Powered by Powered by Connecting Organizations, Building Community Michigan Cyber Range
Powered by Introduction 2
Powered by Introduction l Dr. Joe Adams l Vice President of Research and Cyber Security l 26 years Army Signal Corps l Associate Professor at US Military Academy l 3 time winner of the NSA’s Inter- Service Academy CDX l Senior Member IEEE 3
Powered by Agenda l Who am I? l Where is the Threat? l How am I at risk? l How to prepare? 4
Powered by Attack Surface 5
Powered by Attack Surface 6
Powered by Attack Surface 7
Powered by Attack Surface 8
Powered by Attack Surface 9
Powered by Why is this so hard? 10
Powered by Plans 11
Powered by The Price of Doing Business 12
Powered by 13
Powered by Security Theater 14
Powered by An Example of Why 15
Powered by What can we do? 16
Powered by What has to be protected? 17
Powered by What can we monitor? 18
Powered by What is on its own? 19
Powered by Make a plan 20
Powered by Policy 21
Powered by Education and Awareness 22
Powered by The Result 23
Powered by But then… 24
Powered by Practice the plan 25
Powered by Communication 26
Powered by Fight complacency 27
Powered by Internal Audits 28
Powered by Build Habits 29
Powered by It only takes once 30
Powered by What we’ve talked about 31
Powered by What we’ve talked about 32
Powered by What we’ve talked about 33
Powered by What we’ve talked about 34
Powered by l Skills training & maintenance l Classes l Events l Networking l Accessible l Persistent Using the Cyber Range
Powered by Classes l 17 Certifications l Pen Testing, Incident Handling, Ethical Hacking l Forensics l Leadership l Disaster Recovery l Classes held: l At Merit or at the customer’s location l Online l Cost includes: l Tuition l Certification Exam
Powered by Capture the Flag l Self-Paced l Threads of flags to find l Individual skills l Penetration testing l Forensics l SCADA l Scoring engine l Encourages competition
Powered by Force on Force l Paintball l Multiple teams; everyone for themselves l Penetrate system, plant a flag, secure the system l Red vs Blue l Focus on system & service security and continuity l Force on Force l Incident Response l Asynchronous l Red team creates havoc l Blue team diagnoses and recovers
Powered by Welcome to Alphaville
Powered by Alphaville
Powered by Alphaville l A persistent training environment l A Network of Things l More realistic than an IP range l Every exercise is a separate, customizable copy of the town and its infrastructure l Heterogeneous environment l Wide variety of operating systems and services l Residents of Alphaville provide “background noise” l Bot nets, rootkits, and backdoors
Powered by l Flexible terms & pricing l Pay for what you use l Voucher/Credit system Using the Cyber Range
Powered by Questions? 43