IoT

Category

Posts

San Francisco, February 26, 2020 – GCA was honored last night with the SC Media 2020 Editor’s Choice Award which was presented during a ceremony in San Francisco during RSA Conference 2020.

The award is given based on information culled from SC Media events, through research conducted by the SC Media editorial team for various features and news articles, and conversations with and feedback from readers, analysts, vendors, and the Editorial Advisory Board of SC Magazine.

The award recognizes GCA’s development and deployment of global solutions that contribute to eradicating cyber risk. In 2019 we achieved a number of successes in our continued collaboration with our partners. We launched cybersecurity toolkits for small businesses and for election offices to provide these entities with practical, implementable tools to address some of the most common cyber risks. We also tackled the growing threats to the IoT environment with the implementation of the Automated IoT Defence Ecosystem (AIDE) platform, which enables IoT device manufacturers, small businesses, and others to identify vulnerabilities, mitigate risks, and secure IoT devices. To further GCA’s efforts to support secure elections and protect democracy, we have partnered with Craig Newmark Philanthropies to create the Craig Newmark Trustworthy Internet and Democracy Program, which will provide news outlets, government and election officials, and community organizations with free toolkits and online forums to help protect them from cyber threats.

“On behalf of the entire team at GCA, I’m proud to accept this recognition from SC Media and join an impressive group of past recipients,” said GCA President and CEO Philip Reitinger. “This award is a testament to the hard work of everyone at GCA, along with our partners, ambassadors, and stakeholders who strive each day to make a difference in eradicating cyber risks for the benefit of the global community.”

“When I co-founded Global Cyber Alliance in September 2015, I hoped that it would prove an invaluable agent of change in cybersecurity and create greater collaboration across sectors and borders,” said Manhattan District Attorney Cyrus R. Vance, Jr. “I thank SC Media for this award, and congratulate GCA, its Board of Directors and Committees, and its CEO Phil Reitinger for its tremendous success in protecting millions of individuals and entities at no cost to users.”

###

About the Global Cyber Alliance

The Global Cyber Alliance (GCA) is an international, cross-sector effort dedicated to eradicating cyber risk and improving our connected world. We achieve our mission by uniting global communities, implementing concrete solutions, and measuring the effect. Learn more at www.globalcyberalliance.org.

 

 

 

Newly Released GCA Platform:  AIDE (Automated IoT Defence Ecosystem)


Adnan Baykal, GCA’s Global Technical Adviser, met with Infosecurity at Blackhat last week to discuss GCA’s new AIDE platform. AIDE will “enable small businesses, manufacturers, service providers and individuals to identify vulnerabilities, mitigate risks and secure IoT devices to protect global users of IoT products.”  GCA’s goal for AIDE is to collect data from IoT attacks and then turn that data into actionable intelligence.

To read the full article posted by Infosecurity, please click here!

The Global Cyber Alliance released AIDE which is a threat analysis tool that studies cyber threats to internet-connected devices (IoT).  Typically, researchers use “honeypots” to learn how hackers attempt to break into an IoT system. GCA’s AIDE project allows IoT device honeypots to “operate at scale without investing in a ton of devices.”

Joe Uchill of Axios explains exactly how AIDE words in his article which you can read by clicking here and scrolling to number 2.

GCA Press Release

New AIDE Platform Enables IoT Device Manufacturers to Test Security, Identify and Mitigate Global Attack Risks, and Identify Vulnerabilities


London – August 15, 2019: The Global Cyber Alliance, working with its partners, today launched the Automated IoT Defence Ecosystem (AIDE), a first-of-its-kind cybersecurity development platform for Internet of Things (IoT) products. AIDE enables small businesses, manufacturers, service providers and individuals to identify vulnerabilities, mitigate risks and secure IoT devices against the growing volume of threats to this interconnected environment.

A complementary resource to the AIDE platform is the GCA ProxyPot, a custom IoT honeypot solution developed by GCA, which is capable of replicating one IoT device across multiple IP addresses and physical locations to identify global attack risks quickly, efficiently and accurately. Together, the AIDE and ProxyPot platforms allow for organisations and individuals to have greater visibility into the types and scale of threats facing the IoT devices deployed into various environments, including smart cities and other smart ecosystems.

