Schneier Monitoring Presentation

download Schneier Monitoring Presentation

of 32

Transcript of Schneier Monitoring Presentation

  • 8/8/2019 Schneier Monitoring Presentation

    1/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    %UXFH6FKQHLHU&72&RXQWHUSDQH,QWHUQHW6HFXULW\

    -XQH

    7DON'HVFULSWLRQ

    &RPSXWHUDQGQHWZRUNVHFXULW\KDVEHHQYLHZHGDVDQHQJLQHHULQJSUREOHPDQGFRPSDQLHVKDYHWULHGWRVROYHLWWKURXJKWKH

    DSSOLFDWLRQRIWHFKQRORJLHV7KLVDSSURDFKLVIDLOLQJHYHQWKRXJKWHFKQRORJLHVFRQWLQXHWRLPSURYHWKHVHFXULW\RIWKH,QWHUQHW

    FRQWLQXHVWRGHFOLQH7KHUHDOSUREOHPLVQRWRQHRIWHFKQRORJ\EXWRISURFHVV1HWZRUNVHFXULW\LVQRGLIIHUHQWIURPUHDO

    ZRUOGVHFXULW\7KHFRUUHFWSDUDGLJPLVULVNPDQDJHPHQW6WURQJFRXQWHUPHDVXUHVFRPELQHSURWHFWLRQGHWHFWLRQDQG

    UHVSRQVH7KHZD\WREXLOGUHVLOLHQWVHFXULW\LVZLWKYLJLODQWDGDSWLYHUHOHQWOHVVGHIHQVHE\H[SHUWVSHRSOHQRWSURGXFWV

    7KHUHDUHQRPDJLFSUHYHQWLYHFRXQWHUPHDVXUHVDJDLQVWFULPHLQWKHUHDOZRUOG\HWZHDUHDOOUHDVRQDEO\VDIHQHYHUWKHOHVV

    :HQHHGWREULQJWKDWVDPHWKLQNLQJWRWKH,QWHUQHW

    7KLVSUHVHQWDWLRQLVDYDLODEOHRQOLQHDWKWWSZZZFRXQWHUSDQHFRPSUHVHQWDWLRQSGI

    $ERXWWKH$XWKRU

    ,QWHUQDWLRQDOO\UHQRZQHGVHFXULW\WHFKQRORJLVWDQGDXWKRU%UXFH6FKQHLHULVWKH)RXQGHUDQGWKH&KLHI7HFKQLFDO2IILFHURI

    &RXQWHUSDQH,QWHUQHW6HFXULW\,QFWKHZRUOGOHDGHULQ0DQDJHG6HFXULW\0RQLWRULQJ&RXQWHUSDQHSURYLGHVVHFXULW\

    PRQLWRULQJVHUYLFHVWR)RUWXQHFRPSDQLHVZRUOGZLGH+HLVWKHDXWKRURIVL[ERRNVRQVHFXULW\DQGFU\SWRJUDSK\

    LQFOXGLQJWKHVHFXULW\EHVWVHOOHU6HFUHWV/LHV'LJLWDO6HFXULW\LQD1HWZRUNHG:RUOG+LVILUVWERRN$SSOLHG

    &U\SWRJUDSK\KDVVROGRYHUFRSLHVZRUOGZLGHDQGLVWKHGHILQLWLYHZRUNLQWKHILHOG6FKQHLHUGHVLJQHGWKH

    %ORZILVKDQG7ZRILVKHQFU\SWLRQDOJRULWKPVDQGZULWHVWKHLQIOXHQWLDO&U\SWR*UDPPRQWKO\QHZVOHWWHU+HLVDIUHTXHQW

    OHFWXUHURQFRPSXWHUVHFXULW\DQGFU\SWRJUDSK\

    %UXFH6FKQHLHUVELRJUDSK\LVDYDLODEOHRQOLQHDWKWWSZZZFRXQWHUSDQHFRPVFKQHLHUKWPO

    $ERXW&RXQWHUSDQH,QWHUQHW6HFXULW\,QF

    &RXQWHUSDQH,QWHUQHW6HFXULW\,QFLVWKHLQQRYDWRUDQGDFNQRZOHGJHGOHDGHULQSURYLGLQJ0DQDJHG6HFXULW\0RQLWRULQJ

    060VHUYLFHV060FRPELQHVSHRSOHDQGWHFKQRORJ\WRVDIHJXDUGEXVLQHVVHV:RUNLQJIURPDQHWZRUNRIWHFKQLFDOO\

    VRSKLVWLFDWHG6HFXUH2SHUDWLRQV&HQWHUV62&VDQGXVLQJSURJUHVVLYHDQDO\VLVWRROV&RXQWHUSDQHKDVEXLOWWKHPRVWDGYDQFHG

    DQDO\VLVFRUUHODWLRQGHWHFWLRQDQGGLDJQRVLVWHFKQRORJ\FRPSULVLQJRID6HQWU\PRQLWRULQJSUREHRQWKHFXVWRPHUVQHWZRUN

    DQGWKH6RFUDWHVNQRZOHGJHEDVHLQVLGHWKH62&V8VLQJWKLVWHFKQRORJ\&RXQWHUSDQHVH[SHUW6HFXULW\$QDO\VWVDUHDEOHWR

    GHWHFWVHFXULW\LQFLGHQWVERWKH[WHUQDOLQWUXVLRQVDQGLQVLGHUDWWDFNVLQUHDOWLPHDQGWDLORULPPHGLDWHHIIHFWLYHUHVSRQVHVIRU

    LWVFXVWRPHUV,WKDVSDUWQHUHGZLWKOHDGLQJVHFXULW\FRPSDQLHVFRQVXOWLQJRUJDQL]DWLRQVDQG9$5VWRGHOLYHU060VHUYLFHV

    ZRUOGZLGH&RXQWHUSDQHLVKHDGTXDUWHUHGLQ6XQQ\YDOH&$DQGKDVWZRRSHUDWLRQDO62&VRQHLQ0RXQWDLQ9LHZ&$DQG

    WKHRWKHULQ&KDQWLOO\9$

    0RUHLQIRUPDWLRQDERXW&RXQWHUSDQHLVDYDLODEOHRQOLQHDWKWWSZZZFRXQWHUSDQHFRP

  • 8/8/2019 Schneier Monitoring Presentation

    2/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    ,WVD'DQJHURXV:RUOG

    ,QWHOOHFWXDO3URSHUW\

    %UDQG9DOXH+$&.(56

    &203(7,7,21 (03/2

  • 8/8/2019 Schneier Monitoring Presentation

    3/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    $QG,WV*HWWLQJ:RUVH

    3DVVZRUG*XHVVLQJ

    6HOI5HSOLFDWLQJ&RGH

    3DVVZRUG&UDFNLQJ

    ([SORLWLQJ.QRZQ9XOQHUDELOLWLHV

    %XUJODULHV

    +LMDFNLQJ6HVVLRQV

    1HWZRUNHG0DQDJHPHQW'LDJQRVLV

    *8,

    $XWRPDWHG3UREHV6FDQV

    ZZZ$WWDFNV

    'LVWULEXWHG$WWDFN7RROV

    6WDJHG$WWDFN

    $WWDFN6RSKLVWLFDWLRQ

    ,QWUXGHU.QRZOHGJH

    /2:

    +,*+

    'LVDEOLQJ$XGLWV

    %DFN'RRUV

    6ZHHSHUV

    6QLIIHUV

    3DFNHW6SRRILQJ

    'HQLDORI6HUYLFH

    6WHDOWK$GYDQFHG6FDQQLQJ7HFKQLTXHV

    &URVV6LWH6FULSWLQJ

    6RXUFH-XOLD+$OOHQ&(57*XLGHWR6\VWHPDQG1HWZRUN6HFXULW\3UDFWLFHV$GGLVRQ:HVOH\

    &RPSXWHU6HFXULW\7KH7KUHDWV

    ,QFRPSXWHUVHFXULW\WKHROGHUDWWDFNVQHYHUJRDZD\DQGWKHQHZHUDWWDFNVMXVWJHWZRUVH7KHPRVWVHULRXVSUREOHPLQ

    FRPSXWHUVHFXULW\LVQRWWKHQHZHVWDWWDFNEXWWKHHYHULQFUHDVLQJWVXQDPLRIDOOWKHROGDWWDFNVWKDWFRQWLQXHWRGRGDPDJH

    &RQVLGHUEXIIHURYHUIORZV7KHVHDWWDFNVDUHRQHRIWKHROGHVWWULFNVLQWKHERRN7KH\ZHUHILUVWWDONHGDERXWDVHDUO\DVWKH

    VWLPHVKDULQJV\VWHPVVXIIHUHGIURPWKHSUREOHPDQGZHUHNQRZQE\WKHVHFXULW\OLWHUDWLHYHQHDUOLHUWKDQWKDW,QWKH

    VWKH\ZHUHRIWHQXVHGDVDSRLQWRIDWWDFNDJDLQVWHDUO\QHWZRUNHGFRPSXWHUV,QWKH0RUULV:RUPGURSSHGRI

    WKHKRVWVRQWKH,QWHUQHWZLWKDEXIIHURYHUIORZDWWDFN

    7RGD\RYHUDGHFDGHDQGDKDOIDIWHU0RUULVDQGDERXW\HDUVDIWHUWKHVHDWWDFNVZHUHILUVWGLVFRYHUHGEXIIHURYHUIORZVDUHVWLOODQHQRUPRXVSUREOHP0RVWDWWDFNVRQWKH,QWHUQHWDUHEXIIHURYHUIORZVHYHQWKRXJKWKHUHDUHDXWRPDWLFSURJUDPVWRILQG

    DQGIL[WKHPLQGHYHORSPHQW

    7KHUHDUHPDQ\DWWDFNVPRUHVXEWOHDQGKDUGHUWRIL[WKDQEXIIHURYHUIORZV%XWWKH\UHVWLOOKHUHWRRDQGWKH\UHVWLOOFDXVLQJ

    GDPDJH

    ,Q:HEVLWHGHIDFHPHQWVZHUHPDMRUQHZV7RGD\WKHUHDUHGR]HQVRI:HEVLWHGHIDFHPHQWVHYHU\GD\DQGIHZQRWLFH

    ,QWKHVWRU\ZDVFUHGLWFDUGQXPEHUWKHIWV&'8QLYHUVHVWXPEOHGDVDFRPSDQ\SDUWO\EHFDXVHRIWKHFUHGLELOLW\WKH\

    ORVWLQDFUHGLWFDUGQXPEHUWKHIW7RGD\PLOOLRQVRIFUHGLWFDUGQXPEHUVDUHVWROHQRIIWKH,QWHUQHWEXWLWVQRWQHZVDQ\PRUH

    ZDVWKH\HDURIWKH7URMDQ%DFN2ULILFHZDVJRLQJWREHWKHGHDWKRIWKH,QWHUQHW7RGD\WKHUHDUHGR]HQVRI7URMDQV

    PDQ\RIWKHPQDVWLHUWKDQ%DFN2ULILFHWKDWWKHSRSXODUSUHVVLJQRUHV,QLWZDVGHQLDORIVHUYLFHDWWDFNV'R6DWWDFNVDUH

    VRPHRIWKHROGHVWDQGHDVLHVWDWWDFNVLQWKHERRN7KH\UHDVROGDVWKH,QWHUQHW7KDW)HEUXDU\FRRUGLQDWHGGLVWULEXWHG'R6

    DWWDFNVHDVLO\EURXJKWGRZQVHYHUDOKLJKWUDIILF:HEVLWHVLQFOXGLQJ

  • 8/8/2019 Schneier Monitoring Presentation

    4/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    :K\"&RPSOH[LW\

    &RPSOH[LW\LVWKHHQHP\RIVHFXULW\

    0RUHFRPSOH[LW\OHVVVHFXULW\ 7KH,QWHUQHWLVJHWWLQJPRUHFRPSOH[IDVWHUWKDQRXU

    DELOLW\WRVHFXUHLW

    0RUHIHDWXUHVDQGLQFUHDVLQJFRGHVL]H

    ,QFUHDVLQJH[WHQVLELOLW\

    0RUHLQWHUDFWLRQVDQGGHSHQGHQFLHV

    ,QFUHDVLQJFRQQHFWLYLW\

    :HDUHQRWZLOOLQJWRVDFULILFHIHDWXUHVIRUVHFXULW\

    7KHPRQRFXOWXUHRIWKH,QWHUQHWGRHVQWKHOSHLWKHU

    &RPSOH[LW\DQG6HFXULW\

    7KHIXWXUHRIGLJLWDOV\VWHPVLVFRPSOH[LW\DQGFRPSOH[LW\LVWKHZRUVWHQHP\RIVHFXULW\

    'LJLWDOWHFKQRORJ\KDVEHHQDQXQHQGLQJVHULHVRILQQRYDWLRQVXQLQWHQGHGFRQVHTXHQFHVDQGVXUSULVHVDQGWKHUHVQRUHDVRQWR

    EHOLHYHWKDWZLOOVWRSDQ\WLPHVRRQ%XWRQHWKLQJKDVKHOGFRQVWDQWWKURXJKLWDOODQGLWVWKDWGLJLWDOV\VWHPVKDYHJRWWHQPRUH

    FRPSOLFDWHG7KH,QWHUQHWLVSUREDEO\WKHPRVWFRPSOH[PDFKLQHPDQNLQGKDVHYHUEXLOWDQGLWVQRWJHWWLQJDQ\VLPSOHU

    DQ\WLPHVRRQ

    $VDFRQVXPHU,WKLQNWKLVFRPSOH[LW\LVJUHDW7KHUHDUHPRUHFKRLFHVPRUHRSWLRQVPRUHWKLQJV,FDQGR$VDVHFXULW\

    SURIHVVLRQDO,WKLQNLWVWHUULI\LQJ$VF\EHUVSDFHFRQWLQXHVWRJHWPRUHFRPSOH[LWZLOOFRQWLQXHWRJHWOHVVVHFXUH7KLVLVWUXHIRUVHYHUDOUHDVRQV

    7KHILUVWUHDVRQLVWKHQXPEHURIVHFXULW\EXJV$OOVRIWZDUHFRQWDLQVEXJVDQGVRPHRIWKHVHEXJVZLOODIIHFWVHFXULW\

    7KHVHFRQGUHDVRQLVWKHH[WHQVLELOLW\RIFRPSOH[V\VWHPV&RPSOH[V\VWHPVDUHQHFHVVDULO\PRGXODUFRGHDUULYHVZKHQ

    QHHGHGDQGGRHVQRWDOOFRPHSUHSDFNDJHGDQGSUHLQVWDOOHG%XWH[WHQVLELOLW\PHDQVLQFUHDVHGVHFXULW\IODZVEHFDXVH

    VHFXULW\RIWHQIDLOVZKHUHPRGXOHVLQWHUDFW)RUH[DPSOHODVW\HDUVHSLGHPLFRIPDFURYLUXVHVVKRZHGWKDW0LFURVRIW:RUG

    DQG([FHOQHHGWREHVHFXUH-DYDDSSOHWVQHHGWREHVHFXUHIRUDQ\SRVVLEOHXVHQRWRQO\IRUWKHXVHVWKH\DUHLQWHQGHG

    0DOLFLRXVHPDLODWWDFKPHQWVFDQWXQQHOWKURXJKILUHZDOOV&RQYHQLHQFHIHDWXUHVLQ0LFURVRIW2XWORRNFDQFRPSURPLVH

    VHFXULW\

    7KHWKLUGUHDVRQLVWKHLQFUHDVHGWHVWLQJUHTXLUHPHQWVIRUFRPSOH[V\VWHPV7KHRQO\UHDVRQDEOHZD\WRWHVWWKHVHFXULW\RID

    V\VWHPLVWRSHUIRUPVHFXULW\HYDOXDWLRQVRQLW+RZHYHUWKHPRUHFRPSOH[WKHV\VWHPLVWKHPRUHVHFXULW\UHODWHGHUURUVLW

    ZLOOKDYH0RUHSRVVLEOHLQWHUDFWLRQVFUHDWHVPRUHZRUNGXULQJWKHVHFXULW\HYDOXDWLRQ&KHFNLQJHYHU\SRVVLEOHFRQILJXUDWLRQ

    LVHIIHFWLYHO\LPSRVVLEOH7KXVWKHGLIILFXOW\RISHUIRUPLQJVHFXULW\HYDOXDWLRQVDOVRJURZVYHU\UDSLGO\ZLWKLQFUHDVLQJFRPSOH[LW\7KHFRPELQDWLRQRIDGGLWLRQDOSRWHQWLDOZHDNQHVVHVDQGDPRUHGLIILFXOWVHFXULW\DQDO\VLVXQDYRLGDEO\UHVXOWVLQ

