Transcript ThreatSTOP-Juniper Solution PPT

BOTNET DEFENSE FROM
THREATSTOP & JUNIPER
Stop Botnets Stealing From You!
Presenter: Ken Liu, V.P. Business Development
ThreatSTOP, Inc.
STOP BOTNETS STEALING FROM YOU!
Challenge
Problem
 Organized criminals now hacking for profit
& malicious intent
 Botnets and malware control your
machines, steal your valuable data, and
cause great damage
 Rapidly growing and pervasive threat
2
 Current signature-based solutions
inadequate

Chasing the unknown, at the mercy of
attackers.

Infinite combinations and sheer volume
overwhelms signatures/patching cycle.

Lower catch rate

~100 million computers in U.S. “botted” in
2010

Slower updates/detection

88% of F500 networks are “botted”; 100% of
ThreatSTOP customers

High false- positives

High overhead to use.

No one is immune
Copyright © 2009 Juniper Networks, Inc.
www.juniper.net
CLOUD IP REPUTATION SERVICE ENABLES SRX TO
BLOCK BOTNETS/MALWARE AT THE NETWORK EDGE
5
1. Aggregate threat feeds from
public and proprietary monitors
3
1
4
2
2. Produce predictive, real-time
threat list by proprietary correlation
engine
3. Deliver IP address block list
to SRX via DNS (patent-pending)
DNS
4. SRX blocks traffic to/from bad
IPs
5. Customer logs become part of
ThreatSTOP defense network
3
Copyright © 2009 Juniper Networks, Inc.
www.juniper.net
SRX BLOCKS BOTNETS WITH THREATSTOP
• Track known bad IP addresses
• Develop accurate block lists in real
time
• Continually updated and verified
• Deliver threat lists to SRXs for
enforcement via DNS
4
• Apply filters provided by
ThreatSTOP
• Leverage high-performance IP
address filtering
• Blocks inbound/outbound traffic to
bad addresses, even encrypted SSL
traffic
• All protocols and applications
covered.
Copyright © 2009 Juniper Networks, Inc.
www.juniper.net
• Prevent data theft
• Day zero protection and reduce
attack surface
• Better network performance and
lower burden on other services
• Reduce help desk calls and
reportable events
• Easy install, immediate protection
and lowest TCO
Benefits
VALUE PROPOSITION
Prevent Data Theft
 Block “call homes” & SSL traffic
 Cut spam by up to 90%
 “We found over 1,000 bots thanks to
ThreatSTOP.”
 Improve network “goodput”
-- IT Director, County Government
Reduce Attack Surface
5
Improve Performance—Save $
 Offload other filters & save upgrade
cost of expensive HW
Easy & Lowest TCO
 Your network “disappears” from
criminals’ radar
 Use existing equipment, simple
script install, immediate use
 Reduce more spam and risk of
attack
 Eliminate manual maintenance &
drudgery, increase IT productivity
Copyright © 2009 Juniper Networks, Inc.
www.juniper.net
TESTIMONIALS
W. Memphis Schools
“I had no idea my network printers are
talking to China!”
 Blocks 1 million+ malware/week
 Reduces network saturation
 Cuts help desk tickets by 90%
-- Gary Woodward
 Eliminates manual IP blacklisting and
remediation
Network Administrator
Hillsborough College
6
University of Baltimore
(SRX 3400)
Bibliotheek Rotterdam
(SRX 240H)
“ThreatSTOP saved us $200,000 on email
server upgrades that we put into
classrooms instead.”
“Now we have no service stoppages, no
escalations with the ISP, and no manual
cleanups. ThreatSTOP has solved a big
headache for us.”
-- Steve Gorham
--Nikola Nikolic
CIO
Services & Contracts Manager
Copyright © 2009 Juniper Networks, Inc.
www.juniper.net