0x70 Eric Bärenzung. Cyber risks. in the satellite industry

Transcription

1 Cyber risks in the satellite industry

2

3 A critical infrastructure for many sectors

4 A km high overview Partners / Suppliers / Customers Satellite Operator Ground station

5 Main threats

6 Fraudulent usage

7 Pay TV and Satellite Key Sharing PayTV Operator Legal Subscriber Illegal Subscriber Subscriber using illegal additional rights

8 Signal jamming

9 Signal jamming

10 In a ideal Operations mode

11 Baikonour, we have a problem Taking control of the satellite

12 To resume Protecting and monitoring signal integrity is key!

13 Then, as for any company Partners / Suppliers / Customers Phishing Malware Ransomware BYOD Bring Your Own Device DDoS Distributed Denial Of Services

14 but with special interests Partners / Suppliers / Customers Espionage including Office reconnaissance IP mapping Social Engineering Etc. APT (Advanced Persitent Threat)

15 Why hacking? Only few of the potential reasons

16 Just for fun?! Sean Caffrey UK citizen 25 years old Ranks, usernames and addresses of more than 800 users satellite phones

17 Or «dreaming» to be a spy. US engineer enamored with spy dramas gets 5 years for trying to sell secrets to Foreign secret service agent 49 years old More info on: Information sold for USD

18 Command and Control

19 The standard way Hacker Find a way to install a malware/ransomware C&C ISP Internet Service Provider Activate and control the malware You

20 «Easy» to stop (But you will have to do many times) C&C ISP Internet Service Provider Ask ISP to take down Domain / server

21 Talking about Wannacry Source: More info on Source: Marcus Hutchins Kronos

22 Using satellite transmission Port / Service unknown Þ Invalid request Þ Call droped? Call broadcasted by the satellite The infected system calls «decoy» satellite subscribers C&C pretends to be «decoy» user Þ Call accepted C&C? C&C anwers to the attacked system acting as it was the «decoy» user Internet Malware sends back to C&C the hacked data Source:

23 Cybersecurity: A business opportunity

24 Satellite industry starting to offer cyber security services

25 The future? Quantum computing a «hack-proof» communication system Source:

26 Framework For Critical Infrastructure

27 NIST Cybersecurity Framework Identify Protect Detect Respond Recover Asset Management Access Control Anomalies & Events Respond Planning Recovery Planning Business Environment Awareness & Training Security Continuous Monitoring Communications Improvements Governance Data Security Detection Processes Analysis Communication Risk Assesment Risk Management Strategy Info Protection Processes and Procedures Maintenance Protective Technology Mitigation Improvements

28 NIST Cybersecurity Framework Identify Protect Detect Respond Recover HIGH Risk Assesment PROBABILITY LOW BUSINESS IMPACT HIGH Think on Cyber Insurance Define your priorities

29 NIST Cybersecurity Framework Identify Protect Detect Respond Recover Awareness & Training 84% cyberattacks reported been due, at least in part, to human error (**) The X-Factor (**)

30 NIST Cybersecurity Framework Identify Protect Detect Respond Recover Acquisition Anomalies & Events The rise of Machine Learning & Artificial Intelligence Action Analyze ACTION ACTION

31 NIST Cybersecurity Framework Identify Protect Detect Respond Recover þ þ Crisis Management requires PREPARATION and TRAINING ü Who? ü What? ü How? ü When? Mitigation ü Regional Cyber Drill Recovery Planning

32 NIST Cybersecurity Framework Identify Protect Detect Respond Recover Improve Develop Test Service level Last backup Incident Recovery Point Objective RPO Down Time Degraded Service Return Time on Objective RTO Recovery Planning Back to standard operations Time

33 To resume Take aways

34 3 take aways Satellite industry is a sensitive target for hackers Start, if not done already, to Evaluate your risks Develop your strategy to protect your organization from cyber threats Cybersecurity is a business opportunity To differentiate from your competitors And also to bring you additional revenues opportunities

35 Thanks for your attention Eric Bärenzung