    LQVHFXUHV\VWHPV

    7KHIRXUWKUHDVRQLVWKDWWKHPRUHFRPSOH[DV\VWHPLVWKHKDUGHULWLVWRXQGHUVWDQG7KHUHDUHDOOVRUWVRIYXOQHUDELOLW\SRLQWV

    KXPDQFRPSXWHULQWHUIDFHV\VWHPLQWHUDFWLRQVWKDWEHFRPHPXFKODUJHUZKHQ\RXFDQWNHHSWKHHQWLUHV\VWHPLQ\RXU

    KHDG

    7KHILIWKUHDVRQLVWKHGLIILFXOW\RIDQDO\VLV7KHPRUHFRPSOH[DV\VWHPLVWKHKDUGHULWLVWRGRDQDO\VLV(YHU\WKLQJLVPRUH

    FRPSOLFDWHGVSHFLILFDWLRQGHVLJQLPSOHPHQWDWLRQDQGXVH$QGHYHU\WKLQJLVUHOHYDQWWRVHFXULW\DQDO\VLV

    &RQWLQXHGRQQH[WSDJH

  • 8/8/2019 Schneier Monitoring Presentation

    5/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    (YROXWLRQRI6HFXULW\0DQDJHPHQW

    VW*HQHUDWLRQ

    *$7(6*816*8$5'6)RFXVRQSK\VLFDOYXOQHUDELOLWLHVDQGGDWDFRQILGHQWLDOLW\

    7RROVORFNVEXUJODUDODUPV

    :HDNQHVVHVVORZUHVSRQVHQRSURWHFWLRQIURPHOHFWURQLFWKUHDWV

    QG*HQHUDWLRQ

    %$6,&6(&85,7

  • 8/8/2019 Schneier Monitoring Presentation

    6/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    7KH:LQGRZRI([SRVXUH

    9XOQHUDELOLW\GLVFRYHUHG

    9XOQHUDELOLW\SRSXODUL]HG

    9HQGRULVVXHVSDWFK

    7LPH

    9XOQHUDELOLW\DQQRXQFHG

    7KH:LQGRZRI([SRVXUH3KDVHV

    3KDVH%HIRUHWKHYXOQHUDELOLW\LVGLVFRYHUHG

    1RH[SRVXUH

    3KDVH$IWHUGLVFRYHU\EXWEHIRUHLWLVDQQRXQFHG

    9HU\OLPLWHGH[SRVXUH

    3KDVH$IWHULWLVDQQRXQFHG0RUHH[SRVXUH

    3KDVH$IWHUDQDXWRPDWLFDWWDFNWRROLVZULWWHQ

    6FULSWNLGGLHVZLWKQRVNLOOFDQXVHYXOQHUDELOLW\

    ([SRVXUHJRHVXSFRQVLGHUDEO\

    3KDVH$IWHUDYHQGRUSDWFKKDVEHHQLVVXHG

    ([SRVXUHUHPDLQVLQGHILQLWHO\EHFDXVHSDWFKHVPDQ\XVHUVGRQRWLQVWDOOSDWFKHV

    7KHULVNQHYHUJRHVEDFNWR]HUR

  • 8/8/2019 Schneier Monitoring Presentation

    7/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    6HFXULW\7ZR0RGHOV

    7KUHDW$YRLGDQFH7KH0LOLWDU\0RGHO

    6HFXULW\LVDQDEVROXWH

    )LJXUHRXWZKDWWKHWKUHDWVDUHDQGDYRLGWKHP

    (LWKHU\RXUHVHFXUHRU\RXUHQRW

    )ROORZVDFRPSXWHUHQJLQHHULQJPHQWDOLW\

    )LQGDQGVROYHWKHP

    6HFXULW\EHFRPHVDEDUULHUWREXVLQHVV

    5HPHPEHUWKHFU\SWRZDUV"

    5LVN0DQDJHPHQW7KH%XVLQHVV0RGHO

    6HFXULW\LVUHODWLYH

    0DQ\ULVNVDQGVROXWLRQV

    7KLQJVIDLODOOWKHWLPH

    9DULHW\RIRSWLRQV

    $FFHSWWKHULVN

    0LWLJDWHWKHULVNZLWKWHFKQRORJ\

    0LWLJDWHWKHULVNZLWKSURFHGXUHV

    7UDQVIHUWKHULVN

    6HFXULW\DQG5LVN0DQDJHPHQW

    $VNDQ\QHWZRUNDGPLQLVWUDWRUZKDWKHQHHGVVHFXULW\IRUDQGKHFDQGHVFULEHWKHWKUHDWV:HEVLWHGHIDFHPHQWVFRUUXSWLRQDQGORVVRIGDWDGXHWRQHWZRUNSHQHWUDWLRQVGHQLDORIVHUYLFHDWWDFNVYLUXVHVDQG7URMDQV7KHOLVWVHHPVHQGOHVVDQGDQHQGOHVVVHULHVRIQHZVVWRULHVSURYHVWKDWWKHWKUHDWVDUHUHDO

    $VNWKDWVDPHQHWZRUNDGPLQLVWUDWRUKRZVHFXULW\WHFKQRORJLHVKHOSDQGKHOOGLVFXVVDYRLGLQJWKHWKUHDWV7KLVLVWKHWUDGLWLRQDOSDUDGLJPRIFRPSXWHUVHFXULW\ERUQRXWRIDFRPSXWHUVFLHQFHPHQWDOLW\ILJXUHRXWZKDWWKHWKUHDWVDUHDQGEXLOGWHFKQRORJLHVWRDYRLGWKHP7KHFRQFHLWLVWKDWWHFKQRORJLHVFDQVRPHKRZVROYHFRPSXWHUVHFXULW\DQGWKHHQGUHVXOWLVDVHFXULW\SURJUDPWKDWEHFRPHVDQH[SHQVHDQGDEDUULHUWREXVLQHVV+RZPDQ\WLPHVKDVDVHFXULW\RIILFHUVDLG

  • 8/8/2019 Schneier Monitoring Presentation

    8/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    6HFXULW\0XVW0DNH%XVLQHVV6HQVH

    &2672)6(&85,7

  • 8/8/2019 Schneier Monitoring Presentation

    9/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    $FKLHYLQJ5HDO6HFXULW\

    %86,1(666(&85,7

  • 8/8/2019 Schneier Monitoring Presentation

    10/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    3UHYHQWLRQ'HWHFWLRQDQG5HVSRQVH

    0RVWFRPSXWHUVHFXULW\LVSUHYHQWLYHLQQDWXUH

    $SUHYHQWLYHFRXQWHUPHDVXUHSURYLGHVWZRWKLQJV

    %DUULHUWRRYHUFRPH

    7LPHWRRYHUFRPHWKHEDUULHU

    :LWKRXWGHWHFWLRQDQGUHVSRQVHWKHSUHYHQWLYHFRXQWHUPHDVXUHLVPXFKOHVVHIIHFWLYH

    0RVWRIWKHWLPHGHWHFWLRQDQGUHVSRQVHLVPRUHHIIHFWLYHDQGPRUHFRVWHIIHFWLYHWKDQPRUHSUHYHQWLRQ

    3UHYHQWLRQ'HWHFWLRQDQG5HVSRQVH

    0RVWFRPSXWHUVHFXULW\LVVROGDVDSURSK\ODFWLFHQFU\SWLRQSUHYHQWVHDYHVGURSSLQJILUHZDOOVSUHYHQWXQDXWKRUL]HGQHWZRUN

    DFFHVV3.,SUHYHQWVLPSHUVRQDWLRQ7RWKHZRUOGDWODUJHWKLVLVDVWUDQJHPDUNHWLQJVWUDWHJ\$GRRUORFNLVQHYHUVROGZLWK

    WKHVORJDQ7KLVORFNSUHYHQWVEXUJODULHV1RRQHHYHUDVNVWRSXUFKDVHDGHYLFHWKDWZLOOSUHYHQWPXUGHU%XWFRPSXWHU

    VHFXULW\SURGXFWVDUHVROGWKDWZD\DOOWKHWLPH&RPSDQLHVUHJXODUO\WU\WREX\?DGHYLFHWKDWSUHYHQWVKDFNLQJ7KLVLVQR

    PRUHSRVVLEOHWKDQDQDQWLPXUGHUGHYLFH

    :KHQ\RXEX\DVDIHLWFRPHVZLWKDUDWLQJ7/PLQXWHVWRROV757/PLQXWHVWRUFKDQGWRROV:KDWWKLVPHDQVLV

    WKDWDSURIHVVLRQDOVDIHFUDFNHUZLWKVDIHFUDFNLQJWRROVDQGDQR[\DFHW\OHQHWRUFKZLOOEUHDNRSHQWKHVDIHLQDQKRXU,IDQDODUPGRHVQWVRXQGDQGJXDUGVGRQWFRPHUXQQLQJZLWKLQWKDWKRXUWKHVDIHLVZRUWKOHVV7KHVDIHEX\V\RXWLPH\RXKDYHWR

    VSHQGLWZLVHO\

    5HDOZRUOGVHFXULW\LQFOXGHVSUHYHQWLRQGHWHFWLRQDQGUHVSRQVH,IWKHSUHYHQWLRQPHFKDQLVPVZHUHSHUIHFW\RXZRXOGQW

    QHHGGHWHFWLRQDQGUHVSRQVH%XWQRSUHYHQWLRQPHFKDQLVPLVSHUIHFW7KLVLVHVSHFLDOO\WUXHIRUFRPSXWHUQHWZRUNV$OO

    VRIWZDUHSURGXFWVKDYHVHFXULW\EXJVPRVWQHWZRUNGHYLFHVDUHPLVFRQILJXUHGDQGXVHUVPDNHDOOVRUWVRIPLVWDNHV:LWKRXW

    GHWHFWLRQDQGUHVSRQVHWKHSUHYHQWLRQPHFKDQLVPVRQO\KDYHOLPLWHGYDOXH7KH\UHIUDJLOH$QGGHWHFWLRQDQGUHVSRQVHDUHQRW

    RQO\PRUHFRVWHIIHFWLYHEXWDOVRPRUHHIIHFWLYHWKDQSLOLQJRQPRUHSUHYHQWLRQ

    2QWKH,QWHUQHWWKLVWUDQVODWHVWRPRQLWRULQJ:KHQDIRUHQVLFVWHDPLQYHVWLJDWHVDQLQWUXVLRQWKH\FRPEWKURXJKWKHDXGLWORJV

    RIWKHQHWZRUNVURXWHUVVHUYHUVILUHZDOOVHWF8VLQJWKRVHORJVWKH\SLHFHWRJHWKHUWKHDWWDFNHUVDFWLRQVKRZKHJRWLQZKDW

    KHGLGZKDWKHVWROH,IVRPHRQHFDQPRQLWRUWKRVHDXGLWORJVLQUHDOWLPHKHFRXOGILJXUHRXWZKDWWKHDWWDFNHU,6'2,1*

    $QGLIKHFDQUHVSRQGIDVWHQRXJKKHFDQUHSHOWKHDWWDFNHUEHIRUHKHGRHVUHDOGDPDJH

    7KDWVUHDOVHFXULW\,WGRHVQWPDWWHUKRZWKHDWWDFNHUJHWVLQRUZKDWKHLVGRLQJ,IWKHUHDUHHQRXJKPRWLRQVHQVRUVHOHFWULFH\HVDQGSUHVVXUHSODWHVLQ\RXUKRXVH\RXOOFDWFKWKHEXUJODUUHJDUGOHVVRIKRZKHJRWLQ,I\RXDUHPRQLWRULQJ\RXUQHWZRUN

