© 2015 - all rights reserved. mining big data for fun, fraud and profit vitaly levin...

12
© 2015 - All Rights Reserved Mining Big Data for Fun, Fraud and Profit Vitaly Levin vitalylevin@outlook. com

Upload: howard-hunt

Post on 12-Jan-2016

213 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: © 2015 - All Rights Reserved. Mining Big Data for Fun, Fraud and Profit Vitaly Levin vitalylevin@outlook.com

© 2015 - All Rights Reserved.

Mining Big Data for Fun, Fraud and Profit

Vitaly [email protected]

Page 2: © 2015 - All Rights Reserved. Mining Big Data for Fun, Fraud and Profit Vitaly Levin vitalylevin@outlook.com

Value

“Data is the new Oil. Data is just like crude. It’s valuable, but if unrefined it cannot really be used.”– Clive Humby, DunnHumby

2

“We have for the first time an economy based on a key resource [Information] that is not only renewable, but self-generating. Running out of it is not a problem, but drowning in it is. – John Naisbitt

Page 3: © 2015 - All Rights Reserved. Mining Big Data for Fun, Fraud and Profit Vitaly Levin vitalylevin@outlook.com

Uber - the world’s largest taxi company, owns no vehicles.

Google - world’s largest media/advertising company, creates no content.

Alibaba - the most valuable retailer, has no inventory.

Airbnb - the world’s largest accommodation provider, owns no real estate.

Today’s World

Page 4: © 2015 - All Rights Reserved. Mining Big Data for Fun, Fraud and Profit Vitaly Levin vitalylevin@outlook.com

Attacker Capabilities Time to Discovery

Current Security Trends

Verizon Data Breach Investigations Report

Page 5: © 2015 - All Rights Reserved. Mining Big Data for Fun, Fraud and Profit Vitaly Levin vitalylevin@outlook.com

Attack surface is increasing

Sec teams are missing attacks

Why is security getting worse?

Attack are more sophisticated

Sec teams need to increase experience and efficiency

Existing strategies and controls are failing

Tools, processes and knowledge must adapt to new threats

Page 6: © 2015 - All Rights Reserved. Mining Big Data for Fun, Fraud and Profit Vitaly Levin vitalylevin@outlook.com

Data Mining

Page 7: © 2015 - All Rights Reserved. Mining Big Data for Fun, Fraud and Profit Vitaly Levin vitalylevin@outlook.com

No worries, I got this!

Big Problems Drive Innovation

Page 8: © 2015 - All Rights Reserved. Mining Big Data for Fun, Fraud and Profit Vitaly Levin vitalylevin@outlook.com

Where is security being forced to head: Sharing of Intelligence - Vendors, CFI, etc… Behaviour Based Detection

◦ Traditional and Non Traditional Sources Non Signature based Malware Detection Cameras for Networks Cloud Security Apps Mobile Devices Two-Factor Authentication Data level encryption and obfuscation

Direction

Page 9: © 2015 - All Rights Reserved. Mining Big Data for Fun, Fraud and Profit Vitaly Levin vitalylevin@outlook.com

Behavior based – data relationships not predetermined

Designed to analyze massive data sets

Incorporates learning to improve

Can analyze non-traditional data sources◦ Intelligence, identity, network, Logs

Application of Big Data

Page 10: © 2015 - All Rights Reserved. Mining Big Data for Fun, Fraud and Profit Vitaly Levin vitalylevin@outlook.com

Insider Threats

Malware

Attacks

Potential Risks

**BE AWARE – Logs might contain information you do not expect

Application of Big Data - Detection

Page 11: © 2015 - All Rights Reserved. Mining Big Data for Fun, Fraud and Profit Vitaly Levin vitalylevin@outlook.com

Example

www.omnimaas.com

Application of Intelligence to On-Line Banking and Portals

- Two-Factor Authentication for high risk transaction- Data encryption from Storage to Client (browser/App)

Page 12: © 2015 - All Rights Reserved. Mining Big Data for Fun, Fraud and Profit Vitaly Levin vitalylevin@outlook.com

Vitaly [email protected]