Criminal Education: Lessons from the Criminals and Their Methods

© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Criminal Education Lessons from the Criminals and Their Methods

Rob Greer Vice President & General Manager HP Network Security Products

© Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. © Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

© Copyright 1969 Twentieth Century Fox Film Corporation


Bank Hack Results in Stunning $45 Million ATM Heist

Experts Marvel At How Cyberthieves Stole $45 Million

Global Network of Hackers Steal $45 Million From ATMs

In Hours, Thieves Took $45 Million in A.T.M. Scheme

The Circuit: Hackers took $45 million in ATM heist


$45M stolen …in a matter of hours


but planned over a number of years…


“If you know the enemy and know yourself, you need not fear the result of a hundred battles.”

—Sun Tzu, The Art of War


I follow ISO, PCI and other security standards

Our predictability is well known

I work within budget cycles

I stitch technology together across functions


Cloud Big Data Mobile


Market with distinct process

Actors organize and specialize

Intelligence is bought and sold

Defining the adversary

Cybercrime

Nation state Hacktivist

The

adversary


Using what we know about them to create a more effective response


Discovery

Organize our capability to disrupt the market

Research

Our enterprise

Their ecosystem

Infiltration

Capture

Exfiltration


Discovery

Rethink our capability investments

Research

Our enterprise

Their ecosystem

Exfiltration

Capture

5X 1X

Infiltration


Discovery


Research

Our enterprise

Their ecosystem

Infiltration

Capture

Exfiltration

Educating users Counter intel

Blocking access


84% of breaches occur at the application layer


68% Increase in mobile application vulnerability disclosures


Discovery


Research

Our enterprise

Their ecosystem

Infiltration

Capture

Exfiltration

Finding them


Blocking access


of breaches are reported by a 3rd party 94%


average time to detect breach 416 days

2012 January February March April May June July August September October November December 2013 January February March April


Discovery


Research

Our enterprise

Their ecosystem

Infiltration

Capture

Exfiltration Planning damage mitigation

Protecting the target asset

Finding them


Blocking access


71% Since 2010, time to resolve an attack has grown


Discovery

How Does HP Security Help You Improve Your Capabilities?

Research

Our enterprise

Their ecosystem

Infiltration

Capture

Exfiltration Planning damage mitigation

Protecting the target asset

Finding them


Blocking access

Make it matter.

Criminal Education: Lessons from the Criminals and Their Methods

Technology

Transcript of Criminal Education: Lessons from the Criminals and Their Methods