Case Studies – Cube Cyber

Queensland Based Manufacturing Company

CubeCyber Team — Fri, 24 May 2019 06:38:57 +0000

The company had recently experienced a compromise, and this resulted in a number of fraudulent emails getting sent from the compromised device to several suppliers requesting that future invoices be paid to a new bank account.

The technical security controls in place at the company were very limited, including a basic Wi-Fi modem firewall with limited anti-virus protection. These controls were not configured or managed effectively leaving gaps in their ability to protect the organisation.

Cube Cyber were engaged to provide investigative assistance with the incident and recommend possible solutions to improve overall security and prevent further occurrences. Our team initially analysed the current threat and assisted the customer in recovering from the attack. Once the source of the comprise was dealt with, Cisco Umbrella and Cisco AMP for Endpoints was deployed to ensure there were no compromised hosted or malicious activity remaining on the network.

In addition to bolstering security against ransomware and other Internet threats, Cisco Umbrella enabled the company to control and filter the types of websites that staff accesses while using corporate devices, both on and off site. Cisco AMP for Endpoints was deployed to rapidly detect, contain, blocks and remediate advanced malware and threats across in real-time should a similar incident occur in the future.

UK Based Specialist Building Contractor

CubeCyber Team — Fri, 24 May 2019 06:37:18 +0000

The company was experiencing regular disruptions through virus infection with a number of PC’s recently requiring a full rebuild due to a Ransomware infection. This was starting to significantly impact overall staff productivity. Issues such as staff either not opening or deleting legitimate business emails due a fear of malicious software.

Cube Cyber were engaged to provide investigative assistance and recommend possible solutions to improve overall security and prevent further occurrences. To cover the main sources of an attack and reduce the overall risk to the company from external and internal threats, we prosed a solution to bolster security and protect against malicious software, malicious websites and Email attacks.

Our Managed Security Service using Cisco AMP, Umbrella and Fireeye’s Email Laundry was proposed to protect the business from advanced cybersecurity threats and malware containing ransomware and other malicious software.

The solution is fully cloud managed with no hardware required on premise. The deployment of a software agent on devices and a number of simple configuration tasks were required to implement the service and provide complete protection on devices. The company has transitioned from having a low level of cybersecurity protection to advanced level usually found in large enterprises.

Large Mining Organisation

CubeCyber Team — Tue, 17 Jul 2018 23:40:45 +0000

This company employs several thousand local contractors at mine camps throughout Southeast Asia and provides WiFi Internet access as part of camp facilities. The client required a solution that would allow them to restrict access to an otherwise open WiFi network and identify and track Internet usage back to an employee identity based on their SAP employee record. The desired outcome was to integrate the Cisco ISE Guest WiFi functionality with the SAP HR database to enable both employees and contractors to login to the WiFi system using their employee ID. The team at Cube developed a customised API integration engine that integrated the Cisco ISE Guest Portal with the organisations’ SAP HR database. The bespoke solution polls the SAP database in near real-time, changes to employee records are extracted, parsed and sent to ISE via the ISE API. ISE guest access accounts are then automatically generated, these are specific to each user and remain valid for a specific amount of time-based on the planned duration of the employees stay at the camp. This unique functionality enabled both employees and contractors secure access to login to the WiFi system using their employee ID. Full operational support, training and documentation were provided post-deployment.

Advanced API Program
Real-time insights
Bespoke system design
Network Design

Large Global Engineering Company

CubeCyber Team — Tue, 17 Jul 2018 23:38:22 +0000

Improving the security posture of a global engineering firm by implementing security controls for an existing wireless and wired network infrastructure was the primary project objective for Cube Cyber. By implementing a secure network edge across the campus network, the risk of unauthorized devices connecting to unsecured ports could be substantially reduced. Cube Cyber were able to design and implement a solution that enabled the client to leverage some of the more advanced Cisco Identity Services Engine (ISE) features such as device profiling. In addition to the overall reduction in risk, there were additional tangible benefits to the organisation, these include reduced workload on the operational support teams due to the use of automatic device profiling and simplified network onboarding for guests and contractors to connect devices to the network quickly in a high secure manner, simultaneously protecting the corporate network containing sensitive information.

Network Architecture and Design
Network Access Control
Endpoint Management

National Financial Organisation

CubeCyber Team — Tue, 17 Jul 2018 17:45:16 +0000

Reducing the risk of cyber-attack proliferation for the largest member owned credit union in Australia required Cube Cyber to design and deploy a network security architecture across their Data Centre and Campus networks. The overarching network segmentation and segregation project deliverable was to provide an architecture that would facilitate dividing the existing flat network into a number of security zones. Next Generation firewalls would be used to apply a security policy and control traffic flow to and from zones.Given the mission critical 24X7X365 nature of the financial services environment, Cube Cyber was required to design a solution that could be implemented with minimal system downtime. Key components of the customers’ existing security infrastructure and network were upgraded and retrofitted to support the new design, this delivered a significant cost saving to the customer over replacing the existing core security and network environment.

Solution options analysis and recommendations
Network Architecture and Design
Solution implementation
Traffic flow analysis and subsequent zone lockdown