Participation in conferences and webinars as a speaker:
CyberGOV
An event dedicated to raising the level of cybersecurity in public sector institutions
Is the public sector fighting a fair fight?
The problems and challenges faced by the public sector in the field of cybersecurity were discussed. The speaker compares the potential of state institutions with well-organized cybercriminal groups, highlighting limitations in staffing, budget, and the lack of tools and procedures. The presentation includes real examples of attacks, such as the use of unusual protocols, the masking of popular RDP attacks, and abuses resulting from incorrect DNS configuration, emphasizing the importance of deep packet inspection and security reconfiguration. The presentation also draws attention to the key role of the chain of custody in the proper handling of digital evidence. Issues related to false alarms, the practical limitations of AI/ML/SOAR tools, and other factors affecting the operational effectiveness of teams responsible for fighting cybercrime are also discussed.
