THE LEADING GLOBAL IOT CONFERENCE 25-26 APRIL 2019, OLYMPIA, LONDON

Stand No: 380

 

Dialogic is a leading cloud-optimized solutions provider for real-time communications media, applications, and infrastructure to service providers, enterprises, and developers around the globe. Based in Parsippany, NJ with offices worldwide, Dialogic works with 48 of the world’s top 50 mobile operators, and nearly 1,000 application developers build and deploy on agile networks. Our global team of professional services experts is ready to help you with unparalleled support and consulting so you can get the most out of your network investment.

For more information on Dialogic, visit www.dialogic.com

Fortinet完成購併Bradford Networks 強化安全織網架構

Fortinet宣佈完成購併Bradford Networks，未來將藉由整合存取控制與物聯網安全解決方案，進一步強化Fortinet的安全織網架構，提供大型企業更寬廣的可視性(visibility)與安全性。

Fortinet創辦人、董事長暨執行長謝青表示，「大型企業的網路流量持續快速增加，存取網路的使用者和設備亦同速增長，相對地遭入侵的風險也就大幅提高。根據Forrester最近的研究顯示，82%的受訪企業甚至無法辨識出所有存取網路的設備。Bradford Networks的技術與Fortinet安全織網的結合，將能提供大型企業持續的可視性、微分區(micro-segmentation) ，以及所需的存取控制技術，來遏制網路威脅和封阻網路中未受信任的裝置。」

大型企業因此得以擁有更寬廣的可視性與安全性的複雜網路。

不管是端點、使用者、受信任與未受信任的裝置，以及存取網路的應用程式，包括物聯網和無頭(headless)設備，都能有完整、持續，不需代理(agentless)程式的可視性。

藉由設備微分區增強物聯網安全性，根據類型、配置，動態分類無頭設備，以及自動指派政策，進而能夠僅透過簡單的Web使用者界面精細地來隔離不安全的設備。

透過防止橫向移動的自動化工作流程的整合，迅速準確地進行事件分類和威脅控制。

* 由於高度可延展的架構，能輕易執行高經濟效益的部署，不需要在多站點的每個位置進行安裝。

由於Gartner和Forrester的廣泛肯定，Bradford Networks贏得了無數的獎項，深受全球大型企業的信任，以保護和抵禦不斷增加的受攻擊面。

Bradford Networks執行長Rob Scott表示，「我們很高興能與網路安全領導廠商Fortinet合作，為大型企業組織提供卓越的可視性和安全性。Bradford Networks的技術已經與Fortinet的安全織網架構（包括FortiGate、FortiSIEM、FortiSwitch和FortiAP產品）整合，即使在最嚴苛的安全環境中，例如重要基礎設施－電力、石油和天然氣，以及製造業，也能將網路威脅的風險和影響降到最低。」

Fortinet預計該交易不會對2018年5月3日所公佈的第二季度或全年2018年財務資訊產生重大影響。

資料來源:
http://www.ctimes.com.tw/DispNews-tw.asp?O=HK26B8L17TYSAA00N5
 

Fortinet extends security fabric to IIoT

Fortinet has extended its FortiGuard threat intelligence service to the industrial IoT (IIoT).

The new FortiGuard Industrial Security Service (ISS) builds on the threat intelligence services of FortiGuard Labs by providing application control and defensive signatures specific to critical infrastructure and industrial sector organizations.

The company is particularly targeting the utility, oil and gas, transportation, and manufacturing sectors.

FortiGuard ISS protects the most widely-used industrial control system (ICS) and supervisory control and data acquisition (SCADA) devices and applications. The service provides vulnerability protection, visibility and granular control over ICS and SCADA systems and is backed by real-time threat intelligence updates.

Enterprise and consumer demand has created an explosion in the number of IoT devices connecting to global networks. McKinsey estimates that 20 to 30 billion IoT devices could be connected globally by 2020, up from 10 billion to 15 billion devices in 2015. However, as devices proliferate, security risks also increase.

Traditionally, commercial and industrial networks and their IoT devices have operated in isolation, but the mainstreaming of things like smart cities and connected homes have begun to merge these devices within local, national and global infrastructures.

This is requiring organizations to rethink how they secure increasingly converged IT, OT and IoT networks and devices. Integrating distinct security tools into a unified Security Fabric enables organizations to collect and correlate threat intelligence in real time, identify abnormal behavior and automatically orchestrate a response anywhere across this complex IoT attack surface.

First published in NetworksAsia

資料來源:
https://www.telecomasia.net/tag/industrial-iot

Financial Services Cybersecurity: Addressing the Horizontal Attack Surface

The financial services industry is a prime target for cybercriminals, yet significant security gaps persist. PwC’s Global State of Information Security® Survey 2017 notes that “41 percent of financial services respondents ranked assessment of security protocols and standards of third-party vendors as the top challenge to information security efforts”.

