Cyber Security Weekly Podcast

Interview with Brett Hansen, South Pacific Country Manager for Milestone Systems. Brett is responsible for driving Milestone Systems across a diverse range of new and existing markets in the region, while facilitating large-scale projects and partnerships, as well as leading the company’s local team.

POST RECORDING NOTE: Milestone Systems has cancelled the joint APAC/EMEA MIPS Conference in Dubai due to COVID-19 safety measures (http://postman.mynewsdesk.com/ls/click?upn=wG7ZJVD5sLXlz3T7tYEJUsPnmI9w6LOB1Y1lTaFg-2B7TlhHQEAh7GlUn0MIPy9PpwLB8IXmbGxiKCMrYq8JXzD0597-2BsUNi1mJltCZxBbgweCYepLKVWn0ELSUVRLbsW0zjCgn0jRMdKnIE1X6ylCDHoAw6995EvbM7YjIw9gz8iaEwsZe19l-2FJxKFFvC4FK1NYQ5ZZuX1sOslzCYgRMMyA-3D-3DhvX8_lO-2FHeohnggqsZl3eXCf33yOIcGVbmRWUYlSAh3mk0CYrGjNvk9MO7xxiNsLoFf7QRVb88HQFMxdDQTq5VG3DNPuZy7dRP2Bx3sXWgb17UtAXVYC8P5xAgfPJP3ZBckv3dDgwk7ujckrOZ-2Fuv4V98H3OkG5KhS8afDC9GuQ0engfLXdYTkiBkLxnWIhtAMz5HF7bCvK5H1rXSDiYLLaGgOjNNTNb4N-2BJ49ZA7HXoXpQ6SjPHFPitab-2Byl7BjueyBsVuOm2Sv-2FEDnUEH0r9hXrp5BZGq6p8nCF0LQGbupcdJKyHjkCkiGrKnT-2F13hQLRxScH7nFcbjoYFJRRwPJWP1sg6NZKxgrbRCrCDZG6gv9XpSz-2BIdgFrdgg2nhjPoIuEOz87-2FtZc8atCS5h6XnI9D9VtQsjTzCiQ4pp4WFUdGSQwA-2FXu9AZzKEz2hGnT6kqNh)

Brett provides an overview of the Milestone Systems organisation, and the company’s local footprint, including the importance of an open Video Management System platform and its strength as a Milestone offering. Brett also comments on the importance of Milestone’s partner network and recent growth and changes to managerial team.

Link to the Copenhagen Letter (https://copenhagenletter.org/)

Hansen has been with Milestone Systems since July 2018, previously fulfilling the role of Distribution Channel Manager. Prior to his time at Milestone Systems, he worked for the Secure Issuance team at HID Global — ultimately performing the role of Regional Sales Manager Australia & New Zealand Secure Issuance. Hansen holds a master’s degree in Business and Technology from the University of New South Wales.

Recorded in Sydney on February 6, 2020 courtesy of Milestone Systems.

Mr Sathish Ashwin is the Head of Research and Operations at the National Cyber Defence Research Centre of India, a self-governed body controlled by National Cyber Safety and Security Standards and monitored by the High Level Committee chaired by Honorable Justice Dr. S. Mohan, Former Judge, Supreme Court of India.

He is also the Director of BRICS (Brazil Russia India China South Africa) "The Cyber Defence Forum, Director CAP - Cyber Awareness Program for  Women and Children, Regional Head - Entrepreneurs Council of India and  Core Member RAC" Recruitment Analysis Council.  His fields of research include application security, Internet of Things(IoT), Internet of Brains(IoB), malware analysis, and threat intelligence. He is an active speaker at security conferences like OWASP, National Cyber Defence Summit, National Cyber Safety & Security Standards Summit, InCyCon etc., He has also authored various articles in Indian Cyber Security E-Magazine, National Cyber Crime Reference Handbook v1 & v2, Hackershat magazines. So far he has helped and trained more than 10,000+ students and professionals across the country.

He speaks with MySecurity Media on brain-computer interface (BCI) technology and how it provides a new output channel for brain signals to communicate with or control external devices directly without using any intermediate devices, and its potential application in Cyber Security as an access control and authentication technology.

Recorded at ADECS 2020 – Asia Defence Expo & Conference Series 2020 in Singapore on 5th February 2020.

Jane Lo, Singapore Correspondent interviews Professor Russell Boyce at the Global Space & Technology Conference 2020.

Professor Boyce holds the position of Chair for Intelligent Space Systems and Director of UNSW Canberra Space (Australia's largest space capability), at UNSW’s campus at the Australian Defence Force Academy.  His role there, leading the growth of Australia’s largest space mission and research team, leverages the first part of his career – 25 years of research and teaching in the field of hypersonic aerodynamics and scramjet propulsion.  Boyce chaired the Australian Academy of Science’s National Committee for Space and Radio Science from 2011-2017; was a member of the Expert Reference Group that paved the way for the establishment of the Australian Space Agency; and has co-authored over 200 international journal and conference papers on hypersonics and space research.  He sits on the Executive Council of the Space Industry Association of Australia, and has recently been named a Fellow of the American Institute for Aeronautics and Astronautics (AIAA).  Professor Boyce is only the third Australian to become a Fellow of the AIAA which is the peak professional body for the aerospace sector globally.

