Cyber Defense eMagazine February Edition for 2023

More documents

Recommendations

Info

Time to Build an Unhackable Internet By Thomas Vartanian, Executive Director, Financial Technology & Cybersecurity Center The United States spends close to $800 billion dollars each year on defense, dwarfing the investment of every other country including China. Every four years, candidates promise that if elected President, their most solemn responsibility will be to protect the country and its citizens from danger. So why do our leaders ignore the coming attack right in front of their faces? A stream of high-profile cyber-attacks have acted as canaries in the cyberspace coal mine, screaming out a dire warning. In the coming years, we are likely to see even more unprecedented cyber-attacks that could stop everything from working or moving. It is no longer a matter of if, but when. The evidence says that we ought to start believing it. In 2007, life stopped in Estonia when Russians allegedly disrupted the operations of parliament, banks, state ministries, newspapers, and broadcasters because of the placement of a Red Army statue. In 2016, Brazil’s banking system experienced one of the worst cyber-attacks when all of Cyber Defense eMagazine – February 2023 Edition 32 Copyright © 2023, Cyber Defense Magazine. All rights reserved worldwide.
Banco Banrisul’s thirty-six domain name system registrations and much of its banking services were taken over by hackers. In the United States, a seemingly endless continuum of network incursions, ransomware attacks, and system failures have humbled U.S. government agencies, fortune 500 companies, and a pantheon of financial titans over the last 15 years. And as Russia prepared and then invaded Ukraine in February 2022, the U.S. government warned American companies to have their cyber “shields up.” Isn’t it time to ask who should be doing something about this and what that something should be? Perhaps a visual would better convey how remarkably dangerous the situation has become. All of us, even Chinese, Russian, Iranian, and North Korean hackers, terrorists, criminal cartels, fanatics, and career disruptors share the same virtual water in the same murky cyber fishbowl. There is no other global or geopolitical environment like that. If we want to avoid what a digital Pearl Harbor, we need to figuratively tear down the internet down and rebuild. I know that sounds staggeringly difficult, but what is the alternative? Building a new concept of the internet with offshoots and tributaries that have different rules, standards, and real enforcement mechanisms will be difficult, unpopular, and expensive. But it is possible and absolutely necessary. If we woke up tomorrow and all our money was gone, we would have wished we had done it. This is a unique moment in history given the scale of things touched and the risks created by technology. As technology gets cheaper and increasingly finds its way into the hands of hostile nation states, criminal cartels, fanatics, and terrorists who do not play by the rules of a civil society, the fragility of democratic systems are increasingly exposed. And unlike our analog world, there is no cyber coast guard, no early warning cyber defense system, and no cyber police or fire departments. Consider the global ramifications of what China is doing and how it impacts us in the United States. Chinese companies have been accused of stealing corporate and military intelligence for years. Because of it and the fear that Chinese technology may beam intelligence back to China, some Chinese companies are effectively blacklisted from doing business in the United States. But those same companies are well on their way in other countries to becoming dominant players in access to and control of both domestic and international technologies and data. Huawei is one of several Chinese companies listed by U.S. government agencies as creating risks to U.S. security that should be avoided. And yet, it has reportedly sold internet and surveillance technology to at least 50 countries and 230 cities since 2019, often financed by the Chinese government under its global Belt and Road initiative. Those Chinese products and component are nearly impossible to stop from finding their ways into products that are manufactured in the U.S. or imported from friendly trading partner countries. Similarly, it is impractical to prohibit contact with networks built from Chinese products. There are solutions to prevent bad actors from taking advantage of us online. Many will be inconvenient, putting society in the position of having to choose the best worst option. But they are absolutely necessary if we are to maintain economic security. If they had been in place, they would not have stopped humans from purposely facilitating hacks, but they would likely had provided an early warning or blocked the malware that put Estonia into a digital coma, triggered an immediate reaction blocking the circulation of the Microsoft updates in the Solar Winds mess, prevented the breach Cyber Defense eMagazine – February 2023 Edition 33 Copyright © 2023, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2: Time to Build an Unhackable Interne
