ElevenPaths Partners [PDF]

ElevenPaths Partners Juntos creamos un mundo digital más seguro

ElevenPaths Partners Program_ Mejores Productos

Otros mercados

Programa de Alianzas estrategicas y partnerships

Liderazgo

Innovadores, disruptivos, sorprendentes,….

Otros países y en mercados verticales

Soluciones conjuntas, reconocimiento analistas, visibilidad

La colaboración es un activo clave Para crear un mundo digital más seguro Estratégicos

Soluciones

Asociaciones

Clientes

Colaborar con los líderes del mercado con los que compartimos clientes y negocios

Crear soluciones a los problemas de los clientes combinando tecnologías propias y de partners

Compartir la información sobre amenazas para mejorar nuestras defensas contra las ciberamenazas avanzadas

Nos ayudan a crear y mejorar productos y servicios innovadores con sus valiosas contribuciones

3

Canal móvil seguro con Sandblast y Tacyt Check Point Software & ElevenPaths Nikolaos Tsouroulas

Michael Shaulov

Head of Cybersecurity Product Management ElevenPaths - Telefónica Cybersecurity Unit

Head of Products, Mobile and Cloud Security Check Point Software Technologies LTD

4

100%

OF ALL ORGANIZATIONS

ARE INFECTED WITH

MOBILE MALWARE

89%

74%

Experienced a man-in-the-middle attack over Wi-Fi

Averaged 35 jailbroken or rooted devices

5 Source: Check Point SandBlast Mobile | N=850 Check Point customers, each protecting more than 500 devices

Mobile Channel Risk Internal Risks

External Risks

Lack of visibility & control

Counterfeiting & tampering

Vulnerabilities

Brand spoofing

Information leakages

Identity Theft 1%

20%

Security Risks

Privacy Risks

128K

Banking Troyans 6

50M

750K

Vulnerabilities

High Severity

1,4K

High Severity in Top Apps

We hold various pieces of the puzzle

Complete Threat Detection and Mitigation

Tacyt

CyberThreats

masApp

App Threat Intelligence

Mobile Channel Risk

App Security Assessment

Best Threat Catch Rate Full Visibility Simple Deployment

7

We are now starting to put them together

Full 0day Mobile Threat Prevention: malware, network attacks, exploits, SMS and SS7 attacks

Tacyt

In-depth research into any android or iOS mobile app Be proactive! Leverage intelligence on threat Actors and their TTPs, identify variants and related campaigns

8

Bankbot Demo Banking malware stealing credentials Evading 2-factor authentication 25 Global Banks affected 31 Spanish Banks affected 12 AVs evaded http://blog.checkpoint.com/2017/05/16/the-mobile-banker-threat-from-end-to-end/ http://blog.elevenpaths.com/2017/05/el-auge-de-los-troyanos-bancarios-para.html

9

Looking Forward Into the Future Tacyt

DETECT

ACT

INVESTIGATE

Malware, Network Attacks, Phishing, Exploits

Malicious app blocking

App-metadata analysis

Application vulnerabilities

MDM blacklisting

Cross-market contextualization

Suspicious app warnings

Threat attribution & profiling

Mobile App and Online Content Takedown

Anticipate new threats

Privacy threats to users

10

mASAPP

Wifi Segura con Mobile Connect Open Cloud Factory Xavier González

Ricardo de Mingo Lozano

CTO & Co-founder Open Cloud Factory

IT Manager Universitat de Barcelona

11

Único fabricante europeo presente en el Market Guide de NAC de Gartner (mayo 2017)

Beneficios de la Integración con

•

Presencia global en grandes corporaciones (IBEX 35) y medianas empresa

ü Control de acceso con doble factor para cumplir con regulaciones como GDPR

•

Integración de las soluciones de identidad de ElevenPaths

•

ü Integración ágil basada en estándares de mercado

ü Dispositivo de acceso universal sin dependencia de aplicaciones 12

La Universitat de Barcelona en números: ü 60.000+ alumnos ü 8.000+ trabajadores (profesores y administrativos) ü 4.000+ colaboradores temporales

