November 23, 2017, 12:37 am
Facebook iconTwitter iconYouTube iconGoogle+ icon
1 Philippine Peso = 0.07222 UAE Dirham
1 Philippine Peso = 2.23697 Albanian Lek
1 Philippine Peso = 0.035 Neth Antilles Guilder
1 Philippine Peso = 0.34334 Argentine Peso
1 Philippine Peso = 0.02609 Australian Dollar
1 Philippine Peso = 0.035 Aruba Florin
1 Philippine Peso = 0.03933 Barbados Dollar
1 Philippine Peso = 1.63992 Bangladesh Taka
1 Philippine Peso = 0.03265 Bulgarian Lev
1 Philippine Peso = 0.00741 Bahraini Dinar
1 Philippine Peso = 34.27689 Burundi Franc
1 Philippine Peso = 0.01967 Bermuda Dollar
1 Philippine Peso = 0.02668 Brunei Dollar
1 Philippine Peso = 0.13491 Bolivian Boliviano
1 Philippine Peso = 0.06405 Brazilian Real
1 Philippine Peso = 0.01967 Bahamian Dollar
1 Philippine Peso = 1.28171 Bhutan Ngultrum
1 Philippine Peso = 0.20626 Botswana Pula
1 Philippine Peso = 393.707 Belarus Ruble
1 Philippine Peso = 0.03929 Belize Dollar
1 Philippine Peso = 0.0252 Canadian Dollar
1 Philippine Peso = 0.01953 Swiss Franc
1 Philippine Peso = 12.51721 Chilean Peso
1 Philippine Peso = 0.13055 Chinese Yuan
1 Philippine Peso = 59.27237 Colombian Peso
1 Philippine Peso = 11.06096 Costa Rica Colon
1 Philippine Peso = 0.01967 Cuban Peso
1 Philippine Peso = 1.84798 Cape Verde Escudo
1 Philippine Peso = 0.42782 Czech Koruna
1 Philippine Peso = 3.47748 Djibouti Franc
1 Philippine Peso = 0.12472 Danish Krone
1 Philippine Peso = 0.93215 Dominican Peso
1 Philippine Peso = 2.25679 Algerian Dinar
1 Philippine Peso = 0.26216 Estonian Kroon
1 Philippine Peso = 0.34612 Egyptian Pound
1 Philippine Peso = 0.53196 Ethiopian Birr
1 Philippine Peso = 0.01676 Euro
1 Philippine Peso = 0.0411 Fiji Dollar
1 Philippine Peso = 0.01485 Falkland Islands Pound
1 Philippine Peso = 0.01485 British Pound
1 Philippine Peso = 0.09043 Ghanaian Cedi
1 Philippine Peso = 0.92566 Gambian Dalasi
1 Philippine Peso = 176.89283 Guinea Franc
1 Philippine Peso = 0.14439 Guatemala Quetzal
1 Philippine Peso = 4.01731 Guyana Dollar
1 Philippine Peso = 0.15359 Hong Kong Dollar
1 Philippine Peso = 0.46264 Honduras Lempira
1 Philippine Peso = 0.12608 Croatian Kuna
1 Philippine Peso = 1.21691 Haiti Gourde
1 Philippine Peso = 5.23442 Hungarian Forint
1 Philippine Peso = 266.33236 Indonesian Rupiah
1 Philippine Peso = 0.06904 Israeli Shekel
1 Philippine Peso = 1.28012 Indian Rupee
1 Philippine Peso = 22.94985 Iraqi Dinar
1 Philippine Peso = 692.86138 Iran Rial
1 Philippine Peso = 2.03638 Iceland Krona
1 Philippine Peso = 2.46903 Jamaican Dollar
1 Philippine Peso = 0.01391 Jordanian Dinar
1 Philippine Peso = 2.2151 Japanese Yen
1 Philippine Peso = 2.03441 Kenyan Shilling
1 Philippine Peso = 1.37082 Kyrgyzstan Som
1 Philippine Peso = 78.99705 Cambodia Riel
1 Philippine Peso = 8.32547 Comoros Franc
1 Philippine Peso = 17.69912 North Korean Won
1 Philippine Peso = 21.59685 Korean Won
1 Philippine Peso = 0.00593 Kuwaiti Dinar
1 Philippine Peso = 0.01613 Cayman Islands Dollar
1 Philippine Peso = 6.50443 Kazakhstan Tenge
1 Philippine Peso = 163.16618 Lao Kip
1 Philippine Peso = 29.60669 Lebanese Pound
1 Philippine Peso = 3.02262 Sri Lanka Rupee
1 Philippine Peso = 2.44897 Liberian Dollar
