F5, Inc. · NASDAQ:FFIV
F5 — Technical Presentation (August 2014)
33 slides from F5's technical presentation, August 2014
Slide 1: Protecting Against Online Fraud
Protecting Against Online Fraud F5 EMEA Webinar August 2014
Slide 2: Agenda
Agenda • Fraud threat trends and business challenges • Web fraud protection • Mobile fraud protection • Security operations center • Example architecture © F5 Networks, Inc. 2
Slide 3: Everything Evolves
Everything Evolves Anti-Fraud, Network SSL Application Access DDoS DNS Firewall Protection Anti-Malware, Security Control Security Anti-Phishing © F5 Networks, Inc. 3
Slide 4: Fraud and Malware Remains a Challenge
Fraud and Malware Remains a Challenge Malware/Fraud Statistics Phishing Attacks 15% increase in malware - McAfee threat report 2013 196 Million Unique 70% of malware malware samples in 2013 targeting financial 37.3 million users around the - McAfee threat report 2013 services companies world were su
Slide 5: Malware Threat Landscape – Growth and Targets
Malware Threat Landscape – Growth and Targets Total Malware Samples in the McAfee Labs Database 25 % of real-world malware is Malware caught by anti-virus 50 % of malware code is logic to bypass defenses 79 % existing malware strains are Trojans 82 % of institutions learned about fraud incidents fro
Slide 6: The Increasing Complexity of Securing Users to Apps
The Increasing Complexity of Securing Users to Apps © F5 Networks, Inc. 6
Slide 7: © F5 Networks, Inc.
©OWPODOO 0 O08 0OZ000F0E00 DO®#0OOOe#0@s8s02#O0COz0eB0 H®® Joe 0 ©O20e080s0e0% noe Joe) OnveOs =OG0R es) OO0080 008 0 ©0z00020800 @QUOoW0 ©0080 €0#0cC0z080 OBO 080 OOROe0sOs0e0*
Slide 8: © F5 Networks, Inc.
©OWOOOO 008 00OZ000FO0SO0S DO®™O@®O0Se80@s08O0CO OBO O®® 0000 ©@0o0e080s0e0s OOO ®© 008 0©e@0*O208020 ©QuoneTe Og 0 O=C @OFOS0° ©OOO8e 0 0o800e #0CO0z=0B TOO @enDeat T@© 0O0 Ognoeedao ©oO 1OO@C @Oosoeox* @O*O=08020 e) 0 O©DZ0O0Z08E0° QUOMD@eOoooe DS #0 0O=0eB( Ow< 0O00@020@e0B80s0e0*
Slide 9: Traditional Malware Solutions Focus on the Enterprise
Traditional Malware Solutions Focus on the Enterprise Rising Security Enterprise Copied Pages Threats/Attacks and Phishing Enterprise Anti-Malware Hacktivism [Some protection] Malware Firewall DMZ Internet State Sponsored Attacks Database Applications DMZ [Unprotected] Attacker © F5 Networks, Inc. 9
Slide 10: Securing Against Banking Fraud Can Be Complex
Securing Against Banking Fraud Can Be Complex Ownership Browser the weakest link Customers expect the banks to secure Trojans, MitB attack the client against all forms of fraud regardless of browser or device where the bank devices used or actions taken has no security footprint Changing threats Att
Slide 11: Web Fraud Protection
Web Fraud Protection
Slide 12: Protecting Against Fraud, Phishing, and Malware
Protecting Against Fraud, Phishing, and Malware User Transaction Site Visit Site Log In Transactions Navigation Execution • Device ID • Credential • Behavioral • Automatic • Customer • Generic protection and click transaction fraud alerts malware • Targeted analysis • Transaction detection malware i
Slide 13: Anti-Fraud, Anti-Phishing, Anti-Malware
Anti-Fraud, Anti-Phishing, Anti-Malware Best practices for anti-fraud, -phishing, and -malware services Prevent Fraud Protect Online On All Devices Full Transparency In Real Time Security Operations User Center Targeted malware, Clientless solution, Desktop, tablets, and No software or user Alerts a
Slide 14: Anti-Fraud Solution: Key Functionality Needed
Anti-Fraud Solution: Key Functionality Needed Fraud Detection Transaction Security Operations and Protections Protection Research Center • Detect targeted malware, Bots, • Perform real-time transaction • Provide 24x7 security reports and MitM, MitB, Zero-day, credential analysis alerts grabbers, ses
Slide 15: Generic and Targeted Malware Detection
Generic and Targeted Malware Detection • Identify compromised sessions, malicious scripts, phishing attacks, and malware • Including MitM, MitB, Bots, and fraudulent transactions with real-time analysis • Analyse browser for traces of common malware (Zeus, Citadel, Carberp, etc.) • Detect browser re
Slide 16: Advanced Application-Layer Encryption
Advanced Application-Layer Encryption Secure the credentials and other valuable data submitted on webforms • Encrypt any sensitive information at the message level • Encrypt then submitt user credentials and information • Decrypt data using web fraud protection solution • Render intercepted informat
Slide 17: Automatic Transaction Detection
