ciberseguridad, retos y rutas de acción. 9o día de la seguridad

9o. Día de la Seguridad Autumn Edition @ Expo Tecnología TICs y Seguridad 2014 @ CINTERMEX - México

Asociación Latinoamericana de Profesionales en Seguridad Informática A.C. (establecida

en 1995)

ALAPSI A.C. www.alapsi.org 1

Crear y consolidar una cultura ética en el ejercicio de la seguridad informática

9º Día de la SeguridadAutumn Edition

11 de Septiembre 2014Monterrey, Nuevo León





en 1995)



Gonzalo EspinosaPresidente 2013--2016

Asociación Latinoamericana de Profesionales en Seguridad Informática, ALAPSI A.C.http://mx.linkedin.com/in/gonzaloespinosasp

https://twitter.com/G_Espinosa_Mx

[email protected]

[email protected]


Monterrey, Nuevo León. México

11 Septiembre 2014

Ciberseguridad, retos y rutas de acción


Agenda

• Objetivo

• Contexto

• Ciberseguridad

• Retos

• Rutas de acción

• Sesión de preguntasy respuestas



en 1995)



Objetivo

• En esta sesión, el asistente será capaz de identificar con beneficio para con sus organizaciones, los principales retos en la gestión de la Ciberseguridad en los Sectores de la Sociedad

– Iniciativa Privada

– Prensa

– Académico

– Gubernamental y

– Sociedad en General


CONTEXTO



en 1995)



Acciones alineadas con la Misión de la ALAPSI A.C.

• Integrador de profesionales

– En Seguridad Informática de Latinoamérica.

• Proveer conocimiento

– Con seminarios y certificar.

• Emitir juicios independientes, objetivos e imparciales

– Al evaluar servicios, productos y metodologías.

• Proponer y desarrollar

– Proyectos de investigación.

• Promover el desarrollo de

– Legislación y normatividad.

Co

nte

xto


Código de Ética ALAPSI A.C. Co

nte

xto



en 1995)



Comisión de Gobernabilidad - Presidencia de la ALAPSI A.C.Principios

Co

nte

xto


Comisión de Gobernabilidad ALAPSI A.C. 2013-2016

Dirigir

Evaluar

Monitorizar

Buen Gobierno

ALAPSI A.C.

Procesos de la Asociación

Proyectos ALAPSI A.C. Operaciones ALAPSI A.C.

Pla

ne

s

Po

líti

cas

Pro

pu

est

as

De

sem

pe

ño

Cu

mp

lim

ien

to

Presiones del

Entorno

Necesidades del

Entorno



en 1995)



Comisión de Gobernabilidad ALAPSI A.C. 2013-2016Gestión de Propuestas

http://dstudio.ubc.ca/toolkit/processes/

http://ops.fhwa.dot.gov/publications/seitsguide/section6.htm http://electronicdesign.com/eda/surveying-verification-landscape

http://www.studiothick.com/how-we-work/




en 1995)



Comisión de Vigilancia, Honor y JusticiaALAPSI A.C. 2013-2016

Adrián Palma

Comisión de Vigilancia, Honor y Justicia


Construcción y Mantenimiento de Imagen OrganizacionalCompetencias emocionales

Fuente: www.recursosyhabilidades.com/blog/?cat=4



en 1995)



Ciberseguridad - Contexto


Ciberseguridad – Contexto



en 1995)



Ciberseguridad – Contexto• Intergovernmental Organizations

– Asia-Pacific Economic Cooperation (APEC)

– Council of Europe – European Union– G8– Internet Governance Forum (IGF)– North Atlantic Treaty Organisation

(NATO)– Organisation for Economic Co-operation

and Development (OECD)– Organisation for Security and

Cooperation in Europe (OSCE) – Organisation of American States (OAS)– United Nations (UN) – Asociación Latinoamericana de

Profesionales en Seguridad Informática A.C.

• Intergovernmental initiatives– Conferences on Cyberspace– Meridian Process– Día dela Seguridad ALAPSI AC


Ciberseguridad – Contexto• 2020 Internet

– Security, pp 66 y 67

– SMEs, pp 38

• Future Research in Systems Security

– Pp 104 - 106



en 1995)



Ciberseguridad & FuncionalidadContexto 2020


CiberseguridadContexto 2020

• Managing Threats and Vulnerabilities in the Future Internet

• The Red Book

– A Roadmap for Systems Security Research

• Abstract

– The Red Book presents a roadmap in the area of systems security, as prepared by the SysSecconsortium and its constituency in the first half of 2013.

• www.syssec-project.eu



en 1995)



CiberseguridadContexto 2020• Managing Threats and Vulnerabilities in the Future

Internet• The Red Book

– A Roadmap for Systems Security Research

• Advisory document – For policy makers and researchers who would like to have

animpact on the Security of the Future Internet

• Abstract– The Red Book presents a roadmap in the area of systems

security, as prepared by the SysSec consortium and its constituency in the first half of 2013.

• www.syssec-project.eu


CiberseguridadContexto 2020

• Policy Makers may want to focus on Chapter 1 at page 3 which provides a short Executive Summary of the book and on Chapter 14 in page 103 which describes Grand Challenge Research Problems in the area which can be solved only with the collaboration of several Research Organizations e.g.