Page 3 and 4: Emerging API Security Trends: What
Page 5 and 6: @MILIEFSKY From the Publisher… De
Page 7 and 8: Welcome to CDM’s February 2023 Is
Page 9 and 10: Cyber Defense eMagazine - February
Page 31: Cyber Defense eMagazine - February
Page 35 and 36: Why Cybersecurity Remains a Persist
Page 37 and 38: Robust Cybersecurity is Essential f
Page 39 and 40: 1. Facing the Cyber Crisis No compa
Page 41 and 42: About the Author Amitabh Sinha is t
Page 43 and 44: 1. Risk Assessment Government agenc
Page 45 and 46: 8. Incident Response Plan Preventio
Page 47 and 48: This is what happened to Dropbox la
Page 49 and 50: trust and growth, the board can hel
Page 51 and 52: etween governments and operators wi
Page 53 and 54: Accelerating Machine Learning Advan
Page 55 and 56: Secondly, MLOps platforms record al
Page 57 and 58: Cybercriminals Are Ramping Up Their
Page 59 and 60: Organizations should follow best pr
Page 61 and 62: 7 Biggest Cyber Attacks of 2022 By
Page 63 and 64: 4. Ex-Amazon worker convicted over
Page 65 and 66: About Salt Communications Salt Comm
Page 67 and 68: saw this most recently through a ra
Page 69 and 70: CPRA/CCPA Compliance in A Cloud-Fir
Page 71 and 72: having an excessive amount of permi
Page 73 and 74: In the coming months and beyond, on
Page 75 and 76: Emerging API Security Trends: What
Page 77 and 78: malicious communication pattern thr
Page 79 and 80: Free Consumer Apps Are Not Safe for
Page 81 and 82: But simultaneously - and unlike ema
Page 83 and 84:
lives and works. The topic is tough
Page 85 and 86:
and tendencies. The good question h
Page 87 and 88:
others or the situation among some
Page 89 and 90:
eing pushed into heavy criminalitie
Page 91 and 92:
preparing and analyzing such a coll
Page 93 and 94:
words, behind those high-tech crimi
Page 95 and 96:
always make new and new damage if t
Page 97 and 98:
References: [1] Djekic, M. D., 2017
Page 99 and 100:
How Government Agencies Can Leverag
Page 101 and 102:
The result leads to optimal perform
Page 103 and 104:
A linchpin of Biden’s cyber-defen
Page 105 and 106:
An effective observability platform
Page 107 and 108:
Section 3553(h) of title 44, U.S. C
Page 109 and 110:
Exchange (MX) and Name Service (NS)
Page 111 and 112:
Looking Ahead to 2023: Cyber Trends
Page 113 and 114:
we’re falling behind, especially
Page 115 and 116:
Old vulnerabilities are not being d
Page 117 and 118:
Insider Threats are a Primary Vulne
Page 119 and 120:
The first step in insider threat mi
Page 121 and 122:
“We’re happy to announce MIRACL
Page 123 and 124:
The organisers of Europe’s most i
Page 125 and 126:
usable by everyday people. I think
Page 127 and 128:
Quentyn Taylor, Senior Director Pro
Page 129 and 130:
SDR for Cyber Defense By Kaue Morce
Page 131 and 132:
Figure 2: Cyan SDR - from Per Vices
Page 133 and 134:
as it allows the SDR to capture and
Page 135 and 136:
Security at the Enterprise Edge: To
Page 137 and 138:
This behavior makes it essential to
Page 139 and 140:
Shields Up: Organizations Need to D
Page 141 and 142:
eport, domains with the terms “bi
Page 143 and 144:
The Anti-Fraud Frontline Predictive
Page 145 and 146:
Cloud vendors' features can be depl
Page 147 and 148:
About the author Ryohei Fujimaki, F
Page 149 and 150:
The resulting phishing sites mirror
Page 151 and 152:
The javascript code in which the da
Page 153 and 154:
The Top Secrets of CISOs By Pat McG
Page 155 and 156:
About the Author Pat has more than
Page 157 and 158:
The latest analysis shows that Nort
Page 159 and 160:
What Role Can AI Play in Data Objec
Page 161 and 162:
Avoiding bias Objectivity and credi
Page 163 and 164:
As more and more data moves to the
Page 165 and 166:
to know where a document or other r
Page 167 and 168:
Cyber Defense eMagazine - February
Page 169 and 170:
Page 171 and 172:
Page 173 and 174:
Page 175 and 176:
Page 177 and 178:
Page 179 and 180:
CyberDefense.TV now has 200 hotseat
Page 181 and 182:
Books by our Publisher: https://www
Page 183 and 184:
Page 185 and 186:
show all

Cyber Defense eMagazine February Edition for 2023

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?