Sajber sukobi i ratovanje

1
??????? ?? ?????? ?????? ? ?????? ????????
??????????? ?? ?????? ??????????, ????. ???.
2
(No Transcript)
3
?????? ??????? ???????? ???? ??????????? ???????
????????????? ??????????? ? ????????????????
??????? ? ???? ?? ??????????? ????????, ??????,
?????, ?????? ? ??????????. ???????? ??????,
????? ?????? ???? ??? ??????? ????? ?????? ???
??? ???? ?????? ???? ????? ???? ???????
???????????-??????? ???????????? ????? ????????
- ??????? ????? - ??? ????????? ?????? ????? ??
?????? ?? ???????? ????? ?? ????? ???????, ?? ??
???????? ???? ??????.
??????????, ??????, ????????????, ??????
?????????? ? ??????
4

• ????????? ? ?????? ???????? ???????????? ???????
  ?????? ??????????? ? ?????? ?? ????????????
  ??????? ???? ?? ???????? ??? ??????????? ??????
  ??????? ? ?????? ???????? ??? ???? ??????
  ???????.

?????? ? ???????? ?????
?????? ? ?????? ????????
 
5
???????????? ??????
???????? (??????? ??????)
????????? ? ????????
???????? ??????/????????? ????????? ???????
??????? ??????
?????? ?? ???
6
???????????? ??????
???????? (??????? ??????)
????????? ? ????????
???????? ??????/????????? ????????? ???????
??????? ??????
?????? ?? ???
7
??????? ?????? ????????? ? ??????? ???????????
????????
????? Stefan Frei, NSS Labs, The Known
Unknowns ?????? ???????? ?? iDefense
Vulnerability Contributor Program, TippingPoint
Zero Day Initiative
8
(No Transcript)
9
?????????????? ?????????? ???????? ? ??????
????????
10
?????????????? ?????????? ???????? ? ??????
????????
?? ?????????? ????????
?? ???????????? ????????
???? ?????????
??????????? ????????
??????????? ??????/??????
??????????? ??????
??????????? ??????????
11
??????????? ?????? ????? ??????

• IHL LOAC jus ad bellum jus in bello
• Jus ad bellum
• ?????? ??, ???? 2(4)
• ???????? ???? ??? ?????? ????????? ???? ??
  ?????????!
• ?????? ??. ???? 51
• ????? ?? ?????????? ??????????? ? ???????
  ???????? ??????.
• (????? ??????? ????? ?? ???????? ????, ??? ?? ?
  ??????? ??????? ?? ???????????)
• ??? ?? ???? ??????? ????? ? ?????? ???????? ?
  ????? ?? ??????? ?????? ???????? ?????? ?
  ???????? ???? ? ?????? ??????
• ????? ????????? ???? ????????? ?????, ????????
  ??? ????????? ????????? (??????? ?????????) ??
  ????????? ???????? ????.
• ?????? ???, ?????? ???????? ????? ???????????,
  2012
• ???????? ???? ??????? ?????

12
??????????????? ?????

• Jus in bello ?? ?????? ???? ?? ??????? ??????
• ???????? ????? ???? ????? ? ?????? IHL
• ???????? ???????? I ????????? ????????????,
  ???????? ?????? ??? ???? ?????? ?????
  ????????????, ???? ?? ?? ????????? ???
  ?????????? (???? 49)
• ???????? ????????? ??????
• ?????? ????? ?? ?????? ?????????, ????????? ???
  ??????????, ?? ???? ?? ???????? ??????? ??
  ??????? ???????? ??????? ???????? ???? ???
  ??????????? ????? ??????? ???????? ????????.
  (??????? 30).

