February 22, 2018, 11:03 pm
Facebook iconTwitter iconYouTube iconGoogle+ icon
1 Philippine Peso = 0.07045 UAE Dirham
1 Philippine Peso = 2.04297 Albanian Lek
1 Philippine Peso = 0.03415 Neth Antilles Guilder
1 Philippine Peso = 0.38059 Argentine Peso
1 Philippine Peso = 0.02443 Australian Dollar
1 Philippine Peso = 0.03415 Aruba Florin
1 Philippine Peso = 0.03837 Barbados Dollar
1 Philippine Peso = 1.59409 Bangladesh Taka
1 Philippine Peso = 0.0304 Bulgarian Lev
1 Philippine Peso = 0.00723 Bahraini Dinar
1 Philippine Peso = 33.58872 Burundi Franc
1 Philippine Peso = 0.01918 Bermuda Dollar
1 Philippine Peso = 0.02533 Brunei Dollar
1 Philippine Peso = 0.13159 Bolivian Boliviano
1 Philippine Peso = 0.06235 Brazilian Real
1 Philippine Peso = 0.01918 Bahamian Dollar
1 Philippine Peso = 1.2325 Bhutan Ngultrum
1 Philippine Peso = 0.18295 Botswana Pula
1 Philippine Peso = 384.03989 Belarus Ruble
1 Philippine Peso = 0.03832 Belize Dollar
1 Philippine Peso = 0.02429 Canadian Dollar
1 Philippine Peso = 0.018 Swiss Franc
1 Philippine Peso = 11.42605 Chilean Peso
1 Philippine Peso = 0.12152 Chinese Yuan
1 Philippine Peso = 54.88202 Colombian Peso
1 Philippine Peso = 10.87186 Costa Rica Colon
1 Philippine Peso = 0.01918 Cuban Peso
1 Philippine Peso = 1.71801 Cape Verde Escudo
1 Philippine Peso = 0.39493 Czech Koruna
1 Philippine Peso = 3.3921 Djibouti Franc
1 Philippine Peso = 0.11601 Danish Krone
1 Philippine Peso = 0.94226 Dominican Peso
1 Philippine Peso = 2.17652 Algerian Dinar
1 Philippine Peso = 0.24369 Estonian Kroon
1 Philippine Peso = 0.33858 Egyptian Pound
1 Philippine Peso = 0.52177 Ethiopian Birr
1 Philippine Peso = 0.01557 Euro
1 Philippine Peso = 0.03825 Fiji Dollar
1 Philippine Peso = 0.01371 Falkland Islands Pound
1 Philippine Peso = 0.01377 British Pound
1 Philippine Peso = 0.08533 Ghanaian Cedi
1 Philippine Peso = 0.89967 Gambian Dalasi
1 Philippine Peso = 172.74122 Guinea Franc
1 Philippine Peso = 0.14073 Guatemala Quetzal
1 Philippine Peso = 3.9296 Guyana Dollar
1 Philippine Peso = 0.15011 Hong Kong Dollar
1 Philippine Peso = 0.45024 Honduras Lempira
1 Philippine Peso = 0.11584 Croatian Kuna
1 Philippine Peso = 1.216 Haiti Gourde
1 Philippine Peso = 4.85824 Hungarian Forint
1 Philippine Peso = 261.23153 Indonesian Rupiah
1 Philippine Peso = 0.06714 Israeli Shekel
1 Philippine Peso = 1.24329 Indian Rupee
1 Philippine Peso = 22.71245 Iraqi Dinar
1 Philippine Peso = 713.12103 Iran Rial
1 Philippine Peso = 1.9248 Iceland Krona
1 Philippine Peso = 2.40936 Jamaican Dollar
1 Philippine Peso = 0.01359 Jordanian Dinar
1 Philippine Peso = 2.0619 Japanese Yen
1 Philippine Peso = 1.9413 Kenyan Shilling
1 Philippine Peso = 1.3061 Kyrgyzstan Som
1 Philippine Peso = 77.09572 Cambodia Riel
1 Philippine Peso = 7.62709 Comoros Franc
1 Philippine Peso = 17.26453 North Korean Won
1 Philippine Peso = 20.55496 Korean Won
1 Philippine Peso = 0.00575 Kuwaiti Dinar
1 Philippine Peso = 0.01573 Cayman Islands Dollar
1 Philippine Peso = 6.12565 Kazakhstan Tenge
1 Philippine Peso = 158.52676 Lao Kip
1 Philippine Peso = 28.96605 Lebanese Pound
1 Philippine Peso = 2.97621 Sri Lanka Rupee
1 Philippine Peso = 2.45904 Liberian Dollar