He speaks with Mysecurity Media on why Space is important to Australia, Space innovations and transformative forces, cybersecurity considerations, and the new journey that Australia is embarking on, by combining home-grown space science and engineering talent with the global shift in the space paradigm towards miniaturised spacecraft with advanced sensors and on-board intelligence, to help meet critical needs and opportunities on Earth.

Recorded at GSTC 2020 – Global Space & Technology Conference 2020 in Singapore on 7th February 2020.

Interview with ECU Executive Dean of School of Science, Professor Andrew Woodward and Dr. Paul Haskell-Dowland, Associate Dean for Computing and Security, School of Science, Academic Centre of Cyber Security Excellence.

Edith Cowan University (ECU) has opened the southern hemisphere’s biggest Security Operations Centre (SOC) within a university (https://australiancybersecuritymagazine.com.au/ecu-launches-new-security-operations-centre-with-rsa-security-building-renewed-tertiary-focus-on-cybersecurity-skills-training/). The cutting-edge, $3 million SOC will offer Perth students firsthand experience in cyber operations and technology and responding to cyber security threats.

The SOC opening is unique to the Asia-Pacific region and further cements ECU’s reputation as Australia’s foremost cyber university.

Included in the new facility is a 24-seat training lab, designed to familiarise students with the SOC environment and introduce students to open and closed source SOC and security information and event management (SIEM) platforms. This space also has the ability to function as an Open Source Intelligence Centre (OSIC).

With the soaring costs of cybercrime threatening Australian and global businesses, the cyber security industry is set to replace the mining sector as the next jobs boom in Australia. It is expected the global cyber security workface shortage will reach upwards of 1.8 million cyber security professionals by 2022.

The SOC was opened on January 29 by Australia’s Home Affairs Deputy Secretary with responsibility for national cyber security policy, Marc Ablong PSM. “We need to encourage more students to undertake studies in cyber security and related courses,” said Deputy Secretary Ablong.

Recorded on campus on 3 February 2020.

RELATED EPISODES

Episode 167 - RSA APJ Conference Podcast Series - The New Why of Cybersecurity - Rohit Ghai, President, RSA and Grant Geyer, Senior VP for RSA Products (https://blubrry.com/mysecurity/47646343/episode-167-rsa-apj-conference-podcast-series-the-new-why-of-cybersecurity-rohit-ghai-president-rsa-and-grant-geyer-senior-vp-for-rsa-products/)

RELATED COURSES FROM ECU

Undergrad cyber: https://www.ecu.edu.au/degrees/courses/bachelor-of-science-cyber-security#courseDetails (https://www.ecu.edu.au/degrees/courses/bachelor-of-science-cyber-security#courseDetails)

Postgrad cyber: https://www.ecu.edu.au/degrees/courses/master-of-cyber-security#courseDetails (https://www.ecu.edu.au/degrees/courses/master-of-cyber-security#courseDetails)

Accelerated Online Masters (6-wk teaching blocks) https://studyonline.ecu.edu.au/online-courses/master-cyber-security (https://studyonline.ecu.edu.au/online-courses/master-cyber-security)

Jane Lo, Singapore Correspondent interviews Mr Dmitry Volkov, CTO and Co-Founder of Group IB on Hi-Tech Crime Trends of 2019.

Group IB, a Singapore-based cybersecurity company that specializes in preventing cyberattacks, has analyzed key recent changes to the global cyberthreat landscape.  The report examines attacks conducted for espionage and sabotage purposes.  The report contain chapters devoted to the main industries attacked and covers the period from H2 2018 and H1 2019.  Group-IB analysts highlight key high-tech crime rends and conclude that 2019 heralds a new era of cyberattacks.   The annual report was presented at CyberCrime Con 2019 international Threat Hunting and intelligence conference in Singapore (29th Nov 2019).

As a CTO, Dmitry is responsible for all the aspects of the company's technological development and transformation. 

Dmitry helped to establish Group-IB’s unique Cyber Intelligence department, which provides Threat Intelligence to companies around the world.  As a CTO and Head of Threat Intelligence at Group-IB, Dmitry holds extensive experience in computer forensics, investigation of botnets, fraud, carding, DDoS attacks and other high tech crimes.

In 2015, Dmitry was listed by Business Insider as one of the top 7 professionals behind influential security companies.

Recorded remotely with Group IB’s Mosow Office on 24th Dec 2019.

Podcast interview by Jane Lo, Singapore Correspondent with Craig Jones, Director, Cybercrime, INTERPOL IGCI (Interpol Global Complex for Innovation).