??
??
??????? ??????????????? ???? ??????? ????
????????????? ??????????? ??????? ??? ????????
????????
??????? ??????????????? ???? ??????? ??????
?????????? ???????
13
?????? ?????? ?????????? ?????????? ??????? ?
?????? ????????
14
Shamoon the Wiper

• Wiper ????? ?? ??????? ?????? ????????? (?????
  2012)
• Shamoon ????? ?? ????????? ?????? ?????????
  Saudi Aramco (?????? 2012)
• ???????? ?????????????? Wiper ? Shamoon ? Flame
  ? Seoul ? Sony
• ?????? ??????? ?????? ????, ???, ??????,
  ????????? ???????,.
• ???????? ??????????? ?????? ????? ??????
• ????????? ??????? ????? ?? 30.000 ???????? ?
  ????????? ????? ??????
• ????? ??????
• ???????? 1.25 7 ??????? ??????.
• ??????? ?????? - 378 ????????? ??????.
• ????? ?

15
????????, ????????? ? ????????? ?????? ? ??????
????????
??????? ?? ?????, ???????? ??????
??????? ?? ??????? ???????, ??????????????,
??????????? ? ????????, ?????????,
??????????? ?????????, ??????- ???????
???????, ????????? ??????, everything-as-a-softwar
e
??????? ???? ??????????? ?????????, ?????????
????????? ?? ????????, ????????? ??????? ?
?????????, ????????, ????????-
???????? ???????, ?????????? ????????,
????????????? ?????????, ????????
?????????????, ???????????? ?????????
????????? ???????, ???????? ??????? ??????
??????????
?????????? ? ???????????? ??????
16
???, ????? ?? Eligible Receiver, ?????? ??????,
????????? ????? ? ?????? ????????
?????? ???????????, ??????
Office of Personnel Management (22,4 ???.),
???????? ?????????
???????????? ?? ???????????
Buckshot Yankee Agent.btz
Moonlight Maze
???????
Robert Tappan Morris, CERT
????, Farewell
????????? ??????????? ????????? ???
???? ????
???????
DARPA-BAA-13-02 Foundational Cyberwarfare (Plan
X)
?????? ???????
????????
1995
1998
1986
2013
2015
2017
?

2014
2016
1982
2003
1988
2007
2008
1997
2000
2010
AI, ????????, ????????????? ?????????
Solar Sunrise, AF CERT, ???? ???????? ??????? ??
?????? ???????? (Joint Task Force-Global Network
Operations) ? ?????? ??????? (2010), PPD 63
????????, ???????
???????????? ?????? ??????? ?????? ??? 79.000
?????
???? ???????? ???, US Air Force 609th Information
Combat Squadron ? ?????? ?? ???????????? ????????
Stuxnet, Flame, Gauss
???, ??????, Cliff Stohl, ????? ?? 75 , ???
??????, honeypot
?????? ??????? ????????? ???????? 6.000 ?????????
Bredli Mening
??????? ? ???????
17
?? ?? ?? ?. ?????? ???? ?????? ???????? ??????

• 1999 ???? ? ?????? ??? ? ????????? ???????

