Plataforma de Operação e Simulação Cibernética
•Download as PPSX, PDF•
0 likes•287 views
To protect and ensure the availability of network services in charge to control critical infrastructure of organizations The SIMOC is a platform that allows the creation of segregated cyber environments, with FOCUS on SECURITY.
Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Viewers also liked (15)
Similar to Plataforma de Operação e Simulação Cibernética
Similar to Plataforma de Operação e Simulação Cibernética (20)
Recently uploaded
Recently uploaded (20)
Plataforma de Operação e Simulação Cibernética
- 2. Agenda o About RustCon o Introduction to CyberSecurity o CyberSecurity - Concepts o SIMOC as a platform to build and manage a cyber safety environment o DEMO
- 3. About RustCon • Founded on 2011, RustCon is a Brazilian Consulting Company • Focus on Defense and Security Industry • We are a Strategic Defense Company (or EED in Portuguese), certified by the Brazilian Ministry of Defense
- 5. What would happen if the electrical system of this city was shutting down?
- 6. ... And if all air systems of that country stops?
- 7. ... and also if the data of Social Security is hacked? What can we expect if we face situations like these? CHAOS ECONOMIC LOSSES
- 8. Delivery of a Safety Cybernetic Environment CHALLENGES It is a LONG process... require COMPLEX tasks Manual process is error-prone and non-repeatable
- 9. Safety Cybernetic Environment ACTIVITIES Require multiples IT planning meeting Define applications, middleware and budget Coordination across teams Design Architecture Design Deployment and Configuration Setup Network Create VMs Create Applications Assemble Workflow Generate the traffic Test and qualify Manage the App lifecycle Several weeks to be complete
- 10. Value Proposition provides agility to create a complete Software Defined Environment Catalog of Scenarios which will support you to perform security tests.
- 12. Cyber Security Concept to PROTECT and to ENSURE the availability of NETWORK SERVICES in charge to the management and control of the CRITICAL INFRASTRUCTURE of an ORGANIZATION
- 13. “customized” cyber attack modes for specific Company. Current Scenario Increasing number of cyber incidents against government organizations Increasing networks interconnections. 50 Billon de devices with the Internet of Things till 2020. GAP of 2.2 Millon security professionals till 2017 source: Websense Security Labs source: Websense Security Labs
- 14. Fast Growth in Number of Incidents
- 15. Main Threats o violation of the National Security o Sabotage o DDOS o Data theft Energy, Oil&Gas Telecommunications Banks Targets
- 16. How to Act Capability It’s all about to build knowledge into the team. Prevent To define safety process in order to implement new cyber infrastructures Action Monitoring cyber infrastructues and put in place the plan for defence, to fix the issues and to recover the disasters Unsafe environment Safe Environment
- 17. Point-of-View PreventMonitor Quick Response Regulation Capability Infrastructure Decision Support System Inteligence
- 18. THE SIMOC Simulador de Operações Cibernéticas
- 19. What is The SIMOC? It is a platform that allows the creation of cyber environments, with focus on security. SIMOC Capability Assessment Operations of Security Services
- 20. Capability How to • Scenarios already designed in Cyber attack and defense • Real-time monitoring and the possibility of interfering in the progress of the training (pause, fast forward, rewind) • Possibility of recording the training for further evaluation of students. Benefits • Training expertise from an environment that reflects the specifications of your own network • knowledge Leveling with significant reduction of OPEX and CAPEX • Capability development Continuously Its goals are to form, train and update cyber analysts.
- 21. Assessment Assessment of services and network elements Vulnerability and Risk Analysis How to • Create of a replica of the TIC infrastructure in a seggregated environment • Emulate links (ADSL / Satelital / Ethernet / Customized) • Traffic generation • Automated Cyber attacks and defence Benefits • Support to Change Management • Support to Capacity Management (Stress Test) • Support to Quality Management (Regulation/certification) • Agility • OPEX / CAPEX reduction
- 22. Operations of Security Services Creation of Secure Services to be used in a production environmen How to • Utilization of pre-configured secure service packages (Templates) • Integration with real and virtualized networks Benefits • OPEX / CAPEX optimization • Services with high-level of security
- 24. Catalog of Scenarios The SIMOC platform brings along a list of more than 50 ready-to-use scenarios. And additionally allows the operator to add new scenarios. Check a few examples of scenarios in the catalog: o Overcome protections (networks with Snort, Firewall and Squid) o Execute an SQL Injection attack o Modify the content of a web page with an FTP server vulnerable to Buffer Overflow o Obtain access to source code in execution on the web server and find flaws in the code o Attach a client machine through sending a malicious link in an e-mail. The installed malware will send files with confidential information from the client via e-mail o Attack a network with DHCP service, depleting the IP addresses of the official DHCP server to personify the server o Overcome the access control, passing the conection through a DNS tunnel DNS to have acccess to blocked services
- 25. Scenario of a power plant invasion - network
- 26. Hamilton Oliveira Business Developer Manager - CyberSecurity mailto:hamilton.oliveira@rustcon.com.br Office:+552135543181
Editor's Notes
- Founded on 2011 by Mr. Carlos Rust, the RustCon brings on its DNA consulting projects, which cames with Mr. Rust from its more than 20 years as a partner of Accenture Company. Our main focus are on Defense and Security Industry I can brief quickly some of those important projects that have built our history and reputation: First I’d like to comment about project of The military world games. This is the second sport event that brings together more athletes in the world. On this case we have delivered a Comand and Control System. (The system was in charge to schecule and monitor all the events and activities of the organization of the games. It trigger alarms in case something goes wrong and start procedures for the alternative plans) We was also engaged on the SISFROM Project. The goal of this project is to monitor and manage the activities on the land borders of Brazil. We have had 3 participations: the first one was a consultancy to evaluate the software architecture of the Decision Support System; Our second sub-project on SISFROM was to develop the Logistcs Management System, actually we are still working on this project. And on the last January we have started the third project which is a “Simulator for the SISFROM”. Than after to build a good reputation with delivering projects to the ARMY on outstanding manner, the ARMY gave us the challenge to develop a The Brazilian cyber operations and simulations system, The SIMOC. This project allowed us to be recognized as a Strategic Defense Company, it is a certification provided by the Ministry of Defence We are very proud for to be recognized with this certification. Today we will talk about The SIMOC.
