Information Security in the New Era

Information Security in the New Era

1. Hacktivism

   • Use of technology to promote a political agenda or a social change
   • Methods
     • Doxing
     • Geo-bombing
     • Denial-of-Service attacks
     • Website defacements
     • Website redirects
     • Virtual sit-ins
     • Information Leakage
   • How to prevent it
     • Encrypt important data
     • Continuously scan and monitor the sensitive data posture
     • Conduct penetration testing

2. Ransomware

   • Publish the victim's data or perpetually block access to it unless a ransom is paid
   • Methods
     • Email links or attachments
     • Skype or any other messengers
     • Downloading/running untrusted software
     • Visiting untrusted sites (torrents, cracked software)
   • How to prevent it
     • File system defenses against ransomware
     • File decryption and recovery
     • Use reputable antivirus software and a firewall
     • Use a trustworthy Virtual Private Network (VPN)
     • Filter web traffic and email

3. Biometric Malware

   • Malware targeting biometric authentications
   • Methods
     • CamuBot
     • Vulnerabilities in smartphone fingerprint readers
   • How to prevent it
     • Keep software updated
     • Use trusted software
     • Visit trusted websites

4. AI-Powered Automated Hacking

   • Artificial intelligence programs that can learn how to evade even the best defenses
   • How to prevent it
     • AI-Powered Automated Cybersecurity
     • Cybersecurity models must be data-centric to be truly effective
     • Decoy Filesystem
       • Trick malware into deploying within a fake filesystem
   • Methods
     • Machine learning to build hacking programs
     • Use publicly available technology to hide from security tools while spreading across thousands of computers

5. Consumer Device Targeting Attacks

   • Malware that attacks networks through consumer devices, like mobile phones, to capture sensitive information
   • Methods
     • Threats delivered via email
     • Port attacks
   • How to prevent it
     • Connect to trusted networks and wi-fi
     • Download trusted apps
     • Develop a secure wireless infrastructure