Visit globalcyberalliance.org to learn more or gcaaide.org to request access to GCA AIDE.

“The number of internet-connected devices has grown exponentially over the last decade and with it the cyber risk to companies, organisations and individuals deploying these devices on their network,” said Philip Reitinger, President and CEO of GCA. “The launch of the AIDE platform furthers GCA’s mission of providing scalable, implementable solutions to organisations of all sizes and budgets to secure their devices and reduce risk.”

With an estimated 14.2 billion internet-connected devices currently in use and a projected increase to 25 billion by 2021, the challenge to identify, analyse and mitigate IoT threats has dramatically increased. Also cause for concern, a recent survey found less than 1 in 3 organisations maintain a privileged-access security strategy for their IoT devices, making the organisations an ideal target for threat actors. These statistics highlight the urgent need for addressing the threats to IoT devices.

The AIDE platform offers capabilities for data collection, analysis and automated defence on a scale not previously attained. As part of its first effort to leverage the AIDE and ProxyPot technologies, GCA is working with Attivo Networks to build a SCADA honeyfarm to collect threat intelligence on attacks targeting industrial control systems.

“We are thrilled to be working with GCA to provide the benefits of deception technology to organizations around the world. IoT devices are notoriously difficult to secure and apply typical prevention measures. As a result, innovative solutions like deception technology are playing a critical role in the early threat detection and response to cyberattacks,” said Marc Feghali, Co-founder and Vice President of Product Management at Attivo Networks. “By creating customized decoys that blend in with production connected devices, organizations can quickly detect attackers, engage them, capture their attack methods, derive their attack signature and divert them away from real IoT infrastructure, mitigating the risk of attacks on Operational Technology (OT) infrastructure.”

Specifically, AIDE allows for the following:

Collection

The AIDE platform will automatically collect IoT attack data through three methods:

  1. Honeyfarms located around the world, including a GCA honeyfarm with more than 1,200 devices, and data feeds from partners;
  2. Virtual IoT devices located on simulated networks; and
  3. ProxyPots that can be distributed around the world and backed by real and virtual IoT devices.

Analysis

AIDE aggregates attack data into an analysis platform that is available to companies, academia, nonprofits and other entities to study IoT attack signatures and patterns. In exchange for access to the data, researchers will share any algorithms developed to help AIDE generate additional information products.

The analysis platform will be used to generate data feeds available to GCA partners and the security community. These feeds will be made widely available throughout the cybersecurity ecosystem to enable IoT attack mitigation.

Automated Defence

The real-time threat feeds generated by the platform can limit and mitigate identified attacks while preventing any further compromise of IoT devices. AIDE allows an edge router/policy enforcement point to use threat feeds to mitigate attacks against the local environment and also relies upon an application of the capabilities of the “Manufacturer Usage Description” standard, through which manufacturers can specify the types of activities and communications that are allowed on their devices. This type of automated defence offers small businesses and home users a way to have free or low-cost protection for their small office and consumer network (home IoT) devices that often have no other way to address IoT vulnerabilities.

“The bad guys do not discriminate when deciding which organisations to target for IoT attacks, so our defences shouldn’t either,” said Adnan Baykal, GCA Global Technical Advisor. “With AIDE, any organisation can access our threat feeds for data, conduct analysis and even search specific activity by username, source IP, destination IP, commands, hashes and geographic location. As we continue to establish partnerships and sponsors, the platform will continue to improve and provide added value to those within the ecosystem.”

###

About the Global Cyber Alliance

The Global Cyber Alliance (GCA) is an international, cross-sector effort dedicated to eradicating cyber risk and improving our connected world. We achieve our mission by uniting global communities, implementing concrete solutions, and measuring the effect.  Learn more at www.globalcyberalliance.org.

 

“Smart devices” are on the rise, and with that comes more cyber risk. Simply put by GCA’s CEO, “We must move from the Internet of Things to the ‘Secure Internet of Secure Things’.” ITU had the opportunity to catch up with Philip Reitinger, Global Cyber Alliance’s CEO, about how to create a safe and secure cyber defense to help improve our connected world.

Click below to read the entire article.

GCA partner ITU