The document discusses various aspects of cybersecurity, including advanced persistent threats, virtualization, cloud security, and the implications of the Internet of Things (IoT) on privacy and anonymity. It highlights significant incidents of data breaches, the evolution of security technologies, and the use of containers in application deployment. Furthermore, it addresses the challenges posed by identity theft, surveillance, and the use of technologies like Tor for anonymous internet browsing.

1. Abhinav Biswas Alapati Sarath

2. 

• APTs (Advanced Persistent Threats)

• Virtualization & Cloud Security
• Security vs Privacy vs Anonymity

• People - Process - Product (Era of ‘Smart’ Things)
• Cloud - M2M - Sensors

• From Virtualization to Containerization
• Shift in DevOps – Demo of Web hosting through containers

• TOR – Being Anonymous on Internet
• Demo of TOR hidden service


4. 100 TB Data Stolen & Exposed, Twitter Profiles Defaced, State-Sponsored
 Personal Info of Employees,
 Corporate E-mails & Source Codes
 VPN security tokens & private keys
 Box Office Projections
 Copies of Unreleased Films
 GBs of Data Destroyed & Deleted
Initial Allegations on China & disgruntled Ex-employees of Sony.
US claims it’s by Hacktivists of North Korea

5. Privacy fears over 'smart' Barbie that can listen to your kids
 World’s First Interactive Doll
 Uses Voice Recognition technology
 Plays interactive games, tells jokes
 Tailors conversations based on history
– November 2015
 Users' account information,
 Home Wi-Fi networks, and
 Audio MP3 files recorded by the doll

6. Identity Theft – The Next Big Issue, Almost 157,000 People affected
3 employees of Wipro Call Centre, Kolkata got Arrested
 Personal Info of Employees & Families,
 Thousands of Bank account details, Credit Card numbers
 Telecom Usage Data & Statistics

7. Demonstrated at Black Hat USA 2015,
Chrysler Recalled 1.4M Vehicles for Bug Fix
Reverse Engineered Car Firmware & Communications Protocol,
taking over Dashboard functions, Steering, Transmission and Brakes

8. Yeah even it happened….
 An Italian Startup,
founded in 2003
 Offensive Intrusion &
Surveillance Technologies
 Clients across a dozen of countries
in 6 different continents
 Spy as a Service
A Torrent file with 400GB of
internal documents, source code & email communications Leaked…

9. Advanced Persistent Threats (APT)
Lure Redirect Exploit
Kit
Dropper
File
Call
Home
Data
Theft
Recon

10. To protect our Systems, Networks & Data Centers
Policies & Procedures
Physical Security
Perimeter
Internal Network
Host
Application
Data

11. Let’s reconsider the technology behind security products
3 FORWARD FACING ONLY,
LACK OUTBOUND PROTECTION
No contextual analysis of Internal Threats.
2 LACK OF REAL-TIME
INLINE CONTENT ANALYSIS
No Byte-Range Data Packet Analysis for
Data Loss/ Theft Detection
Lame Firewall Policies
4 LACK OF ADVANCED ANALYTICS
& ANOMALY DETECTION
No Analytics in existing UTMs, NGFWs.
No SSL packet inspection.
1 PRIMARILY BASED ON
SIGNATURE & REPUTATION
Signature history cannot keep up with the
dynamic future of threats, No Sandboxing

12. What security researchers & companies are doing?

• Concept of the network perimeter evaporates (Co-located VMs)
- No Physical Segregation across VMs
• Lack of Persistence, Tougher Forensics

• Multi-Tenant Instances in SDDCs, Poor Visibility
• Accelerated Provisioning, Mixed-Trust Workloads
• Randomized Memory mapping in Cloud Instances
• Homo-Morphic Encryption
SECURITY PRIVACY ANONYMITY

13. With the Era of ‘Smart’ Things.…

14. What is IOT Exactly?

15.  Refers to the ever-growing network of physical objects with
connectivity, communication and cognizance.
 What is “Things” in IoT ?
 By things it’s Smart Tablets Phones PC, Smart Fridge, Medical
devices, POS Terminals, ATM, Handheld Scanners, blah blah
blah….
 But it’s much more
 Cloud & Network Enabled Infrastructure, Supply Chain Things,
Transactional Data, ERP Data, CRM Data, PLC Data, Public Data,
Social Data
IoT automates life, allows to connect with
people, machines and bots.

