IT and Systems Security - The Bigger Picture

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

I T a n d S y s t e m s
S E C U R I T Y
T h e B i g g e r P i c t u r e
Prof Peter Cochrane OBE
petercochrane.com
S e n t ...

A C AT A N D M O U S E G A M E
Attackers have the advantage - Defenders on the back foot

what we know for sure
Attacks are escalating
The Dark Side is winning
The attack surface is increasing
Cyber disruption co...

T H E B I G P I C T U R E
Cyber security is no longer contained
The Dark Side are winning because
they are 100% committed ...

Breaking into
most companies
isn’t difﬁcult!
Reality 1

i n f i lt r a t i o n !
Te c h n o l o g y i s n o t t h e o n l y w a y
• External services people
• Visiting trades and...

• Carless and loud discussions
• Open screens readily visible
• Poor security of devices
• Shoulder surfing
o p p o rt u n...

The
biggest
threats
are
inside
the
FireW
all
Rogue:
Equipment
Networks
Chips
Code
Ports
People
Lax:
People
Visitors
Securi...

No single solution can
deal with all forms of
attack…or indeed many
types of mono-mode
attack
Reality 3

Distributed Attacks
demand a
Distributed Defence
Dynamic Attackers
necessitate
Dynamic Defenders
We can act alone
or we ca...

People remain the single biggest security riskReality 5

If we continue to do what we’ve always done our security exposure and
damage sustained accelerate…
Reality 6

Laws of security...
1) There is always a threat
2) It is always in a direction you’re not looking
3) Perceived risk/threat...

Laws of security...
7) You need two security groups - defenders & attackers
8) Security & operational requirements are mut...

Laws of security...
13) Hackers are smarter than you - they are younger!
14) Hackers are not the biggest threat - governme...

The entire planet…Mobile Devices, Clouds, IoT
AT TA C K S U R FA C E
“A fully connected planet proffers the duality of the...

“We will need far more
than smarter ﬁrewalls and
malware protection… ”
To m o r r ow
“All our defence solutions and
mechan...

Where does it generally come from ?
• From a direction you are not looking
• By a mechanism you didn’t contemplate
• At a ...

W A R FA R E
Scale of Potential Devastation
Potential Depth
of Penetration
Geographical
Metaphysical
Technological
Psychol...

Cyber-Info War
Nuclear-Warfare
Bio-Chemical Warfare
W A R FA R E
Scale of Potential Devastation
Potential Depth
of Penetra...

Cyber-Info War
Nuclear-Warfare
Bio-Chemical Warfare
W A R FA R E
Scale of Potential Devastation
Potential Depth
of Penetra...

USA LEADING THE WAY ?
Social division, breakdown of law and order
The
Cult of
Trump

S U P R E M U M?
B e t t e r t h a n a n y o t h e r
U S P r e s i d e n t e v e r !
T h e ‘ l e a d e r ’ o f
t h e f r e...

S U P R E M U M?
B e t t e r t h a n a n y o t h e r
U S P r e s i d e n t e v e r !
T h e ‘ l e a d e r ’ o f
t h e f r e...

LANDSCAPE of liars
Banks
Media
Moguls
Groups
Criminals
Politicians
Terrorists
Individuals
Institutions
Industrialists
Rogu...

N ot h i n g is is o l at e d
E v e r y t h i n g & e v e r y o n e i s n o w c o n n e c t e d
Ecology
Economics
Technolo...

EXTREME W EAPONS

A Ts u n a m i o f l i es
Rel entles sly gen erated and distributed
“We are overwhelmed by information ﬂows from every
dir...

I G N O R A N C E
Unlimited & unbounded
It takes far less thought, effort
and energy to dismiss wisdom
and deny a truth, t...

I G N O R A N C E
Unlimited & unbounded
It takes far less thought, effort
and energy to dismiss wisdom
and deny a truth, t...

Bigger and propagate faster, further,
and deeper than the truth and
validated information….and
now growing in volume,
extr...

Bigger and propagate faster, further,
and deeper than the truth and
validated information….and
now growing in volume,
extr...

Bigger and propagate faster, further,
and deeper than the truth and
validated information….and
now growing in volume,
extr...

I G N O R A N C E & L I ES
T h e b i g g e s t t h r e a t & c h a l l e n g e e v e r ?

MORE:
Context/
Meaning
Extractor
Inference
Engine
Primary Source
Identiﬁer
Fact
Checkers
Style
History
Publications
Behavi...

PeopleThe Biggest Cyber Risk
C Y B E R & I N FO W A R

B E H AV I O U R S
People
Machines
Networks
Human Fallibility
=
Primary Failure Mechanism
Start
Finish
Breaks
Uploads
Brow...

