Cyber Security Weekly Podcast

This weekly podcast catches up on Australian Cyber Security Magazine Issue 4 – Data Breach Notification, ACSC Conference Wrap Up, including ASD priorities & Podcasts with Alastair MacGibbon, F5Labs, Vault Systems, Data61 Ribit Networking, ANU Students, CyberRisk Meetups and update on the OAIC Notifiable Data Breach quarterly update.

The Australian Security Magazine Apr/May is also out, featuring articles on Artificial Intelligence, Cybersecurity in Space and Miltary Operations and Women in Security feature.

For upcoming events, we highlight, amongst others;

30 April - 2 May 2nd Annual Safety, Security, and Counter-Terrorism Conference[2] Sydney

30 April - 1 May Gartner IT Infrastructure, Operations Management & Data Centre Summit Sydney

1-3 May CIVSEC 2018 Melbourne

1 - 2 May Fraud Detection and Investigations 2018 Sydney

3 - 4 May Cyber Threat Intelligence Summit Sydney

9 - 10 May SAFEGUARDING AUSTRALIA 2018 Canberra

15 - 17 May CeBIT Australia 2017 Sydney

22-25 May Netevents IoT Innovation Summit San Jose

Relevant Links:

MySecurity Media App - https://itunes.apple.com/us/app/my-security-media

https://australiansecuritymagazine.com.au/events/

www.australiancybersecuritymagazine.com.au

www.cyberriskmeetups.com

David Holmes, Principal Threat Research Evangelist for F5 Networks, discusses the importance of threat modelling for the Internet of Things ('IoT'), in order to avoid equipment and devices joining a “Thing Bot”, as well as the increase in Distributed Denial of Service ('DDoS') attacks originating from Asia.

David also shares that in July 2016 his team at F5 predicated the Mirai DDoS Botnet attack, two months prior to its global attack.

Recorded at the Australian Cyber Security Centre’s Conference, Canberra, 12 April,2018  #2018acsc

Relevant discussion links –

www.F5labs.com (http://www.f5labs.com/)

www.owasp.org (http://www.owasp.org/)

www.f5.com (http://www.f5.com/)

@f5labs

In this interview, Chris Cubbage talks to Alastair MacGibbon, the Australian National Cyber Security Adviser, responsible for driving the creation and strengthening of partnerships between Australian Governments, private sector, non-governmental organisations and academia to deliver national cyber security capacity and capability.

Alastair provides an overview of the formation of the Department of Home Affairs in December 2017, and the changes and overarching powers of the Australian Signals Directorate (ASD) in national cyber security, to become effective on July 1, 2018.

For further insight into the ASD and the priorities laid out for the next 12 - 18 months - visit https://australiansecuritymagazine.com.au/asd-sets-out-to-comprehensively-understand-the-cyber-threat-to-australia-acsc-conference-2018/

Recorded at the Australian Cyber Security Centre Conference, Canberra, 11 April, 2018 #2018ACSC

Stephen Dane, Managing Director of Cisco for Security of Asia-Pacific and Japan covers the cybersecurity marketplace for the region and discusses the impact of global ransomware attacks, and the increase in awareness in malware, particularly for medium sized businesses.

We discuss Cisco’s subscription model, Umbrella, and the increasing maturity of the Australian and New Zealand markets, particularly in relation to integrating technologies to provide a holistic solution. There is also an observed increase of ASEAN countries seeking to cooperate in order to create a coherent policy across the region, and therefore reduce any weak link, created by immature markets that have a lower investment in infrastructure.

We end with a discussion on Cisco's involvement with universities in the region, developing cybersecurity curriculum and the work done to build cybersecurity talent for the longer term.

Recorded at Cisco Live, Melbourne, 7 March 2018 - MySecurity Media attended Cisco Live courtesy of Cisco.

In this interview, we talk to Bret Hartman, Vice President and Chief Technology Officer for the Security Business Group of Cisco.