Automatic Transaction Detection 1. Analyse the way users interact with browser 2. Analyse the way users interact with website 3. Conduct track site navigation 4. Trigger alerts upon detecting non-human behavior MY BANK.COM My Bank.com • Gather client details related to the transaction • Run a series
Slide 18: Advanced Phishing Attack Detection and Prevention
Advanced Phishing Attack Detection and Prevention Identify phishing threats early on and stop attacks before emails are sent • Alert of extensive site copying or scanning 4. Test spoofed site 1. Copy website • Alert on uploads to a hosting server or company Web Application • Alert upon login and tes
Slide 19: Key Features of a Web Fraud Protection Solution
Key Features of a Web Fraud Protection Solution Provide transparent Simplify product Protect users data Protect all customers anti-fraud solution rollout in use on all devices Combine fraud detection Ensure compliance Prevent phishing and protection attacks © F5 Networks, Inc. 19
Slide 20: Mobile Fraud Protection
Mobile Fraud Protection
Slide 21: Fraud Protection for Mobile Device Users
Fraud Protection for Mobile Device Users Fraud Detection In App Security Operations and Protections Encryption Research Center • Detect targeted malware Bots, • Encrypt user sensitive data in the • Provide 24x7 security reports and MitM, MitB, Zero-day, SMS app (e.g. user name, passwords, alerts gra
Slide 22: Fraud Protection for Mobile Users: Key Functionality
Fraud Protection for Mobile Users: Key Functionality Identify malware and MitM attacks in real time • Detect mobile site phishing and pharming • Provide advanced mobile malware detection capabilities • Execute various DNS checks and SSL certificate verification • Perform app signature checks to iden
Slide 23: Real-Time Mobile Transaction Protection
Real-Time Mobile Transaction Protection • Capture key information on each transaction • Associate each transaction with unique device id • Provide clientless, application-level encryption on top of standard SSL encryption • Use transparent virtual key-pad Device ID Clicks Events Timing Positions Tra
Slide 24: Key Features of a Mobile Fraud Protection Solution
Key Features of a Mobile Fraud Protection Solution Secure against targeted Minimise product Protect all mobile and generic malware rollout device users Render intercepted Ensure regulatory Provide immediate information useless compliance reduction in fraud loss © F5 Networks, Inc. 24
Slide 25: Security Operations Center
Security Operations Center
Slide 26: Security Operations Center (SOC)
Security Operations Center (SOC) • Leverage a 24x7x365 fraud analysis team that extends your security team • Research and investigate new global fraud technology and schemes • Provide detailed incident reports • Offer continuous web fraud component checks • Send real-time alerts by phone, SMS, and e
Slide 27: Cyber Intelligence
Cyber Intelligence Always on cyber research and analysis • Source information from a variety of resources • Analyse malware files and research drop zones • Provide quarterly dedicated reports • Deliver the right information • Identify attackers, command & control, drop zones, mule accounts, compromi
Slide 28: Phishing Site Take-Down Service
Phishing Site Take-Down Service Quickly identify and shut down brand abuse websites MONITORING AND RESPONSE TEAM • Complete attack assessment and post-partum attack report • Leverage relationships with ISPs, anti-phishing groups, and key international agencies • Offer malicious site take-down in min
Slide 29: Key Benefits of Using a Security Operations Center
Key Benefits of Using a Security Operations Center Provide 24x7 expert Integrate with SIEM and risk Turn on services security watch management systems immediately Offer immediate phishing Provide up-to-date threat Reduce fraud loss site shutdown intelligence © F5 Networks, Inc. 29
Slide 30: Example Architecture
Example Architecture
Slide 31: Example of a Web Fraud Protection Architecture
Example of a Web Fraud Protection Architecture Local alert server Online Customers and/or SIEM A Man-in-the- Browser Attacks Copied Pages and Phishing Web Fraud Protection Online Customers B Network Application Firewall C Security Operations Center Account Automated Amount Transactions and Transfer
Slide 32: Anti-Fraud, Anti-Phishing, Anti-Malware
Anti-Fraud, Anti-Phishing, Anti-Malware Prevent Fraud Protect Online On All Devices Full Transparency In Real Time Security Operations User Center © F5 Networks, Inc. 32
Slide 33: Solutions for an Application World.
Solutions for an Application World.