This is despite the fact that cybersecurity requirements for financial institutions are detailed and specific. Almost all financial services organizations are subject to the Gramm-Leach-Bliley Act (GLBA), requiring information security training, specific policies, scanning and other activities. The Payment Card Industry Data Security Standard (PCI DSS) applies only to companies that process card payments, and the Dodd-Frank Wall Street Reform and Consumer Protection Act was designed to protect consumer financial data. And now, the new General Data Protection Regulation (GDPR) adds another layer of privacy protection by imposing controls on any business that collects the personal data of EU citizens, including imposing the right of individuals to have their data wiped from systems. These new regulations are combined with severe financial penalties for failure to comply. The GDPR takes effect on May 25, 2018.

With industry-specific compliance requirements driving security spending and deployment, it’s natural to assume that best practices for securing access to sensitive data are different from vertical to vertical. However, that assumption may be changing. 

According to findings from Fortinet’s Global Threat Landscape report, much of today’s attack surface is shared across industries. This article describes today’s horizontal attack surface and shares best practices on how security leaders can mitigate network threats.

Cyber Crime Matures and Expands

Financial services organizations are adopting virtualization technology such as virtual private datacenters. They’re moving to the cloud. They’re adopting more and more IoT devices. More smart devices are connecting to the network. As they do so, the threat landscape continues to expand. The upshot is an increased overall potential of attack vectors that adversaries can take advantage of.

As this infrastructure broadens, financial services organizations are losing visibility and control into that infrastructure. Cyber criminals will use these blind spots to their advantage, and their success rate in penetrating the network will be much higher. At the same time, the cyber crime ecosystem is maturing. Crime-as-a-Service infrastructures enable adversaries to operate on a global scale at light speed. Malicious actors are using automation and sophisticated hacking tools that will increase the attack volume.

Three Key Trends

One report found that the median ratio of HTTPS (encrypted) to HTTP (non-encrypted) traffic hit a high mark of nearly 55 percent. This means that a higher percentage of communications are now encrypted. From a privacy perspective, this is great news. However, from a security perspective, organizations – including those in the financial services industry – don’t have visibility into that particular communication channel, which means it could be malicious. Adding to the problem, adversaries are using encrypted communications more and more as well, using what was created as a security measure to hide their activity.  

Encryption is the first important trend discovered in the latest report. The second is an increase in cloud applications. The median number of cloud applications used per organization was 62, which is roughly one-third of all applications detected. As financial services organizations use more and more of these cloud apps, their data is going to reside in the cloud. Again, this creates a loss of visibility into what’s happening to that data.  

The third trend, gleaned from cluster analysis, is that much of the attack surface is shared across all industries. With the exceptions of education and telco, the rest of the industries studied share that same attack surface. The analysis revealed that many of the same attack vectors bridged all regions as well as all industries. This makes it much easier for cyber criminals to leverage their automated tools across the entire attack surface that spans most industries than they would if the attack surfaces were different. The threat problem is truly a global as well as a horizontal problem now.

Best Practices

In light of attack capabilities that transcend traditional boundaries of region and industry, there are several best practices that will help financial services organizations mitigate network threats.

First, organizations must have visibility into the assets that they are responsible for securing. This involves reducing the attack surface, ensuring good vulnerability and patch management processes are in place, and—equally as important—understanding how assets are communicating with each other. It also involves situational awareness: a high degree of visibility into the network paired with a high level of understanding of the threats that the organization is facing.

Second, create a strategy for combatting the automated cybercrime ecosystem. Humans cannot operate at the speed and scale required to overcome automated threats, so organizations must fight automation with automation. That means getting technology controls working together and communicating across all attack vectors.

Finally, organizations will benefit from building relationships with peers outside of the region or the industry they operate in. Threat intelligence and successful mitigation tactics can be exchanged for the good of all.

Evolving the Security Landscape

The financial services industry today faces the same cyber threats as almost every other industry – the attack surface has truly become horizontal. Visibility and control over today’s infrastructures are diminishing as the number of potential attack vectors continues to grow across the expanded network landscape. This improves criminals’ chances of success, but IT finserv professionals can fight back with knowledge of the trends affecting the network and the implementation of sound practices – particularly automation. Going back to basics and expanding relationships beyond traditional boundaries will help create a more secure network.

Original article published in Banking.com and can be found here.

Read more on how to best prepare your organization for the General Data Protection Regulation (GDPR).

by Bill Hogan  |  Nov 03, 2017  |  Filed in: Industry Trends

資料來源:
https://blog.fortinet.com/2017/11/03/financial-services-cybersecurity-addressing-the-horizontal-attack-surface

FortiDDoS Launches Support for FortiGuard Domain Reputation Service for IoT and Botnet Based DDoS Attack Mitigation

FortiDDoS Launches Support for FortiGuard Domain Reputation Service for IoT and Botnet Based DDoS Attack Mitigation

by Hemant Jain  |  Sep 06, 2017  |  Filed in: Industry Trends

 

CSPs and Proliferation of DNS Based DDoS Attacks

DNS is used in over 91% of malware communication today (vs. direct IP) in order to contact Command & Control (C&C) servers. Phishing attacks that distribute malware also depend heavily on DNS. And recent cases of ransomware attacks, such as last year’s massive Mirai attack that caught the world by surprise, are perfect examples of where DNS is used for this communication.

