Upload
tridon
View
229
Download
0
Embed Size (px)
Citation preview
8/8/2019 Schneier Monitoring Presentation
1/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
1HWZRUN0RQLWRULQJDQG6HFXULW\
%UXFH6FKQHLHU&72&RXQWHUSDQH,QWHUQHW6HFXULW\
-XQH
7DON'HVFULSWLRQ
&RPSXWHUDQGQHWZRUNVHFXULW\KDVEHHQYLHZHGDVDQHQJLQHHULQJSUREOHPDQGFRPSDQLHVKDYHWULHGWRVROYHLWWKURXJKWKH
DSSOLFDWLRQRIWHFKQRORJLHV7KLVDSSURDFKLVIDLOLQJHYHQWKRXJKWHFKQRORJLHVFRQWLQXHWRLPSURYHWKHVHFXULW\RIWKH,QWHUQHW
FRQWLQXHVWRGHFOLQH7KHUHDOSUREOHPLVQRWRQHRIWHFKQRORJ\EXWRISURFHVV1HWZRUNVHFXULW\LVQRGLIIHUHQWIURPUHDO
ZRUOGVHFXULW\7KHFRUUHFWSDUDGLJPLVULVNPDQDJHPHQW6WURQJFRXQWHUPHDVXUHVFRPELQHSURWHFWLRQGHWHFWLRQDQG
UHVSRQVH7KHZD\WREXLOGUHVLOLHQWVHFXULW\LVZLWKYLJLODQWDGDSWLYHUHOHQWOHVVGHIHQVHE\H[SHUWVSHRSOHQRWSURGXFWV
7KHUHDUHQRPDJLFSUHYHQWLYHFRXQWHUPHDVXUHVDJDLQVWFULPHLQWKHUHDOZRUOG\HWZHDUHDOOUHDVRQDEO\VDIHQHYHUWKHOHVV
:HQHHGWREULQJWKDWVDPHWKLQNLQJWRWKH,QWHUQHW
7KLVSUHVHQWDWLRQLVDYDLODEOHRQOLQHDWKWWSZZZFRXQWHUSDQHFRPSUHVHQWDWLRQSGI
$ERXWWKH$XWKRU
,QWHUQDWLRQDOO\UHQRZQHGVHFXULW\WHFKQRORJLVWDQGDXWKRU%UXFH6FKQHLHULVWKH)RXQGHUDQGWKH&KLHI7HFKQLFDO2IILFHURI
&RXQWHUSDQH,QWHUQHW6HFXULW\,QFWKHZRUOGOHDGHULQ0DQDJHG6HFXULW\0RQLWRULQJ&RXQWHUSDQHSURYLGHVVHFXULW\
PRQLWRULQJVHUYLFHVWR)RUWXQHFRPSDQLHVZRUOGZLGH+HLVWKHDXWKRURIVL[ERRNVRQVHFXULW\DQGFU\SWRJUDSK\
LQFOXGLQJWKHVHFXULW\EHVWVHOOHU6HFUHWV/LHV'LJLWDO6HFXULW\LQD1HWZRUNHG:RUOG+LVILUVWERRN$SSOLHG
&U\SWRJUDSK\KDVVROGRYHUFRSLHVZRUOGZLGHDQGLVWKHGHILQLWLYHZRUNLQWKHILHOG6FKQHLHUGHVLJQHGWKH
%ORZILVKDQG7ZRILVKHQFU\SWLRQDOJRULWKPVDQGZULWHVWKHLQIOXHQWLDO&U\SWR*UDPPRQWKO\QHZVOHWWHU+HLVDIUHTXHQW
OHFWXUHURQFRPSXWHUVHFXULW\DQGFU\SWRJUDSK\
%UXFH6FKQHLHUVELRJUDSK\LVDYDLODEOHRQOLQHDWKWWSZZZFRXQWHUSDQHFRPVFKQHLHUKWPO
$ERXW&RXQWHUSDQH,QWHUQHW6HFXULW\,QF
&RXQWHUSDQH,QWHUQHW6HFXULW\,QFLVWKHLQQRYDWRUDQGDFNQRZOHGJHGOHDGHULQSURYLGLQJ0DQDJHG6HFXULW\0RQLWRULQJ
060VHUYLFHV060FRPELQHVSHRSOHDQGWHFKQRORJ\WRVDIHJXDUGEXVLQHVVHV:RUNLQJIURPDQHWZRUNRIWHFKQLFDOO\
VRSKLVWLFDWHG6HFXUH2SHUDWLRQV&HQWHUV62&VDQGXVLQJSURJUHVVLYHDQDO\VLVWRROV&RXQWHUSDQHKDVEXLOWWKHPRVWDGYDQFHG
DQDO\VLVFRUUHODWLRQGHWHFWLRQDQGGLDJQRVLVWHFKQRORJ\FRPSULVLQJRID6HQWU\PRQLWRULQJSUREHRQWKHFXVWRPHUVQHWZRUN
DQGWKH6RFUDWHVNQRZOHGJHEDVHLQVLGHWKH62&V8VLQJWKLVWHFKQRORJ\&RXQWHUSDQHVH[SHUW6HFXULW\$QDO\VWVDUHDEOHWR
GHWHFWVHFXULW\LQFLGHQWVERWKH[WHUQDOLQWUXVLRQVDQGLQVLGHUDWWDFNVLQUHDOWLPHDQGWDLORULPPHGLDWHHIIHFWLYHUHVSRQVHVIRU
LWVFXVWRPHUV,WKDVSDUWQHUHGZLWKOHDGLQJVHFXULW\FRPSDQLHVFRQVXOWLQJRUJDQL]DWLRQVDQG9$5VWRGHOLYHU060VHUYLFHV
ZRUOGZLGH&RXQWHUSDQHLVKHDGTXDUWHUHGLQ6XQQ\YDOH&$DQGKDVWZRRSHUDWLRQDO62&VRQHLQ0RXQWDLQ9LHZ&$DQG
WKHRWKHULQ&KDQWLOO\9$
0RUHLQIRUPDWLRQDERXW&RXQWHUSDQHLVDYDLODEOHRQOLQHDWKWWSZZZFRXQWHUSDQHFRP
8/8/2019 Schneier Monitoring Presentation
2/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
,WVD'DQJHURXV:RUOG
,QWHOOHFWXDO3URSHUW\
%UDQG9DOXH+$&.(56
&203(7,7,21 (03/2
8/8/2019 Schneier Monitoring Presentation
3/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
$QG,WV*HWWLQJ:RUVH
3DVVZRUG*XHVVLQJ
6HOI5HSOLFDWLQJ&RGH
3DVVZRUG&UDFNLQJ
([SORLWLQJ.QRZQ9XOQHUDELOLWLHV
%XUJODULHV
+LMDFNLQJ6HVVLRQV
1HWZRUNHG0DQDJHPHQW'LDJQRVLV
*8,
$XWRPDWHG3UREHV6FDQV
ZZZ$WWDFNV
'LVWULEXWHG$WWDFN7RROV
6WDJHG$WWDFN
$WWDFN6RSKLVWLFDWLRQ
,QWUXGHU.QRZOHGJH
/2:
+,*+
'LVDEOLQJ$XGLWV
%DFN'RRUV
6ZHHSHUV
6QLIIHUV
3DFNHW6SRRILQJ
'HQLDORI6HUYLFH
6WHDOWK$GYDQFHG6FDQQLQJ7HFKQLTXHV
&URVV6LWH6FULSWLQJ
6RXUFH-XOLD+$OOHQ&(57*XLGHWR6\VWHPDQG1HWZRUN6HFXULW\3UDFWLFHV$GGLVRQ:HVOH\
&RPSXWHU6HFXULW\7KH7KUHDWV
,QFRPSXWHUVHFXULW\WKHROGHUDWWDFNVQHYHUJRDZD\DQGWKHQHZHUDWWDFNVMXVWJHWZRUVH7KHPRVWVHULRXVSUREOHPLQ
FRPSXWHUVHFXULW\LVQRWWKHQHZHVWDWWDFNEXWWKHHYHULQFUHDVLQJWVXQDPLRIDOOWKHROGDWWDFNVWKDWFRQWLQXHWRGRGDPDJH
&RQVLGHUEXIIHURYHUIORZV7KHVHDWWDFNVDUHRQHRIWKHROGHVWWULFNVLQWKHERRN7KH\ZHUHILUVWWDONHGDERXWDVHDUO\DVWKH
VWLPHVKDULQJV\VWHPVVXIIHUHGIURPWKHSUREOHPDQGZHUHNQRZQE\WKHVHFXULW\OLWHUDWLHYHQHDUOLHUWKDQWKDW,QWKH
VWKH\ZHUHRIWHQXVHGDVDSRLQWRIDWWDFNDJDLQVWHDUO\QHWZRUNHGFRPSXWHUV,QWKH0RUULV:RUPGURSSHGRI
WKHKRVWVRQWKH,QWHUQHWZLWKDEXIIHURYHUIORZDWWDFN
7RGD\RYHUDGHFDGHDQGDKDOIDIWHU0RUULVDQGDERXW\HDUVDIWHUWKHVHDWWDFNVZHUHILUVWGLVFRYHUHGEXIIHURYHUIORZVDUHVWLOODQHQRUPRXVSUREOHP0RVWDWWDFNVRQWKH,QWHUQHWDUHEXIIHURYHUIORZVHYHQWKRXJKWKHUHDUHDXWRPDWLFSURJUDPVWRILQG
DQGIL[WKHPLQGHYHORSPHQW
7KHUHDUHPDQ\DWWDFNVPRUHVXEWOHDQGKDUGHUWRIL[WKDQEXIIHURYHUIORZV%XWWKH\UHVWLOOKHUHWRRDQGWKH\UHVWLOOFDXVLQJ
GDPDJH
,Q:HEVLWHGHIDFHPHQWVZHUHPDMRUQHZV7RGD\WKHUHDUHGR]HQVRI:HEVLWHGHIDFHPHQWVHYHU\GD\DQGIHZQRWLFH
,QWKHVWRU\ZDVFUHGLWFDUGQXPEHUWKHIWV&'8QLYHUVHVWXPEOHGDVDFRPSDQ\SDUWO\EHFDXVHRIWKHFUHGLELOLW\WKH\
ORVWLQDFUHGLWFDUGQXPEHUWKHIW7RGD\PLOOLRQVRIFUHGLWFDUGQXPEHUVDUHVWROHQRIIWKH,QWHUQHWEXWLWVQRWQHZVDQ\PRUH
ZDVWKH\HDURIWKH7URMDQ%DFN2ULILFHZDVJRLQJWREHWKHGHDWKRIWKH,QWHUQHW7RGD\WKHUHDUHGR]HQVRI7URMDQV
PDQ\RIWKHPQDVWLHUWKDQ%DFN2ULILFHWKDWWKHSRSXODUSUHVVLJQRUHV,QLWZDVGHQLDORIVHUYLFHDWWDFNV'R6DWWDFNVDUH
VRPHRIWKHROGHVWDQGHDVLHVWDWWDFNVLQWKHERRN7KH\UHDVROGDVWKH,QWHUQHW7KDW)HEUXDU\FRRUGLQDWHGGLVWULEXWHG'R6
DWWDFNVHDVLO\EURXJKWGRZQVHYHUDOKLJKWUDIILF:HEVLWHVLQFOXGLQJ
8/8/2019 Schneier Monitoring Presentation
4/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
:K\"&RPSOH[LW\
&RPSOH[LW\LVWKHHQHP\RIVHFXULW\
0RUHFRPSOH[LW\OHVVVHFXULW\ 7KH,QWHUQHWLVJHWWLQJPRUHFRPSOH[IDVWHUWKDQRXU
DELOLW\WRVHFXUHLW
0RUHIHDWXUHVDQGLQFUHDVLQJFRGHVL]H
,QFUHDVLQJH[WHQVLELOLW\
0RUHLQWHUDFWLRQVDQGGHSHQGHQFLHV
,QFUHDVLQJFRQQHFWLYLW\
:HDUHQRWZLOOLQJWRVDFULILFHIHDWXUHVIRUVHFXULW\
7KHPRQRFXOWXUHRIWKH,QWHUQHWGRHVQWKHOSHLWKHU
&RPSOH[LW\DQG6HFXULW\
7KHIXWXUHRIGLJLWDOV\VWHPVLVFRPSOH[LW\DQGFRPSOH[LW\LVWKHZRUVWHQHP\RIVHFXULW\
'LJLWDOWHFKQRORJ\KDVEHHQDQXQHQGLQJVHULHVRILQQRYDWLRQVXQLQWHQGHGFRQVHTXHQFHVDQGVXUSULVHVDQGWKHUHVQRUHDVRQWR
EHOLHYHWKDWZLOOVWRSDQ\WLPHVRRQ%XWRQHWKLQJKDVKHOGFRQVWDQWWKURXJKLWDOODQGLWVWKDWGLJLWDOV\VWHPVKDYHJRWWHQPRUH
FRPSOLFDWHG7KH,QWHUQHWLVSUREDEO\WKHPRVWFRPSOH[PDFKLQHPDQNLQGKDVHYHUEXLOWDQGLWVQRWJHWWLQJDQ\VLPSOHU
DQ\WLPHVRRQ
$VDFRQVXPHU,WKLQNWKLVFRPSOH[LW\LVJUHDW7KHUHDUHPRUHFKRLFHVPRUHRSWLRQVPRUHWKLQJV,FDQGR$VDVHFXULW\
SURIHVVLRQDO,WKLQNLWVWHUULI\LQJ$VF\EHUVSDFHFRQWLQXHVWRJHWPRUHFRPSOH[LWZLOOFRQWLQXHWRJHWOHVVVHFXUH7KLVLVWUXHIRUVHYHUDOUHDVRQV
7KHILUVWUHDVRQLVWKHQXPEHURIVHFXULW\EXJV$OOVRIWZDUHFRQWDLQVEXJVDQGVRPHRIWKHVHEXJVZLOODIIHFWVHFXULW\
7KHVHFRQGUHDVRQLVWKHH[WHQVLELOLW\RIFRPSOH[V\VWHPV&RPSOH[V\VWHPVDUHQHFHVVDULO\PRGXODUFRGHDUULYHVZKHQ
QHHGHGDQGGRHVQRWDOOFRPHSUHSDFNDJHGDQGSUHLQVWDOOHG%XWH[WHQVLELOLW\PHDQVLQFUHDVHGVHFXULW\IODZVEHFDXVH
VHFXULW\RIWHQIDLOVZKHUHPRGXOHVLQWHUDFW)RUH[DPSOHODVW\HDUVHSLGHPLFRIPDFURYLUXVHVVKRZHGWKDW0LFURVRIW:RUG
DQG([FHOQHHGWREHVHFXUH-DYDDSSOHWVQHHGWREHVHFXUHIRUDQ\SRVVLEOHXVHQRWRQO\IRUWKHXVHVWKH\DUHLQWHQGHG
0DOLFLRXVHPDLODWWDFKPHQWVFDQWXQQHOWKURXJKILUHZDOOV&RQYHQLHQFHIHDWXUHVLQ0LFURVRIW2XWORRNFDQFRPSURPLVH
VHFXULW\
7KHWKLUGUHDVRQLVWKHLQFUHDVHGWHVWLQJUHTXLUHPHQWVIRUFRPSOH[V\VWHPV7KHRQO\UHDVRQDEOHZD\WRWHVWWKHVHFXULW\RID
V\VWHPLVWRSHUIRUPVHFXULW\HYDOXDWLRQVRQLW+RZHYHUWKHPRUHFRPSOH[WKHV\VWHPLVWKHPRUHVHFXULW\UHODWHGHUURUVLW
ZLOOKDYH0RUHSRVVLEOHLQWHUDFWLRQVFUHDWHVPRUHZRUNGXULQJWKHVHFXULW\HYDOXDWLRQ&KHFNLQJHYHU\SRVVLEOHFRQILJXUDWLRQ
