CiberseguridadEventoALAPSI

9o. Día de la Seguridad Autumn Edition @
Expo Tecnología TICs y Seguridad 2014 @
CINTERMEX - México
Asociación Latinoamericana de Profesionales
en Seguridad Informática A.C. (establecida
en 1995)
9º Día de la Seguridad
Autumn Edition
11 de Septiembre 2014
Monterrey, Nuevo León
Crear y consolidar una cultura ética en el ejercicio de la seguridad informática
Autumn Edition
ALAPSI A.C. www.alapsi.org 1

CINTERMEX - México
en 1995)
Autumn Edition
Monterrey, Nuevo León. México
11 Septiembre 2014
Ciberseguridad,
retos y rutas de acción
Gonzalo Espinosa
Presidente 2013--2016
Asociación Latinoamericana de Profesionales en Seguridad Informática, ALAPSI A.C.
http://mx.linkedin.com/in/gonzaloespinosasp
https://twitter.com/G_Espinosa_Mx
A.G.Espinosa.Mx@gmail.com
Presidencia@alapsi.org
Agenda
• Objetivo
• Contexto
• Ciberseguridad
• Retos
• Rutas de acción
• Sesión de preguntasy respuestas

CINTERMEX - México
en 1995)
Objetivo
• En esta sesión, el asistente será capaz de identificar con beneficio para con
sus organizaciones, los principales retos en la gestión de la Ciberseguridad en
los Sectores de la Sociedad
– Iniciativa Privada
– Prensa
– Académico
– Gubernamental y
– Sociedad en General
CONTEXTO

CINTERMEX - México
en 1995)
Acciones alineadas con la
Misión de la ALAPSI A.C.
• Integrador de profesionales
– En Seguridad Informática de
Latinoamérica.
• Proveer conocimiento
– Con seminarios y certificar.
• Emitir juicios independientes,
objetivos e imparciales
– Al evaluar servicios, productos y
metodologías.
• Proponer y desarrollar
– Proyectos de investigación.
• Promover el desarrollo de
– Legislación y normatividad.
Contexto
Código de Ética ALAPSI A.C.
Contexto

CINTERMEX - México
en 1995)
Comisión de Gobernabilidad - Presidencia de la ALAPSI A.C.
Principios
Contexto
Comisión de Gobernabilidad
ALAPSI A.C. 2013-2016
Presiones del
Dirigir
Buen Gobierno
ALAPSI A.C.
Evaluar
Necesidades del
Monitorizar
Propuestas
Procesos de la Asociación
Planes
Políticas
Desempeño
Cumplimiento
Entorno
Entorno
Proyectos ALAPSI A.C. Operaciones ALAPSI A.C.

CINTERMEX - México
en 1995)
Comisión de Gobernabilidad ALAPSI A.C. 2013-2016
Gestión de Propuestas
http://dstudio.ubc.ca/toolkit/processes/
http://www.studiothick.com/how-we-work/
http://ops.fhwa.dot.gov/publications/seitsguide/section6.htm http://electronicdesign.com/eda/surveying-verification-landscape

CINTERMEX - México
en 1995)
Comisión de Vigilancia, Honor y Justicia
ALAPSI A.C. 2013-2016
Comisión de Vigilancia, Honor y Justicia
Adrián Palma
Construcción y Mantenimiento de Imagen Organizacional
Competencias emocionales
Fuente: www.recursosyhabilidades.com/blog/?cat=4

CINTERMEX - México
en 1995)
Ciberseguridad - Contexto
Ciberseguridad – Contexto

CINTERMEX - México
en 1995)
• Intergovernmental Organizations
– Asia-Pacific Economic Cooperation
(APEC)
– Council of Europe
– European Union
– G8
– Internet Governance Forum (IGF)
– North Atlantic Treaty Organisation
(NATO)
– Organisation for Economic Co-operation
and Development (OECD)
– Organisation for Security and
Cooperation in Europe (OSCE)
– Organisation of American States (OAS)
– United Nations (UN)
– Asociación Latinoamericana de
Profesionales en Seguridad Informática
A.C.
• Intergovernmental initiatives
– Conferences on Cyberspace
– Meridian Process
– Día dela Seguridad ALAPSI AC
• 2020 Internet
– Security, pp 66 y 67
– SMEs, pp 38
• Future Research in Systems Security
– Pp 104 - 106

CINTERMEX - México
en 1995)
Ciberseguridad & Funcionalidad
Contexto 2020
Ciberseguridad
Contexto 2020
• Managing Threats and Vulnerabilities in the
Future Internet
• The Red Book
– A Roadmap for Systems Security Research
• Abstract
– The Red Book presents a roadmap in the area
of systems security, as prepared by the SysSec
consortium and its constituency in the first half
of 2013.
• www.syssec-project.eu

CINTERMEX - México
en 1995)
Ciberseguridad
Contexto 2020
• Managing Threats and Vulnerabilities in the Future
Internet
• The Red Book
– A Roadmap for Systems Security Research
• Advisory document
– For policy makers and researchers who would like to have
animpact on the Security of the Future Internet
• Abstract
– The Red Book presents a roadmap in the area of systems
security, as prepared by the SysSec consortium and its
constituency in the first half of 2013.
• www.syssec-project.eu
Ciberseguridad
Contexto 2020
• Policy Makers may want to focus on Chapter 1 at
page 3 which provides a short Executive Summary
of the book and on Chapter 14 in page 103 which
describes Grand Challenge Research Problems in
the area which can be solved only with the
collaboration of several Research Organizations e.g.
ALAPSI A.C.-Investigaciones, and the support of
leading funding Agencies.
• Related work may be found in the second part of
the book in page 107, which provides a good
overview of other Research Roadmaps from Europe
and from the States.