    FDUHIXOO\HQRXJK\RXOOFDWFKDKDFNHUUHJDUGOHVVRIZKDWYXOQHUDELOLW\KHH[SORLWHGWRJDLQDFFHVV$QGLI\RXFDQUHVSRQG

    TXLFNO\DQGHIIHFWLYHO\\RXFDQUHSHOWKHDWWDFNHUEHIRUHKHGRHVDQ\GDPDJH*RRGGHWHFWLRQDQGUHVSRQVHFDQPDNHXSIRU

    LPSHUIHFWSUHYHQWLRQ

    $QGSUHYHQWLRQV\VWHPVDUHQHYHUSHUIHFW1REDQNHYHUVD\V2XUVDIHLVVRJRRGZHGRQWQHHGDQDODUPV\VWHP1R

    PXVHXPHYHUVD\V2XUGRRUDQGZLQGRZORFNVDUHVRJRRGZHGRQWQHHGQLJKWZDWFKPHQ'HWHFWLRQDQGUHVSRQVHDUHKRZ

    ZHJHWVHFXULW\LQWKHUHDOZRUOGDQGWKH\UHWKHRQO\ZD\ZHFDQSRVVLEO\JHWVHFXULW\RQWKH,QWHUQHW&,2VPXVWLQYHVWLQ

    QHWZRUNPRQLWRULQJVHUYLFHVLIWKH\DUHWRSURSHUO\PDQDJHWKHULVNVDVVRFLDWHGZLWKWKHLUQHWZRUNLQIUDVWUXFWXUH

  • 8/8/2019 Schneier Monitoring Presentation

    11/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    1HWZRUN6HFXULW\0RQLWRULQJ5HTXLUHV+XPDQ([SHUWV

    ([SHUWVPXVW 6HSDUDWHWKHUHDO

    DWWDFNVIURPWKHIDOVHDODUPV

    6HSDUDWHWKHVHULRXVDWWDFNHUVIURPWKHDQNOHELWHUV

    'HWHUPLQHDQGLPSOHPHQWDUHVSRQVH

    0RQLWRULQJ1HWZRUN6HFXULW\

    1HWZRUNPRQLWRULQJLPSOLHVVHYHUDOWKLQJV,WLPSOLHVDVHULHVRIVHQVRUVLQDQGDURXQGWKHQHWZRUN/XFNLO\WKHVHDUHDOUHDG\

    LQSODFH(YHU\ILUHZDOOSURGXFHVDFRQWLQXRXVVWUHDPRIDXGLWPHVVDJHV6RGRHVHYHU\URXWHUDQGVHUYHU,'6VVHQGPHVVDJHV

    ZKHQWKH\QRWLFHVRPHWKLQJ(YHU\RWKHUVHFXULW\SURGXFWJHQHUDWHVDODUPVLQVRPHZD\

    %XWWKHVHVHQVRUVE\WKHPVHOYHVGRQRWRIIHUVHFXULW\

  • 8/8/2019 Schneier Monitoring Presentation

    12/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    (IIHFWLYH0RQLWRULQJ0XVW%H9LJLODQW$GDSWLYHDQG5HOHQWOHVV

    9LJLODQFH

    0RQLWRULQJRQO\ZRUNV[

    'HIHQVHLQOD\HUV

    &KHFNVDQGEDODQFHV

    5HOHQWOHVVQHVV

    )LUHZDOOV,'6VURXWHUVDQGVHUYHUVDUHWKHWHUUDLQ\RXILJKWRQ

    3HRSOHGHIHQGLQJ\RXDUHZKDWVLPSRUWDQW

    $GDSWDELOLW\

    1HWZRUNVDUHG\QDPLF 1HZDWWDFNV

    1HZYXOQHUDELOLWLHV

    &KDQJLQJQHWZRUNV

    $GDSWDELOLW\LVDGHIHQVH

    $QHQRUPRXVDGYDQWDJH

    :HFDQWDIIRUGWRVTXDQGHULW

    0LOLWDU\+LVWRU\DQG1HWZRUN6HFXULW\

    ,QZDUIDUHWKHGHIHQGHUVPLOLWDU\DGYDQWDJHFRPHVIURPWZREURDGVWUHQJWKVWKHDELOLW\WRTXLFNO\UHDFWWRDQDWWDFNDQGWKH

    DELOLW\WRFRQWUROWKHWHUUDLQ

    7KHILUVWVWUHQJWKLVSUREDEO\WKHPRVWLPSRUWDQWDGHIHQGHUFDQPRUHTXLFNO\VKLIWIRUFHVWRUHVXSSO\H[LVWLQJIRUFHVVKRUHXS

    GHIHQVHZKHUHLWLVQHHGHGDQGFRXQWHUDWWDFN+HUHZHVHHWKHVDPHWKHPHVIURPHOVHZKHUHLQWKLVERRNOHWKRZGHWHFWLRQDQG

    UHVSRQVHDUHFULWLFDOWKHQHHGIRUWUDLQHGH[SHUWVWRTXLFNO\DQDO\]HDQGUHDFWWRDWWDFNVDQGWKHLPSRUWDQFHRIYLJLODQFH,YH

    EXLOW&RXQWHUSDQHV060VHUYLFHDURXQGWKHVHYHU\SULQFLSOHVSUHFLVHO\EHFDXVHLWFDQGUDPDWLFDOO\VKLIWWKHEDODQFHIURP

    DWWDFNHUWRGHIHQGHU7KHGHIHQGHUVVHFRQGVWUHQJWKDOVRJLYHVKLPDVWURQJDGYDQWDJH+HKDVEHWWHUNQRZOHGJHRIWKHWHUUDLQZKHUHWKHJRRG

    KLGLQJSODFHVDUHZKHUHWKHPRXQWDLQSDVVHVDUHKRZWRVQHDNWKURXJKWKHFDYHV+HFDQPRGLI\WKHWHUUDLQEXLOGLQJFDVWOHVRU

    6$0EDWWHULHVGLJJLQJWUHQFKHVRUWXQQHOVHUHFWLQJJXDUGWRZHUVRUSLOOER[HV$QGKHFDQFKRRVHWKHWHUUDLQRQZKLFKWRVWDQG

    DQGGHIHQGEHKLQGWKHVWRQHZDOODWRSWKHKLOORQWKHIDUVLGHRIWKHEULGJHLQWKHGHQVHMXQJOH7KHGHIHQGHUFDQXVHWHUUDLQ

    WRKLVPD[LPXPDGYDQWDJHWKHDWWDFNHULVVWXFNZLWKZKDWHYHUWHUUDLQKHLVIRUFHGWRWUDYHUVH

    2QWKH,QWHUQHWWKLVVHFRQGDGYDQWDJHLVRQHWKDWQHWZRUNGHIHQGHUVVHOGRPWDNHDGYDQWDJHRINQRZOHGJHRIWKHQHWZRUN7KH

    QHWZRUNDGPLQLVWUDWRUNQRZVH[DFWO\KRZKLVQHWZRUNLVEXLOWRUDWOHDVWKHVKRXOGZKDWLWLVVXSSRVHGWRGRDQGKRZLWLV

    VXSSRVHGWRGRLW$Q\DWWDFNHUH[FHSWDNQRZOHGJHDEOHLQVLGHUKDVQRFKRLFHEXWWRVWXPEOHDURXQGWU\LQJWKLVDQGWKDWWU\LQJ

    WRILJXUHRXWZKDWVZKHUHDQGZKRVFRQQHFWHGWRZKRP$QGLWVDERXWWLPHZHH[SORLWHGWKLVDGYDQWDJH

    7KLQNDERXWEXUJODUDODUPV7KHUHDVRQWKH\ZRUNLVWKDWWKHDWWDFNHUGRHVQWNQRZWKH\UHWKHUH+HPLJKWVXFFHVVIXOO\E\SDVV

    DGRRUORFNRUVQHDNLQWKURXJKDVHFRQGVWRU\ZLQGRZEXWKHGRHVQWNQRZWKDWWKHUHLVDSUHVVXUHSODWHXQGHUWKLVSDUWLFXODU

    UXJRUDQHOHFWULFH\HDFURVVWKLVSDUWLFXODUGRRUZD\0DF*\YHUOLNHDQWLFVDVLGHDQ\EXUJODUZDQGHULQJWKURXJKDEXLOGLQJZLUHGZLWKDODUPVLVJXDUDQWHHGWRWULSVRPHWKLQJVRRQHURUODWHU

    7UDGLWLRQDOFRPSXWHUVHFXULW\KDVEHHQVWDWLFLQVWDOODILUHZDOOFRQILJXUHD3.,DGGDFFHVVFRQWUROPHDVXUHVDQG\RXUHGRQH

    5HDOVHFXULW\LVG\QDPLF7KHGHIHQVHKDVWREHFRQWLQXRXVO\YLJLODQWDOZD\VUHDG\IRUWKHDWWDFN7KHGHIHQVHKDVWREHDEOHWR

    GHWHFWDWWDFNVTXLFNO\EHIRUHVHULRXVGDPDJHLVGRQH$QGWKHGHIHQVHKDVWREHDEOHWRUHVSRQGWRDWWDFNVHIIHFWLYHO\UHSHOOLQJ

    WKHDWWDFNHUDQGUHVWRULQJRUGHU

    7KLVNLQGRIGHIHQVHLVSRVVLEOHLQFRPSXWHUQHWZRUNV,WVWDUWVZLWKHIIHFWLYHVHQVRUVILUHZDOOVZHOODXGLWHGVHUYHUVDQG

    URXWHUVLQWUXVLRQGHWHFWLRQSURGXFWVQHWZRUNEXUJODUDODUPV%XWLWDOVRLQFOXGHVSHRSOHWUDLQHGVHFXULW\H[SHUWVWKDWFDQ

    TXLFNO\VHSDUDWHWKHIDOVHDODUPVIURPWKHUHDODWWDFNVDQGZKRNQRZKRZWRUHVSRQG,WLQFOXGHVDQ060VHUYLFH7KLVLV

    VHFXULW\WKURXJKSURFHVV7KLVLVVHFXULW\WKDWUHFRJQL]HVWKDWKXPDQLQWHOOLJHQFHLVYLWDOIRUDVWURQJGHIHQVHDQGWKDW

    DXWRPDWLFVRIWZDUHSURJUDPVMXVWGRQWFXWLW

  • 8/8/2019 Schneier Monitoring Presentation

    13/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    (IIHFWLYH0RQLWRULQJ3URYLGHV5HVLOLHQW6HFXULW\

    5HDOWLPHGHWHFWLRQ

    FDQFDWFKDWWDFNHUVUHJDUGOHVVRIWKHYXOQHUDELOLW\

    5DSLGUHVSRQVHFDQUHSHODWWDFNHUV

    9LJLODQWDGDSWLYHDQGUHOHQWOHVVQHWZRUNPRQLWRULQJKHOSVPDNHLQGLYLGXDOYXOQHUDELOLWLHVOHVVLPSRUWDQW

    0RQLWRULQJDQG5HVLOLHQW6HFXULW\

    'XULQJWKHFRXUVHRIWKH\HDUVHYHUDOJURXSVRI(DVWHUQ(XURSHDQKDFNHUVEURNHLQWRDWOHDVWFRPSDQLHV:HEVLWHV

    VWROHFUHGLWFDUGQXPEHUVDQGLQVRPHFDVHVWULHGWRH[WRUWPRQH\IURPWKHLUYLFWLPV7KHQHWZRUNYXOQHUDELOLWLHVH[SORLWHGE\

    WKHVHFULPLQDOVZHUHNQRZQDQGSDWFKHVWKDWFORVHGWKHPZHUHDYDLODEOHEXWQRQHRIWKHFRPSDQLHVKDGLQVWDOOHGWKHP,Q

    -DQXDU\WKH5DPHQZRUPWDUJHWHGNQRZQYXOQHUDELOLWLHVLQVHYHUDOYHUVLRQVRI5HG+DW/LQX[1RQHRIWKHWKRXVDQGVRI

    LQIHFWHGV\VWHPVKDGWKHLUSDWFKHVXSWRGDWH,Q2FWREHU0LFURVRIWZDVPROHVWHGE\XQNQRZQKDFNHUVZKRZDQGHUHG

    XQFKDOOHQJHGWKURXJKWKHLUQHWZRUNDFFHVVLQJLQWHOOHFWXDOSURSHUW\IRUZHHNVRUPRQWKV$FFRUGLQJWRUHSRUWVWKHDWWDFNHUV

    ZRXOGQRWKDYHEHHQDEOHWREUHDNLQLI0LFURVRIWVSDWFKHVKDGEHHQXSWRGDWH7KHVHULHVRIKLJKSURILOHFUHGLWFDUGWKHIWVLQ

    -DQXDU\LQFOXGLQJWKH&'8QLYHUVHLQFLGHQWZHUHDOVRWKHUHVXOWRIXQLQVWDOOHGSDWFKHV$SDWFKLVVXHGHLJKWHHQPRQWKV

    SUHYLRXVO\ZRXOGKDYHSURWHFWHGWKHVHFRPSDQLHV

    :KDWVJRLQJRQKHUH",VQWDQ\RQHLQVWDOOLQJVHFXULW\SDWFKHVDQ\PRUH"'RHVQWDQ\RQHFDUH"

    :KDWVJRLQJRQLVWKDWWKHUHDUHMXVWWRRGDPQPDQ\SDWFKHV,WVVLPSO\LPSRVVLEOHWRNHHSXS,JHWZHHNO\VXPPDULHVRIQHZ

    YXOQHUDELOLWLHVDQGSDWFKHV2QHDOHUWVHUYLFHOLVWHGQHZSDWFKHVLQDYDULHW\RISURGXFWVLQWKHILUVWZHHNRI0DUFK

    7KDWZDVDQDYHUDJHZHHN6RPHRIWKHOLVWLQJVDIIHFWHGP\QHWZRUNDQGPDQ\RIWKHPGLGQRW0LFURVRIW2XWORRNDORQHKDG

    RYHUDGR]HQVHFXULW\SDWFKHVLQWKH\HDU,GRQWNQRZKRZWKHDYHUDJHXVHUFDQSRVVLEO\LQVWDOOWKHPDOOKHGQHYHUJHW

    DQ\WKLQJHOVHGRQH

    6HFXULW\EDVHGRQSDWFKHVLVLQKHUHQWO\IUDJLOH$Q\ODUJHQHWZRUNLVJRLQJWRKDYHKXQGUHGVRIYXOQHUDELOLWLHV,IWKHUHVD

    YXOQHUDELOLW\LQ\RXUV\VWHP\RXFDQEHDWWDFNHGVXFFHVVIXOO\DQGWKHUHVQRWKLQJ\RXFDQGRDERXWLW(YHQLI\RXPDQDJHWR

    LQVWDOOHYHU\SDWFK\RXNQRZDERXWZKDWDERXWWKHYXOQHUDELOLWLHVWKDWKDYHQWEHHQSDWFKHG\HW"7KDWVDPHDOHUWVHUYLFHOLVWHG

    QHZYXOQHUDELOLWLHVIRUZKLFKWKHUHDUHQRSDWFKHV2UWKHYXOQHUDELOLWLHVGLVFRYHUHGEXWQRWUHSRUWHG\HW"2UWKHRQHVVWLOOXQGLVFRYHUHG"

    *RRGVHFXULW\LVUHVLOLHQW,WVUHVLOLHQWWRXVHUHUURUV,WVUHVLOLHQWWRQHWZRUNFKDQJHV$QGLWVUHVLOLHQWWRDGPLQLVWUDWRUVQRW

    LQVWDOOLQJHYHU\SDWFK0DQDJHG6HFXULW\0RQLWRULQJLVDQLPSRUWDQWSDUWRIWKDWUHVLOLHQFH0RQLWRULQJPDNHVDQHWZRUNOHVV

    GHSHQGHQWRQNHHSLQJSDWFKHVXSWRGDWHLWVDSURFHVVWKDWSURYLGHVVHFXULW\HYHQLQWKHIDFHRIHYHUSUHVHQWYXOQHUDELOLWLHV

    XQLQVWDOOHGSDWFKHVDQGLPSHUIHFWSURGXFWV

    ,QDSHUIHFWZRUOGV\VWHPVZRXOGUDUHO\QHHGVHFXULW\SDWFKHV7KHIHZSDWFKHVWKH\GLGQHHGZRXOGDXWRPDWLFDOO\GRZQORDG

    EHHDV\WRLQVWDOODQGDOZD\VZRUN%XWZHGRQWOLYHLQDSHUIHFWZRUOG1HWZRUNDGPLQLVWUDWRUVDUHEXV\SHRSOHDQGQHWZRUNV

    DUHFRQVWDQWO\FKDQJLQJ9LJLODQWPRQLWRULQJLVE\QRPHDQVDSDQDFHDEXWLWLVDPXFKPRUHUHDOLVWLFZD\RISURYLGLQJ

    UHVLOLHQWVHFXULW\

  • 8/8/2019 Schneier Monitoring Presentation

    14/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    (IIHFWLYH0RQLWRULQJ%HFRPHV6HFXULW\V)HHGEDFN/RRS

    0RQLWRUILUVW

    +RZHOVHGR\RXNQRZZKDWNLQGRIVHFXULW\\RXKDYH"

    +RZ\RXGHWHUPLQHLIDVHFXULW\FRXQWHUPHDVXUHLVHIIHFWLYH

    +RZ\RXPHDVXUHWKHVXFFHVVRI\RXUVHFXULW\

    :LWKRXWPRQLWRULQJ\RXUHMXVWJXHVVLQJ

    0RQLWRU)LUVW

  • 8/8/2019 Schneier Monitoring Presentation

    15/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    1HWZRUN0RQLWRULQJ:LOO%H2XWVRXUFHG

    6L[SHRSOHUHTXLUHGIRURQH[VHDW

    (FRQRPLHVRIVFDOH

    $JJUHJDWLRQRIH[SHUWLVH

    6XSSRUWSURFHVVHV

    /DUJHQHWZRUNYLVLELOLW\

    2XWVRXUFHG0DQDJHG6HFXULW\0RQLWRULQJ

    7KHNH\WRDVXFFHVVIXOGHWHFWLRQDQGUHVSRQVHV\VWHPLVYLJLODQFHDWWDFNVFDQKDSSHQDWDQ\WLPHRIWKHGD\DQGDQ\GD\RIWKH

    \HDU:KLOHLWLVSRVVLEOHIRUFRPSDQLHVWREXLOGGHWHFWLRQDQGUHVSRQVHVHUYLFHVIRUWKHLURZQQHWZRUNVLWVUDUHO\FRVW

    HIIHFWLYH6WDIILQJIRUVHFXULW\H[SHUWLVHKRXUVDGD\DQGGD\VD\HDUUHTXLUHVVL[IXOOWLPHHPSOR\HHVPRUHLI\RX

    LQFOXGHVXSHUYLVRUVDQGEDFNXSSHUVRQQHOZLWKPRUHVSHFLDOL]HGVNLOOV(YHQLIDQRUJDQL]DWLRQFRXOGILQGWKHEXGJHWIRUDOORI

    WKHVHSHRSOHLWZRXOGEHYHU\GLIILFXOWWRKLUHWKHPLQWRGD\VMREPDUNHW

    5HWDLQLQJWKHPZRXOGEHHYHQKDUGHU6HFXULW\PRQLWRULQJLVLQKHUHQWO\EXUVW\VL[ZHHNVRIERUHGRPIROORZHGE\HLJKWKRXUV

    RISDQLFWKHQVHYHQZHHNVRIERUHGRPIROORZHGE\VL[KRXUVRISDQLF$WWDFNVDJDLQVWDVLQJOHRUJDQL]DWLRQGRQWKDSSHQRIWHQHQRXJKWRNHHSDWHDPRIWKLVFDOLEHUHQJDJHGDQGLQWHUHVWHG

    ,QWKHUHDOZRUOGWKLVNLQGRIH[SHUWLVHLVDOZD\VRXWVRXUFHG,WVWKHRQO\FRVWHIIHFWLYHZD\WRVDWLVI\WKHUHTXLUHPHQWV,PD\

    RQO\QHHGDGRFWRUWZLFHLQWKHFRPLQJ\HDUEXWZKHQ,QHHGRQH,PD\QHHGKLPLPPHGLDWHO\,PD\QHHGVSHFLDOLVWV2XWRID

    KXQGUHGSRVVLEOHVSHFLDOWLHV,PD\QHHGWZRRIWKHPDQG,KDYHQRLGHDEHIRUHKDQGZKLFKRQHV,ZRXOGQHYHUFRQVLGHUKLULQJ

    DWHDPRIGRFWRUVWRZDLWDURXQGXQWLO,KDSSHQWRJHWVLFN,RXWVRXUFHP\PHGLFDOQHHGVWRP\FOLQLFP\HPHUJHQF\URRPP\

    KRVSLWDO6LPLODUO\DQHWZRUNQHHGVWRRXWVRXUFHLWVVHFXULW\PRQLWRULQJWRDQ060VHUYLFH

    $VLGHIURPWKHDJJUHJDWLRQRIH[SHUWLVHDQ060VHUYLFHKDVRWKHUHFRQRPLHVRIVFDOH,WFDQPRUHHDVLO\KLUHDQGWUDLQLWV

    SHUVRQQHOVLPSO\EHFDXVHLWQHHGVPRUHRIWKHP$QGLWFDQEXLOGDQLQIUDVWUXFWXUHWRVXSSRUWWKHP9LJLODQWPRQLWRULQJPHDQV

    NHHSLQJXSWRGDWHRQQHZYXOQHUDELOLWLHVQHZKDFNHUWRROVQHZVHFXULW\SURGXFWVDQGQHZVRIWZDUHUHOHDVHV$Q060

    VHUYLFHFDQVSUHDGWKHVHFRVWVDPRQJDOORILWVFXVWRPHUV

    $Q060SURYLGHUDOVRKDVDPXFKEURDGHUYLHZRIWKH,QWHUQHW,WFDQOHDUQIURPDWWDFNVDJDLQVWRQHFXVWRPHUDQGXVHWKDW

    NQRZOHGJHWRSURWHFWDOORILWVFXVWRPHUV$QGIURPLWVSRLQWRIYLHZDWWDFNVDUHIUHTXHQW7KHUHVDUHDVRQ\RXGRQWKDYH\RXURZQILUHGHSDUWPHQWHYHQLI\RXFDQDIIRUGRQH:KHQWKHILUHGHSDUWPHQWFRPHVWR\RXUKRXVH\RXZDQWLWWRKDYH

