Cyber Security Weekly Podcast

Interview by Executive Editor Chris Cubbage with Nick FitzGerald, Senior Research Fellow of ESET, discussing the Telecommunications and Other Legislation Amendment (Assistance and Access) Act (TOLA).

Based on the interview, conducted on May ...

Interview with Jacqui Loustau, Founder of the Australian Women in Security Network, speaking just prior to a joint AWSN and Cyber Risk Meetup event in Melbourne.

Jacqui shares insight to the AWSN and how the group was born from her desire to share her own challenges in being one of the few women in the room, attending industry events in a male dominated sector.  She wasn’t alone. The women’s network grew rapidly, and nationally, to now having 1,700 members and retaining the focus of connecting, supporting and inspiring women in the security industry. This includes cybersecurity, physical security or the less recognised security roles like business continuity and fraud prevention.

Jacqui makes mention of women who assisted along the way, including Helaine Leggat, Noushin Shabab and Bonnie Butlin and some of the activities and initiatives the AWSN has planned in 2019 - including a soon to be made announcement with the 'Women Speak Cyber' collaboration to help five participants to coach them with public speaking. The AWSN is also supporting the 'International Women in Cyber Day', to be held on 1 September, with a national conference and awards event on 3 September in Melbourne.

For more information and to get involved, visit www.awsn.org.au (www.awsn.org.au)

For a wrap-up of the Cyber Risk Meetup & AWSN event - check out it here (https://australiancybersecuritymagazine.com.au/capturing-the-essence-of-networking-cyber-risk-meetup-melbourne-wrap-up/)

Recorded April 30, 2019 at EY Australia, Melbourne.

Jane Lo, Singapore Correspondent speaks with Paul Burmester, Head of Innovation & Partnerships of Singtel Innov8, about their role on developing the cybersecurity innovations and talents in the region, and globally in Europe and North America. Interview highlights include discussion on venture capital strategy versus other financial alternatives, mentoring, due diligence, and the investing process. And what success means, in Asia Pacific and other regions.

Paul is leading a team responsible for identifying and engaging with innovative startups globally, supporting their growth and driving engagement, in support of the Singtel Group strategy. The team also build and drive various Innov8 programmes and partnerships to activate and grow awareness in the startup ecosystem, such as the Innov8-Connect programme; ICE71, Asia’s first cybersecurity startup hub and ecosystem; and the Go-Ignite alliance, an initiative that offers startups access to over a billion customers through engagement with the Singtel Group, Telefonica, Orange and Deutsche Telekom.

Paul brings many years of experience from within the technology industry and continues to be amazed and excited by the new innovations and opportunities the industry presents.  His career has seen Paul drive six successful exits, effectively building and/or turning around early stage technology businesses to the point of global market success, lading to over $4.7B in increased shareholder value gained through profitable exits via IPO and/or acquisition.

Amongst his most notable recent successes in the technology sector was the exit of SpinVox, a leading developer of “Speech to Text” technology, that was acquired by Nuance for $103M;  the exit of ViAir, the first company to develop real time mobile access to Exchange and Notes, which was sold to Visto for $65M; Paragon Software, the inventor of SyncML, was acquired by Phone.com for $515M; and Mobile Systems international, the leading designer of mobile phone networks, sold to Marconi for $618M.

Currently based in Singapore, Paul has lived and worked in various countries across Europe, Asia and the Americas. In his spare time, Paul can be found climbing mountains, exploring jungles, diving under the oceans and seeking out new adventures.

Recorded in Singapore on Monday 25 March 2019 in recognition of ICE71 supporting the Cyber Risk Meetup, held at ICE71 on November 1, 2018 - event wrap-up is available here (https://australiancybersecuritymagazine.com.au/a-cyber-risk-meetup-exclusive-special-speaker-event-with-ice71/)

Interview with Eaton’s Chief Technology Officer and security strategist, Michael Regelski.

Michael has more than 30 years’ experience working in senior technology leadership roles with expertise in cybersecurity, and is currently the CTO of Eaton (http://www.eatoncorp.com.au/Oceania/index.htm), a global power management company with 2018 sales of $21.6 billion. As a CTO Michael monitors the cybersecurity landscape and risk across power networks and the need for global security standards.

We discuss Michael's role at Eaton and how he was in Australia as part of the International Electrotechnical Commission (IEC (https://www.iec.ch/index.htm)) Cybersecurity Council Market Strategy Board. Michael’s visit to Australia also marks Eaton’s collaboration with global safety science organisation UL, to establish a measurable cybersecurity standard for network-connected power management products and systems supplied in Australia and beyond. Eaton’s testing lab is the industry’s first research and testing facility approved to participate in UL's Data Acceptance Program for cybersecurity.

Alongside Michael's visit to Australia, Eaton’s collaboration with UL was highlighted with the release of their new Gigabit Network M2 switch (https://australiancybersecuritymagazine.com.au/eaton-brings-worlds-first-ul-certified-ups-network-card-to-anz/).

Recorded courtesy of Eaton at their Sydney showroom on 3 April 2019.

