Stiennon Keynote at Trusted Computing Conference 2013, Orlando

Trust: The Lynchpin of Society

Thursday, September 12, 13

June 6, 2013. It begins

2


Why SIGINT Matters

3


Scenarios

• Member of Congress contacts with stock brokers

• Volume of calls between acquirer and target

• CEO-CFO interactions

• Journalist-whistleblower interactions

• Petraeus-Broadwell

4

Guardian image


If Only It Were Just Meta Data

5

...the Justice Department has secretly interpreted federal surveillance law to permit thousands of low-

ranking analysts to eavesdrop on phone calls.


“Collect everything”

6


PRISM’s Rogue Gallery

7


Fall out

8


Trust eroding

9


Industry Responding

10


Too Late

11


Summing Up The Reactions

12


The Old Threat Hierarchy

• Information Warfare

• CyberCrime

• Hactivism

• Vandalism

• Experimentation13


The New Threat Hierarchy

• Surveillance State

• Information Warfare

• CyberCrime

• Hactivism

• Vandalism

• Experimentation14


GENIE is Out Of the Bottle

Additionally, under an extensive effort code-named GENIE, U.S. computer specialists break into foreign networks so that

they can be put under surreptitious U.S. control. Budget documents say the $652 million project has placed "covert implants," sophisticated malware transmitted from far away, in computers, routers and firewalls on tens of thousands of machines every year, with plans to expand those numbers

into the millions. -Washington Post

15


Implications for the IT Industry

• The state as threat actor

• Researching NSA malware

• Defending against NSA surveillance

16


The Enterprise Is Compromised

• If every employee’s email and phone conversations are captured what are breach notification requirements?

• HIPPA?

• GLB?

• SOX?17


Good Times For Trusted Computing?

• A universal threat must be met with universal security

• Spending on encryption set to double within a year

• Protecting keys will lead to massive investment in security

18


Look For a Ten Fold Increase in Spending

19

0

175

350

525

700

2003 2013 2023

cyber crime

cyber espionage

surveillance state$639 Billion


A Call To Arms

This new threat to Confidentiality, Integrity, Availability, Privacy, Commerce, Democracy, and Stability, greater than all others, is what Trusted Computing was built to counter. Let’s fix this, before it is too late.

20


Stiennon Keynote at Trusted Computing Conference 2013, Orlando

Technology

Transcript of Stiennon Keynote at Trusted Computing Conference 2013, Orlando