patrick miller - tackling tomorrow's biggest cybersecurity problems with real-world solutions

32
MISSION CRITICAL TECHNOLOGY TRAJECTORY EnergySec Hawaii Sessions| Marriott Waikiki Beach | Honolulu, H! | February 23 2016

Upload: energysec

Post on 07-Apr-2017

344 views

Category:

Technology


2 download

TRANSCRIPT

Page 1: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

MISSION CRITICALTECHNOLOGY TRAJECTORY

EnergySecHawaiiSessions|MarriottWaikikiBeach|Honolulu,H!|February232016

Page 2: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

HYPEREMBEDDEDNESSBORROWINGOURWAYTOVULNERABILITY

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 3: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

HYPERCONNECTIVITYSMARTEVERYTHINGWILLBECONNECTEDTOSMARTEVERYTHING

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 4: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

HYPERTEMPORALITYBLEEDINGEDGEANDRUSTINGLEGACY,LIVINGINPERFECTHARMONY

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 5: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

HYPERTELECYBERKINETICSPATIALITYTHELOGICALDISTANCEBETWEEN“CLICKY”AND“WHIRLY”

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 6: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

HYPERINNOVATIONTODAY’S COOLNEWTECHISTOMORROW’SSECURITYLIABILITY

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 7: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

HYPERAUTOMATIONBIRDS,FISH,WILDEBEESTANDMODERNINFRASTRUCTURE

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 8: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

HYPERDEPENDENCYLOSINGTOUCHWITHTHEMANUALCRAFT

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 9: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

HYPERSENSITIVITYREPLAYATTACKS, FOREVER-DAYSANDDEADENGINEERS

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 10: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

ADAPTIVE ADVERSARIESTHEYHAVETHREETHINGSYOUDON’T:PEOPLE,MONEYANDTIME

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 11: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

WHEN ADVANCED ISN’TSPREADSHEETS, PDFs, NAKEDCELEBRITIESANDHANLON’SRAZOR

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 12: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

HIGH VALUE TARGETHISTORY,INTERDEPENDENCY ANDTHEDUHFACTOR

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 13: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

THE CAVALRY IS NOT COMINGWHENITCOMESTOCYBERSECURITY, YOU’REONYOUROWN

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 14: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

THREE KINDS OF LIESINSIDERTHREATSAREN’TALWAYSOUTSIDERS

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 15: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

HACKERS ARE FASTER THAN LAWSYOUCANPRESCRIBEACTION,BUTYOUCAN’TPRESCRIBEATTITUDE

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 16: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

HARD SECURITY TRUTHBESTSECURITYCOMPANIES&TECHNOLOGIESHAVEBEENHACKED

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 17: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

REALITY CHECKAIRGAPS,OBSCURITY,REDUNDANCY, ATTRIBUTIONANDOTHERMYTHS

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 18: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

GONE TODAY, HERE TOMORROWSECURITY ISNOTADESTINATION, IT’SAJOURNEY

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 19: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

THAT DAY YOU BECAME A BANKDATAISYOURFUTUREORITISN’T

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 20: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

BIG DATA IS OLD NEWSNOONEKNOWSDATALIKESCADAKNOWSDATA

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 21: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

AWARE PERSON SYSTEMSITUATIONAL AWARENESS, EXPERIENCEANDTHESPIDEY SENSE

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 22: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

SUPPLY-CHAINMAILPROCUREMENTLANGUAGE,CONTRACTSANDUSERGROUPS

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 23: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

BOUNDARYLESSNESSREDUCENETWORKANDSYSTEMSURFACEAREA

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 24: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

THE BEST OFFENSEBUILDADEFENDABLEENVIRONMENT

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 25: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

KEYS: CAR OR REMOTE ACCESS?DOYOUREALLYNEEDTOHAVECONTROLACCESSFROMANYWHERE?