    SUDFWLFHGRQWKHUHVWRIWKHQHLJKERUKRRG7RDQ060FRPSDQ\QHWZRUNDWWDFNVDUHHYHU\GD\RFFXUUHQFHVLWVH[SHUWVNQRZ

    H[DFWO\KRZWRUHVSRQGWRDQ\JLYHQDWWDFNEHFDXVHLQDOOOLNHOLKRRGWKH\KDYHDOUHDG\VHHQWKHVDPHDWWDFNPDQ\WLPHVEHIRUH

    ,QWKHUHDOZRUOGVHFXULW\LVDOZD\VRXWVRXUFHG(YHU\EXLOGLQJKLUHVDQRWKHUFRPSDQ\WRSXWJXDUGVLQLWVOREE\(YHU\EDQN

    KLUHVDQRWKHUFRPSDQ\WRGULYHLWVPRQH\DURXQGWRZQ6HFXULW\LVLPSRUWDQWFRPSOH[DQGGLVWDVWHIXOLWLVVPDUWHUWR

    RXWVRXUFHWKDQWRGRLW\RXUVHOI

  • 8/8/2019 Schneier Monitoring Presentation

    16/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    0DQDJHG6HFXULW\0RQLWRULQJ

    ,'6

    6HUYHU

    5RXWHU

    )LUHZDOO

    6HQWU\ 3HULPHWHU

    'HYLFH

    ,QWHUQHW

    6HFXUH7XQQHO&RQQHFWLRQ

    &KDQWLOO\9$

    0RXQWDLQ9LHZ&$

    1HWZRUNHG

    6HFXUH2SHUDWLRQV&HQWHUV62&

    +RZ'RHV&RXQWHUSDQH:RUN"

    $W&RXQWHUSDQHZHEHOLHYHWKDWZKLOHDOOVHFXULW\SURGXFWVSURYLGHVRPHOHYHORISURWHFWLRQQRVHWRISURGXFWVLVLQIDOOLEOH

    5HDOVHFXULW\LVDFKLHYHGRQO\ZKHQDOOQHWZRUNSURGXFWVVHFXULW\DQGRWKHUZLVHZRUNWRJHWKHU5HDOVHFXULW\LVDFRPELQDWLRQ

    RISURWHFWLRQGHWHFWLRQDQGUHVSRQVH:HDXJPHQW\RXUQHWZRUNVSURWHFWLYHFRXQWHUPHDVXUHVWKURXJK0DQDJHG6HFXULW\

    0RQLWRULQJ060

    &RXQWHUSDQHVH[FHOOHQFHLVDFRPELQDWLRQRIRXUSHRSOHDQGRXUWHFKQRORJ\2XUVHFXULW\DQDO\VWVDUHVLQJXODUO\TXDOLILHGWR

    HYDOXDWHVHFXULW\HYHQWVDQGUHVSRQGWRDWWDFNV$QGRXUWHFKQRORJ\SURYLGHVXQPDWFKHGGDWDDQDO\VLVDQGFRUUHODWLRQ

    :RUNLQJWRJHWKHUWKHFRPELQDWLRQFDQWEHEHDW6HFXULW\$QDO\VWV7UDLQHGVHFXULW\DQDO\VWVDUHDWWKHFRUHRI&RXQWHUSDQHVVHUYLFH2XUDQDO\VWVKDYHDEUHDGWKRINQRZOHGJH

    DQGVNLOOFXOWLYDWHGE\H[WHQVLYHWUDLQLQJLQQHWZRUNVHFXULW\DQGLQFLGHQWKDQGOLQJDQGLQYDOXDEOHH[SHULHQFHRQWKHMRE7KH\

    UHVSRQGWRDQGOHDUQIURPVHFXULW\DWWDFNVHYHU\GD\$UPHGZLWKWKLVNQRZOHGJHDQGSHUVSHFWLYHDQGRXUVRSKLVWLFDWHG

    DQDO\VLVDQGUHVSRQVHVRIWZDUHRXUDQDO\VWVDUHDEOHWRSURYLGHLQVWDQWUHVSRQVHH[SHUWDGYLFHDQGFRDFKLQJWRKHOS\RXUHSHO

    WKHDWWDFNHUDQGVDIHJXDUG\RXUQHWZRUN

    6HQWU\7KH6HQWU\LVDFXVWRPPRQLWRULQJGHYLFHGHVLJQHGDQGEXLOWE\&RXQWHUSDQHDQGLQVWDOOHGRQ\RXUQHWZRUN,WLV

    FDSDEOHRISURFHVVLQJPLOOLRQVRIPHVVDJHVSHUGD\LQSXWIURPDOOWKHGHYLFHVRQ\RXUQHWZRUNLQFOXGLQJWKRVHWKDWVHH

    LQWHUQDOWKUHDWV7KH6HQWU\ILOWHUVWKHGDWDLWFROOHFWVXVLQJDQDGDSWLYHDQGSURSULHWDU\VHWRIUXOHVFRUUHODWHVWKDWGDWDZLWK

    GDWDIURPRWKHUGHYLFHVDQGSUHYLRXVGDWDDQGVHQGVWKHUHVXOWVYLDDQHQFU\SWHGWXQQHOWRRQHRIRXU6HFXUH2SHUDWLRQV

    &HQWHUV

    6RFUDWHV6RFUDWHVLVRXUSURSULHWDU\VRIWZDUHV\VWHPWKDWUHFHLYHVPHVVDJHVIURP6HQWULHVRQ\RXUQHWZRUNDERXWVXVSHFWHG

    LQWUXVLRQV7KHVHPHVVDJHVDUHWXUQHGLQWRWLFNHWVZLWKLQ6RFUDWHVDQGDUHFRUUHODWHGZLWKLQIRUPDWLRQRQWKHUHDOZRUOGWKUHDWHQYLURQPHQWLQIRUPDWLRQDERXWVLPLODUWKUHDWVDWRWKHU&RXQWHUSDQHFXVWRPHUVLQIRUPDWLRQDERXW\RXUQHWZRUNVQRUPDO

    RSHUDWLRQDQGUHVSRQVHDQGHVFDODWLRQLQIRUPDWLRQ6RFUDWHVFDWHJRUL]HVDQGSULRULWL]HVWKHWLFNHWVZHHGVRXWIDOVHSRVLWLYHV

    VWRUHVWKHGDWDIRUIXWXUHDXGLWDQGSUHVHQWVLQIRUPDWLRQDERXWFULWLFDOWLFNHWVWRRXUDQDO\VWVDOORZLQJWKHPWRUHVSRQG

    LQVWDQWO\

    6HFXUH2SHUDWLRQV&HQWHU62&2XU62&VDUHWKHSK\VLFDOORFDWLRQVZKHUH&RXQWHUSDQHVDQDO\VWVZRUNFRQWLQXDOO\

    PRQLWRULQJ\RXUQHWZRUNV7KH\DUHZKHUHWKH6RFUDWHVV\VWHPLVKRXVHGDQGZKHUHGDWDIURPWKH6HQWULHVLVUHFHLYHG7KH

    62&VDUHSK\VLFDOO\KDUGHQHGIDFLOLWLHVSURWHFWHGE\DFFHVVWRNHQVELRPHWULFDFFHVVGHYLFHVDQGFRQVWDQWDXGLRDQGYLGHR

    VXUYHLOODQFH7RSURWHFWWKHLQWHJULW\RI\RXUQHWZRUNWKH62&VDUHUHGXQGDQWHDFKFRQVWDQWO\PRQLWRUVWKHRWKHUDQGHDFKFDQ

    VHYHUWKHRWKHUVFRQQHFWLYLW\DQGDVVXPHWKHRWKHUVZRUNORDGLQWKHHYHQWRIDSK\VLFDODWWDFNRUV\VWHPIDLOXUH

  • 8/8/2019 Schneier Monitoring Presentation

    17/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    )LQGLQJ6HFXULW\(YHQWV$PLGWKH1RLVH

    '$7$)520$6,1*/(/$5*(&86720(5+2856

    0,//,210(66$*(6&2//(&7('

    $/(576)25:$5'('7228562&

    7,&.(76)25285$1$/

  • 8/8/2019 Schneier Monitoring Presentation

    18/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    ,QVLGHU$WWDFN$WWDFNDQG5HFRYHU\&KURQRORJ\

    62&QRWLILHVFXVWRPHU

    $QDO\VWEULHIVFRQWDFWVRQQDWXUHRIHYHQWDQGSURYLGHVWUDFNLQJGHWDLOVLQFOXGLQJVRXUFHDQGGHVWLQDWLRQ,3DGGUHVVHV

    62&GHWHFWVWKUHHIDLOHG)73ORJLQVRQDLUOLQHQHWZRUN

    6LQFHIDLOHG)73ORJLQVDUHW\SLFDOO\QRUPDODQDO\VWPDUNVWLFNHWVDVLQWHUHVWLQJ

    6KDUSYROXPHLQFUHDVHLQUHODWHGWLFNHWV

    $QDO\VWRQGXW\XSJUDGHVLQFLGHQWVHYHULW\WRVXVSLFLRXVFRQGXFWVIXUWKHU

    DQDO\VLV

    7LFNHWDQDO\VLVH[SRVHVPDOLFLRXVHPSOR\HHDFWLYLW\

    62&FODVVLILHVLQFLGHQWDVDQ)73%UXWH)RUFH$WWDFNWRDFFHVVDLUOLQHV+5GDWDVHUYHU

    $LUOLQHLGHQWLILHVURJXHHPSOR\HH

    &XVWRPHUFDWFKHVHPSOR\HHUHGKDQGHGDQGWHUPLQDWHVKLVHPSOR\PHQW

    -XO\

    'D\RI$WWDFN

    )ULGD\SP SP SP6KRUWO\

    DIWHUZDUGV

    7LPHVUHSRUWHGLQ('7

    &RXQWHUSDQH&DVH6WXG\7KH5HJHQFH*URXS

    7KH5HJHQFH*URXSDPDMRUKHDOWKFDUHLQVXUHULQWKH3DFLILF1RUWKZHVWLVDQDIILOLDWLRQRI%OXH&URVV%OXH6KLHOGLQVXUDQFH

    FRPSDQLHVLQ:DVKLQJWRQ2UHJRQ8WDKDQG,GDKR$\HDUDQGDKDOIDJRWKHFRPSDQ\GHFLGHGWRPHUJHLWVLQGLYLGXDO,7

    VHFXULW\RUJDQL]DWLRQVLQWRDVLQJOHGHSDUWPHQWDQGWRFRQVROLGDWHFRUSRUDWHLQIRUPDWLRQVHFXULW\XQGHURQHSHUVRQ'DYLG

    0DF/HRG3K'&,663EHFDPH7KH5HJHQFH*URXSV&KLHI,QIRUPDWLRQ6HFXULW\2IILFHU

    7KHILUVWWKLQJ,GLGLVORRNDWZKDWZHQHHGHGWRGRLQRUGHUWRKDYHDQHIIHFWLYHLQIRUPDWLRQVHFXULW\SURJUDP,GLYLGHGP\

    WDVNVLQWRWZRFDWHJRULHVZKDWZHVKRXOGGRLQWHUQDOO\DQGZKDWZHVKRXOGRXWVRXUFH

    0DQDJHG6HFXULW\0RQLWRULQJURVHWRWKHWRSDVVRPHWKLQJZHQHHGHGWRRXWVRXUFH,GLGQWKDYHWKHVWDIIWRPDQDPRQLWRULQJVWDWLRQ[,GLGQWKDYHVWDIIZKRNQHZHQRXJKDERXWWKHGLYHUVHSODWIRUPVWKURXJKRXW5HJHQFH*URXS,GLGQWKDYHSHRSOH

    ZKRFRXOGFRUUHODWHDQGLGHQWLI\UHDOWKUHDWVDQGZHHGRXWDQRPDOLHVDQGVFDQV

    5HJHQFH&KRRVHV&RXQWHUSDQH

    7KH5HJHQFH*URXSZDVDWWUDFWHGWR&RXQWHUSDQHEHFDXVHWKH\ZHUHWKHRQO\FRPSDQ\ZKRRIIHUHGWKHNLQGRIFRPSUHKHQVLYH

    PRQLWRULQJWKDWWKHGLYHUVHQHWZRUNRI7KH5HJHQFH*URXSUHTXLUHG/RWVRIFRPSDQLHVRIIHUHGWRPRQLWRURXUILUHZDOOVDQG

    ,'6VVDLG0DF/HRGEXWRQO\&RXQWHUSDQHZRXOGPRQLWRURXUHQWLUHQHWZRUN

    0DF/HRGZDVDOVRLPSUHVVHGZLWK&RXQWHUSDQHVHQGRUVHPHQWIURP/OR\GVRI/RQGRQDQGWKHZD\WKHLQVXUHUYLHZHG

    &RXQWHUSDQHVVHUYLFHRIIHULQJ,WZDVFOHDUWKDWWKHSUHGRPLQDQWSURYLGHULQWKLVVSDFHZDV&RXQWHUSDQH

    ,QVWDOODWLRQZDVDEUHH]HUHFDOOV0DF/HRG:HZHUHXSDQGUXQQLQJZLWKLQGD\V$QGLQVWDOODWLRQFRQWLQXHVWREHHDV\

    :KHQHYHUZHKDYHPRUHGHYLFHVWKDWQHHGPRQLWRULQJZHMXVWSRLQWWKHLUDXGLWORJVDWWKH6HQWU\:HFDOO&RXQWHUSDQHDQG

    WHOOWKHPDERXWWKHQHZGHYLFHVDQGZHUHPRQLWRUHG$QGLIZHIRUJHWWRFDOO&RXQWHUSDQHFDOOVXVDVVRRQDVWKH\VHHWKH

    DQRPDORXVORJGDWD

    ,QIDFWVDLG0DF/HRGRQHZHHNHQGDFRUSRUDWH:HEVHUYHUZHQWGRZQ&RXQWHUSDQHQRWLFHGWKHSUREOHPDQGFDOOHGXV

    EHIRUHZHHYHQNQHZDERXWLW

    &RXQWHUSDQH3URYLGHV(QRUPRXV9DOXH

    7R5HJHQFH&RXQWHUSDQHVYDOXHFDQEHFOHDUO\GHPRQVWUDWHGE\WKHQXPEHURIVHFXULW\LQFLGHQWVWKH\KDGWRGHDOZLWK

    0DF/HRGFRPSLOHGVWDWLVWLFVWRSUHVHQWWRKLV%RDUGRI'LUHFWRUV,QWKHIRXUWKTXDUWHURI5HJHQFHV,'6VORJJHGDWRWDO

    RILQFLGHQWV2IWKRVHZHUHKLJKOHYHODOHUWVVHULRXVDWWHPSWVWRFRPSURPLVHWKH5HJHQFH*URXSQHWZRUN

    $QRWKHUZHUHPHGLXPOHYHODOHUWVDQGWKHRWKHUZHUHORZOHYHODOHUWV&RXQWHUSDQHVPRQLWRULQJDQGILOWHULQJ

    RIHYHQWVUHGXFHGWKDWQXPEHUWRMXVWRYHULQFLGHQWVWRZKLFK5HJHQFHKDGWRUHVSRQG

    &RQWLQXHGRQQH[WSDJH

  • 8/8/2019 Schneier Monitoring Presentation

    19/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    1LPGD:RUP$WWDFNDQG5HFRYHU\&KURQRORJ\

