Leveraging Security Intelligence to Win the Information Security Arms Race

The complexity and difficulty of securing enterprises only grows with the passage of time. However, with the right information, organizations can significantly reduce their attack surface, substantially mitigate risks, and prevent the losses and damages associated with successful attacks. To that end, we examined the areas that significantly contributed to the growing attack surface in 2013. Come learn what those are and what – beyond standard best practices – you can do today.

Next-generation (NG) firewalls, with features such as deep packet inspection, intrusion detection, application identification, and granular control, are important weapons in the battle against hacking and malware. Mobile applications have taken the overall scheme of corporate IT, and NG firewalls enable organizations to incorporate full-stack inspection to support intrusion prevention. This white paper explores the reasons for implementing NG firewalls and lays out a path to success for overburdened IT organizations.

Think your current approach to network security is lacking the next generation approach? You might be right! Join us for this webinar where Chris Rodriquez, Senior Analyst at Frost and Sullivan, will share current best practices in network security. He’ll cover approaches to network security hardware and software that will help your organization plan for the evolving threat landscape. Marco Ginocchio, Director of Regional Product Management from HP, will discuss how some of the next generation approaches to network security are being actualized in HP TippingPoint products.

HP TippingPoint DVLabs is on your side with over 8,600 filters right out of the box. These filters are focused on vulnerability and blocking all potential exploits on your network. But what if you need custom filter for your network? Watch Steve Povolny, manager of the Digital Vaccine team at HP TippingPoint, share best practices on how to follow the research, develop the filter, and test the performance with DV Toolkit. HP TippingPoint DVLabs allows organizations to tailor their network security strategies to even the score over the adversary.

Watch this video to hear what John Kindervag from Forrester Research has to say about next-generation security.

Threats are constantly mutating. Bad actors are everywhere. You could be attacked at any time from any direction. No longer are cyber attacks limited to external "hackers." All of these things makes the security professionals job much harder. To properly protect your organizations digital assets, you must transform your organization so that you can protect against all types of threats. By leveraging the concepts of Forrester's Zero Trust Network, you can build a secure network that you know is robust, agile, and able to meet the challenges of mutating threats. We call this "Knowledge-based Security". By leveraging the information, visibility, and proactive protections provided by Zero Trust, you can have the knowledge that you are providing your organization with state of the art protection.

Additionally, you’ll hear from HP’s Senior Director of Network Security Product Management, Anthony Woolf, about how HP is providing zero-trust related capabilities through the HP TippingPoint IPS and NGFW devices.

Quantifying which DNS hosts are unknown or infected is a complex undertaking. Building a Markov Model allows organizations to create data driven decisions based on calculated benchmarks to eliminate the guessing and diagnose infected hosts. Attend this webinar and see firsthand how the DVLabs organization custom builds a DNS Markov Model that allows for easier detection that will help you understand what is infected and what isn’t.

2013 Cost of Cyber Crime Study: Australia & Japan

Join us for the 2013 results presentation of the second annual Cost of Cyber Crime study for Australia and Japan. Conducted by Ponemon Institute and sponsored by HP Enterprise Security, a total of 64 Australian and Japanese organizations participated. According to the findings, cyber attacks increased 12 percent in Australia and 32 percent in Japan. The costs associated with this increase in Australia were $772,903 and ¥265 million in Japan. “Findings from the report also show that each week Australian and Japanese organizations experienced on average 1.4 successful attacks per company”

2013 Cost of Cyber Crime Study: UK, Germany & France

Join us for the 2013 results presentation of the second annual Cost of Cyber Crime study for the United Kingdom and Germany. For the first time, the research was conducted in France. Conducted by Ponemon Institute and sponsored by HP Enterprise Security, a total of 110 UK, German and French organizations participated. According to the findings, cyber attacks increased 16 percent in the UK and 21 percent in Germany. The costs associated with this increase in the UK and Germany were £904,886 and €830,169, respectively. For the first time, it was determined that the average cost of a cyber attack in France was €3.89 million. Findings from the report also show that each week UK and German organizations experienced on average 1.3 successful attacks per company. French organizations experienced an average of 1 cyber attack per company.

Join us for the 2013 results presentation of the 4th Annual Cost of Cyber Crime Study, conducted by Ponemon Institute and sponsored by HP Enterprise Security. This study, based on a benchmark sample of U.S. organizations, shows that cyber attacks not only increased 12 percent last year, the costs associated with those attacks increased by an average of 26 percent or $2.6 million per organization. Findings from the report also show that each week, an organization can expect two of the many cyber attacks launched against it to succeed.

