1. In Cyberspace No-One Can Hear You Scream
Mena Information Security Conference
Kempinski Hotel, Dead Sea, Jordan,
18th-19thApril 2012
Adrian CULLEY
Global Security Engineer

2. In Cyberspace no-one can hear you scream

3. In Cyberspace no-one can hear you scream
Si vis pacem, para bellum.
Publius Flavius Vegetius Renatus – De Re Militari 4/5 AD
If you want peace, prepare for War.

4. In Cyberspace no-one can hear you scream
Advanced Persistent Threat??
Hostile Nation State
Anomaly?

5. In Cyberspace no-one can hear you scream
The Great Game – 19th / 20th Century

6. In Cyberspace no-one can hear you scream

7. In Cyberspace no-one can hear you scream

8. In Cyberspace no-one can hear you scream
The Great Game – 21st Century?

9. In Cyberspace no-one can hear you scream
The best form of defence is attack –
William Henry Drayton
Covert
Passive
Overt but non-attributable (ish) – Stuxnet, Duqu
Overt and attributable – yet to be seen?
Red team, Blue team? Poacher, Gamekeeper?

10. In Cyberspace no-one can hear you scream
Where will we find and build these skills?

11. In Cyberspace no-one can hear you scream
Munitions
Munitions?

12. In Cyberspace no-one can hear you scream
Geneva Convention? Rules of engagement?
Working Towards Rules for Governing Cyber Conflict. Rendering the Hague And Geneva Convention in Cyberspace.
East-West Institute 2011

13. In Cyberspace no-one can hear you scream

14. In Cyberspace no-one can hear you scream

15. In Cyberspace no-one can hear you scream

16. In Cyberspace no-one can hear you scream
What can we do NOW?

17. In Cyberspace no-one can hear you scream

18. In Cyberspace no-one can hear you scream
Pristine Build – API’s running
Pristine Build - Network connected
Pristine Build - Internet connected
Golden RAM

19. In Cyberspace no-one can hear you scream
Golden RAM
Dirty RAM
Differential Analysis -
Direct Kernel Object Manipulation (DKOM)
How do I do this on an National / Enterprise scale?

20. In Cyberspace no-one can hear you scream
Si vis pacem, parabellum “coding is the new latin”

21. In Cyberspace no-one can hear you scream
Thank You
شكرا
Questions?
Adrian Culley