IBM X-Force 2012 Annual Trend and Risk Report

Transkript

1 IBM X-Force 2012 Annual Trend and Risk Report Carsten Dietrich Engineering Product Line Manager, Content Security Solutions

2 X-Force bildet die Basis für advanced security und threat research für das IBM Security Framework Die Mission der X-Force: Überwachung und Auswertung der sich schnell ändernden Angriffs- Landschaft Erforschung neuer Angriffs- Techniken und Entwicklung von Schutzvorkehrungen für die Herausforderungen von Morgen Schulung unserer Kunden u. der Öffentlichkeit X-Force 2012 Trend and Risk Report 2

3 Verteilte IBM Teams überwachen und analysieren die neusten Sicherheitsvorfälle weltweit Abdeckung 20,000+ Geräte unter Vertrag 3,700+ managed Kunden weltweit 13Mrd.+ bearbeitete Ereignisse pro Tag 133 überwachte Länder (MSS) 1,000+ Security relevante Patente Qualität 19 Mrd. Analysierte Webseiten u. Bilder 40 Mio. Spam & Phishing Attacken 64 K dokumentierte Schwachstellen Milliarden Einbruchsversuche täglich Millionen verschiedenen Malware Exemplare X-Force 2012 Trend and Risk Report 3

4 Was sehen wir? Die wichtigsten Ergebnisse des Trend Report 2012 Threats and Activity Operational Security 40% mehr Einbrüche (Datendiebstahl) in 2012 Raffinesse ist nicht immer eine Frage der Technologie Mehr SQL Injections, DDoS- und Phishing Attacken als in 2011 Mit Java so viele Systeme wie möglich infizieren Veröffentlichte Software Schwachstellen steigen in 2012 Schwachstellen in Web Applikationen steigen an XSS vulnerabilities: höchster je gemessener Stand bei 53% Plug-Ins für Content Management Systeme bieten ein leichtes Ziel Emerging Trends Soziale Netzwerke werden zunehmend für Spear-Phishing und das Sammeln von Informationen für Angriffe genutzt X-Force 2012 Trend and Risk Report 4

5 2011: The year of the targeted attack 2011 Sampling of Security Incidents by Attack Type, Time and Impact Conjecture of relative breach impact is based on publicly disclosed information regarding leaked records and financial losses Attack Type SQL Injection URL Tampering Spear Phishing 3 rd Party Software DDoS SecureID Trojan Software Unknown IT Security Marketing Services IT Security Size of circle estimates relative impact of breach in terms of cost to business Entertainment Consumer Electronics Defense Banking Consumer Electronics Defense Banking National Police Internet Services Central Govt Central Govt Consulting Entertainment Central Agriculture Government State Police Defense Central Government Police Central Central Government Government Entertainment State Police Telecommunic ations Consulting Consumer Electronics Financial Market Defense National Police IT Security Heavy Industry Insurance Internet Services Central Government Central Government Apparel Central Government Central Govt Central Government Consumer Electronics Services Services Government Consulting Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec Source: IBM X-Force Research 2011 Trend and Risk Report X-Force 2012 Trend and Risk Report 5

6 2012: Die Anzahl der Einbrüche explodiert! 2012 Sampling of Security Incidents by Attack Type, Time and Impact Conjecture of relative breach impact is based on publicly disclosed information regarding leaked records and financial losses Source: IBM X-Force Research 2012 Trend and Risk Report X-Force 2012 Trend and Risk Report 6

7 DDoS, SQL und Command Injection Angriffe X-Force 2012 Trend and Risk Report 7

8 Spear-Phishing mit Sozialen Netzwerken Spam Volumen ist rückläufig, aber Spams mit bösartigen Attachments steigen an! Scammers rotieren ihr Karusell der Ziele 2012 sind Soziale Netzwerke im Focus X-Force 2012 Trend and Risk Report 8

9 Robustheit von Botnetzen Wenn C&C-Server von Botnetzen ausgeschaltet werden, wird die Funktionalität schneller als jemals zuvor kompensiert. X-Force 2012 Trend and Risk Report 9

10 Anstieg veröffentlichter Schwachstellen in ,168 veröffentlichte Schwachstellen Ein Anstieg von 14% im Vergleich zu 2011 X-Force 2012 Trend and Risk Report 10

11 Schwachstellen in Web-Applikationen 14% Anstieg Anteil Cross-Site- Scripting 53% X-Force 2012 Trend and Risk Report 11

12 Content Management Systeme Angreifer wissen, dass CMS-Hersteller besser patchen verglichen mit kleineren Herstellern und Einzel-Entwicklern von Add-Ons und Plug-Ins X-Force 2012 Trend and Risk Report 12

13 Soziale Netzwerke und Informationsgewinnung 50% aller Webseiten haben Verbindungen zu Sozialen Netzwerken Moderne Spear- Phishings scheinen von Freunden oder Kollegen zu kommen X-Force 2012 Trend and Risk Report 13

14 Get Engaged with IBM X-Force Research and Development Follow us Download X-Force security trend & risk reports Subscribe to X-Force alerts at or X-Force Security Insights blog at Key Seller Contacts Robert Freeman, Manager XF Advanced Security Research Leslie Horacek, XF Threat Response Doron Shiloach, XF Product Manager Michael Hamelin, XF Security Architect Clinton McFadden, XF Sr. Operations Mgr. Kevin Skapinetz, Program Director Product Strategy Jason Brewer, Manager XF Development Steve Seidenberg, Manager XF Security Content Ted Bannon, Manager XF Quality Assurance Brad Sherrill, Manager XF Data Intelligence Ralf Iffert, Mgr, XF Content Security Carsten Dietrich, Product Line Mgr, Content Security X-Force 2012 Trend and Risk Report 14

15 Thank you! X-Force 2012 Trend and Risk Report 15

16 ibm.com/security Copyright IBM Corporation All rights reserved. The information contained in these materials is provided for informational purposes only, and is provided AS IS without warranty of any kind, express or implied. IBM shall not be responsible for any damages arising out of the use of, or otherwise related to, these materials. Nothing contained in these materials is intended to, nor shall have the effect of, creating any warranties or representations from IBM or its suppliers or licensors, or altering the terms and conditions of the applicable license agreement governing the use of IBM software. References in these materials to IBM products, programs, or services do not imply that they will be available in all countries in which IBM operates. Product release dates and/or capabilities referenced in these materials may change at any time at IBM s sole discretion based on market opportunities or other factors, and are not intended to be a commitment to future product or feature availability in any way. IBM, the IBM logo, and other IBM products and services are trademarks of the International Business Machines Corporation, in the United States, other countries or both. Other company, product, or service names may be trademarks or service marks of others. X-Force 2012 Trend and Risk Report 16