secure everything | protect everyone€¦ · wall street (which is all of us) learned the hard...

28
Secure Everything | Protect Everyone

Upload: others

Post on 30-Jun-2020

1 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

Secure Everything | Protect Everyone

Page 2: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

Back in 1971 Cap’n Crunch cereal gave away a plastic whistle called the Captain Crunch whistle. If you blew the toy in the cereal box it made a 2600 Hz tone.

Page 3: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

CYBERSECURITY TOUCHES ALL SECTORS

Page 4: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

What’s an APT?

Page 5: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

Sanger, D. E. (2012). Confront and conceal: Obama's secret wars and surprising use of American power. New York, NY: Crown Publishing Group.

Operation: Olympic GamesThe hype continues as Advanced Persistent Threats (APTs) become popularized

Page 6: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

Qiao, L., & Wang, X. (1999). Unrestricted Warfare. Beijing: PLA Literature and Arts Publishing House.

Stoll, C. (1989). The cuckoo's egg: Tracking a spy through the maze of computer espionage. New York, NY: Pocket Books.

Sontag, S., Drew, C., & Drew, A. L. (1998). Blind man's bluff: The untold story of American submarine espionage. New York, NY: William Morrow Paperbacks.

Page 7: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

Bowden, M. (2011). Worm: The first digital world war. New York, NY: Grove/Atlantic.

Koppel, T. (2015). Lights out: A cyberattack, a nation unprepared, surviving the aftermath. New York, NY: Crown.

Page 8: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

Goodman, M. (2015). Future crimes: Everything is connected, everyone is vulnerable, and what we can do about it. New York, NY: Doubleday.

Page 9: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

Escalate privilege and hide… Then try to become wipe-proof

Blunden, B. (2013). The rootkit arsenal: Escape and evasion in the dark corners of the system. Burlington, MA: Jones and Bartlett Learning.

Simon, M. A. (2007). Rootkits for dummies. Hoboken, NJ: John Wiley & Sons.

Page 10: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

Pick a vector

Try it out…

Hope for the best!

Page 11: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

www.kali.orgFree

Page 12: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt
Page 13: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

Speed

Wall Street (which is all of us) learned the hard way….

The value of a millisecond

Lewis, M. (2014). Flash boys: A wall street revolt. New York, NY: W. W. Norton & Company, Inc.

Page 14: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

From web domain to C-Suite in 30 seconds

Sorry Boss

Page 15: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

“Cyber” Contracts using Centrifuge Demonstration

Information Only

Valkyrie Cyber Warfare Exploitation Lab

Data Retrieved via Centurion 27 December 2011

Use speed and big data techniques to our advantage!

Page 16: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

Search “Cyber” in Centurion

Page 17: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

Contracts by award dates

Page 18: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

By Department/Value

Page 19: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

Dominant ($) NAICS518218541330541512541513541519541690541712561210

Page 20: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

ARMY, Health & Human Services, Veterans Affairs

Page 21: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

518218541330541512541513541519541690541712561210

Dominant ($) NAICS

Page 22: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

Near-term, Largest Dollar Amounts

NGENARMY Missile CommandARMY Software Engineering Center

Page 23: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

Defense has biggest investment..but

Others to considerDOE STATE OCC

DHS Treasury USSSDOT USDA Others

Page 24: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

Asymmetric Opportunities

ARMY, Health & Human Services, Veterans Affairs

Page 25: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

Expense

Income

asset

liability

opportunity costs of cyber (in)security

return on investmentof true cybersecurity Enabling

Safer CommerceSafer TourismSafer Hospital CareSecure Defense ContractsGrowth in Innovation:

UAVBig DataCyber EducationModeling and SimulationBiotechOffshore Energy

Page 26: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

2017-2018 GOAL

Use for Education/Workforce Alignment

Apply for (and win) $3 Million NSF Grant

Broadband outlook

Become a World Class ISAO+!

Cyber Intelligence Threat Hunting

Host 2018 NICE Convention

Page 27: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt

2018 NICE conventionA week of Cyber

EducationOct/Nov 2018

Page 28: Secure Everything | Protect Everyone€¦ · Wall Street (which is all of us) learned the hard way…. The value of a millisecond. Lewis, M. (2014). Flash boys: A wall street revolt