Information security is not about reacting to attacks. Information security is about analyzing patterns and predicting potential threats by expanding the defense perimeter beyond the traditional borders.

1. Redrawing the Cyber
Defense Frontier
Dr. Joe Hage
© 2008-2014. Copyright, Dr. Joe Hage. Proprietary Information. All Rights Reserved.
1

2. Information Security Challenges –
1/2
• Senior management, often times, disengaged and
apathetic toward information security
• Information security initiatives are sometimes
checkboxes for regulatory compliance purposes
• Information security tends to be considered as an
impediment to business progress and agility
• Employees lacking information security awareness
© 2008-2014. Copyright, Dr. Joe Hage. Proprietary Information. All Rights Reserved.
2

3. Information Security Challenges –
2/2
• Information security is often an afterthought in
software development life cycle (SDLC)
• Industrialization and nationalization of hackers
• Loss of control over accessibility and usage as
everyone keeps bringing their own portable
devices to work
• The mushrooming cloud is eliminating boundaries
and security perimeters
© 2008-2014. Copyright, Dr. Joe Hage. Proprietary Information. All Rights Reserved.
3

4. Facts: The Mushrooming Cloud
• Infrastructure-as-a-Service (IaaS), e.g. Amazon EC2
• Platform-as-a-service (PaaS), tools and services used to develop
and deploy applications, e.g. Google App Engine
• Software-as-a-service (SaaS) such as Salesforce.com, Microsoft
Office 365, and Google Docs
• Storage-as-a-service (SaaS), file storage and sharing services
like Dropbox and SkyDrive
• “The Internet of Things” – Billions of connected devices
– 25 Billion devices by 2015 (Source: Cisco)
– 50 Billion devices by 2020 (Source: Cisco, Forbes)
© 2008-2014. Copyright, Dr. Joe Hage. Proprietary Information. All Rights Reserved.
4

5. Facts: Everyone is Vulnerable
• Traditional defenses are inadequate
–
–
–
–
–
–
–
Anti-Malware
Anti-Virus
Anti-Spyware
Anti-Phishing
Firewalls and Filters
Intrusion Detection
Data Loss Prevention
• Every device, user, application, or web page are potential
threats forcing enterprises to limit usage and restrict access
© 2008-2014. Copyright, Dr. Joe Hage. Proprietary Information. All Rights Reserved.
5

6. Solution: Redraw Cyber Defense
Frontier
• Collect and analyze data and patterns to set baseline
• Monitor and detect anomalies
• Predictive Failure Analysis
–
–
–
–
–
–
–
Content
System Transactions
User Activities
User Behaviors (which may vary depending on device used)
Application Behaviors
Data Patterns
Network Traffic
© 2008-2014. Copyright, Dr. Joe Hage. Proprietary Information. All Rights Reserved.
6

7. Dr. Joe Hage’s Contact Info
•
•
•
•
•
•
•
E-mail: DR@JOE.ME
Skype: joe_hage
Web: www.joe.me
LinkedIn: http://www.linkedin.com/in/joehage
Twitter: http://twitter.com/DrJoeHage
Facebook: http://facebook.com/DrJoeHage
Amazon: http://www.amazon.com/author/joe-hage
© 2008-2014. Copyright, Dr. Joe Hage. Proprietary Information. All Rights Reserved.
7