Mirai means “The Future” in Japanese and started as a technology research source code that was made available to the public. Nothing malicious. However, in the hands of a crafty coder, it was weaponized. What made Mirai so lethal is the combination of the three factors shown below.

As a result, the speed and proliferation of Mirai was unprecedented. It used DNS to connect with its Command and Control (C&C) servers and launch its large-scale DDoS attacks. If such large-scale DDoS attacks have to be thwarted, one approach is to disrupt the communication between the botnet and the C&C servers. If the IoT-based botnet cannot communicate with its C&C servers, a critical avenue of its DDoS attacks can be blocked.Because so many IoT devices are headless or void of self-contained intelligence, they make easy take-over targets. And the scale of IoT networks makes them perfect for a botnet.

The map below shows the geo-locations of the CSPs (communication service providers) affected by Mirai. It is safe to say that its impact was global, affecting anywhere there were communication infrastructures. As the owners of communication infrastructures, CSPs need to protect their networks, as well as those of business and consumer subscribers from emerging threats such as IoT-based DDoS attacks.

A case in point is Dyn; a company that provides managed Domain Name Services (DNS). (DNS is essentially the phone book that maps organization internet domain names to the corresponding cryptic Internet Protocol (IP) address.) Dyn is famous because it is one of the largest, fastest, and most resilient DNS networks in the world. And yet Mirai brought down Dyn’s Managed Domain Name Services (DNS) resulting in Internet users being unable to reach many of its DNS customers, including such Internet stalwarts as PayPal, Twitter, Reddit, Amazon, Netflix, and Spotify. The message is clear – IoT DDoS attacks carry a massive and real cost.

The Mirai DDoS Botnets targeted DNS in order to connect to its Command and Control (C&C) servers and launch its large-scale DDoS attacks. One approach to thwarting such large-scale DDoS attacks is to disrupt the communication between the botnet and the C&C servers. If the IoT-based botnet cannot communicate with its C&C servers, a critical avenue of its DDoS attacks can be blocked.

Communication Service Providers (CSPs) need to protect their networks, as well as those of business and consumer subscribers, from threats such as IoT-based DDoS attacks. Which is why a DNS-based security layer is an important additional security layer to defend against these emerging attacks,

Details of C&C Structure and DNS Resolution

As shown in the diagram above, during the Dyn attack the C&C domain would change its address in order to segment the botnet. To do this, the botmaster simply changed the return address. They could then use the same domain to create and operate multiple separate botnets simultaneously. New bots would connect to the new address, while older bots continued to communicate with the previously labeled server.

FortiGuard Domain Reputation Service

The FortiDDoS appliance has patented firmware designed to repel large scale DDoS attacks on DNS servers.

In addition to its existing features for DNS based DDoS attack mitigation, the DDoS appliances now also support the newly launched FortiGuard Domain Reputation Service.

With over one million domains identified and updated daily, the FortiGuard Domain Reputation Service maintains a database of suspect domains. Licensed FortiDDoS appliances query this service and download this list daily.

When a DNS resolver is protected via FortiDDoS, the FortiDDoS appliance transparently observes each and every DNS query and related response packets crossing over it. If a query is made to any of the suspect domains in the list, the query is simply not forwarded to the resolver and is not responded to. The client eventually times out.

Additionally, the administrator of the FortiDDoS appliances can manually upload a list of domains that must be blocked. This list can also be of the order of a million domains, and is expected to be sufficient for current generation of requirements.

As a result, any client making queries to these domains cannot reach the C&C servers and participate in their DDoS attacks.

Deployment Examples for CSPs

As shown in the figure above, the FortiDDoS appliance is deployed in front of a CSP’s open DNS resolver. FortiDDoS’s ability to restrict DNS queries to only the CSP’s own subscribers’ subnets can be used to filter and drop queries that are not from its own subscriber base. Additionally, if a client within the subscriber base makes a DNS query for a suspect domain due to a botnet infection, such as to reach a C&C server, the FortiDDoS appliance will simply drop the query due to that IP being in the Domain Reputation Service’s suspect list. The rest of the DNS communication with DNS authoritative and recursive servers on the Internet and its own subscribers will continue to work as desired.

