When's enough, enough (oct 2015) slideshare 2

Post on 15-Apr-2017

81 views 0 download

Transcript of When's enough, enough (oct 2015) slideshare 2

We are pleased to present a new show in cyber

security, entitled . . .

Enough, “When’s

Enough?”

All is well at Int’l Phishing Industries. . .

Int’l Phishing Industries

I’ve got

the OPM

on the hook!

Oh good, another one!Great!

The same

tricks keep

working. . .

Int’l Phishing Industries

OPM

All is well at Int’l Phishing Industries. . .

Was the OPM Breach really a surprise???

Breaking

NewsCardSystems

2005

TD Ameritrade

2015

Breaking News

2007Breaking

News

2011Breaking

News

2013

Breaking

News

2014

Breaking News

Home Depot, DHS

Anthem

RSA

Target

Was the OPM Breach really a surprise???

Breaking

NewsCardSystems

2005

TD Ameritrade

2015

Breaking News

2007Breaking

News

2011Breaking

News

2013

Breaking

News

2014

Breaking News

Home Depot, DHS

Anthem

RSA

Target

It was the SAME type of attack as Anthem.

Which was the SAME as Home Depot. . .

and DHS. . . and Target.

And Phishing Attacks go UNDETECTED for years–

like Pawn Storm 2007-2014

Of course not. . .

If you think it ain’t broke, the Government’s$4.5 billion

Einstein System failed

to protect

over 5 MILLION

Fingerprints also stolen from the

OPM

If you think it ain’t broke, the Government’s$4.5 billion

Einstein System failed

to protect

More BYOD, social media & apps make it even easier for me.

And it’s getting worse. . .

More BYOD, social media & apps make it even easier for me.

They’re now specifically targeting

containers and virtualization too!

And it’s getting worse. . .

Here’s a thought. .

.

INTRODUCING

Let’s try something

DIFFERENT!

Hardware-Separated Operating Systems

Willy & Wally WorkPlay

Starring

Let’s try something

DIFFERENT!

Now appearing . . . Identical . . .

Complete OS’s. . .

EACH with its OWN

resources . . .

I’ve got MY OWN kernel,

storage, RAM & drivers.

Now appearing . . . Identical . . .

Complete OS’s. . .

EACH with its OWN

resources . . .

I’ve got MY OWN kernel,

storage, RAM & drivers.

I’ve got MY OWN kernel,

storage, RAM & drivers,

TOO!Now appearing . . . Identical . . .

Complete OS’s. . .

EACH with its OWN

resources . . .

Juggling between WORK and PLAY in 2 separate OS’s

that CAN’T access each

other

W

W

WW

W

Wally can’t touch me!

Juggling between WORK and PLAY in 2 separate OS’s

that CAN’T access each

other

W

W

WW

W

P

P

PP

P

Wally can’t touch me! And Willy

can’t touch me!

Juggling between WORK and PLAY in 2 separate OS’s

that CAN’T access each

other

Mom learns the importance of HARDWARE

SEPARATION . . .

Boys! Learn to

share. Share your

kernel . . . Share

your memory . . .

Share ALL of your

resources.

Mom learns the importance of HARDWARE

SEPARATION . . .

Boys! Learn to

share. Share your

kernel . . . Share

your memory . . .

Share ALL of your

resources.

NO Mom, sharing is NOT GOOD.

When one of us gets a virus, do you want the other one

infected too?

Mom learns the importance of HARDWARE

SEPARATION . . .

Now Wally’s boss doesn’t have to worry

about what Willy is doing.

BYOD just became a

lot easier . . .

Now Wally’s boss doesn’t have to worry

about what Willy is doing.

IT Admi

n

Here Willy and Wally go to work

for the Government. . .

Here Willy and Wally go to work

for the Government. . . I’m doing

CLASSIFIED only

Here Willy and Wally go to work

for the Government. . . I’m doing

EVERYTHING else

I’m doing CLASSIFIED

only

Going Out

of

Business

Sale

Things aren’t so well at Int’l Phishing anymore

Int’l Phishing Industries

I hacked in

but can’t

access t

he

network

Going Out

of

Business

Sale

DRAT!

FOILED AGAIN

by Hardware-

Separated

Operating Systems!

Any luck?

Things aren’t so well at Int’l Phishing anymore

Int’l Phishing Industries

Anybody wanna buy my laptop?

I hacked in

but can’t

access t

he

network

Going Out

of

Business

Sale

Will you take this

stupid suit they

made me wear in

this cartoon play?

DRAT!

FOILED AGAIN

by Hardware-

Separated

Operating Systems!

Any luck?

Things aren’t so well at Int’l Phishing anymore

Int’l Phishing Industries

Before you go, did you know?

Before you go, did you know?

*Author’s note: Willy and Wally are fictional characters who accurately portray WorkPlay Technology. Otherwise, any resemblance to persons living or dead is coincidental.

IT Admi

n

Willy & Wally* are less than 10K lines of

code.