![Page 1: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/1.jpg)
Cyber Security:What’s the Big Deal?
(and why it matters to you!)
Debasis Bhattacharya, UHMCJodi Ito, CISO, UH ITS
maui.hawaii.edu/cybersecurity
![Page 2: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/2.jpg)
What is Cybersecurity?cy·ber: adjectiveof, relating to, or characteristic of the culture of computers, information technology, and virtual reality. "the cyber age“
Cybersecurity: nounthe state of being protected against the criminal or unauthorized use of electronic data, or the measures taken to achieve this.
![Page 3: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/3.jpg)
“Cyber” Affects Everyone!
� Technology is deeply embedded into Critical Infrastructures
� Technology touches every facet of our lives
� Vulnerable to:� Losing access to services� Losing personal data� Financial losses
3
![Page 4: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/4.jpg)
…why Cybersecurity matters for our State� Cybersecurity is one of the most strategic threats that Federal, State
and private sector industries face in Hawaiʻi.
� Operation-critical systems in every sector have a dependency on cyber, which expands capacity and range of capability but also introduces new and evolving forms of vulnerabilities that threaten the security of our infrastructure.
� Hawaiʻi is in a very unique position – the U.S. Pacific Command, as well as the Army, Navy, Marine Corps, Air Force and Special Operations Service Commanders are all located here.
� Directly related, Oahu is home of the Pacific’s primary signals intelligence center, the National Security Agency Hawaiʻi, and its world-class all-source intelligence center, the Joint Intelligence Operations Center Pacific.
4
![Page 5: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/5.jpg)
Currents Threats
![Page 6: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/6.jpg)
https://www.cnet.com/news/wannacry-wannacrypt-uiwix-ransomware-everything-you-need-to-know/
![Page 7: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/7.jpg)
![Page 8: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/8.jpg)
![Page 9: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/9.jpg)
![Page 10: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/10.jpg)
![Page 11: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/11.jpg)
![Page 12: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/12.jpg)
![Page 13: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/13.jpg)
![Page 14: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/14.jpg)
![Page 15: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/15.jpg)
http://securityaffairs.co/wordpress/50680/cyber-crime/global-cost-of-cybercrime.html
![Page 16: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/16.jpg)
Default Passwords Online� https://cirt.net/passwords
� http://www.defaultpassword.com/
� http://www.fettesps.com/default-username-and-password-for-all-routers/
� https://krebsonsecurity.com/2016/10/who-makes-the-iot-things-under-attack/
![Page 17: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/17.jpg)
US-CERT Enterprise Recommended Mitigations
� Application whitelisting – helps prevent malicious software and unapproved programs from running
� Patch applications – e.g., Java, PDF viewers, Flash, web browsers, Microsoft Office
� Patch operating system vulnerabilities –used for extreme risk vulnerabilities
![Page 18: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/18.jpg)
Enterprise Recommendations cont.
� Control administrative privileges – based on user roles & responsibilities; secure remote access; use strong passwords; monitor logs
� Network segmentation and segregation into security zones – helps protect sensitive information & critical services
![Page 19: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/19.jpg)
Recommendations� Know your adversary
� Know your assets – hard & soft� Know & understand your network� Know what technologies are being used and why� Know your data and how it is used; know what
needs to be protected� Know your business processes
![Page 20: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/20.jpg)
Enterprise Security Considerations� Have a robust security program (e.g. NIST
800-53 or NIST 800-171)
� Develop a robust security awareness program
� Stay abreast of threats and trends
![Page 21: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/21.jpg)
It’s not if… it’s WHEN� Assume you WILL be breached or have a
“cyber” incident
� DR & BC situation
� Incident Response Plan (& practice it!)� Chain of Command� Reporting Requirements� Communications Plan
![Page 22: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/22.jpg)
Top 10 Cyber Security Practices� Recognize that YOU AND YOUR DEVICES
are a target; know the threats
� Apply operating system and application updates frequently and regularly
� Install and update protective software such as anti-virus software
22
![Page 23: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/23.jpg)
More… (#4-7)� Practice good password management; use
STRONG passwords
� Never leave your devices logged-in & unattended; control access to your machines
� Use email & the Internet safely; be careful when clicking on attachments or links in email
� Use a secure network for sensitive transactions 23
![Page 24: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/24.jpg)
Last 3… (#8-10)� Back up your data regularly and protect
sensitive information
� Monitor your accounts for suspicious activity
� Be careful what you share online & on social media (know your digital footprint)
![Page 25: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/25.jpg)
Email Address Exposure�Check if your email address has
been exposed:� https://haveibeenpwned.com
25
![Page 26: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/26.jpg)
![Page 27: Cyber Security: What’s the Big Deal?maui.hawaii.edu/cybersecurity/wp-content/uploads/sites/13/2013/01/... · …why Cybersecurity matters for our State Cybersecurity is one of the](https://reader034.vdocuments.site/reader034/viewer/2022042310/5ed7371bd37f9f58ca6a7c50/html5/thumbnails/27.jpg)
Dr. Debasis Bhattacharya, [email protected] 808.984.3619
Jodi Ito • UH Chief Information Security [email protected] • (808) 956-2400
Link to presentation: maui.hawaii.edu/cybersecurity