DESCRIPTION

Reliability and Security are often determined by the interaction of many pieces including humans. Understanding the adversaries of a system is critical to building reliability and resilience to cyberattacks. In this talk we are going to share our findings investigating attackers to build confidence.

Reliability and security are emergent properties in software systems. Commonly, both are strongly influenced by humans, so it is difficult to consider them from the earliest design stages and require special attention and testing throughout the final stages in the software lifecycle. These properties are often determined by the interaction of many pieces, including humans. They are on both sides: causes and consequences when we are facing cyberattacks. In ADL Digital Labs we have investigating patterns in humans’ behavior to find commonalities that allow building resilient and reliable systems.

Consider that all security attacks can be traced back to a motivated person. Proper system implementation includes considering the attackers in the whole software lifecycle. In this talk, we are going to share our findings studying security adversaries to provide safety mechanisms to understand how they work. We are going to discuss the cultural aspects of dealing with and we are going to present an approach understanding them based on common their profiles, methods, expertise, and previous attacks.

Finally, the results, lessons learned, conclusions, and challenges are presented.

WHY THE COMMITTEE CHOSE THIS TALK

Yury looks at security from an attackers perspective and sheds some light on the motivation and the behaviour of attackers. While technical aspects surely are important to a security aspect, we should also become something like a profiler for threat actors.

SPEAKER

Yury Niño Roa