Cyber Risks

The 3 components
of risk

Vulnerability

Threat

Impact

RISK = VULNERABILITY * THREAT * IMPACT

JOsef W. - CHAIRMAN, OCTOPUS GROUP

discover what happened!

CYBER Threat Landscape

Statistics 2014 (CIRCL)

Motivations

REal life examples

VOIP/PBX ATTACKS

• scan for vulnerable PBX interfaces or VoIP servers
• such systems are often outsourced or outside security scope
• direct financial benefit by toll fraud

banking/presidential fraud

• malware, phishing or social engineering (via phone) to access mailboxes
• banking details changed / transactions executed
• extreme cases: dedicated malware targeting corporate banking systems
• targets: mainly huge invoice processing organisations

RANSOMWARE

• recent ransomware encrypts harddisk as well as removal drives and shares
• BYOD increased cases
• 50% of LU victims had a non-functionnal/incomplete backup
• ransomDDOS on the rise

PLUG AND PRAY

PREVENTION...

• PEOPLE (awareness, training, competences...)
• TECHNOLOGY (AV, WAF, IPS, SIEM, SUS...)
• ORGANISATION (policies, procedures, responsabilities...)
• COMPLIANCE (privacy, IP...)

...IS NOT ENOUGH

• be organised, have a CISO
• you are already compromised
• be proactive, detect and handle (CERT)
• prepare for a crisis
• get an insurance

THERE ARE NO SMALL INCIDENTS

• Minor incidents escalate fast
• Exploitation is still too easy
• Multi-compromises are used and abused
• IoT makes it even worse
• Attacks & attackers don't stop at the borders

DETECTION/CLEANING TOO SLOW

DON'T SUFFER IN SILENCE

CASES.LU

• security startup kit
• awareness & training
• customised check-up (diagnostic)
• MONARC (optimised risk assessment method & tool)

CIRCL.LU

• incident handling / coordination
• DFIR tools & services
• data feeds & early warning
• threat & intelligence sharing
• joint R&D and innovation
• technical training & courses

Pascal Steichen
SECURITY
MADEIN.LU

Untitled Slide