????????? ????????????? ???????????? OSP-Con

1
????? ????? ??????? ??? ?????? ?????
????? ?????? ????????, ???-???????? ?????????
????????????? ???????????? OSP-Con psi_at_osp.ru
2
?????? ? ??????? ?? ? 2009 ?.???????
MessageLabs Intelligence

• Web 2.0 ????? ??? ???????????? ???????????? ??
• ???????????? ?????????? ???????????? ???????
  ?????? ?? ??????????? ??????????
• ????????? MaaS (Malware As A Service)
• ??????? ???????? ? ???????? ???????????
  ???????????? ????
• ?????????? ????
• ????? ???????????????? phishing gt ????? ????????
  ? ??????????????????? ????
• ??????????? ?????
• ???????????? ?????????
• ??????????? ?? ?????? ? ??????????
• ???????????? (?????? ???????? ??? ??????????)
• ??????? ???????? ? ???????????? ?????????? ?
  ?????????????????
• ??????????????? ?????????? ????????? DNS
  (???????? 2008)
• phishing-????? ?? ???? ??????????? DNS-??????? ?
  Web-?????? ?????? ???????????? ????????
• ????? ????? ??????? ?????????? DNS Security
  Extensions (DNSSEC)

3
?????? ? ??????? ?? ? 2009 ?.???????
MessageLabs Intelligence

• Scam ? ????? Nigerian 419
• ???????? ???? ????????????? ?????? ???????
  ?????????? (????????? ?? 1-2 ???????????, ?????
  ??????????? ??? ???????, ?????????????
  ?????????????? ??????)
• ???????????? ?????
• ???????? ??? ? ??????? BRIC
• ???? ?? ????????? ?????? ?? ????????????? ??????
• ????? ?? ????????? ? ?????? ????????? ??????????
• 2008 ???????????? ????? ????? ??????????
  ???????? ??? ? ??????????
• 2009 ???????????? ????? ? ????? ??????????
  ????????????
• 300 ??????? ??? ????????? ??????????, 400? ???
  ??
• SMS ?? ?????? premium
• ??????????? botnet
• ?????????? ??????? ????? ? ????? 2008 (Intercage,
  McColo)
• ????????? ??????????? ? ????????? ? ??????? BRIC
• ???????????????? ??????????????? ??????????
  botnet
• ?????????? ??????????? (????????????? ????
  ????????????? ?????? HW)
• ?????? ???????? ?????? ??????? OC
• ?? ?? ????? ???????????? ? ?????????????
  ???????????? ??

4
?????? ? ??????? ?? ? 2009 ?.5 ????????? ??
WatchGuard

• ????????? 5
• ???????? ???????????????? ? ??????? ??????
  ??????, ? ??? ????? ????????????
• ????? ????????? ???? ? ???????????? ?????
• ????????? 4
• botnets ?????? ????? ????????????? ?
  ???????????
• ????????? 3
• ???????? ?????????? ?????????? ???? ?????????
  ??? ??????? ????, ????????? ???????????????????
  scam-????????, phishing? ? ?.?.
• ????????? 2
• ???? ????? ???? ????? SSL ? HTTPS
• ????????? 1
• ?????? ?? ?????????? ?????? ? ???????
• ?????????????? ?????, ?????????????????? ????? Web

5
????????? ? ??????? ?? ? 2009-?? ?????

• ??? ?? ??????? ?????? ??? ??????? ????????
• ???????????? ??????????? ? ???????/??????????
• ?????? SaaS ? ??????? ?? (Qualys, WhiteHat
  Security)
• ????????????? ??????? ?????????? ????????????
  ????????? ??????
• ?? ???????????? ???????????? ????? ??????? ?
  ?????????

6
MQ ??????????? ??? ???????????
Gartner, Nov 2008
7
MQ ???????? ???????? ???????
Gartner, March 2009
8
???????? ???????? ???????ForresterWave

• ??????
• Microsoft
• Cisco Systems
• Bradford Networks
• Juniper Networks
• ?????????? ?????????-???, ??????? ? ?????????????
  ???????
• Symantec
• Mirage Networks
• McAfee
• ??????????
• StillSecure
• Nevis Networks
• HP ProCurve

Forrester, Sep 2008
9
???????? ???????? ???????ForresterWave (????.)
Forrester, Sep 2008
10
???????? ???????? ???????ForresterWave (????.)
Forrester, Sep 2008
11
MQ ?????????? IPS
Gartner, Dec 2006 Apr 2009
12
MQ ?????????? ??????? ? ????????? ? ???????
????????????
Gartner, May 2009
13
?????? ?????????? ?????????

• ????????? ????????????
• ??????? ????????? ???????
• 40 - ?????? ?? ??????????? ????????
• 80 - ?????? ?????????? ?????
• ??????? ???????????? ???????
• ??????? ??? ???????? ??????? ? ????????????????
  ??????
• ?????????????? ?????? ???????????
• ????? ?????????? - ????? ?????????
• ? ??????? ??????????????? ???????
• ???? ??????????? ??????????? ?????? ?? ??????????
  ???? ?????????????? ????????? (??????????,
  ?????????????????,)

14
?????? ?????????? ????????? ????????????
?????????? ??? ????????? ???????
15
?????? ?????????? ?????????????? ??????? ???
????? ??????? ?????
16
????? ?????????? ????????????
CA, LANDesk, Microsoft, Novell Symantec
Cisco, McAfee, Sophos, and Trend Micro
Forrester, Sep 2008
17
?????? ?????????? ????????????????????? ???????
Forrester, Sep 2008
18
???????
19
????????? ?? ????????

• ????? ??????
• psi_at_osp.ru