Stepping Up conference 2013

STEPPING UP / IIA NZ Conference 2013 1STEPPING UP / IIA NZ Conference 2013

PRIVACY & SECURITY CHALLENGES IN AN INTERNET AGE

Vikram KumarMega [email protected]@vikram_nz


Talk scope

• Professionals and SMEs

• Online collaboration and communication (documents and emails primarily)

• Using the open Internet

• External threats


Information Integrity

Privacy +

• Confidentiality• Integrity• Availability• Authenticity• Non-repudiation


Threat Landscape

Human error +

• Non-targeted attacks• Automated kits• “Full take” by government agencies

• Targeted attacks• Criminals• Competitors or “partners” or activists• State sponsored or initiated


Major attack vectors

• Phishing, Spear Phishing

• Social engineering

• Purchase databases

• Device/Internet exploits

• Chained/escalated attacks

• Mobile and wifi


Problem is increasing

• Expectations and need for anytime/anywhere access to files

• Inability for corporate IT to deliver- the “Dropbox Effect”

• Bring Your Own Device, mobility

• Invisible, delayed impact

• Falling technology prices- especially storage

STEPPING UP / IIA NZ Conference 2013 7

CRYPTO & MEGA


Crypto 101


MEGA

• ‘Cloud’ (Internet) file storage and collaboration• 50 GB free storage. Fastest in the world. Easy to use.• End-to-end, user controlled encryption


MEGA Statistics

• Launched 20 January 2013

• About 5 million service users

• 450 million files uploaded, 180 Gb/s bandwidth, 0.05% notices of alleged copyright infringement

• Hosted in Germany, Luxembourg, and NZ

• Exiting beta soon with new website, iOS app, synchronisation client


MEGA as a global company

Source: http://www.alexa.com/siteinfo/mega.co.nz

http://www.alexa.com/siteinfo/mega.co.nz


Defeating crypto


Crypto for the masses: lessons learnt

• It has to just work

• No compromises

• Network effect

• Privacy/confidentiality as a business model is viable

• Open source necessary for trust


THE FUTURE OF EMAIL


Email in a post-Snowden era

The death of email is vastly exaggerated.

3 emerging paths:• Peer-to-peer

• Integrated with standard web email

• Closed, secure sandbox

but most individuals will stay with free-for-advertising model.


MEGA’s secure communications approach

• Closed, secure model with end-to-end encryption

• Integrate with online file storage and collaboration

• Integrated messaging, voice, and video

• In the browser but other apps and services built on top of MEGA will provide multiple options

• Privacy but not anonymity


THANK YOU

Questions / comments?

Technology

Stepping Up conference 2013