Karel Obluk (Evolution Equity Partners) - Cybersecurity: Challenges and Opportunity

•

0 likes•382 views

Cybersecurity presents many challenges across different segments. Globally, cyber attacks threaten critical infrastructure and national security through espionage, cyber warfare against countries, and disruption of emergency systems. Personal cyber attacks aim to steal money, identities, and sensitive personal information through social engineering and exploiting personal devices. Large amounts of personal data are collected, but not always securely protected. However, cybersecurity also creates opportunities to strengthen systems through improved education and training, security tools and frameworks, network infrastructure hardening, and data analytics to identify threats. Addressing cybersecurity challenges will help protect individuals, organizations, and nations.

Cybersecurity
CHALLENGES AND OPPORTUNITY
Karel Obluk

Cybersecurity – Segments
• Global
• Critical infrastructure
• Geo-political

Cybersecurity – Segments
• Global
• Personal
• Money
• Privacy – stealing
your info & identity

Cybersecurity – Segments
• Global
• Personal
• Data
• Personal,
company sensitivedata

Global – Infrastructure
• Espionage
• Snowden,China
• Cyber Warfare
• Estonia,Georgia, Iran
• Critical infrastructure
• US North-East blackout
• Emergency systems
• Typically state-sponsored

Global – Economy
• Target, Sony, TalkTalk
• massive attacks, lots of sensitive data, trade secrets
• company value, significant economical impact
• Aetna, Anthem, BlueCross
• Bangladesh central bank / SWIFT
• WHO?
• Criminals, hacktivists, bored geeks
• Also state sponsored?

Personal
• Stealing money from your bank account, ransomware
• guessing passwords, sending money elsewhere
• Electronic currencies, virtual valuables
• Games, virtual objects– World of Warcraft,...
• Who andWhy?
• Criminals
• Obtaining tools and means
for other attacks

Identity
• Social Networks
• Fake Facebook, LinkedIn accounts
• intelligence, constructing spear-headed attacks
• Social engineering
• Pictures, relationships
• Dating sites, sensitive info
• Even cost lives!

Personal Information
• Location
• Behaviour - patterns
• IoT, Devices
• Amount of info collected
• Security (or lack of it)
• Value of data

Data
• The good
• Product recommendations
• Predictions and forecasting
• But also the bad!
• Manipulating stock
• Ad-business
• Wait!

Data
• The good
• Product recommendations
• Predictions and forecasting
• Ad-business
• But also the bad!
• Manipulating stock
• Ad-business

Opportunity
• Education and Training
• Shortage ofsecurity experts
• Test systems, “labs”,simulation - for experts
• Basic training,education,certification - for normal users
• Security Tools and Frameworks
• Securing protocolsand applications
• Virtualisation,device management
• Exploit detection,attack detection and prevention
• Back-end systems,web applications- strengthening,

Opportunity
• Network infrastructure
• Deception tools and frameworks
• Using data analytics to identify good or bad
• Network, endpoints, mobile devices, access to resources
• SIEM / log analysis
• User Behaviour Analysis
• Anomalies, suspicious activity - spotting new trends, …
• Authentication
• Passwords = cockroaches of the web…

This document discusses social engineering and how it can be used to deceive humans. It defines social engineering as manipulating people into divulging confidential information through psychological tricks. It explains that social engineering requires gathering open source intelligence (OSINT) about targets using public sources, then creating a fabricated pretext to target them. Various social engineering attacks are described like phishing, baiting, and tailgating. Tools for OSINT gathering are provided. A case study demonstrates how to conduct a phishing assessment through creating a phishing page and email. Live demos are included of OSINT, creating a phishing page, and a malicious document. Defenses like security awareness and source checking are recommended.

Hacking

Shukla Aakash

Hacking can change the world for better or worse depending on the intentions of the hacker. There are different types of hackers - ethical hackers work to protect systems from bad hackers by identifying weaknesses. They employ various techniques like insider attacks, social engineering, and bypassing authentication. If used for cyber crimes, hacking can threaten privacy, steal financial information, and enable distributed denial of service attacks or malware. To prevent negative hacking, systems must be strengthened against various hacking methods.

Cyber security

Peter Henley

This document provides an overview of cyber security issues for not-for-profit organizations and recommendations for developing a cyber security plan. It discusses understanding risks, protecting systems and data, and reacting to potential breaches. Key components of a security plan include inventorying hardware, software, data and policies; assessing risks; and developing breach response and ongoing maintenance procedures. The document provides examples of security best practices and recommendations such as encrypting laptops, implementing intrusion detection, and purchasing data breach insurance.