1 Philippine Peso = 0.2763 Lesotho Loti
1 Philippine Peso = 0.05995 Lithuanian Lita
1 Philippine Peso = 0.0122 Latvian Lat
1 Philippine Peso = 0.02689 Libyan Dinar
1 Philippine Peso = 0.18578 Moroccan Dirham
1 Philippine Peso = 0.34307 Moldovan Leu
1 Philippine Peso = 1.02635 Macedonian Denar
1 Philippine Peso = 26.80433 Myanmar Kyat
1 Philippine Peso = 47.94494 Mongolian Tugrik
1 Philippine Peso = 0.15822 Macau Pataca
1 Philippine Peso = 6.90266 Mauritania Ougulya
1 Philippine Peso = 0.6647 Mauritius Rupee
1 Philippine Peso = 0.30619 Maldives Rufiyaa
1 Philippine Peso = 14.0885 Malawi Kwacha
1 Philippine Peso = 0.37348 Mexican Peso
1 Philippine Peso = 0.08155 Malaysian Ringgit
1 Philippine Peso = 0.27622 Namibian Dollar
1 Philippine Peso = 7.00098 Nigerian Naira
1 Philippine Peso = 0.60177 Nicaragua Cordoba
1 Philippine Peso = 0.16317 Norwegian Krone
1 Philippine Peso = 2.03638 Nepalese Rupee
1 Philippine Peso = 0.02891 New Zealand Dollar
1 Philippine Peso = 0.00756 Omani Rial
1 Philippine Peso = 0.01967 Panama Balboa
1 Philippine Peso = 0.06359 Peruvian Nuevo Sol
1 Philippine Peso = 0.06374 Papua New Guinea Kina
1 Philippine Peso = 1 Philippine Peso
1 Philippine Peso = 2.06568 Pakistani Rupee
1 Philippine Peso = 0.07087 Polish Zloty
1 Philippine Peso = 110.87513 Paraguayan Guarani
1 Philippine Peso = 0.07473 Qatar Rial
1 Philippine Peso = 0.07785 Romanian New Leu
1 Philippine Peso = 1.16841 Russian Rouble
1 Philippine Peso = 16.36755 Rwanda Franc
1 Philippine Peso = 0.07374 Saudi Arabian Riyal
1 Philippine Peso = 0.15449 Solomon Islands Dollar
1 Philippine Peso = 0.26735 Seychelles Rupee
1 Philippine Peso = 0.13097 Sudanese Pound
1 Philippine Peso = 0.16686 Swedish Krona
1 Philippine Peso = 0.0267 Singapore Dollar
1 Philippine Peso = 0.01486 St Helena Pound
1 Philippine Peso = 0.4367 Slovak Koruna
1 Philippine Peso = 149.85251 Sierra Leone Leone
1 Philippine Peso = 10.99312 Somali Shilling
1 Philippine Peso = 410.64307 Sao Tome Dobra
1 Philippine Peso = 0.17207 El Salvador Colon
1 Philippine Peso = 10.12743 Syrian Pound
1 Philippine Peso = 0.27624 Swaziland Lilageni
1 Philippine Peso = 0.64562 Thai Baht
1 Philippine Peso = 0.04905 Tunisian Dinar
1 Philippine Peso = 0.04547 Tongan paʻanga
1 Philippine Peso = 0.07723 Turkish Lira
1 Philippine Peso = 0.13037 Trinidad Tobago Dollar
1 Philippine Peso = 0.59133 Taiwan Dollar
1 Philippine Peso = 43.93314 Tanzanian Shilling
1 Philippine Peso = 0.51976 Ukraine Hryvnia
1 Philippine Peso = 71.28811 Ugandan Shilling
1 Philippine Peso = 0.01967 United States Dollar
1 Philippine Peso = 0.57699 Uruguayan New Peso
1 Philippine Peso = 158.89873 Uzbekistan Sum
1 Philippine Peso = 0.19617 Venezuelan Bolivar
1 Philippine Peso = 446.39136 Vietnam Dong
1 Philippine Peso = 2.10089 Vanuatu Vatu
1 Philippine Peso = 0.05108 Samoa Tala
1 Philippine Peso = 10.98368 CFA Franc (BEAC)
1 Philippine Peso = 0.0531 East Caribbean Dollar
1 Philippine Peso = 10.988 CFA Franc (BCEAO)
1 Philippine Peso = 1.98682 Pacific Franc
1 Philippine Peso = 4.91504 Yemen Riyal
1 Philippine Peso = 0.2763 South African Rand
1 Philippine Peso = 102.05507 Zambian Kwacha
1 Philippine Peso = 7.11701 Zimbabwe dollar

