Microsoft Üzleti Megoldások Konferencia 2005

“ Securing the Information Workplace” Paolo Cavalsassi paolo@sybari.com

Cost of Security Threats A study by the Corporate IT Forum - an organization of IT professionals from some of the U.K.'s largest companies - Estimates that each incident of malicious code in 2003 cost organizations in work hours and related costs: $213,000 Average, Per Company, Per Incident.

World Antivirus Market

Cost of Security Threats E-mail Traffic Worldwide e-mail traffic increased to 76.8 billion messages per day. Corporate e-mails accounted for 83% of this traffic Growing Amount of Spam 45 % of all e-mail is defined as spam Cost to business worldwide: $20 billion a year in lost productivity and technology expenses

Total Worldwide Email Messages/Day 2003 Spam growth Worldwide Spam Growth Forecast 2004-2008 Total Worldwide Email Messages/Day 2003 Total Spam Messages 2003 32 15 45% 2004 68 35 52% 2005 86 53 62% 2006 109 73 67% 2007 143 102 71% 2008 191 142 74%

Spam growth

Relative Spending: Security SW & Services in CEE

Hybrid Attacks Viruses get to inboxes and get opened using spam techniques Multiple attack points Phishers, spammers, virus writers

Phishing

Phishing

Phishing

Code Red v2: 359,000 hosts in 14 hours Rapid Propagation Code Red v2: 359,000 hosts in 14 hours Warhol Worm: 1,000,000 hosts in 15 minutes Flash Worm: 1,000,000 hosts in 30 seconds

Best Practices Deploy a multi-layered infrastructure to effectively block malicious code attacks and provide defense in depth Eliminate single point of failure w/multiple scan engines Multiple Points of Protection Protect all messaging and collaboration applications Deploy file and content filtering on all messaging & collaboration servers for consistent policy management and compliance Lock down Instant Messaging solutions to ensure productivity while reducing risks Educate employees on the risks of blended threats Employ management solution for central deployment, updates, reporting and alerts

Multiple scan engine management Multiple points of scanning

Messaging and Collaboration Security Central Management Antivirus Antispam

Where to find more information www.sybari.com www.antiphising.org How to achieve 99,99% User Mailbox Avaibility http://www.microsoft.com/downloads/details.aspx?familyid=a8cf167d-e23c-4a14-86cb02d19ee3b8fe&displaylang=en#filelist Sybari is one of the reasons http://www.microsoft.com/technet/itsolutions/msit/security/mssecbp.mspx Go to “Microsoft IT Risks and Tactics” and then to “Messaging Hygiene”

Thank you for your attention! Paolo Cavalsassi Paolo@Sybari.com