1. Copyright 2012 Trend Micro Inc. Raimund Genes, CTO Innovation In Cloud Security

2. Copyright 2012 Trend Micro Inc.

3. Overwhelmed by Volume of New Threats 2 Source: AV-Test.org

4. Copyright 2012 Trend Micro Inc. File Web E-Mail 2

5. Copyright 2012 Trend Micro Inc. Smart Protection Network File Web / URL Email Domain IP File Reputation Service Email Reputation Service Customer Smart Protection Community Intelligence (Feedback loop) Web Reputation Service Sourcing Processing & Analysis Validate & Create Solution Quality Assurance Solution Distribution Solution Adoption SPN Correlation

6. Copyright 2012 Trend Micro Inc. 2

7. Correlation A compromised web site One click in a link. Fake news by email. TROJ_CHOST.E A fake video A lot can happen in a minute EMAIL REPUTATION WEB REPUTATION FILE REPUTATION

8. Copyright 2012 Trend Micro Inc. Backend Operations Data Feeds CorrelationCorrelation SystemsSystems Monitor & Trigger

9. Copyright 2012 Trend Micro Inc. Big Data!

10. Copyright 2012 Trend Micro Inc. ER S Spam Samples 101011101011 101011101010 101010101101 011010100101 Feedback Data Query Logs Storage Clusters VM Clusters Reputation Data New Threat Discovery Email Reputation

11. Copyright 2012 Trend Micro Inc. SPN Infrastructure Reputation Servers Reputation Data Query Logs 1 101 101011 00101010 0111001011 100101011010 101001 010100 110101 010101 010100 110101 011010 101010 101011 101010 101101 Feedback Data Costumers Honeypot Spam Samples Pattern Query 50M /day 200M /day 1TB /day Email Reputation

12. Copyright 2012 Trend Micro Inc. Daily Service Capacity Solution DeliveryData AnalyticsData Sourcing 50M Spam samples 180,000 Suspicious IPs 806TB Raw data 8,050 Signatures 668,000 Cloud entries 130,000 New IP listing 1B IP address reputation 278GB Sampling pool 200M User’s feedback 1TB Mail traffic logs Email Reputation

13. Copyright 2012 Trend Micro Inc. Web Reputation

14. Copyright 2012 Trend Micro Inc. Web Reputation Statistics Data Sourcing ￭ 42 Sources (16-19 in Regularity) ￭ 11,000 Unique Feedbacks ￭ 8~10 Billion URL Queries Data Analyses ￭ 1 Billion URLs Analyzed ￭ 7.2 TB raw and condensed data for correlations and mining Solution Delivery ￭ 52,580,000 static patterns ￭ 20,000 new patterns ￭ 15~20 million infections blocked

15. Copyright 2012 Trend Micro Inc. File Reputation

16. Copyright 2012 Trend Micro Inc.

17. + GRID and MARS Goodware Ressource and Information Database Mobile Application Reputation Service

18. Copyright 2012 Trend Micro Inc. GRID

19. Copyright 2012 Trend Micro Inc.

20. How and when to retire Data?

21. Copyright 2012 Trend Micro Inc.