MalWaria outbreak in Africa - the fierce urgency of now

Post on 26-Jun-2015

141 views 1 download

Tags:

Transcript of MalWaria outbreak in Africa - the fierce urgency of now

exercitum privato

exercitum privato

ISSA-UK Security Day, 8 July 2010

MalWaria outbreak in Africa - the fierce urgency of now

by Aireni Omerri CISA CISSP MScFounder, ISfA

infosecafrica@gmail.com

exercitum privato

exercitum privato

ISSA-UK Security Day, 8 July 2010

Career to date

• Royal Holloway 2001-2002, CISSP 2002

• ISSA-UK member since March 2003• Worked on 3 continents; Africa, America and Europe

exercitum privato

exercitum privato

ISSA-UK Security Day, 8 July 2010

Agenda

• Context• UNDHR• Team Cymru• ISfA

exercitum privato

exercitum privato

ISSA-UK Security Day, 8 July 2010

The fierce urgency of now

exercitum privato

exercitum privato

ISSA-UK Security Day, 8 July 2010

Article 31

Internet access is a fundamental human right

AgreeDisagreeDon’t be ridiculous

exercitum privato

exercitum privato

ISSA-UK Security Day, 8 July 2010

Africa

exercitum privato

exercitum privato

ISSA-UK Security Day, 8 July 2010

Digital scramble

exercitum privato

exercitum privato

ISSA-UK Security Day, 8 July 2010

Team Cymru

• dedicated to making the Internet more secure

• research the ‘who’ and ‘why’ of malicious activity

• advise governments and law enforcement agencies around the world

• www.team-cymru.org• contact outreach@cymru.com

exercitum privato

exercitum privato

ISSA-UK Security Day, 8 July 2010

African bot distribution

exercitum privato

exercitum privato

ISSA-UK Security Day, 8 July 2010

Bot distribution contd

••

exercitum privato

exercitum privato

ISSA-UK Security Day, 8 July 2010

Statistical breakdown

• November 2009 - countries with the highest number of infected computers; Egypt - 42,000, Algeria - 20,000, Nigeria - 11,000, Morocco - 8,000

• Apart from SA (4,000), the rest of the continent has virtually no infected machines

• February 2010 - Egypt’s number of infected computers had increased by 20%

• whitepaper - www.team-cymru.org

exercitum privato

exercitum privato

ISSA-UK Security Day, 8 July 2010

It’s all about change

"Change will not come if WE wait for some other person or some other time. WE are the ones we've been waiting for. WE are the change that WE seek"

Senator Barack Obama, 5 Feb 2008

exercitum privato

exercitum privato

ISSA-UK Security Day, 8 July 2010

ISfA

• Obama was the inspiration, OWASP the aspiration

• dedicated to the advancement and development of information security on the African continent

• closed LinkedIn group - 105 members, 35 in Africa

• management team made up of 4 ISG RHUL alumni; 2 in Nigeria, 2 in the UK

exercitum privato

exercitum privato

ISSA-UK Security Day, 8 July 2010

Logo

exercitum privato

exercitum privato

ISSA-UK Security Day, 8 July 2010

ISfA roadmap

• register as a not-for-profit• website (currently in beta)• initiatives such as infosec awareness for the continent’s 11-18 year olds

• establish partnerships with like minded individuals/organisations

• become the knowledge resource for infosec best practice

exercitum privato

exercitum privato

ISSA-UK Security Day, 8 July 2010

Lastly

The best time to plant a tree is twenty years ago.The second best time is now.

African proverb

exercitum privato

exercitum privato

ISSA-UK Security Day, 8 July 2010

Background reading