PPT-PKCS11 Key Protection And the Insider Threat

Outline The Insider Threat Existing Protection Mechanism Primary Key vs Secondary Key Primary Key Protection Secondary Key Protection Related Items The Insider Threat General design goal if desired key material checks in but never checks out PKCS11 the roach motel of key material. Smart Card . Causes of Insider Threat. Personal Motivation. Cooption . Infiltration. Impersonation. Question Your Vigilance. When/where is it low?. Team meetings, PT, chow, mission briefings, etc.. Do we meet at the same time?. and Lessons Learned . Kevin Nesbitt. Federal Bureau of Investigation. Disclaimer. The views expressed in this presentation are those of the presenter and . do not. reflect the official policy or position of the Department of Justice, the Federal Bureau of Investigation, or the U.S. Government, nor does it represent an endorsement of any kind.. b. y. Ahmad Muhammad. What is an Insider Security Treat. ?. A threat posed by anyone with special or additional access to an organization's protected assets.. A malicious . insider. is an adversary who operates inside the trusted computing base, basically a trusted adversary.. Defense Security Service. Wajih Harroum. CI Special Agent. Defense Security Service. What . is “Insider Threat. ?”. Why . is the Insider Threat significant?. How . do you recognize the Insider . Threat?. Protecting the Human Point. Fabiano Finamore – Country Manager , Iberia Market . Imagine por un segundo: . un combate de boxeo. Principales. . preocupaciones. © IDC Visit us at IDC.com and follow us on Twitter: @IDC. Wajih Harroum. CI Special Agent. Defense Security Service. What . is “Insider Threat. ?”. Why . is the Insider Threat significant?. How . do you recognize the Insider . Threat?. How . can you help defeat the Insider Threat?. Program. Donald Fulton. Counterintelligence Programs Manager. Facility Technology Services, Inc.. 1 August 2014 – DSS/NISPOM. Industrial Security Representatives. NISPOM Conforming Change . 2 pending. Combating the ENEMY Within. Mike Kalinowski. Facility Security Officer. iGov Technologies Tampa FL. 1. Insider Threat Briefing. Purpose of Briefing. What is an Insider Threat?. Milestones. Training Requirements. UNCLASSIFIED. Customizable DoD Command Brief. Insider Threat Awareness. DRAFT Command Brief – Insider Threat Awareness Training. UNCLASSIFIED. Your Name and Seal Here. Insider Threat Awareness. At the end of this . . Addressing the insider threat…. Dan . Lohrmann. , Chief . Strategist & . CSO . Security Mentor, . Inc.. September . 4, . 2014. Key Questions. Where does your biggest threat of a data breach reside?. Program. Donald Fulton. Counterintelligence Programs Manager. Facility Technology Services, Inc.. 1 August 2014 – DSS/NISPOM. Industrial Security Representatives. NISPOM Conforming Change . 2 pending. Best Practices in Insider Threat Mitigation CSIAC Insider Threat Workshop Randall Trzeciak 15 August 2013 http://www.cert.org/insider_threat/ © 2013 Carnegie Mellon University Except for the U.S. government purposes described below, this material SHALL NOT be reproduced or used in any other manner without requesting formal permission from the Software Engineering Institute at permission@sei.cmu.edu. INSIDER THREAT AWARENESS Combating the ENEMY Within Mike Kalinowski Facility Security Officer iGov Technologies Tampa FL 1 Insider Threat Briefing Purpose of Briefing What is an Insider Threat? Milestones Facebookcom/CISAcisagovLinkedIncom/company/cisagovCentralcisagovcisagovDEFEND TODAYSECURE TOMORROWIeroperbleCommunicationsPhysicalSecurityOTSecuritySupplyChainITSecurityInsiderThreatInsiderThreatINSID