M7 internet security

Introduction
Master Class 7
Internet Security
Josep Bardallo

2
NetworkingServices&infr.//MasterinICTStrategicManagement
13 / 11 / 2012Josep Bardallo
Internet Security: Definitions
Internet security is a branch of computer
security specifically related to the
Internet, involving Web Server security
but also network security on a more
general level as it applies to other
applications or operating systems on a
whole. Also called Cybersecurity.
Its objective is to establish rules and
measures to use against attacks over the
Internet.

3
From Internet Security Glossary, Version 2 (rfc4949)
Security is about protect resources

4
Secure Web Services is about secure CIA:
From NIST: Guide to Secure Web Services (SP800-95)

5
Threat, attack and Vulnerability:
From CISSP Guide to Security Essentials

6
Internet Security: Evolution
• From Information Security to
Information Assurance (process of
continuous Analysis and Risk
Management
• Information assurance (IA) is the
practice of assuring information
and managing risks related to the
use, processing, storage, and
transmission of information or
data and the systems and
processes used for those
purposes. Information assurance
includes protection of the
integrity, availability,
authenticity, non-repudiation and
confidentiality of user data. It
uses physical, technical and
administrative controls to
accomplish these tasks

7
Internet Security Threats
Main Cybersecurity Threats
•Threats against information
• Spy
• Information Theft
• Identity Theft
• Fraud
• APT (advanced Persistent threats)
•Threats against infrastructure
• Critical Infrastructures attacks
• Networks and systems attacks
• Industrial systems attacks
• Malware infection
• Third party attacks

8
Internet Security Threats: 2012 Real data

9
Attack types
 From States
 From private entities
 Terrorism, political or ideological attacks
 Hacktivism: Professional Hacking
 Low profile attack
 Insiders attacks

10
State promoted Attacks
 Estonia 2007
 Russia to Georgia (2008) before terrestrial
invasion
 Israel/USA to Iran with Stuxnet
 USA classified networks from Chinese hackers

11
Professional Hacking: DDoS, trojan
 DDoS http://www.youtube.com/watch?v=c9MuuW0HfS

12
Professional Hacking: Trojan

13
Professional Hacking: Socks bot

14
Professional Hacking: Spam service

15
Professional Hacking: Botnet

16
Professional Hacking: Zeus Botnet

17
Professional Hacking: Any kind of hacking

18
Professional Hacking: Value of Hacked PC

19
Professional Hacking: Top attack method by vertical

20
Low profile attacks: More easy
http://builtwith.com/  Easy to obtain info from any web

21
Low profile attacks: More easy. Steps
http://www.t1shopper.com/tools/port-scan//  Easy to open ports

22
Data Breach's in 2012
 Global Payments (1.5 million records)
 Yahoo! (450k passwords)
 Wyndham Hotels (600k credit cards)
 eHarmony (1.5 millions passwords)
 Linkedin (6.5 millions passwords)
 Zappos (24 millions records)
 Gamigo (3 millions records)
 Texas Attorney General’s Office (6.6 million recors)
Average insurance cost per databreach: $3.7M

23
Malware
 31,6 Worldwide PC infected by malware
 24% infected by a Trojan (16% in Spain)

24
New attacks

25
Today Threats

26
Defense technologies ?

27
Internet Security Defense Technologies

28

29

30

31
Bibliography
 http://www.ietf.org/rfc/rfc2828.txt
 http://tools.ietf.org/html/rfc4949
 http://www.itu.int/rec/T-REC-X.800-199103-I/e
 http://csrc.nist.gov/publications/nistpubs/800-95/SP800-95.pdf
 http://www.ismsforum.es/ficheros/descargas/informe-scsi1348666221.pdf
 http://www.t1shopper.com/tools/port-scan/
 http://builtwith.com/
 http://www.trendmicro.com/cloud-content/us/pdfs/security-intelligence/white-papers/wp-russian-
underground-101.pdf
 http://www.businessinsurance.com/article/20121009/NEWS07/121009907?template=smartphoneart
 http://www.netdiligence.com/files/CyberClaimsStudy-2012sh.pdf
 http://pandalabs.pandasecurity.com/es/principales-amenazas-para-tu-ordenador-troyanos-infografia/
 http://www.cloudtweaks.com/2012/10/cloud-infographic-safeguarding-the-internet/
 http://www.akamai.com/html/technology/dataviz1.html
 https://www.bit9.com/cyber-security/graphic.php
 http://www.reg8.net/users/0012/expo2011/gartners_hype_cycle_special__215667.pdf

M7 internet security

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Viewers also liked

Viewers also liked (9)

Similar to M7 internet security

Similar to M7 internet security (20)

More from Josep Bardallo

More from Josep Bardallo (17)

Recently uploaded

Recently uploaded (20)

M7 internet security