To Design Securely, You Have to be able to Measure Your Security:

How to Measure the Security of your Network Protection Devices?

To design security environments and to defend our networks, we must be able to measure their performance; we should be able to measure the efficacy, risk and trust of the various defensive appliances we use. I’m going to show you the exact techniques to measure the security of portions of your internal networks, such as anti-virus, malware, phishing, access control devices and anomalous event detection. Then we will apply the same techniques to compare the security of classes of protective security products even though vendors don’t supply such specifications. You will see how to measure security and compare the effectiveness of protective devices as a function of time. We will call BB any vendor’s Black Box that performs any abstract security service. The internal process mechanism is immaterial to system measurement; signature-based A/V, rule-based binary decision making, heuristics, deep learning or any possible hybrid It’s still a Black Box. With Time Based Security as the premise, we first show how to measure D(t), detection efficacy as a function of time. Then we will show how the injection of ‘hostile’ test code can create a time-based metric for product comparison. By varying the sensitivity of detection criteria, especially with ‘smart’ systems, we can see how which kinds of hostile code will trigger the BB’s detection mechanism. (This is a non-vendor presentation!) The time difference between those two numbers is your current, accurately measured Detection Time, or T(1) – T(0) = D(t) The second step in measuring security in the time domain is to continue to Reaction. The Detection Trigger stops the primary clock and begins the reaction measurement process, up to and including remediation, all in the time-domain. R(t). The measurement of D(t) + R(t) gives us the maximum exposure to the system (process, etc.) equaling E(t), Exposure Time. How do your products and services really perform? Measuring security in the time domain for cyber is a critical tool for understanding and improving security postures. Attendees will receive the math, the tools, charts and schematics on how to measure their own security. COMMENTS: Handouts: Charts, Diagrams of Measurement Techniques. Objective #1 Learn why vendor/product’s Detection Time and Reaction Times are critical to security. Understand their effect on an organization’s risk and exposure. Learn how to measure the security of your defensive security products in the time domain. Schematics and formulas will be made available to all!

LinkedIn: / omhconf

Facebook: / ohmyhackconf

Twitter: / confidenceconf

Website: https://omhconf.pl/

2021 CornCon 7 / Sep 11, 2021 / www.corncon.net

Winn Schwartau, Chief Visionary Officer, SAC Labs!

Title: Defending Security is Probabilistic, Not Deterministic: Get Over It

Slides: https://corncon.net/resources/CornCon7.Schwartau.pdf

Abstract: Since the inception of computer/data/cyber/network security some fifty years ago, one recurring question has beset our industry: “How do we secure it?” By its very nature, this question has propagated a harmful meme, by implying that a binary deterministic answer is possible. “How can we defend against unknown vulnerabilities and hacks?” is perhaps a more realistic question.

Bio: Winn has lived Security since 1983, and now says, “I think, maybe, I’m just starting to understand it.” His predictions about the internet & security have been scarily spot on. He coined the term “Electronic Pearl Harbor” while testifying before Congress in 1991 and showed the world how and why massive identify theft, cyber-espionage, nation- state hacking and cyber-terrorism would be an integral part of our future. He was named the “Civilian Architect of Information Warfare,” by Admiral Tyrrell of the British MoD. His new book, “Analogue Network Security” is a mathematically based approach to provable security where his goal is to provide tools and methods to “fix security and the internet”.

Distinguished Fellow: Ponemon Institute Top-20 industry pioneers: SC Magazine. Top 25 Most Influential: Security Magazine Top 5 Security Thinkers: SC Magazine. Power Thinker and one of the 50 most powerful people: Network World. Top Rated (4.85) RSA Speaker Author: Pearl Harbor Dot Com (Die Hard IV), 3 volumes of “Information Warfare,” “CyberShock”, “Internet and Computer Ethics for Kids”, “Time Based Security” (More on his web site.) Founder: www.TheSecurityAwarenessCompany.Com Founder: www.InfowarCon.Com Executive Producer: “Hackers Are People Too”

Conference Agenda: https://corncon.net/CC7.Agenda.pdf

Thanks to our 2021 Platinum Sponsor: Malwarebytes

& Gold Sponsors: Cybereason & Netenrich-IBM.

We must accept we don’t know how AI systems make decisions and embedded Big Data bias is often the root of error in security systems. Machine learning relies on datasets fed into algorithms to execute the system’s learning. This talk will trace the various paths that sources of biases take through AI-powered systems and examine a proposed a framework to measure and eliminate bias in data and algorithms.Learning Objectives:1: Become aware that we don’t really know about how AI-based decision systems actually make decisions.2: Learn how data, human and cultural biases cause errors in the decisions of ML/DL/AI systems.3: Learn about a new framework to measure and quantify bias in the development of AI-based security systems.Pre-Requisites:Network defensive techniques, the basics of big-data science and some knowledge of how AI systems work.