Join us for this important webinar and learn how:
• All industries and all sizes of organizations fall victim to cyber crime, but to different degrees.
• Denial of service, malicious insiders and web-based attacks comprise the most costly crimes.
• Attacks can be mitigated by SIEM, enterprise governance, application security testing and other prevention-focused strategies and technologies.

Changing threats, business processes and technology call for a new look at network security and how it interacts with our intrusion prevention systems. But just what are the next-generation intrusion prevention systems we need to meet those threats, and what do your peers think should be in them?

Join us for this Webcast, in which we unveil the results of our network security survey, to learn:

•How you compare with your peers in management support for network security
•Where you stand in IPS deployment vs. your peers
•What features your peers would like to see in next generation IPS
•Which elements, such as firewalls, routers, switches and clients they would like to see as part of a next generation fabric-based IPS.
Register for this webcast and be among the first to receive access to a complimentary whitepaper on the same subject developed by Rob Vandenbrink.

In the new generation of cyber defense, security intelligence becomes a key element. Recent technology advances provide the foundation for a new type of threat intelligence sharing platform to organize, collaborate, and manage risk more effectively. This sharing platform makes your security program more effective with actionable protection.

What grade would you give your company on using vulnerability research to protect your organization from new security threats?
If not an A+, learn best practices from Frost and Sullivan’s Chris Rodriguez, senior industry analyst on network security.

In this webinar, we’ll discuss current threats that have been mitigated by leading vulnerability research and share how timely vulnerability research can help your organization prepare.

Organizations are struggling with new and more sophisticated threats, borderless networks, increased bandwidth requirements and more applications spread throughout the entire data center. A wealth of vendors are claiming to offer “next generation” security capabilities to address every security need under the sun. Cut through the nomenclature to learn what “next generation” really means and how it can actually help you meet today’s challenges head on and ignore all the hype.

Compliance and security are better together and there are tools and resources that can be combined to achieve both. Learn the top 10 tips - such as continuous monitoring, assessing the controls, and cost-effective audit logs - to understand and implement best practices of compliance and security together.

Network security is not just about eliminating bad traffic, it is also about making sure applications and critical data are always available to the right audience at the right time. The right network security architecture can provide security for physical assets, but also extend protection for virtual and cloud computing infrastructures without impacting performance. In fact, unlike in the past, a network security product should never be considered a bottleneck due to deep packet inspection, but should actually be capable of improving bandwidth and performance.

About the Presenter:
Sanjay Raja, Director of Product Marketing for HP TippingPoint, is responsible for marketing of HP TippingPoint’s Network and Cloud Security solutions. He has over 12 years of experience in various Product Marketing, Product Management, and Alliances roles primarily in IT Security. He has been in the IT industry for the last 18 years with experience in Security, Networking, Servers and Storage and Network and Application Performance Testing. In addition he has authored several papers and presented at various industry events on security, compliance and testing. Prior to HP he has worked at Cabletron Systems, 3Com, Nexsi Systems, Spirent Communications, Top Layer Networks, Symantec and most recently Crossbeam Systems. Sanjay currently holds a B.S.EE and MBA from Worcester Polytechnic Institute.

Social networking for most of us is becoming wrapped into our DNA. This is especially important for the next generation workforce. Additionally, the employees today and those of tomorrow will expect the capability to blog and social network with corporate assets and corporate bandwidth. Additionally, these technologies are being widely used for corporate marketing and communication. That is why it's important to look at all aspects of securing your infrastructure and more importantly, the people that drive your organization today. This involves educating people, corporate process and the right security technologies. The following session will cover the benefits and the security risks inherit with social networking across all business verticals. Additionally, the author will provide a use case analysis of information that is gathered via web beacons that harvest information unknowing to the user.

Vulnerabilities that exist in today’s commercial and custom software are the primary target for attackers. The most severe of these vulnerabilities are those that can result in remote code execution – that is an attacker can take complete control of another system for the purposes of stealing information, defacing property or just causing trouble. In this session, Brian Gorenc, will demonstrate how to analyze a vulnerability and the steps required to weaponize it. Centering on a vulnerability in a Microsoft application, the demo will show you how an attacker can quickly move from proof-of-concept to remote code execution. The discussion will also include thoughts on mitigation strategies for reducing risk.

Enterprise organizations have been under security attacks for the past decade, but security events in 2011 have created a ripple effect that will be felt for years to come and will actually start to shift the way we view security. This webcast will highlight the latest threat trends and risks from the new 2011 Cyber Risk Report from HP Enterprise Security and will cover:

• Why a decline in vulnerabilities disclosed may lead to a false sense of security
• How changing attack motivations are increasing security risks
• What the biggest risks to the enterprise were in 2011