Av is dead long live managed endpoint security

Antivirus is Dead**Long live Managed Endpoint Security

Presented By

Ali MahmoudN-able Technologies

@alimahmoud_

Last 5 years in SecurityAre we getting better or worse?

Major Security Breaches(20 Mn or more records stolen)

1. “World’s Biggest Data Hacks”, Access 22 Oct 2014.Available at: http://www.informationisbeautiful.net/visualizations/worlds-biggest-data-breaches-hacks/

Top 5 Operating Systems Market Share

1. Operating System Market Share, by W3Counter. Available at: http://www.w3counter.com/globalstats.php?year=2014&month=9

Windows 8 is growing but will be a while before it overtakes Windows 7

1. “Windows 7 Licenses sold worldwide to 2012”, Statista, Accessed: 24 November 2014, Available at: http://www.statista.com/statistics/273490/global-amount-of-licenses-sold-of-windows-7/2. “After 15 months, Windows 8 has sold 100 million fewer copies than Windows 7 did”, Emil Protalinski, Published 13 February 2014. Accessed: 24 Nov, 2014. Available at: http://thenextweb.com/microsoft/2014/02/13/15-months-windows-8-sold-100-million-fewer-copies-windows-7/

Dec '09 Dec '10 Dec '11 Dec '12

Win 7 Licenses Sold (in millions)1

20 Mn copies per month on average

Vulnerabilities by operating system version

1. “The Secunia Vulnerabilty Review 2014” by Secunia. Available at: http://secunia.com/resources/reports/vr2014/

Web Browser Market Share

1. Web Browser Market Share, by W3Counter. Available at: http://www.w3counter.com/globalstats.php?year=2014&month=9

Vulnerabilities across top 5 browsers

1. “The Secunia Vulnerabilty Review 2014” by Secunia. Available at: http://secunia.com/resources/reports/vr2014/

Brian Dye of Symantec® estimates

antivirus now catches just 45% of all attacks

http://online.wsj.com/news/article_email/SB10001424052702303417104579542140235850578-lMyQjAxMTA0MDAwNTEwNDUyWj

Antivirus is Dead**Long live managed endpoint security

Traditional way of preventing threats

New virus discovered Antivirus company creates a fix in the form of a “signature”

Users download signatures

Problem 1: Vulnerability window could be months

Fix Found User protected

Zero-Day

"hackers exploit security vulnerabilities in

software for 10 months on average before

details of the holes surface in public”

Source: Wikipedia.org

Available at: Wikipedia - Zero-day_attackDate sourced: 2014-07-10

Problem 2: Depending on user to apply updates

Remind me later(so I can ignore it again)

Update Now

Its time to update your antivirus again…

Problem 3: No defense against modern attacks

Ransomware (e.g. Cryptolocker)

The reality behind signature based antivirus

• Detects < 50% of attacks

• Could take days before users is protected

• Does not protect against modern threats

The Solution?

Managed Endpoint Security

Signature Based Antivirus

Methodology File Signatures File SignaturesFile BehaviorHeuristics Algorithms

Elements of Network Security

Malware Classes File Infectors (virus) All Classes of malware(File infectors, Spyware, Greyware, Randsomware, Root kits, Spambots, Hijacker, etc)

User Control N/A Full Control

Other Features • Ingress/Egress firewall• IPS/IDS sensors & warning systems• Data input/output control,

including portable devices

Behavior Based Protection

Heuristic Algorithms

Application Control /

User Management

Managed Endpoint SecurityProtection Against All Classes of Malware

Behavior Based Detection

Hook Installed in every process

Watches for suspiciousaction

Intercepts and evaluatesAPI calls

Keeps process statistics

Evaluates and Blocks/removes suspicious items

• Use rules to evaluate suspicious trends• Many to one signatures

• Catch all variants

• Sandboxing• Evaluate actions rather than files

• Find malware before it executes

You are only as strong as your weakest link

Window has detected that a problem exists between keyboard and chair.

Application Control & User Management

• Malware uses Social Engineering

• Reduce risk from user error

• Malware changes but behavior doesn’t

Protect Against All Classes of Malware

Full Malware Protection

Spyware

Greyware

Randsomware

Root kits

File infectors (virus)

Spambots

Hijacker

and more…

Behavior Based

User Control/Mgmnt

Managed Security Benefits

Protect Your Customers

• Modern Threats

• User Error

• Unprotected Endpoints

• Out of Date Endpoints

Show Your Value

• Continuously Audit

• Send Report To Your Customers

N-able Security ManagerBased on the Award Winning BitDefender

100% Protection in the May 2014

AV-comparatives test

N-able Security ManagerBased on Bitdefender’s® Award Winning Engine

Top 5 consumer antivirus software protection1 by market share2

1. “This is how well security packages protect porous XP systems” 28 August 2014.

Available at: http://www.av-test.org/en/news/news-single-view/this-is-how-well-security-packages-protect-porous-xp-systems/

2. “Antivirus and Threat Report January 2014” January 2014.Available at: https://www.opswat.com/about/media/reports/antivirus-january-2014

Security Manager: AV Defender

Bitdefender wins AV-TEST 2013

#1 in protection & performance1

Bitdefender aces AV-COMPARATIVES performance test2

Protection 6/6

Performance 6/6

Usability 6/6

1. “Bitdefender Wins AV-TEST #1 Spot in Protection and Performance”, 17 February 2014.

