1. SkyFile Anti Virus Sales presentation (External)
Jean-Marc Duc – Senior Product Manager
31-Jan-2019

2. Connect smarter. Anywhere.
Agenda
Cybercrime in the Maritime Sector
Sophos in partnership with Marlink for more than a decade
Marlink Anti Virus Services & OTA Update: how does it work?
What’s new in 2019?
SkyFile Anti Virus Premium, a new fight against ransomware!
What is a ransomware?
SkyFile Anti Virus Premium, how does it work?
New business model
6-Apr-19
Connect smarter. Anywhere.

3. Viruses or Ransomware Onboard
Safe guarding against viruses and ransomware has never been so sensitive or important. Sole protection on shore detection and filters is not enough anymore.
Many sources that contain a risk of infection can be introduced onboard a vessel by anyone from engineers to technicians and maintenance employees to crew-members:
Laptops and personal computers
USB sticks
External hard drives
Shipping is one of the most vulnerable, therefore most targeted industries to be hit by waves of cyber attacks. Viruses onboard can have dramatic consequences and cost a lot of money!
Now is the time to protect your vessels and your assets against this sly enemy!
6-Apr-19
Connect smarter. Anywhere.

4. Cybercrime in the Maritime Sector
Cybercrime, state-sponsored hackers and terrorists target the Maritime Global Shipping Industries and Infrastructures for two easy reasons - high profits and fast results!
To remain competitive, technology is fundamental for the Maritime Sector. The ships are ever more connected and cyber criminals know that operational delays cost more than pay ransoms, making them an easy target.
Cyber warfare experts know that compromising the shipping industry can cause huge economic damages to nations, and potentially affect the global markets
Cyber-terrorists learned that by targeting critical infrastructures, they can jeopardize real-world safety
Protection against cyber-terrorists spreading Ransomware and other Malware becomes THE priority
6-Apr-19
Connect smarter. Anywhere.

5. Marlink - Service Proposition
For many years, Marlink has partnered with SOPHOS to provide SkyFile Anti Virus (Entry & Premium), a crucial part of the SkyFile Suite of Services
Easy to install, update and to maintain, SkyFile Anti Virus protects your assets as if you were in your office, even at high sea
Thanks to daily and monthly updates transported via , your Anti Virus is always up-to-date whatever the type of satellite connectivity used (Fleet77, FBB, VSAT, IOP)
Thanks to Marlink’s OTA (Over the Air) update, there is no need for a technician or an engineer to board the vessel for Anti Virus updates. Monthly engine update are also transmitted via satellite.
Thanks to SOPHOS partnership, you can benefit from professional, top-of-art technology and protection!
6-Apr-19
Connect smarter. Anywhere.

6. Connect smarter. Anywhere.
SOPHOS
Sophos began producing anti virus and encryption products nearly 30 years ago
Sophos products and services help secure the networks used by 100 Million people in 150 countries and 100,000 businesses, including the maritime industry
World leader with a 30-year history in enterprise IT security and control
Sophos Support staff is independently audited and approved by SCP (Service Capability & Performance Support Standard)
Sophos provides 24/7 support all over the world thanks to their follow-the-sun support operation centres
Global network of threat analysis center (SophosLabs)
6-Apr-19
Connect smarter. Anywhere.

7. Marlink SkyFile Anti Virus Services - How Does it Work?
SkyFile Anti Virus Engine and daily update packages are permanently available for downloading and installation in the « SkyFile Remote Configuration » web-portal
Marlink gets regular daily updates from Sophos (around six times a day)
Daily or monthly updates are packaged by Marlink and stored in the user’s SkyFile mailbox before being transferred to the vessel as a standard
Onboard, all PCs and machines connected to the business LAN are automatically updated without human intervention
Monthly engine updates require two clicks for being operational: the Captain accepts the download and begins the installation, that’s it!
6-Apr-19
Connect smarter. Anywhere.

8. Protected environment at deep sea
Architecture
Protected environment at deep sea
Master PC with SkyFile Mail & SkyFile AV installed
SOPHOS
Web Server
Marlink
SkyFile Server
Slave PC
Slave PC
Slave PC
Slave laptop
SkyFile Subscribers
Mailbox
6-Apr-19
Connect smarter. Anywhere.