DAVID HOLMES ON THINGBOTS: The attacker infrastructure of the future

CYBERSPACE has attack surface that evolves as technology evolves. 

In 2016, massive Distributed Denial of Service (DDos) attacks were reported to be so brutalbecause the attackers found a new weapon, the Internet of Things (IoT). As early as July that year security experts from F5 Networks were predicting a massive attack. Sure enough in September of that year, the Mirai launched 3 of the largestDDoS attacks in history at Krebs,OVH and DynDNS. To understand why this assault is so overwhelming, it achieved a world record, hitting targets at 1.2 terabytes per second (Tbps) using compromised IoT devices—closed circuit, networked cameras.

IoT devices are not only available to the DDoS business because of its sheer number, they are also easily accessible, as they don’t require additional technology. A lot of these IoTs devices are cameras that do not even have security protocols thus saving attackers additional expenses. They require no social engineering attacks, email infection campaigns, exploit kits or fresh zero-days. 

Now the infrastructure has evolved even further with the development of “thingbots.”

I had a chance to learn more about thingbots from F5 Networks security evangelist David Holmes who was accompanied by Oscar Visaya, Country Manager for the Philippines.

In David’s first sit down with me, we chatted at length about “The Hunt for IoT devices” a well-written research that predicted the building of the disruptive MiraiI described earlier. Mirai’s disruption was well publicized, and the computer outages it caused were plenty. But even during then David was already telling me that more aggressive scanning activity was in the horizon.

Scanning is a way by which hacks and cybercriminals check on vulnerable computers and devices. Conversely, cybersecurity forces use the scanning activity to find out where the possible threat origins and actors come from.

IoT feeds into the Internet data, providing a gateway into systems and networks. 

It is common for these devices to have poor security standards such that their remote administration ports are publicly accessible and susceptible to brute force and dictionary attacks, the ports are “protected” with vendor default passwords, and they don’t have an anti-virus solution in place to prevent malware infections. 

Case in point was a particular Chinese made closed-circuit camera brandthat had1250 models vulnerable. An attacker can bypass authentication by providing an empty username and an empty password to gain access. This attack gained a surface of close to 600k cameras by June 2017.

Mirai malware and subsequent attacks using IoT compromises rose by a staggering 280 percent within just six months from January to June 2017, translating into increased uncertainty for enterprises and creating a breeding ground for attacks.

It is this breeding ground for attacks that worries Holmes and Visaya. 

And as they start profiling the attacker infrastructure of the future, they tell me just how bad things can get as IoT devices evolve into thingbots.

A thingbot—is a botnet that gathers independent connected objects or devices, or maybe a series of connected IoT devices that can be repurposed for an attack. They can betrained to do anything from surveillance to DDoS attacks.

