03. The Security Weakest Links

Security is Like a Chain...as Strong as The Weakest link

90% cyber security implementation is inconsistent... :’(

XecureIT

© PT IMAN Teknologi InformasiThe Security Weakest Links v2.0

© PT IMAN Teknologi Informasi XecureITThe Security Weakest Links v2.0

People: Unaware and Ignorance“Amateur hacks the systems. Professional hacks the people.”


People: Unaware and Ignorance“Amateur hacks the systems. Professional hacks the people.”

Policies and Procedures

InconsistentInconsistent

UnclearUnclear

Technology Implementation

Completely Wrong :’(

Technology Implementation

Complete Failure :’(

Physical Cable Weakness

Technology Weakness

Border Gateway Protocol (BGP) Poisoning

Technology Vulnerability“We are like sitting duck.”

Anti Malware is Ineffective“Updated anti malware is ineffective.”

Anti Malware is Ineffective“Malware is more stealthy.”

Targeted Attack“Updated anti malware is useless.”

Government and Business Cooperation


Government and Business Cooperation


BackdoorVendors: “Backdoors are critical vulnerabilities.”


BackdoorVendors: “Discovered hidden key is a critical vulnerability.”


BackdoorVendors: “Discovered hidden key is a critical vulnerability.”


BackdoorFirmware


BackdoorKill Switch


End-PointMalware in The Browser and ATM

Insider AttackThe enemy is “brought” inside by authorized people :’(


The History of War


The Cyberwar


Mobile Device


Mobile Device