A national and international...

Interview with Chirag Joshi, M.S., CISA, CISM, CRISC, author of 7 Rules to Influence Behaviour and Win at Cyber Security Awareness (https://www.mysecuritymarketplace.com/product/7-rules-to-influence-behaviour-and-win-at-cyber-security-awareness-by-chirag-joshi-m-s-cisa-cism-crisc/).

Using humour, real-world anecdotes, and experiences, this book introduces seven simple rules to communicate cyber security concepts effectively and get the most value from your cyber awareness initiatives. Since one of the rules is “Don’t Be Boring,” this proven process is presented in an entertaining manner without relying on scary numbers, boring hoodie-wearing hacker pictures, or techie jargon!

Additionally, this book addresses the “What” and “Why” of cyber security awareness in layman’s terms, homing in on the fundamental objective of cyber awareness—how to influence user behaviour and get people to integrate secure practices into their daily lives.It draws wisdom from several global bodies of knowledge in the technology domain and incorporates relevant teachings from outside the traditional cyber areas, such as behavioural psychology, neuroscience, and public health campaigns.

Chirag has extensive experience working directly with the C-suite executives to implement cyber security awareness training programs. During the course of his career spanning over a decade across multiple sectors, he has built, implemented, and successfully managed cyber security, risk management, and compliance programs. As a leader holding senior positions in organizations, Chirag excels at the art of translating business and technical speak in a manner that optimizes value.

Chirag has also conducted several successful cyber training and awareness sessions for non-technical audiences in diverse industries such as finance, energy, healthcare, and higher education.

Chirag’s academic qualifications include a master’s degree in telecommunications management and a bachelor’s degree in electronics and telecommunications. He holds multiple certifications, including Certified Information Security Manager, Certified Information Systems Auditor, and Certified in Risk and Information Systems Control.

Recorded 16 January 2020 at Tank Stream Labs, Sydney - courtesy of IQ Innovation.

Catch-up and update interview with Shamane Tan, author of Cyber Risk Leaders (https://www.mysecuritymarketplace.com/product/shamane-tan-apac-executive-advisor-privasec/) & founder

Interview with Garrett O'Hara, Principal Consultant with Mimecast discussing the recent acquisition of SegaSec (https://australiancybersecuritymagazine.com.au/mimecast-acquires-segasec/) and Mimecast's Email Security 3.0 approach.

We also dive into the Mimecast Quarterly Threat Intelligence Report: Risk and Resilience Insights (https://www.mimecast.com/resources/white-papers/dates/2019/11/mimecast-threat-intelligence-report/download/), where researchers analysed global attack activity from July to September and uncovered a mixture of simple, low effort and low-cost attacks targeting Mimecast customers. At the same time, the data highlights complex, targeted campaigns leveraging a variety of vectors and lasting several days. These sophisticated attacks are likely carried out by organized and determined threat actors, employing obfuscation, layering, exploits, and encryption to evade detection. This research will explore these themes through the lens of the four main categories of attack types discovered in the quarter: spam, impersonation, opportunistic, and targeted.

Mimecast has set out the future of email security comprises into three distinct zones, alongside an API-led approach, that organisations need to recognise:

Zone 1 – Perimeter

The email security perimeter is focused on keeping users and data safe by protecting email against spam and viruses, malware and impersonation attempts, and data leaks. Organisations need global visibility that offers rapid detection of sophisticated threats to protect their entire customer, partner and vendor ecosystem.

Zone 2 – Inside the Perimeter

Compromised users whose accounts are being taken advantage of, lateral movement using credential harvesting links, social engineering and employee errors are threats and risks that manifest inside the perimeter. Organisations should combine security inspections of internal and outbound email traffic with capabilities to build a stronger human firewall through dynamic user awareness training and testing programs. They also need rapid remediation capabilities to extract threats and shut down access to compromised accounts. This will help to ensure that an organisation’s internal network, made up of people and machines, is robust and capable of defending itself when attacks occur.

Zone 3 – Beyond the Email Perimeter – Pervasiveness

Organisations need the ability to protect their brands and domains from being explicitly spoofed or hijacked to defraud customers and partners. This requires the ability to implement DMARC efficiently as well as to hunt for and take action against threats where attackers present themselves fraudulently to an organisations customers or partners using deception and impersonation.

Beyond the Zones: API-driven Security Ecosystem Integration

To move from perimeter to pervasive email security requires an extensible architecture that allows organisations to fully integrate the value of the telemetry and intelligence gathered through observing email attacks with their existing technologies such as SOARs, SIEMs, endpoints, firewalls and broader threat intelligence platforms. An API-driven approach further helps deliver pervasive security throughout all zones. This allows organisations to make their teams and other security investments even more effective.

We interview Morey Haber, Chief Information Security Officer (CISO) and Chief Technology Officer (CTO) of BeyondTrust on the publication of his latest book, ‘