Cyber Security Weekly Podcast

MySecurity Media were participants in this year’s Kaspersky Next conference, held in Barcelona, Spain. The conference gathers together journalists and experts from around the world to discuss the latest research and future possibilities in the areas of security, industry and technology.

This interview with Ilijana Vavan, Managing Director, Europe  and Alice Collins, Communications and Head of Women in Cyber program discusses the scale of Kaspersky Lab and the company's support of women in cyber.

Ilijana introduces Kaspersky Lab as a global cybersecurity company, founded in 1997, with over 400 million users and 270,000 corporate clients. The company has a comprehensive security portfolio with leading endpoint protection and a number of specialised security solutions and services to fight sophisticated and evolving digital threats.

Recorded 30 October 2018 at Kaspersky Lab Next Conference, Barcelona, Spain. #KLNext

Interview with Laurie Pycroft, Oxford University with Denis Makrushin & Dmitry Galov of Kaspersky Lab.

If you think that cyber threats targeting your body and your mind is something that belongs in the future, or that being able to retain and share your memories forever is a just something from a dystopian television series. Then think again. Connected deep brain stimulation devices already exist to help sufferers of many neurological disorders, and this fundamental technology will eventually enable memory enhancement, implantation and more. Even today, connected medicine is creating an online-ecosystem for monitoring patients, tuning implants, remote diagnostic (telemedicine) or simply for collecting the data for future treatments. But any new pioneering technology, like 'magic', has another side – a dark side. In this case, the black magic could allow for the manipulation, control and abuse of your data.

In their collaborative research, Kaspersky Lab and Oxford University researchers examine cyber vulnerabilities of current and the emerging future of implantable things. Implications of memory control and external access creates opportunities for empathy, entertainment and legacy but also for use by law enforcement, abuse by repressive regimes, exploitation and other cyber threats from nation states and criminals, as well as mass manipulation of groups. Importantly, guidelines and regulations around implants and new generation devices with update-able firmware will be needed and not yet observed, there is potential for 'in the wild' mass attacks on implant human populations.

Recorded October 30 at  Kaspersky Lab Next Conference, Barcelona, Spain. #KLNext

Apologies for the sound quality (echo).

David Brooks, PhD, MSc, is the Post Graduate Security Science Coordinator at Edith Cowan University and has released research into intelligent building critical vulnerabilities and mitigation strategies.

The ASIS Foundation, in partnership with BOMA International (BOMA) and the Security Industry Association (SIA), funded the project which has created first-of-its-kind guidance for practitioners in the security and building management fields.

Intelligent Building Management Systems: Guidance for Protecting Organizations (https://community.asisonline.org/viewdocument/intelligent-building-management-sys) provides a framework to help decision-makers assign a risk-based criticality or impact to their building and asks relevant security questions to develop appropriate mitigation strategies. It also serves to establish a common language between the many intelligent building stakeholders.

The guidance is based on original research, Building Automation & Control Systems: An Investigation into Vulnerabilities, Current Practice and Security Management Best Practice (https://community.asisonline.org/viewdocument/building-automation-control-syste), by David J. Brooks, Michael Coole, and Paul Haskell-Dowland of Edith Cowan University in Perth, Australia.

David Brooks commenced his career in Military Air Defence, moving into the Electronic Security sector and, later, Security Consultancy. Dave is widely published with over 18 International Journal articles, seven book chapters and four books. His past security projects include the Roy Hill PMC team designing and implementing a project wide security system for the Roy Hill Iron Ore project. The project is a Greenfiled site with a capital expenditure of A$10 billion.

Disclosure- Chris Cubbage co-authored a 2012 book with David Brooks: Corporate Security in the Asia-Pacific Region: Crisis, Crime, Fraud, and Misconduct, Christopher J. Cubbage, CPP, David J. Brooks, PhD

https://www.crcpress.com/Corporate-Security-in-the-Asia-Pacific-Region-Crisis-Crime-Fraud-and/Cubbage-CPP-Brooks-PhD/p/book/9781439892275 (https://www.crcpress.com/Corporate-Security-in-the-Asia-Pacific-Region-Crisis-Crime-Fraud-and/Cubbage-CPP-Brooks-PhD/p/book/9781439892275)

GUIDELINE LINKS

Security Industry Association (SIA)

https://www.securityindustry.org/wp-content/uploads/2018/08/Intelligent-Building-Management-Systems-Guidance-for-Protecting-Organizations.pdf (https://www.securityindustry.org/wp-content/uploads/2018/08/Intelligent-Building-Management-Systems-Guidance-for-Protecting-Organizations.pdf)

