360 likes | 502 Views
CYBER scrapings putting our 2 cents in . Christian Van Heurck CERT.be coordinator CERT.be team. Telenet Security Day. Mechelen - 06/02/2014. goals. t he cyber t hreat is real a lso in .be everybody is a target we all are losing the battle this costs €
E N D
CYBER scrapingsputting our 2 cents in .. • Christian Van Heurck • CERT.be coordinator • CERT.be team Telenet Security Day Mechelen - 06/02/2014
goals • the cyber threat is real • also in .be • everybody is a target • we all are losing the battle • this costs € • lack of awareness at all levels • be prepared • act now! Telenet Security Day CERT.be 2 Mechelen - 06/02/2014
the cyber threat is real Telenet Security Day CERT.be 3 Mechelen - 06/02/2014
types of cyber threats - historical cyber security cyber crime others Telenet Security Day CERT.be 4 Mechelen - 06/02/2014
types of cyber threats – anno 2014 Telenet Security Day CERT.be 5 Mechelen - 06/02/2014
reality 2013 • almost all cyber security issues lead to cyber crime • espionage included Telenet Security Day CERT.be 6 Mechelen - 06/02/2014
the cyber threat is • also real in .be Telenet Security Day CERT.be 7 Mechelen - 06/02/2014
CERT.be anthology • Belgacom • DDoS on the rise • open DNS resolvers abused for amplification attacks • ntp servers abused • phishing & spearphishing • identity theft • mobile targeted • every (with an) OS targeted Telenet Security Day CERT.be 8 Mechelen - 06/02/2014
CERT.be anthology • hacktivism • blackmail (Rex Mundi) • botnet drones • botnet C&C • hacked servers abused for attacks and malware distribution • waterhole attacks • top level DNS compromise • ransomware Telenet Security Day CERT.be 9 Mechelen - 06/02/2014
CERT.be anthology • mass compromise of vulnerable websites • Diginotar • abuse of forged and/or stolen certificates • Bit9, RSA, Microsoft, Twitter, Facebook, Apple, Google, Adobe, .. • IXP targeted • hosters under daily attacks Telenet Security Day CERT.be 10 Mechelen - 06/02/2014
CERT.be anthology • citizens targeted • big companies targeted • intermediate companies targeted • SME’s targeted • Port of Antwerp • Critical Infrastructure • GOV targeted • Banks targeted • NMBS Telenet Security Day CERT.be 11 Mechelen - 06/02/2014
and there’s more happening .. • EU legislation • Privacycommission • BIPT-IBPT Telenet Security Day CERT.be 12 Mechelen - 06/02/2014
and one more thing .. • all the old school stuff is still out there too Telenet Security Day CERT.be 13 Mechelen - 06/02/2014
everybody is a target Telenet Security Day CERT.be 14 Mechelen - 06/02/2014
time for some numbers Telenet Security Day CERT.be 15 Mechelen - 06/02/2014
# Reports & Incidents / Year Telenet Security Day CERT.be 16 Mechelen - 06/02/2014
# Reports & Incidents / Month Telenet Security Day CERT.be 17 Mechelen - 06/02/2014
types of incidents in 2013 Telenet Security Day CERT.be 18 Mechelen - 06/02/2014
# Zombies 500.000 in 2013 Telenet Security Day CERT.be 19 Mechelen - 06/02/2014
Telenet Security Day CERT.be 20 Mechelen - 06/02/2014
we are losing this battle Telenet Security Day CERT.be 21 Mechelen - 06/02/2014
this costs € Telenet Security Day CERT.be 22 Mechelen - 06/02/2014
WT .. ???? Telenet Security Day CERT.be 23 Mechelen - 06/02/2014
lack of awareness at all levels Telenet Security Day CERT.be 24 Mechelen - 06/02/2014
this is how we perceive it Image courtesy of tropical.pete – Flickr.com Telenet Security Day CERT.be 25 Mechelen - 06/02/2014
this is how we perceive it Image courtesy of tropical.pete – Flickr.com Telenet Security Day CERT.be 26 Mechelen - 06/02/2014
acknowledgethe cyber threat Telenet Security Day CERT.be 27 Mechelen - 06/02/2014
= create awareness Telenet Security Day CERT.be 28 Mechelen - 06/02/2014
then act efficiently Telenet Security Day CERT.be 29 Mechelen - 06/02/2014
NOW! Telenet Security Day CERT.be 30 Mechelen - 06/02/2014
please … Telenet Security Day CERT.be 31 Mechelen - 06/02/2014
report tocert@cert.be Telenet Security Day CERT.be 32 Mechelen - 06/02/2014
contactinfo@cert.bepress@cert.be Telenet Security Day CERT.be 33 Mechelen - 06/02/2014
34 Mechelen - 06/02/2014
brochure & 1-pager Telenet Security Day CERT.be 35 Mechelen - 06/02/2014
download links • brochure: • https://www.cert.be/pro/files/Brochure_FRA.pdf • https://www.cert.be/pro/files/Brochure_NDL.pdf • https://www.cert.be/pro/files/Brochure_ENG.pdf • 1-pager: • https://www.cert.be/pro/files/Onepager_FRA.pdf • https://www.cert.be/pro/files/Onepager_NDL.pdf • https://www.cert.be/pro/files/Onepager_ENG.pdf Telenet Security Day CERT.be 36 Mechelen - 06/02/2014