Upload
antonio-sanz
View
295
Download
3
Tags:
Embed Size (px)
DESCRIPTION
A talk about all the threats we face using Internet: cyberwarfare, cyberespionage, cyberterrorism, cybercrime and hacktivism, with some useful advices to fight back.
Citation preview
Cyberthreats Are we screwed ?
Antonio Sanz
IT Systems & Security Manager
@antoniosanzalc
http://www.equipoazul.es
#neocom2014
Dependance on IT
IT is everywhere
Tactics, techniques and
procedures
Tactics, techniques & procedures
0-days : Best way to ruin yours
Attribution is complicated
International law is … flaky
We are vulnerable
Cyberwar
Cyberterrorism
Cyberespionage
Cybercrime
Hacktivism
Objective: critical infrastructures
Main targets: SCADA systems
Cyberarmies
Stuxnet
Stuxnet
Georgia & Russia
North Korea - South Korea
(Banking)
North / South Korea
Iranian Cyber Army - UAE
ICA & United Arab Emirates
Cyberwar
Cyberterrorism
Cyberespionage
Cybercrime
Hacktivism
Objectives: Get influence
through violent actions
Objective: Political influence
-1%
- $136.000M
Myth or reality ?
Technical (in)competence
Cyberwar
Cyberterrorism
Cyberespionage
Cybercrime
Hacktivism
Objectives: Trade secrets & IP
APT – Advanced Persistent Threat
RSA & Lockheed Martin
Red October - Uroboros/Snake
IceFog - Mercenaries
Hi Prism !!
Hi Chinese Great Firewall !!
Erdogan - No Twitter on Turkey
/ Arab Spring no Internet
Internet censorship
Cyberwar
Cyberterrorism
Cyberespionage
Cybercrime
Hacktivism
Objectives: Your money
Organized Crime (CaaS)
Banking Trojans
Identity Theft
Identity
Theft
Blackmail / Extortion
Ddos Extortion
Cyberwar
Cyberterrorism
Cyberespionage
Cybercrime
Hacktivism
Objectives: Political influence
Anonymous
Anonymous
Wikileaks
What can we do?
Manage
risk
Don’t be a
low hanging fruit
Stand your ground
Get threat
intelligence
Assume you’ll be compromised
Report the incident
Share data !
Conclussions
We are screwed
Accept it
Do something about it
@antoniosanzalc
http://www.equipoazul.es
http://bit.ly/1fjGtQg
Be careful out there