Cyber Security and You Ethical Hacking Business Breakfast Thursday - PowerPoint PPT Presentation

Cyber Security and You Ethical Hacking Business Breakfast Thursday 12 January 2017

Cyber Security and You Ethical Hacking Business Breakfast Thursday 12 January 2017 Welcome from Chamber of Commerce Alison Henderson Chief Executive Officer Chamber of Commerce abertay.ac.uk

Cyber Security and You Ethical Hacking Business Breakfast Thursday 12 January 2017 University Welcome and Introduction to Ethical Hacking Team Professor Nigel Seaton Principal and Vice-Chancellor Abertay University abertay.ac.uk

Cyber Security and You Ethical Hacking Business Breakfast Thursday 12 January 2017 Welcome from the Ethical Hacking Team and Introduction to Student Demonstrators Mr Colin McLean Dr Natalie Coull Lecturers in Ethical Hacking Abertay University abertay.ac.uk

Cyber Security and You Ethical Hacking Business Breakfast Thursday 12 January 2017 Welcome from the Ethical Hacking Team. Colin McLean, Natalie Coull, Lecturers in Ethical Hacking • Short introduction to Ethical Hacking at Abertay. • A simple example of an “Ethical Hacking” mindset. abertay.ac.uk

“Ethical Hacking” is an interesting term! • We examine hackers tools, tactics and behaviour and THEN devise the most appropriate countermeasures. • In the main, I teach how cyber criminals behave. • Sounds a little odd but it is actually thinking about security in the normal way! abertay.ac.uk

How would you break in? Garage roof? Window? Garage? abertay.ac.uk

• The better we can think like the criminal – the easier it becomes to secure… • Now we can think of the mitigations to these attacks. • So this is what we do….. abertay.ac.uk

World- wide job market….. • 2million people short in 2017. • 46% of jobs unfilled or filled with unsuitable people. • Job market is largely vocational e.g. networking, developing, support and testing. abertay.ac.uk

Graduate destinations? NCC Group (x20), Firstbase (x4), Qinetiq, KPMG, Cigital, PWC, RBS, HSBC, MWR Labs, GCHQ, Tesco Bank, West point security, NCR, NTA Monitor, Mandalorian, Context IS, GFI Software, Pentest limited ,White Stratos, ECS Scotland, Netitude, Net- defence…… abertay.ac.uk

An example - Passwords • Eight or more characters . • A mix of lower and upper case. • At least one number (0-9) • Here’s a great example a$5dQWER^%2eR!# • Don’t do this. Don’t do that. Don’t do the next.. abertay.ac.uk

This leads to predictable passwords. • My daughter’s name is Wendy. She was born in 1994. What is my password??? • Wendy1994 abertay.ac.uk

Some positive advice… Methods. • Capitalise differently: • weNdy1994 • Move the numbers: • 1994weNdy or wen1994dy • Non-alpha numeric can be used intelligently • (Wendy1994) , *wendy1994*, <wendy1994> • Duplicate: • weNdy1994weNdy1994 • Add another word. • wendy1994Dundee • A sentence: • Wendy was born in 1994 or Wendywasbornin1994! abertay.ac.uk

And more… • Colourise: • TangerineColin1963 or Blue legged sheepdog • Exaggeration: • December 32,1963 • Humour: • Dyslexic man walks into a bra • Give yourself a title: • Sir Colin the 94th • Slang: • EhmColinNEhLikePehs • Insults! Smut! • Think of your own…. • Combination of the above is a good idea… abertay.ac.uk

Cyber Security and You Ethical Hacking Business Breakfast Thursday 12 January 2017 Ethical Hacking Students Demonstrations. Niall and Peter abertay.ac.uk

Cyber Security and You Ethical Hacking Business Breakfast Thursday 12 January 2017 Mr Keith Brown MSP Cabinet Secretary for Economy, Jobs and Fair Work Scottish Government abertay.ac.uk

Cyber Security and You Ethical Hacking Business Breakfast Thursday 12 January 2017 Vote of thanks Blair Davidson Director Chamber of Commerce abertay.ac.uk

Cyber Security and You Ethical Hacking Business Breakfast Thursday 12 January 2017