Future of Cyber-security Economy 2017-2021

1. 1
www.Kahkeshan.com
Future of
Cybersecurity
Economy
• Behnaz Aria
• VP,EDU Manager
• PhD, MBA
MCSA , Master CIW , CTT+,CRISC
ISO 27001 ,ISO 22301 Lead Auditor
ISO 20000 Auditor
ITIL V3.0 Specialist, ITIL V2.0 Service Manager
www.Kahkeshan.com

2. 2
© Behnaz Aria 2017
© Behnaz Aria 2017

3. 3
Advanced Persistent Threat: APT
 Advanced
 Persistent
 Threat
© Behnaz Aria 2017
Targets of APT
Political
Economic
Technical
Military
© Behnaz Aria 2017

4. 4
 Drone Hacking
 Mobile threats
 Ransomware Attacks
 Vulnerability exploits
 Hardware and firmware threats
 IoT malware
 Machine learning : social engineering attacks
 Hacktivists: privacy issues
 Cyber espionage: industry and law enforcement
 Smart Medical Devices and Electronic Medical Records
 Critical Infrastructure cyber attacks
 Cloud computing providers infection
© Behnaz Aria 2017
In 2004, the global cybersecurity market
was worth $3.5 billion
By 2017 it will be worth at least 35X
that amount!
© Behnaz Aria 2017

5. 5
 Many of the problems plaguing
cybersecurity are economic in nature
© Behnaz Aria 2017
Decision makers in industry and
government refusing to take necessary
protections because data explaining
the magnitude and nature of the most
significant threats just isn’t there.
© Behnaz Aria 2017

6. 6
Top 15 statistics in:
© Behnaz Aria 2017
CYBERCRIME
© Behnaz Aria 2017

7. 7
SPENDING
© Behnaz Aria 2017
JOBS
© Behnaz Aria 2017

8. 8
UNEMPLOYMENT
 There are 1 million cybersecurity job openings in
2017, and that is projected to exceed 1.5 million
by 2019. The bobs gap creates opportunity for a
more diverse workforce - a chance for women and
minorities to enter the trillion dollar
cybersecurity field.
© Behnaz Aria 2017
TRAINING
 The security awareness training market is
predicted to reach $10 billion annually by 2027.
Training employees how to recognize and defend
against cyber attacks is the most underspent
sector of the cybersecurity industry.
© Behnaz Aria 2017

9. 9
HEALTHCARE
 Global healthcare cybersecurity spending is
predicted to exceed $65 billion cumulatively over
the next five years, from 2017 to 2021. As the
healthcare industry continues digitizing all of its
information, it continues to attract more
attention from cybercriminals. This dynamic will
be one of many contributors to the growth of the
healthcare security market over the next decade.
© Behnaz Aria 2017
RANSOMWARE
 Ransomware attacks on healthcare are predicted
to quadruple by 2020.
 The biggest cyber threat facing healthcare
providers:ransomware
© Behnaz Aria 2017

10. 10
IDENTITY
 300 billion passwords will require cyber
protection by 2021. The tally includes 100 million
human passwords, and 200 million machine
(Internet of Things) passwords. Some experts
venture the number of passwords may grow even
larger than the recent forecast.
© Behnaz Aria 2017
MOBILE
 Wi-Fi and mobile devices are predicted to account
for nearly 80 percent of IP traffic by 2025. Wi-Fi
and mobile devices will account for 66 percent of
IP traffic by 2020, up from 48% in 2015, according
to Cisco. The shifting traffic landscape will
require CISOs and IT security teams to devote
more resources to mobile security.
© Behnaz Aria 2017

11. 11
EXPLOITS
 Zero-day exploits will rise from one-per-week in
2015 to one-per-day by 2021. Although strides are
being made to produce more secure code through
the use of automation and better tools, the sheer
volume of code being produced is enormous. And
it’s only going to grow exponentially to meet the
thirst for software for web applications, mobile
hardware and devices connected to the Internet
of Things.
© Behnaz Aria 2017
CODE
 111 billion lines of new software code will be
created - and needs to be secured - in 2017. IT
security teams and developers are challenged to
keep up with the rapidly expanding application
attack surface - which is being fueled by a
massively expanding mobile and web app
economy.
© Behnaz Aria 2017

12. 12
HUMANS
 4 billion people are expected to be online - and
need cyber protection - by 2020, up from 2 billion
plus last year. By 2030 the human attack surface
might equal the world's population, which is
projected to reach 8.5 billion by then, up from 7
billion now.
© Behnaz Aria 2017
CYBER-ATTACKS
 Nearly half of all cyber-attacks are committed
against small businesses. Small businesses — who
don’t train their employees on security risks — are
susceptible to the Business Email Compromise
scam (BEC), which the FBI says has led to over $3
billion in losses.
© Behnaz Aria 2017

13. 13
HACKERS
 65 percent of respondents to a poll say black-hat
hackers are more experienced than white-hats.
Black-hats are motivated by money, espionage,
notoriety, and malicious intent… and they are
faster, more daring, and more experienced than
white hats who are constrained by boundaries and
rules.
© Behnaz Aria 2017
 The existence of an information asymmetry does
not necessarily mean that society is not investing
enough in security nor that too much money is
being allocated. Rather, it simply means that we
are likely not investing in the right defenses to
the ideal proportion!
© Behnaz Aria 2017

14. 14
 An economic perspective is essential
for understanding the state of
cybersecurity today, as well as how to
improve it moving forward.
 Raise awareness to cybersecurity issues
and assign responsibility for action
within the private sector so that the
risks to society may be mitigated.
© Behnaz Aria 2017
© Behnaz Aria 2017

15. 15
edu@Kahkeshan.com
© Behnaz Aria 2017
behnazaria
Source: csoonline.com
isaca.org
‫آﻣﻮزش‬ ‫ﺧﻮش‬ ‫ﺗﺠﺮﺑﻪ‬