Finding needles in needle stacks - or Future aspects of cyber security

Finding

N e e d l e s in

N e e d l e S t a c k sorFuture aspects of Cyber Security

Peter Cochrane cochrane.org.uk

ca-global.biz

COCHRANE a s s o c i a t e s

Thursday, 21 November 13

C y b e r S e c u r i t y

- Attacks are growing and are increasingly sophisticated- We need to up our game & become more anticipatory

are no

simple

or sing

ular s

olutio

Finding the

B e n t N e e d l e s or

N e e d l e s a b o u t t o b e n dThe good majority

The evil minority

The potentially evil

C y b e r I N S e c u r i t yWhat we know for sure - There is always a threat

- The threat never sleeps- The threat evolves rapidly

People are by far the biggest risk factor

The perceived threat ⧣ the actual threat

The biggest threat is always on the inside

Security people are never their own customer

The best defenders have been the best attackers

Cracking systems is far more fun than defending them

The biggest threat is in the direction you are not looking

Resources are generally deployed inversely proportional to actual riskThursday, 21 November 13

Breaking intomost companies and institutionsreally isn’t all that difficult!

Thebiggestthreatsare

inside

FireWall

Rogue:Equipment NetworksChipsCodePortsPeople

Lax:PeopleVisitorsSecurityOperations

No single solutioncan deal with all forms of attack....

Fire Walls andmalware protection are certainly not enough...

Reproduced Courtesy of Akamai 2013

C y b e r A t t a c k sMajor Country Nodes

Reproduced Courtesy of Akamai 2013

C y b e r A t t a c k sMajor Tra f f i c Po r t s

Financial 34.4%

Payment Services 32.1%

Gaming 14.7%

ISP 9.5%

Other 6.78%

Social Nets 6.0%Retail 5.12%

Auctions 2.07%Government 1.0%

Classifieds 0.3%

P r i m a r y C y b e r T a r g e t s Q4 2012

Data Courtesy of Detica 2011

2004 2005 2006 2007 2008 2009 2009 2011 2012

17Bn 21Bn

>200Bn

C y b e r C r i m e > > C Y B E R - S E C U R I T YNot clear which side is spending more on software

The cost of cyber crime

Cyber Defence

expenditure

C y b e r S e c u r i t yImprovements for free ?

What will we benefit from if we don nothing ?

A multi-device, multi-screen,mobile world, of rapidly

renewed and replaced devices,new and updated apps

With built-in security features

automatically updated

Connectingon the

move via wifi, 3G, 4G, LTE,

BlueTooth AnyNetAny

BYOD = Fewer corporate constrains and greater variabilitiesBMOB = Be My Own Boss - shorter assignment periods

Increasinglytransientpeople &machinebehaviour

Many networksto attack not just one

3,4,5G,LTE, WiFiWiFi WiMaxBlueTooth ++

Many OS typesto attack not just one

Many applicationsto attack not just one

InterfaceBoardsChips

ConfigFirmware

Huge devicevariance

CircuitryLayout

AntennasAnalogue

DesignFacilities

Huge hardwareand circuitvariance

On Grid

On & Off Grid

Off Grid

Far more variable human and device connection

behaviours

A fast spreading realisation that this really isn’t good enough!

is sufficient

No One

security

technique

The concatenation of multiple low cost methods rapidly

delivers a very high level of protection

HabitsPersonal

LocationsNetworks BiometricsKnowledge++++++++

S O M E T H I N G S Unique to you a loneWhat you:

arewereknowdrove

work onwearownuseeatdo+

Who you: work with

live withmanagementordislike

Why you:like

dislikeprefer

thoughtimaginedmigratedassumed

helpedfailedwon

How you:talk

type stand

appearwritewalk

But whatabout the cloud ?

çF U T U R E N E T W O R K I N GThe Internet wil l not Scalefunctionally or economically

9Bn People and >> 50Bn Things on line

2013 2025

But Clouds/Cloud working will !

<5Bn People on (and off) line

Data courtesy of Cisco.

R E C E N T H E A D L I N E

Mobile networksbut a minor

player !

More degrees of freedom to exploit that make it all inherently more secure than anything we have seen before

C y b e r S e c u r i t yClouds change everything

Axiom..

1,000,000s

of Clouds

and not 1Thursday, 21 November 13

And they come in many forms

- Corporate- Government- Private- Personal- Long term- Sporadic

- Visible- Invisible- Dynamic- Fixed- Mobile- Wireless- Wired

- Open- Closed- Secure- Insecure- Regular- Unknown- Unquantified- Experimental

Diverse routing and increasingly hidden and disguised data storage in depth

C y b e r S e c u r i t yHidden by multi-hop depth

InvisibleC l o u d

Corporate/Private/Government

C l o u d

P u b l i c/ O p e nC l o u d

InvisibleC l o u d

Corporate/Private/Government

C l o u d

Every Cloud demands a key and all routings are hidden - data parsed/coded

C y b e r S e c u r i t yIn Cloud Gating/Encryption

T h e B i g g e s t R i s k

Service providers do not guarantee your data!

we need SCAlable

networkSolut ions

This isn’t tenable...

This is...

Smart car...Smart gas...Smart net...

C l o u d s c o n n e c t dynamically, driven by need, location, work, groups and associations...

