Towards a C2I platform for combating the cyber-threat

Abstract

In my talk, I outline a number of cyber-attacks that have been reported in recent years, and examine the vulnerability of organisations and critical infrastructure to them. I then discuss an approach to combating cyber-threats that integrates specialised tools within a managed service platform to create a command, control an intelligence (C2I) system used to co-ordinated defences against a diverse collection of resourceful and persistent opponents. The discussion is illustrated with examples from BT research and development projects. Such a system will have to be refreshed and up-graded regularly to keep pace with challenges such as: - The escalating arms race against threat agents, - Innovations in technology and business practice, - Changing regulations and compliance demands, - A cyber-Moore's Law that dictates a continual shrinking of required response times Ultimately it will need to be adaptive and to learn from experience. © 2012 IFIP International Federation for Information Processing.