Retail Network Security Events

WHITE HAT LAB REPORT BROUGHT TO YOU BY Nnuspire networks A DAY IN THE LIFE OF A RETAIL NETWORK - SECURITY EVENTS NUSPIRE NETWORKS SAMPLED OVER 1000 END LOCATIONS TO SHOW A DAILY SNAPSHOT ON NETWORK SECURITY IN A TYPICAL DAY, A RETAIL NETWORK PROTECTED BY A 153 MANAGED SECURITY SERVICE SEES 153 VIRUSES BLOCKED AND 84 MALICIOUS SPAM S84M EMAILS BLOCKED INTRUSION PREVENTION SYSTEMS (IPS) AND INTRUSION DETECTION SYSTEMS (IDS) STOP WOULD BE HACKERS AND MALICIOUS INTRUDERS FROM GAINING ACCESS TO RETAIL NETWORKS. IN ONE DAY, A TYPICAL PROTECTED RETAIL NETWORK THWARTS OVER 50 OF THESE TYPES OF THREATS SHOWN IN THE CATEGORIES BELOW 16 WEB URL Handler Buffers 14 SQL Injection Attemps 9 WEB HTTР 6 Denial of Service Attempt 3 Cross Site Scripting Attempt .2 Misc Exploit 2 WEB Buffer Overflow 2 WEB Server Login Attempt 1 WEB Attack PHP 1 WEB Remote File Execution 1 Shell Code NUSPIRE FOUND THAT 1 IN 20 RETAILERS AS NEW CUSTOMERS WITH AN EXISTING UTM WERE INFECTED WITH A BOTNET THAT WAS UTILIZING UP TO 60% OF THEIR BANDWIDTH WITHOUT BEING DISCOVERED UNTIL NUSPIRE SECURITY EXPERTS FOUND AND NEUTRALIZED IT WHAT A FIREWALL/UTM CANNOT DO ALONE IS CORRELATIONS IN ONE MONTH, THE NUSPIRE SOC INVESTIGATED 4,777,610 SEVERE ALERTS GENERATED FROM THE NUSPIRE SIEM ENGINE AND OUT OF THESE, ONLY 29PEN PERCENT OF THREATS WERE CAUGHT BY FIREWALL IDS/IPS SYSTEMS BUT THE OTHER 71 PERCENT WERE CAUGHT BY THE NUSPIRE SIEM CORRELATION ENGINE WHICH IS MONITORED IN REAL TIME WITH CUSTOM RULES WRITTEN BY NUSPIRE SECURITY EXPERTS COMPANY EMPLOYEE BROWSING HABITS CAN HAVE A SIGNIFICANT IMPACT ON PRODUCTIVITY AND BANDWIDTH UTILIZATION. A MANAGED SERVICE WITH CONTENT FILTERING INCREASES EMPLOYEE PRODUCTIVITY, NETWORK BANDWIDTH AND BLOCKS MALICIOUS CONTENT FROM WEBSITES. BELOW SHOWS A TYPICAL RETAIL OUTLET BLOCKED CONTENT DURING ONE DAY. Advertising 274 File Sharing and Storage 143 Malicious Websites 84 Social Networking 40 Games 25 Instant Messaging 16° Web Hosting 15• Unrated 13. Internet Radio/TV 10 Dating 9 Adult Materials 7 Freeware Software Downloads 4 WITH MOST RETAILERS NEEDING TO BE IN COMPLIANCE WITH PAYMENT CARD INDUSTRY (PCI) DATA SECURITY STANDARDS, IMPLEMENTING AND DEPLOYING A MANAGED SECURITY SERVICE WITH SECURITY EXPERTS MONITORING THREATS 24x7x365 IS IMPORTANT TO THE INTEGRITY OF SENSITIVE CUSTOMER DATA CREDIT CARD 1234 4568 9067 VALID 00/00 FROM 00/00 EXPIRES CARDHOLDER NAME IF YOU ARE NOT MANAGING AND MONITORING YOUR NETWORK WITH THE PROPER SIEM TOOLS, CORRELATION AND HUMAN ANALYTICS BY SECURITY EXPERTS WITH REAL -TIME RESPONSE, NUSPIRE CAN HELP nuspire networks *Data represented in this document taken from combined global managed security services clients over a 30 day period www.nuspire.com