"Bad news first, folks. LastPass, our favorite password manager (and yours) has been hacked. It’s time to change your master
password."LifeHacker.com
#DevoxxFR
Layers
55
Applications
Operating System
Network
Servers
Server Administrators
User
#DevoxxFR
Server administrators
56
Even the best might get hacked !
#DevoxxFR
Server administrators
57
Social engineering
#DevoxxFR
Server administrators
58
Kevin Mitnick
#DevoxxFR
Server administrators
59
Previously “America's Most Wanted Computer Outlaw"
#DevoxxFR
Server administrators
60
Now a security consultant
#DevoxxFR
Server administrators
61
What's the hacking activity you are most proud of?…I guess my intrusion into Motorola. I was able to call an employee at Motorola and convince her to send me the code for the MicroTAC Ultra Lite cell phone...Motorola had their whole campus protected by SecurID and I was able to use an elaborate social-engineering scheme by also manipulating the telephone network and set up call-back numbers within Motorola's campus. So I convinced a manager in operations to tell one of the employees to read off his RSA SecurID code any time I needed it so I could access the network remotely.
Kevin Mitnick Q&A, CNet, June 22nd 2009
#DevoxxFR
Security
62
cloud != safer
#DevoxxFR
Security
63
nothing is (really) safer
#DevoxxFR 64
as a company…
#DevoxxFR 65
you need to keep…
#DevoxxFR 66
control of data
#DevoxxFR 67
trust of customers
#DevoxxFR 68
respect privacy (laws)
#DevoxxFR 69
improve customer experience
#DevoxxFR 70
better than your competition
#DevoxxFR 71
will be hard(er) to do with (some) cloud services
#DevoxxFR 72
Example
#DevoxxFR
Example
73
Native mobile application
#DevoxxFR
Example
74
App Analytics
#DevoxxFR
Example
75
Flurry (Yahoo)
#DevoxxFR
Example
76
Google
#DevoxxFR
Example
77
Apple
#DevoxxFR
Example
78
Sending your precious customer (behavior) data
#DevoxxFR
Example
79
largest web companies
#DevoxxFR
Example
80
no (real) control over the data
#DevoxxFR
Example
81
they get more value out of it than you do !
#DevoxxFR
Example
82
every company gets the same analytics at the same
time
#DevoxxFR
Example
83
how can you compete on customer experience ?
#DevoxxFR
THE SOLUTIONS
84
#DevoxxFR 85
Security
#DevoxxFR
Layers
86
Applications
Operating System
Network
Servers
Server Administrators
User
#DevoxxFR
Users
87
security training
(including social engineering)
#DevoxxFR
Layers
88
Applications
Operating System
Network
Servers
Server Administrators
User
#DevoxxFR
Applications
89
updates
#DevoxxFR
Applications
90
security tools
(anti-malware, firewalls)
#DevoxxFR
Layers
91
Applications
Operating System
Network
Servers
Server Administrators
User
#DevoxxFR
Operating systems
92
review all (default) settings
#DevoxxFR
Operating systems
93
make installs minimal (do you really need solitaire?)