Download as PDF, PPTX
Uploaded byUniversity of Suffolk
Super secure clouds
The document discusses the evolving landscape of security, emphasizing that threats are constant, often unexpected, and rely heavily on human behavior. It outlines key laws of security, the necessity for advanced and varied defenses in the cloud, and the increasing collaboration among criminals and governmental threats. To mitigate risks, organizations must adopt dynamic, multi-supplier approaches and rethink their security strategies extensively.
More Related Content
![Getting Started with Apache Spark: Big Data Made Simple [Free Meetup]](https://cdn.slidesharecdn.com/ss_thumbnails/apachesparkgettingstarted-260203175547-8361bcc3-thumbnail.jpg?width=640&height=640&fit=bounds)
Super secure clouds
- 1. SUPER Peter Cochrane SECURE cochrane.org.uk Tuesday, 26 June 12
- 2. Security is alwaysa cat and mouse game... Tuesday, 26 June 12
- 3. And we arealways trying to tilt the odds in our favour... Tuesday, 26 June 12
- 4. But we cannotleave anything to chance, we cannot afford to gamble, the stakes are far too high.. Tuesday, 26 June 12
- 5. We have tothink like the enemy, war game, test and probe, & constantly keep ahead technically and strategically... Tuesday, 26 June 12
- 6. Laws of security... 1) There is always a threat 2) It is always in a direction you’re not looking 3) Perceived risk/threat never equals reality 4) Nothing is 100% secure 5) People are always the primary risk 6) Resources are deployed inversely proportional to actual risk Tuesday, 26 June 12
- 7. Laws of security... 7) You need two security groups - defenders & attackers 8) Security & operational requirements are mutually exclusive 9) Legislation is always > X years behind 10) Security standards are an oxymoron 11) Security people are never their own customer 12) Cracking systems is far more fun than defending them Tuesday, 26 June 12
- 8. Laws of security... 13) Hackers are smarter than you - they are younger! 14) Hackers are not the biggest threat - governments are! 15) As life becomes faster it becomes less secure 16) Connectivity and data half lives are getting shorter too 17) We are most at risk during a time of transition 18) The weakest link generally defines the outcome Tuesday, 26 June 12
- 9. If we continueto do what we’ve always done our Cloud exposure will accelerate.. Tuesday, 26 June 12
- 10. In The Cloud- the attack surface is the entire planet... Tuesday, 26 June 12
- 11. We w il l n e e d more and smarter firewalls... Tuesday, 26 June 12
- 12. All forms ofmalware protection will have to become evolutionary... Tuesday, 26 June 12
- 13. Has to becomefar more sophisticated... Tuesday, 26 June 12
- 14. Enhancing login vectors... Something you: - Do - Are - Know - Posses - Deduce - Relate to A concatenation - Recognise of weak vectors - Remember rapidly becomes - Understand very strong... Tuesday, 26 June 12
- 15. Concatenating numerous low cost biometrics is a good example... - Eye - Face - Hand - Voice - Typing - Habits - Devices - Locations - ++++ Tuesday, 26 June 12
- 16. Automated & strongerencryption... ...but only where needed ! Tuesday, 26 June 12
- 17. More anonymity applications... Tuesday, 26 June 12
- 18. More url hopping, identity, & location cloaking applications... Tuesday, 26 June 12
- 19. What does TheCloud offer beyond all this ? Tuesday, 26 June 12
- 20. It will destroydominant mono-cultures of: - Devices So what are the extras The - Browsers Cloud brings to the party ? - eMail clients - Application sets - Operating modes - Operating systems Hackers love mono-cultures - it makes their lives so very much easier... Tuesday, 26 June 12
- 21. More variety, dynamism, and faster change... Tuesday, 26 June 12
- 22. Clouds of allsizes will form and dissipate by demand ...with the clustering of people and devices +++ Tuesday, 26 June 12
- 23. Connectivity will beless static, comms between Clouds sporadic and far more varied... Tuesday, 26 June 12
- 24. Moving targets are very hard to hit Tuesday, 26 June 12
- 25. Thin clients offervery limited processing and memory, making it far harder for malware to be effective... Tuesday, 26 June 12
- 26. - Infrastructure - Platform - Software Cloud services now available from multiple suppliers... Tuesday, 26 June 12
- 27. Use multiple suppliersfor connectivity, apps, storage, security et al and employ in a randomised fashion... Tuesday, 26 June 12
- 28. ...seamlessly flip betweendevices... Tuesday, 26 June 12
- 29.
- 30. To make itincredibly difficult for the dark side: - No single log-on device - No single log-on location - Variable log-on routine - Distributed applications - Distributed filing system - Parsed and distributed data - Multiple clouds and providers - Dynamic creation of clouds - Dynamic cloud interconnection - Inter-cloud encryption and coding - Corporate strength security for all Tuesday, 26 June 12
- 31. Storage App Corporate App Personal App Storage Personal App App Corporate One of many Storage Connection Clouds Corporate Surrounded By Clouds Tuesday, 26 June 12
- 32. Parsed data flowsto/from multiple destinations... ...are incredibly difficult to intercept and decode... Tuesday, 26 June 12
- 33. Parsed, encrypted & distributed folders over multiple global s e r ve r s . . . i s ev e n harder! Tuesday, 26 June 12
- 34. The biggest threatis still people laxity and the insider... Parsed, encrypted and distributed data folders over multiple global servers...is even worse! Tuesday, 26 June 12
- 35. Behavioural monitoring andanalysis will become an essential cloud service for SMEs, corporations & .gov... Tuesday, 26 June 12
- 36. Half lives ofconnections, data, info and knowledge...are going to get much shorter! Tuesday, 26 June 12
- 37. We have to reduce the opportunity and the time available for The Dark Side to infiltrate and take action... Tuesday, 26 June 12
- 38. And should theybreak in we confront them with partial access and a very confusing picture... Which door to choose, and to which cloud, for how long, with access to what ? Tuesday, 26 June 12
- 39. How many layers, combinations, connections, locks, types ? How long will they be open, and what is in each of the many clouds ? Tuesday, 26 June 12
- 40. The Dark Side will t h u s h ave The day of the lone far less time to infiltrate hacker is coming to and take an end... action... Tuesday, 26 June 12
- 41. The New DarkSide are gov agencies and criminal organisations with huge budgets, people & tech resources... Tuesday, 26 June 12
- 42. The sophistication of StuxNet and Flame surprised industry and governments ...and they mark the start of a new era... Tuesday, 26 June 12
- 43. We may betransiting to‘Cyber Warfare’... Tuesday, 26 June 12
- 44. Fen din go dem ff su and ch t tha sm hre n in ore ats mu divi ster dua capa l co bili rps ty can Tuesday, 26 June 12
- 45. Global cooperation will be required, to develop militar y grade solutions ... Tuesday, 26 June 12
- 46. To sur viveand prosper we have to think and act differently whilst leveraging new technology, and techniques... Tuesday, 26 June 12
- 47. The DIY companies will not survive... Tuesday, 26 June 12
- 48. Malware is now open code for free or a modest price from multiple sources... ...it is also breeding by the hand of man and by a digital life force we created... Tuesday, 26 June 12
- 49. “Speed is theessence of war. Take advantage of the enemy's u n p re p a re d n e s s ; t r ave l b y unexpected routes and strike him where he has taken no precautions” The Art of War by Sun Tzu, 600 BC Tuesday, 26 June 12
- 50. Be prepared ! Tuesday,26 June 12
- 51. ca-global.org cochrane.org.uk Thank You COCHRANE a s s o c i a t e s Tuesday, 26 June 12