Hide Notes 

Slide 1: Authentication. Security. Trust. HackAlert- Malware Monitoring Enterprise Malware Monitoring Solutions Protect your website and your visitors © GlobalSign. A GMO Internet Inc group company.
Slide 2: What is Malware?  Web-based Malware - (Drive-by Downloading) or Malware Injection - is a hacking technique which injects malicious code into websites.  This malicious code exploits software vulnerabilities to bypass browser restrictions and automatically download and execute malicious software. − Malware, such as Viruses, Trojan horses, Worms, Rootkits, Spyware, Adware, Crimeware, Robot (botnet) Clients, etc.  PC based anti-virus does not always catch malware − Some malwares have unique signatures per distribution, rely on behavioural techniques to identify. Authentication. Security. Trust. www.globalsign.com
Slide 3: Effects of Malware Malware has devastating effects on both the owner of the infected website and all visitors to the infected site. For the Website Visitor − Identity & Personal Information Theft − Usernames, passwords, bank account numbers, etc. For the Website Owner: − − − − − − Damage to Reputation Google Flagging Traffic driven away from site Loss of business System downtime Removed from search engine results Authentication. Security. Trust. www.globalsign.com
Slide 4: Malicious Attacks on the Rise Authentication. Security. Trust. www.globalsign.com
Slide 5: Recent Malicious Attacks  Operation Aurora − Distributed denial of service attack against many major IT companies originating from China − Confirmed publicly by Google, Adobe Systems, Juniper Networks, and RackSpace.  Operation Payback − Distributed denial of service revenging against previous Wikileaks suppliers- making worldwide news.  Koobface- Network Solutions − Distributed via millions of landing pages via a widget that took advantage of an IE vulnerability and resulted in a Koobface malware ( virus that “phones home” for further instructions.  Various Corporate Sites Affected − NASDAQ (http://www.theregister.co.uk/2011/02/07/nasdaq_malware_breach/) − US Treasury (http://thompson.blog.avg.com/2010/05/treasury-website-hacked.html ) − Apple (http://www.theregister.com/uk/2010/08/17/apple_sql_attack/ ) Authentication. Security. Trust. www.globalsign.com
Slide 6: Preventing Malware  As a website owner, there is no 100% method to prevent malware from being injected into your website; however, by implementing malware monitoring solutions you can catch any malware before damage occurs.  Additionally, always make sure you ensure optimum server security including: − Ensure all operating systems and web severs are updated with the latest patches. − Ensure that all sensitive infrastructure has the appropriate access controls in place. − Ensure that the website is free from vulnerabilities which may be exploited by malicious users.  No matter how many security measures you put in place, such as firewalls, secure servers, and anti-virus software, there will always be a chance that your site could be comprised. The best defense for your business is to be the first to know about a malicious infection! www.globalsign.com Authentication. Security. Trust.
Slide 7: HackAlert- Malware Monitoring Solution  HackAlert malware monitoring helps protect website owners and their visitors by: − Providing monitoring for malicious code injection and drive-by-downloads . − Giving due warning of an infection. − Facilitating timely removal of the injected code by providing details of the infection.  By using numerous techniques to ensure malicious code is identified quickly and even the most advanced malware distribution techniques are effectively identified.  Real time alerts can be set up via email to notify you if and when malicious code is found in your website; in addition, HackAlert will display the injected snippets to facilitate immediate removal Authentication. Security. Trust. www.globalsign.com
Slide 8: Enterprise Malware Monitoring Plans  All Enterprise plans include the following: − Identification Technology − Signature (Static Analysis) − DOM Parsing (Static Analysis) − Behaviour Analysis − Spyware Behaviour Extractor − Exploit Analysis − Blacklist Lookup − Features: − Security Seal − Line of Code Illustration − HTTPS Support − Daily Reports − Weekly Reports − UI Access − Email Notification (addresses receiving alerts) − Instant Mitigation (SmartWAF required) − Malware Validation − Available plans: − 5, 10, 20, 50 or custom number of “Sites” (FQDNs or subdomains) − Scan frequency of daily, twice daily or custom − Up to 5000 unique pages monitored, custom plans available for more Authentication. Security. Trust. www.globalsign.com
Slide 9: Protect your visitors, website, and reputation  Talk to GlobalSign today to begin protecting your website with our Malware Monitoring Solution.  Learn more at: − http://www.globalsign.com/ssl/malware-scanning/  Read White Paper − http://www.globalsign.com/resources/white-paper-globalsign-malware-monitoring-fo Authentication. Security. Trust. www.globalsign.com