Drooger, jack cyber security

Hagerstown Chamber Business Expo

This document discusses self defense for cybersecurity and protecting personal and organizational assets from cyber threats. It provides examples of common cyber attacks like hacking and phishing. It also outlines traditional security fixes like firewalls, antivirus software, and password best practices. Throughout it provides scenarios of past security breaches at companies to illustrate the risks and impacts of attacks. The key messages are that social engineering, weak passwords, and lack of backups leave both personal and business systems vulnerable to cyber criminals. Regular security updates, strong unique passwords, and backing up important data are recommended for protection.

How to become Hackers .

Greater Noida Institute Of Technology

This document provides an overview of hackers, intruders, and network threats. It discusses various types of hackers including black hats, white hats, and script kiddies. It describes common intrusion methods like exploiting software vulnerabilities, password guessing, and installing backdoors. The document also summarizes intrusion detection and prevention techniques, legal issues around hacking, and examples of computer crimes and relevant federal statutes.

Focus-Profile

Narendra Kulkarni

The document describes the services of Focus Detective Agency, a private investigation firm with over a decade of experience. It offers various types of investigations for corporate and personal matters. For corporations, it conducts pre-employment and post-employment checks, looks into anti-management activities, thefts, and performs due diligence. For intellectual property cases, it investigates trademark, patent and copyright issues. It also handles asset verification and personal matters like surveillance, matrimonial issues and parental monitoring. Contact information is provided at the end.

Hackers Cracker Network Intruder

Erdo Deshiant Garnaby

This document discusses hackers and network intruders. It begins by defining key hacking terms and providing a brief history of notable hacks. It then outlines the main threats posed by hackers, including denial of service attacks, data theft, and reputation damage. The document categorizes different types of hackers and their motivations. It describes common methods for gaining unauthorized access, such as exploiting software vulnerabilities or using password cracking. Finally, it discusses approaches for detection and prevention of intrusions, as well as some legal and ethical issues surrounding hacking.

The document provides advice for kick-starting a career in cybersecurity. It recommends mastering basic cybersecurity concepts like the CIA triad, computer systems, networking, security threats, and cryptography. It also suggests finding a mentor, improving soft skills, joining cybersecurity communities, staying motivated, and deciding on a future career path, which could include pursuing certifications. Resources for further learning are provided.

Hackers

Mohamed Boudchiche

This document discusses hackers and network intruders. It defines key hacking terms and outlines the threats posed by different types of hackers. It also describes common methods used by hackers to gain unauthorized access, such as exploiting software vulnerabilities, password guessing, and using backdoors or trojan horses. The document discusses intrusion detection and prevention techniques and some legal and ethical issues surrounding hacking.

Identity theft and data responsibilities

Peter Henley

This document discusses identity theft and data protection. It recommends that companies understand their risks, protect data, and react to data breaches. It provides guidance on developing an identity theft prevention program, including defining personal information, identifying red flags, implementing security measures for passwords, access controls, and detecting vulnerabilities through testing. The document also discusses creating policies around privacy, security, and responding to incidents to inform customers, employees and management.

Using SurfWatch Labs' Threat Intelligence to Understand Third-Party Risk

SurfWatch Labs

Ethical Hacking

silambarasansam

Computer security chapter 2: About Hacking

Theko Moima

Intro

Kalkey

This document defines hacking and different types of hackers. It explains that hacking refers to unauthorized intrusion into networks, which can be done for profit, protest, or challenge. The effects of hacking include damage, theft of information, and compromised systems. Hackers are categorized as black hats (malicious), white hats (ethical), or grey hats. Common hacking tools and techniques are also outlined, along with penetration testing distributions like Kali Linux.

Introduction of Cyber Security

penetration Tester

This document discusses hacking, including what it is, why people hack, the types of hackers, and how hacking is carried out. It defines hacking as the unauthorized intrusion into a network or computer, normally by one or more hackers. Hackers can hack for profit, protest, or challenge. There are three main types of hackers: black hat hackers who hack maliciously, white hat hackers who hack ethically with permission to find vulnerabilities, and grey hat hackers who hack without permission but disclose vulnerabilities. The document also discusses common hacking attacks, tools used for hacking like Kali Linux and Backtrack, and notes that information on how to hack is widely available online.

