CHECK POINT INFINITY BUILDING THE SECURITY STRATEGY FOR

CHECK POINT INFINITY BUILDING THE SECURITY STRATEGY FOR THE FUTURE Alexey Zubarev, CISSP, CISA, CISM Security Engineer, Check Point Software Technologies © 2018 Check Point Software Technologies Ltd. 1

WHAT HAPPENED IN 2017? THE MOST ATTACKS EVERYTHING IS MOBILE DANGEROUS EVERYWHERE CONNECTED ATTACKS TOOLS WANNACRY Was 2017 a Cyber RANSOMWARE HITS HUNDREDS OF Security WAKE-UPCOMPANIES GLOBALLY RANSOMWARE ATTACK KEEPSCALL? HOTEL 1 M GOOGLE ACCOUNTS GUESTS IN AUSTRIA BREACHED BYTOOLS GOOLIGAN LOCKED OUT OF NSA HACKING LEAKED ROOMS AND SOLD ONLINE © 2018 Check Point Software Technologies Ltd. 2

The Global Risks Report 2018 © 2018 Check Point Software Technologies Ltd. [Internal Use]

LET’S LOOK AT THE GENERATIONS OF ATTACKS… © 2018 Check Point Software Technologies Ltd.

Generations of Attacks and Protections Gen I Late 1980 s – PC attacks - standalone The Anti Virus Mid 1990 s – The Firewall Early 2000 s - Intrusion Prevention (IPS) 2010 Polymorphic Content Sand. Boxing and Anti-Bot Virus Gen II Attacks from the internet Networks Gen III Applications Gen IV Exploiting vulnerabilities in applications Payload © 2018 Check Point Software Technologies Ltd. 5

Where are we ? Gen V THREATS Gen IV Mega Gen III Gen I Enterprises are between Gen 2 -3 Payload Applications 2. 8 TIONS C E T O R P Networks Virus 1990 © 2018 Check Point Software Technologies Ltd. 2000 2015 [Internal Use] for Check Point employees 2017 6

Gen V Market Survey Company Size • Market research N=300 conducted during 2018 29% 17% 1000 -4999 employees Fielded by Dimensional Research IT and Security decision makers 500+ employees 18% 500 -999 employees 36% 5, 000 -10, 000 employees More than 10, 000 employees Representing all industry scope Source: Cyber Security Generations Survey among IT Professionals, March 2018, N=300 © 2018 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 7

Only 3% of IT Security Professionals Are at Gen V Cyber Security Generations Analysis 100% 90% 80% 70% 60% 50% 40% 30% 20% 10% 0% 89% 97% 98% 10% Gen 1: AV only Gen 2: FW+AV Gen 3: FW+AV+IPS 3% Gen 4: All+Sandboxing+ Gen 5: All+ Sandboxing in Anti Bot prevention mode+mobile+cloud Market research Source: Cyber Security Generations Survey among IT Professionals, March 2018, N=300 © 2018 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 8

What parts of your organization's infrastructure were attacked? Users PCs 78% On-premise Data Center or DMZ 55% Users mobile devices 39% Cloud based applications (Saa. S) 29% Public Cloud Data Center 22% Private Cloud Data Center 22% Industrial systems and/or Io. T Other 16% 1% 0% 10% 20% 30% 40% 50% 60% 70% 80% 90% Source: Cyber Security Generations Survey among IT Professionals, March 2018, N=300 © 2018 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 9

76% Experienced Attacks In Multiple Vectors (More than one vector**) Number of Different Attack Vectors 35% 33% 29% 30% 25% 24% 20% 15% 10% 4% 5% 0% One Two Three Four Five ** Vectors- PC, On-premise data Center, Cloud, Mobile, Io. T Source: Cyber Security Generations Survey among IT Professionals, March 2018, N=300 © 2018 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 10

THE EXPLANATIONS IT’S TOO COMPLICATED I DIDN’T REALIZE IT WAS SUCH A PROBLEM TOO MANY POINT PRODUCTS NOT ENOUGH TRAINED PEOPLE I DIDN’T THINK IT COULD HURT US © 2018 Check Point Software Technologies Ltd. 11

HOW ARE WE APPROACHING CYBER SECURITY TODAY ? ARE WE READY FOR THE FUTURE

WHAT SHOULD WE DO WHEN THE ROOF IS LEAKY? © 2018 Check Point Software

Gen V Mega Attacks Large scale (across country and industry) Multi-vector (network, cloud, mobile) State-sponsored technologies © 2018 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 14

WE MUST STEP FORWARD! © 2018 Check Point Software Technologies Ltd.

GEN IV PROTECTION IS NO LONGER ENOUGH! 2010 Polymorphic Content Gen IV Sand. Boxing and Anti-Bot PAYLOAD WE NEED PREVENTION (NOT-JUST DETECTION) REAL-TIME ACTION COVERING OUR WEAKEST POINTS – CLOUD, MOBILE © 2018 Check Point Software Technologies Ltd. 16

Introducing GEN V PROTECTION Against MEGA ATTACKS © 2018 Check Point Software Technologies Ltd.

WHAT INGREDIENTS DO WE NEED ? © 2018 Check Point Software Technologies Ltd. 18

LET’S LOOK AT AN EXAMPLE… © 2018 Check Point Software Technologies Ltd.

File hash: 4931 c 1259863 e 1 ba 59201 e… C&C server: pwnown. hack. evil … Incoming email with PDF attachment blocked 11: 30 1. Zero-day malicious PDF 2. Address of remote C&C 3. Exposed indicator shared detected by Check Point Sandbox identified in malicious PDF with Threat. Cloud © 2018 Check Point Software Technologies Ltd. Access to web site on mobile device was blocked 11: 32 1. Malicious link identified by the exposed indicators Virtual machine on public cloud was quarantined 11: 35 1. Detected infection (bot) on cloud virtual machine. Communication with C&C identified by indicators CAN’T DO IT WITH SEPARATE SYSTEMS! 20

Incoming email with PDF attachment blocked 11: 30 Access to web site on mobile device was blocked 11: 32 Virtual machine on public cloud was quarantined 11: 35 Shared intelligence and threat prevention across networks, mobile, cloud One consolidated system to fully block the attack © 2018 Check Point Software Technologies Ltd. 21

THE CYBER SECURITY ARCHITECTURE OF THE FUTURE ONE SECURITY PLATFORM PREEMPTIVE THREAT PREVENTION CONSOLIDATED SYSTEM Leveraging unified threat intelligence & open interfaces Blocking the most sophisticated attacks before they happen Single Management, Modular Policy Management & integrated threat visibility ACROSS ALL NETWORKS, CLOUDS AND MOBILE © 2018 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 22

Check Point Infinity Architecture Best Threat Prevention across entire enterprise CLOUD MOBILE Shared Threat Intelligence Hybrid Cloud ENDPOINT NETWORK Perimeter & Data centers Consolidated Security Management © 2018 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 23

TO SUMMARIZE… © 2018 Check Point Software Technologies Ltd.

WE ARE AT AN INFLECTION POINT ! Gen V Gen IV Mega Gen III

ARE WE SETTLING FOR A LEAKY ROOF? CYBER PROTECTIONS ARE AVAILABLE BUT NOT ADOPTED BY OVER 93% OF COMPANIES PREVENTION IS POSSIBLE! DETECTION OF THE BREACH IS TOO LITTLE, TOO LATE THE NEXT ATTACK CAN BE PREVENTED! © 2018 Check Point Software Technologies Ltd. 26