ORIGINAL SWISS ETHICAL HACKING Your texte here … © High-Tech Bridge SA, Geneva, Switzerland – Combating cybercrime: efficiency or effectiveness? World Summit on the Information Society Forum th of May 2015

ORIGINAL SWISS ETHICAL HACKING Your texte here … © High-Tech Bridge SA, Geneva, Switzerland – Some quick facts and numbers (2014)  Worldwide information security spending will reach $71.1 billion, almost 8% growth as organizations become more threat-aware – Gartner  Cost of the global cybercrime is about $445 billion per year, a 33% percent growth - Center for Strategic and International Studies (CSIS) and McAfee  Companies experience in average 2 successful attacks per week – Ponemon Institute and Hewlett-Packard  Cybercrime is rising significantly in Europe, which reported a 41% jump in the number of incidents detected over the last year – PriceWaterhouseCoopers

ORIGINAL SWISS ETHICAL HACKING Your texte here … © High-Tech Bridge SA, Geneva, Switzerland – The Origins of the Cybercrime  Management: unawareness, ignorance, wrong priorities, negligence.  IT Teams: lack of time and budget, lack of competence, negligence.  Globalization and inequality: many talented young people cannot get a well-paid job to apply their skills in their countries, at the same time they cannot move to developed countries due to immigration restrictions.  Weak or inefficient legal system: information exchange between some countries is very slow or complicated, while some countries does not consider many sorts of cybercrime a crime. Law enforcement agencies don’t‘ have enough experience and skills to investigate cybercrime.  Inefficient or ineffective information security products and solutions: cybersecurity market is rising, however very few cybersecurity company manage to create both efficient and effective solutions capable to resolve real problems and mitigate appropriate risks.

ORIGINAL SWISS ETHICAL HACKING Your texte here … © High-Tech Bridge SA, Geneva, Switzerland – Two main problems the infosec industry has  Lack of efficiency: security product, solution, SaaS or service that has poor quality and doesn’t solve the problem it pretends to. Quite easy to detect and thus to avoid.  Lack of effectiveness: security product, solution, SaaS or service that are efficient in comparison to other products, but solve the problem that [almost] nobody actually need to solve.

ORIGINAL SWISS ETHICAL HACKING Your texte here … © High-Tech Bridge SA, Geneva, Switzerland – Proposed Solutions  Management shall be involved directly, and directly responsible for corporate cyber security.  Governments shall integrate national cybersecurity into their financial, educational, and political programs.  Cybersecurity company shall focus on real priorities and needs of their customers, not about making money on stock market hype. Thank you for your attention! Questions: