Upload File

ams – attack mitigation system · sql injection attack waf. cyber attacks in numbers. attacks...

  • Home
  • Documents
  • AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
44
Radware NGSec 2017 Marek Karczewski

Upload: others

Post on 25-Sep-2020

14 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

Radware

NGSec 2017

Marek Karczewski

Page 2: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

Cyber Attacks

Page 3: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

HTTP „GET” Flood Attack

GET - Requests data from a specified resourcePOST - Submits data to be processed to a specified resource

Page 4: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

HTTP „GET” Flood Attack

https://portals.radware.com/Employee/Home/Sales-Tools/#?q=Document.pdf

Page 5: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 6: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 7: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

HTTP „POST” Flood Attack

https://portals.radware.com/Not-Logged-In/Login/?returnurl=%2fEmployee%2fHome.aspx%2f

Marek Karczewski

Page 8: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

Marek Karczewski

https://portals.radware.com/Employee/Home/Human-Resources/Search-Employee/#?q=Marek%20Karczewski

Page 9: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 10: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

’ OR ’a’=’a

Page 11: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

SQL Injection Attack

No WAF

SELECT * FROM `CreditCardNumbers` WHERE `user`=‘’ OR ’a’=’a’ AND `pass`=‘’ OR ’a’=’a’

SELECT * FROM `login` WHERE `user`=‘’; INSERT INTO `login` ('user','pass') VALUES (‚John',‚Doe');--’ AND `pass`=‘’

SELECT * FROM `login` WHERE `user`=‘’; UPDATE `login` SET `pass`=‘pass123’ WHERE `user`=‘Marek’;--’ AND `pass`=‘’

Page 12: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

SQL Injection Attack

WAF

Page 13: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 14: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 15: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 16: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 17: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 18: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 19: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 20: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 21: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 22: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 23: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 24: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 25: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 26: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 27: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 28: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations
Page 29: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

Cyber Attacks in numbers

Page 30: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

Attacks that will cause the most harm to businesses

Page 31: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

Types of Attacks Experienced By Organizations in 2015

Page 32: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

Motives behind any cyber-attack

Page 33: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

Biggest DDoS Attacks in 2016

Page 34: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

SSL or TLS based Attacks

Over 50% of traffic in enterprises is

encrypted

20% of organizationsInspect SSL

80% of organizations don’t inspect SSL

Traffic SSL based attacks in 2016

Page 35: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

Impact of DDoS Attacks on Systems

Page 36: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

Impact of DDoS Attacks on Business

Today more than ever, TIME IS MONEY

Page 37: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

Impact of DDoS Attacks on Business

Page 38: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

How Prepared Are Today’s Organizations?

Page 39: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

Attacks on Krebs, OVH and Dyn

09/20 – KrebsOnSecurity.com target of record-breaking 620Gbps DDoS attack09/21 – French web hoster OVH targeted by 1.5Tbps IoT DDoS attack09/30 – Source Code of IoT Botnet Mirai Released on Hackforums.net by Anna-senpai

10/21 – Dyn’s managed DNS infrastructure in the US under DDoS attack. Impacting many websitesand services including Twitter, Amazon, Tumblr, Reddit, Spotify and Netflix

Page 40: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

October 21st - DDoS attack on Dyn (Managed DNS Network) - Mirai malware

• ActBlue

• Basecamp

• Big cartel

• Box

• Business Insider

• CNN

• Cleveland.com

• Etsy

• Github

• Grubhub

• Guardian.co.uk

• HBO Now

• Iheart.com

(iHeartRadio)

• Imgur

• Intercom

• Intercom.com

• Okta

• PayPal

• People.com

• Pinterest

• Playstation Network

• Recode

• Reddit

• Seamless

• Spotify

• Squarespace Customer

Sites

• Starbucks rewards/gift

cards

• Storify.com

• The Verge

• Twillo

• Twitter

• Urbandictionary.com

• Weebly

• Wired.com

• Wix Customer Sites

• Yammer

• Yelp

• Zendesk.com

• Zoho CRM

• Credit Karma

• Eventbrite

• Netflix

• NHL.com

• Fox News

• Disqus

• Shopify

• Soundcloud

• Atom.io

• Ancersty.com

• Constant Contact

• Indeed.com

• New York Times

• Weather.com

• WSJ.com

• time.com

• xbox.com

• dailynews.com

• Wikia

• donorschoose.org

• Wufoo.com

• Genonebiology.com

• BBC

• Elder Scrolls Online

• Eve Online

• PagerDuty

• Kayak

• youneedabudget.com

• Speed Test

• Freshbooks

• Braintree

• Blue Host

• Qualtrics

• SBNation

• Salsify.com

• Zillow.com

• nimbleschedule.com

• Vox.com

• Livestream.com

• IndieGoGo

• Fortune

• CNBC.com

• FT.com

• Survey Monkey

• Paragon Game

• Runescape

• Amazon

Page 41: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

Cyber attacks from infrastructure perspective

2016

INTERNET PIPE(Saturation)36%

FIREWALL13%

IPS/IDS8%

ALANCERLOAD B(ADC)

9%THE SERVERUNDER ATTACK

33%SQLSERVER

1%

INTERNET PIPE(Saturation)36%

FIREWALL21%

IPS/IDS10%

ALANCERLOAD B(ADC)

3%THE SERVERUNDER ATTACK

28%SQLSERVER

2%

2015

IPS/IDSInternet Pipe Firewall Load Balancer/ADC Server Under Attack SQL Server

Page 42: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

Complexity of attacks continues to grow

IPS/IDS

“Low & Slow” DoS attacks (e.g.Slowloris)

Large volume network flood attacks

Syn Floods

Network Scan

HTTP Floods

SSL Floods App Misuse

Brute Force

Cloud DDoS protection DoS protection Behavioral analysis IPS WAF SSL protection

Internet Pipe Firewall Load Balancer/ADC Server Under Attack SQL Server

XSS, CSRFSQL Injections

Page 43: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

Multi-technology protection

Only a multi-technology solution can provide full protection from multi-vector threats

Cloud DDoS protection DoS protection Behavioral analysis IPS WAF SSL protection

Page 44: AMS – Attack Mitigation System · SQL Injection Attack WAF. Cyber Attacks in numbers. Attacks that will cause the most harm to businesses. Types of Attacks Experienced By Organizations

Thank You!


