Examining Dark Web Trade - Your Cybersecurity Blind Spot

Post on 15-Apr-2017

861 views 1 download

Transcript of Examining Dark Web Trade - Your Cybersecurity Blind Spot

Examining Dark Web Trade – Your Cybersecurity Blindspot

Today’s Speakers

2

Jason PolancichFounder & Chief ArchitectSurfWatch Labs

Adam MeyerChief Security StrategistSurfWatch Labs

What is the Dark Web?

3

4

Anonymous Overlays

There are Many Dark Web Threats to Your Business

• Hacking for Hire

• PII/Identity Info/Credit Cards

• Cyber Exploits for Sale

• Vulnerabilities for Sale

• Stolen IP, Designs & Counterfeits

• Spam & Phishing Campaigns for Hire

• Doxxing & Investigation for Hire

• Hacktivist Targeting Forums

• Insider Threat for Hire

5

Compromised Accounts

6

Card Skimmers

7

What’s at Stake and Why You Should Care

• Brand and Reputation

• Customer Loyalty

• Intellectual Property

• Legal Defenses

• Sales

• IT Baselines

• Cybersecurity Strategy

Direct Impact on Your Business and Bottom Line!

8

Top Targets• Big Banks• Small Banks/Credit Unions• Pharm• Apparel• Hospitality

Market is constantly expanding!

9

• IT/Software• Online Entertainment• Publishing• Governments

(Muni, State, Federal)

Why Isn’t Dark Web Intelligence More Common in Cybersecurity Programs?

Where Do You Begin???• Cyber intel immaturity

• Lack of Dark Web understanding

• How to link intel to tactical cyber defense

• Dynamic and dangerous

• What are the legal lines?

10

Vulnerabilities (vBulletin)

11

Carding (Capital One)

12

0-Days (Wordpress)

13

PII/Identities

14

Accounts (Wyndham)

15

Dark Web Intelligence Can Improve Your Cyber Defense

• Average breach detection time is more than 200 days!

• Shift to prevention-based focus:

• Understand attack execution methods based on cyber trends related to your business profile

• Predict potential targeting of your systems and information

16

What are the Best Ways to Leverage Dark Web Intel?

1. Services-based Investigations/Forensics

2. HUMINT Persona-Driven Collection

3. “Deep Sea Harvesting” and databasing of Available Dark Web Data

4. All of the above

17

Q&A and Additional SurfWatch Labs Resources

SurfWatch Dark Web Intel Service: www.surfwatchlabs.com/dark-web-intelligence

Sample Dark Web Intelligence Report:info.surfwatchlabs.com/dark-web-report

Personal SurfWatch Consultation:info.surfwatchlabs.com/dark-web-service-consultation

Shine a Light on Your Dark Web Risks

18

Thank You!

www.surfwatchlabs.comFollow us at: