Upload File

cyber security sp 2017

20
Cyber Security Brazil Novas Ameaças, Novos Recursos e Melhores Práticas Método de Identificação de Ameaças e Geração de Alertas: Rodrigo Jorge - Alesat Combustíveis S/A Cyber Security Brazil Energy & Utilities

Upload: rodrigo-jorge

Post on 13-Apr-2017

19 views

Category:

Technology


0 download

Report

TRANSCRIPT

Page 1: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Novas Ameaças, Novos Recursos e Melhores Práticas

Método de Identificação de Ameaças e Geração de Alertas:

Rodrigo Jorge - Alesat Combustíveis S/A

Cyber Security BrazilEnergy & Utilities

Page 2: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Ransonware•Deficiência na Infraestrutura de TI

•Ausência de Controles e Testes

•Sem Backup

Page 3: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Redes Indústriais

Page 4: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Ataques Direcionados (Targeted Attacks)•Alvo escolhido…

• Levantamento de Informações

•Pentest..•Qual a visibilidade interna do Pentest?

Page 5: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Targeted Attacks

Fonte: TrendMicro

Page 6: Cyber Security SP 2017

Cyber Security BrazilEnergy & UtilitiesFonte: Relatório Global Symantec

Page 7: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Detecção e ProteçãoPromete:

• Descobrir ataques em tempo real

Como?

• Sensores Multi Camadas / Plataformas

• Sandbox Avançada

Page 8: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Detecção e Proteção

Page 9: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Contratação de Aplicações

Definições

• Requisitos

Seleção

• Prova de Conceito

Contratação

• Implantação

Page 10: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Contratação de Aplicações Web

Definições

• Requisitos

Seleção

• Prova de Conceito

Contratação

• Implantação

Page 11: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Requisitos• Comum…

• Ausência de Requisitos de Segurança

Page 12: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Contratação de Aplicações

Definições

• Requisitos

Seleção

• Prova de Conceito

Contratação

• Implantação

Page 13: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Prova de Conceito• Ausência de Testes de Segurança

• Análise de Vulnerabilidades

• Pentest

• Análise de Código

Page 14: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Contratação de Aplicações Web

Definições

• Requisitos

Seleção

• Prova de Conceito

Contratação

• Implantação

Page 15: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Implantação• Hardening da Infraestrutura

• Setup do Backup e Validação

• Certificação das Soluções de Segurança (se implantadas)

Page 16: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Está faltando algo?

Definições

• Requisitos

Seleção

• Prova de Conceito

Contratação

• Implantação

Page 17: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Manutenção

Definições

• Requisitos

Seleção

• Prova de Conceito

Contratação

• Implantação

Manutenção

• Continuidade

Page 18: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Processo e não Projeto…

• Gest ão de Mudanças• Revalidar requisitos de segurança em TODAS as mudanças antes de autorizadas• Realizar novos testes de segurança• Liberar nova versão

• Análise de Logs

• Testes periódicos

• Revisão de Credenciais

Page 19: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Referências e Recomendações• ABNT NBR ISO/IEC 27002:2013

• Desenvolvimento e Manutenção de Sistemas• Controle de Acesso

• OWASP Testing Guides

• Relatórios de Segurança da Indústria (Fabricantes e Consultoria)

Page 20: Cyber Security SP 2017

Cyber Security BrazilEnergy & Utilities

Rodrigo [email protected]

Muito Obrigado!


BSc (Hons) Cyber Security BSc (Hons) Cyber Security (with

Cyber Security Architecture Methodology for the Electric ... · part of a cyber security strategy. Another component of the cyber security strategy is a cyber security architecture

Innovating in Cyber Security...Cyber intelligence Threat actor profiling for enhanced security operations Human Factors in Cyber security Secure transactions III Cyber security end-user

CYBER SECURITY STRATEGY - Portal GOV.SI · 2020-01-08 · 2 Cyber Security Strategy Purpose and summary Slovenia’s cyber security strategy will improve the country’s cyber security

