Heavy Chef Session - Justin Stanford's presentation on Online Security
Download as PPTX, PDF0 likes331 views
Justin Stanford, CEO of 4D Innovations Group, discusses his journey as an entrepreneur and investor, highlighting his focus on the security industry. He emphasizes the increasing importance of online security due to the 'technologisation' of everyday life and the evolution of cyber threats. Stanford notes that modern-day identity has become a key target for attackers, making trust a critical commodity in the digital age.
Heavy Chef Session - Justin Stanford's presentation on Online Security
- 1. Justin StanfordCEO, 4D Innovations Group
- 2. Who am I?26, entrepreneur and investorFounder, advisor, CEO, director, investor to various companiesFirst business at 13, selling juiceWas always interested in business and technologyLeft school to enter the business world at 17Current project: 4Di Capital
- 3. Who am I?Interested in the security space from 15Became a hackerAppeared on 3rd DegreeNoticed clear trends which led me into the security industry
- 5. CompaniesFirst two startup attempts were in securityAm today involved in two:
- 6. Key Trend in my LifetimeThe technologisation of EVERYTHING
- 7. The technologisation of EVERYTHINGCommunications (E-mail, IM, VoIP, SMS)Personal & social life (Facebook, Twitter)Banking (Internet banking)Taxes (SARS E-Filing)Information (World Wide Web)Business & Shopping (E-commerce)Workplace (Remote VPN, mobile devices, video conferencing)Travel (e-Ticketing, Accomodation, Rentals)Entertainment (YouTube, Flickr, Online gaming, Virtual worlds, iTunes, MP3s)Navigation (GPS)Reading (eBooks, Kindle, Web)Writing (Word, Powerpoint, Excel)Filing (Digital storage, DMS, Dropbox)Access control (Biometrics, keypads, 2FA)
- 8. ConclusionOur entire lives are technologised and onlineSecurity is one of the singularly most important technological considerations for today and the future!Probably not a bad business to be in then…
- 9. Security IndustryInteresting thing about the security business: it’s pretty recession resilient!
- 10. Main security focus historicallyInfrastructure centric, perimeter defended networksAttackers wanted to own your COMPUTERSViruses, worms, trojans, exploitsUseful for bot nets, DDoS, sending spam, attacking other networks, stealing data, covering up hacks, trafficking in warezAttackers soon became very sophisticated, organised and financially driven
- 11. Main security focus historicallyServers & workstationsInternal apps & servicesServers & workstationsInternal apps & servicesInternet
- 12. New shiftShift away from monolithic interconnected networks with fixed perimeters to distributed devices accessing distributed services from anywhere at anytimeSecurity is now a scattered problem: You have to defend your networks, various distributed devices, various distributed services, and rely on cloud networks to do their jobHuman element now more crucial than ever
- 13. Internet
- 14. New shiftAttackers want to own your DEVICESBut even more so, attackers want to own your IDENTITYWhy?
- 15. The technologisation of EVERYTHINGCommunications (E-mail, IM, VoIP, SMS)Personal & social life (Facebook, Twitter)Banking (Internet banking)Taxes (SARS E-Filing)Information (World Wide Web)Business & Shopping (E-commerce)Workplace (Remote VPN, mobile devices, video conferencing)Travel (e-Ticketing, Accomodation, Rentals)Entertainment (YouTube, Flickr, Online gaming, Virtual worlds, iTunes, MP3s)Navigation (GPS)Reading (eBooks, Kindle, Web)Writing (Word, Powerpoint, Excel)Filing (Digital storage, DMS, Dropbox)Access control (Biometrics, keypads, 2FA)
- 16. Devices and identityCountless possible endpoint leakages: Laptops, smart phones, cloud email accounts, cloud CRM, cloud hosted files, etcIdentity allows access to EVERYTHINGScary: majority of modern day identity is protected with a username and a passwordOne of the biggest new commodities in the modern day world: TRUSTImportant for individuals, companies, brands
- 18. MethodsPrimary attack & risk vectors todayE-mailPhishing e-mails, highly effective at identity theftAttachments to install malware, bots, key loggers, etcTake advantage of hot topics or play on concernsWebPhishing sites, fake sitesEmbedded malwareSearch engine / SEO attacksMan in the browser, man in the middleSocial engineeringConvince consumers or company staff, happening a lot!Loss or theft of devicesCareful what you trust! Don’t believe what you see.
- 19. More trendsApple MacsIt’s not coming, it’s here already!Smart phones and tablet devicesWe do a lot on these already!2009 saw 4 iPhone exploits in a few weeks!Compromise of one account compromising manySaving of user detailsGreater use of search engines and social media to spread malware, spam, phishing and create fake presences to capitalise on trustRogue security softwareBot net turf wars and increasingly intelligent malware