Beneficios de la Solución: ü Registro de usuarios externos totalmente desatendida ü Identificación unívoca del usuario (no más credenciales compartidas)

Principal reto:

ü Doble factor de autenticación (GDPR)

ü Control y visibilidad del acceso a la red por usuarios temporales y colaboradores ü Evitar credenciales compartidas

ü Despliegue inmediato sobre solución NAC existente (openNAC)

13

Derek Manky

Intercambiando información con la industria Cyber Threat Alliance Derek Manky

Global Security Strategist Cyber Threat Alliance (CTA)

14

Who We Are: Current member companies Actively recruiting to expand globally We currently have 11 public Members and are actively engaged w/30+ global organizations.

Founding Members

Affiliate & Contributing Members Affiliate & Contributing Members

15

CTA’s Mission: Protect, disrupt, elevate Mission Statement Work together in good faith to equitably share campaign based cyber threat intelligence to defend against cyber adversaries and improve our customers’ security. PROTECT CUSTOMERS

DISRUPT MALICIOUS ACTORS

ELEVATE OVERALL SECURITY

CTA’s automated platform empowers Members to deploy actionable intelligence to customers in near real- time

CTA Adversary Playbooks expose the TTPs and other trademarks associated with specific malicious actors and campaigns

CTA’s collaboration with allies and advocacy initiatives promote greater security across the entire cyber ecosystem

16

The CTA Platform: Automated sharing 1

Sharing Process Member 1 submits linked

1 intelligence into their local client

3

Shared Platform

4

Open source standards are used so platform is largely vendor-agnostic

Submission scored according to

CTA is a meritocracy; sharing is driven by a value-based algorithm

3 algorithm and mutually validated 4

Platform enables fully automated, near real-time sharing

STIX package transferred to

2 central hub over TAXII/ HTTPS

2

Value Proposition

Members 2 to N sync data their

4 local database to extract/use 17

CTA Members get access to the 45,000+ STIX packages shared daily

11Paths as CTA Member: A top contributor Malware Binaries

Active C&C URLs & IPs

15.000-30.000 / day >70% not in VirusTotal

50-200 / day >90% active

One of Top 3 Contributors 18

TTPs

For uplodaded Malware & C&C

WannaCry: CTA in action Industry experts collaborated in real time

1,600+

Total artifacts shared on the platform

4,200+

Total pieces of context linked to shared artifacts

Other Intel

Members shared telemetry, geo data and more on the topics of P0 and geographic footprint

CLEAR THE FOG LESSONS LEARNED

WHAT WAS SHARED

The CTA provided a forum for Members to have meaningful dialog that extended beyond sharing threat intelligence on the platform. Do not underestimate the power of human to human interaction

SHARE IN REAL TIME

Time is critical when incidents like WannaCry spread at rapid speed

CONNECT THE DOTS

Different perspectives are essential to holistic incident management 19

Encuestas electrónicas basadas en Blockchain Ayuntamiento de Alcobendas Javier Peña Martínez

Salvador Sanchez Taboada

Analista de Innovación Tecnológica Ayuntamiento de Alcobendas

Head of Solutions and Services Partners ElevenPaths – Telefónica Cybersecurity Unit

20

Encuestas electrónicas basadas en Blockchain El proyecto El Reto

Solución propuesta

•

Ayuntamiento de Alcobendas es líder en transparencia e innovación

•

Sistema de encuestas electrónicas basadas en la tecnología Blockchain

•

Promover la participación ciudadana para la confección del presupuesto municipal

•

Facilidad de uso desde cualquier dispositivo

•

Proporcionar herramientas fáciles de usar por los ciudadanos

•

•

Seguridad frente al fraude, privacidad y evitar la suplantación de identidad

Integración con Mobile Connect para la autenticación sencilla y segura de los ciudadanos

•

Telefónica como socio tecnológico e innovador para acometer el proyecto

•

Integración con el padrón municipal 21

22

¡Síguenos en nuestras redes sociales y entérate de todo!

www.elevenpaths.com