Keynote: IT Symposium at Haigerloch Castle

On October 19, 2017, the 15th Trigonova IT Symposium took place at Haigerloch Castle. IT experts from around the world gather here every year.

Andreas Sperber, founder and CEO of the information security consultancy aramido GmbH, gave the keynote on the topic of Information Security of Tomorrow and demonstrated live hacking attacks on a company.

Since the rampage of the Morris Worm in 1988, which paralyzed about 10% of the internet at the time, attacks have become increasingly professional. The development of hacker strategies and motivations shows that companies must prepare for increasingly professional and targeted attacks. Furthermore, hackers are more and more often targeting employees directly (known as „Social Engineering“). Additionally, industry is realizing that a successful attack cannot be 100% ruled out. This is an important realization for architectures that place more importance on containment and incident response.

Four Paradigms for Tomorrow's Information Security

Andreas Sperber therefore derived four paradigms for tomorrow's information security in his keynote:

1. Assume Breach : System planning must assume that they will eventually be hacked. This departure from absolutely secure systems requires that an attack can be detected, damage limited, and rapid recovery made possible.
2. Harden Systems and Processes : Robust processes must be established that can withstand social engineering. For systems: reduce the attack surface, keep it constantly updated, encrypt everything end-to-end, and master authentication.
3. Awareness : Continuous employee training can ensure the necessary sensitization. However, not every employee will become a security specialist: therefore, it is important to provide a helpdesk for questions.
4. Prepare Incident Response : If an incident occurs despite all precautions, immediate damage limitation must be ensured. It is important to investigate the incident to make qualified statements about how, when, and how much was affected. Subsequently, resources must be restored and the incident reported appropriately.

Information security experts from aramido regularly present at events. Please contact us if you are interested in a presentation and stay up to date via our blog feed .