1 Philippine Peso = 0.22463 Lesotho Loti
1 Philippine Peso = 0.05848 Lithuanian Lita
1 Philippine Peso = 0.0119 Latvian Lat
1 Philippine Peso = 0.02544 Libyan Dinar
1 Philippine Peso = 0.17647 Moroccan Dirham
1 Philippine Peso = 0.31853 Moldovan Leu
1 Philippine Peso = 0.95396 Macedonian Denar
1 Philippine Peso = 25.47477 Myanmar Kyat
1 Philippine Peso = 45.90946 Mongolian Tugrik
1 Philippine Peso = 0.15451 Macau Pataca
1 Philippine Peso = 6.71398 Mauritania Ougulya
1 Philippine Peso = 0.62536 Mauritius Rupee
1 Philippine Peso = 0.29868 Maldives Rufiyaa
1 Philippine Peso = 13.76098 Malawi Kwacha
1 Philippine Peso = 0.35911 Mexican Peso
1 Philippine Peso = 0.07494 Malaysian Ringgit
1 Philippine Peso = 0.22327 Namibian Dollar
1 Philippine Peso = 6.88663 Nigerian Naira
1 Philippine Peso = 0.59477 Nicaragua Cordoba
1 Philippine Peso = 0.15035 Norwegian Krone
1 Philippine Peso = 1.98703 Nepalese Rupee
1 Philippine Peso = 0.02611 New Zealand Dollar
1 Philippine Peso = 0.00738 Omani Rial
1 Philippine Peso = 0.01918 Panama Balboa
1 Philippine Peso = 0.06229 Peruvian Nuevo Sol
1 Philippine Peso = 0.0629 Papua New Guinea Kina
1 Philippine Peso = 1 Philippine Peso
1 Philippine Peso = 2.11989 Pakistani Rupee
1 Philippine Peso = 0.06472 Polish Zloty
1 Philippine Peso = 106.82716 Paraguayan Guarani
1 Philippine Peso = 0.06982 Qatar Rial
1 Philippine Peso = 0.07256 Romanian New Leu
1 Philippine Peso = 1.0862 Russian Rouble
1 Philippine Peso = 16.12737 Rwanda Franc
1 Philippine Peso = 0.07193 Saudi Arabian Riyal
1 Philippine Peso = 0.14866 Solomon Islands Dollar
1 Philippine Peso = 0.2582 Seychelles Rupee
1 Philippine Peso = 0.34501 Sudanese Pound
1 Philippine Peso = 0.15536 Swedish Krona
1 Philippine Peso = 0.02534 Singapore Dollar
1 Philippine Peso = 0.01372 St Helena Pound
1 Philippine Peso = 0.42597 Slovak Koruna
1 Philippine Peso = 146.36485 Sierra Leone Leone
1 Philippine Peso = 10.78074 Somali Shilling
1 Philippine Peso = 381.75523 Sao Tome Dobra
1 Philippine Peso = 0.16785 El Salvador Colon
1 Philippine Peso = 9.87876 Syrian Pound
1 Philippine Peso = 0.22325 Swaziland Lilageni
1 Philippine Peso = 0.60368 Thai Baht
1 Philippine Peso = 0.04586 Tunisian Dinar
1 Philippine Peso = 0.0428 Tongan paʻanga
1 Philippine Peso = 0.07262 Turkish Lira
1 Philippine Peso = 0.12717 Trinidad Tobago Dollar
1 Philippine Peso = 0.55966 Taiwan Dollar
1 Philippine Peso = 43.06541 Tanzanian Shilling
1 Philippine Peso = 0.51746 Ukraine Hryvnia
1 Philippine Peso = 69.67197 Ugandan Shilling
1 Philippine Peso = 0.01918 United States Dollar
1 Philippine Peso = 0.54556 Uruguayan New Peso
1 Philippine Peso = 156.62766 Uzbekistan Sum
1 Philippine Peso = 478.3426 Venezuelan Bolivar
1 Philippine Peso = 435.71839 Vietnam Dong
1 Philippine Peso = 1.98465 Vanuatu Vatu
1 Philippine Peso = 0.04817 Samoa Tala
1 Philippine Peso = 10.20986 CFA Franc (BEAC)
1 Philippine Peso = 0.05179 East Caribbean Dollar
1 Philippine Peso = 10.20986 CFA Franc (BCEAO)
1 Philippine Peso = 1.85248 Pacific Franc
1 Philippine Peso = 4.79474 Yemen Riyal
1 Philippine Peso = 0.22325 South African Rand
1 Philippine Peso = 99.5492 Zambian Kwacha
1 Philippine Peso = 6.94226 Zimbabwe dollar

