European Cyber Week à Rennes, day three

My key points for the last day of the C&ESAR conferences:

• The conference I enjoyed the most was "une autre vision de lq Cyber Threat Intelligence (CTI) by Airbus Cybersecurity. The motive is simply the reasoning behind the threat model and the cyberdefense strategy they showed and the during the presentation. 
• Regarding the threat model, covers all the steps from motivation to perform harm, compromising the target and exploiting the vulnerability.
• About the cyberdefense strategy, covered a complete approach with:
• Strategy: administrative decisions on the defense.
• Conception: use the imagination! Architects propose a solution to the security problems.
• Tactic: the defense. How are we going to defend? Made by the security engineers. How to correlate?
• Operation: BAU. SoC, CSIRT. Technical formation to personnel.  
• This gave me a lot to think about, because having a clear threat model allows to to have a vision of how to check an architecture for weak links and possible solutions to those potential problems. At some point, we would like to have granularity of the (virtual) network functions in order to have a flexible service composition and simple lightweight functions firing up when necessary. But the problem is the multiplication of the points of failure that are created. 
• An well, securing all those points of failures have costs in terms of money, processing time, memory, delay and latency... It is a trade off with the value of what I want to protect. What is the justification for such an investment?

The afternoon session was developed in Secure-IC. The topic was about the business of digital security. The subject was a little bit more administrative to my taste (or to my interest). Some isolated comments:

• Europe has no representative in the top 10 industries in the world: first 8 are USA, last 2 of the top 10 are Chinese.
• It is a shame that all is shaped by politics, being technology also affected by this.
• 90% of advertisement in the world is captured by Google and Facebook.
• Among the technical priorities in DGA plan, they want:
• Evaluation and orientation of COTS technologies.
• Improve architecture and the resilience of large systems (ships, aircraft…) taking into account the operational constraints. 
• LOL, this sounds like they are sharing some of the functional needs of 5G along with its enabling technologies. It is a fact that SDN and NFV would help to achieve these requirements. I am imagining right now network slices for ships, aircraft, hospitals, smart cities. In fact, as the speaker said, a ship, for example, is like a smart city! has its own energy source, water supply control, temperature control, CCTV, the crew.. a small scale city.

So far, I have more ideas, more questions, more reading to do and so much to learn; got to keep going.