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 26: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

MANAGE AUTHENTICATIONPLEASE,MORETHANONECREDENTIAL TORULETHEMALL

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 27: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

INCLUDE VS. EXCLUDEWHITELISTING, BUTCAREFULLY

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 28: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

KNOW YOUR SYSTEMSCHANGE,CONFIGURATIONANDPATCHMANAGEMENT

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 29: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

MONITOR ALL THE THINGSDISKSPACE, BANDWIDTH,SIEMSANDHUMANGUESSING

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 30: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

TIME, TOOLS AND MATERIALSRESILIENCE=BALANCEDPREVENTION,DETECTIONANDRESPONSE

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 31: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

BEER-ISAC WORKSHOP

SOLVINGTHEIMPOSSIBLE:EACHGROUPWILLDELIVER3PROBLEMSAND3SOLUTIONSGROUP1:BOARDLEVELCYBERSECURITY ENGAGEMENT

GROUP2:CYBERSECURITY INSURANCEGROUP3:THREATINTELLIGENCEANDINFORMATIONSHARING

GROUP4:VULNERABILITYDISCLOSUREGROUP5:REGULATORYAPPROACHTOCYBERSECURITY

[email protected]|@patrickcmiller|+1.503.272.1414|www.archerenergysolutions.com

Page 32: Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real-world Solutions

CREDITSTITLESLIDE– HTTPS://FLIC.KR/P/PRYZXB

HYPEREMBEDDEDNESS– HTTPS://FLIC.KR/P/DBXNKKHYPERCONNECTIVITY– HTTPS://FLIC.KR/P/RGDKDLHYPERTEMPORALITY – HTTPS://FLIC.KR/P/E8QZWX

HYPERTELECYBERKINETICSPATIALITY– HTTPS://FLIC.KR/P/8TV93KHYPERINNOVATION– HTTPS://FLIC.KR/P/6DMHPFHYPERAUTOMATION– HTTPS://FLIC.KR/P/97VZ2THYPERDEPENDENCY – HTTPS://FLIC.KR/P/54IIDHHYPERSENSITIVITY – HTTPS://FLIC.KR/P/4QQ592

ADAPTIVEADVERSARIES– HTTPS://FLIC.KR/P/QKTEJUWHENADVANCEDISN’T– HTTPS://GOO.GL/WRRMC1

HIGHVALUETARGET– HTTPS://FLIC.KR/P/5V4TZUTHECAVALRYISNOTCOMING– HTTPS://FLIC.KR/P/EE6XR3

THREEKINDSOFLIES- HTTPS://GOO.GL/UCVDD8HACKERSAREFASTERTHANLAWS– HTTPS://FLIC.KR/P/9FPWFJ

HARDSECURITYTRUTH– HTTPS://FLIC.KR/P/5PZ1UJREALITYCHECK– HTTPS://FLIC.KR/P/UY1P7R

GONETODAY,HERETOMORROW- HTTPS://FLIC.KR/P/E5QHQYTHATDAYYOUBECAMEABANK–HTTPS://FLIC.KR/P/OYU1RA

BIGDATAISOLDNEWS– HTTPS://FLIC.KR/P/DKRCQYAWAREPERSONSYSTEM– HTTPS://FLIC.KR/P/73LXWR

SUPPLY-CHAINMAIL– HTTPS://FLIC.KR/P/AVCDBXBOUNDARYLESSNESS - HTTPS://FLIC.KR/P/FDWO2W

THEBESTOFFENSE- HTTPS://FLIC.KR/P/8ZZQQGKEYS:CARORREMOTEACCESS?- HTTPS://FLIC.KR/P/FLJUZQ

MANAGEAUTHENTICATION- HTTPS://FLIC.KR/P/BC7E9TINCLUDEVS.EXCLUDE- HTTPS://FLIC.KR/P/AUWPZPKNOWYOURSYSTEMS- HTTPS://FLIC.KR/P/DZACMA

MONITORALLTHETHINGS- HTTPS://GOO.GL/XV3PABTIMETOOLSANDMATERIALS– HTTPS://FLIC.KR/P/5GPHTY

BEER-ISACWORKSHOP- HTTPS://FLIC.KR/P/8VWTHD

[email protected]|@patrickcmiller |+1.503.272.1414|www.archerenergysolutions.com