Conclusion

The FortiGuard Domain Reputation Service License for FortiDDoS is yet further ammunition to use against the growing threat of the IoT and botnet attacks, which are easier than ever to launch due to proliferation of open source code for such attacks, and growing availability of vulnerable devices.

by Hemant Jain  |  Sep 06, 2017  |  Filed in: Industry Trends

資料來源:
https://blog.fortinet.com/2017/09/06/fortiddos-launches-support-for-fortiguard-domain-reputation-service-for-iot-and-botnet-based-ddos-attack-mitigation
 

Dialogic to Host Application to Innovation Summits Around the Globe

Posted: May 25, 2017 9:21 PM

 

Events feature insight from Ovum and new Dialogic solutions integrating IoT, AI, and next generation technology

Parsippany, NJ (PRWEB) May 25, 2017

Dialogic, a cloud-optimized applications and infrastructure solutions provider for service providers, enterprises, and developers, announced today that it will be holding a series of half-day Application to Innovation (A2I) Summit events to showcase ways to engage customers by combining real-time communications with IoT, AI, and next generation technology.

The A2I Summits will feature guest speaker and host, Pamela Clark-Dickson, Practice Leader in Ovum’s Consumer Services research pillar, who will present highlights from Ovum’s Digital Insights 2017 survey and discuss the next wave of convergence between AI, chat bots, IoT, and customer engagement. Experts from Dialogic, Peter Kuciak, Global Vice President of Applications and Solutions, and Thomas Schroer, Sr. Director of Marketing will elaborate on solutions that help service providers build innovative services for businesses and entrepreneurs to better engage their on-the-go, mobile workforce and customers.

Other highlights of the events include exploration of new ways and new modes of communication to enable context and intelligence sharing between people, entrepreneurs, businesses, and the Internet of Things (IoT), and a look at the many ways service providers can leverage their networks to design, develop, test, pilot, and deploy innovative applications and solutions.

The first summit will be a collocated event at the upcoming TechxLR8 in London on June 13th, starting at 1:30 PM (GMT + 1) at the ExCel convention center.

London
TECHXLR8 - ExCeL London
Royal Victoria Dock, 1 Western Gateway, London, E16 1XL
June 13th Registration and light refreshments start at 1:30 pm with the Summit commencing at 2:30 pm    

Additional 2017 A2I Summits are also scheduled for the following locations (specific times TBD):

Singapore 
TECHXLR8 Asia
Marina Bay Sands, 10 Bayfront Avenue, Singapore
October 2nd

Tokyo
Toshi Center Hotel
2-4-1 Hirakawa-cho, Chiyoda-ku, Tokyo 1-2-0093, Japan
October 20th

For more information, and to reserve your seat, please go to the A2I Summit Web Page.

About Dialogic

Dialogic is a leading cloud-optimized solutions provider for real-time communications media, applications, and infrastructure to service providers and developers around the globe. Based in Parsippany, NJ with offices worldwide, Dialogic helps 48 of the world’s top 50 mobile operators, and nearly 3,000 application developers build and deploy on agile networks. Learn more about how Dialogic is enabling agility by following us on Twitter @Dialogic, and visiting http://www.dialogic.com and the Dialogic Blog for the latest industry news, trends and advice.

Dialogic is a registered trademark of Dialogic Corporation or a subsidiary thereof (“Dialogic”). Other trademarks mentioned and/or marked herein belong to their respective owners.

Contact
Dialogic
Chika Kim
Digital Marketing Manager
+1 973 967 6294
chika.kim(at)dialogic.com

 

For the original version on PRWeb visit: http://www.prweb.com/releases/2017/05/prweb14369820.htm

This article was originally distributed via PRWeb. PRWeb, WorldNow and this Site make no warranties or representations in connection therewith.

Information contained on this page is provided by an independent third-party content provider. Frankly and this Site make no warranties or representations in connection therewith. If you are affiliated with this page and have questions or removal requests please contact pressreleases@franklyinc.com

資料來源： http://www.erienewsnow.com/story/35515382/dialogic-to-host-application-to-innovation-summits-around-the-globe
 

Fortinet Threat Landscape Report Examines How Cybercriminals Are Building an Army of Things Creating a Tipping Point for Cybersecurity

Research Reveals Constantly Changing and Sophisticated Avenues of Attack Targeting Evolving Technology Infrastructure Enabled by a Fast-growing Underground Cybercrime Economy

SUNNYVALE, Calif. - Mar 28, 2017

 
 

Phil Quade, chief information security officer at Fortinet

“The cybersecurity challenges facing organizations today are complex with a threat landscape that is rapidly evolving. Threats are intelligent, autonomous, and increasingly difficult to detect, with new ones emerging and old ones returning with enhanced capabilities. In addition, the accessibilty of threat creation tools and services combined with the reward potential is driving the growth of the global cybercrime market into tens of billions of US dollars. To protect themselves, CISOs need to ensure that the data and security elements across all of their environments and devices are integrated, automated, and able to share intelligence, across an organization, from IoT to the cloud.”