Bret discusses his role as CTO and the differences in role and strategy when leading a large organisation, as compared to a start-up. He also discusses the challenge of predicting the two to four year future, making strategic decisions, and integrating new technology into Cisco, whether developed or acquired.

The two also discuss the future scenarios in cyber crime, security and the ‘Attacker-Defender’ arms race that has developed as a consequence of increased use of automated, self learning algorithms, on both sides, and how Cisco is overcoming the practical and privacy limitations using analysis of behaviour and meta-data.

This is a rich discussion, that we hope you’ll enjoy. BTW Cisco reported FY Revenue of $48 billion in 2017.

Recorded at Cisco Live, Melbourne, 7 March 2018 - MySecurity Media attended Cisco Live courtesy of Cisco.

This is the second of two special interviews held at Standards Australia in Sydney, 13 March 2018.

In this interview, we talk with Patrick Butor, Chair of Working Group 6 Protective Security, within ISO TC292 (http://www.isotc292online.org/), and Matthew Curtis, Project Leader of the ISO 22340 Security and Resilience - Protective Security - Architecture, Framework and Guidelines Standard.

We discuss the goal of the working group and the resulting standard, and how it will provide a new overarching framework, which will enable entities to be strategically aligned, across existing standards of business continuity, supply chain security, and information security management, integrating governance, physical, information and personnel security.

Relevant Links:

https://www.iso.org/committee/5259148.html (https://www.iso.org/committee/5259148.html)

http://www.isotc292online.org/ (http://www.isotc292online.org/)

https://www.standards.org.au/ (https://www.standards.org.au/)

This is one of two interviews held at Standards Australia in Sydney, 13 March 2018.

We talk to Åsa Kyrk Gere, Chair of the International Organization for Standardization, ISO/TC 292 (https://www.iso.org/committee/5259148.html) Committee, and the Australian Representative, Jason Brown.

We discuss the mission of the ISO/TC 292, of security and resilience as an international standard, and the 11 standards being released in 2018 through six different working groups and three advisory groups.

We also discuss the Committee’s relationship to ISO/TC 262 Risk Management and ISO31000 Risk Management, and how the Committee is collaborating with 120 experts from over 25 countries.

Relevant Links:

https://www.iso.org/committee/5259148.html (https://www.iso.org/committee/5259148.html)

http://www.isotc292online.org/ (http://www.isotc292online.org/)

https://www.standards.org.au/ (https://www.standards.org.au/)

Chris Cubbage talks to Leanne Fry, Chief Innovation Officer, and Rajesh Walton, Director for Innovation, Information & Transformation, both of AUSTRAC, at the ASEAN-Australia Codeathon held in Sydney.

The three discuss the 32 hour non-stop Codeathon and it’s importance in helping generate ideas for tackling money laundering and terrorism financing, through collaboration with people and groups from around the region.

Leanne and Raj also talk about their challenges in ensuring secure information sharing across the region, increasing the agility of AUSTRAC, their Open Financial Intelligence Unit, AUSTRAC’s Innovation Hub, and the emergence of cryptocurrency and blockchain and it’s regulation to further manage crime.

Along with Episode 47, this was recorded 14 March, 2018 in Sydney at the ASEAN-Australia AUSTRAC Codeathon, held in the lead up to the ASEAN-Australia Special Summit 2018. The Codeathon presented the following six challenges for participants to solve in 32 hours:

* Using big data to combat terrorism financing

* Disrupting money launderers, terrorists and cyber criminals across ASEAN-Australia

* Exploiting financial data to gain insights into crime and terrorism risks

* Applying artificial intelligence to improve Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) compliance and suspicious matter reporting

* Applying blockchain technologies to improve financial services, AML compliance or secure intelligence sharing

* Collaboration and knowledge sharing to combat cybercrime, money laundering and terrorism

In this interview, David Kemp, Specialist Business Consultant, and Matthew Hanmer, Regional Director Security Software, both from Micro Focus, the 7th largest pure software company in the world, discuss the implications of the European Union’s GDPR, or General Data Protection Regulation, and Australia’s Mandatory Notifiable Data Breach (NDB) scheme.

