This document discusses cybersecurity awareness and challenges. It notes that outdated assumptions, wrong skills, and an improper risk appetite can hamper effective countermeasures. Modern security awareness is different and CSOs face nightmares. The goals of awareness should be to build security intelligence from multiple sources, share attack knowledge, conduct big data analytics, and achieve total integrated security with multilayer approaches and citizen involvement.

1. Security
Awareness
CYMASS
Feb 22nd, Dubai, UAE
Jorge Sebastiao, CISSP
ICT Expert, Cloud Practice Leader
Huawei
http://linkedin.com/in/sebastiao/
Twitter: 4jorge

2. Disclaimer & Copyright
• Please note that this presentation is for informational, knowledge sharing and educational purposes only. Any
comments or statements made herein do not necessarily reflect the views of Huawei. The information is intended
for the recipient's use only and should not be cited, reproduced or distributed to any third party without the prior
consent of the authors. Although great care is taken to ensure accuracy of information neither the author, nor
Huawei can be held responsible for any decision made on the basis of the information cited.
• The content of this presentation is based on information gathered in good faith from both primary and
secondary sources and is believed to be correct at the time of publication. The author can however provide no
guarantee regarding the accuracy of this content and therefore accepts no liability whatsoever for any actions
taken that subsequently prove incorrect.
• The practices listed in the document are provided as is and as guidance and the author and Huawei do not claim
that these comprise the only practices to be followed. The readers are urged to make informed decisions in their
usage.
• The information presented in this presentation is not intended to be, and should not be construed as, an offer to
sell any products or services or a solicitation of an offer to buy any products or services . Any such offer or sale will
be made pursuant to, and the information presented at this meeting is qualified in its entirety by, authorized
offering documents and related disclosure schedules or similar disclosure documentation.
• All logos and brand names belong to their respective owners and we do not claim any relationship or association,
implied or otherwise, with them.
• Use of any materials by virtue of relationships and associations, if any, are mentioned explicitly.
• Author has taken care to attribute all sources for external materials used in this presentation, and any oversight is
regretted. If you, as owner, or as viewer, find any reason to dispute the use of these materials kindly communicate
the same to author.
• Any omissions, in terms of attribution, may be due to an error of author and not intentional.

3. A6 – Process
Business Risk
Controls
Maturity

4. Rogue & Clueless Users

5. Passwords-Dilbert

6. Passwords

7. Spear Phishing

8. Google review of email Phishing

9. RSA Case

10. Accelerometer on phone - Location

11. GPS Sensor not Always Protected

12. MDM is not MDSM

13. Are we ready for IoT?

14. Risks higher
in Connected environment

15. 0 Day Exploits - Guaranteed

16. Awareness Challenges
During:
Lack Multi-Agency
Collaboration After:
Poor Investigation
Efficiency
Before:
Limited Early
Warning

17. Reason for Challenges:
Unawareness
• Onsite Handling
• Feedback
Field
responders
• Firsthand
information?
• Inter agency
Coordination
• Interaction field
responders
Commanders
• Incident Details
• Communication
• Resources
Call-takers &
dispatchers
• Prediction
Incidents
• Minimize
Recovery Time
Operators

18. Unit 5: Light Search & Rescue
Assess, Plan, Communicate Action
Crisis Response Loop

19. Before incident After incidentDuring incident
Omni Collection
Video & Image
IoT Alarms
Intelligent Warning
Efficient Post-Processing
Multi-dimensional
intelligence
Intelligent Analysis
Smart Sensing Smart Decision-Making Smart Clue Analysing
Rapid Response
Multi-Agency
Collaboration
Innovation Improves Capabilities

20. Early Warning Abnormal Detection
Sensor Alert Mobile App
Multi Alarm Omni-Protection

21. Convergent Command Center
• Voice
• Video
• Unified Data
• Intelligence
CommandCenter

22. Modern Security Awareness
is Different – CSO Nightmare

23. Cyberspace
CharacteristicsAsymmetric
Attribution
Problems
No Borders
Complex Interconnected
Systems

24. Outdated Assumptions?

25. Effective Countermeasures

26. Wrong Skills?

27. Its all about time…

28. Right Risk Appetite?

29. CONSEQUENCE
LIKLIEHOOD
FV
T
Risk Group
1
Risk Group
2
Risk Group
3
HighLow
L
o
w
H
i
g
h
RESPONSE
PROTECTION
Target Risk
Risk Reduction Strategies!

30. Implement Based on Risks &
Business needs

31. Knowledge
Base Response
Build Security Intelligence
Multiple Sources
Intel
Partners,
Vendors,
CERT ,…
Internal
Security
Research
Internet,
Mailing lists
and other
sources
Cyber Security
Incidence Response

32. Share Cyber Attack Knowledge

33. Big Data
Analytics
Big Data
Security Defense System
Web and IP
reputation
File and
mail
reputation
Application
identification
Smart policy
proposal
Malicious software
detection system
APT detection
system
DDoS attack
defense system
Reputation Feedback
Security
Device
1101100101
1010101100
01010101010
1011101011
101011001011
1001100101
10101101011
0001101001
1101101101
0101010101
0011101101
0110110110
10110
0111
1000
1011
101
1010
01
1011
001
10110
0011
10100
Network
Traffic

34. Incident Recovery Agility
Operational
Can you
successfully
recover?

36. Awareness Effectiveness

37. Changing Behavior
Will do it?
B =
BEHAVIOR
Want
to do it?
M
MOTIVATION
Ability to
do it?
ABILITY
T
TRIGGER
A
All 3 for behavior change

38. Apply Multilayer approach

39. Involve the Citizen

40. Final Goal Is
Total Integrated Security
With Awareness
Information
Security
Management
IoT, Device
Security
Management
Education
Training
Awareness

41. Jorge Sebastiao, CISSP
ICT Expert, Cloud Practice Leader
Huawei
http://linkedin.com/in/sebastiao/
Twitter: @4jorge