CINTERMEX - México
en 1995)
RETOS
Funcionalidad &
Ciberseguridad – Retos
– What are the challenges to making the Internet work for people, as users, citizens,
individuals, family members, carrying out our daily lives, bringing up families, working,
living
• Business:
– What are the challenges to making the Internet work for business, growing,
innovating, being efficient, across different sectors,
– What are the challenges to making the Internet work for society, i. e. collectively,
thinking about some of the big shifts
• Technology:
– What are the big technical challenges to creating the future Internet
• People:
• Society:

CINTERMEX - México
en 1995)
Funcionalidad &
Ciberseguridad – Retos
• Business, Economy
– Future Manufacturing challenges:
Interoperable Enterprise environments;
risk management and forecasting; and
tacit knowledge management across the
supply chain
– Extensive Monitoring, Evaluation, Risk
Management and Forecasting
– Enterprise
– Social knowledge media
– Knowledge Clouds
– Digital Commoditization
– Interoperability Service Utility
– We can’t make all the risks disappear -
Business must be able understand and
make decisions about risk, based holistic
view of threats and security situation
– Turning security management from an art
into a science; metrics, assurance and
policy.
• People, Users, Societal Challenges
– Cities
– Challenges for accessibility: familiarity with
accessibility requirements, implementing
design for accessibility, and making
interactive multimedia applications
accessible.
– People must understand and be in control
of their exposure to Internet risks
– Identity and privacy capabilities in the
future
– Internet must respond to changing policy,
services, and individuals needs and
requirements
– New forms of digital content, evolving
business models, whither DRM?
Funcionalidad & Ciberseguridad
Retos Tecnológicos
• Developing Correct Software
• The challenge of capacity and resource management
in the network (limits of capacity and performance)
• Networks that support smart applications embedded
in everything from infrastructure to cities to services
will be challenging to develop
• Developing and operating secure future Internet
systems necessitates taking a systems approach and
having the tools to address
• Services
• The framework for capturing, storing, and managing
sophisticated multidimensional objects that could
support real augmented realities does not exist
• Future Internet clients will be sophisticated
collections of smart devices, situated computing, and
services. Today’s programming paradigms for
web-clients do not support this model well at all.
• Challenges to be addressed. Pp 45

CINTERMEX - México
en 1995)
RUTAS
Rutas de acción
• Business
– Overview of research areas to be
addressed
– Future Internet Enterprise
Systems
– R&D Theme: Future Internet
Enterprise Systems for
Manufacturing
• People / Social
– Telepresence
– Interaction
– Cities
– Societally important applications
of Future Internet
– Privacy
– Inclusiveness

CINTERMEX - México
en 1995)
Rutas de acción
– Performance of Future Networks
– Making IT Greener (reducing energy
consumption, lifecycle, resources,)
– Internet of Things
– Security
– 3D-Virtual 3D reconstructions of the real
– Cross disciplinary research
– Open to different cultures and
excluded/disadvantaged groups
– Innovation, Involving, benefiting,
stimulating startup business and SMEs
– Evaluation methodologies
– Experimental approaches
– Architecture
• Security
– Better Languages And Tools For Specifying and Developing
Secure Software
– Improved Assurance Methods
– Privacy-Aware Software Development
– Cooperation On Issues Of National Security
– Development Of Universally Acceptable Digital Identifiers
– Development Of Rich And Expressive Security Models
– Development Of Tools For Tracking Data
– Enhancement Of Legislation To Accommodate Technological
– Developments
– Education Of Citizens
– Research And Investment In Security Tools And Technology
– Consideration Of Novel, Radical Approaches
Fuente: 2020 Future Internet Assembly RReport. Pp. 65
• Technical
world
Rutas de acción
– Performance of Future Networks
– Making IT Greener (reducing energy
consumption, lifecycle, resources,)
– Internet of Things
– Security
– 3D-Virtual 3D reconstructions of the real world
– Cross disciplinary research
– Open to different cultures and
excluded/disadvantaged groups
– Innovation, Involving, benefiting, stimulating
startup business and SMEs
– Evaluation methodologies
– Experimental approaches
– Architecture
• Technical

CINTERMEX - México
en 1995)
CONCLUSIONES
Conclusiones
• Un reto implica un cambio.
– Llevar el estatus actual a un estatus nuevo.
• Beneficios inmediatos para el individuo y por
ende para su organización
– Conocer la existencia de retos en ciberseguridad
y su gestión facilita ubicar situación actual
– Identificar escenarios
– Variables controlables
– Variables no controlables
– Tendencias
– Requerimientos
– Recomendaciones
– Responsables
• Todo en el contexto de los Sectores de la
Sociedad
– Iniciativa Privada
– Prensa
– Académico
– Gubernamental y
– Sociedad en General

CINTERMEX - México
en 1995)
Autumn Edition
Monterrey, Nuevo León. México
11 Septiembre 2014
Ciberseguridad,
retos y rutas de acción
Gonzalo Espinosa
Presidente 2013--2016
Asociación Latinoamericana de Profesionales en Seguridad Informática, ALAPSI A.C.
http://mx.linkedin.com/in/gonzaloespinosasp
https://twitter.com/G_Espinosa_Mx
A.G.Espinosa.Mx@gmail.com
Presidencia@alapsi.org
Autumn Edition
11 de Septiembre 2014
Monterrey, Nuevo León

CiberseguridadEventoALAPSI

Recomendados

Recomendados

Más contenido relacionado

La actualidad más candente

La actualidad más candente (9)

Similar a CiberseguridadEventoALAPSI

Similar a CiberseguridadEventoALAPSI (20)

Más de Gonzalo Espinosa

Más de Gonzalo Espinosa (20)

Último

Último (20)

CiberseguridadEventoALAPSI