Understanding Cyber Risk: Protecting Your Corporate Assets

Description

A myriad of security vulnerabilities in the software and hardware we use today can be exploited by an attacker, any attacker. The knowledge necessary to successfully intercept your data and voice links and bug your computers is widespread and not limited to the intelligence apparatus. Consequently, the knowledge required can - at least in part - also easily be accessed by criminals trying to ‘transfer your wealth' and competitors looking for your trade secrets. The temptation to use these easily accessible resources to the disadvantage of a rival company grows as global competition gets fiercer. Corporate espionage is nothing new, but since the dawn of the Internet Age the rules have changed. It is no longer necessary to be on-site to steal proprietary information. Cyberattacks today are cheap and attackers run a very low risk of getting caught, as attacks can be executed from anywhere in the world - an ideal breeding ground for criminal activities - and the consequences can be disastrous. In Understanding Cyber Risk: Protecting your Corporate Assets the author provides a wealth of real world examples from diverse industries from all over the world on how company assets are attacked via the cyber world. The cases clearly show that every organization can fall victim to a cyberattack, regardless of the size or country of origin. He also offers specific advice on how to protect core assets and company secrets. This book is essential reading for anyone interested in cyber security, and the use of cyberattacks in corporate espionage. Cover......Page 1 Title......Page 4 Copyright......Page 5 Contents......Page 6 Foreword......Page 10 1 Espionage: an underestimated matter......Page 12 Yesterday’s paranoia is tomorrow’s threat......Page 13 Digital transformation and espionage......Page 15 Security risks included......Page 16 Technical progress......Page 18 Loss is everywhere......Page 20 Why we hear so little about industrial espionage......Page 21 Business means war......Page 23 The great confusion of terms and definitions......Page 25 OSINT: open source intelligence......Page 27 HUMINT: human intelligence......Page 28 COMINT, ELINT and TECHINT......Page 29 Competitive intelligence......Page 30 Espionage as a business model......Page 34 Anyone can be affected......Page 35 3 From old-school espionage to modern methods of attack......Page 38 The magic of silk......Page 39 The broken mirror......Page 40 Russian economic development......Page 41 The secret of tea......Page 42 The end of the rubber monopoly......Page 43 As hard as Krupp steel – thanks to some help from the English......Page 44 Supersonic spies......Page 46 The fight for sovereignty in the air......Page 47 Gone with the wind......Page 48 Sow the wind and reap the whirlwind......Page 49 A French economic development programme......Page 50 The Detroit and Wolfsburg Strangler......Page 51 Starwood versus Hilton......Page 52 Sharp razors......Page 53 Between garbage bins and false identities......Page 54 The Tour de France Trojan......Page 55 Long live sport......Page 56 The short route to a new design......Page 57 Unsafe at any speed......Page 58 A new age of industrial espionage......Page 59 The author and the Trojan Horse......Page 61 The price of support......Page 62 The trainee with the USB stick......Page 63 The classic hack......Page 64 For whom the sun shines......Page 65 The hacker and the network......Page 66 Plundered into insolvency......Page 67 Designed and collected......Page 68 Operation Aurora......Page 69 Dangerous places and devices......Page 70 The return of the dreaded copier......Page 71 The curse of the good deed......Page 72 Espionage via the power plug......Page 73 The Internet café risk factor......Page 74 Drones and espionage......Page 75 Mind the camera......Page 77 Smartphones as pocket bugs......Page 78 Google Glass......Page 80 Open back doors......Page 82 The attack of the hand scanner......Page 87 Aspects of quality and quantity......Page 89 Social engineering as a risk factor......Page 90 Attacks via Facebook and other social media......Page 91 Economic espionage and sabotage......Page 92 Industrial espionage and cybercrime......Page 93 Your money or your network......Page 96 Industry 4.0 as a target for attack......Page 98 Cybersecurity, cyberwar, cyberactivism, cyberterrorism......Page 99 Recognising risks......Page 101 The motives of attackers......Page 103 Attackers and forms of attack......Page 104 The role of state attackers......Page 106 Collaborations......Page 115 The attributability of attacks......Page 116 How to recognise dangers......Page 117 Employees as a risk factor......Page 118 The risk of targeted attacks......Page 119 Protecting your know-how......Page 120 Organisational protective measures......Page 122 Personal protective measures......Page 123 Technical protective measures......Page 124 Disconnection from the network as a solution concept......Page 125 Cyberinsurance......Page 126 Social media and the like......Page 127 Rebound effects......Page 130 Counterintelligence in practise......Page 131 First aid......Page 133 Pillars of corporate protection......Page 134 6 The future of economic and industrial espionage......Page 136 References......Page 138 Index......Page 146