LVHIIHFWLYHO\LPSRVVLEOH7KXVWKHGLIILFXOW\RISHUIRUPLQJVHFXULW\HYDOXDWLRQVDOVRJURZVYHU\UDSLGO\ZLWKLQFUHDVLQJFRPSOH[LW\7KHFRPELQDWLRQRIDGGLWLRQDOSRWHQWLDOZHDNQHVVHVDQGDPRUHGLIILFXOWVHFXULW\DQDO\VLVXQDYRLGDEO\UHVXOWVLQ
LQVHFXUHV\VWHPV
7KHIRXUWKUHDVRQLVWKDWWKHPRUHFRPSOH[DV\VWHPLVWKHKDUGHULWLVWRXQGHUVWDQG7KHUHDUHDOOVRUWVRIYXOQHUDELOLW\SRLQWV
KXPDQFRPSXWHULQWHUIDFHV\VWHPLQWHUDFWLRQVWKDWEHFRPHPXFKODUJHUZKHQ\RXFDQWNHHSWKHHQWLUHV\VWHPLQ\RXU
KHDG
7KHILIWKUHDVRQLVWKHGLIILFXOW\RIDQDO\VLV7KHPRUHFRPSOH[DV\VWHPLVWKHKDUGHULWLVWRGRDQDO\VLV(YHU\WKLQJLVPRUH
FRPSOLFDWHGVSHFLILFDWLRQGHVLJQLPSOHPHQWDWLRQDQGXVH$QGHYHU\WKLQJLVUHOHYDQWWRVHFXULW\DQDO\VLV
&RQWLQXHGRQQH[WSDJH
8/8/2019 Schneier Monitoring Presentation
5/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
(YROXWLRQRI6HFXULW\0DQDJHPHQW
VW*HQHUDWLRQ
*$7(6*816*8$5'6)RFXVRQSK\VLFDOYXOQHUDELOLWLHVDQGGDWDFRQILGHQWLDOLW\
7RROVORFNVEXUJODUDODUPV
:HDNQHVVHVVORZUHVSRQVHQRSURWHFWLRQIURPHOHFWURQLFWKUHDWV
QG*HQHUDWLRQ
%$6,&6(&85,7
8/8/2019 Schneier Monitoring Presentation
6/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
7KH:LQGRZRI([SRVXUH
9XOQHUDELOLW\GLVFRYHUHG
9XOQHUDELOLW\SRSXODUL]HG
9HQGRULVVXHVSDWFK
7LPH
9XOQHUDELOLW\DQQRXQFHG
7KH:LQGRZRI([SRVXUH3KDVHV
3KDVH%HIRUHWKHYXOQHUDELOLW\LVGLVFRYHUHG
1RH[SRVXUH
3KDVH$IWHUGLVFRYHU\EXWEHIRUHLWLVDQQRXQFHG
9HU\OLPLWHGH[SRVXUH
3KDVH$IWHULWLVDQQRXQFHG0RUHH[SRVXUH
3KDVH$IWHUDQDXWRPDWLFDWWDFNWRROLVZULWWHQ
6FULSWNLGGLHVZLWKQRVNLOOFDQXVHYXOQHUDELOLW\
([SRVXUHJRHVXSFRQVLGHUDEO\
3KDVH$IWHUDYHQGRUSDWFKKDVEHHQLVVXHG
([SRVXUHUHPDLQVLQGHILQLWHO\EHFDXVHSDWFKHVPDQ\XVHUVGRQRWLQVWDOOSDWFKHV
7KHULVNQHYHUJRHVEDFNWR]HUR
8/8/2019 Schneier Monitoring Presentation
7/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
6HFXULW\7ZR0RGHOV
7KUHDW$YRLGDQFH7KH0LOLWDU\0RGHO
6HFXULW\LVDQDEVROXWH
)LJXUHRXWZKDWWKHWKUHDWVDUHDQGDYRLGWKHP
(LWKHU\RXUHVHFXUHRU\RXUHQRW
)ROORZVDFRPSXWHUHQJLQHHULQJPHQWDOLW\
)LQGDQGVROYHWKHP
6HFXULW\EHFRPHVDEDUULHUWREXVLQHVV
5HPHPEHUWKHFU\SWRZDUV"
5LVN0DQDJHPHQW7KH%XVLQHVV0RGHO
6HFXULW\LVUHODWLYH
0DQ\ULVNVDQGVROXWLRQV
7KLQJVIDLODOOWKHWLPH
9DULHW\RIRSWLRQV
$FFHSWWKHULVN
0LWLJDWHWKHULVNZLWKWHFKQRORJ\
0LWLJDWHWKHULVNZLWKSURFHGXUHV
7UDQVIHUWKHULVN
6HFXULW\DQG5LVN0DQDJHPHQW
$VNDQ\QHWZRUNDGPLQLVWUDWRUZKDWKHQHHGVVHFXULW\IRUDQGKHFDQGHVFULEHWKHWKUHDWV:HEVLWHGHIDFHPHQWVFRUUXSWLRQDQGORVVRIGDWDGXHWRQHWZRUNSHQHWUDWLRQVGHQLDORIVHUYLFHDWWDFNVYLUXVHVDQG7URMDQV7KHOLVWVHHPVHQGOHVVDQGDQHQGOHVVVHULHVRIQHZVVWRULHVSURYHVWKDWWKHWKUHDWVDUHUHDO
$VNWKDWVDPHQHWZRUNDGPLQLVWUDWRUKRZVHFXULW\WHFKQRORJLHVKHOSDQGKHOOGLVFXVVDYRLGLQJWKHWKUHDWV7KLVLVWKHWUDGLWLRQDOSDUDGLJPRIFRPSXWHUVHFXULW\ERUQRXWRIDFRPSXWHUVFLHQFHPHQWDOLW\ILJXUHRXWZKDWWKHWKUHDWVDUHDQGEXLOGWHFKQRORJLHVWRDYRLGWKHP7KHFRQFHLWLVWKDWWHFKQRORJLHVFDQVRPHKRZVROYHFRPSXWHUVHFXULW\DQGWKHHQGUHVXOWLVDVHFXULW\SURJUDPWKDWEHFRPHVDQH[SHQVHDQGDEDUULHUWREXVLQHVV+RZPDQ\WLPHVKDVDVHFXULW\RIILFHUVDLG
8/8/2019 Schneier Monitoring Presentation
8/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
6HFXULW\0XVW0DNH%XVLQHVV6HQVH
&2672)6(&85,7
8/8/2019 Schneier Monitoring Presentation
9/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
$FKLHYLQJ5HDO6HFXULW\
%86,1(666(&85,7
8/8/2019 Schneier Monitoring Presentation
10/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
3UHYHQWLRQ'HWHFWLRQDQG5HVSRQVH
0RVWFRPSXWHUVHFXULW\LVSUHYHQWLYHLQQDWXUH
$SUHYHQWLYHFRXQWHUPHDVXUHSURYLGHVWZRWKLQJV
%DUULHUWRRYHUFRPH
7LPHWRRYHUFRPHWKHEDUULHU
:LWKRXWGHWHFWLRQDQGUHVSRQVHWKHSUHYHQWLYHFRXQWHUPHDVXUHLVPXFKOHVVHIIHFWLYH
0RVWRIWKHWLPHGHWHFWLRQDQGUHVSRQVHLVPRUHHIIHFWLYHDQGPRUHFRVWHIIHFWLYHWKDQPRUHSUHYHQWLRQ
3UHYHQWLRQ'HWHFWLRQDQG5HVSRQVH
0RVWFRPSXWHUVHFXULW\LVVROGDVDSURSK\ODFWLFHQFU\SWLRQSUHYHQWVHDYHVGURSSLQJILUHZDOOVSUHYHQWXQDXWKRUL]HGQHWZRUN
DFFHVV3.,SUHYHQWVLPSHUVRQDWLRQ7RWKHZRUOGDWODUJHWKLVLVDVWUDQJHPDUNHWLQJVWUDWHJ\$GRRUORFNLVQHYHUVROGZLWK
WKHVORJDQ7KLVORFNSUHYHQWVEXUJODULHV1RRQHHYHUDVNVWRSXUFKDVHDGHYLFHWKDWZLOOSUHYHQWPXUGHU%XWFRPSXWHU
VHFXULW\SURGXFWVDUHVROGWKDWZD\DOOWKHWLPH&RPSDQLHVUHJXODUO\WU\WREX\?DGHYLFHWKDWSUHYHQWVKDFNLQJ7KLVLVQR
PRUHSRVVLEOHWKDQDQDQWLPXUGHUGHYLFH
:KHQ\RXEX\DVDIHLWFRPHVZLWKDUDWLQJ7/PLQXWHVWRROV757/PLQXWHVWRUFKDQGWRROV:KDWWKLVPHDQVLV
WKDWDSURIHVVLRQDOVDIHFUDFNHUZLWKVDIHFUDFNLQJWRROVDQGDQR[\DFHW\OHQHWRUFKZLOOEUHDNRSHQWKHVDIHLQDQKRXU,IDQDODUPGRHVQWVRXQGDQGJXDUGVGRQWFRPHUXQQLQJZLWKLQWKDWKRXUWKHVDIHLVZRUWKOHVV7KHVDIHEX\V\RXWLPH\RXKDYHWR
VSHQGLWZLVHO\
5HDOZRUOGVHFXULW\LQFOXGHVSUHYHQWLRQGHWHFWLRQDQGUHVSRQVH,IWKHSUHYHQWLRQPHFKDQLVPVZHUHSHUIHFW\RXZRXOGQW
QHHGGHWHFWLRQDQGUHVSRQVH%XWQRSUHYHQWLRQPHFKDQLVPLVSHUIHFW7KLVLVHVSHFLDOO\WUXHIRUFRPSXWHUQHWZRUNV$OO
VRIWZDUHSURGXFWVKDYHVHFXULW\EXJVPRVWQHWZRUNGHYLFHVDUHPLVFRQILJXUHGDQGXVHUVPDNHDOOVRUWVRIPLVWDNHV:LWKRXW
GHWHFWLRQDQGUHVSRQVHWKHSUHYHQWLRQPHFKDQLVPVRQO\KDYHOLPLWHGYDOXH7KH\UHIUDJLOH$QGGHWHFWLRQDQGUHVSRQVHDUHQRW
RQO\PRUHFRVWHIIHFWLYHEXWDOVRPRUHHIIHFWLYHWKDQSLOLQJRQPRUHSUHYHQWLRQ
2QWKH,QWHUQHWWKLVWUDQVODWHVWRPRQLWRULQJ:KHQDIRUHQVLFVWHDPLQYHVWLJDWHVDQLQWUXVLRQWKH\FRPEWKURXJKWKHDXGLWORJV
RIWKHQHWZRUNVURXWHUVVHUYHUVILUHZDOOVHWF8VLQJWKRVHORJVWKH\SLHFHWRJHWKHUWKHDWWDFNHUVDFWLRQVKRZKHJRWLQZKDW
KHGLGZKDWKHVWROH,IVRPHRQHFDQPRQLWRUWKRVHDXGLWORJVLQUHDOWLPHKHFRXOGILJXUHRXWZKDWWKHDWWDFNHU,6'2,1*
$QGLIKHFDQUHVSRQGIDVWHQRXJKKHFDQUHSHOWKHDWWDFNHUEHIRUHKHGRHVUHDOGDPDJH
7KDWVUHDOVHFXULW\,WGRHVQWPDWWHUKRZWKHDWWDFNHUJHWVLQRUZKDWKHLVGRLQJ,IWKHUHDUHHQRXJKPRWLRQVHQVRUVHOHFWULFH\HVDQGSUHVVXUHSODWHVLQ\RXUKRXVH\RXOOFDWFKWKHEXUJODUUHJDUGOHVVRIKRZKHJRWLQ,I\RXDUHPRQLWRULQJ\RXUQHWZRUN
FDUHIXOO\HQRXJK\RXOOFDWFKDKDFNHUUHJDUGOHVVRIZKDWYXOQHUDELOLW\KHH[SORLWHGWRJDLQDFFHVV$QGLI\RXFDQUHVSRQG
TXLFNO\DQGHIIHFWLYHO\\RXFDQUHSHOWKHDWWDFNHUEHIRUHKHGRHVDQ\GDPDJH*RRGGHWHFWLRQDQGUHVSRQVHFDQPDNHXSIRU
LPSHUIHFWSUHYHQWLRQ
$QGSUHYHQWLRQV\VWHPVDUHQHYHUSHUIHFW1REDQNHYHUVD\V2XUVDIHLVVRJRRGZHGRQWQHHGDQDODUPV\VWHP1R
PXVHXPHYHUVD\V2XUGRRUDQGZLQGRZORFNVDUHVRJRRGZHGRQWQHHGQLJKWZDWFKPHQ'HWHFWLRQDQGUHVSRQVHDUHKRZ
ZHJHWVHFXULW\LQWKHUHDOZRUOGDQGWKH\UHWKHRQO\ZD\ZHFDQSRVVLEO\JHWVHFXULW\RQWKH,QWHUQHW&,2VPXVWLQYHVWLQ
QHWZRUNPRQLWRULQJVHUYLFHVLIWKH\DUHWRSURSHUO\PDQDJHWKHULVNVDVVRFLDWHGZLWKWKHLUQHWZRUNLQIUDVWUXFWXUH
8/8/2019 Schneier Monitoring Presentation
11/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
1HWZRUN6HFXULW\0RQLWRULQJ5HTXLUHV+XPDQ([SHUWV
([SHUWVPXVW 6HSDUDWHWKHUHDO
DWWDFNVIURPWKHIDOVHDODUPV
6HSDUDWHWKHVHULRXVDWWDFNHUVIURPWKHDQNOHELWHUV
'HWHUPLQHDQGLPSOHPHQWDUHVSRQVH
0RQLWRULQJ1HWZRUN6HFXULW\
1HWZRUNPRQLWRULQJLPSOLHVVHYHUDOWKLQJV,WLPSOLHVDVHULHVRIVHQVRUVLQDQGDURXQGWKHQHWZRUN/XFNLO\WKHVHDUHDOUHDG\
LQSODFH(YHU\ILUHZDOOSURGXFHVDFRQWLQXRXVVWUHDPRIDXGLWPHVVDJHV6RGRHVHYHU\URXWHUDQGVHUYHU,'6VVHQGPHVVDJHV
ZKHQWKH\QRWLFHVRPHWKLQJ(YHU\RWKHUVHFXULW\SURGXFWJHQHUDWHVDODUPVLQVRPHZD\
%XWWKHVHVHQVRUVE\WKHPVHOYHVGRQRWRIIHUVHFXULW\
8/8/2019 Schneier Monitoring Presentation
12/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
(IIHFWLYH0RQLWRULQJ0XVW%H9LJLODQW$GDSWLYHDQG5HOHQWOHVV
9LJLODQFH
0RQLWRULQJRQO\ZRUNV[
'HIHQVHLQOD\HUV
&KHFNVDQGEDODQFHV
5HOHQWOHVVQHVV
)LUHZDOOV,'6VURXWHUVDQGVHUYHUVDUHWKHWHUUDLQ\RXILJKWRQ
3HRSOHGHIHQGLQJ\RXDUHZKDWVLPSRUWDQW
$GDSWDELOLW\
1HWZRUNVDUHG\QDPLF 1HZDWWDFNV
1HZYXOQHUDELOLWLHV
&KDQJLQJQHWZRUNV
$GDSWDELOLW\LVDGHIHQVH
$QHQRUPRXVDGYDQWDJH
:HFDQWDIIRUGWRVTXDQGHULW
0LOLWDU\+LVWRU\DQG1HWZRUN6HFXULW\