News Summary
Fortinet® (NASDAQ: FTNT), the global leader in high-performance cybersecurity solutions, today announced the findings of its latest Global Threat Landscape Report. The research reveals the methods and strategies cybercriminals employed in detail and demonstrates the potential future impact to the digital economy. The question, “What’s my biggest threat?” remains difficult to pinpoint as old threats resurface, but new, automated and high-volume attacks arise. For a detailed view of the research visit our blog. Highlights follow:

Infrastructure Trends and How They Relate to Threats

• Considering infrastructure trends and how they relate to the threat landscape is important. Exploits, malware, and botnets do not happen in a vacuum and finding or preventing threats gets increasingly complicated as network infrastructure evolves.
• Data shows encrypted traffic using SSL stayed steady at about 50% and accounted for roughly half of overall web traffic traversing within an organization. HTTPS traffic usage is an important trend to monitor, because while it is good for privacy, it presents challenges to detecting threats that are able to hide in encrypted communications. Often SSL traffic goes uninspected because of the huge processing overhead required to open, inspect, and re-encrypt traffic, forcing teams to choose between protection and performance.
• In terms of total applications detected per organization, the number of cloud applications trended up at 63, which is roughly a third of all applications detected. This trend has significant implications for security since IT teams have less visibility into the data residing in cloud applications, how that data is being used, and who has access to it. Social media, streaming audio and video, and P2P applications did not trend up sharply.

An Army of Things Powered by the Digital Underground

• IoT devices are sought-after commodities for cybercriminals around the world. Adversaries are building their own armies of "things" and the ability to cheaply replicate attacks at incredible speed and scale is a core pillar of the modern cybercrime ecosystem.
• In Q4 2016, the industry was reeling from the Yahoo! data breach and Dyn DDoS attack. Before the quarter was halfway done, the records set by both events were not only broken, but doubled.
• Internet of Things (IoT) devices compromised by the Mirai botnet initiated multiple record-setting DDoS attacks. The release of Mirai’s source code increased botnet activity by 25 times within a week, with activity increasing by 125 times by year’s end.
• IoT-related exploit activity for several device categories showed scans for vulnerable home routers and printers topped the list, but DVRs/NVRs briefly eclipsed routers as the thing of choice with a massive jump spanning 6+ orders of magnitude.
• Mobile malware become a larger problem than before. Though it accounted for only 1.7 percent of the total malware volume, one in five organizations reporting malware encountered a mobile variant, nearly all was on Android. Substantial regional differences were found in mobile malware attacks, with 36 percent coming from African organizations, 23 percent from Asia, 16 percent from North America, compared to only 8 percent in Europe. This data has implications for the trusted devices on corporate networks today.

Automated and High-Volume Attacks Are Prevalent

• The correlation between exploit volume and prevalence implies growing attack automation and lowering costs for malware and distribution tools available on the dark web. This is making it cheaper and easier than ever for cybercriminals to initiate attacks.
• SQL Slammer ranked at the top of the exploit detection list with a high or critical severity ranking, mainly affecting educational institutions.
• An exploit indicating attempted brute force attacks on Microsoft Remote Desktop Protocol (RDP) ranked second in prevalence. It launched RDP requests at a rate of 200 times every 10 seconds, explaining the high volume detected across global enterprises.
• Ranking third in prevalence is a signature tied to a Memory Corruption vulnerability in Windows File Manager that allows a remote attacker to execute arbitrary code within vulnerable applications with a jpg file.
• H-Worm and ZeroAccess had the highest prevalence and volume for botnet families. Both give cybercriminals control of affected systems to siphon data or perform click fraud and bitcoin mining. The technology and government sectors faced the highest numbers of attempted attacks by these two families of botnets.

Ransomware Isn’t Going Anywhere

• Ransomware warrants attention regardless of industry and this high-value attack method will likely continue with the growth of ransomware-as-a-service (RaaS), where potential criminals with no training or skills can simply download tools and point them at a victim.
• 36% of organizations detected botnet activity related to ransomware. TorrentLocker was the winner and Locky placed third.
• Two malware families, Nemucod and Agent, went on a crime spree. 81.4 percent of all malware samples captured belonged to just these two families. The Nemucod family is infamously affiliated with ransomware.
• Ransomware was present in all regions and sectors, but particularly widespread in healthcare institutions. This remains significant because when patient data is compromised the ramifications can be much more severe, as it has greater longevity and personal value than other types of data.

Daring Exploits, But Old is New

• Adversaries took a "leave no vuln behind" policy. Unfortunately, attention focused on security patches and flaws in old devices or software, means less time and attention to focus on the growing attack surface accelerated by the digital devices of today.
• A full 86% of firms registered attacks attempting to exploit vulnerabilities that were over a decade old. Almost 40% of them saw exploits against even older CVEs.
• An average of 10.7 unique application exploits were tracked per organization. About 9 in 10 firms detected critical or high-severity exploits.
• Overall, Africa, Middle East, and Latin America exhibited a higher number and variety of encounters for each threat category when comparing the average number of unique exploit, malware, and botnet families detected by organizations in each world region. These differences appeared most pronounced for botnets.

Report Methodology
The Fortinet Global Threat Landscape report represents the collective intelligence of FortiGuard Labs during Q4 2016 with research data covering global, regional, sector, and organizational perspectives. It focuses on three central and complementary aspects of the threat landscape: application exploits, malicious software (malware) and botnets.

