Skip to main content
Cyber Warfare
4TH edition
Jorge Sebastiao, CISSP
CTO Ecosystem
Huawei
1
Disclaimer & Copyright
• Please note that this presentation is for informational, knowledge sharing and educational purposes only. Any
comments or statements made herein do not necessarily reflect the views of Huawei. The information is intended
for the recipient's use only and should not be cited, reproduced or distributed to any third party without the prior
consent of the authors. Although great care is taken to ensure accuracy of information neither the author, nor
Huawei can be held responsible for any decision made on the basis of the information cited.
• The content of this presentation is based on information gathered in good faith from both primary and
secondary sources and is believed to be correct at the time of publication. The author can however provide no
guarantee regarding the accuracy of this content and therefore accepts no liability whatsoever for any actions
taken that subsequently prove incorrect.
• The practices listed in the document are provided as is and as guidance and the author and Huawei do not claim
that these comprise the only practices to be followed. The readers are urged to make informed decisions in their
usage.
• The information presented in this presentation is not intended to be, and should not be construed as, an offer to
sell any products or services or a solicitation of an offer to buy any products or services . Any such offer or sale will
be made pursuant to, and the information presented at this meeting is qualified in its entirety by, authorized
offering documents and related disclosure schedules or similar disclosure documentation.
• All logos and brand names belong to their respective owners and we do not claim any relationship or association,
implied or otherwise, with them.
• Use of any materials by virtue of relationships and associations, if any, are mentioned explicitly.
• Author has taken care to attribute all sources for external materials used in this presentation, and any oversight is
regretted. If you, as owner, or as viewer, find any reason to dispute the use of these materials kindly communicate
the same to author.
• Any omissions, in terms of attribution, may be due to an error of author and not intentional.
Cyberwarfare Experience
Middle East & Pakistan
Hackmagedon Statistics
Hackmagedon Statistics
State Sponsored Operations 2010-17
From Bullets to Clicks
Cyber Arms Race
• Nation-State Warfare
– Nitro Zeus as a cyber alternative to full-scale war
• Political-Influence Campaigns
– Russia suspected political meddling in 27 countries since 2004
– The United Arab Emirates (UAE) and Qatar stand accused of hacking emails,
releasing "dirt" and weaponizing fake news
– Vietnam is suspected of hacking and releasing sensitive Philippine documents,
• Spying Campaigns
– , Mexico's hacking and tracking of journalists
– Iran's cyber harassment of protesters
• Nation-State Digital Espionage
– US vs China
Dustman BAPCO
Everyone as a plan until they get hit
Mike Tyson
Wake up call War and Cyber war
•Stuxnet (Iran)
•Shamoon (SA, Qatar)
Nitro Zeus -planned cyber attack
went well beyond Stuxnet
Google Removes Taliban-
Developed Smartphone App
Rye dam cyber attack:
catastrophe avoided
Disruption to USA Banking
Operations
ME Mobiles networks –
Defending 300Gbps DDOS
How a DDoS campaign
became an act of cyberwar
Israel’s electric authority hit by
“severe” hack attack
Somali Pirates use online AIS
Pro-Palestinian Hacker Attacks FBI and
DHS, Publishes Details of 29,000 Agents
Hack Brief: ISIS Data Breach
Identifies 22,000 Members
GCHQ admits it is LOSING cyber-
security battle - despite Government
spending almost £1bn
DOT&E: Cyber Vulnerabilities
Plague Battlefield Comms
Targeting nuclear power plants
0 Day Exploits - Guaranteed
Glass house of Critical Infrastructures
Asymmetry of Attacks
Use Mercenaries when Possible
Dubai sets up e-security
centre to fight cyber attacks
Pakistan tightens cell-phone control
after Taliban massacre
New Technologies
IRANIAN General Promises Robot
SOLDIERS
Cyberwar Arms Race
• US
• Israel
• Turkey
• Iran
• Saudi Arabia
• UAE
• Pakistan
• India
Cyber Attack Recovery Agility is
key
Active
Business
Can you
successfully
recover?
Lessons Learned
1.Everybody is building up capacity
2.Asymmetry levels playing field
3.Social Networks matter
4.Agility & Attribution matter
5.Focus on Critical Infrastructure
6.AI, Quantum, Blockchain, Robotics
Jorge Sebastiao, CISSP
CTO Ecosystem, Huawei