Presentation is loading. Please wait.

Presentation is loading. Please wait.

Cyber Security Trends and Challenges

Published byDoddy Halim Modified over 5 years ago

Similar presentations

Presentation on theme: "Cyber Security Trends and Challenges"— Presentation transcript:

1 Cyber Security Trends and Challenges
Ravi Sandhu Executive Director Professor of Computer Science Lutcher Brown Chair in Cyber Security Financial Executives International San Antonio Chapter March 19, 2019 © Ravi Sandhu World-Leading Research with Real-World Impact!

2 ICS Mission and History
Sustained excellence in leading edge research Graduated to a self-sustaining operation Founded by start-up funding from State of Texas Major expansion by winning NSF C-SPECC grant In collaboration with: College of Engineering College of Business College of Education Open Cloud Institute Cyber Center for Security & Analytics National Security Collaboration Center Partnership with 4 NISD High Schools: Harlan, Woodson, Taft, Business Careers Established world class laboratories for: Secure cloud computing & Malware research © Ravi Sandhu World-Leading Research with Real-World Impact!

3 Cyber Security Perspective
© Ravi Sandhu World-Leading Research with Real-World Impact!

4 Cyber Security in a Nutshell
“My dear, here we must run as fast as we can, just to stay in place. And if you wish to go anywhere you must run twice as fast as that.” ― Lewis Carroll, Alice in Wonderland © Ravi Sandhu World-Leading Research with Real-World Impact!

5 Cyber Security in a Nutshell
“My dear, here we must run as fast as we can, just to stay in place. And if you wish to go anywhere you must run twice as fast as that.” ― Lewis Carroll, Alice in Wonderland © Ravi Sandhu World-Leading Research with Real-World Impact!

6 Natural vs Cyber Science
Elephant Problem Cyber-Elephant Problem Applied vs Foundational Science: Cyber-elephants require applied and foundational combined Present vs Future Focus: Rapidly evolving cyber-elephants require future focus © Ravi Sandhu World-Leading Research with Real-World Impact!

7 World-Leading Research with Real-World Impact!
Success Stories The ATM (Automatic Teller Machine) system is secure enough global in scope US President’s nuclear football © Ravi Sandhu World-Leading Research with Real-World Impact!

8 World-Leading Research with Real-World Impact!
Security Objectives INTEGRITY modification AVAILABILITY access CONFIDENTIALITY disclosure © Ravi Sandhu World-Leading Research with Real-World Impact!

9 Covers privacy and intellectual property protection
Security Objectives USAGE purpose Covers privacy and intellectual property protection INTEGRITY modification AVAILABILITY access CONFIDENTIALITY disclosure © Ravi Sandhu World-Leading Research with Real-World Impact!

10 World-Leading Research with Real-World Impact!
What can Security Technologists learn from the History of the Internet? © Ravi Sandhu World-Leading Research with Real-World Impact!

11 World-Leading Research with Real-World Impact!
Internet Protocols TCP RFC 793 Sept. 1981 IPv4 RFC 791 Sept. 1981 © Ravi Sandhu World-Leading Research with Real-World Impact!

12 The TCP/IP Lesson Agility = Good enough for now +
Agility trumps perfection Not quite the same as Good enough trumps perfect Agility = Good enough for now + Future-proof for uncertain future © Ravi Sandhu World-Leading Research with Real-World Impact!

13 World-Leading Research with Real-World Impact!
IP Spoofing Story ALLOW GOOD GUYS IN KEEP BAD GUYS OUT IP Spoofing predicted in Bell Labs report ≈ 1985 Unencrypted Telnet with passwords in clear 1st Generation firewalls deployed ≈ 1992 IP Spoofing attacks proliferate in the wild ≈ 1993 Virtual Private Networks emerge ≈ late 1990’s Vulnerability shifts to the client PC Network Admission Control ≈ 2000’s Persists as a Distributed Denial of Service mechanism Most of these fixes have not changed or extended IPv4 © Ravi Sandhu World-Leading Research with Real-World Impact!

14 Laws and Principles of Cyber Security
© Ravi Sandhu World-Leading Research with Real-World Impact!

15 World-Leading Research with Real-World Impact!
Laws of Attackers Attackers exist You will be attacked Attackers have sharply escalating incentive Money, terrorism, war, espionage, sabotage, … Attackers are lazy (follow path of least resistance) Attacks will escalate BUT no faster than necessary Attackers are innovative (and stealthy) Eventually all feasible attacks will manifest Attackers are copycats Known attacks will proliferate widely Attackers have asymmetrical advantage Need one point of failure © Ravi Sandhu World-Leading Research with Real-World Impact!

16 Beware of “silver bullets”
Principles of Defense Prepare for tomorrow’s attacks, not just yesterday’s Good defenders strive to stay ahead of the curve, bad defenders forever lag Take care of tomorrow’s attacks before next year’s attacks Researchers will and should pursue defense against attacks that will manifest far in the future BUT these solutions will deploy only as attacks catch up Use future-proof barriers Defenders need a roadmap and need to make adjustments It’s all about trade-offs Security, Convenience, Cost Beware of “silver bullets” © Ravi Sandhu World-Leading Research with Real-World Impact!

Download ppt "Cyber Security Trends and Challenges"

Similar presentations

Authentication: the problem that will not go away Prof. Ravi Sandhu Chief Scientist 703 283 3484 Protecting Online Identity.

