Cybersecurity presents many challenges across different segments. Globally, cyber attacks threaten critical infrastructure and national security through espionage, cyber warfare against countries, and disruption of emergency systems. Personal cyber attacks aim to steal money, identities, and sensitive personal information through social engineering and exploiting personal devices. Large amounts of personal data are collected, but not always securely protected. However, cybersecurity also creates opportunities to strengthen systems through improved education and training, security tools and frameworks, network infrastructure hardening, and data analytics to identify threats. Addressing cybersecurity challenges will help protect individuals, organizations, and nations.

1. Cybersecurity
CHALLENGES AND OPPORTUNITY
Karel Obluk

2. Cybersecurity – Segments
• Global
• Critical infrastructure
• Geo-political

3. Cybersecurity – Segments
• Global
• Personal
• Money
• Privacy – stealing
your info & identity

4. Cybersecurity – Segments
• Global
• Personal
• Data
• Personal,
company sensitivedata

5. Global – Infrastructure
• Espionage
• Snowden,China
• Cyber Warfare
• Estonia,Georgia, Iran
• Critical infrastructure
• US North-East blackout
• Emergency systems
• Typically state-sponsored

6. Global – Economy
• Target, Sony, TalkTalk
• massive attacks, lots of sensitive data, trade secrets
• company value, significant economical impact
• Aetna, Anthem, BlueCross
• Bangladesh central bank / SWIFT
• WHO?
• Criminals, hacktivists, bored geeks
• Also state sponsored?

7. Personal
• Stealing money from your bank account, ransomware
• guessing passwords, sending money elsewhere
• Electronic currencies, virtual valuables
• Games, virtual objects– World of Warcraft,...
• Who andWhy?
• Criminals
• Obtaining tools and means
for other attacks

8. Identity

9. Identity
• Social Networks
• Fake Facebook, LinkedIn accounts
• intelligence, constructing spear-headed attacks
• Social engineering
• Pictures, relationships
• Dating sites, sensitive info
• Even cost lives!

10. Personal Information
• Location
• Behaviour - patterns
• IoT, Devices
• Amount of info collected
• Security (or lack of it)
• Value of data

11. Data
• The good
• Product recommendations
• Predictions and forecasting
• But also the bad!
• Manipulating stock
• Ad-business
• Wait!

12. Data
• The good
• Product recommendations
• Predictions and forecasting
• Ad-business
• But also the bad!
• Manipulating stock
• Ad-business

13. Opportunity
• Education and Training
• Shortage ofsecurity experts
• Test systems, “labs”,simulation - for experts
• Basic training,education,certification - for normal users
• Security Tools and Frameworks
• Securing protocolsand applications
• Virtualisation,device management
• Exploit detection,attack detection and prevention
• Back-end systems,web applications- strengthening,

14. Opportunity
• Network infrastructure
• Deception tools and frameworks
• Using data analytics to identify good or bad
• Network, endpoints, mobile devices, access to resources
• SIEM / log analysis
• User Behaviour Analysis
• Anomalies, suspicious activity - spotting new trends, …
• Authentication
• Passwords = cockroaches of the web…

15. Questions?