© All Rights Reserved. Mining Big Data for Fun, Fraud and Profit Vitaly Levin

“Data is the new Oil. Data is just like crude. It’s valuable, but if unrefined it cannot really be used.” – Clive Humby, DunnHumby 2 “We have for the first time an economy based on a key resource [Information] that is not only renewable, but self-generating. Running out of it is not a problem, but drowning in it is. – John Naisbitt

 Uber - the world’s largest taxi company, owns no vehicles.  Google - world’s largest media/advertising company, creates no content.  Alibaba - the most valuable retailer, has no inventory.  Airbnb - the world’s largest accommodation provider, owns no real estate.

 Attacker Capabilities  Time to Discovery Verizon Data Breach Investigations Report

Attack surface is increasing Sec teams are missing attacks Attack are more sophisticated Sec teams need to increase experience and efficiency Existing strategies and controls are failing Tools, processes and knowledge must adapt to new threats

No worries, I got this!

Where is security being forced to head:  Sharing of Intelligence - Vendors, CFI, etc…  Behaviour Based Detection ◦ Traditional and Non Traditional Sources  Non Signature based Malware Detection  Cameras for Networks  Cloud Security Apps  Mobile Devices  Two-Factor Authentication  Data level encryption and obfuscation

 Behavior based – data relationships not predetermined  Designed to analyze massive data sets  Incorporates learning to improve  Can analyze non-traditional data sources ◦ Intelligence, identity, network, Logs

 Insider Threats  Malware  Attacks  Potential Risks **BE AWARE – Logs might contain information you do not expect

Application of Intelligence to On-Line Banking and Portals -Two-Factor Authentication for high risk transaction -Data encryption from Storage to Client (browser/App)

Vitaly Levin