DAVID HOLMES ON THINGBOTS: The attacker infrastructure of the future

CYBERSPACE has attack surface that evolves as technology evolves. 

In 2016, massive Distributed Denial of Service (DDos) attacks were reported to be so brutalbecause the attackers found a new weapon, the Internet of Things (IoT). As early as July that year security experts from F5 Networks were predicting a massive attack. Sure enough in September of that year, the Mirai launched 3 of the largestDDoS attacks in history at Krebs,OVH and DynDNS. To understand why this assault is so overwhelming, it achieved a world record, hitting targets at 1.2 terabytes per second (Tbps) using compromised IoT devices—closed circuit, networked cameras.

IoT devices are not only available to the DDoS business because of its sheer number, they are also easily accessible, as they don’t require additional technology. A lot of these IoTs devices are cameras that do not even have security protocols thus saving attackers additional expenses. They require no social engineering attacks, email infection campaigns, exploit kits or fresh zero-days. 

Now the infrastructure has evolved even further with the development of “thingbots.”

I had a chance to learn more about thingbots from F5 Networks security evangelist David Holmes who was accompanied by Oscar Visaya, Country Manager for the Philippines.

In David’s first sit down with me, we chatted at length about “The Hunt for IoT devices” a well-written research that predicted the building of the disruptive MiraiI described earlier. Mirai’s disruption was well publicized, and the computer outages it caused were plenty. But even during then David was already telling me that more aggressive scanning activity was in the horizon.

Scanning is a way by which hacks and cybercriminals check on vulnerable computers and devices. Conversely, cybersecurity forces use the scanning activity to find out where the possible threat origins and actors come from.

IoT feeds into the Internet data, providing a gateway into systems and networks. 

It is common for these devices to have poor security standards such that their remote administration ports are publicly accessible and susceptible to brute force and dictionary attacks, the ports are “protected” with vendor default passwords, and they don’t have an anti-virus solution in place to prevent malware infections. 

Case in point was a particular Chinese made closed-circuit camera brandthat had1250 models vulnerable. An attacker can bypass authentication by providing an empty username and an empty password to gain access. This attack gained a surface of close to 600k cameras by June 2017.

Mirai malware and subsequent attacks using IoT compromises rose by a staggering 280 percent within just six months from January to June 2017, translating into increased uncertainty for enterprises and creating a breeding ground for attacks.

It is this breeding ground for attacks that worries Holmes and Visaya. 

And as they start profiling the attacker infrastructure of the future, they tell me just how bad things can get as IoT devices evolve into thingbots.

A thingbot—is a botnet that gathers independent connected objects or devices, or maybe a series of connected IoT devices that can be repurposed for an attack. They can betrained to do anything from surveillance to DDoS attacks.

The results of the Mirai attack are powerful but quiet thingbots like Persirai are doing the most damage. Persarai is a thingbot of cameras, over 600 thousand of these globally and growing.