    7LPHVUHSRUWHGLQ('7

    'D\RI$WWDFN

    3RVW$WWDFN5HFRYHU\

    62&GHWHFWV)LUVWDWWDFN

    6LPLODUWR&RGH5HG

    6KDUSYROXPH

    LQFUHDVHLQFXVWRPHUWLFNHWV

    2IIGXW\DQDO\VWVFDOOHGLQWRKDQGOHDGGLWLRQDOZRUNORDG

    $QDO\VLVUHYHDOVQHZWKUHDW

    62&HVFDODWHVLVVXHWR(QJLQHHULQJUHVSRQVHWHDPH[DPLQHVFXVWRPHUGDWDLQWHOOLJHQFHVRXUFHV

    DP DP SP SP SP

    )LUVWHPDLODOHUWVHQWWRFXVWRPHUV

    ,QFOXGHVQHWZRUNSURWHFWLRQLQIRUPDWLRQVRIWZDUHSDWFKHVDQWLYLUXVXSGDWHOLQNV

    )LUVW&(57

    DGYLVRU\LVVXHGE\VHFXULW\JURXSV

    )LQDO1LPGDDOHUWSRVWHGRQ:HEVLWH

    KLWVLQILUVWIHZZHHNV

    &'VSUHSDUHGDQGGHOLYHUHG

    $LGFXVWRPHUVZLWKFRQQHFWLYLW\DQGHPDLOSUREOHPV

    &XVWRPHUFRQIHUHQFHFDOOVKHOG

    &RXQWHUSDQHSURYLGHV1LPGDRYHUYLHZDQGUHFRYHU\UHFRPPHQGDWLRQVILHOGVTXHVWLRQVIURPFXVWRPHUV

    5HJHQFH&DVH6WXG\FRQW

    0DF/HRGH[SODLQHG,GRQWKDYHWKHVWDIIWRKDQGOHDOHUWV,GRQWHYHQKDYHWKHVWDIIWRKDQGOHDOHUWV:KDW

    &RXQWHUSDQHGRHVLVERLODOOWKDWQRLVHGRZQWRUHDOLQFLGHQWVWKDWP\WHDPQHHGVWRUHVSRQGWR%HFDXVH&RXQWHUSDQH

    JLYHVXVRQO\WKHLQIRUPDWLRQZHQHHGZKHQZHQHHGLWZHFDQFRQFHQWUDWHRQWKHDWWDFNVWKDWPDWWHU7KHYDOXHRIWKDWNLQGRI

    VHUYLFHLVHQRUPRXV

    &RXQWHUSDQHVIDVWUHVSRQVHDOVRUHGXFHGWKHHIIHFWVRIWKRVHDWWDFNV7KH)%,UHFHQWO\UHSRUWHGWKDWURXJKO\RIDOO

    ,QWHUQHWDWWDFNVZHUHVXFFHVVIXOVDLG0DF/HRG6RLI\RXORRNDWRXULQFLGHQWVZHVKRXOGKDYHVHHQ

    VXFFHVVIXODWWDFNVLQWKHIRXUWKTXDUWHU(YHQLI\RXXVHWKHQXPEHURIKLJKOHYHODOHUWVWKDWVKRXOGVWLOOWUDQVODWHWRVXFFHVVIXODWWDFNV%HFDXVH&RXQWHUSDQHZDVPRQLWRULQJDQGEHFDXVHWKH\ZHUHDEOHWRQRWLI\XVVRWKDWZHFRXOG

    UHVSRQGWRDWWDFNVDVWKH\ZHUHKDSSHQLQJZHKDGRQO\RQHVHULRXVEUHDFKGXULQJWKDWWLPHSHULRG$QGWKDWZDV1LPGD

    (YHQ1LPGDZKLFKGHYDVWDWHGVRPDQ\RWKHUFRPSDQLHVZDVVZLIWO\FRQWDLQHGZLWKLQ5HJHQFHVQHWZRUNEHFDXVHRI

    &RXQWHUSDQH:HJRWRIIHDV\H[SODLQV0DF/HRG(YHQEHIRUHWKH1LPGDVWRUPFURVVHGRXUQHWZRUN&RXQWHUSDQHZDVRQ

    WKHSKRQHZLWKXVH[SODLQLQJZKDWZDVKDSSHQLQJ:HVWDUWHGVKXWWLQJGRRUVDQGXSGDWLQJRXUV\VWHPVLPPHGLDWHO\DQGDVD

    UHVXOW1LPGDFRPSURPLVHGRQO\RIGHVNWRSVDQGRIVHUYHUV,FUHGLW&RXQWHUSDQH

    &RXQWHUSDQHV*OREDO9LHZ

    5HJHQFHHQWHUHGLQWRDWZR\HDUPRQLWRULQJFRQWUDFWZLWK&RXQWHUSDQHZLWKWKHH[SHFWDWLRQWKDWWKH\ZRXOGXVHWKRVHWZR

    \HDUVWRGHYHORSWKHLURZQLQWHUQDOPRQLWRULQJFDSDELOLWLHV7KHQWKH\ZRXOGEULQJWKHIXQFWLRQEDFNLQKRXVH%XWWKHILUVW

    \HDUSURYHGWKDW5HJHQFHFRXOGQRWUHSOLFDWH&RXQWHUSDQHVVHUYLFHDQGWKDWFRQWLQXHGRXWVRXUFLQJRI0DQDJHG6HFXULW\

    0RQLWRULQJWR&RXQWHUSDQHUHPDLQVWKHILQDQFLDOO\SUXGHQWDSSURDFK

    0DF/HRGVDLG:KHQ,ORRNEDFNDW&RGH5HG&RGH5HG,,DQG1LPGDZKDWVWDQGVRXWLQP\PLQGLV&RXQWHUSDQHVDELOLW\WRUHVSRQGEHIRUHZHZHUHDWWDFNHG7KH\UHJXODUO\FDOOXVDQGWHOOXVKRZZHVKRXOGUHVSRQGEDVHGRQWKHLUH[SHULHQFHZLWK

    FXVWRPHUVLQHDUOLHUWLPH]RQHV

    :HFRXOGQRWSRVVLEO\UHSOLFDWH&RXQWHUSDQHVVHUYLFHRXUVHOYHVFRQWLQXHG0DF/HRG:HFRXOGQWVWDIILW$QGHYHQLIZH

    FRXOGZHZRXOGQRWJHWWKHEHQHILWVRI&RXQWHUSDQHVJOREDOYLHZ7KH\ZDWFKVHFXULW\LQFLGHQWVWKURXJKRXWWKHJOREHDQGZH

    EHQHILWIURPWKDW

    7RGD\ZHFDQWGRRXUMREVHIIHFWLYHO\ZLWKRXW&RXQWHUSDQHVDLG0DF/HRG

    0RUHFDVHVWXGLHVFDQEHIRXQGDW

    KWWSZZZFRXQWHUSDQHFRPH[SHULHQFHVKWPO

  • 8/8/2019 Schneier Monitoring Presentation

    20/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    9LUXV,QIHFWLRQ$WWDFNDQG5HVSRQVH&KURQRORJ\

    7LPHVUHSRUWHGLQ('7

    $WWDFN

    5HVSRQVH

    62&GHWHFWVVXVSLFLRXVPDLODWWDFKPHQW

    $QDO\VWUHYLHZVWLFNHWLQIRUPDWLRQDQGILQGVWKHDFWLYLW\WREHLQERXQGDQGGHVWLQHGIRUWKHPDLOVHUYHU

    DGGLWLRQDODOHUWVUHFHLYHGDQGDSSHQGHGWRRSHQWLFNHW

    6XVSLFLRXVDWWDFKPHQWIRXQGWRH[LWFXVWRPHUQHWZRUNDQGUHHQWHULQDPDWWHURIVHFRQGV

    DP DP DP DP

    &RQWHQWRIDOHUWH[DPLQHGE\$QDO\VWV

    $WWDFKPHQWLGHQWLILHGDVIXQQ\YEV/RYH%XJYLUXVILUVWGHWHFWHG0D\

    2XWRI%DQG&RUUHODWLRQSHUIRUPHG

    2SHQVRXUFHVTXHULHGIRULQIRUPDWLRQRQQHZYLUXVHVQRQHOLQNHGWRIXQQ\YEV

    &XVWRPHUFDOOVLQWR62&WRGLVFXVVDOHUWV

    &XVWRPHUVWDWHV7KLVRQHPXVWKDYHJRWWHQSDVWRXUYLUXVGHWHFWLRQVRIWZDUH

    1HZYLUXVIRXQGPDOGDO

    'LVFRXQWHGDVFXUUHQWWKUHDWEHFDXVHLWXVHVH[HDQGQRWYEVDWWDFKPHQWV

    DP DP

    &XVWRPHUFRQWDFWLQVWUXFWLRQVGRQRWPDQGDWHSKRQHFDOOIRUWKLVHYHQW

    DP

    &RXQWHUSDQH&DVH6WXG\:RPEOH&DUO\OH

    :RPEOH&DUO\OH6DQGULGJHDQG5LFH3//&LVDDWWRUQH\ODZILUPZLWKQLQHRIILFHVLQWKH86$FFRUGLQJWR&,26HDQ

    6FRWWVHFXULW\LVQRWRQO\LPSRUWDQWIRUWKHILUPVODZ\HUVDQGFOLHQWVEXWLVHVVHQWLDOIRUWKHIXWXUHVXFFHVVRIWKHILUP

    $VDODZILUPWKDWVHUYHVKLJKWHFKFOLHQWVDQGSURPLQHQWEXVLQHVVHVNHHSLQJXSWRGDWHZLWKWHFKQRORJ\SDUWLFXODUO\VHFXULW\

    LVQRWDQRSWLRQLWVDQHFHVVLW\:RPEOH&DUO\OHVWULYHVWRKRQRUFOLHQWSULYDF\WKURXJKDVHFXUHQHWZRUN7KLVLVRQHRI

    :RPEOH&DUO\OHVFRPSHWLWLYHDGYDQWDJHV

    0RQLWRULQJDVD6ROXWLRQ

    :RPEOH&DUO\OHUHQHZHGUHVHDUFKLQWRVHFXULW\SURGXFWVODVW\HDU,QDGGLWLRQWRLQWHQVLI\LQJWKHVRSKLVWLFDWLRQRIWKHILUPV

    VHFXULW\:RPEOH&DUO\OHZDQWHGDVHFXULW\DXGLW6HYHUDOVHFXULWLHVILUPVUHFRPPHQGHG:RPEOH&DUO\OHFRQWDFW&RXQWHUSDQH

    DERXWVHFXULW\PRQLWRULQJDVDZD\WRSURYLGHORQJWHUPEXVLQHVVVHFXULW\

    %\WKHWLPHZHFDOOHG&RXQWHUSDQHLQIRUDPHHWLQJZHZHUHZHOOHGXFDWHGDERXWWKHLVVXHVDQGZHUHUHDG\WRGREXVLQHVV

    VD\V6FRWW:HUHDOL]HGWKDWWKHVHJX\VNQHZZKDWWKH\UHWDONLQJDERXWPRUHVRWKDQVRPHRIWKHRWKHUVHFXULW\YHQGRUVZH

    WDONHGZLWK6FRWWDGGHGWKDWKHDSSUHFLDWHG&RXQWHUSDQHVVHFXULW\H[SHUWLVHKRQHVW\DQGFDQGRU

    :RPEOH&KRRVHV&RXQWHUSDQH

    :HPHWZLWK9LJLOLQ[5LS7HFK,666\PDQWHF*XDUGHQWDQGDVHYHUDORWKHUFRPSDQLHV6FRWWVD\V&RXQWHUSDQHPHWRXU

    QHHGVEHVW7KH\RIIHUHGFRPSHWLWLYHSULFLQJDQGZHUHYHQGRUQHXWUDO)RU:RPEOH&DUO\OHDYHQGRUQHXWUDOVROXWLRQZDV

    FULWLFDO

    7DONLQJWRWKHRWKHUYHQGRUVJDYHXVDJRRGUHDOLW\FKHFNDQGVWDUWLQJSRLQW6FRWWDGGHG%XW&RXQWHUSDQHZDVWKHFRPSDQ\

    ZHFKRVHWRGREXVLQHVVZLWK:RPEOH&DUO\OHZDVLPSUHVVHGQRWRQO\ZLWK&RXQWHUSDQHVWHFKQLFDODELOLW\DQGLWVPRQLWRULQJVHUYLFHEXWE\WKHIDFWWKDWWKH\GLGQRWDOVRHQJDJHLQFRQVXOWLQJRUVHOOKDUGZDUH

    %HFDXVH&RXQWHUSDQHRQO\GRHVPRQLWRULQJZHIHOWFRQILGHQWWKDWWKH\KDGRXUEHVWLQWHUHVWVLQPLQG6FRWWVD\V7KH\

    GLGQWWU\WRVHOOXVDQ\KDUGZDUHVRIWZDUHRUFRQVXOWLQJVHUYLFHV2WKHUVZDQWHGWRPDNHPRQH\E\VHOOLQJXVDGGLWLRQDO

    KDUGZDUHDQGVRIWZDUH

    &RXQWHUSDQH7KH)LUVW0RQWK

    ,QVWDOOLQJWKH&RXQWHUSDQHVHUYLFHZDVSDLQOHVV6FRWWUHFDOOV7KHLQVWDOODWLRQZDVGRQHLQILYHKRXUVDWPRVW,ZDVVKRFNHG

    WKDWVRPHWKLQJOLNHWKDWKDSSHQHGVRTXLFNO\ZLWKQRLOODIIHFWRQP\QHWZRUN&RXQWHUSDQHVWDUWHGPRQLWRULQJ:RPEOH

    &DUO\OHLPPHGLDWHO\

    &RQWLQXHGRQQH[WSDJH

  • 8/8/2019 Schneier Monitoring Presentation

    21/32

  • 8/8/2019 Schneier Monitoring Presentation

    22/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    $WWDFN3UREH$WWDFNDQG5HFRYHU\&KURQRORJ\

    62&GHWHFWVDVFDQIURP&KLQD

    6FDQDJDLQVWSRUWWKHDWWDFNHULVORRNLQJIRUYXOQHUDEOH66+GDHPRQV

    6HQWU\SURFHVVHVDOHUWVUHODWHGWRWKLVVFDQ

    &XVWRPHUWHOHSKRQHV62&

    $QDO\VWSURYLGHVFXVWRPHUZLWKUHFHQWLQIRUPDWLRQDERXW66+YXOQHUDELOLWLHV

    &XVWRPHUSURDFWLYHO\VFDQVKLVQHWZRUNIRUDQGSDWFKHVYXOQHUDEOHGDHPRQV

    $WWDFN

    DP DP $IHZKRXUVDIWHUZDUGV

    7LPHVUHSRUWHGLQ('7

    DP DP

    $QDO\VWVHQGVHPDLOWRFXVWRPHU

    $OWKRXJKFXVWRPHUUHTXHVWHGWKDW&RXQWHUSDQHQRWFRQWDFWWKHPDERXWVFDQVWKHDQDO\VWIHOWWKDWWKLVVFDQZDVVHULRXVHQRXJKWRZDUUDQWHVFDODWLRQ

    &DVH6WXG\&RULR

    &RULRLVDOHDGLQJHQWHUSULVHDSSOLFDWLRQVHUYLFHSURYLGHURIIHULQJZRUOGFODVVDSSOLFDWLRQPDQDJHPHQWVHUYLFHVWRODUJHJOREDO

    HQWHUSULVHV&RULRWDNHVHQGWRHQGUHVSRQVLELOLW\IRUFXVWRPHUVPLVVLRQFULWLFDOHQWHUSULVHDSSOLFDWLRQVDQGGHOLYHUVVXSHULRU

    VSHHGUHOLDELOLW\YLVLELOLW\FRQWURODQGHFRQRPLFV&RULR659&(

    &RULRVSKLORVRSK\LVVLPSOH7KH\DUHIXOO\DFFRXQWDEOHWRWKHLUFXVWRPHUVIRUDQHQGWRHQGVROXWLRQ7KHFXVWRPHUV

    H[SHULHQFHPXVWEHVHDPOHVV7RWKDWHQG&RULRRQO\SDUWQHUVZLWKWKHLQGXVWU\OHDGHUVLQDUHDVVXFKDVFRPSXWHUVQHWZRUNV

    VHFXULW\DQGHQWHUSULVHDSSOLFDWLRQV

    &RULRVWUXVWPRGHOPXVWH[WHQGWRLWVFXVWRPHUVLQHYHU\DVSHFWRILWVEXVLQHVVDQGQRWMXVWLQVHFXULW\'LVFRYHULQJSUREOHPVLVDEDVHUHTXLUHPHQWEXWSURDFWLYHPRQLWRULQJHQDEOHV&RULRWRGHOLYHUVXSHULRUVHUYLFH7KLVKROLVWLFDSSURDFKWRVHFXULW\