OSINT

Apurv Singh Gautam

This document provides an overview of open-source intelligence (OSINT) techniques. It defines OSINT as information gathered from publicly available sources on the internet and media. Some key OSINT data sources it outlines include search engines, social networks, maps, public databases, and other online tools that can be used to gather intelligence on people, organizations, domains, and technical information. The document also lists specific tools and websites that can be used for OSINT activities like searching social media, performing online investigations, and monitoring open data sources.

Protecting the Crown Jewels from Devastating Data Breaches

Lancope, Inc.

Whether they realize it or not, all enterprises have valuable data to protect. Credit card information, trade secrets, and patient data, for example, are all prime targets for cyber criminals. You can reduce risk to your sensitive data through the use of compliance/segmentation monitoring. But what happens when malicious insiders or external attackers bypass these controls? Join Lancope’s Consulting Security Architect, Charles Herring, to learn how network behavioral anomaly detection (NBAD) and deep visibility through NetFlow can be used to quickly alert administrators to these violations. Discover how to detect anomalies such as data hoarding and data loss to more effectively safeguard your crown jewels.

Hacking-Basics

Gaurav Singh

Hackers can be classified into four main categories: white hats, black hats, grey hats, and script kiddies. White hats perform hacking for ethical purposes like security testing, black hats hack maliciously for personal gain, grey hats fall in between, and script kiddies use automated tools without proper understanding. Common hacking techniques include brute force attacks, dictionary attacks, spoofing/phishing, social engineering, trojan horses, keylogging, and computer worms.

OSINT: Open Source Intelligence gathering

Jeremiah Tillman

NRF Presentation v2

Pete Pouridis

This document summarizes a presentation about cyber attacks targeting the retail industry. It notes that retail organizations are an attractive target due to the large amount of payment card and customer data they collect. In 2014, the number of reported data breaches hit a record high, with one third of breaches targeting retail and related industries. The presentation discusses the types of threats retail organizations face, including state-funded actors, organized crime groups, and individual hackers. It emphasizes the importance of having strong data protections, incident response plans, employee awareness training, and effective communication strategies in place to help manage risks and respond properly in the event of a breach.

Bsides Knoxville - OSINT

Adam Compton

This document provides an overview of open source intelligence (OSINT) techniques for pentesters. It defines OSINT as intelligence derived from publicly available online sources and discusses why OSINT is useful for goals like finding usernames, passwords, or locating individuals. It then outlines various sources of online information like search engines, social media, communities, and corporate sites. Finally, it describes tools that can be used to gather OSINT like dig, TheHarvester, and APIs and demonstrates searching techniques through examples.

Hacking-coffee and latte

coffeeandlatte

The document discusses different types of computer hackers and their motivations. It defines a hacker as someone who circumvents security to access unauthorized data and distinguishes between black hat, white hat, and grey hat hackers based on whether their intentions are illegal/harmful, legal/helpful, or to show off skills respectively. The effects of hacking can include theft of personal or financial information, identity fraud, or gaining unauthorized access to online accounts or services.

Information Security - Foundations and basic understanding

Facundo Mauricio

Open source intelligence

balakumaran779

Open-source intelligence (OSINT) refers to information gathered from publicly available sources including social media sites, traditional media, maps, government reports, and academic papers. OSINT tools are used to gather intelligence from these sources through activities like searching metadata, websites, and databases. Common OSINT tools mentioned are Maltego for relationships, Google Hacking Database for search operators, Metagoofil for document metadata, Shodan for devices, Spiderfoot for automation, TheHarvester for online profiles, and FOCA for hidden information. While useful, OSINT has limitations like information overload and potential false positives.

IT Risk Management In The Age of Wikileaks

Anderson Ruysam, BBA (IS) CISSP, CRISC, DevSecOps

Hacking

Jay Janodia

Hacking can take several forms, both legal and illegal. The document outlines various types of hacking like website, email, network, and password hacking. Ethical hacking is discussed as a legal method where experts seek vulnerabilities to improve security. The consequences of illegal hacking are fines, imprisonment, and computer seizure. Overall, the document provides an overview of different hacking types and emphasizes the importance of ethical hacking and basic cybersecurity practices.

Leone ct#1 presentation 1

vincentleone

Are You Prepared? Cybersecurity Trends & Opportunities (Ed Valdez)

Ed Valdez

Cyber security report 2017 cisco 2017 acr_pdf

Mitch Cardoza, SPHR, Workforce Solutions Exec.

