Protecting the Grid

1
Protecting the Grid

• Andrew Cormack
• Chief Security Advisor, UKERNA
• A.Cormack_at_ukerna.ac.uk

2
What excites hackers?

• High profile targets to enhance their
  reputation
• Powerful CPU for password cracking etc.
• Large disk to distribute illegal material
• High bandwidth for denial of service attacks
• Valuable files for espionage or sale

3
How systems are attacked

• Server direct attack on target
• Network disrupt operation or manipulate flows
• Client install backdoors, steal credentials or
  data
• Operating system e.g. attacks on filesharing
• Service e.g. attacks on telnet SSH
• Application subvert legitimate functions
• User social engineering

4
How systems are defended

• Design e.g. least privilege, failsafe, code
  audits
• Defend e.g. independent, layered controls
• Maintain respond to new threats solutions
• Detect design systems to detect abuse early
• Respond have policies and procedures

5
How UKERNA can help

• Share experience of attacks
• Share experience of defences
• Information on current activity
• Assistance before and after things go wrong
• JANET-CERT