Additional Resources

• Learn more about the Fortinet Security Fabric.
• Read more details about the report on our blog and view the video or infographic.
• Access the full report online.
• Follow Fortinet on Twitter, LinkedIn and Facebook

 資料來源：Fortinet Website
https://www.fortinet.com/corporate/about-us/newsroom/press-releases/2017/threat-landscape-report-examines-cybercriminals.html
 

Fortinet Extends Security Fabric Protection into the Internet of Things

Fortinet Announces Security Fabric Capabilities to Arm Enterprises with Visibility and Control to Defend Against Rising Threats from IoT

SUNNYVALE, Calif., January 31, 2017

Phil Quade, chief information security officer at Fortinet
“Malicious cyber actors have been increasingly targeting the billions of IoT devices online today, essentially turning the Internet of Things into an Internet of Threats. It’s critical that today’s enterprises implement security solutions that can identify, understand, and protect their infrastructures from the massive attack surfaces created by IoT. The Fortinet Security Fabric arms enterprises with proven security capabilities today, while providing a foundation for the visibility and automation required to maintain an effective IoT cybersecurity posture in the future.”

News Summary
Fortinet® (NASDAQ: FTNT), the global leader in high-performance cybersecurity solutions, today announced the extension of the Fortinet Security Fabric to defend enterprises against the exponentially increasing cyber threats posed by the Internet of Things (IoT). Fortinet’s Security Fabric delivers the visibility, integration, control and infrastructure scale required to successfully defend the complex attack surfaces created by the ongoing proliferation of IoT devices.

A Security Fabric is Necessary to Defend Against IoT’s Massive Volume and Scale
Recent IoT-based attacks have revealed the sheer volume and ease by which billions of devices can be weaponized and used to disrupt the digital economies of entire countries and millions of users. These issues are compounded by the lack of basic security features and management capabilities in many IoT devices.

This is a major challenge for enterprises today whose data needs to remain secure as it traverses many types of devices and environments, from tablets to cloud applications. Current point products and platform security solutions lack the visibility and wider network integration necessary to see, let alone secure, the IoT attack surface.

The Fortinet Security Fabric Expands to Meet Today’s IoT Security Requirements
To successfully defend the massive scope of IoT and the cloud, organizations need to implement a Security Fabric that scales the entire infrastructure for comprehensive visibility, segmentation, and end-to-end protection. Enterprises need to consider three strategic network security capabilities to harden their infrastructure against IoT threats:

1.  Learn – Complete network visibility is critical to securely authenticate and classify IoT devices, build risk profiles, and then assign IoT device groups based on identified trustworthiness. At the core of the Fortinet Security Fabric, FortiOS provides total IT awareness and visibility into every security element and enterprise networking component. This enables IT to identify and manage their IoT devices and traffic at critical points within the infrastructure.

2.  Segment –Enterprises need to be able to segment IoT devices and communications into policy-driven groups and grant baseline privileges suitable for the specific IoT risk profile. Fortinet’s Internal Segmentation Firewall enables enterprises to internally segment their networks and devices, allowing IT to apply layered security policies based on the specific device type and network access requirements.

3.  Protect – Fortinet’s Security Fabric provides the required capability to correlate IoT security incidents and threat intelligence to deliver a synchronized response to IoT threats. It also ensures that compromised IoT devices can be quarantined and remediated at multiple points within the network to contain threats and ensure that malicious traffic never reaches critical IT systems or enterprise data.

Fortinet’s Security Fabric is trusted by some of the largest enterprises and government organizations in the world to secure their critical IoT devices, spanning industrial applications and public utilities.

"Panasonic Avionics takes the safety of passengers and the security of our inflight entertainment and communications (IFEC) systems extremely seriously, and we have extensive internal processes in place to identify potential and emerging vulnerabilities. Working with Fortinet, we have enhanced our ability to capture log files and identify potential threats to aircraft and the communications networks they use. As a result, we are now even better positioned to ensure that our systems are secure in an increasingly expanding IoT threat landscape." - Michael Dierickx, ‎Information Security Officer at Panasonic Avionics Corporation

Security Fabric Automation is the Key to A Secure Future for IoT
Fortinet has laid the foundation for its continued innovation with its Security Fabric vision to deliver Intent-Based Network Security. With Intent-Based Network Security, enterprises can automate the execution of their IoT strategy and operations by translating business needs into synchronized network security actions without human intervention. Fortinet is actively driving the development of IoT security innovation and already holds dozens of issued and pending IoT security patents.