,QZDUIDUHWKHGHIHQGHUVPLOLWDU\DGYDQWDJHFRPHVIURPWZREURDGVWUHQJWKVWKHDELOLW\WRTXLFNO\UHDFWWRDQDWWDFNDQGWKH
DELOLW\WRFRQWUROWKHWHUUDLQ
7KHILUVWVWUHQJWKLVSUREDEO\WKHPRVWLPSRUWDQWDGHIHQGHUFDQPRUHTXLFNO\VKLIWIRUFHVWRUHVXSSO\H[LVWLQJIRUFHVVKRUHXS
GHIHQVHZKHUHLWLVQHHGHGDQGFRXQWHUDWWDFN+HUHZHVHHWKHVDPHWKHPHVIURPHOVHZKHUHLQWKLVERRNOHWKRZGHWHFWLRQDQG
UHVSRQVHDUHFULWLFDOWKHQHHGIRUWUDLQHGH[SHUWVWRTXLFNO\DQDO\]HDQGUHDFWWRDWWDFNVDQGWKHLPSRUWDQFHRIYLJLODQFH,YH
EXLOW&RXQWHUSDQHV060VHUYLFHDURXQGWKHVHYHU\SULQFLSOHVSUHFLVHO\EHFDXVHLWFDQGUDPDWLFDOO\VKLIWWKHEDODQFHIURP
DWWDFNHUWRGHIHQGHU7KHGHIHQGHUVVHFRQGVWUHQJWKDOVRJLYHVKLPDVWURQJDGYDQWDJH+HKDVEHWWHUNQRZOHGJHRIWKHWHUUDLQZKHUHWKHJRRG
KLGLQJSODFHVDUHZKHUHWKHPRXQWDLQSDVVHVDUHKRZWRVQHDNWKURXJKWKHFDYHV+HFDQPRGLI\WKHWHUUDLQEXLOGLQJFDVWOHVRU
6$0EDWWHULHVGLJJLQJWUHQFKHVRUWXQQHOVHUHFWLQJJXDUGWRZHUVRUSLOOER[HV$QGKHFDQFKRRVHWKHWHUUDLQRQZKLFKWRVWDQG
DQGGHIHQGEHKLQGWKHVWRQHZDOODWRSWKHKLOORQWKHIDUVLGHRIWKHEULGJHLQWKHGHQVHMXQJOH7KHGHIHQGHUFDQXVHWHUUDLQ
WRKLVPD[LPXPDGYDQWDJHWKHDWWDFNHULVVWXFNZLWKZKDWHYHUWHUUDLQKHLVIRUFHGWRWUDYHUVH
2QWKH,QWHUQHWWKLVVHFRQGDGYDQWDJHLVRQHWKDWQHWZRUNGHIHQGHUVVHOGRPWDNHDGYDQWDJHRINQRZOHGJHRIWKHQHWZRUN7KH
QHWZRUNDGPLQLVWUDWRUNQRZVH[DFWO\KRZKLVQHWZRUNLVEXLOWRUDWOHDVWKHVKRXOGZKDWLWLVVXSSRVHGWRGRDQGKRZLWLV
VXSSRVHGWRGRLW$Q\DWWDFNHUH[FHSWDNQRZOHGJHDEOHLQVLGHUKDVQRFKRLFHEXWWRVWXPEOHDURXQGWU\LQJWKLVDQGWKDWWU\LQJ
WRILJXUHRXWZKDWVZKHUHDQGZKRVFRQQHFWHGWRZKRP$QGLWVDERXWWLPHZHH[SORLWHGWKLVDGYDQWDJH
7KLQNDERXWEXUJODUDODUPV7KHUHDVRQWKH\ZRUNLVWKDWWKHDWWDFNHUGRHVQWNQRZWKH\UHWKHUH+HPLJKWVXFFHVVIXOO\E\SDVV
DGRRUORFNRUVQHDNLQWKURXJKDVHFRQGVWRU\ZLQGRZEXWKHGRHVQWNQRZWKDWWKHUHLVDSUHVVXUHSODWHXQGHUWKLVSDUWLFXODU
UXJRUDQHOHFWULFH\HDFURVVWKLVSDUWLFXODUGRRUZD\0DF*\YHUOLNHDQWLFVDVLGHDQ\EXUJODUZDQGHULQJWKURXJKDEXLOGLQJZLUHGZLWKDODUPVLVJXDUDQWHHGWRWULSVRPHWKLQJVRRQHURUODWHU
7UDGLWLRQDOFRPSXWHUVHFXULW\KDVEHHQVWDWLFLQVWDOODILUHZDOOFRQILJXUHD3.,DGGDFFHVVFRQWUROPHDVXUHVDQG\RXUHGRQH
5HDOVHFXULW\LVG\QDPLF7KHGHIHQVHKDVWREHFRQWLQXRXVO\YLJLODQWDOZD\VUHDG\IRUWKHDWWDFN7KHGHIHQVHKDVWREHDEOHWR
GHWHFWDWWDFNVTXLFNO\EHIRUHVHULRXVGDPDJHLVGRQH$QGWKHGHIHQVHKDVWREHDEOHWRUHVSRQGWRDWWDFNVHIIHFWLYHO\UHSHOOLQJ
WKHDWWDFNHUDQGUHVWRULQJRUGHU
7KLVNLQGRIGHIHQVHLVSRVVLEOHLQFRPSXWHUQHWZRUNV,WVWDUWVZLWKHIIHFWLYHVHQVRUVILUHZDOOVZHOODXGLWHGVHUYHUVDQG
URXWHUVLQWUXVLRQGHWHFWLRQSURGXFWVQHWZRUNEXUJODUDODUPV%XWLWDOVRLQFOXGHVSHRSOHWUDLQHGVHFXULW\H[SHUWVWKDWFDQ
TXLFNO\VHSDUDWHWKHIDOVHDODUPVIURPWKHUHDODWWDFNVDQGZKRNQRZKRZWRUHVSRQG,WLQFOXGHVDQ060VHUYLFH7KLVLV
VHFXULW\WKURXJKSURFHVV7KLVLVVHFXULW\WKDWUHFRJQL]HVWKDWKXPDQLQWHOOLJHQFHLVYLWDOIRUDVWURQJGHIHQVHDQGWKDW
DXWRPDWLFVRIWZDUHSURJUDPVMXVWGRQWFXWLW
8/8/2019 Schneier Monitoring Presentation
13/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
(IIHFWLYH0RQLWRULQJ3URYLGHV5HVLOLHQW6HFXULW\
5HDOWLPHGHWHFWLRQ
FDQFDWFKDWWDFNHUVUHJDUGOHVVRIWKHYXOQHUDELOLW\
5DSLGUHVSRQVHFDQUHSHODWWDFNHUV
9LJLODQWDGDSWLYHDQGUHOHQWOHVVQHWZRUNPRQLWRULQJKHOSVPDNHLQGLYLGXDOYXOQHUDELOLWLHVOHVVLPSRUWDQW
0RQLWRULQJDQG5HVLOLHQW6HFXULW\
'XULQJWKHFRXUVHRIWKH\HDUVHYHUDOJURXSVRI(DVWHUQ(XURSHDQKDFNHUVEURNHLQWRDWOHDVWFRPSDQLHV:HEVLWHV
VWROHFUHGLWFDUGQXPEHUVDQGLQVRPHFDVHVWULHGWRH[WRUWPRQH\IURPWKHLUYLFWLPV7KHQHWZRUNYXOQHUDELOLWLHVH[SORLWHGE\
WKHVHFULPLQDOVZHUHNQRZQDQGSDWFKHVWKDWFORVHGWKHPZHUHDYDLODEOHEXWQRQHRIWKHFRPSDQLHVKDGLQVWDOOHGWKHP,Q
-DQXDU\WKH5DPHQZRUPWDUJHWHGNQRZQYXOQHUDELOLWLHVLQVHYHUDOYHUVLRQVRI5HG+DW/LQX[1RQHRIWKHWKRXVDQGVRI
LQIHFWHGV\VWHPVKDGWKHLUSDWFKHVXSWRGDWH,Q2FWREHU0LFURVRIWZDVPROHVWHGE\XQNQRZQKDFNHUVZKRZDQGHUHG
XQFKDOOHQJHGWKURXJKWKHLUQHWZRUNDFFHVVLQJLQWHOOHFWXDOSURSHUW\IRUZHHNVRUPRQWKV$FFRUGLQJWRUHSRUWVWKHDWWDFNHUV
ZRXOGQRWKDYHEHHQDEOHWREUHDNLQLI0LFURVRIWVSDWFKHVKDGEHHQXSWRGDWH7KHVHULHVRIKLJKSURILOHFUHGLWFDUGWKHIWVLQ
-DQXDU\LQFOXGLQJWKH&'8QLYHUVHLQFLGHQWZHUHDOVRWKHUHVXOWRIXQLQVWDOOHGSDWFKHV$SDWFKLVVXHGHLJKWHHQPRQWKV
SUHYLRXVO\ZRXOGKDYHSURWHFWHGWKHVHFRPSDQLHV
:KDWVJRLQJRQKHUH",VQWDQ\RQHLQVWDOOLQJVHFXULW\SDWFKHVDQ\PRUH"'RHVQWDQ\RQHFDUH"
:KDWVJRLQJRQLVWKDWWKHUHDUHMXVWWRRGDPQPDQ\SDWFKHV,WVVLPSO\LPSRVVLEOHWRNHHSXS,JHWZHHNO\VXPPDULHVRIQHZ
YXOQHUDELOLWLHVDQGSDWFKHV2QHDOHUWVHUYLFHOLVWHGQHZSDWFKHVLQDYDULHW\RISURGXFWVLQWKHILUVWZHHNRI0DUFK
7KDWZDVDQDYHUDJHZHHN6RPHRIWKHOLVWLQJVDIIHFWHGP\QHWZRUNDQGPDQ\RIWKHPGLGQRW0LFURVRIW2XWORRNDORQHKDG
RYHUDGR]HQVHFXULW\SDWFKHVLQWKH\HDU,GRQWNQRZKRZWKHDYHUDJHXVHUFDQSRVVLEO\LQVWDOOWKHPDOOKHGQHYHUJHW
DQ\WKLQJHOVHGRQH
6HFXULW\EDVHGRQSDWFKHVLVLQKHUHQWO\IUDJLOH$Q\ODUJHQHWZRUNLVJRLQJWRKDYHKXQGUHGVRIYXOQHUDELOLWLHV,IWKHUHVD
YXOQHUDELOLW\LQ\RXUV\VWHP\RXFDQEHDWWDFNHGVXFFHVVIXOO\DQGWKHUHVQRWKLQJ\RXFDQGRDERXWLW(YHQLI\RXPDQDJHWR
LQVWDOOHYHU\SDWFK\RXNQRZDERXWZKDWDERXWWKHYXOQHUDELOLWLHVWKDWKDYHQWEHHQSDWFKHG\HW"7KDWVDPHDOHUWVHUYLFHOLVWHG
QHZYXOQHUDELOLWLHVIRUZKLFKWKHUHDUHQRSDWFKHV2UWKHYXOQHUDELOLWLHVGLVFRYHUHGEXWQRWUHSRUWHG\HW"2UWKHRQHVVWLOOXQGLVFRYHUHG"
*RRGVHFXULW\LVUHVLOLHQW,WVUHVLOLHQWWRXVHUHUURUV,WVUHVLOLHQWWRQHWZRUNFKDQJHV$QGLWVUHVLOLHQWWRDGPLQLVWUDWRUVQRW
LQVWDOOLQJHYHU\SDWFK0DQDJHG6HFXULW\0RQLWRULQJLVDQLPSRUWDQWSDUWRIWKDWUHVLOLHQFH0RQLWRULQJPDNHVDQHWZRUNOHVV
GHSHQGHQWRQNHHSLQJSDWFKHVXSWRGDWHLWVDSURFHVVWKDWSURYLGHVVHFXULW\HYHQLQWKHIDFHRIHYHUSUHVHQWYXOQHUDELOLWLHV
XQLQVWDOOHGSDWFKHVDQGLPSHUIHFWSURGXFWV
,QDSHUIHFWZRUOGV\VWHPVZRXOGUDUHO\QHHGVHFXULW\SDWFKHV7KHIHZSDWFKHVWKH\GLGQHHGZRXOGDXWRPDWLFDOO\GRZQORDG
EHHDV\WRLQVWDOODQGDOZD\VZRUN%XWZHGRQWOLYHLQDSHUIHFWZRUOG1HWZRUNDGPLQLVWUDWRUVDUHEXV\SHRSOHDQGQHWZRUNV
DUHFRQVWDQWO\FKDQJLQJ9LJLODQWPRQLWRULQJLVE\QRPHDQVDSDQDFHDEXWLWLVDPXFKPRUHUHDOLVWLFZD\RISURYLGLQJ
UHVLOLHQWVHFXULW\
8/8/2019 Schneier Monitoring Presentation
14/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
(IIHFWLYH0RQLWRULQJ%HFRPHV6HFXULW\V)HHGEDFN/RRS
0RQLWRUILUVW
+RZHOVHGR\RXNQRZZKDWNLQGRIVHFXULW\\RXKDYH"
+RZ\RXGHWHUPLQHLIDVHFXULW\FRXQWHUPHDVXUHLVHIIHFWLYH
+RZ\RXPHDVXUHWKHVXFFHVVRI\RXUVHFXULW\
:LWKRXWPRQLWRULQJ\RXUHMXVWJXHVVLQJ
0RQLWRU)LUVW
8/8/2019 Schneier Monitoring Presentation
15/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
1HWZRUN0RQLWRULQJ:LOO%H2XWVRXUFHG
6L[SHRSOHUHTXLUHGIRURQH[VHDW
(FRQRPLHVRIVFDOH
$JJUHJDWLRQRIH[SHUWLVH
6XSSRUWSURFHVVHV
/DUJHQHWZRUNYLVLELOLW\
2XWVRXUFHG0DQDJHG6HFXULW\0RQLWRULQJ
7KHNH\WRDVXFFHVVIXOGHWHFWLRQDQGUHVSRQVHV\VWHPLVYLJLODQFHDWWDFNVFDQKDSSHQDWDQ\WLPHRIWKHGD\DQGDQ\GD\RIWKH
\HDU:KLOHLWLVSRVVLEOHIRUFRPSDQLHVWREXLOGGHWHFWLRQDQGUHVSRQVHVHUYLFHVIRUWKHLURZQQHWZRUNVLWVUDUHO\FRVW
HIIHFWLYH6WDIILQJIRUVHFXULW\H[SHUWLVHKRXUVDGD\DQGGD\VD\HDUUHTXLUHVVL[IXOOWLPHHPSOR\HHVPRUHLI\RX
LQFOXGHVXSHUYLVRUVDQGEDFNXSSHUVRQQHOZLWKPRUHVSHFLDOL]HGVNLOOV(YHQLIDQRUJDQL]DWLRQFRXOGILQGWKHEXGJHWIRUDOORI
WKHVHSHRSOHLWZRXOGEHYHU\GLIILFXOWWRKLUHWKHPLQWRGD\VMREPDUNHW
5HWDLQLQJWKHPZRXOGEHHYHQKDUGHU6HFXULW\PRQLWRULQJLVLQKHUHQWO\EXUVW\VL[ZHHNVRIERUHGRPIROORZHGE\HLJKWKRXUV
RISDQLFWKHQVHYHQZHHNVRIERUHGRPIROORZHGE\VL[KRXUVRISDQLF$WWDFNVDJDLQVWDVLQJOHRUJDQL]DWLRQGRQWKDSSHQRIWHQHQRXJKWRNHHSDWHDPRIWKLVFDOLEHUHQJDJHGDQGLQWHUHVWHG
,QWKHUHDOZRUOGWKLVNLQGRIH[SHUWLVHLVDOZD\VRXWVRXUFHG,WVWKHRQO\FRVWHIIHFWLYHZD\WRVDWLVI\WKHUHTXLUHPHQWV,PD\
RQO\QHHGDGRFWRUWZLFHLQWKHFRPLQJ\HDUEXWZKHQ,QHHGRQH,PD\QHHGKLPLPPHGLDWHO\,PD\QHHGVSHFLDOLVWV2XWRID
KXQGUHGSRVVLEOHVSHFLDOWLHV,PD\QHHGWZRRIWKHPDQG,KDYHQRLGHDEHIRUHKDQGZKLFKRQHV,ZRXOGQHYHUFRQVLGHUKLULQJ
