El Informe Anual de Seguridad de Cisco 2016 publicado hoy y que examina la información sobre amenazas y tendencias de seguridad cibernética, revela que sólo el 45 por ciento de las organizaciones de todo el mundo confían en su postura de seguridad mientras los atacantes lanzan campañas más sofisticadas, audaces y resistentes.

1. January 2016
Cisco 2016
Annual Security Report
Rafael Chavez
Cisco Mexico
Security Sales Manager

2. The Rise of Digitization is Upon Us
2015 2014 2013

3. 16 billion web requests a day
500 billion emails a day
In aggregate, block almost 20 billion threats per day
• More than 1.1 million unique malware samples daily
18.5 billion AMP queries
A View Across Cisco’s Global Telemetry

4. Over 2400
Respondents
• CSOs 45%
SecOps 55%
• Large Enterprise 13%
Enterprise 38%
Midmarket 49%
Cisco’s 2015 Security Capabilities Benchmark Study
Conducted
over the
Summer of 2015
Study Included
12 Countries
US
Mexico
Brazil
UK
France
Germany
Italy
Russia
India
Australia
China
Japan

5. Security Concerns Weigh on the Minds of Executives
Of Executives Very Concerned
About Security
Agreed More Information
Will Be Expected
48%
92%
Much More Concerned
Than 3 Years Ago
41%

6. Direct Attacks Generate Big Profits
More efficient and more lucrative

7. DNS: Auld Acquaintance Be Forgot
91.3%of malware uses DNS
68%of organizations
don’t monitor it
A blind spot for attackers to gain command and control, exfiltrate data, and redirect traffic

8. Constraints: Budget, Compatibility, and Certification
Security teams may be limited in their ability to carry out their plans

9. Maturity Levels – Cisco Security Report 2015

10. Current Threat Landscape
• Attackers and attacks continue
to be effective
• Defender concern
spurring action
• Regions respond to uncertain
Internet governance
• Fragmented response inhibits
an effective defense.

11. Industrialization of Cybercrime
Inside the Attacks

12. Professional Attack Infrastructure
Designed to evade and reconstitute

13. Browser Infections Persist
More than
85%of the companies studied
were affected each month

14. Confidence is declining, but awareness is driving action
Inside the Defenses

15. Mixed Confidence in Defense Capabilities
59%confident in having the
latest technology
51%have strong confidence in
ability to detect a security
weakness in advance
54%have strong confidence
in ability to defend
against attacks
45%have strong confidence
in ability to scope and
contain an attack
54%have strong confidence in
ability to verify an attack
56%review security policies
on a regular basis
-5% +0% -4%
-1% +0% +0%

16. Inherent Risk in the Infrastructure
of devices surveyed across the
Internet were running known
vulnerabilities with an average
of 26 each
of devices surveyed across the
Internet were End of Service
of devices surveyed across the
Internet were End of Life
92%
31%
5%

17. Security Awareness and Training
Formal Written Policies
Outsource Audit and Consulting
Outsource Incident Response
Outsource Threat Intelligence
Defenders are Responding
More organizations are taking actions to become more prepared for what’s going to happen.
90%
66%
52%
42%
39%
+1%
+7%
+1%
+7%
N/A

18. Encrypted Traffic: A Sign of the Times
Individual Privacy Government Compliance
Organization Security
Encrypted Traffic is Increasing
It represents over 50% of bytes transferred
https://
The growing trend of web encryption creates false sense of security and blind spots for defenders

19. Collaboration is Critical
Actionable collaboration is needed
between people, processes, and
technology, and on the back-end
infrastructure that attackers are using.
Processes
People
Technology

20. Trust, But Verify
Technology vendors need to demonstrate trustworthiness by:
Creating a
Security-Aware
Culture
Providing Rapid
Remediation
Responding to
Breaches
Quickly
Following
Policies and
Processes
Building
Security Into
Their Solutions

21. 1. Richer network and security architecture needed
2. Best-in-class technology alone cannot deal with threat landscape
3. Integrated threat defense can converge on encrypted malicious activities
4. Open APIs are crucial
5. Requires less gear and software to install and manage
6. Automation and coordination aspects help to reduce TTD, containment,
and remediation
Six Tenets of an Integrated Threat Defense

22. 2016 Annual Security Report
Attackers are tapping into
legitimate resources, becoming
adept at deploying hard-to-detect
and highly profitable campaigns
Defenders confidence is
declining, but awareness
is driving action to
deploy new strategies
Collaboration is needed to
combat today’s innovative and
persistent attacks and develop
architecture for tomorrow

23. Thank You