Cyber War, Frontline, PBS TV (24.4.2003) John
Arquilla (Desert Storm 91, ????????????
??????????? 99) John Hamre, James Lewis
?????? ?????? ?? ??????? ? ??????? ? ???????????
??
?????????? ?????????? ?? ????????? ? ???????
????????
18
?????? DragonFly/Energetic Bear/Crouching Yeti
Havex Trojan, Sysmain Trojan ? ClientX backdoor.
?????? 57796/3426 IP ??????
19
????? ? ????????
20
(No Transcript)
21
????? ?????? ?????? ????? ?????? ?????? ????? ?????? ?????? ????? ?????? ??????
?????? ???????? ???????
?????? ???? ??????????? ?????? ??? ??????? ????? ????? ???????????? ??? ????? ???????????? ???? ??????? ???? ??????????? ???? ??????? ???????/?????
??????? ???? ?? ??????????? ???????
???????? ???? ? ??????? ????????? ???????????? ?????????? ?????????? ?????? ?? ???????? ? ???????, ?? ??????????? ??????????
???????? ??????? ????? ?? ?????????, ??????? ?????????? ????? ??????? ??????? ??????? ??? ?? ??????????? ????????? ???? ????????? ? ?????????? ????????? (??????????, ?????? ????????, ?? ICS/SCADA, ??????????? ??????????, ???????????, ???????, ???????????, )
?????/??????? ?? ????????? ?? ??????????? ??????? ?? ????????? ? ????? ????????? ????????????? ? ????? (Stuxnet Idaho Nat. Lab, Dimona-Negev)
????????? ????????? ????????? ??? ???? ??? ????? ??? ???? ????????? ??????????/?? ????????? (?? ????? MCSE, CEH, CISM...) ?? ????????? ?????????????? ?????? (6-10 ?????? ???????? ????)
???????????? ??????? ???????????? ???????? ????? ???????????? ?????
22
???????? ??????
?????????? ??????????? Memory hierarchy, instruction set, multiprocessing, distributed processing, multithreading, digital logic, assembly language, bus technologies, HDD, SSD
?????????? ??????? Resource management, security concepts/security rings, user authentication and roles, scheduling, synchronization, kernel vs user level, device drivers, program execution, interrupts, processes, threads, virtual memory, Executable and Linkable Format (ELF), Portable Executable (PE), virtualization, hypervisors (type 1 and type 2)
??????????/??????????????? ?????????? (???????) Digital logic, wireless technologies, radio wave propagation, electromagnetic spectrum, cellular technologies
?????????? ?????? / ????????? Recursion, functions, data structures, syntax, compilers, abstraction, linking, efficiency, optimization, Assembly, C, C, Python, Java, Javascript, scripting, procedural/object oriented/functional programming
?????????? ? ????????? ???????????? OSI Model, networking protocols (TCP, UDP, IP, IPv6, etc.), routing protocols, layer 2 protocols, Software Defined Networking (SDN), cellular technologies, 802.11, 802.16, Access Control Lists/firewalls, queuing theory, service applications (HTTP/HTTPS, DNS, etc.)
????????????? Data at rest, securing communications, Cellular Message Encryption Algorithm (CMEA), public/private key encryption, hashing algorithms,
?????? ???????? ? ??????????? ???????? File systems, HDDs, SSDs, databases, SQL, forensically sound data transfer/recovery
23
??????? ?????
Certified in Risk and Information Systems Control (CRISC) 119,227
Certified Information Security Manager (CISM) 118,348
Certified Information Systems Security Professional (CISSP) 110,603
Project Management Professional (PMP) 109,405
Certified Information Systems Auditor (CISA) 106,181
Certified Scrum Master 101,729
Cisco Certified Design Associate (CCDA) 99,701
Citrix Certified Professional - Virtualization (CCP-V) 97,998
Cisco Certified Network Professional (CCNP) Routing and Switching 97,038
Juniper Networks Certified Internet Associate - Junos (JNCIA-Junos) 96,734
Microsoft Certified Systems Engineer (MCSE) /Microsoft Certified Solutions Expert 96,198
ITIL v3 Foundation 95,434
Certified Ethical Hacker (CEH) 95,155
VMware Certified Professional - Data Center Virtualization (VCP-DCV) 94,181
Certified Novell Engineer (CNE) 93,856
????? GlobalKnowledge Survey 15 Top-Paying
Certifications for 2015
24
GAO Stryker Armored Vehicle (2002) 900 ???.
?????? Auburn, Wash, General Dynamics, (?????
?????? ?? ??????? ?? ??? ??? 850 ??????? ??????
(SIPRI)
Google (2014. ?????? 14,3 ????????? ??????) ?
????????? ??? 72 ??????. 2,78 ????????? ??????
???????? ?? RD (?????-??? 2015) ? ?????? 9,832
????????? ? 2014.

• ??? (2016) 16 ????????? ?????? Black Budget ??
  2013. ?????? (52,6 ????????? ?????? 4,2
  ????????? ???? ?? ?????? ??????????? ? ?????????)
• ????????? (2014-15) 1.5 ????????? ????
• ?. ????????? (?? 2016) 860 ???. ????? (1,18)
• ??????? ??????? ?????? ??????????? ??????? ?? 77
  ????????? ?????? (2015)
• ?? 170 ????????? ?????? ? 2020. ??????
  (???????).