Interview with Gene Ng, Regional Vice President for Asia Pacific & Japan and Ani Chand, Security Architect for Asia Pacific & Japan for BeyondTrust.

The interview follows a Cyber Risk Leaders forum held on April 11 and taken as an opportunity to consider the on-going compromise of large corporations and government. A case study on the Sing Health data breach is explained, along with the renewed ASD Top 4 & Essential 8 and on-going impact on international cyber security.

Discussed is the ASD white paper, available at https://www.beyondtrust.com/resources/whitepapers/complying-australian-signals-directorate-asd-mitigation-strategies (https://www.beyondtrust.com/resources/whitepapers/complying-australian-signals-directorate-asd-mitigation-strategies)

For more information on BeyondTrust visit www.beyondtrust.com (http://www.beyondtrust.com)

Recorded in Sydney on April 12, 2019. BeyondTrust were supporters to the Cyber Risk Leader's Forum.

"In WWII we primarily fought a three-domain fight — sea, air, & land...Today, & in the future, we will be fighting adversaries in seven domains — sea, air, land, space, cyber, as well as two “new-old” domains: perception & time." (1)

Whilst in Canberra for the #CyberTaipan National Finals pilot program, we visited the Australian Strategic Policy Institute (ASPI) and met with Dr. Malcolm Davis, Senior Analyst to discuss defence, cyber, space, China (https://twitter.com/hashtag/China?src=hash), USA (https://twitter.com/hashtag/USA?src=hash), droneswarms (https://twitter.com/hashtag/droneswarms?src=hash), Warfare Tactics (https://twitter.com/hashtag/WarfareTactics?src=hash) in this pre-war phase.

A confronting discussion with terms and reference to the reality of AI/ML driven fire-ant warfare tactics, the 'Thucydides (https://twitter.com/hashtag/Thucydides?src=hash) trap', slaughterbots (https://twitter.com/hashtag/slaughterbots?src=hash) and hypersonicweapons (https://twitter.com/hashtag/hypersonicweapons?src=hash) - “brilliant weapons that can think for themselves”

Recorded 15 March 2019, Canberra.

RELATED INTERVIEW

Episode 87 - Australia’s Offensive Cyber Capability and Deterrence In Cyberspace, interview with Fergus Hanson, ASPI’s International Cyber Policy Centre (https://www.blubrry.com/mysecurity/35765482/episode-87-australias-offensive-cyber-capability-and-deterrence-in-cyberspace-interview-with-fergus-hanson-aspis-international-cyber-policy-centre/)

Episode 138 - Cyber Breach Communication Playbook - In-depth interview with author Peter Coroneos (https://www.blubrry.com/mysecurity/42148570/episode-138-cyber-breach-communication-playbook-in-depth-interview-with-author-peter-coroneos/) (Discussion includes the 'Thucydides (https://twitter.com/hashtag/Thucydides?src=hash) trap' - USA & China)

REFERENCES & FURTHER READING

(1) Future War Not Back to the Future, Lt. Gen. Mike Dana. Lt. Gen. Dana is a career logistician and strategic planner. He served in Desert Storm, Operation Restore Hope in Somalia, Operation Iraqi Freedom, and Operation Enduring Freedom. His last joint assignment was as the Director of Strategic Planning and Policy at US Indo-Pacific Command. https://warontherocks.com/2019/03/future-war-not-back-to-the-future/ (https://warontherocks.com/2019/03/future-war-not-back-to-the-future/)

ADMIRAL PHILIP S. DAVIDSON, U.S. NAVY, COMMANDER, U.S. INDO-PACIFIC COMMAND, 12 FEBRUARY 2019

"The speed of war has changed, and the nature of these changes makes the global security environment even more unpredictable. It’s dangerous and unforgiving. Time and decision space have collapsed, so our approach to warfare must adapt to keep pace

Beijing and Moscow continue to develop and field advanced counter-intervention technologies, which include highly maneuverable reentry vehicle and warheads (hypersonic weapons). Beijing and Russia possess cruise missiles and small-unmanned aerial systems (sUAS) that fly different trajectories, making them hard to detect, acquire, track, and intercept due to unpredictable lowflight profiles and sophisticated countermeasures. North Korea retains its nuclear and ICBM capabilities.

Effective counters to the expanding asymmetric unmanned aerial system (UAS) threat including potential for multiple swarms of small UAS.

Jane Lo, Singapore Correspondent interviews Mark Stickells, Executive Director, Pawsey Supercomputing Centre, based in Perth, Western Australia.

Why HPC or Supercomputing – high performance computers that perform at highest operational rate - matters to Australia’s vision for 2030 to be a top tier innovation nation, and the history behind Pawsey, HPC projects, partnerships across the world, and talent development at the centre.

Mark is a research executive with more than 20 years’ experience working at a senior level in innovative research and business development roles in complex, multi-stakeholder environments. Through national and international programs and joint-ventures, Mark had successfully led initiatives to accelerate the impact of research, development and education programs for Australia’s key energy, mining and agricultural sectors.