DWHDPRIGRFWRUVWRZDLWDURXQGXQWLO,KDSSHQWRJHWVLFN,RXWVRXUFHP\PHGLFDOQHHGVWRP\FOLQLFP\HPHUJHQF\URRPP\
KRVSLWDO6LPLODUO\DQHWZRUNQHHGVWRRXWVRXUFHLWVVHFXULW\PRQLWRULQJWRDQ060VHUYLFH
$VLGHIURPWKHDJJUHJDWLRQRIH[SHUWLVHDQ060VHUYLFHKDVRWKHUHFRQRPLHVRIVFDOH,WFDQPRUHHDVLO\KLUHDQGWUDLQLWV
SHUVRQQHOVLPSO\EHFDXVHLWQHHGVPRUHRIWKHP$QGLWFDQEXLOGDQLQIUDVWUXFWXUHWRVXSSRUWWKHP9LJLODQWPRQLWRULQJPHDQV
NHHSLQJXSWRGDWHRQQHZYXOQHUDELOLWLHVQHZKDFNHUWRROVQHZVHFXULW\SURGXFWVDQGQHZVRIWZDUHUHOHDVHV$Q060
VHUYLFHFDQVSUHDGWKHVHFRVWVDPRQJDOORILWVFXVWRPHUV
$Q060SURYLGHUDOVRKDVDPXFKEURDGHUYLHZRIWKH,QWHUQHW,WFDQOHDUQIURPDWWDFNVDJDLQVWRQHFXVWRPHUDQGXVHWKDW
NQRZOHGJHWRSURWHFWDOORILWVFXVWRPHUV$QGIURPLWVSRLQWRIYLHZDWWDFNVDUHIUHTXHQW7KHUHVDUHDVRQ\RXGRQWKDYH\RXURZQILUHGHSDUWPHQWHYHQLI\RXFDQDIIRUGRQH:KHQWKHILUHGHSDUWPHQWFRPHVWR\RXUKRXVH\RXZDQWLWWRKDYH
SUDFWLFHGRQWKHUHVWRIWKHQHLJKERUKRRG7RDQ060FRPSDQ\QHWZRUNDWWDFNVDUHHYHU\GD\RFFXUUHQFHVLWVH[SHUWVNQRZ
H[DFWO\KRZWRUHVSRQGWRDQ\JLYHQDWWDFNEHFDXVHLQDOOOLNHOLKRRGWKH\KDYHDOUHDG\VHHQWKHVDPHDWWDFNPDQ\WLPHVEHIRUH
,QWKHUHDOZRUOGVHFXULW\LVDOZD\VRXWVRXUFHG(YHU\EXLOGLQJKLUHVDQRWKHUFRPSDQ\WRSXWJXDUGVLQLWVOREE\(YHU\EDQN
KLUHVDQRWKHUFRPSDQ\WRGULYHLWVPRQH\DURXQGWRZQ6HFXULW\LVLPSRUWDQWFRPSOH[DQGGLVWDVWHIXOLWLVVPDUWHUWR
RXWVRXUFHWKDQWRGRLW\RXUVHOI
8/8/2019 Schneier Monitoring Presentation
16/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
0DQDJHG6HFXULW\0RQLWRULQJ
,'6
6HUYHU
5RXWHU
)LUHZDOO
6HQWU\ 3HULPHWHU
'HYLFH
,QWHUQHW
6HFXUH7XQQHO&RQQHFWLRQ
&KDQWLOO\9$
0RXQWDLQ9LHZ&$
1HWZRUNHG
6HFXUH2SHUDWLRQV&HQWHUV62&
+RZ'RHV&RXQWHUSDQH:RUN"
$W&RXQWHUSDQHZHEHOLHYHWKDWZKLOHDOOVHFXULW\SURGXFWVSURYLGHVRPHOHYHORISURWHFWLRQQRVHWRISURGXFWVLVLQIDOOLEOH
5HDOVHFXULW\LVDFKLHYHGRQO\ZKHQDOOQHWZRUNSURGXFWVVHFXULW\DQGRWKHUZLVHZRUNWRJHWKHU5HDOVHFXULW\LVDFRPELQDWLRQ
RISURWHFWLRQGHWHFWLRQDQGUHVSRQVH:HDXJPHQW\RXUQHWZRUNVSURWHFWLYHFRXQWHUPHDVXUHVWKURXJK0DQDJHG6HFXULW\
0RQLWRULQJ060
&RXQWHUSDQHVH[FHOOHQFHLVDFRPELQDWLRQRIRXUSHRSOHDQGRXUWHFKQRORJ\2XUVHFXULW\DQDO\VWVDUHVLQJXODUO\TXDOLILHGWR
HYDOXDWHVHFXULW\HYHQWVDQGUHVSRQGWRDWWDFNV$QGRXUWHFKQRORJ\SURYLGHVXQPDWFKHGGDWDDQDO\VLVDQGFRUUHODWLRQ
:RUNLQJWRJHWKHUWKHFRPELQDWLRQFDQWEHEHDW6HFXULW\$QDO\VWV7UDLQHGVHFXULW\DQDO\VWVDUHDWWKHFRUHRI&RXQWHUSDQHVVHUYLFH2XUDQDO\VWVKDYHDEUHDGWKRINQRZOHGJH
DQGVNLOOFXOWLYDWHGE\H[WHQVLYHWUDLQLQJLQQHWZRUNVHFXULW\DQGLQFLGHQWKDQGOLQJDQGLQYDOXDEOHH[SHULHQFHRQWKHMRE7KH\
UHVSRQGWRDQGOHDUQIURPVHFXULW\DWWDFNVHYHU\GD\$UPHGZLWKWKLVNQRZOHGJHDQGSHUVSHFWLYHDQGRXUVRSKLVWLFDWHG
DQDO\VLVDQGUHVSRQVHVRIWZDUHRXUDQDO\VWVDUHDEOHWRSURYLGHLQVWDQWUHVSRQVHH[SHUWDGYLFHDQGFRDFKLQJWRKHOS\RXUHSHO
WKHDWWDFNHUDQGVDIHJXDUG\RXUQHWZRUN
6HQWU\7KH6HQWU\LVDFXVWRPPRQLWRULQJGHYLFHGHVLJQHGDQGEXLOWE\&RXQWHUSDQHDQGLQVWDOOHGRQ\RXUQHWZRUN,WLV
FDSDEOHRISURFHVVLQJPLOOLRQVRIPHVVDJHVSHUGD\LQSXWIURPDOOWKHGHYLFHVRQ\RXUQHWZRUNLQFOXGLQJWKRVHWKDWVHH
LQWHUQDOWKUHDWV7KH6HQWU\ILOWHUVWKHGDWDLWFROOHFWVXVLQJDQDGDSWLYHDQGSURSULHWDU\VHWRIUXOHVFRUUHODWHVWKDWGDWDZLWK
GDWDIURPRWKHUGHYLFHVDQGSUHYLRXVGDWDDQGVHQGVWKHUHVXOWVYLDDQHQFU\SWHGWXQQHOWRRQHRIRXU6HFXUH2SHUDWLRQV
&HQWHUV
6RFUDWHV6RFUDWHVLVRXUSURSULHWDU\VRIWZDUHV\VWHPWKDWUHFHLYHVPHVVDJHVIURP6HQWULHVRQ\RXUQHWZRUNDERXWVXVSHFWHG
LQWUXVLRQV7KHVHPHVVDJHVDUHWXUQHGLQWRWLFNHWVZLWKLQ6RFUDWHVDQGDUHFRUUHODWHGZLWKLQIRUPDWLRQRQWKHUHDOZRUOGWKUHDWHQYLURQPHQWLQIRUPDWLRQDERXWVLPLODUWKUHDWVDWRWKHU&RXQWHUSDQHFXVWRPHUVLQIRUPDWLRQDERXW\RXUQHWZRUNVQRUPDO
RSHUDWLRQDQGUHVSRQVHDQGHVFDODWLRQLQIRUPDWLRQ6RFUDWHVFDWHJRUL]HVDQGSULRULWL]HVWKHWLFNHWVZHHGVRXWIDOVHSRVLWLYHV
VWRUHVWKHGDWDIRUIXWXUHDXGLWDQGSUHVHQWVLQIRUPDWLRQDERXWFULWLFDOWLFNHWVWRRXUDQDO\VWVDOORZLQJWKHPWRUHVSRQG
LQVWDQWO\
6HFXUH2SHUDWLRQV&HQWHU62&2XU62&VDUHWKHSK\VLFDOORFDWLRQVZKHUH&RXQWHUSDQHVDQDO\VWVZRUNFRQWLQXDOO\
PRQLWRULQJ\RXUQHWZRUNV7KH\DUHZKHUHWKH6RFUDWHVV\VWHPLVKRXVHGDQGZKHUHGDWDIURPWKH6HQWULHVLVUHFHLYHG7KH
62&VDUHSK\VLFDOO\KDUGHQHGIDFLOLWLHVSURWHFWHGE\DFFHVVWRNHQVELRPHWULFDFFHVVGHYLFHVDQGFRQVWDQWDXGLRDQGYLGHR
VXUYHLOODQFH7RSURWHFWWKHLQWHJULW\RI\RXUQHWZRUNWKH62&VDUHUHGXQGDQWHDFKFRQVWDQWO\PRQLWRUVWKHRWKHUDQGHDFKFDQ
VHYHUWKHRWKHUVFRQQHFWLYLW\DQGDVVXPHWKHRWKHUVZRUNORDGLQWKHHYHQWRIDSK\VLFDODWWDFNRUV\VWHPIDLOXUH
8/8/2019 Schneier Monitoring Presentation
17/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
)LQGLQJ6HFXULW\(YHQWV$PLGWKH1RLVH
'$7$)520$6,1*/(/$5*(&86720(5+2856
0,//,210(66$*(6&2//(&7('
$/(576)25:$5'('7228562&
7,&.(76)25285$1$/
8/8/2019 Schneier Monitoring Presentation
18/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
,QVLGHU$WWDFN$WWDFNDQG5HFRYHU\&KURQRORJ\
62&QRWLILHVFXVWRPHU
$QDO\VWEULHIVFRQWDFWVRQQDWXUHRIHYHQWDQGSURYLGHVWUDFNLQJGHWDLOVLQFOXGLQJVRXUFHDQGGHVWLQDWLRQ,3DGGUHVVHV
62&GHWHFWVWKUHHIDLOHG)73ORJLQVRQDLUOLQHQHWZRUN
6LQFHIDLOHG)73ORJLQVDUHW\SLFDOO\QRUPDODQDO\VWPDUNVWLFNHWVDVLQWHUHVWLQJ
6KDUSYROXPHLQFUHDVHLQUHODWHGWLFNHWV
$QDO\VWRQGXW\XSJUDGHVLQFLGHQWVHYHULW\WRVXVSLFLRXVFRQGXFWVIXUWKHU
DQDO\VLV
7LFNHWDQDO\VLVH[SRVHVPDOLFLRXVHPSOR\HHDFWLYLW\
62&FODVVLILHVLQFLGHQWDVDQ)73%UXWH)RUFH$WWDFNWRDFFHVVDLUOLQHV+5GDWDVHUYHU
$LUOLQHLGHQWLILHVURJXHHPSOR\HH
&XVWRPHUFDWFKHVHPSOR\HHUHGKDQGHGDQGWHUPLQDWHVKLVHPSOR\PHQW
-XO\
'D\RI$WWDFN
)ULGD\SP SP SP6KRUWO\
DIWHUZDUGV
7LPHVUHSRUWHGLQ('7
&RXQWHUSDQH&DVH6WXG\7KH5HJHQFH*URXS
7KH5HJHQFH*URXSDPDMRUKHDOWKFDUHLQVXUHULQWKH3DFLILF1RUWKZHVWLVDQDIILOLDWLRQRI%OXH&URVV%OXH6KLHOGLQVXUDQFH
FRPSDQLHVLQ:DVKLQJWRQ2UHJRQ8WDKDQG,GDKR$\HDUDQGDKDOIDJRWKHFRPSDQ\GHFLGHGWRPHUJHLWVLQGLYLGXDO,7
VHFXULW\RUJDQL]DWLRQVLQWRDVLQJOHGHSDUWPHQWDQGWRFRQVROLGDWHFRUSRUDWHLQIRUPDWLRQVHFXULW\XQGHURQHSHUVRQ'DYLG
0DF/HRG3K'&,663EHFDPH7KH5HJHQFH*URXSV&KLHI,QIRUPDWLRQ6HFXULW\2IILFHU
7KHILUVWWKLQJ,GLGLVORRNDWZKDWZHQHHGHGWRGRLQRUGHUWRKDYHDQHIIHFWLYHLQIRUPDWLRQVHFXULW\SURJUDP,GLYLGHGP\
WDVNVLQWRWZRFDWHJRULHVZKDWZHVKRXOGGRLQWHUQDOO\DQGZKDWZHVKRXOGRXWVRXUFH
0DQDJHG6HFXULW\0RQLWRULQJURVHWRWKHWRSDVVRPHWKLQJZHQHHGHGWRRXWVRXUFH,GLGQWKDYHWKHVWDIIWRPDQDPRQLWRULQJVWDWLRQ[,GLGQWKDYHVWDIIZKRNQHZHQRXJKDERXWWKHGLYHUVHSODWIRUPVWKURXJKRXW5HJHQFH*URXS,GLGQWKDYHSHRSOH
ZKRFRXOGFRUUHODWHDQGLGHQWLI\UHDOWKUHDWVDQGZHHGRXWDQRPDOLHVDQGVFDQV
5HJHQFH&KRRVHV&RXQWHUSDQH
7KH5HJHQFH*URXSZDVDWWUDFWHGWR&RXQWHUSDQHEHFDXVHWKH\ZHUHWKHRQO\FRPSDQ\ZKRRIIHUHGWKHNLQGRIFRPSUHKHQVLYH
PRQLWRULQJWKDWWKHGLYHUVHQHWZRUNRI7KH5HJHQFH*URXSUHTXLUHG/RWVRIFRPSDQLHVRIIHUHGWRPRQLWRURXUILUHZDOOVDQG
,'6VVDLG0DF/HRGEXWRQO\&RXQWHUSDQHZRXOGPRQLWRURXUHQWLUHQHWZRUN
0DF/HRGZDVDOVRLPSUHVVHGZLWK&RXQWHUSDQHVHQGRUVHPHQWIURP/OR\GVRI/RQGRQDQGWKHZD\WKHLQVXUHUYLHZHG
&RXQWHUSDQHVVHUYLFHRIIHULQJ,WZDVFOHDUWKDWWKHSUHGRPLQDQWSURYLGHULQWKLVVSDFHZDV&RXQWHUSDQH
,QVWDOODWLRQZDVDEUHH]HUHFDOOV0DF/HRG:HZHUHXSDQGUXQQLQJZLWKLQGD\V$QGLQVWDOODWLRQFRQWLQXHVWREHHDV\
:KHQHYHUZHKDYHPRUHGHYLFHVWKDWQHHGPRQLWRULQJZHMXVWSRLQWWKHLUDXGLWORJVDWWKH6HQWU\:HFDOO&RXQWHUSDQHDQG
WHOOWKHPDERXWWKHQHZGHYLFHVDQGZHUHPRQLWRUHG$QGLIZHIRUJHWWRFDOO&RXQWHUSDQHFDOOVXVDVVRRQDVWKH\VHHWKH
DQRPDORXVORJGDWD
,QIDFWVDLG0DF/HRGRQHZHHNHQGDFRUSRUDWH:HEVHUYHUZHQWGRZQ&RXQWHUSDQHQRWLFHGWKHSUREOHPDQGFDOOHGXV
EHIRUHZHHYHQNQHZDERXWLW
&RXQWHUSDQH3URYLGHV(QRUPRXV9DOXH
7R5HJHQFH&RXQWHUSDQHVYDOXHFDQEHFOHDUO\GHPRQVWUDWHGE\WKHQXPEHURIVHFXULW\LQFLGHQWVWKH\KDGWRGHDOZLWK
0DF/HRGFRPSLOHGVWDWLVWLFVWRSUHVHQWWRKLV%RDUGRI'LUHFWRUV,QWKHIRXUWKTXDUWHURI5HJHQFHV,'6VORJJHGDWRWDO
RILQFLGHQWV2IWKRVHZHUHKLJKOHYHODOHUWVVHULRXVDWWHPSWVWRFRPSURPLVHWKH5HJHQFH*URXSQHWZRUN