T H E S e c u r i t y P r o b l e mEven deeper protection required

DETECTIONBUILT INTO

EVERY ELEMENT

OF A DEVICE

On Server

On Device

In Network

In Individual Apps

In Hardware

H o n e y p o t , a n d m a l w a r e t r a p s , distributed across the cloud spectrum

Data decimation and distribution with individual encryption

Dynamic Addressing

url hopping

Ghost Cloud

Ghost Device

Have an alias, be invisible, don’t be what you appear, be there but absent...

Distributed Attacks demand aDistributed Defence

Dynamic Attackers necessitateDynamic Defenders

We can act a lone or we can uniteand a c t toge the r

M O R E C Y B E R - B E N E F I T S Going for free in the default future

Fewer full time people

and less predictablecorporate/network/device/

behavior

People job and location Half Lifegetting shorter

Data Half Lifegetting shorter

and shorter

Mean Time to Destruction

unknown!

The Ace in theHole

Global CooperationDevice, App, Network

Finding Those NeedlesThe sociology and habits of

ApplicationsNetworksMachinesSoftwareMalware

PeopleBugs

T H E E N D G A M E

We all own multiple

clouds

Things cooperateinter and extra community to

defeat attacks

AI systems monitoractivities and identify trends to thenanticipate andfend off allattacks

Auto-immune response systems emerge aspart of the overallevolving behaviours

The Art of War by Sun Tzu, 600 BC

“Speed is the essence of war. Take advantage of the enemy's unpreparedness ; t rave l by unexpected routes and strike him where he has taken no precautions”

Thank You

cochrane.org.ukca-global.org

COCHRANE a s s o c i a t e s

Finding needles in needle stacks - or Future aspects of cyber security

Technology

Transcript of Finding needles in needle stacks - or Future aspects of cyber security

Smart Insulin Delivery Pen Insulin Pen Needles...UltiCare Original Pen Needle - 12.7mm x 29G (1/2") UltiCare pen needles combine exceptional quality and convenience with the UltiGuard

Immunisations under sedation at a tertiary paediatric ... · needle phobia • severe and persistent anxiety and fear of needles • Needle phobia . often results in . immunisation

“No needles, please. Cost and Effectiveness of Needle- free ...d1cqrq366w3ike.cloudfront.net/http/DOCUMENT/SheepUSA/...Needle-free technology: Pros Ease and Safety of use – So

Heavy-Duty Needle Scalers - CS Unitec · Heavy-Duty Needle Scalers ... us for details. Standard Needle Scalers ... each supplied with the Needle Scaler, 3mm needles, a chisel holder,

Flexi-Needles - TeamBest · Description Flexi-Needles are sharp or blunt, with closed-ended needle guides, and have a nominal 0.3 cm long ... Flexi-Needle Sharp, with Luer Lock, ...

Needles Guide...Embroidery / Crewel Embroidery needles have a longer eye than a standard Sharps needle, making them more suitable for threading stranded cotton. Apart from this, their

Disposal of Sharps and Lab Waste Always dispose of in a sharps container: Needles Syringes (with or without needles) IV tubing with needle Lancets Scalpel.

Organ Needle Europe · 2019-05-04 · ORGAN NEEDLES Top-Stitch TOP-STITCH 130 N light ball point needle for special stitches This needle is suitable for quilting seams with thicker

buffaloasg.weebly.combuffaloasg.weebly.com/uploads/2/9/7/1/2971667/needle_felting.pdfHow machine needle felting works is mostly about the needles. The needles on Baby Lock's Embellisher,

tadpoles - WordPress.comover needles 2 and 3, k1, ssk, K to end of needle 2. Rnd 2: K to end of needle one, work next round of chart pattern over needles 2 and 3, K to end of needle

Needle Safe Saskatoon › ... › community-relations › nss_newsletter… · Needle Safe Saskatoon Newsle ©er 2018 Public Disposal Op ons Do not place used needles directly into

LOOKING FOR A NEEDLE IS A STACK OF NEEDLES · SLIDE 1 OF 9 LOOKING FOR A NEEDLE IS A STACK OF NEEDLES . 16TH ANNUAL NEW YORK STATE CYBER SECURITY CONFERENCE . JUNE 2013 DAVID SANTERAMO

Needles and Syringes Product Catalog...RB Regular Bevel Needle SB Short bevel Needle Learn more about B. Braun Needles and Syringes. Visit our website at or contact Clinical and Technical

A Complete Line of Syringes and IV Administration Sets• Syringes Without Needle • Hypodermic Needles • Pen Needles • WBlood Collection Tube Holders • Non-Safety Tuberculin

BIOHAZARDOUS WASTE...BIOHAZARDOUS/ REGULATED WASTE (red bag)-Needle/syringe units, needles, butterfly needles, suture needles - Blood, blood elements, vials of blood, specimens for

HAND SEWING NEEDLES - prym.com · PDF fileHand sewing needles: The higher the needle number, the finer and shorter ... our leather sewing needle ensures easy stitching and punctures

Go-To Needles Needle (Front) - janome.ca

Circular Knitting Machine Needle - Organ Needles · Circular Knitting Machine Needle Flat Knitting Machine Needle E M H Hook Diameter Latch Motion Height of Front Butt M M E E H.

Minimizing Needle Heat 1-2-10 › ... › Minimizing-Needle-Heat-1-2-10.pdf · 2. Use a “ball eye” needle. A “ball eye” needles have a larger diameter across the eye (.003

Benchmarktest Pen- Needles - Mediq Danmark rapport Novo_Klinion.pdf · The kinking test indicates the bearable kinking load (axial load) of the needle. Within the test the needle