He is a former Chief Executive of an LNG research and development alliance of CSIRO, Curtin University and UWA, partnering with Chevron, Woodside and Shell. Prior to his appointment at Pawsey Mark led the innovation and industry engagement portfolio at The University of Western Australia. In addition, Mark is the current Chair of the Board of All Saints’ College and was appointed an adjunct Senior Fellow of the Perth USAsia Centre (an international policy think tank) in 2017.

Recorded 13 March 2019 at SuperComputing Asia #SCA2019 in Singapore.

In San Francisco for the joint AustCyber and Austrade “Australian Cyber Security Mission to the USA”, MySecurity Media's Director Dave Matrai interviews Michelle Price, AustCyber CEO and discusses Australia’s position on the global cyber security stage.

The discussion includes how the Australian cyber security industry has changed over the past 3 years and why Australia is an attractive destination for investment into Australian cyber security innovation.

Recorded 5 March 2019. MySecurity Media were official media partners to AustCyber for the RSA  Conference 2019. #GameOn #OzCyberinUSA2019

For more information on AustCyber visit www.austcyber.com (https://www.austcyber.com/)

This interview with Michelle Price, Chief Executive Officer of AustCyber and Diane Miller, Director, Global Cyber Education & Workforce Initiatives for Northrop Grumman provides insight into the CyberTaipan Finals Competition held in Canberra on 16 March 2019 and the program's link to the USA, UK and Saudi Arabia.

Recorded on Saturday, 16 March at the Canberra Institute of Technology. MySecurity Media attended CyberTaipan courtesy of AustCyber.

#CyberTaipan Finals Competition creates focus on CyberSecurity in Canberra - Podcast & Editor's Insights (https://australiancybersecuritymagazine.com.au/cybertaipan-finals-competition-creates-focus-on-cybersecurity-in-canberra-podcast-editors-insights/)

Saturday, March 16, 2019 was a unique and eventful day for cyber security in the nation’s capital, with two events appropriately linked by AustCyber, the Australian Cyber Security Growth Network (ACSGN).

BSidesCanberra, into its fourth year, welcomed well over 2,000 delegates from the Infosec community to delve and dive into the dark arts of hacking, breaking and picking at the National Convention Centre. The event was reportedly enlivened with a fire evacuation thanks to a smouldering lithium battery, clearly a sign that the machines were being put to the test. Whilst across the road, at the Canberra Institute of Technology, a national finals pilot program for Australia’s first CyberTaipan competition was underway, with support from some of Australia’s largest enterprises, Northrop Grumman, Blackberry, PwC Australia and Woodside Energy.

Both events were fully supported by AustCyber, with CyberTaipan delivering a major ‘workforce development pipeline’ project for the ACSGN. The winning team, TSS or The Southport School, took a strong and early lead, and were announced as winners at an awards dinner ceremony at Parliament House that evening. The Canberra Festival fireworks was a timely conclusion and celebration to an eventful day.

CyberTaipan, Australia’s first such competition, follows that of the CyberPatriot program in the US, now in its eleventh year and CyberCenturian (UK) and CyberArabia (Saudi Arabia) in their fifth years. Facilitated by the US Airforce Association, ten teams from across the east coast of Australia were set through their paces over 4 hours. The task was to protect and defend a corporate network for a local government organisation and undertake a series of challenges along the way. In a sense, these talented high school students were learning to defend against those 2,000+ hackers from across the road at the NCC. Indeed, there is little doubt that the CyberTaipans will soon make their way to one or more of the BSides events being annually held around Australia.

Whilst starting on a relatively small scale in 2009, CyberPatriot has grown to involve 6,387 teams from across the USA in 2019. Though the CyberPatriot program isn’t just the beginning. The USA program actually starts for many students with ‘Sarah the Cyber Hero’, created as a pre-reader book for preschools and grandparents, a cyber security and online safety program throughout the 5 -11 years and week-long summer cyber camps for 12-18 year-olds. All these are designed to complement and gap fill the normal curriculum in the classroom.

A good example of how CyberTaipan connects and inspires was Josie and Lang, aka Team Sparkling Stars, the only all girls team. Speaking at Parliament House, each were proudly pleased with their day’s effort. “We did better than we thought”, said Josie.

Jane Lo, Singapore Correspondent speaks with Andrew Howard, Cloud Team Manager, National Computational Infrastructure at the Australian National University (Canberra).

HPC and Cloud Computing have different security considerations and yet both involve humans being the weakest link, in particular within the HPC environment where there is often a higher level of trust required.

Andrew Howard has decades of hands-on technical, academic and logistics experience covering a wide range of standard and bespoke technologies, languages and applications within Industry, Government and Academia nationally and internationally.

His current role at the National Computational Infrastructure (NCI) covers working on High Performance Networks, Computing and Cloud systems. He led the development of InfiniCloud an extension of HPC InfiniBand capabilities into Openstack Clouds and the creation of the first trans-Pacific extended InfiniBand network connecting Australia and Singapore through the USA to deliver the next generation of high speed data transfer and distributed computation. Most recently he has worked closely with AARNet to define and implement AARNet-X a 100G network linking NCI to the world at the highest possible speed for big-data science.

Recorded at Super Computing Asia, held in Singapore, 11-14 March 2019