Authentication: the problem that will not go away Prof. Ravi Sandhu Chief Scientist Protecting Online Identity.
1 Trust Evidence in Heterogeneous Environments: Towards a Research Agenda Ravi Sandhu Executive Director and Endowed Professor May 2010

1 Trust Evidence in Heterogeneous Environments: Towards a Research Agenda Ravi Sandhu Executive Director and Endowed Professor May 2010
INSTITUTE FOR CYBER SECURITY 1 Application-Centric Security: How to Get There Prof. Ravi Sandhu Executive Director and Endowed Chair Institute for Cyber.

INSTITUTE FOR CYBER SECURITY 1 Application-Centric Security: How to Get There Prof. Ravi Sandhu Executive Director and Endowed Chair Institute for Cyber.
1 Trust Evidence in Heterogeneous Environments: Towards a Research Agenda Ravi Sandhu Executive Director and Endowed Professor May 2010

1 Trust Evidence in Heterogeneous Environments: Towards a Research Agenda Ravi Sandhu Executive Director and Endowed Professor May 2010
Institute for Cyber Security (ICS) Prof. Ravi Sandhu Executive Director and Lutcher Brown Endowed Chair 210 458 6081.

Institute for Cyber Security (ICS) Prof. Ravi Sandhu Executive Director and Lutcher Brown Endowed Chair
Sandhus Laws of Cyber Security Prof. Ravi Sandhu Executive Director and Endowed Chair Institute for Cyber Security University of Texas at San Antonio Chief.

Sandhus Laws of Cyber Security Prof. Ravi Sandhu Executive Director and Endowed Chair Institute for Cyber Security University of Texas at San Antonio Chief.
1 The Challenge of Data and Application Security and Privacy (DASPY): Are We Up to It? Ravi Sandhu Executive Director and Endowed Professor February 21,

1 The Challenge of Data and Application Security and Privacy (DASPY): Are We Up to It? Ravi Sandhu Executive Director and Endowed Professor February 21,
Institute for Cyber Security ASCAA Principles for Next- Generation Role-Based Access Control Ravi Sandhu Executive Director & Endowed Professor Institute.

Institute for Cyber Security ASCAA Principles for Next- Generation Role-Based Access Control Ravi Sandhu Executive Director & Endowed Professor Institute.
1 Laws of Cyber Security Ravi Sandhu Executive Director and Endowed Professor September 2010

1 Laws of Cyber Security Ravi Sandhu Executive Director and Endowed Professor September 2010
1 New Trends and Challenges in Computer Network Security Ravi Sandhu Executive Director and Endowed Professor September 2010

1 New Trends and Challenges in Computer Network Security Ravi Sandhu Executive Director and Endowed Professor September 2010
© Ravi Sandhu www.list.gmu.edu Introduction to Information Security Ravi Sandhu.

© Ravi Sandhu Introduction to Information Security Ravi Sandhu.
1 Cyber Security Research: A Personal Perspective Prof. Ravi Sandhu Executive Director and Endowed Chair January 18, 2013

1 Cyber Security Research: A Personal Perspective Prof. Ravi Sandhu Executive Director and Endowed Chair January 18, 2013
1 The Challenge of Data and Application Security and Privacy (DASPY): Are We Up to It? Ravi Sandhu Executive Director and Endowed Professor February 21,

1 The Challenge of Data and Application Security and Privacy (DASPY): Are We Up to It? Ravi Sandhu Executive Director and Endowed Professor February 21,
1 Grand Challenges in Data Usage Control Prof. Ravi Sandhu Executive Director and Endowed Chair

1 Grand Challenges in Data Usage Control Prof. Ravi Sandhu Executive Director and Endowed Chair
1 The Science, Engineering, and Business of Cyber Security Prof. Ravi Sandhu Executive Director, Institute for Cyber Security Lutcher Brown Endowed Chair.

1 The Science, Engineering, and Business of Cyber Security Prof. Ravi Sandhu Executive Director, Institute for Cyber Security Lutcher Brown Endowed Chair.
Future of Access Control: Attributes, Automation, Adaptation

Future of Access Control: Attributes, Automation, Adaptation
1 Security and Trust Convergence: Attributes, Relations and Provenance Prof. Ravi Sandhu Executive Director, Institute for Cyber Security Lutcher Brown.

1 Security and Trust Convergence: Attributes, Relations and Provenance Prof. Ravi Sandhu Executive Director, Institute for Cyber Security Lutcher Brown.
1 Plenary Panel on Cloud Security and Privacy: What is new and What needs to be done? Ravi Sandhu Executive Director and Endowed Professor December 2010.

1 Plenary Panel on Cloud Security and Privacy: What is new and What needs to be done? Ravi Sandhu Executive Director and Endowed Professor December 2010.
INSTITUTE FOR CYBER SECURITY 1 Cyber Security: Past, Present and Future Prof. Ravi Sandhu Executive Director and Endowed Chair Institute for Cyber Security.

INSTITUTE FOR CYBER SECURITY 1 Cyber Security: Past, Present and Future Prof. Ravi Sandhu Executive Director and Endowed Chair Institute for Cyber Security.
1 Institute for Cyber Security Prof. Ravi Sandhu Executive Director and Endowed Chair February 4, 2015

1 Institute for Cyber Security Prof. Ravi Sandhu Executive Director and Endowed Chair February 4, 2015

Similar presentations

Ads by Google