Available at: http://www.av-test.org/en/test-procedures/award/2013

2. “This is how well security packages protect porous XP systems” 28 August 2014.Available at: http://www.av-test.org/en/news/news-single-view/this-is-how-well-security-packages-protect-porous-xp-systems/

$70.00

Consumer Antivirus Pricing

1. Protection for your PCMicrosoft pricing., Accessed 22 Oct 2014.

Available at: http://windows.microsoft.com/en-CA/windows/security-essentials-download

2 Avast Pro Antivirus. pricing, Accessed 22 Oct 2014. Available at: http://www.avast.com/en-ca/pro-antivirus

3 AVG Internet Security 2015pricing, Accessed 22 Oct 2014. Available at: http://www.avg.com/ppc/ca-en/is_buy

4 ESET Smart Security. ESET pricing, Accessed 22 Oct 2014.

Available at: http://www.eset.com/us/store/smart-security/

5 Symantec pricing, Accessed 22 Oct 2014. Available at:

http://norton.symantec.com/norton/ps/3up_ca_en_navnis360_sym_3up.html?om_sem_cid=hho_sem_sy:ca:ggl:en:e|kw0000088753|26752847361|c&country=CA

$350.00

Start your 30-Day Free Trial

N-central® + Security Manager

Remote Management Made Simple

START MY FREE TRIAL

http://bit.ly/1neBB7w

Thank you!

Legal Information

The N-able Technologies and N-central trademarks are the exclusive property of N-able Technologies, Inc. and its affiliates, are registered with the U.S. Patent and Trademark Office and the Canadian Intellectual Property Office, and may be registered or pending registration in other countries. All other N-able trademarks, service marks, and logos may be common law marks, registered or pending registration in the United States, Canada, or in other countries. All other trademarks mentioned herein are used for identification purposes only and may be or are trademarks or registered trademarks of their respective companies.

Av is dead long live managed endpoint security

Technology

AAnnttiivviirruuss - Kaseyahelp.kaseya.com/WebHelp/EN/KAV/1040000/EN_KAVguide14.pdf · Antivirus (KAV) provides Kaspersky Antivirus endpoint security for managed machines. Antivirus

Kaspersky Threat Hunting - antivirus.lv · The Kaspersky Managed Protection service offers Kaspersky Endpoint Security and Kaspersky Anti Targeted Attack Platform users a fully managed

Ivanti Endpoint Manager, Endpoint Security for Endpoint

Enterprise Endpoint Protection - Performance Benchmarkseval.symantec.com/.../downloads/Passmark_Enterprise... · Enterprise Endpoint Protection Performance Benchmarks ... Endpoint

GravityZone Managed Endpoint Detection and Response Service · enables the MEDR service to cover software-deﬁ ned, hyperconverged and hybrid-cloud environments. Managed detection

Symantec™ Endpoint Protection 12.1 - Zonesmedia.zones.com › images › pdf › symantec-endpoint...Symantec™ Endpoint Protection 12.1.6 Data Sheet: Endpoint Security Overview

GravityZone Managed Endpoint Detection and Response Service · • Reduced time spent investigating root cause of threats to your environment GravityZone Ultra is a complete Endpoint

Kaseya Endpoint Securitycommunity.kaseya.com/cfs-filesystemfile.ashx/__key/...Kaseya Endpoint Security (KES) provides security protection for managed machines, using fully integrated

Coffee Talk: Protect Your Business with Managed Endpoint Security

Well Managed Systems - Endpoint Management and Mobility

Endpoint Security Agent Reference - Novell · The Endpoint Security Agent is the ZENworks Adaptive Agent module that is responsible for enforcing security policy settings on managed

vAnalytics™ Endpoint Monitoring Technical Deployment …...1.2.1 Automatic Endpoint Assignment from TMS Managed Endpoints vAnalytics can automatically include endpoints managed by

INFORMACIÓN SOBRE EL PRODUCTO G DATA MANAGED …€¦ · G DATA MANAGED ENDPOINT SECURITY INFORMACIÓN SOBRE EL PRODUCTO ... junto a los módulos antivirus, cortafuegos y antispam,

BT Managed Endpoint Security CrowdStrike Service · BT Managed Endpoint Security – CrowdStrike Service Schedule BTL_BTGS_BTMngdEndpntScrtySrvc - CrwdStrk_Sch_published_24Aug2020.docx

· Web viewdynamic endpoint endpoint globally unique identifier (GUID) GUID IDL Interface Definition Language (IDL) little-endian Managed Object Format (MOF) opnum remote procedure

download.bitdefender.com › resources › media › materials › ... · GravityZone Managed Endpoint Detection and Response Serviceenables the MEDR service to cover software-deﬁ

N C R MANAGED SERVICES - GoPoint · Managed Security Services ATM End Point Security NCR’s ATM EndPoint Security helps secure your ATM channel and access process reporting to satisfy

THE SECURE ENTERPRISE - Kaspersky Lab · precisely managed IT security. Kaspersky Lab’s enterprise-level endpoint security . solutions incorporate flexible control tools, data

Endpoint Protection Plus - naglotech.comnaglotech.com/pdf/endpoint-protection.pdf · Panda Security presents its simple and light endpoint security and productivity solution. Endpoint

Data Sheet: Endpoint Security Symantecâ„¢ Endpoint Protection