$QRWKHUZHUHPHGLXPOHYHODOHUWVDQGWKHRWKHUZHUHORZOHYHODOHUWV&RXQWHUSDQHVPRQLWRULQJDQGILOWHULQJ
RIHYHQWVUHGXFHGWKDWQXPEHUWRMXVWRYHULQFLGHQWVWRZKLFK5HJHQFHKDGWRUHVSRQG
&RQWLQXHGRQQH[WSDJH
8/8/2019 Schneier Monitoring Presentation
19/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
1LPGD:RUP$WWDFNDQG5HFRYHU\&KURQRORJ\
7LPHVUHSRUWHGLQ('7
'D\RI$WWDFN
3RVW$WWDFN5HFRYHU\
62&GHWHFWV)LUVWDWWDFN
6LPLODUWR&RGH5HG
6KDUSYROXPH
LQFUHDVHLQFXVWRPHUWLFNHWV
2IIGXW\DQDO\VWVFDOOHGLQWRKDQGOHDGGLWLRQDOZRUNORDG
$QDO\VLVUHYHDOVQHZWKUHDW
62&HVFDODWHVLVVXHWR(QJLQHHULQJUHVSRQVHWHDPH[DPLQHVFXVWRPHUGDWDLQWHOOLJHQFHVRXUFHV
DP DP SP SP SP
)LUVWHPDLODOHUWVHQWWRFXVWRPHUV
,QFOXGHVQHWZRUNSURWHFWLRQLQIRUPDWLRQVRIWZDUHSDWFKHVDQWLYLUXVXSGDWHOLQNV
)LUVW&(57
DGYLVRU\LVVXHGE\VHFXULW\JURXSV
)LQDO1LPGDDOHUWSRVWHGRQ:HEVLWH
KLWVLQILUVWIHZZHHNV
&'VSUHSDUHGDQGGHOLYHUHG
$LGFXVWRPHUVZLWKFRQQHFWLYLW\DQGHPDLOSUREOHPV
&XVWRPHUFRQIHUHQFHFDOOVKHOG
&RXQWHUSDQHSURYLGHV1LPGDRYHUYLHZDQGUHFRYHU\UHFRPPHQGDWLRQVILHOGVTXHVWLRQVIURPFXVWRPHUV
5HJHQFH&DVH6WXG\FRQW
0DF/HRGH[SODLQHG,GRQWKDYHWKHVWDIIWRKDQGOHDOHUWV,GRQWHYHQKDYHWKHVWDIIWRKDQGOHDOHUWV:KDW
&RXQWHUSDQHGRHVLVERLODOOWKDWQRLVHGRZQWRUHDOLQFLGHQWVWKDWP\WHDPQHHGVWRUHVSRQGWR%HFDXVH&RXQWHUSDQH
JLYHVXVRQO\WKHLQIRUPDWLRQZHQHHGZKHQZHQHHGLWZHFDQFRQFHQWUDWHRQWKHDWWDFNVWKDWPDWWHU7KHYDOXHRIWKDWNLQGRI
VHUYLFHLVHQRUPRXV
&RXQWHUSDQHVIDVWUHVSRQVHDOVRUHGXFHGWKHHIIHFWVRIWKRVHDWWDFNV7KH)%,UHFHQWO\UHSRUWHGWKDWURXJKO\RIDOO
,QWHUQHWDWWDFNVZHUHVXFFHVVIXOVDLG0DF/HRG6RLI\RXORRNDWRXULQFLGHQWVZHVKRXOGKDYHVHHQ
VXFFHVVIXODWWDFNVLQWKHIRXUWKTXDUWHU(YHQLI\RXXVHWKHQXPEHURIKLJKOHYHODOHUWVWKDWVKRXOGVWLOOWUDQVODWHWRVXFFHVVIXODWWDFNV%HFDXVH&RXQWHUSDQHZDVPRQLWRULQJDQGEHFDXVHWKH\ZHUHDEOHWRQRWLI\XVVRWKDWZHFRXOG
UHVSRQGWRDWWDFNVDVWKH\ZHUHKDSSHQLQJZHKDGRQO\RQHVHULRXVEUHDFKGXULQJWKDWWLPHSHULRG$QGWKDWZDV1LPGD
(YHQ1LPGDZKLFKGHYDVWDWHGVRPDQ\RWKHUFRPSDQLHVZDVVZLIWO\FRQWDLQHGZLWKLQ5HJHQFHVQHWZRUNEHFDXVHRI
&RXQWHUSDQH:HJRWRIIHDV\H[SODLQV0DF/HRG(YHQEHIRUHWKH1LPGDVWRUPFURVVHGRXUQHWZRUN&RXQWHUSDQHZDVRQ
WKHSKRQHZLWKXVH[SODLQLQJZKDWZDVKDSSHQLQJ:HVWDUWHGVKXWWLQJGRRUVDQGXSGDWLQJRXUV\VWHPVLPPHGLDWHO\DQGDVD
UHVXOW1LPGDFRPSURPLVHGRQO\RIGHVNWRSVDQGRIVHUYHUV,FUHGLW&RXQWHUSDQH
&RXQWHUSDQHV*OREDO9LHZ
5HJHQFHHQWHUHGLQWRDWZR\HDUPRQLWRULQJFRQWUDFWZLWK&RXQWHUSDQHZLWKWKHH[SHFWDWLRQWKDWWKH\ZRXOGXVHWKRVHWZR
\HDUVWRGHYHORSWKHLURZQLQWHUQDOPRQLWRULQJFDSDELOLWLHV7KHQWKH\ZRXOGEULQJWKHIXQFWLRQEDFNLQKRXVH%XWWKHILUVW
\HDUSURYHGWKDW5HJHQFHFRXOGQRWUHSOLFDWH&RXQWHUSDQHVVHUYLFHDQGWKDWFRQWLQXHGRXWVRXUFLQJRI0DQDJHG6HFXULW\
0RQLWRULQJWR&RXQWHUSDQHUHPDLQVWKHILQDQFLDOO\SUXGHQWDSSURDFK
0DF/HRGVDLG:KHQ,ORRNEDFNDW&RGH5HG&RGH5HG,,DQG1LPGDZKDWVWDQGVRXWLQP\PLQGLV&RXQWHUSDQHVDELOLW\WRUHVSRQGEHIRUHZHZHUHDWWDFNHG7KH\UHJXODUO\FDOOXVDQGWHOOXVKRZZHVKRXOGUHVSRQGEDVHGRQWKHLUH[SHULHQFHZLWK
FXVWRPHUVLQHDUOLHUWLPH]RQHV
:HFRXOGQRWSRVVLEO\UHSOLFDWH&RXQWHUSDQHVVHUYLFHRXUVHOYHVFRQWLQXHG0DF/HRG:HFRXOGQWVWDIILW$QGHYHQLIZH
FRXOGZHZRXOGQRWJHWWKHEHQHILWVRI&RXQWHUSDQHVJOREDOYLHZ7KH\ZDWFKVHFXULW\LQFLGHQWVWKURXJKRXWWKHJOREHDQGZH
EHQHILWIURPWKDW
7RGD\ZHFDQWGRRXUMREVHIIHFWLYHO\ZLWKRXW&RXQWHUSDQHVDLG0DF/HRG
0RUHFDVHVWXGLHVFDQEHIRXQGDW
KWWSZZZFRXQWHUSDQHFRPH[SHULHQFHVKWPO
8/8/2019 Schneier Monitoring Presentation
20/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
9LUXV,QIHFWLRQ$WWDFNDQG5HVSRQVH&KURQRORJ\
7LPHVUHSRUWHGLQ('7
$WWDFN
5HVSRQVH
62&GHWHFWVVXVSLFLRXVPDLODWWDFKPHQW
$QDO\VWUHYLHZVWLFNHWLQIRUPDWLRQDQGILQGVWKHDFWLYLW\WREHLQERXQGDQGGHVWLQHGIRUWKHPDLOVHUYHU
DGGLWLRQDODOHUWVUHFHLYHGDQGDSSHQGHGWRRSHQWLFNHW
6XVSLFLRXVDWWDFKPHQWIRXQGWRH[LWFXVWRPHUQHWZRUNDQGUHHQWHULQDPDWWHURIVHFRQGV
DP DP DP DP
&RQWHQWRIDOHUWH[DPLQHGE\$QDO\VWV
$WWDFKPHQWLGHQWLILHGDVIXQQ\YEV/RYH%XJYLUXVILUVWGHWHFWHG0D\
2XWRI%DQG&RUUHODWLRQSHUIRUPHG
2SHQVRXUFHVTXHULHGIRULQIRUPDWLRQRQQHZYLUXVHVQRQHOLQNHGWRIXQQ\YEV
&XVWRPHUFDOOVLQWR62&WRGLVFXVVDOHUWV
&XVWRPHUVWDWHV7KLVRQHPXVWKDYHJRWWHQSDVWRXUYLUXVGHWHFWLRQVRIWZDUH
1HZYLUXVIRXQGPDOGDO
'LVFRXQWHGDVFXUUHQWWKUHDWEHFDXVHLWXVHVH[HDQGQRWYEVDWWDFKPHQWV
DP DP
&XVWRPHUFRQWDFWLQVWUXFWLRQVGRQRWPDQGDWHSKRQHFDOOIRUWKLVHYHQW
DP
&RXQWHUSDQH&DVH6WXG\:RPEOH&DUO\OH
:RPEOH&DUO\OH6DQGULGJHDQG5LFH3//&LVDDWWRUQH\ODZILUPZLWKQLQHRIILFHVLQWKH86$FFRUGLQJWR&,26HDQ
6FRWWVHFXULW\LVQRWRQO\LPSRUWDQWIRUWKHILUPVODZ\HUVDQGFOLHQWVEXWLVHVVHQWLDOIRUWKHIXWXUHVXFFHVVRIWKHILUP
$VDODZILUPWKDWVHUYHVKLJKWHFKFOLHQWVDQGSURPLQHQWEXVLQHVVHVNHHSLQJXSWRGDWHZLWKWHFKQRORJ\SDUWLFXODUO\VHFXULW\
LVQRWDQRSWLRQLWVDQHFHVVLW\:RPEOH&DUO\OHVWULYHVWRKRQRUFOLHQWSULYDF\WKURXJKDVHFXUHQHWZRUN7KLVLVRQHRI
:RPEOH&DUO\OHVFRPSHWLWLYHDGYDQWDJHV
0RQLWRULQJDVD6ROXWLRQ
:RPEOH&DUO\OHUHQHZHGUHVHDUFKLQWRVHFXULW\SURGXFWVODVW\HDU,QDGGLWLRQWRLQWHQVLI\LQJWKHVRSKLVWLFDWLRQRIWKHILUPV
VHFXULW\:RPEOH&DUO\OHZDQWHGDVHFXULW\DXGLW6HYHUDOVHFXULWLHVILUPVUHFRPPHQGHG:RPEOH&DUO\OHFRQWDFW&RXQWHUSDQH
DERXWVHFXULW\PRQLWRULQJDVDZD\WRSURYLGHORQJWHUPEXVLQHVVVHFXULW\
%\WKHWLPHZHFDOOHG&RXQWHUSDQHLQIRUDPHHWLQJZHZHUHZHOOHGXFDWHGDERXWWKHLVVXHVDQGZHUHUHDG\WRGREXVLQHVV
VD\V6FRWW:HUHDOL]HGWKDWWKHVHJX\VNQHZZKDWWKH\UHWDONLQJDERXWPRUHVRWKDQVRPHRIWKHRWKHUVHFXULW\YHQGRUVZH
WDONHGZLWK6FRWWDGGHGWKDWKHDSSUHFLDWHG&RXQWHUSDQHVVHFXULW\H[SHUWLVHKRQHVW\DQGFDQGRU
:RPEOH&KRRVHV&RXQWHUSDQH
:HPHWZLWK9LJLOLQ[5LS7HFK,666\PDQWHF*XDUGHQWDQGDVHYHUDORWKHUFRPSDQLHV6FRWWVD\V&RXQWHUSDQHPHWRXU
QHHGVEHVW7KH\RIIHUHGFRPSHWLWLYHSULFLQJDQGZHUHYHQGRUQHXWUDO)RU:RPEOH&DUO\OHDYHQGRUQHXWUDOVROXWLRQZDV
FULWLFDO
7DONLQJWRWKHRWKHUYHQGRUVJDYHXVDJRRGUHDOLW\FKHFNDQGVWDUWLQJSRLQW6FRWWDGGHG%XW&RXQWHUSDQHZDVWKHFRPSDQ\
ZHFKRVHWRGREXVLQHVVZLWK:RPEOH&DUO\OHZDVLPSUHVVHGQRWRQO\ZLWK&RXQWHUSDQHVWHFKQLFDODELOLW\DQGLWVPRQLWRULQJVHUYLFHEXWE\WKHIDFWWKDWWKH\GLGQRWDOVRHQJDJHLQFRQVXOWLQJRUVHOOKDUGZDUH
%HFDXVH&RXQWHUSDQHRQO\GRHVPRQLWRULQJZHIHOWFRQILGHQWWKDWWKH\KDGRXUEHVWLQWHUHVWVLQPLQG6FRWWVD\V7KH\
GLGQWWU\WRVHOOXVDQ\KDUGZDUHVRIWZDUHRUFRQVXOWLQJVHUYLFHV2WKHUVZDQWHGWRPDNHPRQH\E\VHOOLQJXVDGGLWLRQDO
KDUGZDUHDQGVRIWZDUH
&RXQWHUSDQH7KH)LUVW0RQWK
,QVWDOOLQJWKH&RXQWHUSDQHVHUYLFHZDVSDLQOHVV6FRWWUHFDOOV7KHLQVWDOODWLRQZDVGRQHLQILYHKRXUVDWPRVW,ZDVVKRFNHG
WKDWVRPHWKLQJOLNHWKDWKDSSHQHGVRTXLFNO\ZLWKQRLOODIIHFWRQP\QHWZRUN&RXQWHUSDQHVWDUWHGPRQLWRULQJ:RPEOH
&DUO\OHLPPHGLDWHO\
&RQWLQXHGRQQH[WSDJH
8/8/2019 Schneier Monitoring Presentation
21/32
8/8/2019 Schneier Monitoring Presentation
22/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
$WWDFN3UREH$WWDFNDQG5HFRYHU\&KURQRORJ\
62&GHWHFWVDVFDQIURP&KLQD
6FDQDJDLQVWSRUWWKHDWWDFNHULVORRNLQJIRUYXOQHUDEOH66+GDHPRQV
6HQWU\SURFHVVHVDOHUWVUHODWHGWRWKLVVFDQ
&XVWRPHUWHOHSKRQHV62&
$QDO\VWSURYLGHVFXVWRPHUZLWKUHFHQWLQIRUPDWLRQDERXW66+YXOQHUDELOLWLHV
&XVWRPHUSURDFWLYHO\VFDQVKLVQHWZRUNIRUDQGSDWFKHVYXOQHUDEOHGDHPRQV
$WWDFN
DP DP $IHZKRXUVDIWHUZDUGV
7LPHVUHSRUWHGLQ('7
DP DP
$QDO\VWVHQGVHPDLOWRFXVWRPHU
$OWKRXJKFXVWRPHUUHTXHVWHGWKDW&RXQWHUSDQHQRWFRQWDFWWKHPDERXWVFDQVWKHDQDO\VWIHOWWKDWWKLVVFDQZDVVHULRXVHQRXJKWRZDUUDQWHVFDODWLRQ
&DVH6WXG\&RULR
&RULRLVDOHDGLQJHQWHUSULVHDSSOLFDWLRQVHUYLFHSURYLGHURIIHULQJZRUOGFODVVDSSOLFDWLRQPDQDJHPHQWVHUYLFHVWRODUJHJOREDO
HQWHUSULVHV&RULRWDNHVHQGWRHQGUHVSRQVLELOLW\IRUFXVWRPHUVPLVVLRQFULWLFDOHQWHUSULVHDSSOLFDWLRQVDQGGHOLYHUVVXSHULRU
VSHHGUHOLDELOLW\YLVLELOLW\FRQWURODQGHFRQRPLFV&RULR659&(
&RULRVSKLORVRSK\LVVLPSOH7KH\DUHIXOO\DFFRXQWDEOHWRWKHLUFXVWRPHUVIRUDQHQGWRHQGVROXWLRQ7KHFXVWRPHUV