But Holmes puts forward a most obvious attack landscape for Thingbots—connected cars and smart cities.  He completely agrees and warns on how the older smart cities will need some catching up to do versus smart cities just being constructed simply because anti-threat warriors have realized the problem.

And as Persiraimaybe setting the stage for future darknet infrastructure, I remind Holmes of the nearly 50 billion IoT devices by 2020. He suggested two possible solutions. 

“In my opinion every security thing that was built (since the start) was just band aids on giant wounds, band aids on band aids on band aids,” Holmes said when asked why the security problems seem to be the same but in different arenas and in different characters. These days the arena is IoT and botnets are the characters in the play. And as security updates, threats will continue to grow as hackers develop new ones based on disclosed vulnerabilities in IoT devices.

But there is a solution according to Holmes—Name Data Networking.

“Name data networking (NDN) tried to go back and fix everything. And it basically works like calling out to the network and the network assigning a cryptographically secure unique name or number for the device and the network will give the device the name and number and give it a key,” Holmes explains. 

“So from then on the device will need to sign on the network with the key it was provided, this solves many problems. You cannot join the network randomly for instance which is the easiest way to attack,” Holmes adds as he points out how large-scale projects could benefit from NDN.

“It is like the birth certificate of IoT devices,” Oscar Visaya, F5 Networks Country Manager for the Philippines. 

The second solution is legislation. 

Holmes referred to Internet of Things Cybersecurity Improvement Act of 2017, penned by Senators Mark Warner, Cory Gardner, Ron Wyden, and Steve Daines. In essence the law is aimed at addressing the market failure by establishing minimum security requirements for procurements of connected devices. This law can be adopted in the Philippines as part of the already rigorous Cybersecurity Law or drafted as a new law altogether.

What will the IoT Cybersecurity Improvement Act do to thwart thingbots?

It will hit it where it hurts most—at the vulnerability of IoT devices and will require simple yet effective solutions—devices must have no default credentials (so that infiltration cannot be built in), these must be able to patch (in order to update the firmware) and must have no known vulnerabilities (can be determined by testing and certification).

Cognizant of these growing future threats Holmes explains three activities that F5 Networks will utilize as part of the solutions it has that help secure the IoT space, especially in the arena of the connected car and the smart home or city.

The first involves Transport Layer Security (TLS) unwrapping and MQ Telemetry Transport (MQTT) load balancing for securing IoT data in transport. The processes first ensure that nothing is hidden in the delivery of data from IoT device to network, and second, in the case of the lightweight messaging protocol of MQTT, nothing is added.

The company has successfully implemented a Proof-of-Concept (POC) that involves the connected car and smart home. In these two implementations the use of an MQTT broker in the distribution of the needed information between the vehicle or smart home and the network. This assures no intrusions because of several levels of self-authentication. In the case of cars in particular MQTT brokers must process up to 1.3 million messages a second in order for it to respond in the “real time” setting.

F5 Networks has also set up a road map that includes CoAp or Constrained Application Protocol and a MQTT subscription routing to assure that both speed and safe delivery of data is done with no intrusion or disruption. CoApis a specialized Internet Application Protocol (IAp) for constrained devices.

With solutions like Big-IP that is an intelligent security framework that provides complete visibility allowing users to deploy and manage application services more easily. F5’s Big IP ensureconsistent services, a consolidated infrastructure, and cost reductions with a single management interface.

How much more will the threat landscape evolve?

“It will always try to catch up with the pace of technology,” Holmes replied. “But what I can guarantee you is, because we are watching it closely, it will not over come the paceof cybersecurity intelligence.”
Rating: 
No votes yet

Column of the Day

Rappler’s continuing saga

By DAHLI ASPILLERA | February 23,2018
‘Without a court TRO against the SEC ruling, Rappler’s accreditation in Malacañang was considered revoked.” – Senior Deputy Executive Secretary Menardo Guevarra.’

Opinion of the Day

Duterte does not understand media’s role in a democracy

By ELLEN TORDESILLAS | February 23, 2018
‘This is funny if it didn’t violate the constitutional guarantee of freedom of the press.’