The document is Cisco's 2017 Annual Cybersecurity Report which summarizes key findings about attacker and defender behaviors. Some major findings include: three leading exploit kits abruptly disappeared in 2016, leaving opportunities for smaller players; most companies use over five security vendors and products; and the top constraints to adopting advanced security according to a Cisco study are budget, compatibility, certification, and talent. The report examines the expanding attack surface, how attackers operate at different phases, trends in vulnerabilities and patching, and provides guidance on reducing adversaries' ability to compromise assets.

What's hot

Tips memulai karir di cybersecurity

PT Datacomm Diangraha

Hackers

Mohamed Boudchiche

Identity theft and data responsibilities

Peter Henley

Using SurfWatch Labs' Threat Intelligence to Understand Third-Party Risk

SurfWatch Labs

Ethical Hacking

silambarasansam

Computer security chapter 2: About Hacking

Theko Moima

Intro

Kalkey

Introduction of Cyber Security

penetration Tester

OSINT

Apurv Singh Gautam

Protecting the Crown Jewels from Devastating Data Breaches

Lancope, Inc.

Hacking-Basics

Gaurav Singh

OSINT: Open Source Intelligence gathering

Jeremiah Tillman

NRF Presentation v2

Pete Pouridis

Bsides Knoxville - OSINT

Adam Compton

Hacking-coffee and latte

coffeeandlatte

Information Security - Foundations and basic understanding

Facundo Mauricio

Open source intelligence

balakumaran779

IT Risk Management In The Age of Wikileaks

Anderson Ruysam, BBA (IS) CISSP, CRISC, DevSecOps

Hacking

Jay Janodia

Leone ct#1 presentation 1

vincentleone

What's hot (20)

Tips memulai karir di cybersecurity

Hackers

Identity theft and data responsibilities

Using SurfWatch Labs' Threat Intelligence to Understand Third-Party Risk

Ethical Hacking

Computer security chapter 2: About Hacking

Intro

Introduction of Cyber Security

OSINT

Protecting the Crown Jewels from Devastating Data Breaches

Hacking-Basics

OSINT: Open Source Intelligence gathering

NRF Presentation v2

Bsides Knoxville - OSINT

Hacking-coffee and latte

Information Security - Foundations and basic understanding

Open source intelligence

IT Risk Management In The Age of Wikileaks

Hacking

Leone ct#1 presentation 1

Viewers also liked

Are You Prepared? Cybersecurity Trends & Opportunities (Ed Valdez)

Ed Valdez

Cyber security report 2017 cisco 2017 acr_pdf

Mitch Cardoza, SPHR, Workforce Solutions Exec.

моторное развитие дошкольников с речевой патологией

Валерия Кулеш

По данным ряда авторов (М.М. Кольцова, Е.И. Исенина, А.В. Антакова-Фомина, 1986, Ю.В. Герасименко, 2005) детям с недоразвитием речи наряду с общей соматической ослабленностью присуще некоторое отставание в развитии двигательной сферы. У значительной части дошкольников двигательная недостаточность выражается в виде снижения интереса к выполнению движений, низкой степени самостоятельности при выполнении двигательных заданий, быстрой утомляемости, недостаточной согласованности движений рук и ног, нарушении темпа и ритма, равновесия, низкого уровня выносливости, недостаточности мышечной силы, плохой координации сложных движений, неуверенности в воспроизведении точно дозированных движений. Наибольшие трудности представляет выполнение движений по словесной, особенно многоступенчатой, инструкции. Типичным является и недостаточный самоконтроль при выполнении двигательного задания. Основной целью образовательной области «Физическое развитие» является совершенствование функций формирующегося организма, развитие двигательных навыков, тонкой ручной моторики, зрительно-пространственной координации.

Flaviu Simihaian (iMedicare) - How to Sell your First Customers

Karel Obluk (Evolution Equity Partners) - Cybersecurity: Challenges and Opportunity

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Viewers also liked

Viewers also liked (20)

Similar to Karel Obluk (Evolution Equity Partners) - Cybersecurity: Challenges and Opportunity

Similar to Karel Obluk (Evolution Equity Partners) - Cybersecurity: Challenges and Opportunity (20)

More from Techsylvania

More from Techsylvania (20)

Recently uploaded

Recently uploaded (20)

Karel Obluk (Evolution Equity Partners) - Cybersecurity: Challenges and Opportunity