9. Monthly Update to the Anti Virus Engine
A monthly update of the engine is mandatory for keeping the system performing well and ensure engine efficiency for years
Automatic notifications are sent to the shore based IT-manager and to the vessel
Easy monthly update downloads and installations thanks to Marlink Over The Air update
3 types of updates for the engine:
Daily anti virus update received by (small volume)
Incremental engine updates (OTA) on a monthly basis
Full engine update every 2 years
6-Apr-19
Connect smarter. Anywhere.

10. Connect smarter. Anywhere.
Over The Air Update
OTA update is available with SkyFile Mail v8.25 and following versions
Authorised volume for OTA updates configurable by the user via Portal360 or by asking Marlink Service Desk per SkyFile account, including a ‘no limit’ option for VSAT or access from a shore-network
Reasonable volume of data (between 5 and 10MB)
No need for vessel attendance to update the anti virus engine anymore and no need to send a CD-ROM or a USB-stick onboard
OTA update configuration part of Marlink Smart Profile Management Services (management of profile per satellite connectivity)
6-Apr-19
Connect smarter. Anywhere.

11. SkyFile Anti Virus: New in 2019!
SkyFile Anti Virus used by vessels
SkyFile Anti Virus becomes:
Marlink introduces:
6-Apr-19
Connect smarter. Anywhere.

12. SkyFile Anti Virus Premium against RANSOMWARE
Across the world a company gets hit by RANSOMWARE every 40 seconds!
RANSOMWARE, definition:
« A ransomware is malicious software that locks a device, computer, tablet or smartphone and demands a ransom to unlock it. It infects the device when navigating through various hacked websites, downloading a file or clicking a wrong link. After their encryption, the files of a device are locked and the device is unusable till the ransom is paid…………or not! »
Some well-known Ransomwares
WannaCry
NotPetya
Fireball
Delta Charlie
In June 2017, MAERSK was attacked by WannaCry. The estimated global loss, because of the Cyber-attack has been estimated at $300M
In July 2018, COSCO Shipping was infected by NotPetya, resulting in $200M of costs related to the outbreak
6-Apr-19
Connect smarter. Anywhere.

13. Ransomware: Still a Strong Threat
Wannacry became famous in 2017
Hundreds of companies have been infected
Some of them lost millions of dollars
Even eighteen months after the initial outbreak, Wannacry continues to infect computers over the world
With the support from our Partner SOPHOS, Marlink is pleased to announce SkyFile Anti Virus Premium, a new executive tier to the SkyFile Anti Virus Family
6-Apr-19
Connect smarter. Anywhere.

14. Ransomware: a Permanent Danger!
6-Apr-19
Connect smarter. Anywhere.

15. Ransomware: How Will it Evolve in 2019?
According to an article published by « FORBES », 2019 may very well mark a point of escalation
This is especially likely since once secret exploits like Eternal Blue, which was exfiltrated from the National Security Agency, NSA, and used in the delivery of the WannaCry ransomware dragnet, are being tinkered with, advanced and automated
As with all cyber threats, there are a lot of unintended consequences when these instruments are deployed, whether in offense or defense
Aged systems beyond their usable and patchable lifecycle, such as the SCADA systems used in critical functions for power grids, pipelines and many industrial controls, are particularly vulnerable
6-Apr-19
Connect smarter. Anywhere.

16. Marlink, Anti Virus NEW Service Proposition
SkyFile Anti Virus Entry
Well-known and improved solution
Marlink introduces in 2019, SkyFile Anti Virus Premium: more protection for a high security service
Prevent
Detect
Stop ransomware before it takes control of the network
Remove malwares
Clean up the PC
Roll back encrypted file changes
Ransomware technique mitigations:
SkyFile Anti Virus Premium stops threats before they become an issue by recognising and blocking common malware delivery techniques
This process protects the remote from malicious payloads looking to exploit both known and unknown software vulnerabilities
6-Apr-19
Connect smarter. Anywhere.

17. SkyFile Anti Virus Premium Highlights
Innovative protection
Stops unknown malware
Does not rely on signatures
Stops malware before it runs
Constantly improving
Self-learning model
Trained with Sophos Labs Data
Millions of samples
Efficiency
Small footprint
Accurate detections
Detections returned in milliseconds
Complete new approach to endpoint security
It protects devices from malicious attacks that are able to bypass traditional anti virus solutions
It is able to protect against zero-day malware & ransomware by detecting malicious behaviour
The engine continues to learn as it is exposed to millions of samples to inform its predictive decision-making abilities
Deep learning
Next generation form of machine learning that leverages software that is written to function the way the human brain functions
It processes massive amounts of data which enable them to recognise patterns without explicit programming
6-Apr-19
Connect smarter. Anywhere.

