• Home
  • Resources
    • Find Resources by Topic Tags
    • Cybersecurity Policy Chart
    • CSIAC Reports
    • Webinars
    • Podcasts
    • Cybersecurity Digest
    • Standards & Reference Docs
    • Journals
    • Certifications
    • Acronym DB
    • Cybersecurity Related Websites
  • Services
    • Free Technical Inquiry
    • CAT Program
    • Subject Matter Experts
    • Training
    • Contact
  • Community
    • Upcoming Events
    • Cybersecurity
    • Modeling & Simulation
    • Knowledge Management
    • Software Engineering
    • Cyber COI
  • About
    • About the CSIAC
    • The CSIAC Team
    • DTIC’s IAC Program
    • DTIC’s R&E Gateway
    • Inquiries & CAT’s
    • FAQ’s
    • DTIC STI Program
  • Skip to primary navigation
  • Skip to content
  • Skip to primary sidebar
  • Skip to footer
Login / Register

CSIAC

Cyber Security and Information Systems Information Analysis Center

  • Resources
    • Find Resources by Topic Tags
    • Cybersecurity Policy Chart
    • CSIAC Reports
    • Webinars
    • Podcasts
    • Cybersecurity Digest
    • Standards & Reference Docs
    • Journals
    • Certifications
    • Acronym DB
    • Cybersecurity Websites
  • Services
    • Free Technical Inquiry
    • CAT Program
    • Subject Matter Experts
    • Training
    • Contact
  • Community
    • Upcoming Events
    • Cybersecurity
    • Modeling & Simulation
    • Knowledge Management
    • Software Engineering
    • Cyber COI
  • About
    • About the CSIAC
    • The CSIAC Team
    • DTIC’s IAC Program
    • DTIC’s R&E Gateway
    • Inquiries & CAT’s
    • FAQ’s
    • DTIC STI Program
  • Cybersecurity
  • Modeling & Simulation
  • Knowledge Management
  • Software Engineering
  • Cyber COI
/ National Cyber Security Awareness Month – October 2017 / Today’s Predictions for Tomorrow’s Internet – National Cyber Security Awareness Month – Week 3: October 16-20

Today’s Predictions for Tomorrow’s Internet – National Cyber Security Awareness Month – Week 3: October 16-20

Overview:

Smart cities, connected devices, digitized records, as well as smart cars and homes have become a new reality. Week 3 will remind citizens that their sensitive, personal information is the fuel that makes smart devices work. While there are tremendous benefits of this technology, it is critical to understand how to use these cutting-edge innovations in safe and secure ways.

Privacy will be a major concern:

The United States government recently repealed internet privacy laws allowing internet providers to share user information with third parties and advertising firms without user consent. The bill, which had not yet gone into effect, would have made it so Internet Service Providers would have to obtain permission to collect and share their data from users (Neidig, 2017). In the future, we will continue to see arguments over the degree of privacy users can expect from internet service providers and other businesses. Users must be aware of the data that they share online by reading privacy statements that are posted on company websites and forms. It is imperative that users understand how their data will be used once it has been surrendered. As a consumer, you cannot assume that your data will not be shared or sold to third parties (USA.gov, 2017).

A Continued Shift to the Cloud:

An increasing number of organizations are moving to the cloud because of the benefits it affords them. In the future, we will continue to see both commercial and government infrastructure migrate to cloud platforms. Spending on public cloud computing is expected to rise from $67B in 2015 to $162B in 2020 (Gantz & Miller, 2016). However, when shifting from traditional infrastructure to a public cloud deployment, companies give up their data to cloud service providers who are then responsible for the confidentiality, integrity, and availability of that data.

