Human Error Remains the Main Challenge for Cyber-Security Worldwide
By MYBRANDBOOK
GISEC has witnessed the world’s leading cyber security experts gathered at Dubai World Trade Centre for three days starting from 1-3 April was a co-located event to IoTX and Future Blockchain Summit has witness more than 200 talks, briefing sessions and live hacking demos that were given by the world’s foremost cyber security experts and business leaders, one reoccurring theme stood out: human error remains one of the largest obstacles to cyber security.
As GISEC – the largest cyber security event in the Middle East, Africa and South Asia – draws to a close, leading experts have warned that human error continues to play a significant role in cyber security and online crime, requiring a strategic approach to educate users and employees to prevent companies and individuals from falling victim to cyber-crime.
Jamie Woodruff live hacks a nuclear power-plant, credit cards and car keys
Jamie Woodruff, the Ethical Hacker who famously hacked Kim Kardashian, Google, Microsoft, Facebook and Twitter – and who headlined GISEC’s first-ever Dark Stage – not only shone a light on the many hidden ways businesses may be susceptible to hackers, but re-emphasised how humans are so often at the heart of both on and offline crime.
“People are much more susceptible through social engineering to attacks than they are in person”, he said. “Vulnerabilities of businesses exist a lot of the time through their employees, and social engineering allows us to observe and learn their patterns, allowing entry into the company” – a technique that can have dire consequences for the company, he maintains.
Providing an apt example, one of Woodruffs anecdotes included one of his ethical hacking projects in which he gained access to the server rooms of a London-based banking institution. To do so, the expert hacker had to intercept phone conversations and CCTV cameras. Observing the bank and its employees for a whole month, he gained entry by dressing up as a pizza delivery driver. With unrestricted access to the IT infrastructure, said Woodruff, the consequences for the bank and its customers could have been disastrous.
At the climax to his seminar, Woodruff left his audience in disbelieve as he live-hacked the CCTV camera of a nuclear plant. He also obtained the two-year payment history of ten volunteers that took to the stage with their contactless credit cards – data he compromised within seconds – and showed how children toys, car keys and smart watches are all open to attack.
Experts agree that the human factor remains a key obstacle for cyber security
Re-emphasising Woodruff’s point on human error, Ankush Johar, Investor at HumanFirewall and a cyber-security authority, used his appearance at GISEC to highlight how many types of attacks occur in the world. He said: “There are over 20,000 types of attacks. Given those large numbers, training employees to successfully identify those remains a huge challenge and leaves us prone to human error. One of the keys is to alter the psychology of employees and make them suspicious by nature.”
Earlier in the week, US-hacker Kevin Mitnick – who landed himself on the FBI’s Most Wanted list after hacking more than 40 major corporations and now is a trusted security consultant to Fortune 500 companies and governments worldwide – warned on the same topic that “when teaching staff about security, companies need something relevant, entertaining and informative – not a boring book that they won’t read.”
He added: “You need to educate, train and inoculate your users. The hacker is always going to go after the weakest link, and social engineering is the easiest way in and easiest attack your enemies will use today.”
Emile Abou Saleh, Regional Director, Middle East & Africa at Proofpoint – who showcased their people-centric solutions at GISEC - said, “As cyber-criminals take advantage of the human factor to execute their campaigns, companies need to ensure they deploy effective security awareness training to educate employees for best-practices, as well as establish a people-centric strategy to defend against threat actors’ unwavering focus on compromising end-users.”
Singapore to remove One-Time Passwords from Bank Accounts
According to the Monetary Authority of Singapore, clients who utilise secur...
Is 375 million Airtel subscribers database breached?
When a hacker claims to have accessed and put up for sale a customer databa...
The government of India intends to construct a single portal f
A single portal will be launched by the Indian government to list all of it...
OpenAI offers GPT-4o, a faster model available to all users at
GPT-4o, a faster and more sophisticated AI model, is made available to all...
Icons Of India : AMIT CHADHA
Amit Chadha serves as the CEO and Managing Director of L&T Technology ...
Icons Of India : ASHISH KUMAR CHAUHAN
Ashish kumar Chauhan, an Indian business executive and administrator, ...
Icons Of India : Harsh Jain
Harsh Jain, the co-founder of Dream 11, the largest fantasy sports web...
UIDAI - Unique Identification Authority of India
UIDAI and the Aadhaar system represent a significant milestone in Indi...
BEL - Bharat Electronics Limited
BEL is an Indian Government-owned aerospace and defence electronics co...
CERT-IN - Indian Computer Emergency Response Team
CERT-In is a national nodal agency for responding to computer security...
Indian Tech Talent Excelling The Tech World - Sundar Pichai, CEO- Alphabet Inc.
Sundar Pichai, the CEO of Google and its parent company Alphabet Inc.,...
Indian Tech Talent Excelling The Tech World - Satya Nadella, Chairman & CEO- Microsoft
Satya Nadella, the Chairman and CEO of Microsoft, recently emphasized ...
Indian Tech Talent Excelling The Tech World - Aman Bhutani, CEO, GoDaddy
Aman Bhutani, the self-taught techie and CEO of GoDaddy, oversees a co...