H[SHULHQFHPXVWEHVHDPOHVV7RWKDWHQG&RULRRQO\SDUWQHUVZLWKWKHLQGXVWU\OHDGHUVLQDUHDVVXFKDVFRPSXWHUVQHWZRUNV
VHFXULW\DQGHQWHUSULVHDSSOLFDWLRQV
&RULRVWUXVWPRGHOPXVWH[WHQGWRLWVFXVWRPHUVLQHYHU\DVSHFWRILWVEXVLQHVVDQGQRWMXVWLQVHFXULW\'LVFRYHULQJSUREOHPVLVDEDVHUHTXLUHPHQWEXWSURDFWLYHPRQLWRULQJHQDEOHV&RULRWRGHOLYHUVXSHULRUVHUYLFH7KLVKROLVWLFDSSURDFKWRVHFXULW\
SHUPHDWHVHYHU\DVSHFWRI&RULRVEXVLQHVV
7KH6HFXULW\&KDOOHQJH
&RULRKDVWKHDSSOLFDWLRQH[SHUWLVHWRLQWHJUDWHGHSOR\DQGPDQDJHEHVWLQFODVVHQWHUSULVHDSSOLFDWLRQVWRHQDEOHPLVVLRQ
FULWLFDOEXVLQHVVSURFHVVHV7KH\QHHGDVHFXULW\VROXWLRQWKDWFDQVFDOHWRVXSSRUWYHU\ODUJHHQWHUSULVHVZLWKWKHIOH[LELOLW\
OHYHOVRIVXSSRUWDQGJOREDOUHDFKWKDWWKH\UHTXLUH6WD\LQJDEUHDVWRIVHFXULW\FKDQJHVLVERWKDFRPSOH[DQGFKDOOHQJLQJ
WDVNHVSHFLDOO\ZKHQWKHFRPSDQ\IRFXVLVRQYDOXHDGGHGVHUYLFHVIRULWVFXVWRPHUV5HGXFLQJYXOQHUDELOLWLHVLVDNH\DVSHFW
RI&RULRVEXVLQHVVDQGWKH\WXUQHGWR&RXQWHUSDQHVVHFXULW\H[SHUWVIRUDVVLVWDQFH
0RVWVHFXULW\LPSOHPHQWDWLRQVLQODUJHFRUSRUDWLRQVDUHOLWWOHPRUHWKDQKXJHILUHZDOOV\VWHPVFXPEHUVRPHSRURXVDQGVWDWLF
&RULRVEXVLQHVVUHTXLUHVDPXFKPRUHG\QDPLFPRGHOWKH\QHHGVHFXULW\WREHIOH[LEOHDQGDGDSWDEOH&RULRVFXVWRPHUVPXVW
WUXVW&RULRDQGWKH\DUHYHU\FRQFHUQHGDERXWVHFXUHFRQQHFWLRQVEHWZHHQWKHPDQG&RULRDVZHOODVEHWZHHQ&RULRDQGLWV
SDUWQHUV
&RULRV&KRLFHV
&RULR6HFXULW\GHYHORSHGDPDWUL[RIVHOHFWLRQFULWHULDGHOLQHDWLQJWKHGLIIHUHQWVHUYLFHVDQGVHFXULW\IHDWXUHVDYDLODEOHIURP
HDFKYHQGRU,'6ILUHZDOOV931VDFFHVVFRQWUROXVHUDXWKHQWLFDWLRQYXOQHUDELOLW\DVVHVVPHQWDQGFRPSUHKHQVLYH
HQWHUSULVHQHWZRUNPRQLWRULQJ7KLVPDWUL[LVVWLOOXVHGWRGD\LQWKHVHOHFWLRQRIFXUUHQWDQGIXWXUHYHQGRUVDVSDUWRI&RULRV
PXOWLOD\HUHGVHFXULW\VROXWLRQ
&RQWLQXHGRQQH[WSDJH
8/8/2019 Schneier Monitoring Presentation
23/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
,QWHUQDO7URMDQ'26$WWDFN$WWDFNDQG5HFRYHU\&KURQRORJ\
7LPHVUHSRUWHGLQ('7
$WWDFN
FRQW
62&GHWHFWV
GHQLDORIVHUYLFHDWWDFNDJDLQVWFXVWRPHU
$WWDFNRULJLQDWHGIURPLQVLGHFXVWRPHUQHWZRUN
&RXQWHUSDQHDQDO\VW
LQYHVWLJDWHVSUREOHP$WWDFNUHODWHGWR0RUSKHXVSHHUWRSHHUVRIWZDUH,3DGGUHVVHVRXWVLGHFXVWRPHUQHWZRUNDUHDOVRWDUJHWV
)ULGD\SP SP SP
&XVWRPHUGLVFRQQHFWVIURP,QWHUQHW
&XVWRPHUPDNHVDEXVLQHVVGHFLVLRQEDVHGRQKLVRZQQHHGV
5HPRWHVLWHFDOOVWRVD\WKDWWKH\KDYHGLVFRQQHFWHGWKHXQDXWKRUL]HGVHUYHU
SP
$QDO\VWFRQWDFWV
FXVWRPHUE\SKRQH
&XVWRPHUDQGDQDO\VWFRQIHUWKUHHWLPHV
8QDXWKRUL]HG0RUSKHXVVHUYHUGLVFRYHUHGRQFXVWRPHUQHWZRUNDFWLQJDV'26]RPELH
6HUYHULVDWUHPRWHDQGLQDFFHVVLEOHVLWHVRFXVWRPHUGHFLGHVWRSXOOKLV,QWHUQHWFRQQHFWLRQXQWLOPRUQLQJ6DWXUGD\
SP SP
&XVWRPHUUHVWRUHV,QWHUQHWFRQQHFWLRQ
&RULR&DVH6WXG\FRQW
:K\&RXQWHUSDQH
&RULRFKRVH&RXQWHUSDQHIRUVHYHUDOUHDVRQV)LUVWDQGIRUHPRVW&RXQWHUSDQHGRPLQDWHVWKHPRQLWRULQJILHOG&RULRFRXOG
VWDWHWRLWVFXVWRPHUVWKDW&RXQWHUSDQHZDVPRQLWRULQJ&RULRVDQGE\H[WHQVLRQLWVFXVWRPHUVVHFXULW\$GGLWLRQDOO\WKHWZR
FRPSDQLHVKDYHVLPLODUVHFXULW\SKLORVRSKLHVPDQDJHULVNLQVWHDGRIHQGOHVVO\VHDUFKLQJIRUWKHULJKWWHFKQRORJLHVDQG
SURGXFWVWRVROYHWKHVHFXULW\SUREOHP%RWKFRPSDQLHVEHOLHYHWKDWWKHUHLVQREXOOHWSURRIVHFXULW\VROXWLRQDQGWKDWDULVN
PDQDJHPHQWDQDO\VLVLVWKHRQO\ZD\WRGHWHUPLQHWKHULJKWOHYHORIVHFXULW\%RWKFRPSDQLHVDOVRXQGHUVWDQGWKDWSHRSOHDUHD
FULWLFDOFRPSRQHQWRIJRRGHQWHUSULVHVHFXULW\&RXQWHUSDQHVH[SHUWVHFXULW\DQDO\VWVZHUHDSHUIHFWPDWFKIRU&RULRVRZQVHFXULW\VWDII
5HVXOWV
&RXQWHUSDQHV0DQDJHG6HFXULW\0RQLWRULQJLVDNH\FRPSRQHQWRIWKHYDOXHDGGHGVHUYLFHRIIHUHGE\&RULRWRWKHLU$63
FXVWRPHUV&RPELQLQJ&RXQWHUSDQHVDOZD\VRQZDWFKUDGDUZLWK&RULRVLQKRXVHVHFXULW\H[SHUWLVHKDVSXW&RULRLQDQ
H[FHOOHQWVHFXULW\SRVLWLRQLWJLYHV&RULRWKHFDSDELOLW\WREHPRUHSURDFWLYHLQLWVVHFXULW\UDWKHUWKDQVLPSO\UHDFWLYH$QG
WKLVUHGXFHVWKHULVNERWKWR&RULRDQGWRLWVFXVWRPHUVRIGRLQJEXVLQHVVHOHFWURQLFDOO\,WDXWRPDWHVWKHODERULQWHQVLYHDQG
WLPHFRQVXPLQJORJFROOHFWLRQDQGDQDO\VLVSURFHVVLQDGGLWLRQWRFURVVFRUUHODWLQJDOOWKHVHQVRUORJLQIRUPDWLRQWRSURYLGH
WLPHO\LQWHOOLJHQFHRIZKDWLVKDSSHQLQJDFURVVWKH&RULRHQWHUSULVH
:RUNLQJZLWK&RXQWHUSDQHPHDQVWKDW&RULRLVQRWORFNHGLQWRDVLQJOHYHQGRUVROXWLRQ&RULRKDVWKHDELOLW\WRFKRRVHEHVWRI
EUHHGVHFXULW\SURGXFWVFRQILGHQWWKDWWKH\FDQEHPRQLWRUHG
&RULRV([SHULHQFH
&RULRKDVEHHQDXVHURI&RXQWHUSDQHV060VHUYLFHIURPWKHYHU\EHJLQQLQJ7KHLUFRPELQHGFROODERUDWLRQDQG
UHVSRQVLYHQHVVKDV\LHOGHGDVWURQJSDUWQHUVKLSDQGWKURXJK&RXQWHUSDQHVFDSDELOLWLHVRQHRIWKHPRVWLQQRYDWLYHEXVLQHVV
PRGHOVLQWKH$63LQGXVWU\
0RUHFDVHVWXGLHVFDQEHIRXQGDW
KWWSZZZFRXQWHUSDQHFRPH[SHULHQFHVKWPO
8/8/2019 Schneier Monitoring Presentation
24/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
&RPSUHKHQVLYH1HWZRUN0RQLWRULQJ
0RUHWKDQILUHZDOOV
DQG,'6PRQLWRULQJ 7UXHSURGXFW
LQGHSHQGHQFH
&RXQWHUSDQHPRQLWRUVHYHU\WKLQJURXWHUVVHUYHUV26VVRIWZDUHPDLQIUDPHV
%URDGQHWZRUNYLVLELOLW\PHDQVJUHDWHUVHFXULW\
&RPSUHKHQVLYHQHWZRUNPRQLWRULQJPHDQV
GHIHQVHLQGHSWK
:H0RQLWRU(YHU\WKLQJ
1RVHFXULW\SURGXFWLVSHUIHFW7KH\DOODGGYDOXHLQVRPHDUHDVDQGKDYHGHILFLHQFLHVLQRWKHUV7KHRQO\ZD\WRSURYLGHJRRG
QHWZRUNVHFXULW\LVWRPRQLWRUDZLGHYDULHW\RISURGXFWV7KLVJLYHVGHIHQVHLQGHSWKDQGLVWKHEHVWZD\WRSURYLGHUHVLOLHQW
VHFXULW\
7UDGLWLRQDOO\FRUSRUDWHVHFXULW\WHDPVWHQGWRIRFXVWKHPDMRULW\RIWKHLUHIIRUWVDQGEXGJHWVRQSHULPHWHUVHFXULW\V\VWHPV
ILUHZDOOVQHWZRUNEDVHGLQWUXVLRQGHWHFWLRQV\VWHPVDQGYLUWXDOSULYDWHQHWZRUNLQJVHUYHUV+RZHYHUE\WKHPVHOYHV
SHULPHWHUV\VWHPVSUHVHQWDYHU\VNHZHGLPDJHRIPDOLFLRXVRUGDPDJLQJDFWLYLW\RQDFRUSRUDWHQHWZRUN)LUHZDOOVDQG931V
W\SLFDOO\RQO\UHFRUGLQIRUPDWLRQDERXWWKHVXFFHVVRUIDLOXUHRIDSDUWLFXODUQHWZRUNFRQQHFWLRQDWWHPSW:LWKRXWDORWRIDGGLWLRQDOFRQWH[WDQGSURFHVVLQJLQFOXGLQJFRPSDULVRQWRWKHFRPSDQ\VDSSURSULDWHXVHSROLF\ORQJWHUPWUHQGDQDO\VLV
DQGWKUHVKROGLQJQHWZRUNFRQQHFWLRQVDUHQWYHU\LQWHUHVWLQJ,QWUXVLRQGHWHFWLRQV\VWHPVDUHWXQHGWRGHWHFWFRQWHQWEDVHG
DWWDFNVDQGDYDULHW\RIRWKHUPDOLFLRXVDFWLYLW\EXWWKH\UHUHDOO\RQO\DQHDUO\ZDUQLQJV\VWHP2QFHWKH,'6DODUPKDVJRQH
RIIVRPHRQHKDVWRLQYHVWLJDWHWKHWDUJHWHGPDFKLQHDQGGHFLGHZKHWKHURUQRWWKHDWWDFNZDVVXFFHVVIXO$QGSHULPHWHU
GHYLFHVDUHXVXDOO\ORFDWHGRQWKHRXWHUHGJHVRIWKHQHWZRUNZLWKOLPLWHGYLVLELOLW\WRDFWLYLW\DQGV\VWHPVZLWKLQWKHKHDUWRI
WKHFRUSRUDWHLQIUDVWUXFWXUH6RWKH\OOIUHTXHQWO\RQO\GHWHFWWKHILUVWZDYHRIDQDWWDFNDQGQRWWKHVXEVHTXHQWIUHTXHQWO\
QRUPDOORRNLQJDFWLYLW\XQGHUWDNHQE\DQDWWDFNHURQFHWKH\UHLQ
,WVOLNHWU\LQJWREXLOGDS\UDPLGE\VWDUWLQJDWWKHWRSUDWKHUWKDQWKHERWWRP1RPDWWHUKRZKDUG\RXWU\\RXUHGRRPHGWR
IDLOXUH
:KDWVHSDUDWHV&RXQWHUSDQHIURPLWVFRPSHWLWRUVLVRXUDELOLW\WRPRQLWRUGHYLFHVWKURXJKRXWWKHQHWZRUNQRWMXVWDWWKH
SHULPHWHU%\FRPELQLQJ,'6DQGILUHZDOOORJVZLWKORJVIURPWKHURXWHUVVHUYHUVDQGDSSOLFDWLRQVLQRXUFXVWRPHUV
HQYLURQPHQWVZHKDYHWKHXQLTXHDELOLW\WRXQGHUVWDQGWKHQHWZRUNDQGWRILQGDWWDFNVWKDWIO\EHORZWKHUDGDURILQGLYLGXDOSURGXFWV6RPHDWWDFNVRQO\DIIHFWWKHWDUJHWFRPSXWHUDQGDUHLQYLVLEOHWRHYHU\WKLQJHOVHRQWKHQHWZRUN:KDWDERXWDWWDFNV
WKDWRULJLQDWHLQVLGHWKHILUHZDOOVSHULPHWHU":KDWDERXWDWWDFNVWKDWWKH,'6FDQWGLIIHUHQWLDWHIURPQRUPDOWUDIILF":KDW
DERXWDWWDFNVWKDWWDUJHWYXOQHUDELOLWLHVLQWKHVHSURGXFWVRUVLPSO\GRQWUHJLVWHULQHLWKHURIWKHVHSURGXFWVDXGLWORJV"7URMDQV
DUHRIWHQLQWURGXFHGLQWRDQHWZRUNE\KXPDQHUURUDQGPLJKWQRWUHJLVWHUDVPDOLFLRXVFRGH%\PRQLWRULQJWKHHQWLUH
QHWZRUN&RXQWHUSDQHFDQGHWHFWWKHVHDWWDFNV%\PRQLWRULQJWKHHQWLUHQHWZRUN&RXQWHUSDQHFDQVHSDUDWHDUHDODWWDFNIURPD
IDOVHDODUPXQGHUVWDQGZKDWULVNVWKHDWWDFNSRVHVDQGUHFRPPHQGDVXLWDEOHUHVSRQVH:HFDQHDVLO\GHFLGHZKHWKHUDEXIIHU
RYHUIORZDWWDFNDJDLQVWD81,;SULQWVHUYHUZDVVXFFHVVIXO:HFDQGLVPLVV,'6DODUPVIRUDWWDFNVRQ0LFURVRIWV,QWHUQHW
