CYBERWAR CYBER FACES. Ivan Bütler. Compass Security AG Compass Security AG. Slide 1

Größe: px

Ab Seite anzeigen:

Download "CYBERWAR CYBER FACES. Ivan Bütler. Compass Security AG www.csnc.ch. Compass Security AG. www.csnc.ch. Slide 1"

Bernd Busch
vor 8 Jahren
Abrufe

1 CYBERWAR Ivan Bütler Compass Security AG CYBER FACES Slide 1

2 Cyber War define it! RSA Breach Slide 2

3 Definition of a traditional conflict/war War is a state of organized, armed and often prolonged conflict carried on between states, nations, or other parties. Such a conflict is always an attempt at altering either the psychological or material inter-group relationship of equality or domination between such groups Slide 3

Such a conflict is always an attempt at altering either the psychological or

4 When do we name a conflict as war? War is an act of violance with direct impact to our society, social live, wealth, enonomy and health. Slide 4

5 Definition: Cyber War Cyber War is an act of violance in the cyber space with direct impact to our society, social live, wealth, enonomy and health. This war is performed by cyber troops Problem: Hard to define the difference to cyber espionage or cyber crime Slide 5

6 Hacking Methodology HOW TO GAIN UNAUTHORIZED ACCESS INTO FOREIGN COMPUTERS OR NETWORKS Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Tel Fax

AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Tel +41

7 Direct Attack Server Exploitation BLOCKED PASSED BLOCKED Slide 7

8 Man in the Middle Man in the Middle Phishing Slide 8

9 Indirect Attack Virus and Trojan Malware Mobile Devices W-LAN PASSED Slide 9

10 Advanced Persistent Threat (APT) Agent Agent Zombie Host Zombie Host C&C Server Agent Zombie Host Zombie Host Slide 10

11 Advanced Persistent Threat (APT) Agent Agent Zombie Host Zombie Host C&C Server Agent Zombie Host Zombie Host Slide 11

12 APT == Cyber Warfare Framework Vulnerability Research Exploit Development Packer Polymorphic Anti-Reverse Infection Department Persistence Layer (Hiding / Rootkit) C&C Mission Control High Availability Crypto Development Update Mechanism Slide 12

Department Persistence Layer (Hiding / Rootkit) C&C Mission

13 Targets of a cyber war Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Tel Fax team@csnc.ch

14 Critical Infrastructures - Switzerland Slide 14

15 1) Cyber Attacke: Administration Slide 15

16 2) Cyber Attack: Energy Industry Slide 16

17 3) Cyber Attacke: Recycling Slide 17

18 4) Cyber Attack: Finance Slide 18

19 5) Cyber Attack: Health Slide 19

20 7) Cyber Attack: IT & Communication Slide 20

21 8) Cyber Attack: Food Slide 21

22 9) Cyber Attack: Public Security Slide 22

23 10) Cyber Attack: Transport Slide 23

24 Hacking Trends Slide 24

25 Hacking Trends Slide 25

26 How Governments respond Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Tel Fax

27 USA Cyber is new domain of operation Land Sea Air Space Cyber Cyber Troops Slide 27

28 USA Cyber is new domain of operation On June 23, 2009, the Secretary of Defense directed the Commander of U.S. Strategic Command to establish USCYBERCOM. Director of NSA and Commander of Cybercom USA: Cyber Command Slide 28

29 USA - Act of War (May 31, 2011) ACT OF WAR The Pentagon's forthcoming cyber warfare strategy will reframe cyber attacks as possible acts of war, which would allow the US to respond to certain attacks on critical systems with force. US government and military systems have been facing cyber attacks from foreign powers more at least eight years. Attackers have stolen sensitive information, including data about the F35 fighter. Slide 29

30 Germany NCAZ De Maizière informs about NCAZ Am 1. April 2011 wurde das neue "Nationale Cyber- Abwehrzentrum" (NCAZ) in Betrieb genommen, ein "Nationaler Cyber- Sicherheitsrat" (NCS) koordiniert Schutzmaßnahmen und Netzpolitik Slide 30

31 Switzerland? Herr Div. Kurt Nydegger wird am 10. Dezember 2010 vom Bundesrat mit der Betreuung des Projektes Cyber Defense und der Entwicklung einer Nationalen Strategie für Cyber Defense beauftragt. Kurt Nydegger Ende August wird das Dokument soweit gediehen sein, dass es in eine umfassende Vernehmlassung gehen kann. Unmittelbar nach der Genehmigung durch den Bundesrat im Dezember 2011 werden wir mit der Umsetzung der entschiedenen Massnahmen beginnen. Slide 31

32 Recommendation Was tun, um nicht zu stolpern Slide 32

33 Take your responsibility Slide 33

34 My recommendations for the state Früherkennung & Abwehr Bereitstellung von Resourcen / Wissen Ausbau von MELANI Kapazität Vernetzung mit andern Ländern / Partnern Bereitstellung von MIL-CERT / Armee Kapazität Gesetzliche Rahmenbedingungen CyberWar definieren Das implementierte Cyber Defense muss beübt werden Manöver analog zum US Cyber Storm Slide 34

35 My recommendations for a company Wiedergeburt des todgesagten IDS/IPS Präventive Einheit mit 7x24h Support Jedes Unternehmen ist primär selbst verantwortlich für die Abwehr Der Staat ist die Second Line of Defense und der Vermittler / Supporter Etablieren Sie Ihre Company Cyber Defense Strategie Business Continuity Management Slide 35

36 Thank you! Slide 36

37 Compass Security AG Compass Security AG Werkstrasse 20 P.O. Box 2037 CH Jona SG Tel Fax team@csnc.ch Slide 37

Ähnliche Dokumente

IBM Security Systems: Intelligente Sicherheit für die Cloud

IBM Security Systems: Intelligente Sicherheit für die Cloud : Intelligente Sicherheit für die Cloud Oliver Oldach Arrow ECS GmbH 2011 Sampling of Security Incidents by Attack Type, Time and Impact Conjecture of relative breach impact is based on publicly disclosed