B E H AV I O U R S
People
Machines
Networks
Human Fallibility
=
Primary Failure Mechanism
Start
Finish
Breaks
Uploads
Brow...

T H E D A R K S I D E
To defeat them, think as they do!
“Never interrupt your enemy when he is making a mistake.”
― Napolé...

C Y B E R C R I M E
A b r i d g e d h i s t o r y a n d c o s t
Banking Malware
Crypto-Currency Attacks
Bitcoin Wallet Ste...

C Y B E R At t a c k
R a p i d l y c h a n g i n g p r o f i l e s
Fun
Fame
Notoriety
Vandalism
Limited Skills
Limited Res...

W H AT W E D E T E C T
P o s s i b l y j u s t t h e t i p o f a n i c e b e r g
We need to start looking below the surfac...

PERVERSITY
Irrational situations by design
Our vehicles, white and brown goods are designed to be
reliable - and ‘we’ don’...

PERVERSITY
Irrational situations by design
Non-intuitive language,
choices, conﬁgurations
and options cause endless
frustr...

PERVERSITY
Irrational situations by design
I see 7 year old machines that
have never had an OS update
and with no security...

PERVERSITY
Irrational situations by design
I see 7 year old machines that
have never had an OS update
and with no security...

i n c o n v e n i e n C E
FaceBook Cambridge Analytica + GDPR
A month of repetitious chaos trying to get legal,
ﬁx problem...

T H E I OT
Problem amplifier
Exponentially increasing the Attack Surface and the inherent complexity
- but will be in ever...

S H E E R S C A L E
> 1 0 0 - 1 0 0 0 B n t h i n g s
This graphic by Beecham Research really conveys the IoT/M2M complexi...

S H E E R S C A L E
> 1 0 0 - 1 0 0 0 B n t h i n g s
A l w a y s o n l i n e = A l w a y s a t R i s k
G O O D N E W S =
...

Iot NIGHTMare
Food & toasters to vehicles
https://www.youtube.com/watch?v=RZVYTJarPFs

Broadcasting
Malware
Responding
with updated
protection Wider
Network
Updated
Latest
Solution
Update
Dynamic isolation of ...

A Multiplicity of channels
Attack detection/exposure/thwarting using access diversity
BlueTooth
Short Range
Device to Clou...

Auto-immunity
Mirrors biological forebears
Applied everywhere 24 x 7
ICs
ISPs
WiFi
Hubs
LANs
Cards
Traffic
Servers
Circuit...

A uto - i m m u n ity
F i g h t i n g f i r e w i t h f i r e

A va s t s p e c t r u m
The Dark Side is involved in every space
Main Event ?
Decoy ?
Masking ?
Diversion ?
Tunnel set up...

AL MALWARE SPECIATION
The Dark Side are at the leading edge - are we?

Get our act together
The essentials shopping list is reasonably short
Global monitoring and shared situational awareness
C...

Get our act together
The essentials shopping list is reasonably short
Global monitoring and shared situational awareness
C...

WHEN WE FIX THE TECH
A r e w e t h e n c l o s e t o b e i n g s a f e ?

AFRAID NOT !
M o r e h u r d l e s t o j u m p

PEOPLE THE PROBLEM
I m p o s s i b l e t o c o n t r o l - c h a n g e t o o s l o w

S P A N O F H U M A N I T Y
Impossible to fully deﬁne/understand predispositions
Honest
Dishonest
Opportunist
Hacker
Black...

Hobbies !
W e i r d / C r a z y ?
- A i r l i n e s e c u r i t y
- P u b l i c t a r g e t s
- B r e a k i n g i n
- S o ...

C a r e l ess
London is a safe city !
I was working in London
and stopped for a coffee
break in Soho…
Soho
A smart young m...

C a r e l ess
London is a safe city !
I was working in London
and stopped for a coffee
break in Soho…
Soho
A smart young m...

C a r e l ess
London is a safe city !
I was working in London
and stopped for a coffee
break in Soho…
Soho
A smart young m...

L O U D & RU D E
There is always a price to pay !
The group next to my colleague
had just chanced upon the perfect
name fo...

U n t i dy
L i t t e r B u g : - )

U n t i dy
L i t t e r B u g : - )
Dropped receipt to a wet
floor - I picked it up and
this caught my eye
And then the fun...

A stack of papers
readable at a glance
EXHIBITIONISTS
Government employees bragging
ME
Three identical laptops
Three
Mobil...

A stack of papers
readable at a glance
EXHIBITIONISTS
Government employees bragging
ME
Three identical laptops
Three
Mobil...

