Skip to main content
WISER “WIDE-IMPACT CYBER SECURITY RISK FRAMEWORK”
www.cyberwiser.eu @cyberwiser
Co-funded by the European Commission
Horizon 2020 – Grant # 653321
Cybersecurity Risk Assessment –
‘All done’ with WISER
Riga – 27th October, 2016
Presentation at DSS ITSEC
DEMO
1
Antonio Álvarez Romero
Atos Spain
Outline
CyberWISER Services
Introduction to CyberWISER-Light
Introduction to CyberWISER-Essential
Conclusions
© WISER 2015 www.cyberwiser.eu - @cyberwiser 2
CyberWISER Services
CyberWISER Light – self-assessment of cyber risks and
vulnerabilities in IT system.
User-friendly service - suited to every type of organisation.
Especially good for time- and resource-constrained SMEs.
CyberWISER Essential – Risk Platform as a Service (RPaaS)
for self-assessment of exposure levels with continuous,
quasi-real-time monitoring
Standardised mitigation plan
CyberWISER Plus – RPaaS + Customised approach to cyber risk
assessment
Face-to-face support in self-assessment phase
Deployment support & mitigation plan tailored to your organisation
www.cyberwiser.eu
3© WISER 2016 www.cyberwiser.eu - @cyberwiser
CyberWISER Services
© WISER 2016 www.cyberwiser.eu - @cyberwiser 4
CyberWISER-Light (CWL)
Two versions: CWL Fast-track and Complete
Software as a Service
Online Questionnaire
Online Vulnerability scanner
Produces Aggregated Report
CyberWISER-Essential (CWE)
CyberWISER-Plus (CWP)
CyberWISER Services
© WISER 2016 www.cyberwiser.eu - @cyberwiser 5
CyberWISER-Light (CWL)
CyberWISER-Essential (CWE)
Risk Management PaaS
Sensors deployed at client produce data
Risk Assessment services in the Cloud
Dashboard showing real-time data and information
CyberWISER-Plus (CWP)
CyberWISER Services
© WISER 2016 www.cyberwiser.eu - @cyberwiser 6
CyberWISER-Light (CWL)
CyberWISER-Essential (CWE)
CyberWISER-Plus (CWP)
Extended with more specific Risk Models
Extended with specific application-level sensors
Outline
CyberWISER Services
Introduction to CyberWISER-Light
Introduction to CyberWISER-Essential
Conclusions
© WISER 2015 www.cyberwiser.eu - @cyberwiser 7
CyberWISER-Light
© WISER 2016 www.cyberwiser.eu - @cyberwiser 8
CyberWISER-Light Demo
© WISER 2015 www.cyberwiser.eu - @cyberwiser 9
Questionnaire
© WISER 2015 www.cyberwiser.eu - @cyberwiser 10
Vulnerability test
© WISER 2015 www.cyberwiser.eu - @cyberwiser 11
Vulnerability test
CyberWISER-Light Demo
© WISER 2015 www.cyberwiser.eu - @cyberwiser 13
Outline
© WISER 2015 www.cyberwiser.eu - @cyberwiser 14
CyberWISER Services
Introduction to CyberWISER-Light
Introduction to CyberWISER-Essential
Conclusions
CyberWISER-Essential
© WISER 2016 www.cyberwiser.eu - @cyberwiser 15
Dashboard with a set of sections
Risk Reporting
Configuration
Monitoring
Modelling
Testing
CyberWISER-Essential
© WISER 2016 www.cyberwiser.eu - @cyberwiser 16
Risk reporting
CyberWISER-Essential
© WISER 2016 www.cyberwiser.eu - @cyberwiser 17
Configuration
CyberWISER-Essential
© WISER 2016 www.cyberwiser.eu - @cyberwiser 18
Monitoring
CyberWISER-Essential
© WISER 2016 www.cyberwiser.eu - @cyberwiser 19
Modelling
CyberWISER-Essential
© WISER 2016 www.cyberwiser.eu - @cyberwiser 20
Testing
CyberWISER-Essential Demo Scenario
© WISER 2015 www.cyberwiser.eu - @cyberwiser 21
Simulation of an incident
The attacker uses Kali Linux from public IP address
The attacker executes a Hydra script
Wiser Agent detects the attack with Snort sensor (/var/log/snort/snort.alert)
Wiser Agent sends events to DWH
Show events received by Monitoring Engine from DWH via RabbitMQ
Show Alarm received in the RAE and how it is triggered the risk assessment
• Risk models selected
• DEXI instantiation
• Qualitative risk assessment per risk and target
• Aggregations:
• Overall
• By sections
• By risks
• Mitigation measures
CyberWISER-Essential Demo Scenario
© WISER 2015 www.cyberwiser.eu - @cyberwiser 22
Outline
© WISER 2015 www.cyberwiser.eu - @cyberwiser 23
CyberWISER Services
Introduction to CyberWISER-Light
Introduction to CyberWISER-Essential
Conclusions
CyberWISER: What’s in it for my organisation?
© WISER 2016 www.cyberwiser.eu - @cyberwiser 24
Affordable cyber risk assessment services depending on
customer needs & budget. Due to the real-time monitoring
and the increase of automatization of this assessment, prices
could be more competitive, and be affordable for segments as
SMEs, that have a low budget for these types of services.
Effective, efficient, and user-friendly solutions.
This is going to be achieved by means of an Online-centred
delivery model, which is found at www.cyberwiser.eu
Customised approach and a team of experts “on-call” (where
applicable), to overcome the intrinsic shortfalls of the one-fits-
all solution.
A “Cyber Security for all” approach!
www.cyberwiser.eu
@cyberwiser
Thank you for your attentions! Questions?
Contact
Antonio Álvarez Romero
Atos Spain
antonio.alvarez@atos.net