[CLASS 2014] Palestra Técnica - Samuel Linares
•
0 gostou•649 visualizações
Título da Palestra: Ligando proteção da infraestrutura crítica e segurança cibernética industrial: Existe uma Cyber-Tsunami na espera?
Recomendados
Recomendados
Mais conteúdo relacionado
Mais procurados
Mais procurados (20)
Destaque
Destaque (7)
Semelhante a [CLASS 2014] Palestra Técnica - Samuel Linares
Semelhante a [CLASS 2014] Palestra Técnica - Samuel Linares (20)
Mais de TI Safe
Mais de TI Safe (20)
Último
Último (20)
[CLASS 2014] Palestra Técnica - Samuel Linares
- 1. 1 Linking Critical Infrastructure Protection and Industrial Cybersecurity: Is there a Cyber-Tsunami in waiting? Samuel Linares Industrial Cybersecurity Center (CCI) Director
- 4. 1957 Andreanof Islands EarthquakerMw9.1 1960 Chile Great EarthquakeMw9.5 Earthquake Research Institute, University of Tokyo 1964 Alaska EarthquakeMw 9.2 1952 Kamchatka EarthquakeMw9.0 2011 East Japan Great EarthquakeMw 9.0 2004 Indian Ocean EarthquakeMw9.0 2010 Chile EarthquakeMw8.8
- 6. Convergence
- 7. Physical & CyberWorlds Convergence Consequences: Intangible Web Portal unavailable No email Consequences: Tangible, Concrete Production Losses Environmental Damages Public Health Lower Company Valuation
- 8. 8 Convergence IT in the Industrial World
- 9. IT in the Industrial World Industrial Control Systems are NOT isolated anymore. They have moved Industrial devices have inherited all problems from IT from using dedicated serial lines to Ethernet or WiFi Now, most of industrial protocols are running over TCP/IP Industrial Control Systems use general purpose operating systems
- 10. 10 Different Cultures Convergence IT in the Industrial World
- 11. Plant vs IT vs Security Plant / IT Conflict: – “Watertight” environments. “Don’t get into my lot, and I won’t into yours” –Attention is not paid to communication interfaces between both worlds – Connection interfaces are no man’s land, and many times, unknown (others WWW… Wild Wild West ☺)
- 12. 12 ¿Security? Different Cultures Convergence IT in the Industrial World
- 13. SECURITY ¿Cyber Security? Physical Security Industrial Safety Environmental Safety
- 14. 14 Stuxnet
- 15. Stuxnet
- 16. 16 Project Basecamp & Project Robus
- 17. Project Basecamp SCADA Security Scientific Symposium (S4)
- 18. 18 Project Robus: Master Serial Killer • Objective: Analysis of Implementation of Industrial Protocols (First: DNP3) • DNP3: 15 advisories, 28 tickets reported • Fuzzing techniques • All devices analyzed vulnerables: only 2 ok! • Implementaciones se limitan a garantizar funcionalidad, pero no la seguridad • Hundreds of thousands vulnerable devices: much of them connected to Internet
- 19. Smart Grid and Internet of Things are coming… 19
- 20. Smart Grid
- 21. Internet of Things Internet de las Cosas
- 22. 22 Cybersecurity Strategies and Regulations
- 23. European Cyber Security Strategy CYBERSECURITY FRAMEWORK CIP Regulations
- 24. 24 Shodan
- 25. Shodan (www.shodanhq.com) • Internet search engine that indexes internet-connected services response (FTP, SSH, Telnet, HTTP, HTTPS, SNMP, uPNP, SMB…) • Provide cccess to millions of Internet-connected devices
- 26. 26
- 27. 27
- 28. 28
- 29. Project SHINE SHodan INtelligence Extraction Internet-facing Industrial Systems +2.000.000 Located in United States 30% ISP’s Dynamic Addresses 80%
- 30. 30 Shodan Demo
- 33. 33
- 34. 34
- 35. 35 Who's Really Attacking our ICS Devices?
- 36. • ONLY attacks that were targeted • ONLY attempted modification of pump system • ONLY attempted modification via Modbus/DNP3 • DoS/DDoS were considered attacks Kyle Wilhoit (Trendmicro)
- 37. …on the look-out
- 40. R Collaboration Commitment Coordination “C3R: Collaboration, Coordination and Commitment based Relationships”
- 42. Industrial Cyber Security Tsunami is here… Will you keep watching? Thank you Samuel Linares - @infosecmanblog – samuel.linares@cci-es.org