At most conferences it is acknowledged that the insider threat is the biggest risk in the cyber catalogue, but no one, or at least precious few, are addressing the problem. Perhaps even more surprising is that the IoT appears to be entirely omitted from the thinking. But these are the two biggest pending risks in the spectrum of our cyber planet.
The good news is that the tools we need to develop for both are readily described, defined and dimensioned. The bad news is that whilst behavioural modelling is reasonably advanced and could be progressed rapidly, that is not the case for the IoT which stands to magnify the attack surface of the planet by 100s - 1000s over a very few years.
An even more worrying aspect is the fact the the very early IoT devices are going live sans any form of pre engineered security features. The present the ultimate ‘easy/wide-open/unprotected’ target. It almost looks as though the IoT has been designed and manufactured by ‘The Dark Side’ so they can make an easy killing!
In this presentation we therefore what we can do quickly to fend off the insider threat, and then move on to examine a biologically inspired auto-immune system for the IoT.