1 / 8

4 th Control System Cyber-Security Workshop

4 th Control System Cyber-Security Workshop. Exchanging ideas on HEP security. Dr. Stefan L üders (CERN Computer Security Officer) 4 th (CS) 2 /HEP Workshop, San Francisco (California) October 6 th , 2013. Attackers vs. Defense. There is no 100% security.

leola
Télécharger la présentation

4 th Control System Cyber-Security Workshop

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. 4th Control SystemCyber-Security Workshop Exchanging ideas on HEP security • Dr. Stefan Lüders (CERN Computer Security Officer) 4th (CS)2/HEP Workshop, San Francisco (California)October 6th, 2013

  2. Attackers vs. Defense • There is no 100% security. • Security is as good as weakest link:Attacker chooses time, place, methodDefender needs to protect against all…

  3. Attackers vs. Defense • There is no 100% security. • Security is as good as weakest link:Attacker chooses time, place, methodDefender needs to protect against all… • Targeted attackers (APTs) are focused and keen,have better skills/networks, are better financed/resourced • The untargeted/stupidattackers might be caught… • Automatisms, at least, can be fought. • Defense usually lacks money/resources/networks. • (International) Law is always a step behind. “Anonymous is a handful of geniusessurrounded by a legion of idiots.”Cole Stryker

  4. Attackers vs. Defense

  5. A small quiz. • Quiz: Which URL leads you to www.ebay.com ? • http://www.ebay.com\cgi-bin\login?ds=1%204324@%31%33%37 %2e%31%33%38%2e%31%33%37%2e%31%37%37/p?uh3f223d • http://www.ebaỵ.com/ws/eBayISAPI.dll?SignIn • http://scgi.ebay.com/ws/eBayISAPI.dll?RegisterEnterInfo&siteid=0&co_partnerid=2&usage=0&ru=http%3A%2F%2Fwww.ebay.com&rafId=0&encRafId=default • http://secure-ebay.com •  •  •  • 

  6. From the Newsroom

  7. (CS)2 in HEP ― The Objectives • Scope: • All security aspects related with HEP control systems • Control PCs, control software, controls devices, accounts, … • Planning aspects, implementation aspects, operational aspects, … • Objectives: • Raise awareness • Exchange of good practices, ideas, and implementations • Discuss what works & what not, pros & cons • Report on security events, lessons learned & successes • Update on the progress made since the last workshop • If there are questions, feel free to ask at anytime!!! • The agenda is very flexible to accommodate any changes !

  8. (CS)2 in HEP ― The Agenda • Enjoy! • https://indico.cern.ch/conferenceDisplay.py?confId=217457

More Related