18. Anti Ransomware – Detect & Resolve
Nightmare scenario: a ransomware is introduced into the system!
The « anti-ransomware » module:
Scans the access/opening of each file where it is installed
Executes a copy of each opened file in a cache (the file is encrypted thanks to an algorithm belonging to Sophos)
Checks at the end of the process if the file has been encrypted or not. If yes, it checks if the encryption is legitimate or not
In case the encryption is not legitimate, the « anti-ransomware » module:
Stops the process
Restores the impacted file as it has been stored in the cache initially
Deletes the « crypto-locker » and the potential fragments to avoid its reconstruction
6-Apr-19
Connect smarter. Anywhere.

19. Connect smarter. Anywhere.
Service proposition
6-Apr-19
Connect smarter. Anywhere.

20. Connect smarter. Anywhere.
How Does it Work?
From 2019, two commercial packages are available:
SkyFile Anti Virus Entry (the well-known anti virus service)
SkyFile Anti Virus Premium (contains « AV Entry » + anti-ransomware package)
Only one Anti Virus engine for Entry and Premium  Anti-ransomware part of the engine since version VDD 5.51
New user/subscriber
SkyFile Anti Virus Entry = no changes – Same engine – same processes
SkyFile Anti Virus Premium = same engine – anti-ransomware activated when AV Premium is selected
Existing user/subscriber
SkyFile Anti Virus Entry = no changes
Package upgrade =
If engine version VDD 5.51 or higher in use  nothing to do
If engine version anterior to in use  OTA update for getting AV Premium (25MB)
6-Apr-19
Connect smarter. Anywhere.

21. Engine Update Mechanism
SkyFile Anti Virus Entry (no change)
Daily (~100KB)
Monthly (~5 to 7MB)
Yearly/18 months (Full engine - ~220MB)
SkyFile Anti Virus Premium
Entry updates (the above ones)
Yearly update for the engine (~25MB – Forecast)
OTA update
SkyFile Anti Virus Entry : On a monthly basis depending the max size volume set up by the customer
SkyFile Anti Virus Premium : On a yearly basis
6-Apr-19
Connect smarter. Anywhere.

22. Connect smarter. Anywhere.
Engine update, summary!
Situation
SkyFile AV Entry (Default)
SkyFile AV Premium
Engine anterior to 10.7
Available (must be updated)
Not accepted
Engine anterior to VDD 5.51
Available
Available with OTA update
Engine VDD 5.51 or higher
New user/subscriber
Available (Fresh instal.)
AV OTA monthly update
5 to 7 MB
No extra-volume
AV OTA yearly update
Unpredictable
25MB
6-Apr-19
Connect smarter. Anywhere.

23. Procedures & Deployment
Activation
Part of P360 (Activation & Change)
OTA update for AV Premium
Available for existing and new AV registrations
Technical prerequisites
SkyFile Mail v  Deployed in Dec-18
SkyFile Anti Virus v10.7.xx  Deployed in Jan-18 (already used by 80% of the subscribers)
Agenda
Info to Marlink’s customers in Dec-18
Premium package available in Feb-19
Changes applicable 1st March 2019
6-Apr-19
Connect smarter. Anywhere.

24. Connect smarter. Anywhere.
2019: New Business Model
Only one type of subscription: « vessel » model
« Per license » model is removed
Date of effect:
New activation: 1st March 2019
Existing accounts:
1st April 2019 (initial commitment overpassed)
End of initial commitment period
Only one commitment period: 12 months
« 24 & 36 months minimum commitments » are removed
Date of effect:
New activation: 1st March 2019
Existing accounts:
1st April 2019 (Initial commitment period overpassed)
End of initial commitment period
12-months Commitment Period renewed automatically for the same duration (12 months)
6-Apr-19
Connect smarter. Anywhere.

25. Connect smarter. Anywhere.
Pricing (End-User)
6-Apr-19
Connect smarter. Anywhere.

26. Connect smarter. Anywhere.
Documentation
Software
SkyFile Anti Virus Entry and Premium available for downloading at
Documentation
Installation guide
T&Cs
Paper Order Form
Sales presentation
Available on PartnerLink and Marlink website
6-Apr-19
Connect smarter. Anywhere.