The results of the Mirai attack are powerful but quiet thingbots like Persirai are doing the most damage. Persarai is a thingbot of cameras, over 600 thousand of these globally and growing.

But Holmes puts forward a most obvious attack landscape for Thingbots—connected cars and smart cities.  He completely agrees and warns on how the older smart cities will need some catching up to do versus smart cities just being constructed simply because anti-threat warriors have realized the problem.

And as Persiraimaybe setting the stage for future darknet infrastructure, I remind Holmes of the nearly 50 billion IoT devices by 2020. He suggested two possible solutions. 

“In my opinion every security thing that was built (since the start) was just band aids on giant wounds, band aids on band aids on band aids,” Holmes said when asked why the security problems seem to be the same but in different arenas and in different characters. These days the arena is IoT and botnets are the characters in the play. And as security updates, threats will continue to grow as hackers develop new ones based on disclosed vulnerabilities in IoT devices.

But there is a solution according to Holmes—Name Data Networking.

“Name data networking (NDN) tried to go back and fix everything. And it basically works like calling out to the network and the network assigning a cryptographically secure unique name or number for the device and the network will give the device the name and number and give it a key,” Holmes explains. 

“So from then on the device will need to sign on the network with the key it was provided, this solves many problems. You cannot join the network randomly for instance which is the easiest way to attack,” Holmes adds as he points out how large-scale projects could benefit from NDN.

“It is like the birth certificate of IoT devices,” Oscar Visaya, F5 Networks Country Manager for the Philippines. 

The second solution is legislation. 

Holmes referred to Internet of Things Cybersecurity Improvement Act of 2017, penned by Senators Mark Warner, Cory Gardner, Ron Wyden, and Steve Daines. In essence the law is aimed at addressing the market failure by establishing minimum security requirements for procurements of connected devices. This law can be adopted in the Philippines as part of the already rigorous Cybersecurity Law or drafted as a new law altogether.

What will the IoT Cybersecurity Improvement Act do to thwart thingbots?

It will hit it where it hurts most—at the vulnerability of IoT devices and will require simple yet effective solutions—devices must have no default credentials (so that infiltration cannot be built in), these must be able to patch (in order to update the firmware) and must have no known vulnerabilities (can be determined by testing and certification).

Cognizant of these growing future threats Holmes explains three activities that F5 Networks will utilize as part of the solutions it has that help secure the IoT space, especially in the arena of the connected car and the smart home or city.

The first involves Transport Layer Security (TLS) unwrapping and MQ Telemetry Transport (MQTT) load balancing for securing IoT data in transport. The processes first ensure that nothing is hidden in the delivery of data from IoT device to network, and second, in the case of the lightweight messaging protocol of MQTT, nothing is added.

The company has successfully implemented a Proof-of-Concept (POC) that involves the connected car and smart home. In these two implementations the use of an MQTT broker in the distribution of the needed information between the vehicle or smart home and the network. This assures no intrusions because of several levels of self-authentication. In the case of cars in particular MQTT brokers must process up to 1.3 million messages a second in order for it to respond in the “real time” setting.

F5 Networks has also set up a road map that includes CoAp or Constrained Application Protocol and a MQTT subscription routing to assure that both speed and safe delivery of data is done with no intrusion or disruption. CoApis a specialized Internet Application Protocol (IAp) for constrained devices.

With solutions like Big-IP that is an intelligent security framework that provides complete visibility allowing users to deploy and manage application services more easily. F5’s Big IP ensureconsistent services, a consolidated infrastructure, and cost reductions with a single management interface.

How much more will the threat landscape evolve?

“It will always try to catch up with the pace of technology,” Holmes replied. “But what I can guarantee you is, because we are watching it closely, it will not over come the paceof cybersecurity intelligence.”
No votes yet

Column of the Day

Fascinating history (1)

By PHILIP S. CHUA | November 23,2017
‘The physicians at that time did not even know that simple aspirin had any potential role in the prevention or treatment of heart attacks.’

Opinion of the Day

President Duterte remains popular

By NESTOR MATA | November 23, 2017
‘This is despite controversies in almost two years as President of the Philippines.’