    SHUPHDWHVHYHU\DVSHFWRI&RULRVEXVLQHVV

    7KH6HFXULW\&KDOOHQJH

    &RULRKDVWKHDSSOLFDWLRQH[SHUWLVHWRLQWHJUDWHGHSOR\DQGPDQDJHEHVWLQFODVVHQWHUSULVHDSSOLFDWLRQVWRHQDEOHPLVVLRQ

    FULWLFDOEXVLQHVVSURFHVVHV7KH\QHHGDVHFXULW\VROXWLRQWKDWFDQVFDOHWRVXSSRUWYHU\ODUJHHQWHUSULVHVZLWKWKHIOH[LELOLW\

    OHYHOVRIVXSSRUWDQGJOREDOUHDFKWKDWWKH\UHTXLUH6WD\LQJDEUHDVWRIVHFXULW\FKDQJHVLVERWKDFRPSOH[DQGFKDOOHQJLQJ

    WDVNHVSHFLDOO\ZKHQWKHFRPSDQ\IRFXVLVRQYDOXHDGGHGVHUYLFHVIRULWVFXVWRPHUV5HGXFLQJYXOQHUDELOLWLHVLVDNH\DVSHFW

    RI&RULRVEXVLQHVVDQGWKH\WXUQHGWR&RXQWHUSDQHVVHFXULW\H[SHUWVIRUDVVLVWDQFH

    0RVWVHFXULW\LPSOHPHQWDWLRQVLQODUJHFRUSRUDWLRQVDUHOLWWOHPRUHWKDQKXJHILUHZDOOV\VWHPVFXPEHUVRPHSRURXVDQGVWDWLF

    &RULRVEXVLQHVVUHTXLUHVDPXFKPRUHG\QDPLFPRGHOWKH\QHHGVHFXULW\WREHIOH[LEOHDQGDGDSWDEOH&RULRVFXVWRPHUVPXVW

    WUXVW&RULRDQGWKH\DUHYHU\FRQFHUQHGDERXWVHFXUHFRQQHFWLRQVEHWZHHQWKHPDQG&RULRDVZHOODVEHWZHHQ&RULRDQGLWV

    SDUWQHUV

    &RULRV&KRLFHV

    &RULR6HFXULW\GHYHORSHGDPDWUL[RIVHOHFWLRQFULWHULDGHOLQHDWLQJWKHGLIIHUHQWVHUYLFHVDQGVHFXULW\IHDWXUHVDYDLODEOHIURP

    HDFKYHQGRU,'6ILUHZDOOV931VDFFHVVFRQWUROXVHUDXWKHQWLFDWLRQYXOQHUDELOLW\DVVHVVPHQWDQGFRPSUHKHQVLYH

    HQWHUSULVHQHWZRUNPRQLWRULQJ7KLVPDWUL[LVVWLOOXVHGWRGD\LQWKHVHOHFWLRQRIFXUUHQWDQGIXWXUHYHQGRUVDVSDUWRI&RULRV

    PXOWLOD\HUHGVHFXULW\VROXWLRQ

    &RQWLQXHGRQQH[WSDJH

  • 8/8/2019 Schneier Monitoring Presentation

    23/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    ,QWHUQDO7URMDQ'26$WWDFN$WWDFNDQG5HFRYHU\&KURQRORJ\

    7LPHVUHSRUWHGLQ('7

    $WWDFN

    FRQW

    62&GHWHFWV

    GHQLDORIVHUYLFHDWWDFNDJDLQVWFXVWRPHU

    $WWDFNRULJLQDWHGIURPLQVLGHFXVWRPHUQHWZRUN

    &RXQWHUSDQHDQDO\VW

    LQYHVWLJDWHVSUREOHP$WWDFNUHODWHGWR0RUSKHXVSHHUWRSHHUVRIWZDUH,3DGGUHVVHVRXWVLGHFXVWRPHUQHWZRUNDUHDOVRWDUJHWV

    )ULGD\SP SP SP

    &XVWRPHUGLVFRQQHFWVIURP,QWHUQHW

    &XVWRPHUPDNHVDEXVLQHVVGHFLVLRQEDVHGRQKLVRZQQHHGV

    5HPRWHVLWHFDOOVWRVD\WKDWWKH\KDYHGLVFRQQHFWHGWKHXQDXWKRUL]HGVHUYHU

    SP

    $QDO\VWFRQWDFWV

    FXVWRPHUE\SKRQH

    &XVWRPHUDQGDQDO\VWFRQIHUWKUHHWLPHV

    8QDXWKRUL]HG0RUSKHXVVHUYHUGLVFRYHUHGRQFXVWRPHUQHWZRUNDFWLQJDV'26]RPELH

    6HUYHULVDWUHPRWHDQGLQDFFHVVLEOHVLWHVRFXVWRPHUGHFLGHVWRSXOOKLV,QWHUQHWFRQQHFWLRQXQWLOPRUQLQJ6DWXUGD\

    SP SP

    &XVWRPHUUHVWRUHV,QWHUQHWFRQQHFWLRQ

    &RULR&DVH6WXG\FRQW

    :K\&RXQWHUSDQH

    &RULRFKRVH&RXQWHUSDQHIRUVHYHUDOUHDVRQV)LUVWDQGIRUHPRVW&RXQWHUSDQHGRPLQDWHVWKHPRQLWRULQJILHOG&RULRFRXOG

    VWDWHWRLWVFXVWRPHUVWKDW&RXQWHUSDQHZDVPRQLWRULQJ&RULRVDQGE\H[WHQVLRQLWVFXVWRPHUVVHFXULW\$GGLWLRQDOO\WKHWZR

    FRPSDQLHVKDYHVLPLODUVHFXULW\SKLORVRSKLHVPDQDJHULVNLQVWHDGRIHQGOHVVO\VHDUFKLQJIRUWKHULJKWWHFKQRORJLHVDQG

    SURGXFWVWRVROYHWKHVHFXULW\SUREOHP%RWKFRPSDQLHVEHOLHYHWKDWWKHUHLVQREXOOHWSURRIVHFXULW\VROXWLRQDQGWKDWDULVN

    PDQDJHPHQWDQDO\VLVLVWKHRQO\ZD\WRGHWHUPLQHWKHULJKWOHYHORIVHFXULW\%RWKFRPSDQLHVDOVRXQGHUVWDQGWKDWSHRSOHDUHD

    FULWLFDOFRPSRQHQWRIJRRGHQWHUSULVHVHFXULW\&RXQWHUSDQHVH[SHUWVHFXULW\DQDO\VWVZHUHDSHUIHFWPDWFKIRU&RULRVRZQVHFXULW\VWDII

    5HVXOWV

    &RXQWHUSDQHV0DQDJHG6HFXULW\0RQLWRULQJLVDNH\FRPSRQHQWRIWKHYDOXHDGGHGVHUYLFHRIIHUHGE\&RULRWRWKHLU$63

    FXVWRPHUV&RPELQLQJ&RXQWHUSDQHVDOZD\VRQZDWFKUDGDUZLWK&RULRVLQKRXVHVHFXULW\H[SHUWLVHKDVSXW&RULRLQDQ

    H[FHOOHQWVHFXULW\SRVLWLRQLWJLYHV&RULRWKHFDSDELOLW\WREHPRUHSURDFWLYHLQLWVVHFXULW\UDWKHUWKDQVLPSO\UHDFWLYH$QG

    WKLVUHGXFHVWKHULVNERWKWR&RULRDQGWRLWVFXVWRPHUVRIGRLQJEXVLQHVVHOHFWURQLFDOO\,WDXWRPDWHVWKHODERULQWHQVLYHDQG

    WLPHFRQVXPLQJORJFROOHFWLRQDQGDQDO\VLVSURFHVVLQDGGLWLRQWRFURVVFRUUHODWLQJDOOWKHVHQVRUORJLQIRUPDWLRQWRSURYLGH

    WLPHO\LQWHOOLJHQFHRIZKDWLVKDSSHQLQJDFURVVWKH&RULRHQWHUSULVH

    :RUNLQJZLWK&RXQWHUSDQHPHDQVWKDW&RULRLVQRWORFNHGLQWRDVLQJOHYHQGRUVROXWLRQ&RULRKDVWKHDELOLW\WRFKRRVHEHVWRI

    EUHHGVHFXULW\SURGXFWVFRQILGHQWWKDWWKH\FDQEHPRQLWRUHG

    &RULRV([SHULHQFH

    &RULRKDVEHHQDXVHURI&RXQWHUSDQHV060VHUYLFHIURPWKHYHU\EHJLQQLQJ7KHLUFRPELQHGFROODERUDWLRQDQG

    UHVSRQVLYHQHVVKDV\LHOGHGDVWURQJSDUWQHUVKLSDQGWKURXJK&RXQWHUSDQHVFDSDELOLWLHVRQHRIWKHPRVWLQQRYDWLYHEXVLQHVV

    PRGHOVLQWKH$63LQGXVWU\

    0RUHFDVHVWXGLHVFDQEHIRXQGDW

    KWWSZZZFRXQWHUSDQHFRPH[SHULHQFHVKWPO

  • 8/8/2019 Schneier Monitoring Presentation

    24/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    &RPSUHKHQVLYH1HWZRUN0RQLWRULQJ

    0RUHWKDQILUHZDOOV

    DQG,'6PRQLWRULQJ 7UXHSURGXFW

    LQGHSHQGHQFH

    &RXQWHUSDQHPRQLWRUVHYHU\WKLQJURXWHUVVHUYHUV26VVRIWZDUHPDLQIUDPHV

    %URDGQHWZRUNYLVLELOLW\PHDQVJUHDWHUVHFXULW\

    &RPSUHKHQVLYHQHWZRUNPRQLWRULQJPHDQV

    GHIHQVHLQGHSWK

    :H0RQLWRU(YHU\WKLQJ

    1RVHFXULW\SURGXFWLVSHUIHFW7KH\DOODGGYDOXHLQVRPHDUHDVDQGKDYHGHILFLHQFLHVLQRWKHUV7KHRQO\ZD\WRSURYLGHJRRG

    QHWZRUNVHFXULW\LVWRPRQLWRUDZLGHYDULHW\RISURGXFWV7KLVJLYHVGHIHQVHLQGHSWKDQGLVWKHEHVWZD\WRSURYLGHUHVLOLHQW

    VHFXULW\

    7UDGLWLRQDOO\FRUSRUDWHVHFXULW\WHDPVWHQGWRIRFXVWKHPDMRULW\RIWKHLUHIIRUWVDQGEXGJHWVRQSHULPHWHUVHFXULW\V\VWHPV

    ILUHZDOOVQHWZRUNEDVHGLQWUXVLRQGHWHFWLRQV\VWHPVDQGYLUWXDOSULYDWHQHWZRUNLQJVHUYHUV+RZHYHUE\WKHPVHOYHV

    SHULPHWHUV\VWHPVSUHVHQWDYHU\VNHZHGLPDJHRIPDOLFLRXVRUGDPDJLQJDFWLYLW\RQDFRUSRUDWHQHWZRUN)LUHZDOOVDQG931V

    W\SLFDOO\RQO\UHFRUGLQIRUPDWLRQDERXWWKHVXFFHVVRUIDLOXUHRIDSDUWLFXODUQHWZRUNFRQQHFWLRQDWWHPSW:LWKRXWDORWRIDGGLWLRQDOFRQWH[WDQGSURFHVVLQJLQFOXGLQJFRPSDULVRQWRWKHFRPSDQ\VDSSURSULDWHXVHSROLF\ORQJWHUPWUHQGDQDO\VLV

    DQGWKUHVKROGLQJQHWZRUNFRQQHFWLRQVDUHQWYHU\LQWHUHVWLQJ,QWUXVLRQGHWHFWLRQV\VWHPVDUHWXQHGWRGHWHFWFRQWHQWEDVHG

    DWWDFNVDQGDYDULHW\RIRWKHUPDOLFLRXVDFWLYLW\EXWWKH\UHUHDOO\RQO\DQHDUO\ZDUQLQJV\VWHP2QFHWKH,'6DODUPKDVJRQH

    RIIVRPHRQHKDVWRLQYHVWLJDWHWKHWDUJHWHGPDFKLQHDQGGHFLGHZKHWKHURUQRWWKHDWWDFNZDVVXFFHVVIXO$QGSHULPHWHU

    GHYLFHVDUHXVXDOO\ORFDWHGRQWKHRXWHUHGJHVRIWKHQHWZRUNZLWKOLPLWHGYLVLELOLW\WRDFWLYLW\DQGV\VWHPVZLWKLQWKHKHDUWRI

    WKHFRUSRUDWHLQIUDVWUXFWXUH6RWKH\OOIUHTXHQWO\RQO\GHWHFWWKHILUVWZDYHRIDQDWWDFNDQGQRWWKHVXEVHTXHQWIUHTXHQWO\

    QRUPDOORRNLQJDFWLYLW\XQGHUWDNHQE\DQDWWDFNHURQFHWKH\UHLQ

    ,WVOLNHWU\LQJWREXLOGDS\UDPLGE\VWDUWLQJDWWKHWRSUDWKHUWKDQWKHERWWRP1RPDWWHUKRZKDUG\RXWU\\RXUHGRRPHGWR

    IDLOXUH

    :KDWVHSDUDWHV&RXQWHUSDQHIURPLWVFRPSHWLWRUVLVRXUDELOLW\WRPRQLWRUGHYLFHVWKURXJKRXWWKHQHWZRUNQRWMXVWDWWKH

    SHULPHWHU%\FRPELQLQJ,'6DQGILUHZDOOORJVZLWKORJVIURPWKHURXWHUVVHUYHUVDQGDSSOLFDWLRQVLQRXUFXVWRPHUV

    HQYLURQPHQWVZHKDYHWKHXQLTXHDELOLW\WRXQGHUVWDQGWKHQHWZRUNDQGWRILQGDWWDFNVWKDWIO\EHORZWKHUDGDURILQGLYLGXDOSURGXFWV6RPHDWWDFNVRQO\DIIHFWWKHWDUJHWFRPSXWHUDQGDUHLQYLVLEOHWRHYHU\WKLQJHOVHRQWKHQHWZRUN:KDWDERXWDWWDFNV

    WKDWRULJLQDWHLQVLGHWKHILUHZDOOVSHULPHWHU":KDWDERXWDWWDFNVWKDWWKH,'6FDQWGLIIHUHQWLDWHIURPQRUPDOWUDIILF":KDW

    DERXWDWWDFNVWKDWWDUJHWYXOQHUDELOLWLHVLQWKHVHSURGXFWVRUVLPSO\GRQWUHJLVWHULQHLWKHURIWKHVHSURGXFWVDXGLWORJV"7URMDQV

    DUHRIWHQLQWURGXFHGLQWRDQHWZRUNE\KXPDQHUURUDQGPLJKWQRWUHJLVWHUDVPDOLFLRXVFRGH%\PRQLWRULQJWKHHQWLUH

    QHWZRUN&RXQWHUSDQHFDQGHWHFWWKHVHDWWDFNV%\PRQLWRULQJWKHHQWLUHQHWZRUN&RXQWHUSDQHFDQVHSDUDWHDUHDODWWDFNIURPD

    IDOVHDODUPXQGHUVWDQGZKDWULVNVWKHDWWDFNSRVHVDQGUHFRPPHQGDVXLWDEOHUHVSRQVH:HFDQHDVLO\GHFLGHZKHWKHUDEXIIHU

    RYHUIORZDWWDFNDJDLQVWD81,;SULQWVHUYHUZDVVXFFHVVIXO:HFDQGLVPLVV,'6DODUPVIRUDWWDFNVRQ0LFURVRIWV,QWHUQHW

    ,QIRUPDWLRQ6HUYHUEHFDXVHZHNQRZ\RXUHUXQQLQJ$SDFKH:HFDQWHOO\RXZKDWWKHDWWDFNHUGLGRQFHKHJRWLQDQGKHOS

    \RXUHSDLUWKHGDPDJH:HYHEXLOWRXUPRQLWRULQJVHUYLFHWRFROOHFWDOOWKHGDWD\RXUQHWZRUNJHQHUDWHVQRWMXVWWKHGDWDRQWKH

    WRSRIWKHS\UDPLG7KLVLVZK\&RXQWHUSDQHV060VHUYLFHLVXQPDWFKHGLQWKHLQGXVWU\

  • 8/8/2019 Schneier Monitoring Presentation

    25/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    5HDOLWLHVRI2XWVRXUFLQJ

