CIBERAMENAZAS : ¿ A QUÉ NOS ENFRENTAMOS ?

Antonio Sanz

Information Security Consultant

@antoniosanzalc

http://www.s2grupo.es

http://www.securityartwork.es

#si2015

http://bit.ly/1y92QXG

Dependance on IT

IT is everywhere

We are vulnerable

Attribution is complicated

International law is … flaky

Cyberwar

Cyberterrorism

Cyberespionage

Objective: critical infrastructures

Main targets: SCADA systems

Cyberarmies

Stuxnet

Stuxnet

Georgia & Russia

Cyberwar

Cyberterrorism

Cyberespionage

Objectives: Get influence through

violent actions

Objective: Political influence

-1%

- $136.000M

Myth or reality ?

Technical (in)competence

Cyberwar

Cyberterrorism

Cyberespionage

Objectives: Trade secrets & IP

APT – Advanced Persistent Threat

RSA & Lockheed Martin

Red October - Uroboros/Snake

IceFog - Mercenaries

Hi Prism !!

Hi Chinese Great Firewall !!

What can we do

about it?

Manage

risk

Don’t be a

low hanging

fruit

Get some (advanced) help

Get threat

intelligence

Assume you’ll be compromised

Report the incident

Stand your ground

@antoniosanzalc

http://www.s2grupo.es

http://bit.ly/1y92QXG

Be careful out there