- In the next Slides we will present some questions to setup the context and for reflections about cybersecurity.
- So, to delivery a safety cyber environment is a long process, which requires the execution of complex tasks, and manual process is error-prone and non-repeatable.
- These list of activities is required... ... It will take several weeks to be complete...
- SIMOC is a dramatic changes. You can design, provisioning and execute in a day, not in months. With SIMOC you will be able to create a complete cyber security environment.
- In our point-of-view CyberSecurity is about to protect and to ensure the availability of network services in charge to manage and control the critical infrestructure of an organization.
- Looking at the current scenario of Cyber Environment, we can highlight some important points. The number of devices connected in a net is increasing very quickily. According to the Websense report, till 2020 we will gonna have 50 billon of devices connected “Especialized” attacks is a concern as well. It’s not enough to be prepared for the standard attacks, specially when we consider critical infrastrucure of governments, rackers are hired to perform “custom” attacks with very specific goal. It was also reported by Websense that security segment will face a gap of 2.2 million of security professionals. It is a red flag when we consider the tremendous number of devices connected, new technologies, and also the fast growth of cyber incidends... Let’s take a look in the graph of the next slide...
- It’s showing that on 2014 the number of cyber incidents was 300% higher than in the year before. This is scary...
- Still regarding the CyberSecurity, we are pointing here some of the main threats identified, for instance DDOS and Data Theft Also, the critical infrastructures are tipicaly the main targes of attacks.
- And finally, how to act in order to move from an “unsafe environment” to a “safe environment” Capability: It’s all about to build internal knowledgment. It’s important to train not only the analysts, who will execute the tasks, but the Management team as well in order to give them the proper knowledgement to define security strategies. Prevent: There is no way to prevent attacks if your cyber environment is not under control. Polices and process is a must to create a safety cyber environment. and Action: Continuos observation of the environment and further analises of traffic behavor will support you to define a defence plan, to create procedures to fix issues and for desaster recovery.
- On this functional diagram we are presenting our Point-of-View to move to a safety cyber security environment: - Capability development To define police and process to build scenarious of use Tools to model and deploy complex infraestuctures quickly Decision support systems to help to define a security strategies ... ... and also, tools to monitor your traffic in order to give you a complete situation awareness of your network, to give you a quick possibility to taste and deploy new options of prevent attacks, and those can give the possibility to counterattack, ---- The SIMOC can support you on it. INTELIGÊNCIA and finnaly to give you the possibility to record all scenarious of attacks that your company suffered and to be linked with sources ....
- SIMOC is platform that allows the creation of cyber environments, with important CAPEX and OPEX optimization. We will explore 3 aspects of the SIMOC: Capability development Assessment of network elements and services and Operations of Security Services
- With the Capability module you can train your team continuously in order to build knowledge leveling inside the team. This module cames with ready-to-use scenarios for cyber attacks and defense; give to the instructor habilities to follow up the execution of the training in real-time; The instructor is able to increase or reduce complexity of the tasks while the activities are running; Also the module can measure the achievements of the students by pre-defined metrics. Regarding the Benefits, we can highlight the OPEX AND CAPEX REDUCTION, and not least, the environment that your team will perform the train can be exactly like your production environment.
- The Assessment module provide features with which the IT team can homologate network elements and services before to apply the changes on the production environment. With that, you can create a separate and independent “copy” of your entire TIC environment quickily and than to perform the proper validations tests. As benefits some importante points are hightlighted here:
- With the Operations module Your organization will do not depends on of a banch of security experts. You will be able to create a secure services based on the templates ready-to-use. Thanks to SIMOC features you can integrate physical network elements with services deployed on the virtual environment. It can bring again very importante OPEX and CAPEX optimization.