,QIRUPDWLRQ6HUYHUEHFDXVHZHNQRZ\RXUHUXQQLQJ$SDFKH:HFDQWHOO\RXZKDWWKHDWWDFNHUGLGRQFHKHJRWLQDQGKHOS
\RXUHSDLUWKHGDPDJH:HYHEXLOWRXUPRQLWRULQJVHUYLFHWRFROOHFWDOOWKHGDWD\RXUQHWZRUNJHQHUDWHVQRWMXVWWKHGDWDRQWKH
WRSRIWKHS\UDPLG7KLVLVZK\&RXQWHUSDQHV060VHUYLFHLVXQPDWFKHGLQWKHLQGXVWU\
8/8/2019 Schneier Monitoring Presentation
25/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
5HDOLWLHVRI2XWVRXUFLQJ
0LQXVHV
/HVVFXVWRPL]DEOH /HVVSHUVRQDO
,PSHUIHFW
3OXVVHV
08&+FKHDSHUWKDQWKHDOWHUQDWLYHV
2IWHQWKHUH$5(QRDOWHUQDWLYHV
:HRXWVRXUFHWRVKDUHUHVRXUFHVH[SHUWLVHVXSSRUWSURFHVVHVHWF
2XWVRXUFLQJ6HFXULW\
,IWKHGHFLVLRQWRRXWVRXUFHQHWZRUNVHFXULW\LVDGLIILFXOWRQHWKHGHFLVLRQVRIZKDWWRRXWVRXUFHDQGZKHUHVHHPLPSRVVLEOH
7KHVWDNHVDUHKLJK2QWKHRQHKDQGWKHSURPLVHVRIRXWVRXUFHGVHFXULW\VHHPVRDWWUDFWLYHWKHSRWHQWLDOWRVLJQLILFDQWO\
LQFUHDVH\RXUQHWZRUNVVHFXULW\ZLWKRXWKLULQJKDOIDGR]HQSHRSOHRUVSHQGLQJDIRUWXQHLVLPSRVVLEOHWRLJQRUH2QWKHRWKHU
KDQGWKHUHDUHWKHVWRULHVRIPDQDJHGVHFXULW\FRPSDQLHVJRLQJRXWRIEXVLQHVVDQGEDGH[SHULHQFHVZLWKRXWVRXUFLQJRWKHU
DUHDVRI,7,WVQRZRQGHUWKDWSDUDO\VLVLVWKHPRVWFRPPRQUHDFWLRQWRWKHZKROHWKLQJ
,EHOLHYHWKDWQHWZRUNVHFXULW\ZLOOFRQWLQXHWREHRXWVRXUFHGEHFDXVHWKHUHVQRRWKHUZD\WRGHDOZLWKWKHVKRUWDJHRIVNLOOHG
FRPSXWHUVHFXULW\H[SHUWVWKHLQFUHDVLQJUHTXLUHPHQWVIRUEXVLQHVVHVWRRSHQWKHLUQHWZRUNVDQGWKHHYHUPRUHGDQJHURXVWKUHDWHQYLURQPHQW)RUWKH,QWHUQHWWRVXFFHHGDVDEXVLQHVVWRROVHFXULW\KDVWRVFDOH2XWVRXUFLQJLVKRZLWZLOOGRWKDW
2YHUWKHSDVWIHZ\HDUVZHYHVHHQPDQ\GLIIHUHQWFRPSDQLHVRIIHULQJGLIIHUHQWFDSDELOLWLHVXQGHUWKHJHQHUDOFDWHJRU\RI
PDQDJHGVHFXULW\VHUYLFHV7KHILHOGLVVRFRQIXVLQJWKDWHYHQWKHLQGXVWU\DQDO\VWVFDQWDJUHHRQKRZWRFDWHJRUL]HWKHP
7KLVFRPSDQ\RIIHUVWRPDQDJH\RXUILUHZDOO7KDWFRPSDQ\RIIHUVSHULRGLFYXOQHUDELOLW\VFDQV$QRWKHURIIHUVWRPDQDJH
\RXUVHFXULW\SROLF\RUPRQLWRU\RXUQHWZRUNRULQVWDOO\RXU,'6RUKRVW\RXUFRPSXWHUV6RPHRIWKHVHEXVLQHVVHVPDNH
VHQVHDQGVRPHRIWKHPGRQW6RPHZLOOVXUYLYHDQGVRPHRIWKHPZRQW.QRZLQJZKLFKLVZKLFKLVWKHILUVWVWHS
:KDWWR2XWVRXUFH
8/8/2019 Schneier Monitoring Presentation
26/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
2XWVRXUFLQJ(PHUJHQF\([SHUWLVH1RW0DQDJHPHQW
:KDWZHOLNHDERXWPHGLFDORXWVRXUFLQJ
$PEXODQFHVUDFLQJWRRXUVLGH
(PHUJHQF\URRPGRFWRUVVDYLQJRXUOLYHV
:KDWZHKDWHDERXWPHGLFDORXWVRXUFLQJ
7KH+02GHQ\LQJXVDSDUWLFXODUSURFHGXUH
7KHVDPHUXOHZRUNVIRU,QWHUQHWVHFXULW\RXWVRXUFLQJ
2XWVRXUFLQJWHFKQLFDODVSHFWVRIVHFXULW\LV*22'
2XWVRXUFLQJ\RXUEXVLQHVVIXQFWLRQVRIVHFXULW\LV%$'
2XWVRXUFLQJ6HFXULW\FRQW
1HWZRUNVHFXULW\LVQRGLIIHUHQW2XWVRXUFHH[SHUWDVVLVWDQFHYXOQHUDELOLW\VFDQQLQJPRQLWRULQJFRQVXOWLQJIRUHQVLFV'RQW
RXWVRXUFHPDQDJHPHQW
7KLVWUXLVPKDVEHHQERUQHRXWLQWKHLQGXVWU\6DOLQDV1HWZRUN6HUYLFHVZDVWKHODUJHVWILUHZDOOPDQDJHPHQWFRPSDQ\)RUD
SULFH6DOLQDVZRXOGPDQDJH\RXUILUHZDOO(DUOLHUWKLV\HDULWGLVDSSHDUHG7KHUHMXVWZDVQWDEXVLQHVVLQPDQDJLQJILUHZDOOV
IRURWKHUFRPSDQLHV7KHFRPSDQLHVGHPDQGHGWRRPXFKLQGLYLGXDODWWHQWLRQIRUWKHPRQH\WKH\ZHUHZLOOLQJWRSD\)LUHZDOO
PDQDJHPHQWLVMXVWWRRFRUHWRDEXVLQHVV7KH\KDGQRFKRLFHEXWWRWUHDWWKHLU6DOLQDVFRQWDFWVDVHPSOR\HHV
3LORW1HWZRUN6HUYLFHVRIIHUHGVHFXUHQHWZRUNPDQDJHPHQW,WVEXVLQHVVZDVWRKRVW\RXUFRPSXWHUVVHFXUHO\PDQDJHDOOVHFXULW\GHYLFHVWHVW\RXUDSSOLFDWLRQVEHIRUHSXWWLQJWKHPXSRQWKHQHWZRUNHIIHFWLYHO\EHFRPLQJ\RXUVHFXULW\PDQDJHPHQW
JURXS7KH\UHJRQHQRZWRRVDPHSUREOHP
6RPHFRQVXOWLQJFRPSDQLHVDUHGRLQJZHOODQGVRPHDUHQRW7KLVLVPRUHDIXQFWLRQRILVWKHTXDOLW\RIWKHVHUYLFHWKH\RIIHU
&RQVXOWLQJLVDQGDOZD\VZLOOEHDSURILWDEOHEXVLQHVV2XWVRXUFLQJRFFDVLRQDOUHTXLUHPHQWVIRUH[SHUWLVHWUDQVFHQGVDQ\
VLQJOHDUHD
2XWVRXUFHGVHFXULW\FRPSDQLHVWKDWDUHGRLQJZHOODUHWKHRQHVWKDWRIIHUZHOOGHILQHGVHUYLFHVWKDWFRPSDQLHVQHHG)RU
H[DPSOH
FRQVXOWLQJFRPSDQLHVOLNH#6WDNHDQG)RXQGVWRQHIRUH[SHUWDGYLFHDQGDVVLVWDQFHVWUDWHJLFVHFXULW\FRQVXOWLQJ
SHQHWUDWLRQWHVWLQJIRUHQVLFVHWF
VHFXULW\9$5VIRUSURGXFWLQVWDOODWLRQDQGFRQILJXUDWLRQ
7UX6HFXUHIRUFHUWLILFDWLRQDQGH[SHUWDVVLVWDQFH&RXQWHUSDQHIRUQHWZRUNVHFXULW\PRQLWRULQJ
,QDOORIWKHVHFDVHVWKHFRPSDQ\EX\LQJWKHRXWVRXUFHGVHUYLFHVUHWDLQVFRQWURORILWVRZQVHFXULW\7KLVLVLPSRUWDQWIRUWKH
FRPSDQ\SXUFKDVLQJWKHVHUYLFHVEXWLWLVDOVRLPSRUWDQWIRUWKHYHQGRU%\QRWGHPDQGLQJDPDQDJHPHQWUROHWKHVHFXULW\
FRPSDQLHVFDQRIIHUDXVHIXOHIIHFWLYHDQGVFDODEOHVHUYLFH
$UJXPHQWVIRU2XWVRXUFLQJ
7KHSULPDU\DUJXPHQWIRURXWVRXUFLQJLVILQDQFLDODFRPSDQ\FDQJHWWKHVHFXULW\H[SHUWLVHLWQHHGVPXFKPRUHFKHDSO\E\
KLULQJVRPHRQHHOVHWRSURYLGHLW7DNHPRQLWRULQJIRUH[DPSOH7KHNH\WRVXFFHVVIXOVHFXULW\PRQLWRULQJLVYLJLODQFH
DWWDFNVFDQKDSSHQDWDQ\WLPHRIWKHGD\DQGDQ\GD\RIWKH\HDU:KLOHLWLVSRVVLEOHIRUFRPSDQLHVWREXLOGGHWHFWLRQDQG
UHVSRQVHVHUYLFHVIRUWKHLURZQQHWZRUNVLWVUDUHO\FRVWHIIHFWLYH
8/8/2019 Schneier Monitoring Presentation
27/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
+LJK5LVN2XWVRXUFLQJ
2XWVRXUFLQJ6HFXULW\FRQW
6WDIILQJIRUVHFXULW\H[SHUWLVHKRXUVDGD\DQGGD\VD\HDUUHTXLUHVILYHIXOOWLPHHPSOR\HHVPRUHLI\RXLQFOXGH
VXSHUYLVRUVDQGEDFNXSSHUVRQQHOZLWKVSHFLDOL]HGVNLOOV(YHQLIDQRUJDQL]DWLRQFRXOGILQGWKHEXGJHWIRUDOORIWKHVHSHRSOH
LWZRXOGEHYHU\GLIILFXOWWRKLUHWKHPLQWRGD\VMREPDUNHW
5HWDLQLQJWKHPZRXOGEHHYHQKDUGHU6HFXULW\PRQLWRULQJLVLQKHUHQWO\HUUDWLFVL[ZHHNVRIERUHGRPIROORZHGE\HLJKWKRXUV
RISDQLFWKHQVHYHQZHHNVRIERUHGRPIROORZHGE\VL[KRXUVRISDQLF$WWDFNVDJDLQVWDVLQJOHRUJDQL]DWLRQGRQWKDSSHQRIWHQ
HQRXJKWRNHHSDWHDPRIWKLVFDOLEHUHQJDJHGDQGLQWHUHVWHG
7KLVLVZK\RXWVRXUFLQJLVWKHRQO\FRVWHIIHFWLYHZD\WRVDWLVI\WKHUHTXLUHPHQWV7KLQNDERXWKHDOWKFDUHDJDLQ,PD\RQO\QHHGDGRFWRUWZLFHLQWKHFRPLQJ\HDUEXWZKHQ,QHHGRQH,PD\QHHGKLPLPPHGLDWHO\DQG,PD\QHHGVSHFLDOLVWV2XWRID
KXQGUHGSRVVLEOHVSHFLDOWLHV,PD\QHHGWZRRIWKHPDQG,KDYHQRLGHDEHIRUHKDQGZKLFKRQHV,ZRXOGQHYHUFRQVLGHU
KLULQJDWHDPRIGRFWRUVWRZDLWDURXQGXQWLO,KDSSHQWRJHWVLFN,RXWVRXUFHP\PHGLFDOQHHGVWRP\FOLQLFP\HPHUJHQF\
URRPP\KRVSLWDO6LPLODUO\DQHWZRUNZLOORXWVRXUFHLWVVHFXULW\PRQLWRULQJ
$VLGHIURPWKHDJJUHJDWLRQRIH[SHUWLVHDQRXWVRXUFHPRQLWRULQJVHUYLFHKDVRWKHUHFRQRPLHVRIVFDOH,WFDQPRUHHDVLO\KLUH
DQGWUDLQLWVSHUVRQQHOVLPSO\EHFDXVHLWQHHGVPRUHHPSOR\HHV$QGLWFDQEXLOGDQLQIUDVWUXFWXUHWRVXSSRUWWKHP9LJLODQW
PRQLWRULQJPHDQVNHHSLQJXSWRGDWHRQQHZYXOQHUDELOLWLHVQHZKDFNHUWRROVQHZVHFXULW\SURGXFWVDQGQHZVRIWZDUH
UHOHDVHV2XWVRXUFHGVHFXULW\FRPSDQLHVFDQVSUHDGWKHVHFRVWVDPRQJDOORIWKHLUFXVWRPHUV
$QRXWVRXUFHFRPSDQ\DOVRKDVDPXFKEURDGHUYLHZRIWKH,QWHUQHW,WFDQOHDUQIURPDWWDFNVDJDLQVWRQHFXVWRPHUDQGXVH
WKDWNQRZOHGJHWRSURWHFWDOORILWVFXVWRPHUV$QGIURPLWVSRLQWRIYLHZDWWDFNVDUHIUHTXHQW1RPDWWHUKRZZHDOWK\\RXDUH
\RXGRQRWKLUHDGRFWRUWRVLWLQ\RXUOLYLQJURRPZDLWLQJIRU\RXWRJHWVLFN
8/8/2019 Schneier Monitoring Presentation
28/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
:K\+LJK5LVN"
)RRGDVVHPEOHGE\\HDUROGV
:KRFDQQRWNHHSWKHLUURRPFOHDQ
:KRWKLQNWKDWFOHDQZRUNLQJHQYLURQPHQWPHDQVDGD\ROGVKLUW
:KRGRQRWDOZD\VXVHVRDSRUVKDPSRRLQWKHVKRZHU
:KREHOLHYHWKDWZDVKLQJKDQGVLVDZDVWHRIWLPH
:KRDUHVXUYLYLQJDFQHDQGRWKHUVNLQGLVHDVHV
:KRKDYHQRFUHGHQWLDOVRUH[SHULHQFH
:KREDUHO\KDYHDWKJUDGHHGXFDWLRQ
:KRFRXOGQWERLOZDWHUWZRZHHNVDJR
:KRZRUNIRUPLQLPXPZDJH
$QGWKH\DUHSUHSDULQJ\RXUIRRG
2XWVRXUFLQJ6HFXULW\FRQW
6HFXULW\RXWVRXUFLQJLVQRGLIIHUHQW\RXVKRXOGWRFKRRVHDFRPSDQ\\RXWUXVW7RGHWHUPLQHZKLFKRQHWDONZLWKRWKHUVLQ
\RXULQGXVWU\RUDVNDQDO\VWV*RZLWKWKHLQGXVWU\OHDGHU,QERWKVHFXULW\DQGPHGLFDOFDUH\RXGRQWXVHDOLWWOHNQRZQ
PDYHULFNXQOHVV\RXUHGHVSHUDWH
:DWFKFRPSDQLHVWKDWKDYHFRQIOLFWVRILQWHUHVW6RPHRXWVRXUFHUVRIIHUVHFXULW\PDQDJHPHQWDQGPRQLWRULQJ7KLVZRUULHV
PH,IWKHRXWVRXUFHUILQGVDVHFXULW\SUREOHPZLWKP\QHWZRUNZLOOWKHFRPSDQ\WHOOPHRUWU\WRIL[LWTXLHWO\"&RPSDQLHV
