICATION PRESCRIPTION ERRORS IN A SELECTED …JK-Practitioner2016;21(3-4):34-37 original article JK-Practitioner Vol.21,No (3-4) July –December 2016 34 MEDICATION PRESCRIPTION

Intrusion Detection and Malware Analysis - Malware analysis · Intrusion Detection and Malware Analysis Malware analysis Pavel Laskov Wilhelm Schickard Institute for Computer Science