May l Washington, DC l Omni Shoreham The ROI of Messaging Security JF Sullivan VP Marketing, Cloudmark, Inc.
Parallels Summit © Cloudmark Inc. | CONFIDENTIAL 2 About Cloudmark Market Leader in Carrier-Grade Messaging Security Anti-Spam, Anti-Phishing, Anti-Virus Solutions Protecting 600 Million Mailboxes in 190+ countries Customers: Leading ISPs and Web Hosting Providers
Cloudmark & Parallels Partnership under development Integrated with Plesk solution
Parallels Summit © Cloudmark Inc. | CONFIDENTIAL 4 The Direction of Spam What do Spammers and Legitimate Sender(s) have in Common? Both send in order to Make $$$
Parallels Summit © Cloudmark Inc. | CONFIDENTIAL 5 The Direction of Spam Spammers challenged by advances in anti-abuse technologies.
Parallels Summit The Direction of Spam Spammers have responded.
Parallels Summit More Sophisticated Attacks Blended Threats Indistinguishable Phishing Attacks
Parallels Summit Higher Margin Spam Pump and Dump Image Spam
Parallels Summit Broader Distribution Bots Dynamic Server Mapping Target Attacker Servers Botnets for Spam Distribution
Parallels Summit Spam as % of Worldwide Volume Greater Volume of Spam 25% 95%
11 Impact on Web Hosting Companies Infrastructure Operations/Administration Customer Satisfaction Parallels Summit 2008
© Cloudmark Inc. | CONFIDENTIAL 12 What We’ve Learned Specific approaches and attacks can’t be predicted Flexible architecture is required for rapid integration of new anti-abuse schemes Analysis must be language and content- type agnostic Fast distribution of threat intelligence is key Parallels Summit 2008
13 Evolution of Spam 2002 Threats Solutions Whitelist IP Blacklist Content rules Attach Scan Policies More rules Desktop security URL Scan OCR More rules More policies Heuristics Laws Regulations Indictments Fingerprinting and collective network intelligence Mass MailingViruses Malicious HTML Phishing Image Spam Spyware Botnets Stock Scams Blended threats Hacked URLs Mutating attacks 25% Mid % % % spam % 13 Parallels Summit 2008
© Cloudmark Inc. | CONFIDENTIAL 14 How Fingerprinting Works Spam Legit. User Fingerprint Cache Reject AlgorithmsFingerprintsLocal Lookup/ Verdict
© Cloudmark Inc. | CONFIDENTIAL 15 Collective Network Intelligence: Cloudmark Example GLOBAL THREAT NETWORK SERVICE TRUST EVALUATION SYSTEM CLOUDMARK RESEARCH ADVANCED MESSAGE FINGERPRINTING TM ALGORITHMS Threats 15 Parallels Summit 2008
© Cloudmark Inc. | CONFIDENTIAL Fingerprinting Advantages Identifies mutations in real time Language, content agnostic Significantly less CPU intensive Higher Accuracy and Performance Updates every minute 16 Parallels Summit 2008
© Cloudmark Inc. | CONFIDENTIAL 17 Impact of Better Messaging Security Performance Filtering Accuracy Filtering servers Rack space Storage Support Churn Improved Management Admin 17 Parallels Summit 2008
© Cloudmark Inc. | CONFIDENTIAL 18 Web Hosting Typical Results SpamAssassin deployed Filtering accuracy at 75-80% Administering rules and lists became unmanageable Storage and mail servers getting overwhelmed Filtering 0.5 messages/sec Customer complaints about spam (approx. $6 customer complaint per spam message) Challenges Plug-in with fingerprinting Accuracy jumped to 98% (23% improvement) man-hours week saved in administration 700GB storage saved (2 yrs) Filtering 10 messages/sec 80-90% reduction in filtering servers (from 10 → 2) Near zero customer complaints related to spam Results 18 Parallels Summit 2008
© Cloudmark Inc. | CONFIDENTIAL 19 Economic Impact of Better Messaging Security Performance Filtering Accuracy Filtering servers Rack space Storage Support Churn +20% $6K - $30K $80K - $900K $20K- $100K $6K - $54K $30K - $150K Improved Management First Year Savings Admin $42K - $52K $180K -$1.3M 10X Faster 19 Parallels Summit 2008
20 Thank you