Additional Resources

• Please visit www.fortinet.com for more details about Fortinet’s IoT Security strategies and solutions.
• Follow Fortinet on Twitter and LinkedIn, and Facebook.  
• Join the conversation on the Fortinet blog.
  • Defining and Securing IoT (Blog)
  • Extending the Security Fabric: FortiOS 5.6 and Intent-Based Network Security (Blog)

資料來源：Fortinet Website
https://www.fortinet.com/corporate/about-us/news-events/press-releases/2017/extends-security-fabric-protection-internet-of-things.html
 

Fortinet Announces Acquisition of AccelOps

 

Dear Partner,   As part of our commitment to build on our foundation of innovation, extend our Security Fabric vision, and maximize the business opportunity with our partners, Fortinet today announced the acquisition of AccelOps. Below is an overview about this strategic announcement and what it means for our important partnership together.   Extending the Security Fabric With Advanced Analytics and Security Intelligence Across Physical, IoT, Cloud and Multi-vendor Networks 1.    AccelOps is known as a leading provider of network security monitoring and analytics solutions. This announcement further extends our recently announced Security Fabric to enhance network security visibility, security data analytics and threat intelligence across multi-vendor environments. 2.    Our mutual customers are grappling with a lack of a holistic view across the entire distributed, multi-vendor network and the growing quantity of threat information creates a big data security challenge. 3.    AccelOps’s Security Operations Center (SoC) and Network Operations Center (NoC) capabilities will power managed security service providers (MSSPs) and Fortinet Support Services, including a new subscription service called FortiCare 360°. 4.    This acquisition opens up the $2 billion SIEM market as a new opportunity for you along with Fortinet. It also helps broaden the security conversation to the C-suite, as SIEM technologies are often a central part of the CISO’s technology strategy.    You can read more about the announcement in our news release or blog.   Join in the conversation! We encourage you to engage with us on social media and share the news. You can find existing social content already online on our company social channels on Twitter and LinkedIn and Facebook.     Anne Bourgeois International Sr. Channel Director

 

 

www.fortinet.com

Contact: international_partners@fortinet.com

Follow Fortinet

905, Rue Albert Einstein, 06560 Valbonne Sophia Antipolis, France, Phone: +33 (0)4 89 87 00

You are receiving this communication because you are a Fortinet customer or partner or because you have agreed to receive information from us. If this is not the case and you do not want to receive any further communication from Fortinet, please click here to unsubscribe.

© Fortinet 2016 Terms of Service & Privacy Policy. Fortinet is a leading provider of network security appliances and the market leader in Unified Threat Management. Our Certifications, awards and customer references reflect our ongoing Innovation in this sector. © Fortinet 2016 Terms of Service Policy

 

資料來源：Fortinet

i3forum and OVCC Merge to Extend Telco Transformation and Video Communications

Tuesday, May 03, 2016

New organization announces incorporation along with scope and membership expansion

PARIS – May 3, 2016 – Leading technology consortia the i3forum and the Open Visual Communications Consortium (OVCC) today announced a merger that extends i3forum’s focus and influence well beyond telecommunications providers, to enterprises and the broad array of vendors, systems integrators and other organizations working to meet their visual communications needs. The new organization, which is incorporated as a not-for-profit in the United States, plans to increase the number of technology vendors counted among its currently predominantly carrier-focused membership.

 

i3forum, established in September 2007 to drive development of international IP interconnections among telecommunications providers and fight fraud, announced in February 2016 the expansion of its previous scope to include other advanced technologies such as IPX, IMS, NFV, APIs and IoT. Until now, OVCC has focused on the development of a global, standards-based visual communication network specification defining the technical and commercial terms required to implement a ubiquitous video service, supported across multiple carriers and equipment providers.

 

“The strategic expansion of the i3forum’s membership, goals and activities through its merger with OVCC enables it to address two of the most important areas for its telco members: the effective transformation of their own networks and the associated service development and delivery capabilities; and successfully supporting the ever-growing demands of the enterprises that use their networks to consume advanced services like visual communications,” said Catherine Haslam, senior analyst for Wholesale Telecoms at Ovum. “Expanding the vendor component of i3forum’s membership broadens the scope of the discussion, brings fresh new perspectives to the issues the forum is working to address, and enables the alignment of telco and vendor roadmaps.”  

The OVCC is a group of global video exchange providers, network providers and equipment manufacturers that united to expand video communications and simplify video calls. OVCC members create multi-vendor, multi-network specifications offering a technical blueprint and business model to support the full spectrum of video systems, from immersive telepresence and room-based systems to high definition and standard definition, and from desktop clients to mobile devices. Its founding members include AT&T, BCS Global, BT, Orange and Polycom.

“With members from the world’s largest video providers, both OVCC and i3forum for years have independently promoted global network compatibilities, best practices, standards and innovation,” said Clive Sawkins, president of the OVCC. “As the communications industry continues to grow exponentially and globally, the merged organization will combine efforts and resources to help service providers, carriers and enterprises deploy and consume services safely across network boundaries, between public and private clouds, and over the public internet.”