The loss of control over the data may make meeting compliance standards difficult. Companies typically need to prove who is allowed to gain access to the systems storing the data, the data that those individuals are allowed access to, and where the data is being stored (Cox, 2010). When moving to the cloud, alternative methods of deployment should be considered. Both hybrid and private cloud deployments allow companies to have greater control of their data by keeping the data local or choosing the data that is to be hosted publically. It is also important that users understand the risks of storing their data in an environment where shared resources mean shared vulnerabilities that put all the information stored in the provider’s cloud at risk.

This CSIAC webinar is intended to provide a vendor-neutral look at how (or if) a cloud solution is right for your mission. Additionally, several design patterns for realizing highly resilient computing environments are presented:

CSIAC has a number of resources on cloud computing, including several technical journal articles, reference documents, CSIAC reports, and webinars. Check out the topic’s resources here: https://www.csiac.org/tag/cloud-computing/

Increased Reliance on Software Defined Networking (SDN):

As companies move to the cloud, network technology will become virtualized. Networks will be controlled using software in junction with traditional hardware. Control logic is separated from the hardware infrastructure of traditional networks to software-based controlling entities. These SDN controller entities will provide more points of security failures across networks while increasing network efficiency. SDN technologies, coupled with an increased reliance on Network Function Virtualization (NFV) technologies, that are aimed to virtualize and replace existing physical infrastructure will create an entirely new ecosystem for cloud technology (Pate, 2013). As the standards and regulations for this new technology arise, an increase in new security vulnerabilities and attack surfaces will also arise. Networks will now inherit vulnerabilities from not only the network devices/logic itself, but also the virtualization technology and software implementation that the services rest upon.

Internet of Things (IoT):

Cars, medical devices, and other products will continue to be produced with network capabilities, increasing attack surface. There is expected to be 20.4 billion IoT devices connected to the internet by 2020 (Gartner, 2017). With an increasing number of devices coming online, attackers have more potential targets than ever before. Part of the problem with these IoT devices is that patches are not regularly rolled out like they are for regular computer systems. Patches for IoT devices are an afterthought, leaving devices vulnerable to attack (Electronic Privacy Information Center, 2017). After purchasing an IoT device, consumers should download any new patches that exist and change the default password if they can. Patching will help remediate known vulnerabilities that exist while changing the default password to a complex password will defend against password guessing and password-cracking software. Corporations should consider segmenting their network, placing IoT devices on their network, to prevent having a single point of failure (U.S. Department of Justice, 2017).

Incorporating security into the design of components used in the Internet of Things (IoT) is essential for securing the cyber-physical infrastructure upon which society depends. This webinar presents the challenges involved in securing IoT components and provides possible solutions by drawing inspiration from the past:

Learn more about IoT: https://www.csiac.org/tag/internet-of-things-iot/

References:

  1. Cox, P. (2010, January). Understanding cloud compliance issues. Retrieved from http://searchcloudcomputing.techtarget.com/tip/Understanding-cloud-compliance-issues
  2. Electronic Privacy Information Center. (2017). Internet of Things (IoT). Retrieved from https://epic.org/privacy/internet/iot/
  3. Gantz, J., & Miller, P. (2016). The Salesforce Economy: Enabling 1.9 Million New Jobs and $389 Billion in New Revenue Over the Next Five Years [PDF]. Retrieved from http://www.salesforce.com/assets/pdf/misc/IDC-salesforce-economy-study-2016.pdf
  4. Gartner. (2017, February 7). Gartner Says 8.4 Billion Connected. Retrieved from http://www.gartner.com/newsroom/id/3598917
  5. Neidig, H. (2017, April 03). Trump signs internet privacy repeal. Retrieved from http://thehill.com/homenews/administration/327107-trump-signs-internet-privacy-repeal
  6. Pate, P. (2013, March 30). NFV and SDN: What’s the Difference? Retrieved from https://www.sdxcentral.com/articles/contributed/nfv-and-sdn-whats-the-difference/2013/03/
  7. USA.gov. (2017, June 06). Protecting Your Privacy. Retrieved from https://www.usa.gov/privacy
  8. U.S. Department of Justice. (2017, July). Securing Your “Internet of Things” Devices [PDF]. Retrieved from https://www.justice.gov/criminal-ccips/page/file/984001/download