To properly defend networks, we should be able to measure their security performance. In this short webinar, I will show you some specific techniques to use to measure the security of portions of your internal networks, such as anti-virus, malware, and anomalous event detection. Then, we will apply those same techniques in order to compare the security of various classes of defensive security products, even though vendors don’t supply such specifications.

It all begins with a trip through my first career in rock ’n’ roll as an analogue audio engineer. Then, we head to Warsaw and Perth to discover the roots of Analogue Network Security. Ultimately, we will see how to actually measure security and compare the effectiveness of defensive devices as a function of time.

Measuring security in the time domain for cyber is a critical tool for understanding and improving security postures!

If you have any questions or comments, you can find me on both Twitter and LinkedIn:

Winn Schwartau on Twitter: / winnschwartau

Winn Schwartau on LinkedIn: / winnschwartau

Learn how to apply security-enhancing ICS/SCADA/Heathcare feedback and OODA loops into applications and networking for greater operational stability.

I grew up analogue. Analogue engineering and all.

This talk is about applying analogue thinking to Network Security.

It’s about a different way of approaching our defenses, understanding the attackers and hopefully will inspire others. It’s about a mélange of concepts, many analogue, that when combined in various ways, I hope will help our industry.

My goal is to introduce some ideas more conventionally thought of as ‘analogue’ than digital, then glue them together in various ways to offer different views on how to solve security problems - whether they be in the cyber, physical or human domains.

Winn Schwartau is one of the world's top experts on security, privacy, infowar, cyber-terrorism, and related topics. He is also the president and founder of The Security Awareness Company.

Winn is gifted at making highly technical security subjects understandable and entertaining. In addition to being called "The Civilian Architect of Information Warfare," he is one of the country's most sought after experts on information security, infrastructure protection, and electronic privacy. He has authored more than 12 security books and has been the recipient of a host of industry recognitions. You can read a lot more about Winn's publications and history on his site.

PhreakNIC is a technology conference held annually in Middle Tennessee. PhreakNIC started as an infosec hacker convention but has expanded over the years to include the maker scene, ham radio, DIY engineering, space and science nerds, the skeptics community, electronic and experimental music, gamers, anime, and general geekery.

PRESENTATION MATERIALS:

http://gsec.hitb.org/materials/sg2015/

PRESENTATION ABSTRACT:

This talk is about applying analogue thinking to Network Security.

It’s about a different way of approaching our defenses, understanding the attackers and hopefully will inspire others. It’s about a mélange of concepts, many analogue, that when combined in various ways, I hope will help our industry.

My goal is to introduce some ideas more conventionally thought of as ‘analogue’ than digital, then glue them together in various ways to offer different views on how to solve security problems – whether they be in the cyber, physical or human domains.

Note: In his usual animated and dynamic style, Schwartau assembles some fascinating concepts and approaches to security that have evolved over the last 20 years. You will not be bored!

ABOUT WINN SCHWARTAU

As an acknowledged global expert in the field of information security, Mr. Schwartau has testified before Congress, advised committees and has consulted as an expert witness. He has appeared regularly on popular US, European and Asian television shows, (CNN, BBC, ITV, ABC, CBS, NBC, CNBC), as well as multiple radio shows nationwide. He has been featured in dozens of documentaries aired on The Learning Channel, Discovery Channel, A&E, History, BBC, CBC and more.

His first non-fiction book, “Information Warfare: Chaos on the Electronic Superhighway (1993, 1994, 1996, 1997) developed the concepts and taxonomies of Information Warfare and Cyberterrorism. The principles he developed in “Time Based Security,” (1999, 2001) have redefined how security is measured, and employs means to quantify network protection, detection and reaction processes. These new principles of security are being rapidly expanded to encompass all three elements of the new security triad: people, physical and cyber.

With thousands of credits to his name, Schwartau writes on security, information warfare, privacy, culture and how they all fit together. He consults with private and government organizations around the world, constantly pushing the envelope of understanding and thought. Major White Papers include Verisign: Defining PKI and eFortress: Visualization.

Journalist Brian Prince speaks with Winn Schwartau, CEO of, The Security Awareness Company, about his session "Analogue Network Security" from RSA Conference 2015 in San Francisco.