Previously including 55 member organizations, including the top telecommunications providers in every global region, the i3forum has a strong history of driving collaboration and innovation to advance the business goals and technology of members and their customers. The forum publishes recommendations for best practices among industry leaders, promotes the role of carriers in the emergence of new technical, operational and commercial models, and combats telecommunications fraud directed at businesses and consumers. Twenty-three members have already pledged to join the new i3forum as founding members, benefiting from discounted membership dues for the first year. These include AT&T, BTS, CITIC Telecom, Deutsche Telekom, Dialogic, Epsilon Group, GENBAND, Hot Telecom, iBasis, Metaswitch, Orange & Orange Poland, OTEGLOBE, PCCW Global, Post Luxembourg, SFR, Syniverse, Tata Communications, Telefonica Business Solutions, Telia Carrier, Telenor, Telstra, TI Sparkle, TNZI and WIS Telecom.

The i3forum’s annual conference, held in conjunction with ITW in Chicago, attracts hundreds of participants from member and other organisations and has long been considered among the industry’s leading venues for discussion of topics such as IPX, VoLTE and virtual PoPs. This year’s conference will be expanded to cover visual communications.

“Bringing OVCC and i3forum together creates an organization with a broad scope and a unique ‘end-to-end’ capability that encompasses the underlying IPX network and services such as unified communication,” said Philippe Millet, i3forum president and vice president of partnerships at Orange. “It is the perfect response to the evolution of the industry, and will allow members and industry stakeholders to look more broadly at challenges and opportunities, foster new ecosystems and enable the transformation of the industry.”

About The i3forum 
The i3forum is an organization of the international carrier ecosystem that brings together all stakeholders in order to help define best practices, promote and foster adoption of Industry transformation, and encourages innovation. The i3forum is a not-for-profit, membership funded forum. It is not a standardization body. It works closely with other Industry organizations, avoiding duplication of work and focusing on actionable practical recommendations and solutions for the Int’l Carriers industry. i3forum recommendations are made public when finalized. The i3forum values the diversity of its membership. It strives to take an unbiased, holistic approach – factoring in the multiple technical, operational, business angles from the perspective of the various types of stakeholders. For more information visit www.i3forum.org.

Media Contacts: 
Wilson Craig

Mindshare PR 
+1 408-516-6182
wilson@mindsharepr.com 

資料來源：Dialogic Website
http://www.dialogic.com/en/company/press-releases/2016/2016-05-02-i3forum-and-ovcc-merge.aspx
 

Rapid7一次公布了7款嬰兒監視器的10個安全漏洞

這份報告彰顯了物聯網的安全議題，Rapid7指出，各種廠牌的產品都含有安全漏洞並不是嬰兒監視器產品獨有的現象，
其實是物聯網裝置的一個縮影，突顯出不安全的物聯網天性。

資安業者Rapid7一次公布了7款嬰兒監視器的10個安全漏洞，這些含有漏洞的監視器涉及6個品牌，包含iBaby Labs、Philips與Summer Infant等。
某些監視器內含一個以上的安全漏洞，有些漏洞允許系統存取，有些漏洞讓駭客得以濫用監視器服務。其中iBaby Labs有M6與M3S兩款裝置上榜。
Rapid7說明，ibabycloud.com網站上有一漏洞會允許任何有合法授權的使用者能夠檢視其他使用者的監控器內容，而iBaby M3S則是含有後門憑證漏洞。

Philips的Philips In.Sight B120/37則含有3個漏洞，允許駭客存取伺服器與串流內容。
Summer Infant的Summer Baby Zoom WiFi Monitor與Internet Viewing System內含一可允許駭客繞過認證機制的安全漏洞，
以及另一個權限擴張漏洞。Lens Laboratories的Peek-a-View、Gynoii的同名產品與TRENDnet的TRENDnet WiFi Baby Cam TV-IP743SIC皆含有後門憑證漏洞。

後門憑證（Backdoor Credentials）是這些產品最常見的安全漏洞，指的是它的硬體含有預設的帳號與密碼，透過UART介面即可取得，
然後就能存取相關裝置作業系統的最高權限。

事實上家中的監視器受到入侵導致私密生活隱私外洩或受到干擾的事件已經不是新聞，去年國外就曾經發生過駭客入侵嬰兒監視器遠端嚇小孩的真實案例。
去年也曾傳出全球上萬台的網路攝影機由於使用出廠預設的帳密而遭到破解入侵，影像全都被放上網路開放供全世界免費即時觀看。
今年七月，台中一名吳小姐在所住的套房中安裝網路攝影機以監控飼養的貓咪，結果攝影機被人入侵，私密生活疑遭人偷窺。

這份報告彰顯了物聯網的安全議題，Rapid7指出，各種廠牌的產品都含有安全漏洞並不是嬰兒監視器產品獨有的現象，其實是物聯網裝置（IoT）的一個縮影，
突顯出不安全的物聯網天性，未來物聯網裝置的多樣性與眾多的品牌都將迎來安全風險，因而鼓吹業者加入發展「IoT信賴框架」，以建立物聯網裝置的隱私與資訊安全標準。
（文/陳曉莉發表）

相關訊息請洽懇懋科技www.phitech.com.tw 或 marketing@phitech.com.tw