David Kemp highlights the business benefits of compliance, which includes avoiding fines, reputational damage, and also improving the business’s attractiveness to potential clients. In short, ensuring trust. He also highlights the two fundamental challenges of GDPR compliance, which includes monitoring a wide range of data types, encompassing audio, visual, alphanumerical data and even social media, as well as the huge variety of locations of that stored data, including end point devices and even backup storage.

On an Australian perspective, Matthew Hanmer, highlights that there is still somewhat of a grey area with respect to many company’s full understanding mandatory data breach notification legislation.

This is a deep discussion on data protection and security - Enjoy!

In this interview, Chris Cubbage chats with the always entertaining and intelligent Adam Spencer, MC at the ASEAN-Australia Codeathon in Sydney, hosted by AUSTRAC, the Australian Transaction Reports and Analysis Centre.

AUSTRAC is an Australian government financial intelligence agency set up to monitor and regulate financial transactions to identify money laundering, organised crime, tax evasion, welfare fraud and terrorism, and as you’ll hear, the Codeathon was created to bring strangers from around the ASEAN region and encourage collaboration, and develop real-world solutions, all within a 32 hour non-stop window.

Chris and Adam discuss the importance of regional collaboration, with respect to cyber security, and also how blockchain technologies could help to increase integrity in our daily lives.

Recorded 14 March, 2018 in Sydney at the ASEAN-Australia Codeathon, held in the lead up to the ASEAN-Australia Special Summit 2018.

The Codeathon presented the following six challenges for participants to solve in 32 hours:

* Using big data to combat terrorism financing

* Disrupting money launderers, terrorists and cyber criminals across ASEAN-Australia

* Exploiting financial data to gain insights into crime and terrorism risks

* Applying artificial intelligence to improve Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) compliance and suspicious matter reporting

* Applying blockchain technologies to improve financial services, AML compliance or secure intelligence sharing

* Collaboration and knowledge sharing to combat cybercrime, money laundering and terrorism

The overall winners of the ASEAN-Australia Codeathon were:

* Codeathon Challenge Winner: Project Iceberg

* Codeathon Challenge Runner-Up: CryptoCollect - A project by The Cyber Six

WINNERS:

Congratulations to our team winners of the six Codeathon challenges:

* ‘Using big data to combat terrorism financing’ – CyberEye

* ‘Disrupting money launderers, terrorists and cyber criminals across ASEAN’ – GoTrack

* ‘Exploiting financial data to gain insights into crime and terrorism risks’ – Project Iceberg

* ‘Applying artificial intelligence to improve AML/CTF compliance and suspicious matter reporting’ – Project Vision

* ‘Applying blockchain technologies to improve financial services, AML compliance or secure intelligence sharing’ – CryptoCollect - A project by The Cyber Six

* ‘Collaboration and knowledge sharing to combat cybercrime, money laundering and terrorism’ – The Longreach Platform

Congratulations to team prize winners:

* ‘Most Innovative Idea’ – FinCrime AI Alliance

* ‘Spirit of the Codeathon’ – GoTrack

* ‘Codeathon Collaboration’ – Jigsaw

* ‘Best ASEAN Codeathon Team’ – Project Vision

Judging panel:

* Tony Sheehan, the Commonwealth Counter-Terrorism Coordinator

* Dr Maria Milosavljevic, Chief Information Security Officer, NSW Government

* Dr Alex Johnston, Head of Technology, Thomson Reuters Australia

* Alex Scandurra, CEO, Stone and Chalk

* Paul Xuereb, Secretary, Blockchain Association of Australia

* Leanne Fry, Chief Innovation Officer, AUSTRAC

* Dr John Moss, National Manager Intelligence, AUSTRAC