16. Things are getting Smart’er….
 Cheap Hardware costs
 Highly Available Data centers and Cloud Services
 Improved Data Analytics
 Manufacturing of Smart Devices
 Improved protocols and easy communication

21.  Sensors
• Proximity , accelerometer, Gyroscope, Moisture ,
Ambient Light, heartbeat sensor, pedometer
• You are under continuous surveillance
 Connectivity
• WiFi, Bluetooth LE, ZigBee, Z-Wave
• 6LowPAN, Thread, Sigfox, LoRaWAN
 People & Process
• Cloud services, Micro services
• One-tap Remote management

25. I wanna follow follow follow follow you…
Let’s see a Video to understand this better…

28. Introduction to…

29. “A person employed in a port
to load and unload ships.”
Open platform to Build, Ship, Run distributed applications
for developers and sysadmins.
 You can separate your applications from your infrastructure &
treat your infrastructure like a managed application.
 Helps you ship code faster, test faster, deploy faster, and shorten
the cycle between writing code and running code.

30.  To run different applications on a
single machine, we installed virtual
machines.
 Virtualization allowed us to
• Run multiple operating systems on one
physical machine
• Move and copy virtual machines by saving
the entire state of a virtual machine to files
 An application along with
necessary binaries and libraries
and an entire guest operating
system installed all of which may
be tens of GBs in size.

31.  Containers have similar resource
isolation and allocation benefits
as VMs but a different
architectural approach allows
them to be much more portable
and efficient.
 Docker allows us to
i. Run applications without installing
entire guest operating systems.
ii. Deploy ready-to-run, portable
software, easier migration, and
faster restarts.

32.  Containers wrap up a piece of
software in a complete filesystem
that contains everything it needs
to run: code, runtime, system
tools, system libraries.
 But share the kernel with other
containers.
 They run as an isolated process in
UserSpace on the host operating
system.
 They’re also not tied to any
specific infrastructure – Docker
containers run on any computer,
on any infrastructure and in any
cloud.

33.  Docker Engine handles virtualization parameters
such as allocation of the file system when
launched. whereas the hypervisor needs to first
import the virtual machine, then power it up.
 Accelerate Developer Onboarding, dynamically
change your application from adding new
capabilities to quickly changing problem areas.
 Eliminate Environment Inconsistencies
(“it works on my system”)

34.  Microsoft Azure
 Amazon web services
 Google Cloud platform
 Oracle Cloud
 RedHat Enterprise Linux
 IBM Bluemix

35.  Docker uses a client-server architecture.
 Docker client: The primary user interface to Docker.
- It accepts commands from the user and communicates
back & forth with a Docker daemon.
 Docker daemon: Runs on a host machine & does building,
running, and distributing Docker containers.
 Other Docker Resources
• Docker images: read-only templates from which Docker containers
are launched.(e.g. Ubuntu operating system with Apache server)
• Docker registries: public or private stores from which you upload or
download images
• Docker containers: everything that is needed for an application to
run.

36.  Installation of Docker
 Web Hosting through Containers

37. PHYSICAL
DIGITAL
1. Tiny
Computers
2. Massive
Computers
3. Physical is becoming Digital
4. Digital is becoming Physical
Bridging the gap…

39. I I
Deep Web & Dark Web
WikiLeaks

41. The Onion Router – Gateway to Anonymity
A free software and an open network that
simply makes you anonymous online.
 Conceals its users’ identity and their online activity from
surveillance and traffic analysis.
 Used by Activists, Whistle Blowers, Journalists, Sensitive
Businesses, Bloggers, Military
 Illicit Uses: Selling Drugs and Weapons, Silk Route, Child
Pornography
So to hide your privacy, hide behind a Onion

42. The Onion Router
 Layers of Encryption,
Peeled of at every subsequent node
 Each relay node knows only which
node gave it data & which node it is
giving data to
 Separate set of encryption keys for
each node along the complete circuit
No observer at any single point can tell
where the data came from or where it's going

43. The .onion domain
 Tor Browser
 Orbot

44.  Using Tor Browser to Connect to Internet
 Hosting Tor Hidden Service in 3 minutes
(https://xxxxyyyyzzzz.onion)

45. We tend to Over-estimate the effect of a technology in the short run
and Under-estimate the effect in the long run.
- Amara’s Law

46. “It ain't what you don't know that gets you into trouble.
It's what you know for sure that just ain't so.”
AbhinavBiswas@ecil.gov.in
@Abhinav_BIswas