ALAPSI A.C.-Investigaciones, and the support of leading funding Agencies.

• Related work may be found in the second part of the book in page 107, which provides a good overview of other Research Roadmaps from Europe and from the States.



en 1995)



RETOS


Funcionalidad & Ciberseguridad – Retos

• People: – What are the challenges to making the Internet work for people, as users, citizens,

individuals, family members, carrying out our daily lives, bringing up families, working, living

• Business: – What are the challenges to making the Internet work for business, growing,

innovating, being efficient, across different sectors,

• Society: – What are the challenges to making the Internet work for society, i. e. collectively,

thinking about some of the big shifts

• Technology: – What are the big technical challenges to creating the future Internet



en 1995)



Funcionalidad & Ciberseguridad – Retos

• Business, Economy– Future Manufacturing challenges:

Interoperable Enterprise environments; risk management and forecasting; and tacit knowledge management across the supply chain

– Extensive Monitoring, Evaluation, Risk Management and Forecasting

– Enterprise– Social knowledge media– Knowledge Clouds– Digital Commoditization– Interoperability Service Utility– We can’t make all the risks disappear -

Business must be able understand and make decisions about risk, based holistic view of threats and security situation

– Turning security management from an art into a science; metrics, assurance and policy.

• People, Users, Societal Challenges– Cities– Challenges for accessibility: familiarity with

accessibility requirements, implementing design for accessibility, and making interactive multimedia applications accessible.

– People must understand and be in control of their exposure to Internet risks

– Identity and privacy capabilities in the future

– Internet must respond to changing policy, services, and individuals needs and requirements

– New forms of digital content, evolving business models, whither DRM?


Funcionalidad & CiberseguridadRetos Tecnológicos

• Developing Correct Software

• The challenge of capacity and resource management in the network (limits of capacity and performance)

• Networks that support smart applications embedded in everything from infrastructure to cities to services will be challenging to develop

• Developing and operating secure future Internet systems necessitates taking a systems approach and having the tools to address

• Services

• The framework for capturing, storing, and managing sophisticated multidimensional objects that could support real augmented realities does not exist

• Future Internet clients will be sophisticated collections of smart devices, situated computing, and services. Today’s programming paradigms for web-clients do not support this model well at all.

• Challenges to be addressed. Pp 45



en 1995)



RUTAS


Funcionalidad & CiberseguridadRutas de acción

• Business– Overview of research areas to be

addressed

– Future Internet Enterprise Systems

– R&D Theme: Future Internet Enterprise Systems for Manufacturing

• People / Social– Telepresence

– Interaction

– Cities

– Societally important applications of Future Internet

– Privacy

– Inclusiveness



en 1995)




• Technical

– Performance of Future Networks

– Making IT Greener (reducing energy consumption, lifecycle, resources,)

– Internet of Things

– Security

– 3D-Virtual 3D reconstructions of the real world

– Cross disciplinary research

– Open to different cultures and excluded/disadvantaged groups

– Innovation, Involving, benefiting, stimulating startup business and SMEs

– Evaluation methodologies

– Experimental approaches

– Architecture

• Security

– Better Languages And Tools For Specifying and Developing Secure Software

– Improved Assurance Methods

– Privacy-Aware Software Development

– Cooperation On Issues Of National Security

– Development Of Universally Acceptable Digital Identifiers

– Development Of Rich And Expressive Security Models

– Development Of Tools For Tracking Data

– Enhancement Of Legislation To Accommodate Technological

– Developments

– Education Of Citizens

– Research And Investment In Security Tools And Technology

– Consideration Of Novel, Radical Approaches

Fuente: 2020 Future Internet Assembly RReport. Pp. 65



• Technical

– Performance of Future Networks

– Making IT Greener (reducing energy consumption, lifecycle, resources,)

– Internet of Things

– Security

– 3D-Virtual 3D reconstructions of the real world

– Cross disciplinary research

– Open to different cultures and excluded/disadvantaged groups

– Innovation, Involving, benefiting, stimulating startup business and SMEs

– Evaluation methodologies

– Experimental approaches

– Architecture



en 1995)



CONCLUSIONES


Conclusiones

• Un reto implica un cambio.

– Llevar el estatus actual a un estatus nuevo.

• Beneficios inmediatos para el individuo y por ende para su organización

– Conocer la existencia de retos en ciberseguridady su gestión facilita ubicar situación actual

– Identificar escenarios

– Variables controlables

– Variables no controlables

– Tendencias

– Requerimientos

– Recomendaciones

– Responsables

• Todo en el contexto de los Sectores de la Sociedad

– Iniciativa Privada

– Prensa

– Académico

– Gubernamental y

– Sociedad en General



en 1995)



Gonzalo EspinosaPresidente 2013--2016

Asociación Latinoamericana de Profesionales en Seguridad Informática, ALAPSI A.C.http://mx.linkedin.com/in/gonzaloespinosasp

https://twitter.com/G_Espinosa_Mx

[email protected]

[email protected]


Monterrey, Nuevo León. México

11 Septiembre 2014

Ciberseguridad, retos y rutas de acción



11 de Septiembre 2014Monterrey, Nuevo León