Related Content:

  • National Cyber Security Awareness Month Overview Page
  • Week 1 – Simple Steps to Online Safety
  • Week 2 – Cybersecurity in the Workplace is Everyone’s Business
  • Week 4 – The Internet Wants YOU: Consider a Career in Cybersecurity
  • Week 5 – Protecting Critical Infrastructure from Cyber Threats

Reader Interactions

Leave a Comment Cancel

You must be logged in to post a comment.

sidebar

Page Sidebar

Featured Content

The DoD Cybersecurity Policy Chart

The DoD Cybersecurity Policy Chart

This chart captures the tremendous breadth of applicable policies, some of which many cybersecurity professionals may not even be aware, in a helpful organizational scheme.

View the Policy Chart

CSIAC Journal - Launching Innovation Through Medical Modeling and Simulation Technologies

CSIAC Journal Cover Volume 5 Number 4

This Special Edition of the Journal will provide a glimpse into current efforts to improve military medical training with simulation-based solutions.

Read the Journal

CSIAC Journal - Innovation Based Ecosystems

CSIAC Journal Cover Volume 5 Number 4

This issue of the Journal of Cyber Security & Information Systems explores how managing fast adoption modern-based system has more to do with understanding capabilities, interdependency between systems and effectively operating in the new paradigm than it has to do with differentiating product features.

Read the Journal

Recent Video Podcasts

  • What is DevOps? from a tools point of view Series: CSIAC Webinars
  • 5th Generation (5G) Technology Series: The CSIAC Podcast
  • Malvertising Explored Series: The CSIAC Podcast
  • Cybersecurity Arms Race – Modernizing the Arsenal Series: CSIAC Webinars
  • Cyber Situational Awareness Series: The CSIAC Podcast
View all Podcasts

Upcoming Events

Thu 28

BSides Columbus 2019

February 28 - March 1
Columbus OH
United States
Organizer: BSides Columbus
Mar 19

1st NATO – Industry Workshop on Autonomous Cyber Defence

March 19 @ 09:30 - 16:00 EDT
Cranfield Bedfordshire MK43 0AL
United Kingdom
Organizer: Cranfield University
View all Events

Recently Active Members

Profile picture of jburkhart04
Profile picture of Cyberhawk119
Profile picture of CSIACAdmin
Profile picture of cfasolo22
Profile picture of jrice
Profile picture of emuslic03
Profile picture of nmaida
Profile picture of svenditti
Profile picture of aizzo12
Profile picture of jsupino09
Profile picture of scottrill10
Profile picture of sphillips21
Profile picture of ebromley22
Profile picture of jlewis05
Profile picture of aduong29
Profile picture of kellermannrobert
Profile picture of gustavplato
Profile picture of bbarksdale

Footer

CSIAC Products & Services

  • Free Technical Inquiry
  • Core Analysis Tasks (CATs)
  • Resources
  • Events Calendar
  • Frequently Asked Questions
  • Product Feedback Form

About CSIAC

The CSIAC is a DoD-sponsored Center of Excellence in the fields of Cybersecurity, Software Engineering, Modeling & Simulation, and Knowledge Management & Information Sharing.Learn More

Contact Us

Phone:800-214-7921
Email:info@csiac.org
Address:   266 Genesee St.
Utica, NY 13502
Send us a Message
ASD(R&E) LogoUS Department of Defense LogoDoD IACs LogoDTIC LogoTEMS Logo

Copyright 2018, Quanterion Solutions Incorporated

Sitemap | Privacy Policy | Terms of Use | Accessibility Information

This website uses cookies to provide our services and to improve your experience. By using this site, you consent to the use of our cookies. To read more about the use of our site, please click "Read More". Otherwise, click "Dismiss" to hide this notice. Dismiss Read More