![Page 1: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/1.jpg)
Computer Network Defense Simulators Advance Cyberspace Protection
Chet RatcliffeEVP / CTOEADS North America Defense
EADS North America Defense S3 Inc.1476 N. Greenmount Rd. O’Fallon IL 62269Phone: [email protected]
![Page 2: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/2.jpg)
The Threat• In today’s global environment, relying
on security devices alone to protect computer networks is not enough
• Computer networks face a constantly evolving menace from cyber attacks, viruses, unauthorized probes, scans and intrusions
• Foreign Governments, Terrorists, Criminals, and Network Hackers are more determined than ever to steal information, cause disruption and destroy networks
• Inconsistent or no training of system operators in identifying and mitigating Cyber Attacks currently poses one of the biggest threats to critical computer networks.
Mitigate through People + Processes + Technology
![Page 3: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/3.jpg)
“FAA's Air-Traffic Networks Breached by Hackers” (May 7, 2009, Wall Street Journal)
“Sophisticated Botnet Causing a Surge in Click Fraud” (Sep 17, 2009, IDG News Service)
“Swedish Hacker Indicted in Cisco, NASA Attacks” (May 6, 2009, Wall Street Journal)
![Page 4: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/4.jpg)
Conficker→10 million PCs, $10 Billion
![Page 5: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/5.jpg)
- Stefan Savage, professor at UCSD and lead researcher on a recent spam study
“One in 10 people clicking through to receive the malware is a pretty sobering number“
![Page 6: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/6.jpg)
FSLJDSLFFSFU.17.23.server29.akamae.com
![Page 7: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/7.jpg)
FSLJDSLFFSFU.17.23.server29.akamae.com
Exfiltrated Data
![Page 8: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/8.jpg)
FSLJDSLFFSFU.17.23.server29.akamae.com
Sequence Number
![Page 9: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/9.jpg)
FSLJDSLFFSFU.17.23.server29.akamae.com
Bot ID
![Page 10: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/10.jpg)
Internet
Local Area Network
Access Control Point
Perimeter Defense
IDS
Firewall
Access Control
What is wrong with this picture?
![Page 11: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/11.jpg)
• Cyber attack on Alberta Health Services networkOn July 8, the Government of Alberta issued a bulletin to notify the public of a cyber attack on the Alberta Health Services (AHS) network in Edmonton. AHS indicated that a computer virus briefly infected the network on May 14-15 and may have captured patient health information. AHS is notifying 11,582 individuals whose information may have been copied by the virus. AHS removed the virus, reinforced anti-virus protection and started a comprehensive review of its information technology security measures to ensure continued alignment with best practice standards.
![Page 12: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/12.jpg)
![Page 13: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/13.jpg)
![Page 14: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/14.jpg)
![Page 15: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/15.jpg)
![Page 16: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/16.jpg)
Adult Learning
![Page 17: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/17.jpg)
Adult Learning
BooksCertifications
Simulators
![Page 18: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/18.jpg)
![Page 19: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/19.jpg)
![Page 20: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/20.jpg)
![Page 21: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/21.jpg)
![Page 22: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/22.jpg)
Crashed Planes = Loss $$$
![Page 23: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/23.jpg)
Crashed Planes = Loss of Life
![Page 24: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/24.jpg)
“One way of looking at this might be that for 42 years, I've been making small, regular deposits in this bank of experience: education and training. And on January 15 the balance was sufficient so that I could make a very large withdrawal."
- Chesley Sullenberger
![Page 25: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/25.jpg)
![Page 26: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/26.jpg)
Crippled or Exploited Networks
• Loss of data and comm
• Loss of critical infrastructures
• Loss of customer confidence
• Loss of revenue
Total economic meltdown
![Page 27: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/27.jpg)
Why are we willing to trust our networks to IT Professionals?
![Page 28: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/28.jpg)
We just assume they know what they’re doing…
![Page 29: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/29.jpg)
…but all it takes is one stupid mistake!
![Page 30: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/30.jpg)
How much damage can be done with a keystroke?
![Page 31: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/31.jpg)
Poorly Trained and
Overworked Administrators
![Page 32: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/32.jpg)
Ineffective Policies and Procedures
![Page 33: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/33.jpg)
Ineffective Communications
![Page 34: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/34.jpg)
NETWORK OPERATIONS CREWS CAN TRAIN AND CERTIFY TO:
Detect, Recognize, Research, Mitigate, and Report attacks and anomalies
Practice as a team or individually
React quickly to malicious events
Make mistakes in a safe environment
Review checklists and tactics
Test communications between tiers
Test/evaluate new products
![Page 35: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/35.jpg)
![Page 36: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/36.jpg)
Planning
• Size of network and number of employees• Cost vs. budget• Virtualization vs. actual hardware• Management and support• Ownership vs. timeshare• Level of expertise
![Page 37: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/37.jpg)
Functionality• Familiar Environment (similar look and feel)
– Architecture and Tools• Realistic Traffic and Services
– Simulated Internet with thousands of nodes• Easy to use and configure (point and click)• Reconstitution• Automated attack engine• Data collection (Metrics)• Secure access (remote and local)• Event builder with pre-built scenarios
![Page 38: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/38.jpg)
Implementation
• Training program• Certification and “check-rides”• Quarterly training• Annual exercises• Metrics to gauge improvement• Keep management involved
![Page 39: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/39.jpg)
“Criminals find cyberspace too secure and return to conventional crime” (TBD, Wall Street Journal)
“Hackers thwarted in attempt to steal medical data and have been sentenced to 20 years in prison” (TBD, Associated Press)
![Page 40: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/40.jpg)
Conficker – 0 PCs, $0
![Page 41: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/41.jpg)
A day in the life of an IT guy
![Page 42: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/42.jpg)
![Page 43: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/43.jpg)
![Page 44: Computer Network Defense Simulators Advance Cyberspace … · 2018-09-27 · Computer Network Defense Simulators Advance Cyberspace Protection Chet Ratcliffe EVP / CTO. EADS North](https://reader034.vdocuments.us/reader034/viewer/2022042411/5f29088286f57242f827da95/html5/thumbnails/44.jpg)
• US CERT– http://www.us-cert.gov/
• Control Systems Security Program (CSSP)• http://www.uscert.gov/control_systems/csvuls.html