25
?????? ????? ????????????? ??????? ? ??????????
?????????? ????? ????????????? ??????? (OCAI,
Cameron Quinn) ???????? ?? ?? ? ?? ? ?? ???????
?? ???????? ????????????? ?? VAPT
????? ????????? ?????, ??????????
??????? ?????????? ?? ????????? ????? ??
??????????, ??????, ????? ?????
??????? ???????, ???????????, ?????? ?????????
???????????, ??????????????, ???????????, ?????
?? ?????????? ??????, ?? ???????????,
??????????? ?? ???????????, ????????, ????????,
????? ????? ????
????????, ?????????, ?????????? ???????????,
??????????? ?? ???????????, ????????? ?
???????????, ??????????, ??????????, ?????
????? ?? ????? ?????
??????????? ?? ?????????, ????? ?? ?????????,
????????? ????, ??????????? ?? ????? ??????,
????????, ??????????, ????? ????? ????
26
??????? ??????? ??????????
?????? ?????? ?? ??????? ???? ??????? ??????? ?
??????? ???????? ?????????????? ?????? ????????
?????????? ??????????? ??????. ????? ??, ????
139. ?????? ?????? ????? ????? ?? ????????
?????????? ????? ? ???????? ????? ?????? ?
???????, ? ?????? ?? ???????, ??????? ?
?????????? ???????????? ????? ???? ????????
???????? ???? ???? 140. ?????? ?????? ?? ????
?????????? ??? ??????? ????????? ?????? ???? ??
?????? ??????? ????????? ????????? ??????.
1
2
3
4

• ?????????? ??????? ??
• ?????? ?????? ??
• ??????? ?????? ?? ??????? ???????? ??????????
• ?????? ? ???????? ? ??????? ???? ? ??????? ?
  ?????
• ??????? ???????? ???????? ? ?????????????
  ???????? ????????????

???? ????? ????? ?????????? ?? ??????? ??????
???????? ?????? ???????????? ??????? ??????????,
????????? ???????? ? ??????????, ?? ??????????
?????????? ??????? ???????, ?????????? ? ??
??????? ????????, ????????? ? ???????????? ??????.
27
?????
28

• ??????
• ?????? 10 ???????? ??????? ?????? ???????????
• ??????? ???? ??????? ????????? ?? ??????????
  (1/1.844)
• ?????? ??????????? 13 ????????? ??????
• 8200, Advanced Technology Park, CyberSpark
• ?????? RD Intel, Microsoft, Cisco, IBM, Oracle,
  Deutsche Telekom, Motorola, HP, Facebook, eBay,
  SAP, EMC
• ?????????
• T-Labs ?? ??? ?????? ????????????
• BGN Technologies/??? ?????? ??????????
• IDF Technology Campus
• ?????????? ???????
• ?????, ???, Be'er Sheva,
• Ben Gurion University of the Negev, ????????
  ??????, ?????????, ?????????? ?????? ???? (2011)

?????? ? ???????????
?????? 1
?????????? 2
?????? 3
????? 4
??? 5
??????? 6
??????? 7
????????? 8
????? The Global Competitiveness Report 2014-2015
Magshimim Leumit Unit 8200 (Matzov)
Kidma venture partnership program
??????????
29
????????? ???????? ????????? ???????????? ????????
? ??? ?????????????? ?????? ????? ????????? ??
????????? ???? ?? ???????? ?????? ??????????
??????? ?? ???????? ????? ????????? (?
????????????)
RD
?????? ??????????, ?????????
??????
??????
???, ???, ???
???. ???????
???????????
????????? ?????, ?????????, ??????????,
????? ??????? ????????????, ???????, ?????
????? ??????
???????? ??????
30
????? ?? ?????

• ???????
• dragan.mladenovic_at_vs.rs
• 065/3264940