WKDWERWKVHOODQGPDQDJHVHFXULW\SURGXFWVKDYHWKHVDPHFRQIOLFWRILQWHUHVW&RQVXOWLQJFRPSDQLHVWKDWRIIHUSHULRGLF
YXOQHUDELOLW\VFDQVRUQHWZRUNPRQLWRULQJKDYHDGLIIHUHQWFRQIOLFWRILQWHUHVWWKH\VHHWKHPDQDJHGVHUYLFHVDVDZD\WRVHOOFRQVXOWLQJVHUYLFHV7KHUHVDUHDVRQFRPSDQLHVKLUHRXWVLGHDXGLWRUVLWNHHSVHYHU\RQHKRQHVW,EHOLHYHWKDWRXWVRXUFHUVWKDW
RIIHUFRPELQHGPDQDJHPHQWPRQLWRULQJVHUYLFHVZLOOEHDPRQJWKHQH[WWRGLVDSSHDU$QGLIDFRPSDQ\GHFLGHVWRRXWVRXFH
LWVVHFXULW\GHYLFHPDQDJHPHQWLWLVHVVHQWLDOWKDWLWRXWVRXUFHLWVPRQLWRULQJWRDGLIIHUHQWFRPSDQ\
,QDQ\RXWVRXUFLQJGHFLVLRQWKDWLQYROYHVDQRQJRLQJUHODWLRQVKLSWKHILQDQFLDOKHDOWKRIWKHRXWVRXUFHULVFULWLFDO7KHODVW
WKLQJ\RXZDQWLVWRHPEDUNRQDORQJWHUPPHGLFDOWUHDWPHQWSODQRQO\WRKDYHWKHKRVSLWDOJRRXWRIEXVLQHVVLQWKHPLGGOH
&RPSDQLHVWKDWHQWUXVWHGWKHLUVHFXULW\PDQDJHPHQWWR6DOLQDVDQG3LORWZHUHOHIWVWUDQGHGZKHQWKRVHFRPSDQLHVZHQWRXWRI
EXVLQHVV&RPSDQLHVWKDWFKRRVHWKHZURQJVHFXULW\FRQVXOWLQJJURXSZLOOKDYHWKHVDPHSUREOHP/RRNIRUFRPSDQLHVWKDW
DUHOHDGHUVLQWKHLUILHOGVGRRQHWKLQJZHOOQRWWKRVHWKDWWU\WRGRHYHU\WKLQJDQGKDYHDKLVWRU\
7KH)XWXUHRI2XWVRXUFLQJ
0RGHUQVRFLHW\LVEXLOWDURXQGVSHFLDOL]DWLRQPRUHWDVNVDUHRXWVRXUFHGWRGD\WKHQHYHUEHIRUH:HRXWVRXUFHILUHDQGSROLFH
VHUYLFHVJRYHUQPHQWWKDWVZKDWDUHSUHVHQWDWLYHGHPRFUDF\LVDQGIRRGSUHSDUDWLRQ,QJHQHUDOZHRXWVRXUFHWKLQJVWKDWKDYHRQHRIWKUHHFKDUDFWHULVWLFVLWVFRPSOH[LPSRUWDQWRUGLVWDVWHIXO,QEXVLQHVVZHRXWVRXUFHWD[SUHSDUDWLRQSD\UROODQG
FOHDQLQJVHUYLFHV2XWVRXUFLQJVHFXULW\LVQRWKLQJQHZDOOEXLOGLQJVKLUHDQRWKHUFRPSDQ\WRSXWJXDUGVLQWKHLUOREELHVDQG
HYHU\EDQNKLUHVDQRWKHUFRPSDQ\WRGULYHLWVPRQH\DURXQGWRZQ
&RPSXWHUVHFXULW\LVDOOWKUHHFRPSOH[LPSRUWDQWDQGGLVWDVWHIXO,WVGLVWDVWHIXOQHVVFRPHVIURPWKHGLIILFXOW\WKHGUXGJHU\
DQGWKHDPDODUPV,WVFRPSOH[LW\FRPHVRXWRIWKHLQWULFDFLHVRIPRGHUQQHWZRUNVWKHUDWHDWZKLFKWKUHDWVFKDQJHDQG
DWWDFNVLPSURYHDQGWKHHYHUHYROYLQJQHWZRUNVHUYLFHV,WVLPSRUWDQFHFRPHVIURPWKLVIDFWRIEXVLQHVVWRGD\FRPSDQLHV
KDYHQRFKRLFHEXWWRRSHQXSWKHLUQHWZRUNVWRWKH,QWHUQHW
'RFWRUVDQGKRVSLWDOVDUHWKHRQO\ZD\WRJHWDGHTXDWHPHGLFDOFDUH6LPLODUO\RXWVRXUFLQJLVWKHRQO\ZD\WRJHWDGHTXDWH
VHFXULW\RQWRGD\VQHWZRUNV
8/8/2019 Schneier Monitoring Presentation
29/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
&KRRVLQJDQ2XWVRXUFHU"
&RPELQDWLRQRI
WHFKQRORJ\DQGSURFHVV ,QGXVWU\OHDGHU
)LQDQFLDOO\VWURQJ
3URYHQWUDFNUHFRUG
/DUJHFXVWRPHUEDVH
/RFDOVXSSRUW
&RXQWHUSDQHKDVSURYHGWRXVWKURXJKWKHLUXQLTXHVHUYLFHWKDWWKH\VXEVWDQWLDOO\UHGXFHWKHLUFOLHQWVH[SRVXUHWRULVN
/OR\GVRI/RQGRQ
6FDODELOLW\
&RXQWHUSDQHV0DQDJHG6HFXULW\0RQLWRULQJZDVGHVLJQHGZLWKVFDODELOLW\LQPLQG2XUGLVWULEXWHGDUFKLWHFWXUHDQGDXWRPDWLF
UHGXQGDQF\HQVXUHWKDWZHFDQVFDOHVHDPOHVVO\DQGDOPRVWLQGHILQLWHO\
$QDO\VWV&RXQWHUSDQHKDVGHPRQVWUDWHGWKDWZHFDQTXLFNO\KLUHDQGWUDLQQHZDQDO\VWV:HDUHFRQVWDQWO\KLULQJQHZ
DQDO\VWVDQGEULQJLQJWKHPXSWKURXJKWKH&RXQWHUSDQHUDQNVDQGZHNQRZRXUPHWKRGRORJ\LVVFDOHDEOH
$QDO\VWFRQVROHV(DFKDQDO\VWFRQVROHLVFDSDEOHRIPRQLWRULQJDERXWILIW\6HQWULHV:HFXUUHQWO\KDYHWZHQW\DQDO\VWFRQVROHVLQWZR62&VDQGDUHFDSDEOHRIDGGLQJPRUHFRQVROHVDWWKHH[LVWLQJ62&VRULQDQHZ62&
6RFUDWHV7KH6RFUDWHVV\VWHPLVDOUHDG\IXOO\UHGXQGDQW7KHXQGHUO\LQJWKLUGSDUW\V\VWHPVDQ2UDFOHGDWDEDVHDQGD5HPHG\WURXEOHWLFNHWV\VWHPDUHDOUHDG\XVHGIRUGLVWULEXWHGV\VWHPVPXFKODUJHUWKDQ&RXQWHUSDQHVDQGFDQHDVLO\VFDOH
62&$UFKLWHFWXUH:HKDYHEXLOWRXU62&DUFKLWHFWXUHWRIDFLOLWDWHVFDODELOLW\DQGUHOLDELOLW\7KHUHDUHQRERWWOHQHFNVRU
VLQJOHSRLQWVRIIDLOXUH(YHU\WKLQJFDQEHUHSOLFDWHGPXOWLSOHWLPHVZLWKRXWDQ\V\VWHPGHJUDGDWLRQ
62&V&RXQWHUSDQHKDVGHPRQVWUDWHGWKDWZHFDQEXLOGDQGVWDIID62&IURPDVWDQGLQJVWDUWLQIRXUPRQWKV:HKDYHWHVWHGDQGGHEXJJHGWKLVSURFHVVDQGZHFDQUHSOLFDWHLWDQ\ZKHUHLQWKHZRUOG
62&6HQWU\&RQQHFWLYLW\7KH6HQWULHVDUHGHVLJQHGWRUHFRJQL]HPXOWLSOH62&VDQGFDQDXWRPDWLFDOO\VZLWFKIURPRQHWRWKHRWKHU7KLVFDSDELOLW\HQVXUHVVFDODELOLW\
62&6HQWU\%DQGZLGWK6LQFHPRVWRIWKHHYHQWSURFHVVLQJDQGDQDO\VLVRFFXUVRQWKH6HQWU\WKHUHLVQREDQGZLGWKEDUULHUWRVFDODELOLW\7KLVLVDQLPSRUWDQWFRQVLGHUDWLRQ,'6PRQLWRULQJFRPSDQLHVDUHIRUFHGWRVHQGDOOHYHQWVEDFNWRWKHLU62&IRU
DQDO\VLVFRQVXPLQJKXJHDPRXQWVRIEDQGZLGWKLQWKHSURFHVV%HFDXVH&RXQWHUSDQHKDVEXLOWDGLVWULEXWHGPRQLWRULQJ
DUFKLWHFWXUHZHGRQRWKDYHWKHVHFRQVWUDLQWV6HQWU\&RXQWHUSDQHFDQHDVLO\LQVWDOOPXOWLSOH6HQWULHVLIDFXVWRPHUORFDWLRQQHHGVDGGLWLRQDOSURFHVVLQJ2XUH[SHULHQFHZLWK1LPGDGHPRQVWUDWHVRXUVFDODELOLW\'XULQJWKHILUVWKRXUVRI1LPGDRXU6HQWULHVVDZDKXQGUHGWLPHV
LQFUHDVHLQHYHQWYROXPH%RWK62&VLPPHGLDWHO\LQFUHDVHGFDSDFLW\WRVXSSRUWWKHDGGLWLRQDODOHUWVDQGZHEURXJKWXSRXU
WKLUG62&ZLWKLQIRXUKRXUVRQFHZHVDZWKHLQFUHDVLQJDFWLYLW\1RWKLQJDERXW1LPGDKDGDGDPDJLQJLPSDFWRQWKH
DUFKLWHFWXUH:HFRXOGVWLOOVHHZKDWZHQHHGHGWRDQGDOHUWHGFXVWRPHUVWKURXJKRXWDFFRUGLQJO\,QVKRUW&RXQWHUSDQHV
060VHUYLFHFDQVFDOHLQZD\VQRRQHHOVHVFDQ:HFDQPRQLWRUFXVWRPHUVODUJHDQGVPDOODURXQGWKHJOREH:H
FRQWLQXDOO\EXLOGRXUPRQLWRULQJFDSDELOLW\LQDGYDQFHRIGHPDQGWRHQVXUHWKDWZHFDQDOZD\VVHUYHRXUFXVWRPHUV2Q
-DQXDU\&RXQWHUSDQHVGLVWULEXWHGDUFKLWHFWXUHPRQLWRUHGDOHUWVDWDUDWHRISHUVHFRQGPLOOLRQSHUKRXU
ELOOLRQSHUPRQWKELOOLRQSHU\HDU,QRQHPRQWKZHVHHPRUHHYHQWVWKDQDQ\RQHHOVHKDVHYHUVHHQHYHUDQGWKLVUDWHLV
VWHDGLO\LQFUHDVLQJDVZHEULQJPRUHFXVWRPHUVRQOLQH
8/8/2019 Schneier Monitoring Presentation
30/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
&RQFOXVLRQ
7KHULVNVZLOODOZD\VEHZLWKXV
6HFXULW\SURGXFWVZLOOQRWVROYHWKHSUREOHPVRI,QWHUQHWVHFXULW\
7KHEHVWZHFDQGRLVPDQDJHWKHULVN
+XPDQLQWHUYHQWLRQLVFULWLFDOIRUHIIHFWLYHVHFXULW\
$XWRPDWLFVHFXULW\LVQHFHVVDULO\IODZHG
+XPDQVFDQUHFRJQL]HDQGUHVSRQGWRQHZWKUHDWV
0DQDJHG6HFXULW\0RQLWRULQJLVWKHPRVWFRVWHIIHFWLYHZD\WRSURYLGHUREXVWVHFXULW\
+XPDQPLQGVDUHWKHDWWDFNHUVKXPDQPLQGVQHHG
WREHWKHGHIHQGHUV
&RXQWHUSDQH,QWHUQHW6HFXULW\,QF
&RXQWHUSDQHV7HFKQRORJ\
KWWSZZZFRXQWHUSDQHFRPWHFKQRORJ\KWPO
&XVWRPHU([SHULHQFHV
KWWSZZZFRXQWHUSDQHFRPH[SHULHQFHVKWPO
.H\%HQHILWVDQG'HOLYHUDEOHVKWWSZZZFRXQWHUSDQHFRPNH\EHQHILWVKWPO
6HYHQ4XHVWLRQV
8/8/2019 Schneier Monitoring Presentation
31/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
7ZR8VHIXO5HVRXUFHVIURP%UXFH6FKQHLHU
6HFUHWVDQG/LHV
'LJLWDO6HFXULW\LQD1HWZRUNHG:RUOGE\%UXFH6FKQHLHU
&U\SWR*UDP)UHH0RQWKO\6HFXULW\1HZVOHWWHUE\%UXFH6FKQHLHU
ZZZFRXQWHUSDQHFRPFU\SWRJUDPKWPO
-RKQ:LOH\6RQVZZZFRXQWHUSDQHFRPVDQGOKWPO
&U\SWR*UDPE\%UXFH6FKQHLHU
&U\SWR*UDPLVDIUHHPRQWKO\HPDLOQHZVOHWWHUWKDWSURYLGHVQHZVVXPPDULHVDQDO\VHVLQVLJKWVDQGFRPPHQWDULHVRQ
FRPSXWHUVHFXULW\DQGFU\SWRJUDSK\,QDGGLWLRQWRWKHUHJXODUQHZVUHSRUWVUHJDUGLQJ,QWHUQHWVHFXULW\DQGFU\SWRJUDSK\KHUH
DUHVRPHRIWKHVXEMHFWVWKDWDSSHDUHGLQSUHYLRXVLVVXHVRI&U\SWR*UDP
7KH6HFXULW\3DWFK7UHDGPLOO ,QVXUDQFHDQGWKH)XWXUHRI1HWZRUN6HFXULW\
+DUG'ULYH(PEHGGHG&RS\3URWHFWLRQ ,QWHUQHW9RWLQJYV/DUJH9DOXHH&RPPHUFH
$&\EHU8/" &RGH6LJQLQJLQ0LFURVRIW:LQGRZV
9RWLQJDQG7HFKQRORJ\ 'LJLWDO6DIH'HSRVLW%R[HV
:K\'LJLWDO6LJQDWXUHV$UH1RW6LJQDWXUHV 0LFURVRIW+DFNWKH&RPSDQ\QRWD3URGXFW
$(6 6HPDQWLF$WWDFNV7KH7KLUG:DYHRI1HWZRUN$WWDFNV
)XOO'LVFORVXUHDQGWKH:LQGRZRI([SRVXUH 3*39XOQHUDELOLW\
%OXHWRRWK 0LFURVRIW9XOQHUDELOLWLHV3XEOLFLW\DQG9LUXV%DVHG)L[HV
)XOO'LVFORVXUHDQGWKH&,$ 6HFXULW\5LVNVRI8QLFRGH
0LFURVRIW62$3 7KH'DWD(QFU\SWLRQ6WDQGDUG'(6
&RPSXWHU6HFXULW\:LOO:H(YHU/HDUQ" 7UXVWHG&OLHQW6RIWZDUH
,/29(
8/8/2019 Schneier Monitoring Presentation
32/32
1HWZRUN0RQLWRULQJDQG6HFXULW\
&RXQWHUSDQHLVDUHJLVWHUHGWUDGHPDUNRI&RXQWHUSDQH&RS\ULJKW&RXQWHUSDQH,QWHUQHW6HFXULW\$OOULJKWVUHVHUYHG
,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(
&RXQWHUSDQH,QWHUQHW6HFXULW\,QF
3UXQHULGJH$YH&XSHUWLQR&$
ZZZFRXQWHUSDQHFRP
1RWHV