OpPortunistic
Unintended revelations & consequences
TRUTH ENGINES
An End Game Company
Dr Peter Cochrane
EU Concept Consult...

OpPortunistic
Unintended revelations & consequences
TRUTH ENGINES
An End Game Company
Dr Peter Cochrane
EU Concept Consult...

OpPortunistic
Unintended revelations & consequences
TRUTH ENGINES
An End Game Company
Dr Peter Cochrane
EU Concept Consult...

THE KIND & HELPFUL
S o p h i s t i c a t e d p h i s h i n g a t t a c k s
https://www.youtube.com/watch?v=lc7scxvKQOo

T H E G O O D N E W S
Habitualities are near impossible to hide
We have so very many individually identiﬁable
idiosyncrasi...

D evi c e t h e ft
Or is their something more here
This is a high risk crime with a good
chance of getting caught in the a...

UP THE VALUE
100s of hack tutorials on-line
A naked mobile device is one price
A live mobile device with all the log-in
an...

B E H a V I O U R A L A N A LYS I S
Might just be the ‘king pin’ that holds together our security
Just as we can be identi...

R E A LT I M E R E C O G N I T I O N
China leading the way with social grooming as a first step

WO RT H R EA D I N G
Strategy without tactics is the slowest
route to victory
Tactics without strategy is the noise
before...

They just love our habitual nature…weak and repeated
passwords….singular storage, OS and apps.…
...but Clouds presents opp...

Half Lives
of
knowledge,
data,
info,
and
location,
connection,
is going to
get much shorter
A DVA NTAG E Transience is spe...

C L O U D P OT E N T I A L
Far more than apps, storage and backup
Clouds of all sizes can form and
dissipate by demand ......

B i g g e s t R i s k
Service providers do not guarantee your data!

App
App App
App
App
Storage
Storage
Corporate
Corporate
Corporate
Personal
PersonalStorage
One of many
Connection
Clouds
C...

P a rs e d d ata
Incredibly difﬁcult to intercept and
locate, and reassemble…
Routed to diverse/dispersed clouds

P a rs e d &EC RY PT E D
R a n d o m i s e d P a r s i n g &
E n c r y p t i o n + C l o u d
A l l o c a t i o n p o s s i...

O BS C U RAT I O N
Getting cheaper and easier
Volume
False Files
Encryption
File Coding
Block Chain
Parsed Files
Multi-For...

Many networks
to attack not
just one
3,4,5G,
LTE, WiFi
WiFi WiMax
BlueTooth ++
A dva ntag e 1

Many OS types
to attack not
just one
A dva ntag e 2

Many applications
to attack not
just one
A dva ntag e 3

Interface
Boards
Chips
Conﬁg
Firmware
Huge device
variance
A dva ntag e 4

Circuitry
Layout
Antennas
Analogue
Design
Facilities
Huge hardware
and circuit
variance
A dva ntag e 5

On Grid/Cloud
On & Off Grid/Cloud
Off Grid/Cloud
A dva ntag e 6
Fixed
Mobile
Irregular:
Use
Needs
Habits
Devices
Working
L...

On Grid/Cloud
On & Off Grid/Cloud
Off Grid/Cloud
C o n f o u n d i n g b e h a v i o u r s
A dva ntag e 6
Fixed
Mobile
Irr...

The Cloud offers the most potent defence
and the most creative options for data storage

Live fire & Education
Make it real, make it effective and up to date
War Games - Spoof Attacks
Rewards for the Alert
Regul...

Live fire & Education
Make it real, make it effective and up to date
War Games - Spoof Attacks
Rewards for the Alert
Regul...

The Art of War by Sun Tzu, 600 BC
“Speed is the essence of war. Take advantage of the
enemy's unpreparedness; travel by un...

T h a n k Y o u
petercochrane.com
We posses superior
technology, networks
and brains - if we lose
this war it is down to
o...

Share SlideShare

Facebook
Twitter
LinkedIn

Embed

Size (px)

Show related SlideShares at end

WordPress Shortcode

Link

Share
Email

2024 Trend Updates: What Really Wor... by Search Engine Jou... 469091 views
Storytelling For The Web: Integrate... by Chiara Aliotta 375892 views
Artificial Intelligence, Data and C... by OECD Directorate ... 266102 views
How to Leverage AI to Boost Employe... by SocialHRCamp 115151 views
2024 State of Marketing Report – by... by Marius Sescu 107739 views
Everything You Need To Know About C... by Expeed Software 143146 views

Top clipped slide

View on SlideShare

1 of 103 Ad

1 of 103 Ad