Combatiendo Amenazas de Seguridad en la Nube - WatchGuard
•
0 gostou•814 visualizações
Presentación de Juan Muñoz de WatchGuard en Technology Day 2010 el 16 de marzo de 2010. San José, Costa Rica.
![[object Object],[object Object],[object Object],[object Object]](https://image.slidesharecdn.com/cleaningemailinthecloud-100318124400-phpapp02/85/Combatiendo-Amenazas-de-Seguridad-en-la-Nube-WatchGuard-1-320.jpg)
![[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Recomendados
Recomendados
Mais conteúdo relacionado
Destaque
Destaque (18)
Semelhante a Combatiendo Amenazas de Seguridad en la Nube - WatchGuard
Semelhante a Combatiendo Amenazas de Seguridad en la Nube - WatchGuard (20)
Mais de AEC Networks
Mais de AEC Networks (18)
Último
Último (20)
Combatiendo Amenazas de Seguridad en la Nube - WatchGuard
- 5. Anatomy of a Mail Transport System port 25 Forward port 25 traffic to internal mail server To: user@example.com Lookup MX record for example.com example.com MX record = 50.50.50.25 50.50.50.25
- 12. What happens if email is SPAM? Antispam solution
- 13. Let’s zoom in… WatchGuard Training Internet Internet link Firewall Anti-spam Quarantine Email Server
- 15. How can we improve the current model? Using the cloud!!! WatchGuard Training Internet Internet link Firewall Anti-spam Quarantine Email Server
- 18. Visítenos en el stand de AEC Electrónica y regístrese para la rifa de un iPod Shuffle.
Notas do Editor
- WatchGuard XCSAdministration Training Copyright © 2004-2005 watchguard Technologies Inc. All Rights Reserved
- The other reasons cybercrooks are hard to stop are legal, political, and financial. I’m going to sum this point up by telling one story that stands in for many others like it. [first bullet] In 2003, a lawyer named Aaron Kornblum filed Microsoft’s first lawsuit against spammers. Kornblum was a former Air Force prosecutor, and the state of Washington had just passed the Commercial Electronic Mail Act. This gave him a legal basis to try to stop the millions of messages spammers were sending to people with Hotmail accounts. The federal CAN-SPAM act hadn’t been passed yet. Microsoft operates 130,000 email accounts outside of spam filters. They never send email from these accounts and the addresses are never posted – yet in 2003, they had received 18 million emails. They believed spammers were using “dictionary attacks” against all addresses ending in “@hotmail.com.” They also found a lot of emails from spammers that claimed they were FROM hotmail.com. [second bullet] Nobody knows who spammers are! They can hide behind various IP addresses and aliases. So Kornblum had to go through a discovery phase, sending subpoenas to Internet Service Providers, forcing them to reveal who controlled the addresses that the spam was coming from. His team sent out more than 150 “John Doe” subpoenas. [third bullet] Armed with the info from the ISPs, Kornblum and his staff pored through five million addresses, finding which email accounts were owned or controlled by the same entity. This was how they determined who the worst offenders were. Among the small-time spammers were certain individual companies responsible for millions of spam emails. They became the main targets of Microsoft’s legal team. [fourth bullet] Microsoft then reaches out to other companies plagued by spam. Pfizer is especially eager to help. Why? Because they make Viagra! Ever seen any spam related to Viagra? Anyone? …Bueller? [fifth bullet] The coalition does a great job of their detective work, because various state Attorneys General – most notably, the New York Attorney General, Eliot Spitzer – advise them on how to gather evidence so it will hold up in court. Law enforcement helps, too. The evidence leads to this guy [hit space bar]. Robert Soloway, caught and convicted in December 2003. He is ordered to stop sending spam email and to pay $7 million dollars in damages. Happy ending, right? It took nine months, but they captured a spam king. But.. .there’s more to the story.
- [first bullet] Soloway simply was not going to stop spamming. Endless fountain of excuses: “I didn’t send them, my company sent them.” “My company didn’t send them, our affiliates sent them, and I can’t control them.” [second bullet] Soloway owed seven million to Microsoft and ten million to a company in Oklahoma. He kept appealing until the appeals ran out. But he didn’t pay, and authorities could not find his bank accounts. [third bullet] With a permanent injunction forbidding him to send email in the United States, Soloway relocated his operation to a country where his activities are not illegal, and they won’t extradite him to the US. Back in business! [fourth bullet] Because he ignored the results of civil trials, he is arrested under criminal law. A federal jury indicted him on charges brought by the FBI, the IRS, the FTC, and the US Postal Service. More legal wrangling ensues. [fifth bullet] July 2008, after a plea deal, he agrees to serve nearly four years in prison. But think about it – his sentence is 47 months. It took 67 months to catch, convict, and stop him! [last sentence] Bottom line: It took five years in court, numerous major corporations, and several branches of Federal and State governments to stop this spammer. During most of that time, he kept operating. In one three-month period, he sent more than 90 million spam messages. This is just one spammer! So if you’re counting on the good guys to stop all the bad guys for you… you need a new plan. You’re gonna have to learn to defend yourself!
- WatchGuard XCSAdministration Training Copyright © 2004-2005 watchguard Technologies Inc. All Rights Reserved