![Page 1: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/1.jpg)
Mechelen - 06/02/2014
Telenet Security Day
CYBER scrapingsputting our 2 cents in ..
Christian Van HeurckCERT.be coordinator
CERT.be team
![Page 2: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/2.jpg)
2Mechelen - 06/02/2014CERT.be
Telenet Security Day
goals
• the cyber threat is real
• also in .be
• everybody is a target
• we all are losing the battle
• this costs €
• lack of awareness at all levels
• be prepared
• act now!
2
![Page 3: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/3.jpg)
3Mechelen - 06/02/2014CERT.be
Telenet Security Day3
the cyber threat is real
![Page 4: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/4.jpg)
4Mechelen - 06/02/2014CERT.be
Telenet Security Day
types of cyber threats - historical
4
cyber security cyber crime
others
![Page 5: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/5.jpg)
5Mechelen - 06/02/2014CERT.be
Telenet Security Day
types of cyber threats – anno 2014
5
![Page 6: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/6.jpg)
6Mechelen - 06/02/2014CERT.be
Telenet Security Day6
almost all cyber security
issues lead to cyber crime
espionage included
reality 2013
![Page 7: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/7.jpg)
7Mechelen - 06/02/2014CERT.be
Telenet Security Day7
the cyber threat is
also real in .be
![Page 8: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/8.jpg)
8Mechelen - 06/02/2014CERT.be
Telenet Security Day
CERT.be anthology
• Belgacom
• DDoS on the rise
• open DNS resolvers abused for amplification attacks
• ntp servers abused
• phishing & spearphishing
• identity theft
• mobile targeted
• every (with an) OS targeted
8
![Page 9: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/9.jpg)
9Mechelen - 06/02/2014CERT.be
Telenet Security Day
CERT.be anthology
• hacktivism
• blackmail (Rex Mundi)
• botnet drones
• botnet C&C
• hacked servers abused for attacks and malware distribution
• waterhole attacks
• top level DNS compromise
• ransomware
9
![Page 10: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/10.jpg)
10Mechelen - 06/02/2014CERT.be
Telenet Security Day
CERT.be anthology
• mass compromise of vulnerable websites
• Diginotar
• abuse of forged and/or stolen certificates
• Bit9, RSA, Microsoft, Twitter, Facebook, Apple, Google, Adobe, ..
• IXP targeted
• hosters under daily attacks
10
![Page 11: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/11.jpg)
11Mechelen - 06/02/2014CERT.be
Telenet Security Day
CERT.be anthology
• citizens targeted
• big companies targeted
• intermediate companies targeted
• SME’s targeted
• Port of Antwerp
• Critical Infrastructure
• GOV targeted
• Banks targeted
• NMBS
11
![Page 12: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/12.jpg)
12Mechelen - 06/02/2014CERT.be
Telenet Security Day12
EU legislation
Privacycommission
BIPT-IBPT
and there’s more happening ..
![Page 13: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/13.jpg)
13Mechelen - 06/02/2014CERT.be
Telenet Security Day13
all the old school stuff is
still out there too
and one more thing ..
![Page 14: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/14.jpg)
14Mechelen - 06/02/2014CERT.be
Telenet Security Day14
everybody is a target
![Page 15: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/15.jpg)
15Mechelen - 06/02/2014CERT.be
Telenet Security Day15
time for some numbers
![Page 16: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/16.jpg)
16Mechelen - 06/02/2014CERT.be
Telenet Security Day16
# Reports & Incidents / Year
0
1000
2000
3000
4000
5000
6000
7000
8000
2010 2011 2012 2013
Reports/Year
Incidents/Year
![Page 17: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/17.jpg)
17Mechelen - 06/02/2014CERT.be
Telenet Security Day17
# Reports & Incidents / Month
00
100
200
300
400
500
600
2010 2011 2012 Q1-Q3 2013
Reports/Month
Incidents/Month
![Page 18: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/18.jpg)
18Mechelen - 06/02/2014CERT.be
Telenet Security Day
types of incidents in 2013
18
![Page 19: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/19.jpg)
19Mechelen - 06/02/2014CERT.be
Telenet Security Day19
# Zombies
500.000 in 2013
![Page 20: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/20.jpg)
20Mechelen - 06/02/2014CERT.be
Telenet Security Day20
![Page 21: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/21.jpg)
21Mechelen - 06/02/2014CERT.be
Telenet Security Day21
we are losing this battle
![Page 22: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/22.jpg)
22Mechelen - 06/02/2014CERT.be
Telenet Security Day22
this costs €
![Page 23: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/23.jpg)
23Mechelen - 06/02/2014CERT.be
Telenet Security Day23
WT .. ????
![Page 24: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/24.jpg)
24Mechelen - 06/02/2014CERT.be
Telenet Security Day24
lack of awareness at all
levels
![Page 25: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/25.jpg)
25Mechelen - 06/02/2014CERT.be
Telenet Security Day25
this is how we perceive it
Image courtesy of tropical.pete – Flickr.com
![Page 26: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/26.jpg)
26Mechelen - 06/02/2014CERT.be
Telenet Security Day26
this is how we perceive it
Image courtesy of tropical.pete – Flickr.com
![Page 27: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/27.jpg)
27Mechelen - 06/02/2014CERT.be
Telenet Security Day27
acknowledge
the cyber threat
![Page 28: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/28.jpg)
28Mechelen - 06/02/2014CERT.be
Telenet Security Day28
= create awareness
![Page 29: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/29.jpg)
29Mechelen - 06/02/2014CERT.be
Telenet Security Day29
then act efficiently
![Page 30: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/30.jpg)
30Mechelen - 06/02/2014CERT.be
Telenet Security Day30
NOW!
![Page 31: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/31.jpg)
31Mechelen - 06/02/2014CERT.be
Telenet Security Day31
please …
![Page 34: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/34.jpg)
Mechelen - 06/02/2014 34
![Page 35: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/35.jpg)
35Mechelen - 06/02/2014CERT.be
Telenet Security Day
brochure & 1-pager
35
![Page 36: Christian Van Heurck CERT.be coordinator CERT.be teambusiness.telenet.be/sites/default/files/presentaties_security_day_cert... · Mechelen -06/02/2014 2 CERT.be Telenet Security Day](https://reader034.vdocuments.net/reader034/viewer/2022052022/60380266fae5be0f8e57ba71/html5/thumbnails/36.jpg)
36Mechelen - 06/02/2014CERT.be
Telenet Security Day
download links
brochure:
https://www.cert.be/pro/files/Brochure_FRA.pdf
https://www.cert.be/pro/files/Brochure_NDL.pdf
https://www.cert.be/pro/files/Brochure_ENG.pdf
1-pager:
https://www.cert.be/pro/files/Onepager_FRA.pdf
https://www.cert.be/pro/files/Onepager_NDL.pdf
https://www.cert.be/pro/files/Onepager_ENG.pdf
36