    0LQXVHV

    /HVVFXVWRPL]DEOH /HVVSHUVRQDO

    ,PSHUIHFW

    3OXVVHV

    08&+FKHDSHUWKDQWKHDOWHUQDWLYHV

    2IWHQWKHUH$5(QRDOWHUQDWLYHV

    :HRXWVRXUFHWRVKDUHUHVRXUFHVH[SHUWLVHVXSSRUWSURFHVVHVHWF

    2XWVRXUFLQJ6HFXULW\

    ,IWKHGHFLVLRQWRRXWVRXUFHQHWZRUNVHFXULW\LVDGLIILFXOWRQHWKHGHFLVLRQVRIZKDWWRRXWVRXUFHDQGZKHUHVHHPLPSRVVLEOH

    7KHVWDNHVDUHKLJK2QWKHRQHKDQGWKHSURPLVHVRIRXWVRXUFHGVHFXULW\VHHPVRDWWUDFWLYHWKHSRWHQWLDOWRVLJQLILFDQWO\

    LQFUHDVH\RXUQHWZRUNVVHFXULW\ZLWKRXWKLULQJKDOIDGR]HQSHRSOHRUVSHQGLQJDIRUWXQHLVLPSRVVLEOHWRLJQRUH2QWKHRWKHU

    KDQGWKHUHDUHWKHVWRULHVRIPDQDJHGVHFXULW\FRPSDQLHVJRLQJRXWRIEXVLQHVVDQGEDGH[SHULHQFHVZLWKRXWVRXUFLQJRWKHU

    DUHDVRI,7,WVQRZRQGHUWKDWSDUDO\VLVLVWKHPRVWFRPPRQUHDFWLRQWRWKHZKROHWKLQJ

    ,EHOLHYHWKDWQHWZRUNVHFXULW\ZLOOFRQWLQXHWREHRXWVRXUFHGEHFDXVHWKHUHVQRRWKHUZD\WRGHDOZLWKWKHVKRUWDJHRIVNLOOHG

    FRPSXWHUVHFXULW\H[SHUWVWKHLQFUHDVLQJUHTXLUHPHQWVIRUEXVLQHVVHVWRRSHQWKHLUQHWZRUNVDQGWKHHYHUPRUHGDQJHURXVWKUHDWHQYLURQPHQW)RUWKH,QWHUQHWWRVXFFHHGDVDEXVLQHVVWRROVHFXULW\KDVWRVFDOH2XWVRXUFLQJLVKRZLWZLOOGRWKDW

    2YHUWKHSDVWIHZ\HDUVZHYHVHHQPDQ\GLIIHUHQWFRPSDQLHVRIIHULQJGLIIHUHQWFDSDELOLWLHVXQGHUWKHJHQHUDOFDWHJRU\RI

    PDQDJHGVHFXULW\VHUYLFHV7KHILHOGLVVRFRQIXVLQJWKDWHYHQWKHLQGXVWU\DQDO\VWVFDQWDJUHHRQKRZWRFDWHJRUL]HWKHP

    7KLVFRPSDQ\RIIHUVWRPDQDJH\RXUILUHZDOO7KDWFRPSDQ\RIIHUVSHULRGLFYXOQHUDELOLW\VFDQV$QRWKHURIIHUVWRPDQDJH

    \RXUVHFXULW\SROLF\RUPRQLWRU\RXUQHWZRUNRULQVWDOO\RXU,'6RUKRVW\RXUFRPSXWHUV6RPHRIWKHVHEXVLQHVVHVPDNH

    VHQVHDQGVRPHRIWKHPGRQW6RPHZLOOVXUYLYHDQGVRPHRIWKHPZRQW.QRZLQJZKLFKLVZKLFKLVWKHILUVWVWHS

    :KDWWR2XWVRXUFH

  • 8/8/2019 Schneier Monitoring Presentation

    26/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    2XWVRXUFLQJ(PHUJHQF\([SHUWLVH1RW0DQDJHPHQW

    :KDWZHOLNHDERXWPHGLFDORXWVRXUFLQJ

    $PEXODQFHVUDFLQJWRRXUVLGH

    (PHUJHQF\URRPGRFWRUVVDYLQJRXUOLYHV

    :KDWZHKDWHDERXWPHGLFDORXWVRXUFLQJ

    7KH+02GHQ\LQJXVDSDUWLFXODUSURFHGXUH

    7KHVDPHUXOHZRUNVIRU,QWHUQHWVHFXULW\RXWVRXUFLQJ

    2XWVRXUFLQJWHFKQLFDODVSHFWVRIVHFXULW\LV*22'

    2XWVRXUFLQJ\RXUEXVLQHVVIXQFWLRQVRIVHFXULW\LV%$'

    2XWVRXUFLQJ6HFXULW\FRQW

    1HWZRUNVHFXULW\LVQRGLIIHUHQW2XWVRXUFHH[SHUWDVVLVWDQFHYXOQHUDELOLW\VFDQQLQJPRQLWRULQJFRQVXOWLQJIRUHQVLFV'RQW

    RXWVRXUFHPDQDJHPHQW

    7KLVWUXLVPKDVEHHQERUQHRXWLQWKHLQGXVWU\6DOLQDV1HWZRUN6HUYLFHVZDVWKHODUJHVWILUHZDOOPDQDJHPHQWFRPSDQ\)RUD

    SULFH6DOLQDVZRXOGPDQDJH\RXUILUHZDOO(DUOLHUWKLV\HDULWGLVDSSHDUHG7KHUHMXVWZDVQWDEXVLQHVVLQPDQDJLQJILUHZDOOV

    IRURWKHUFRPSDQLHV7KHFRPSDQLHVGHPDQGHGWRRPXFKLQGLYLGXDODWWHQWLRQIRUWKHPRQH\WKH\ZHUHZLOOLQJWRSD\)LUHZDOO

    PDQDJHPHQWLVMXVWWRRFRUHWRDEXVLQHVV7KH\KDGQRFKRLFHEXWWRWUHDWWKHLU6DOLQDVFRQWDFWVDVHPSOR\HHV

    3LORW1HWZRUN6HUYLFHVRIIHUHGVHFXUHQHWZRUNPDQDJHPHQW,WVEXVLQHVVZDVWRKRVW\RXUFRPSXWHUVVHFXUHO\PDQDJHDOOVHFXULW\GHYLFHVWHVW\RXUDSSOLFDWLRQVEHIRUHSXWWLQJWKHPXSRQWKHQHWZRUNHIIHFWLYHO\EHFRPLQJ\RXUVHFXULW\PDQDJHPHQW

    JURXS7KH\UHJRQHQRZWRRVDPHSUREOHP

    6RPHFRQVXOWLQJFRPSDQLHVDUHGRLQJZHOODQGVRPHDUHQRW7KLVLVPRUHDIXQFWLRQRILVWKHTXDOLW\RIWKHVHUYLFHWKH\RIIHU

    &RQVXOWLQJLVDQGDOZD\VZLOOEHDSURILWDEOHEXVLQHVV2XWVRXUFLQJRFFDVLRQDOUHTXLUHPHQWVIRUH[SHUWLVHWUDQVFHQGVDQ\

    VLQJOHDUHD

    2XWVRXUFHGVHFXULW\FRPSDQLHVWKDWDUHGRLQJZHOODUHWKHRQHVWKDWRIIHUZHOOGHILQHGVHUYLFHVWKDWFRPSDQLHVQHHG)RU

    H[DPSOH

    FRQVXOWLQJFRPSDQLHVOLNH#6WDNHDQG)RXQGVWRQHIRUH[SHUWDGYLFHDQGDVVLVWDQFHVWUDWHJLFVHFXULW\FRQVXOWLQJ

    SHQHWUDWLRQWHVWLQJIRUHQVLFVHWF

    VHFXULW\9$5VIRUSURGXFWLQVWDOODWLRQDQGFRQILJXUDWLRQ

    7UX6HFXUHIRUFHUWLILFDWLRQDQGH[SHUWDVVLVWDQFH&RXQWHUSDQHIRUQHWZRUNVHFXULW\PRQLWRULQJ

    ,QDOORIWKHVHFDVHVWKHFRPSDQ\EX\LQJWKHRXWVRXUFHGVHUYLFHVUHWDLQVFRQWURORILWVRZQVHFXULW\7KLVLVLPSRUWDQWIRUWKH

    FRPSDQ\SXUFKDVLQJWKHVHUYLFHVEXWLWLVDOVRLPSRUWDQWIRUWKHYHQGRU%\QRWGHPDQGLQJDPDQDJHPHQWUROHWKHVHFXULW\

    FRPSDQLHVFDQRIIHUDXVHIXOHIIHFWLYHDQGVFDODEOHVHUYLFH

    $UJXPHQWVIRU2XWVRXUFLQJ

    7KHSULPDU\DUJXPHQWIRURXWVRXUFLQJLVILQDQFLDODFRPSDQ\FDQJHWWKHVHFXULW\H[SHUWLVHLWQHHGVPXFKPRUHFKHDSO\E\

    KLULQJVRPHRQHHOVHWRSURYLGHLW7DNHPRQLWRULQJIRUH[DPSOH7KHNH\WRVXFFHVVIXOVHFXULW\PRQLWRULQJLVYLJLODQFH

    DWWDFNVFDQKDSSHQDWDQ\WLPHRIWKHGD\DQGDQ\GD\RIWKH\HDU:KLOHLWLVSRVVLEOHIRUFRPSDQLHVWREXLOGGHWHFWLRQDQG

    UHVSRQVHVHUYLFHVIRUWKHLURZQQHWZRUNVLWVUDUHO\FRVWHIIHFWLYH

  • 8/8/2019 Schneier Monitoring Presentation

    27/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    +LJK5LVN2XWVRXUFLQJ

    2XWVRXUFLQJ6HFXULW\FRQW

    6WDIILQJIRUVHFXULW\H[SHUWLVHKRXUVDGD\DQGGD\VD\HDUUHTXLUHVILYHIXOOWLPHHPSOR\HHVPRUHLI\RXLQFOXGH

    VXSHUYLVRUVDQGEDFNXSSHUVRQQHOZLWKVSHFLDOL]HGVNLOOV(YHQLIDQRUJDQL]DWLRQFRXOGILQGWKHEXGJHWIRUDOORIWKHVHSHRSOH

    LWZRXOGEHYHU\GLIILFXOWWRKLUHWKHPLQWRGD\VMREPDUNHW

    5HWDLQLQJWKHPZRXOGEHHYHQKDUGHU6HFXULW\PRQLWRULQJLVLQKHUHQWO\HUUDWLFVL[ZHHNVRIERUHGRPIROORZHGE\HLJKWKRXUV

    RISDQLFWKHQVHYHQZHHNVRIERUHGRPIROORZHGE\VL[KRXUVRISDQLF$WWDFNVDJDLQVWDVLQJOHRUJDQL]DWLRQGRQWKDSSHQRIWHQ

    HQRXJKWRNHHSDWHDPRIWKLVFDOLEHUHQJDJHGDQGLQWHUHVWHG

    7KLVLVZK\RXWVRXUFLQJLVWKHRQO\FRVWHIIHFWLYHZD\WRVDWLVI\WKHUHTXLUHPHQWV7KLQNDERXWKHDOWKFDUHDJDLQ,PD\RQO\QHHGDGRFWRUWZLFHLQWKHFRPLQJ\HDUEXWZKHQ,QHHGRQH,PD\QHHGKLPLPPHGLDWHO\DQG,PD\QHHGVSHFLDOLVWV2XWRID

    KXQGUHGSRVVLEOHVSHFLDOWLHV,PD\QHHGWZRRIWKHPDQG,KDYHQRLGHDEHIRUHKDQGZKLFKRQHV,ZRXOGQHYHUFRQVLGHU

    KLULQJDWHDPRIGRFWRUVWRZDLWDURXQGXQWLO,KDSSHQWRJHWVLFN,RXWVRXUFHP\PHGLFDOQHHGVWRP\FOLQLFP\HPHUJHQF\

    URRPP\KRVSLWDO6LPLODUO\DQHWZRUNZLOORXWVRXUFHLWVVHFXULW\PRQLWRULQJ

    $VLGHIURPWKHDJJUHJDWLRQRIH[SHUWLVHDQRXWVRXUFHPRQLWRULQJVHUYLFHKDVRWKHUHFRQRPLHVRIVFDOH,WFDQPRUHHDVLO\KLUH

    DQGWUDLQLWVSHUVRQQHOVLPSO\EHFDXVHLWQHHGVPRUHHPSOR\HHV$QGLWFDQEXLOGDQLQIUDVWUXFWXUHWRVXSSRUWWKHP9LJLODQW

    PRQLWRULQJPHDQVNHHSLQJXSWRGDWHRQQHZYXOQHUDELOLWLHVQHZKDFNHUWRROVQHZVHFXULW\SURGXFWVDQGQHZVRIWZDUH

    UHOHDVHV2XWVRXUFHGVHFXULW\FRPSDQLHVFDQVSUHDGWKHVHFRVWVDPRQJDOORIWKHLUFXVWRPHUV

    $QRXWVRXUFHFRPSDQ\DOVRKDVDPXFKEURDGHUYLHZRIWKH,QWHUQHW,WFDQOHDUQIURPDWWDFNVDJDLQVWRQHFXVWRPHUDQGXVH

    WKDWNQRZOHGJHWRSURWHFWDOORILWVFXVWRPHUV$QGIURPLWVSRLQWRIYLHZDWWDFNVDUHIUHTXHQW1RPDWWHUKRZZHDOWK\\RXDUH

    \RXGRQRWKLUHDGRFWRUWRVLWLQ\RXUOLYLQJURRPZDLWLQJIRU\RXWRJHWVLFN

  • 8/8/2019 Schneier Monitoring Presentation

    28/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    :K\+LJK5LVN"

    )RRGDVVHPEOHGE\\HDUROGV

    :KRFDQQRWNHHSWKHLUURRPFOHDQ

    :KRWKLQNWKDWFOHDQZRUNLQJHQYLURQPHQWPHDQVDGD\ROGVKLUW

    :KRGRQRWDOZD\VXVHVRDSRUVKDPSRRLQWKHVKRZHU

    :KREHOLHYHWKDWZDVKLQJKDQGVLVDZDVWHRIWLPH

    :KRDUHVXUYLYLQJDFQHDQGRWKHUVNLQGLVHDVHV

    :KRKDYHQRFUHGHQWLDOVRUH[SHULHQFH

    :KREDUHO\KDYHDWKJUDGHHGXFDWLRQ

    :KRFRXOGQWERLOZDWHUWZRZHHNVDJR

    :KRZRUNIRUPLQLPXPZDJH

    $QGWKH\DUHSUHSDULQJ\RXUIRRG

    2XWVRXUFLQJ6HFXULW\FRQW

    6HFXULW\RXWVRXUFLQJLVQRGLIIHUHQW\RXVKRXOGWRFKRRVHDFRPSDQ\\RXWUXVW7RGHWHUPLQHZKLFKRQHWDONZLWKRWKHUVLQ

    \RXULQGXVWU\RUDVNDQDO\VWV*RZLWKWKHLQGXVWU\OHDGHU,QERWKVHFXULW\DQGPHGLFDOFDUH\RXGRQWXVHDOLWWOHNQRZQ

    PDYHULFNXQOHVV\RXUHGHVSHUDWH

    :DWFKFRPSDQLHVWKDWKDYHFRQIOLFWVRILQWHUHVW6RPHRXWVRXUFHUVRIIHUVHFXULW\PDQDJHPHQWDQGPRQLWRULQJ7KLVZRUULHV

    PH,IWKHRXWVRXUFHUILQGVDVHFXULW\SUREOHPZLWKP\QHWZRUNZLOOWKHFRPSDQ\WHOOPHRUWU\WRIL[LWTXLHWO\"&RPSDQLHV

    WKDWERWKVHOODQGPDQDJHVHFXULW\SURGXFWVKDYHWKHVDPHFRQIOLFWRILQWHUHVW&RQVXOWLQJFRPSDQLHVWKDWRIIHUSHULRGLF

    YXOQHUDELOLW\VFDQVRUQHWZRUNPRQLWRULQJKDYHDGLIIHUHQWFRQIOLFWRILQWHUHVWWKH\VHHWKHPDQDJHGVHUYLFHVDVDZD\WRVHOOFRQVXOWLQJVHUYLFHV7KHUHVDUHDVRQFRPSDQLHVKLUHRXWVLGHDXGLWRUVLWNHHSVHYHU\RQHKRQHVW,EHOLHYHWKDWRXWVRXUFHUVWKDW

