We are increasingly dependent on information technology that leaves us vulnerable to cyber threats from actors seeking to influence events through violence, steal trade secrets and intellectual property, or compromise critical infrastructures like SCADA systems that control utilities. While attribution is difficult, states have been implicated in incidents like Stuxnet against Iran and cyberattacks between Georgia and Russia. Individuals and organizations can help manage these risks by not becoming an easy target, obtaining threat intelligence, assuming compromise will occur, and responding appropriately to incidents.

1. CIBERAMENAZAS :
¿ A QUÉ NOS ENFRENTAMOS ?

2. Antonio Sanz
Information Security Consultant
@antoniosanzalc
http://www.s2grupo.es
http://www.securityartwork.es

3. #si2015
http://bit.ly/1y92QXG

8. Dependance on IT
IT is everywhere

9. We are vulnerable

10. Attribution is complicated

11. International law is … flaky

12. Cyberwar
Cyberterrorism
Cyberespionage

13. Objective: critical infrastructures

14. Main targets: SCADA systems

15. Cyberarmies

16. StuxnetStuxnet

17. Georgia & Russia

19. Cyberwar
Cyberterrorism
Cyberespionage

20. Objectives: Get influence through
violent actions
Objective: Political influence

23. -1%

24. - $136.000M

25. Myth or reality ?

26. Technical (in)competence

27. Cyberwar
Cyberterrorism
Cyberespionage

28. Objectives: Trade secrets & IP

29. APT – Advanced Persistent Threat

30. RSA & Lockheed Martin

31. Red October - Uroboros/Snake

32. IceFog - Mercenaries

33. Hi Prism !!

34. Hi Chinese Great Firewall !!

35. What can we do
about it?

36. Manage
risk

37. Don’t be a
low hanging
fruit

38. Get some (advanced) help

39. Get threat
intelligence

40. Assume you’ll be compromised

41. Report the incident

43. Stand your ground

44. @antoniosanzalc
http://www.s2grupo.es
http://bit.ly/1y92QXG
Be careful out there