1. Protecting the Mac Environment:
Technical insight
Nikolay Grebennikov, CTO, Kaspersky Lab
Kaspersky Security for Mac Launch Event, Moscow, 14-16 May 2012
PAGE 1 |

2. Such a lovely device
100
80
100 85%
Million users
84%
60
56%
40 5% Market share
50%
20
14%
0
Desktop
US market share
Apple Mac Laptop Apple
MacBook
Anti-virus software users
According to Harris Interactive research, March 2012
PAGE 2 |

3. Protection with
Kaspersky Lab
technologies
1

4. Kaspersky Lab technologies for Mac
File Heuristic AV &
Anti-Virus Script Emulator
NEW Kaspersky
WEB Security
Anti-Virus Network NEW
Enhanced Parental
Control
NEW URL
Virtual Keyboard Advisor
PAGE 4 | 1

5. Benefits of the Cloud KSN
Enhanced
Blocking new threats Minimal reaction time
Services
Kaspersky Kaspersky
Security for MAC Security Network
Statistics
PAGE 5 | 1

6. Kaspersky Security Network services KSN
Enhanced
Millions of users from 213 countries
Urgent updates regarding new threats
File reputation
URL reputation
Malware detection statistics
PAGE 6 | 1

7. Cloud protection: how it works KSN
Enhanced
Update
ready for
download
Update
downloaded, cu
Update
stomer
created
protected
Malware
discovered No Cloud
Seconds
Hours
PAGE 7 | 1

8. Effective Hybrid Approach KSN
Enhanced
Cloud based Mac based
technologies technologies
Hybrid
approach
o Collects malware data o Works when you are
from PCs offline
o Reacts fast to new o Analyzes and collects
threats behavior patterns
o No need to store data on o Remediates and rolls
PC back malware actions
PAGE 8 | 1

9. Even better than just a cloud KSN
Enhanced
Faster protection against new threats
Limited data transfers to the cloud
Limited number of updates
Fastest possible reaction time
PAGE 9 | 1

10. Application control with Traffic Monitor NEW
WEB Anti-
Virus
TCP connect
Application Internet server
Traffic monitor
Redirection
Proxy
Protocol
parsing
PAGE 10 | 1

11. Traffic Monitor - an essential part of protection
Network connections intercepted in kernel mode
Routed to local proxy
Protocol parsing
File and URL verification
PAGE 11 | 1

12. Safe Internet with Web anti-virus NEW
WEB Anti-
Virus
URL WEB anti-virus
Verification in KSN
the cloud
Offline bases
verified
Heuristic
scanning
Signature
scanning
PAGE 12 | 1

13. Rich, Effective Web anti-virus functionality
Multi-level checking in the Cloud
Advanced heuristic engine
Complete signature bases with the full set of known malicious
scripts
PAGE 13 | 1

14. Script emulation for safe browsing Heuristic AV&
Script
Emulator
Script emulation
Web page
JavaScript Web page
open
engine ready
Java script
Signature
database
PAGE 14 | 1

15. Emulation technology: Key elements
Specialized virtual environment
JavaScript emulation
Iframe content verification
Utilization of signature database
PAGE 15 | 1

16. Backed up by even more technologies …
Traffic monitor
Protocol
parsing
• Web control • AV bases
• Time control • PE emulator
• Anti-phishing
• Personal data bases • Script emulator
protection • iSwift
• Heuristics
• Social networks • UDS for files
protection • UDS for URLs
PAGE 16 | 1

17. Efficient technologies = Efficient protection
Defense against new threats
Minimum reaction time
Network connection interception
Keeps your children safe online
Safeguards your private data
PAGE 17 | 1

18. The better the user understands the protection concept,
the better that user is protected
This applies to Mac users as well
PAGE 18 |

19. Thank you!
Questions?
Nikolay Grebennikov, CTO, Kaspersky Lab
Kaspersky Security for Mac Launch Event, Moscow, 14-16 May 2012
PAGE 19 |