Paul King Director Threat Intelligence Cisco Systems Securing

Paul King Director, Threat Intelligence Cisco. Systems

Securing Critical Infrastructure The Network’s Role in Securing Cyberspace Paul King Director, Threat Intelligence pking@cisco. com © 2011 Cisco and/or its affiliates. All rights reserved. February 4 th, 2014 Cisco Confidential 2

Sophisticated Attacks, Complex Landscape Hacking Becomes an Industry Phishing, Low Sophistication 1990 1995 2000 2005 Viruses Worms 1990– 2000– 2005 © 2011 Cisco and/or its affiliates. All rights reserved. 2010 2015 2020 Spyware and Rootkits APTs Cyberware 2005–Today + Cisco Confidential 3

Criminal State Sponsored © 2011 Cisco and/or its affiliates. All rights reserved. Hacktivist Cisco Confidential 4

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5

Perimeter-based Defenses Are No Longer Adequate to Protect Critical Assets • Virtualization is moving data into the cloud • Mobile access changes the game • Assume that your network has been compromised. . . now what? - Before - During - After © 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6

Total 500 Million 35 Billion 1 Trillion 70 x 1/10 th of a Device per Person on Earth 30 x 5 Devices per Person on Earth 140 Devices per Person on Earth Source: Forrester Research, Cisco © 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7

Architecture of Trust 1 Trusted Processes © 2011 Cisco and/or its affiliates. All rights reserved. 2 Trusted Systems 3 Trusted Services Cisco Confidential 8

Trusted Processes …provide the blueprint • Certification • Training • Procurement • Deployment • Management • Refresh © 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9

• Table stakes for cybersecurity • 80% of known threats • Network assessments © 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10

Many Networks Support Advanced Security Features Which Have Not Been Enabled • Latent capability in deployed networks • Guidelines for secure configuration • Turn it on: Embedded Cisco IOS cyber -security capabilities © 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11

Trusted Systems …provide the foundation • Resilience: Respond, recover and report • Visibility: Prevent and detect • Trust: Identify and Manage © 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12

Visibility : Prevent and Detect 100 TB 150, 000 5, 500 Security IPS Micro. Intelligence applications Signatures © 2011 Cisco and/or its affiliates. All rights reserved. 1. 6 M 93 B 150 M Deployed Devices Daily Email Messages Deployed Endpoints 13 B 35% Web Requests Enterprise Email 3 -5 min Updates 5 B Daily Email Connections 1, 000 Applications 4. 5 B Daily Email Blocks Cisco Confidential 13

Trusted Services …provide the living space • Identity-based access control • Secure mobile access • Secure cloud migration © 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14

• Visibility into who and what is connected to your network • Automation for simplifying operations and adapting to changing needs • Controls for limiting access to information and resources • Cisco Identity Services Engine (ISE), Trust. Sec, Security Group Tags, Any. Connect © 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15

Trusted Wi. Fi • Bring Your Own Device. . . Consumerization of IT (Any. Connect, ASA, Iron. Port) • Wireless LAN security (IDS, Clean Air) • Teleworkers and the virtual office (CVO) © 2011 Cisco and/or its affiliates. All rights reserved. Is Mr. Allen’s lab work ready yet? Not yet but i will let you know the moment it arrives Cisco Confidential 16

Security Intelligence Operations www. cisco. com/security Security Education www. cisco. com/go/securityeducation 17 Cisco Annual Security Report www. cisco. com/go/securityreport © 2011 Cisco and/or its affiliates. All rights reserved. Architecture of Trust www. cisco. com/web/strategy/docs/gov/A rchitecture_of_Trust_WP. pdf Cisco Confidential 17

Thank you. pking@cisco. com © 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18