    RIIHUFRPELQHGPDQDJHPHQWPRQLWRULQJVHUYLFHVZLOOEHDPRQJWKHQH[WWRGLVDSSHDU$QGLIDFRPSDQ\GHFLGHVWRRXWVRXFH

    LWVVHFXULW\GHYLFHPDQDJHPHQWLWLVHVVHQWLDOWKDWLWRXWVRXUFHLWVPRQLWRULQJWRDGLIIHUHQWFRPSDQ\

    ,QDQ\RXWVRXUFLQJGHFLVLRQWKDWLQYROYHVDQRQJRLQJUHODWLRQVKLSWKHILQDQFLDOKHDOWKRIWKHRXWVRXUFHULVFULWLFDO7KHODVW

    WKLQJ\RXZDQWLVWRHPEDUNRQDORQJWHUPPHGLFDOWUHDWPHQWSODQRQO\WRKDYHWKHKRVSLWDOJRRXWRIEXVLQHVVLQWKHPLGGOH

    &RPSDQLHVWKDWHQWUXVWHGWKHLUVHFXULW\PDQDJHPHQWWR6DOLQDVDQG3LORWZHUHOHIWVWUDQGHGZKHQWKRVHFRPSDQLHVZHQWRXWRI

    EXVLQHVV&RPSDQLHVWKDWFKRRVHWKHZURQJVHFXULW\FRQVXOWLQJJURXSZLOOKDYHWKHVDPHSUREOHP/RRNIRUFRPSDQLHVWKDW

    DUHOHDGHUVLQWKHLUILHOGVGRRQHWKLQJZHOOQRWWKRVHWKDWWU\WRGRHYHU\WKLQJDQGKDYHDKLVWRU\

    7KH)XWXUHRI2XWVRXUFLQJ

    0RGHUQVRFLHW\LVEXLOWDURXQGVSHFLDOL]DWLRQPRUHWDVNVDUHRXWVRXUFHGWRGD\WKHQHYHUEHIRUH:HRXWVRXUFHILUHDQGSROLFH

    VHUYLFHVJRYHUQPHQWWKDWVZKDWDUHSUHVHQWDWLYHGHPRFUDF\LVDQGIRRGSUHSDUDWLRQ,QJHQHUDOZHRXWVRXUFHWKLQJVWKDWKDYHRQHRIWKUHHFKDUDFWHULVWLFVLWVFRPSOH[LPSRUWDQWRUGLVWDVWHIXO,QEXVLQHVVZHRXWVRXUFHWD[SUHSDUDWLRQSD\UROODQG

    FOHDQLQJVHUYLFHV2XWVRXUFLQJVHFXULW\LVQRWKLQJQHZDOOEXLOGLQJVKLUHDQRWKHUFRPSDQ\WRSXWJXDUGVLQWKHLUOREELHVDQG

    HYHU\EDQNKLUHVDQRWKHUFRPSDQ\WRGULYHLWVPRQH\DURXQGWRZQ

    &RPSXWHUVHFXULW\LVDOOWKUHHFRPSOH[LPSRUWDQWDQGGLVWDVWHIXO,WVGLVWDVWHIXOQHVVFRPHVIURPWKHGLIILFXOW\WKHGUXGJHU\

    DQGWKHDPDODUPV,WVFRPSOH[LW\FRPHVRXWRIWKHLQWULFDFLHVRIPRGHUQQHWZRUNVWKHUDWHDWZKLFKWKUHDWVFKDQJHDQG

    DWWDFNVLPSURYHDQGWKHHYHUHYROYLQJQHWZRUNVHUYLFHV,WVLPSRUWDQFHFRPHVIURPWKLVIDFWRIEXVLQHVVWRGD\FRPSDQLHV

    KDYHQRFKRLFHEXWWRRSHQXSWKHLUQHWZRUNVWRWKH,QWHUQHW

    'RFWRUVDQGKRVSLWDOVDUHWKHRQO\ZD\WRJHWDGHTXDWHPHGLFDOFDUH6LPLODUO\RXWVRXUFLQJLVWKHRQO\ZD\WRJHWDGHTXDWH

    VHFXULW\RQWRGD\VQHWZRUNV

  • 8/8/2019 Schneier Monitoring Presentation

    29/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    &KRRVLQJDQ2XWVRXUFHU"

    &RPELQDWLRQRI

    WHFKQRORJ\DQGSURFHVV ,QGXVWU\OHDGHU

    )LQDQFLDOO\VWURQJ

    3URYHQWUDFNUHFRUG

    /DUJHFXVWRPHUEDVH

    /RFDOVXSSRUW

    &RXQWHUSDQHKDVSURYHGWRXVWKURXJKWKHLUXQLTXHVHUYLFHWKDWWKH\VXEVWDQWLDOO\UHGXFHWKHLUFOLHQWVH[SRVXUHWRULVN

    /OR\GVRI/RQGRQ

    6FDODELOLW\

    &RXQWHUSDQHV0DQDJHG6HFXULW\0RQLWRULQJZDVGHVLJQHGZLWKVFDODELOLW\LQPLQG2XUGLVWULEXWHGDUFKLWHFWXUHDQGDXWRPDWLF

    UHGXQGDQF\HQVXUHWKDWZHFDQVFDOHVHDPOHVVO\DQGDOPRVWLQGHILQLWHO\

    $QDO\VWV&RXQWHUSDQHKDVGHPRQVWUDWHGWKDWZHFDQTXLFNO\KLUHDQGWUDLQQHZDQDO\VWV:HDUHFRQVWDQWO\KLULQJQHZ

    DQDO\VWVDQGEULQJLQJWKHPXSWKURXJKWKH&RXQWHUSDQHUDQNVDQGZHNQRZRXUPHWKRGRORJ\LVVFDOHDEOH

    $QDO\VWFRQVROHV(DFKDQDO\VWFRQVROHLVFDSDEOHRIPRQLWRULQJDERXWILIW\6HQWULHV:HFXUUHQWO\KDYHWZHQW\DQDO\VWFRQVROHVLQWZR62&VDQGDUHFDSDEOHRIDGGLQJPRUHFRQVROHVDWWKHH[LVWLQJ62&VRULQDQHZ62&

    6RFUDWHV7KH6RFUDWHVV\VWHPLVDOUHDG\IXOO\UHGXQGDQW7KHXQGHUO\LQJWKLUGSDUW\V\VWHPVDQ2UDFOHGDWDEDVHDQGD5HPHG\WURXEOHWLFNHWV\VWHPDUHDOUHDG\XVHGIRUGLVWULEXWHGV\VWHPVPXFKODUJHUWKDQ&RXQWHUSDQHVDQGFDQHDVLO\VFDOH

    62&$UFKLWHFWXUH:HKDYHEXLOWRXU62&DUFKLWHFWXUHWRIDFLOLWDWHVFDODELOLW\DQGUHOLDELOLW\7KHUHDUHQRERWWOHQHFNVRU

    VLQJOHSRLQWVRIIDLOXUH(YHU\WKLQJFDQEHUHSOLFDWHGPXOWLSOHWLPHVZLWKRXWDQ\V\VWHPGHJUDGDWLRQ

    62&V&RXQWHUSDQHKDVGHPRQVWUDWHGWKDWZHFDQEXLOGDQGVWDIID62&IURPDVWDQGLQJVWDUWLQIRXUPRQWKV:HKDYHWHVWHGDQGGHEXJJHGWKLVSURFHVVDQGZHFDQUHSOLFDWHLWDQ\ZKHUHLQWKHZRUOG

    62&6HQWU\&RQQHFWLYLW\7KH6HQWULHVDUHGHVLJQHGWRUHFRJQL]HPXOWLSOH62&VDQGFDQDXWRPDWLFDOO\VZLWFKIURPRQHWRWKHRWKHU7KLVFDSDELOLW\HQVXUHVVFDODELOLW\

    62&6HQWU\%DQGZLGWK6LQFHPRVWRIWKHHYHQWSURFHVVLQJDQGDQDO\VLVRFFXUVRQWKH6HQWU\WKHUHLVQREDQGZLGWKEDUULHUWRVFDODELOLW\7KLVLVDQLPSRUWDQWFRQVLGHUDWLRQ,'6PRQLWRULQJFRPSDQLHVDUHIRUFHGWRVHQGDOOHYHQWVEDFNWRWKHLU62&IRU

    DQDO\VLVFRQVXPLQJKXJHDPRXQWVRIEDQGZLGWKLQWKHSURFHVV%HFDXVH&RXQWHUSDQHKDVEXLOWDGLVWULEXWHGPRQLWRULQJ

    DUFKLWHFWXUHZHGRQRWKDYHWKHVHFRQVWUDLQWV6HQWU\&RXQWHUSDQHFDQHDVLO\LQVWDOOPXOWLSOH6HQWULHVLIDFXVWRPHUORFDWLRQQHHGVDGGLWLRQDOSURFHVVLQJ2XUH[SHULHQFHZLWK1LPGDGHPRQVWUDWHVRXUVFDODELOLW\'XULQJWKHILUVWKRXUVRI1LPGDRXU6HQWULHVVDZDKXQGUHGWLPHV

    LQFUHDVHLQHYHQWYROXPH%RWK62&VLPPHGLDWHO\LQFUHDVHGFDSDFLW\WRVXSSRUWWKHDGGLWLRQDODOHUWVDQGZHEURXJKWXSRXU

    WKLUG62&ZLWKLQIRXUKRXUVRQFHZHVDZWKHLQFUHDVLQJDFWLYLW\1RWKLQJDERXW1LPGDKDGDGDPDJLQJLPSDFWRQWKH

    DUFKLWHFWXUH:HFRXOGVWLOOVHHZKDWZHQHHGHGWRDQGDOHUWHGFXVWRPHUVWKURXJKRXWDFFRUGLQJO\,QVKRUW&RXQWHUSDQHV

    060VHUYLFHFDQVFDOHLQZD\VQRRQHHOVHVFDQ:HFDQPRQLWRUFXVWRPHUVODUJHDQGVPDOODURXQGWKHJOREH:H

    FRQWLQXDOO\EXLOGRXUPRQLWRULQJFDSDELOLW\LQDGYDQFHRIGHPDQGWRHQVXUHWKDWZHFDQDOZD\VVHUYHRXUFXVWRPHUV2Q

    -DQXDU\&RXQWHUSDQHVGLVWULEXWHGDUFKLWHFWXUHPRQLWRUHGDOHUWVDWDUDWHRISHUVHFRQGPLOOLRQSHUKRXU

    ELOOLRQSHUPRQWKELOOLRQSHU\HDU,QRQHPRQWKZHVHHPRUHHYHQWVWKDQDQ\RQHHOVHKDVHYHUVHHQHYHUDQGWKLVUDWHLV

    VWHDGLO\LQFUHDVLQJDVZHEULQJPRUHFXVWRPHUVRQOLQH

  • 8/8/2019 Schneier Monitoring Presentation

    30/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    &RQFOXVLRQ

    7KHULVNVZLOODOZD\VEHZLWKXV

    6HFXULW\SURGXFWVZLOOQRWVROYHWKHSUREOHPVRI,QWHUQHWVHFXULW\

    7KHEHVWZHFDQGRLVPDQDJHWKHULVN

    +XPDQLQWHUYHQWLRQLVFULWLFDOIRUHIIHFWLYHVHFXULW\

    $XWRPDWLFVHFXULW\LVQHFHVVDULO\IODZHG

    +XPDQVFDQUHFRJQL]HDQGUHVSRQGWRQHZWKUHDWV

    0DQDJHG6HFXULW\0RQLWRULQJLVWKHPRVWFRVWHIIHFWLYHZD\WRSURYLGHUREXVWVHFXULW\

    +XPDQPLQGVDUHWKHDWWDFNHUVKXPDQPLQGVQHHG

    WREHWKHGHIHQGHUV

    &RXQWHUSDQH,QWHUQHW6HFXULW\,QF

    &RXQWHUSDQHV7HFKQRORJ\

    KWWSZZZFRXQWHUSDQHFRPWHFKQRORJ\KWPO

    &XVWRPHU([SHULHQFHV

    KWWSZZZFRXQWHUSDQHFRPH[SHULHQFHVKWPO

    .H\%HQHILWVDQG'HOLYHUDEOHVKWWSZZZFRXQWHUSDQHFRPNH\EHQHILWVKWPO

    6HYHQ4XHVWLRQV

  • 8/8/2019 Schneier Monitoring Presentation

    31/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    7ZR8VHIXO5HVRXUFHVIURP%UXFH6FKQHLHU

    6HFUHWVDQG/LHV

    'LJLWDO6HFXULW\LQD1HWZRUNHG:RUOGE\%UXFH6FKQHLHU

    &U\SWR*UDP)UHH0RQWKO\6HFXULW\1HZVOHWWHUE\%UXFH6FKQHLHU

    ZZZFRXQWHUSDQHFRPFU\SWRJUDPKWPO

    -RKQ:LOH\6RQVZZZFRXQWHUSDQHFRPVDQGOKWPO

    &U\SWR*UDPE\%UXFH6FKQHLHU

    &U\SWR*UDPLVDIUHHPRQWKO\HPDLOQHZVOHWWHUWKDWSURYLGHVQHZVVXPPDULHVDQDO\VHVLQVLJKWVDQGFRPPHQWDULHVRQ

    FRPSXWHUVHFXULW\DQGFU\SWRJUDSK\,QDGGLWLRQWRWKHUHJXODUQHZVUHSRUWVUHJDUGLQJ,QWHUQHWVHFXULW\DQGFU\SWRJUDSK\KHUH

    DUHVRPHRIWKHVXEMHFWVWKDWDSSHDUHGLQSUHYLRXVLVVXHVRI&U\SWR*UDP

    7KH6HFXULW\3DWFK7UHDGPLOO ,QVXUDQFHDQGWKH)XWXUHRI1HWZRUN6HFXULW\

    +DUG'ULYH(PEHGGHG&RS\3URWHFWLRQ ,QWHUQHW9RWLQJYV/DUJH9DOXHH&RPPHUFH

    $&\EHU8/" &RGH6LJQLQJLQ0LFURVRIW:LQGRZV

    9RWLQJDQG7HFKQRORJ\ 'LJLWDO6DIH'HSRVLW%R[HV

    :K\'LJLWDO6LJQDWXUHV$UH1RW6LJQDWXUHV 0LFURVRIW+DFNWKH&RPSDQ\QRWD3URGXFW

    $(6 6HPDQWLF$WWDFNV7KH7KLUG:DYHRI1HWZRUN$WWDFNV

    )XOO'LVFORVXUHDQGWKH:LQGRZRI([SRVXUH 3*39XOQHUDELOLW\

    %OXHWRRWK 0LFURVRIW9XOQHUDELOLWLHV3XEOLFLW\DQG9LUXV%DVHG)L[HV

    )XOO'LVFORVXUHDQGWKH&,$ 6HFXULW\5LVNVRI8QLFRGH

    0LFURVRIW62$3 7KH'DWD(QFU\SWLRQ6WDQGDUG'(6

    &RPSXWHU6HFXULW\:LOO:H(YHU/HDUQ" 7UXVWHG&OLHQW6RIWZDUH

    ,/29(

  • 8/8/2019 Schneier Monitoring Presentation

    32/32

    1HWZRUN0RQLWRULQJDQG6HFXULW\

    &RXQWHUSDQHLVDUHJLVWHUHGWUDGHPDUNRI&RXQWHUSDQH&RS\ULJKW&RXQWHUSDQH,QWHUQHW6HFXULW\$OOULJKWVUHVHUYHG

    ,17(//,*(17$/(57,167$175(63216(,00(',$7('()(16(

    &RXQWHUSDQH,QWHUQHW6HFXULW\,QF

    3UXQHULGJH$YH&XSHUWLQR&$

    ZZZFRXQWHUSDQHFRP

    1RWHV