ASIS International (media link)

https://www.asisonline.org/publications--resources/news/press-releases/new-research-reveals-intelligent-building-security-risks-vulnerabilities-and-mitigation-strategies/ (https://www.asisonline.org/publications--resources/news/press-releases/new-research-reveals-intelligent-building-security-risks-vulnerabilities-and-mitigation-strategies/)

BOMA International (BOMA)

https://www.boma.org/BOMA/Research-Resources/Trends/Cybersecurity.aspx (https://www.boma.org/BOMA/Research-Resources/Trends/Cybersecurity.aspx)

FULL REPORT via SIA

https://www.securityindustry.org/wp-content/uploads/2018/08/BACS-Report_Final-Intelligent-Building-Management-Systems.pdf (https://www.securityindustry.org/wp-content/uploads/2018/08/BACS-Report_Final-Intelligent-Building-Management-Systems.pdf)

Professor Martin Gill is a criminologist and the Director of Perpetuity Research. He is also the founder of the Outstanding Security Performance Awards. Martin has been involved in a range of studies relating to crime and security. He is widely published (14 books and over 100 articles) including the second edition of the ‘Handbook of Security’ published in 2014.

Martin is a Fellow of the Security Institute, a member of the Company of Security Professionals and a Trustee of the ASIS Foundation. In 2010, he was recognised by the BSIA with a special award for ‘Outstanding Service to the security sector’. In 2016, he won the Imbert Prize at the Association of Security Consultants and ASIS International awarded him a Presidential Order of Merit for distinguished service. IFSEC also placed him the fourth most influential fire and security expert in the world.

For the fourth year running, the Australian OSPAs partnered with ASIAL’s Security Awards for Excellence to celebrate the success and hard work of companies and individuals across the Australian security industry. The competition this year was tough. As always, winners and runners up were selected by a judging panel of esteemed security professionals.

Recorded on the day winners were unveiled at a prestigious Awards Ceremony and Dinner on 18 October at Sydney’s Doltone House Hyde Park, where security professionals gathered to reward outstanding performance. For the list of Category Winners, visit

https://au.theospas.com/2018/10/18/australian-ospa-winners-announced-at-the-2018-security-awards/ (https://au.theospas.com/2018/10/18/australian-ospa-winners-announced-at-the-2018-security-awards/)

(https://au.theospas.com/2018/10/18/australian-ospa-winners-announced-at-the-2018-security-awards/)For more information visit https://theospas.com/ (https://theospas.com/)

Meet twins, Noushin Shabab and Negar Shabab, perhaps, the only twins in Australia specialising in cybersecurity. Noushin is a malware researcher with Kaspersky Lab and Nagar is an Application Security consultant with PS&C Group.

These twins grew up attending a special school for whiz kids and are now slowly making their mark in education and the industry to bridge the country’s cybersecurity talent shortage. From the age of 11 years when first using a computer, the two recall growing up, taking turns to make ‘escape room’ versions in their home to see who could find an escape at the fastest time. These early childhood memories developed a fascination with solving problems, especially with puzzles and board games. When they reached middle school, the two learnt computer programming which nurtured a deeper interest in programming.

In high school they frequently competed in a number of national programming contests and managed to sit on within the top 3 positions for a few. It was around this time, they realised they wanted to pursue a career in computing and did a degree in programming and computing in university.

These identical twins are perhaps just of a few Australians with a niche in reverse engineering. Based out of the Melbourne office at Kaspersky Lab, Noushin says, “In 2016 when I first started looking for a job in this field, I noticed how large the skill gap shortage of security researchers were in Australia. However, since the attack that caused Census (Australian Bureau Of Statistics) to shut down and Wanna Cry ransomware, the government and education ministries found it crucial to grow a new breed of students and professionals in the field of cybersecurity. Her older sister by a few minutes, Negar adds, “Our new projects and partnerships with these universities and are very exciting as both parties can truly make a difference for this industry.”

This interview was recorded in Sydney on 18 October, 2018.

Jane started her career in Canada after graduating from Electrical and Computer Engineering studies, and worked in the City of London for 10 years consulting for Corporates and Banks, before relocating back to Singapore. er experience included using data predictive analytics for fraud at global financial institutions (Deustche Bank, JP Morgan) and advisory to financial institutions with PriceWaterHouseCoopers.  Amongst 24+ articles with MySecurity Media her key Cyber Security publications include

Chinese New Year Heist (https://issuu.com/apsm/docs/asm_feb_march_2017_final (https://issuu.com/apsm/docs/asm_feb_march_2017_final)),

Cyber Security of Assets in the InterConnected Era (https://issuu.com/apsm/docs/asm_aug_sep_2017 (https://issuu.com/apsm/docs/asm_aug_sep_2017))

Data Protection & Privacy – Perspectives from Facebook, Google & Apple (https://issuu.com/apsm/docs/apsm_sep_oct_2018/38 (https://issuu.com/apsm/docs/apsm_sep_oct_2018/38))

Interview recorded at Marina Bay Sands, Singapore on 12 September 2018 at Data Center Dynamics – DCD South East Asia (https://twitter.com/hashtag/DCDAustralia?src=hash)#DCDSingapore

Benjamin Ang is a Senior Fellow in the Centre of Excellence for National Security (CENS) at the S. Rajaratnam School of International Studies (RSIS), an autonomous Singapore graduate school and policy-oriented think tank within the Nanyang Technological University.

