Cyberthreats Are we screwed ?

Antonio Sanz

IT Systems & Security Manager

@antoniosanzalc

http://www.equipoazul.es

#neocom2014

Dependance on IT

IT is everywhere

Tactics, techniques and

procedures

Tactics, techniques & procedures

0-days : Best way to ruin yours

Attribution is complicated

International law is … flaky

We are vulnerable

Cyberwar

Cyberterrorism

Cyberespionage

Cybercrime

Hacktivism

Objective: critical infrastructures

Main targets: SCADA systems

Cyberarmies

Stuxnet

Stuxnet

Georgia & Russia

North Korea - South Korea

(Banking)

North / South Korea

Iranian Cyber Army - UAE

ICA & United Arab Emirates

Cyberwar

Cyberterrorism

Cyberespionage

Cybercrime

Hacktivism

Objectives: Get influence

through violent actions

Objective: Political influence

-1%

- $136.000M

Myth or reality ?

Technical (in)competence

Cyberwar

Cyberterrorism

Cyberespionage

Cybercrime

Hacktivism

Objectives: Trade secrets & IP

APT – Advanced Persistent Threat

RSA & Lockheed Martin

Red October - Uroboros/Snake

IceFog - Mercenaries

Hi Prism !!

Hi Chinese Great Firewall !!

Erdogan - No Twitter on Turkey

/ Arab Spring no Internet

Internet censorship

Cyberwar

Cyberterrorism

Cyberespionage

Cybercrime

Hacktivism

Objectives: Your money

Organized Crime (CaaS)

Banking Trojans

Identity Theft

Identity

Theft

Blackmail / Extortion

Ddos Extortion

Cyberwar

Cyberterrorism

Cyberespionage

Cybercrime

Hacktivism

Objectives: Political influence

Anonymous

Anonymous

Wikileaks

What can we do?

Manage

risk

Don’t be a

low hanging fruit

Stand your ground

Get threat

intelligence

Assume you’ll be compromised

Report the incident

Share data !

Conclussions

We are screwed

Accept it

Do something about it

@antoniosanzalc

http://www.equipoazul.es

http://bit.ly/1fjGtQg

Be careful out there