+ All Categories

Home > Documents > 1. 2 Tier I/II $Ks Tier III/IV $Ms Tier V/VI $Bs Create New Vulnerabilities Discover New...

1. 2 Tier I/II $Ks Tier III/IV $Ms Tier V/VI $Bs Create New Vulnerabilities Discover New...

Date post:	31-Dec-2015
Category:	Documents
Upload:	moris-greer
View:	218 times
Download:	1 times

Download Report this document

Share this document with a friend

Embed Size (px):

Popular Tags:

lifecycle of new technologies

cyber criminals

capability wave

known vulnerabilities

good cyber hygiene

face of advanced cyber

3

1

Transcript

Page 1: 1. 2 Tier I/II $Ks Tier III/IV $Ms Tier V/VI $Bs Create New Vulnerabilities Discover New Vulnerabilities Exploit Known Vulnerabilities.

1

Page 2: 1. 2 Tier I/II $Ks Tier III/IV $Ms Tier V/VI $Bs Create New Vulnerabilities Discover New Vulnerabilities Exploit Known Vulnerabilities.

Cybersecurity Tiered Vulnerabilities

2

Tier I/II$Ks

Tier III/IV$Ms

Tier V/VI$Bs

Create New Vulnerabilities

Discover New Vulnerabilities

Exploit Known Vulnerabilities

https://docs.google.com/viewer?url=http://www.acq.osd.mil/dsb/reports/CyberCloud.pdf

https://docs.google.com/viewer?url=http://www.acq.osd.mil/dsb/reports/ResilientMilitarySystems.CyberThreat.pdf

Page 3: 1. 2 Tier I/II $Ks Tier III/IV $Ms Tier V/VI $Bs Create New Vulnerabilities Discover New Vulnerabilities Exploit Known Vulnerabilities.

3

Information Technology Evolution

Info

rmat

ion

Dri

ven

Cap

abili

ty

• Central computer center• Software in computer center only• Work brought to the computer center

1950 1960 1970 1980 1990 2000 2010 2020

1. Centralized - Mainframe

2. Networked - Decentralized

3. Internet - Cloud

• PC enabled and network• Software distributed in both server and client computers

• Work from the user location

• Virtualized compute; global network enabled

• Software decoupled from hardware

• Work from anywhere

Adding functional capability has become easier with each new wave

We are in early stages of Wave 3 information technology

Mainframe and Client-Server waves remain in place

Waves represent many co-dependent technologies, matured over time

But enterprise infrastructure gaps & vulnerabilities have become more critical

DoD is using Wave 2 acquisition & budget processes to acquire Wave 3 capability

Wave 2 Acquisition for Wave 3 Technology

Recommended

Cisco Zero Trust · Source: Gartner, Dale Gardner, 2018 Security Summit 99% Workforce: Establish Trust Attackers exploit known vulnerabilities Patching devices (especially user-owned)

Enhanced Mitigation Experience Toolkit 5 · The Enhanced Mitigation Experience Toolkit ... exploit vulnerabilities in computer systems, ... 7 Enhanced Mitigation Experience Toolkit

FALCON PREVENT FOR HOME USE€¦ · Exploit blocking stops the execution and spread of threats via unpatched vulnerabilities Threat intelligence prevention blocks activities known

netconclave.comnetconclave.com/hakin9/downloads/Hakin9.pdf · by Microsoft and Anti Virus vendors to address the drafted vulnerabilities in this document. Crafting the exploit

National Level Exercise 2012 - FEMA.gov · Exercise #3: NLE Capstone/Cyber Physical Effects ... only did the campaign exploit these vulnerabilities in attacks against critical infrastructure

Dissecting exploit kits - ROOTCON 11/Talks/Dissecting... · 2017-09-25 · 10 In 2016, Adobe Flash provided 6 out of top 10 vulnerabilities used by Exploit Kits Rest of the top 10

Monitoring Vulnerabilities: Are Your Servers Exploit-Proof? · Unpatched vulnerabilities can be shielded from exploits without disrupting affected servers. Actual permanent patching

From STEM to SEAD: Speculative Execution for Automated ......delivered via previously unseen inputs or exploit previ-ously unknown vulnerabilities. Self-healing software, an emerging

Kashmir Crisis: A Way Forwardissi.org.pk/wp-content/uploads/2019/11/Report_RT_Oct_9... · 2020. 1. 7. · India is looking to exploit Pakistan’s vulnerabilities. Delhi is aggressively

KERNEL WARS: KERNEL-EXPLOITATION DEMYSTIFIED · Introduction to kernel-mode vulnerabilities and exploitation • Why exploit kernel level vulnerabilities? – Attacks at the lowest

Automated web patrol with strider honey monkeys finding web sites that exploit browser vulnerabilities

Cyber Risk Context TechnologyTM Exploit Statistics · associated exploit code • 2% of published vulnerabilities have observed exploits in the wild • The chance of a vulnerability

Web Application Firewall · Defend against web server fingerprinting attacks that identify web application software, its version and the platform that help hackers exploit vulnerabilities

Exploiting Format String Vulnerabilities€¦ · who wrote the ﬁrst format string exploit ever, portal, who developed and researched exploitability in his excellent article [3],

Understanding and Exploiting Flash ActionScript ... · Objectives • Know the essence of the ActionScript vulnerabilities • Know (you can and) how to write ASLR+DEP bypassing exploit

Malware - cs.stevens.edu · Where does Malware come from? Malicious scripts on websites that exploit security holes in browsers (Exploits) Security vulnerabilities in operating systems

Predicting Exploit Likelihood for Cyber Vulnerabilities with …publications.lib.chalmers.se/records/fulltext/219658/... · 2015-09-24 · Predicting Exploit Likelihood for Cyber

5 Easy Ways To Exploit Network Vulnerabilities