The document discusses changes in website management and content management systems between 2010 and 2017. Specifically, it notes that (1) there is more technology and customer browsing online, requiring better integration and more innovative approaches; (2) content management systems now have more features but choices are harder with more options available; and (3) website managers must know more with higher consequences for failure and more pressure to create good ideas.

1. @qubadigital

2. Jon Eaton
Commercial Director
Who am I?

3. 2010 - 2017: Lots has changed

4. 2010 - 2017:

5. 2010 2017

6. 2010 2017

7. 2010 2017

8. 2010 2017

9. Why Change?
More technology = more browsing = more customer experience online
Better integration = more possibilities
Replication to Innovation

10. 2010 2017

13. CMS Evolution
Features arms race
Technical fit now much more important
Specific role in projects
Much more choice (CaaS)
Decisions = harder

14. Why Change?
More technology = more browsing = more customer experience online
Better integration = more possibilities
Replication to Innovation

16. Why Change?
More technology = more browsing = more customer experience online
Better integration = more possibilities
Replication to Innovation

17. Why Change?
More technology = more browsing = more customer experience online
Better integration = more possibilities
Replication to Innovation
This is so innovative we can’t even tell you about it.

18. What does this mean for people managing websites?
Lots more to know about
Consequences of failure are much more worrying
There’s much more pressure to come up with good ideas

19. What does this mean for people managing websites?
Lots more to know about
Consequences of failure are much more worrying
There’s much more pressure to come up with good ideas

20. What does this mean for people managing websites?
Lots more to know about
Consequences of failure are much more worrying
There’s much more pressure to come up with good ideas

21. What does this mean for people managing websites?
Lots more to know about
Consequences of failure are much more worrying
There’s much more pressure to come up with good ideas

22. How will this group help?

23. How will this group help?
Top tips every quarter
Share stories with each other of what you’re doing right (and wrong!)
Free beer and cheat sheets

24. How will this group help?
Top tips every quarter
Share stories with each other of what you’re doing right (and wrong!)
Free beer and cheat sheets

25. How will this group help?
Top tips every quarter
Share stories with each other of what you’re doing right (and wrong!)
Free beer and cheat sheets

26. Why Cyber Security?

27. Why Cyber Security?
It’s in the news
More organisations have business critical websites
The cyber terrorists are getting more sophisticated

28. Why Cyber Security?
It’s in the news
More organisations have business critical websites
The cyber terrorists are getting more sophisticated

29. Why Cyber Security?
It’s in the news
More organisations have business critical websites
The cyber terrorists are getting more sophisticated

30. Chris Bainbridge
Platform Specialist
Who am I?

31. Infrastructure
Where to start?

32. Infrastructure Configuration
Where to start?

33. Infrastructure Configuration
Users
Where to start?

34. Infrastructure Configuration
Users
Where to start?

36. What does DDoS stand for?

37. Distributed Denial
of Service

43. Malicious Activities from a Botnet

44. Malicious Activities from a Botnet
● Spam Generation
● DDoS
● Infect System
● Phishing

46. Why do a DDoS attack?

47. 1. Financial
Why do a DDoS attack?

48. 1. Financial
2. Hacktivism
Why do a DDoS attack?

49. 1. Financial
2. Hacktivism
3. "Script Kiddies"
Why do a DDoS attack?

50. See attacks right now!
digitalattackmap.com

54. Created Malware
“Titanium Stresser”

55. 112,000
registered users
“Zombie Machines”

56. Responsible for
1.7 million cyber attacks

57. Attacker carried out
only 594 attacks

58. Earned $386,000
Sold 500 minutes of usage for $300

65. Infrastructure Configuration
Users
Recap

66. Infrastructure Configuration
Users
Moving onto

67. PEN Testing

68. PEN Testing

69. Penetration Testing remains a powerful tool
to identify the vulnerabilities that may exist
within your security architecture and gives
you the opportunity to fix them before they
are exploited.
PEN Testing

70. Example Report

71. ● Brute Force
● Cross-site Scripting(XSS)
● SQL injection
● Argument injection
● XPath injection
● Code injection
Threats your system faces

74. “I can’t even describe to anybody what it
feels like to have my naked body shot
across the world like a news flash against
my will. It just makes me feel like a piece
of meat that’s being passed around for
profit.”
- J Lawrence
iCloud Hacking Reaction

75. iCloud Hacking Explained

77. Verification Failed. Your Apple ID or password is incorrect
Verification Failed. Your Apple ID or password is incorrect
Verification Failed. Your Apple ID or password is incorrect

80. Enable login and password rules

81. Enable login and password rules

82. Enable login and password rules

83. Enable login and password rules

84. Enable login and password rules

85. Infrastructure Configuration
Users
Recap

86. Infrastructure Configuration
Users
Moving onto

88. Passwords...

89. No.1:
No.11:
No.12:
source:http://www.huffingtonpost.com/
Common Password of 2016

90. No.1: 123456
No.11:
No.12:
source:http://www.huffingtonpost.com/
Common Password of 2016

91. No.1: 123456
No.11: qwertyuiop
No.12:
source:http://www.huffingtonpost.com/
Common Password of 2016

92. No.1: 123456
No.11: qwertyuiop
No.12: mynoob
source:http://www.huffingtonpost.com/
Common Password of 2016

94. Brute Force Attack
Password of: 123456
Higher or Lower than
1 Second?

95. LOWER!
0.23 seconds

96. Brute Force Attack
Password of: qwertyuiop
Higher or Lower than
0.23 seconds?

97. HIGHER!
16 days

98. Brute Force Attack
Password of: Quba123
Higher or Lower than
16 days?

99. LOWER!
10 hours

100. Brute Force Attack
Password of: mynoob
Higher or Lower than
10 hours?

101. LOWER!
3 seconds

102. Coming soon...

105. Remember one password

108. Sending password via email

109. ● Platform generated
Sending password via email

110. Sending password via email

111. Read more at: troyhunt.com
Sending password via email

112. Sending password via email

113. ● Platform generated
● Sharing with colleagues
Sending password via email

114. Sending password via email

117. Infrastructure Configuration
Users
Wrap-up

118. Questions?

119. Thanks for coming, enjoy your drinks!