AES Side Channel Attacks Biru Cui Sam Skalicky. Outline AES algorithm Side channel attacks Side channel attack against AES Cache-collision timing attack

(Web Application Firewall) · 2020. 10. 28. · WAF (Web Application Firewall) 서비스소개 WAF Diagram Web Server DB server User Hacker • OWASP Top 10 Attack • NSA TOP 8 Web

Practical Defense with Mod Security Web Application Firewall (WAF) · 2020-01-17 · Practical Defense with ModSecurity WAF 16 mod_security - Attack Detection and Prevention (cont)

Hacker Attacks on the Horizon: Web 2.0 Attack Vectors

Attack Spotlight: Multi-vector DDoS Attacks

Armor 2016 Partner Programs · 2018. 4. 27. · • iprm • • ddos • • waf • • nids • for every 35,000,000 attacks blocked just 1 attack gets through armor averages ~2

Attacks Overview Nguyen Cao Dat 1. BK TP.HCM Outline Cryptographic Attacks ▫ Frequency analysis ▫ Brute force attack ▫ Meet-in-the-middle attack ▫ Birthday

MitM attacks on multi-platform banking applications · MitM attacks on multi-platform banking applications ... This attack was not successfully ... MitM attack provide an own DNS

Tune in for the Ultimate WAF Torture Test: Bots Attack!

WEB SECURITY. WEB ATTACK TYPES Buffer OverflowsXML InjectionsSession Hijacking Attacks WEB Attack Types

Perpetrate cyber-attacks using IoT devices as attack

Today’s Roadmap...Cyber Attack Challenges Distributed Network Attacks are often referred to as Distributed Denial of Service (DDoS) attacks. This type of attack takes advantage of

Email attacks and shimming attack

Attack Directories, Not Caches: Side-Channel Attacks in a Non …iacoma.cs.uiuc.edu/iacoma-papers/ssp19.pdf · 2018. 5. 2. · Attack Directories, Not Caches: Side-Channel Attacks

CARDIOLOGY - HEART ATTACK TUTORIAL 10 – WOMEN & HEART ATTACKS – UNIQUE SYMPTOMS

Related-Key Attacks - University of Haifaorrd/RK-Attacks.pdf · Related-Key Attacks Slide Statistical RK Model First Attack Second Attack Using the Complementation Property Using

Security Attack Analysis for Finding and Stopping Network Attacks

Efficient Attack Correlation and Identification of Attack ...intrusion detection, attacks, alert correlation, network motifs 1 INTRODUCTION In our interconnected society, attacks on

Mitigating OWASP Automated Threats - M.Tech Australiamtechpro.com.au/wp-content/uploads/IMPERVA_WP_OWASP_Automa… · Imperva SecureSphere WAF prevents/blocks: • Technical attacks

It’s Time For Change! - CounterMeasure 2019...WAF RASP CDN WAF Signals Based Attack Detection Blocking Used in Production Maintenance Ease of Installation Deployment Scalability

Getting out from Under attack - TechWorld Event · Revenge, corporate espionage, politics, war and cloaking Attacks become sophisticated Attackers attack the way As attacks go up

Early Heart Attack Care Heart Attacks Have Beginnings

SecureSphere Test Drive Lab Manual - · PDF fileSecureSphere WAF Test Drive 3 Introduction to SecureSphere WAF Your website receives a continuous barrage of attacks. If hackers uncover

Attacks and Attack Detection Quirin Scheitle

Should cyber attack victims launch counter attacks?

25688658 Spirit Attack and Psychic Attacks Protection Spells Protective Angels

Early Heart Attack Care (EHAC) Heart attacks have beginnings

1,2 ID 1, 3 IDlinghe.kong/2018/WangSensors2018Sync.pdfMultiple attack types:. Message manipulation attacks (e.g., replay attack, delay attack, and wormhole attack) and Sybil attacks

Worldwide Attacks Against Dams - CoWARN Attacks... · Worldwide Attacks Against Dams ... other types of attacks could be conducted by well-trained adversaries ... 11 1.4 Attack Locations

AppWall – More Than Just a WAF - RadAppliances.com · AppWall Data Sheet AppWall – More Than Just a WAF As cyber attacks and mitigation techniques continue to evolve, enterprises

Extreme PI System Hardening · “Many targeted attack groups already use PowerShell in their attack chain” ~ Symantec Increased use of PowerShell in attacks “52% of all attacks

Mumbai Attacks-The Real Story--Who was behind Mumbai Attack----Eye Opening facts about Mumbai Attacks

Exploits Dalia Solomon. Categories Trojan Horse Attacks Trojan Horse Attacks Smurf Attack Smurf Attack Port Scan Port Scan Buffer Overflow Buffer Overflow

INFOWATCH ATTACK KILLER WEB APPLICATION FIREWALL...определяет вектор атаки и блокирует ее infowatch attack killer web application firewall „waf…

Internet Security CS457 Seminar Zhao Cheng. Security attacks interruption, interception, modification, fabrication passive attack, active attack