Cyber Security - Joshua McCloud - Cisco Cyber Security Solutions Architect

National Cyber Security Alliance National Cyber Security Awareness … · 2020-02-13 · National Cyber Security Alliance National Cyber Security Awareness Month 2017 Results Summary

MAGAZINE - Cyber Security Raad€¦ · progression of cyber security ° Cyber security: limitation and opportunity Cyber security belongs in the boardroom ° °Greater internet security

CYBER SECURITY DIVISION - dhs.gov · CYBER SECURITY DIVISION: SECURING YOUR CYBER FUTURE • • • CYBER SECURITY DIVISION OVERVIEW The nation’s economic strength and security

Cyber Security Technologist Level 4 Apprenticeship€¦ · Cyber Security Technologists This course supports cyber security technologists who apply an understanding of cyber threats,

Cyber Security - Cisco · Cyber Security Kah-Kin Ho Head of Cyber Security Business Development Europe, Middle East and Africa. Agenda •Cyber Threat Landscape ... Customized Cyber

Cyber Security

Improving Cyber-Security Improving Cyber-Security through

FOCUS GROUPS - Cyber Security Coalition | Cyber Security ... · A central pillar of the European Union cyber security strategy, the Cyber Security Act aims to strengthen the cyber

Cyber Security Specialist Information Security • Cyber ... · Cyber Security • Security Analyst • Cyber Security Specialist Information Security • Cyber Operations Manager

European Cyber Security Challenge - Greel National Cyber Security Team

CYBER SECURITY: CCSS CLOSE CYBER SECURITY SUPPORT › dtic › tr › fulltext › u2 › a588004.pdf · 2013-12-12 · 1 CYBER SECURITY: CCSS – CLOSE CYBER SECURITY SUPPORT An

Cyber Security - documents.swisscom.comdocuments.swisscom.com/.../Security-Doks/cyber-security-report_de.… · Swisscom AG, August 2015-08-19 Cyber Security: die aktuelle Bedrohungslage

Cyber Security Assessment & Management (CSAM)...May 26, 2021  · Cyber Security Assessment & Management (CSAM) Planning for Implementing SP 800- 53, Revision 5 May 26, 2021.Cybersecurity

Cyber Security isn’t Really Cyber

Cyber Security Workshop · 2018. 12. 20. · Cyber Security Workshop DFARS Clause 252.2047012 / - NIST SP 800-171 Prepared by Prof. Clifford Neuman Director, USC Center for Computer

CAT Telecom...d. d. navl (WI'UU) nonu#nunmynönqv Network FDIi.]îfiuõqumu Security - IT/Cyber security - IT/Cyber security - Network - IT/Cyber Security - Lðunzlå - IT/Cyber Security

Cyber crime and cyber security

Navigating Unclassified Cyber/Information Security Protections Unclassified... · Navigating Unclassified Cyber/Information Security Protections ... 1253, based on NIST SP 800‐53

Introduction to Cyber Security by Cyber Security Infotech(CSI)

Informatica Cyber Security 1 Masterclass Cyber Security Erik Poll Digital Security groep

Cyber Security The Cyber Security - GOV.UK

ABB Cyber Security Services - library.e.abb.com · ABB’s approach to cyber security Cyber security roadmap –reaching maturity with ABB Cyber Security Services May 8, 2017 Slide

Cyber Security Analyst Course Outline Cyber Security

Cyber Security, Cyber Intelligence & Cyber Investigation

Cyber security & Importance of Cyber Security

ppt -Cyber Crime, Cyber Security and Cyber Laws

Understanding Cyber Threats & Cyber Security

10 tips for cyber security - Munich ReCyber risks 10 tips for cyber security Title 10 tips for cyber security Subject hsb-cyber-ten-security-tips Keywords,cyber,HSB_Cyber_Safety_Tips_10082020

Cyber Security Workshop...Cyber Security Workshop DFARS Clause 252.204-7012 / NIST SP 800-171 June 2019 Prof. Clifford Neuman Director, USC Center for Computer System Security Unclassified

Cyber Security Seminar Cyber Security fingerprints Security Seminar Cyber Security fingerprints Per Larsen, ... Antivirus Solutions ... Account Management Computer Policies Microsoft