Benjamin Ang leads the Cyber and Homeland Defence Programme of CENS, which explores policy issues around the cyber domain, international cyber norms, cyber threats and conflict, strategic communications and disinformation, law enforcement technology and cybercrime, smart city cyber issues, and national security issues in disruptive technology.

Prior to this, he had a multi-faceted career that included time as a litigation lawyer arguing commercial cases, IT Director and General Manager of a major Singapore law firm, corporate lawyer specialising in technology law and intellectual property issues, in house legal counsel in an international software company, Director-Asia in a regional technology consulting firm, in-house legal counsel in a transmedia company, and senior law lecturer at a local Polytechnic, specialising in data privacy, digital forensics, and computer misuse and cybersecurity.

Benjamin graduated from Law School at the National University of Singapore and has an MBA and MS-MIS (Masters of Science in Management Information Systems) from Boston University. He is qualified as an Advocate and Solicitor of the Supreme Court of Singapore, and was a Certified Novell Network Administrator back in the day. He also serves on the Executive Committee of the Internet Society Singapore Chapter.

Interview recorded September 12, 2018, Singapore.

Tony Campbell is a Security Architect and Editor of the Australian Cyber Security Magazine (ACSM) – in the lead up to Issue 6 of the ACSM we discuss the business and board applications of the Australian Signals Directorate (ASD) Essential 8 cybersecurity strategies (https://acsc.gov.au/publications/protect/essential-eight-explained.htm) and how these can be applied and inform the business and board of directors.

Recorded at BSides Perth 2018 which attracted over 300 delegates, including kids and families, to UWA Business School and along with t-shirts, beanies and tool kits, delegates also received a cool and unique handmade conference badge, using a NodeMCU ESP8266 WiFi SoC. Security BSides (commonly referred to as BSides) is a hacker convention, held amongst a growing eco-system of events in Australia and New Zealand that provide a community driven framework for information security conferences.

For the full podcast series from #BsidesPerth visit https://australiancybersecuritymagazine.com.au/bsidesper-2018-podcast-series-bsidesperth/ (https://australiancybersecuritymagazine.com.au/bsidesper-2018-podcast-series-bsidesperth/)

Interview with Alex Dolan (@dolesification) and #Osprey (Michael) in their roles as facilitators of the #BSidesPerth Capture the Flag #CTF competition held at BSides Perth in September 2018.

With a focus on web applications and starting with GRC challenges, the CTF had a unique WA flavour and lean with IoT device security. Well done to ‘Tony’ who took a commanding lead.

Recorded at BSides Perth 2018 which attracted over 300 delegates, including kids and families, to UWA Business School and along with t-shirts, beanies and tool kits, delegates also received a cool and unique handmade conference badge, using a NodeMCU ESP8266 WiFi SoC. Security BSides (commonly referred to as BSides) is a hacker convention, held amongst a growing eco-system of events in Australia and New Zealand that provide a community driven framework for information security conferences

For the full podcast series from #BsidesPerth visit https://australiancybersecuritymagazine.com.au/bsidesper-2018-podcast-series-bsidesperth/

Interview with Dr Jodie Siganto, a lawyer who accidentally strayed into security about 18 years ago and never been able to get out. Fascinated by what happens at the interface between humans and technology, particularly in the security and data privacy realm. Intrigued by what shapes security practice and our failure to change.

Jodie’s proposal is that as information security practitioners we think of ourselves as professionals with a special expertise. But is this perspective real? Or are we more like security brokers negotiating an acceptable outcome with the business? "If we are a profession, then who is shaping that profession? If we are experts, is education producing the right person? By looking at some of these questions, I hope to start a conversation about how we might re-shape security practice to delivery better results for practitioners, their employers and the community more generally."

Recorded at BSides Perth 2018 which attracted over 300 delegates, including kids and families, to UWA Business School and along with t-shirts, beanies and tool kits, delegates also received a cool and unique handmade conference badge, using a NodeMCU ESP8266 WiFi SoC. Security BSides (commonly referred to as BSides) is a hacker convention (https://en.wikipedia.org/wiki/Hacker_convention), held amongst a growing eco-system of events in Australia and New Zealand that provide a community driven framework for information security conferences.