cyber

Category

Posts

GCA is intensifying its work in the world of finance and insurance.

Apart from its pool of partners in both sectors (Finance & Insurance), and the latest addition of Marsh & McLennan Companies as our first insurance partner in Latin America, GCA is collaborating actively with the Capacity-Building Tool Box of the Carnegie Endowment for International Peace.

This project, a collection of guides launched in seven languages last July, is aimed at empowering small and under-resourced financial institutions around the globe with new organizational approaches towards cybersecurity. The GCA Cybersecurity Toolkit for Small Business plays a central supportive role in it, as a source for free resources for many of the organizational recommendations and best practices included in the guides.

In that sense, GCA is also participating in a special report on the new challenges of cybersecurity for financial institutions and insurance companies to be covered by The European next October. All the readers of GCA’s newsletter are invited to subscribe to this international magazine with the special link below:

Also, the magazine is offering a special 20% discount to any partners from GCA that would like to advertise on its pages. In order to benefit from this discount, they just have to contact enquiries@the-european.eu and mention their relationship with GCA.

 

Newly Released GCA Platform:  AIDE (Automated IoT Defence Ecosystem)


Adnan Baykal, GCA’s Global Technical Adviser, met with Infosecurity at Blackhat last week to discuss GCA’s new AIDE platform. AIDE will “enable small businesses, manufacturers, service providers and individuals to identify vulnerabilities, mitigate risks and secure IoT devices to protect global users of IoT products.”  GCA’s goal for AIDE is to collect data from IoT attacks and then turn that data into actionable intelligence.

To read the full article posted by Infosecurity, please click here!

Global Resilience Federation (GRF) and the Global Cyber Alliance (GCA) have partnered together to advance protection against cyber threats.


We are happy to have the Global Resilience Federation join us in our fight against cybercrime!  “We look forward to a fruitful partnership with the Global Resilience Foundation. The intersection of our collective efforts to reduce cyber risk brings great value to our respective efforts. GRF’s esteem and deep bench of cyber expertise across a multitude of sectors will be a significant addition to the GCA partnership community,” said Philip Reitinger, GCA President and CEO.

To read the full article, please click on the picture below.

Global Resilience Federation Partnership with GCA.

GCA Press Release

New AIDE Platform Enables IoT Device Manufacturers to Test Security, Identify and Mitigate Global Attack Risks, and Identify Vulnerabilities


London – August 15, 2019: The Global Cyber Alliance, working with its partners, today launched the Automated IoT Defence Ecosystem (AIDE), a first-of-its-kind cybersecurity development platform for Internet of Things (IoT) products. AIDE enables small businesses, manufacturers, service providers and individuals to identify vulnerabilities, mitigate risks and secure IoT devices against the growing volume of threats to this interconnected environment.

A complementary resource to the AIDE platform is the GCA ProxyPot, a custom IoT honeypot solution developed by GCA, which is capable of replicating one IoT device across multiple IP addresses and physical locations to identify global attack risks quickly, efficiently and accurately. Together, the AIDE and ProxyPot platforms allow for organisations and individuals to have greater visibility into the types and scale of threats facing the IoT devices deployed into various environments, including smart cities and other smart ecosystems.

Visit globalcyberalliance.org to learn more or gcaaide.org to request access to GCA AIDE.

“The number of internet-connected devices has grown exponentially over the last decade and with it the cyber risk to companies, organisations and individuals deploying these devices on their network,” said Philip Reitinger, President and CEO of GCA. “The launch of the AIDE platform furthers GCA’s mission of providing scalable, implementable solutions to organisations of all sizes and budgets to secure their devices and reduce risk.”

With an estimated 14.2 billion internet-connected devices currently in use and a projected increase to 25 billion by 2021, the challenge to identify, analyse and mitigate IoT threats has dramatically increased. Also cause for concern, a recent survey found less than 1 in 3 organisations maintain a privileged-access security strategy for their IoT devices, making the organisations an ideal target for threat actors. These statistics highlight the urgent need for addressing the threats to IoT devices.

The AIDE platform offers capabilities for data collection, analysis and automated defence on a scale not previously attained. As part of its first effort to leverage the AIDE and ProxyPot technologies, GCA is working with Attivo Networks to build a SCADA honeyfarm to collect threat intelligence on attacks targeting industrial control systems.

“We are thrilled to be working with GCA to provide the benefits of deception technology to organizations around the world. IoT devices are notoriously difficult to secure and apply typical prevention measures. As a result, innovative solutions like deception technology are playing a critical role in the early threat detection and response to cyberattacks,” said Marc Feghali, Co-founder and Vice President of Product Management at Attivo Networks. “By creating customized decoys that blend in with production connected devices, organizations can quickly detect attackers, engage them, capture their attack methods, derive their attack signature and divert them away from real IoT infrastructure, mitigating the risk of attacks on Operational Technology (OT) infrastructure.”

Specifically, AIDE allows for the following:

Collection

The AIDE platform will automatically collect IoT attack data through three methods:

  1. Honeyfarms located around the world, including a GCA honeyfarm with more than 1,200 devices, and data feeds from partners;
  2. Virtual IoT devices located on simulated networks; and
  3. ProxyPots that can be distributed around the world and backed by real and virtual IoT devices.

Analysis

AIDE aggregates attack data into an analysis platform that is available to companies, academia, nonprofits and other entities to study IoT attack signatures and patterns. In exchange for access to the data, researchers will share any algorithms developed to help AIDE generate additional information products.

The analysis platform will be used to generate data feeds available to GCA partners and the security community. These feeds will be made widely available throughout the cybersecurity ecosystem to enable IoT attack mitigation.

Automated Defence

The real-time threat feeds generated by the platform can limit and mitigate identified attacks while preventing any further compromise of IoT devices. AIDE allows an edge router/policy enforcement point to use threat feeds to mitigate attacks against the local environment and also relies upon an application of the capabilities of the “Manufacturer Usage Description” standard, through which manufacturers can specify the types of activities and communications that are allowed on their devices. This type of automated defence offers small businesses and home users a way to have free or low-cost protection for their small office and consumer network (home IoT) devices that often have no other way to address IoT vulnerabilities.

“The bad guys do not discriminate when deciding which organisations to target for IoT attacks, so our defences shouldn’t either,” said Adnan Baykal, GCA Global Technical Advisor. “With AIDE, any organisation can access our threat feeds for data, conduct analysis and even search specific activity by username, source IP, destination IP, commands, hashes and geographic location. As we continue to establish partnerships and sponsors, the platform will continue to improve and provide added value to those within the ecosystem.”

###

About the Global Cyber Alliance

The Global Cyber Alliance (GCA) is an international, cross-sector effort dedicated to eradicating cyber risk and improving our connected world. We achieve our mission by uniting global communities, implementing concrete solutions, and measuring the effect.  Learn more at www.globalcyberalliance.org.