Upgrade to Pro — share decks privately, control downloads, hide ads and more …

APT-in-Doraemon-movie-Nobitas-treasure-island-eng

 APT-in-Doraemon-movie-Nobitas-treasure-island-eng

Explaining "Advanced Targeted Threat" with Doraemon movie "Nobita's Treasure Island"

ぼうさん

April 21, 2019
Tweet

More Decks by ぼうさん

Other Decks in Technology

Transcript

  1. ADVANCED PERSISTENT THREAT
    IN DORAEMON MOVIE
    “NOBITA’S TREASURE ISLAND”
    @MC_SEC_KB

    View Slide

  2. CONTENTS
    1. Replay
    2. Explanation from the viewpoint of security
    3. Conclusion

    View Slide

  3. 1. REPLAY

    View Slide

  4. Gian & Suneo tried to stop the opponents…
    Opponent2:
    Swordmaster
    Opponent1:
    Gunmaster using 2guns,and stretching arms.

    View Slide

  5. They could not move because the opponent targeted with the gun.
    But they found Doraemon’s secret tool in their foot.
    Becoming captain hat:
    If one wears this hat, he/she can…
    1 : change the scenery of all people on the same ship into Caribbean style.(Advanced Reality tool)
    2 : have the strongest privilege on the ship and make all people on the same ship obey to him/her.
    (Privilege elevation tool)

    View Slide

  6. Dive into the sea to avoid the gun.

    View Slide

  7. Dive to inside space of the gun’s range.

    View Slide

  8. Attack from the air…

    View Slide

  9. Cut !

    View Slide

  10. Ship wrecked, and Suneo was thrown into the sea, but…

    View Slide

  11. Gian wearing the hat landed on the opponents’ ship.

    View Slide

  12. He used the power of the tool, it means that…
    The captain's
    command is absolute !

    View Slide

  13. Having the strongest privilege on the ship and make all people
    on the same ship obey to him.(Privilege elevation tool)
    アイアイサー!
    Aye, aye, sir! The captain's
    command is absolute !

    View Slide

  14. Gian and Suneo suppressed the opponents’ ship.

    View Slide

  15. 2. EXPLANATION FROM THE VIEWPOINT OF SECURITY
    Explanation from the viewpoint of
    security is written in this box.

    View Slide

  16. Network protection with Firewall :
    Blocking unecessary port .
    Gian & Suneo tried to stop the opponents…

    View Slide

  17. Evasion of Firewalls:
    Diving into the target with commonly used ports,
    e.g.http/https/ftp/smtp/DNS and so on.
    Dive into the sea to avoid the gun.

    View Slide

  18. Dive to inside space of the gun’s range.
    Evasion of Firewalls:
    Diving into the target with commonly used ports,
    e.g.http/https/ftp/smtp/DNS and so on.

    View Slide

  19. They could avoided firewalls
    and reached to the target.
    Attack from the air…

    View Slide

  20. The target reacted to the phishing mail…
    Cut !

    View Slide

  21. “I opened the file, but I don’t know about it.”
    The target deleted the phising mail, but…
    Ship wrecked, and Suneo was thrown into the sea, but…

    View Slide

  22. At the same time, more powerful and more
    evil something was downloaded…
    To tell the truth, this is just a decoy.
    Gian wearing the hat landed on the opponents’ ship.

    View Slide

  23. It commands the privilege elevation on the system.
    He used the power of the tool, it means that…
    The captain's
    command is absolute !

    View Slide

  24. アイアイサー!
    Having the strongest privilege on the ship and make all people
    on the same ship obey to him.(Privilege elevation tool)
    Aye, aye, sir! The captain's
    command is absolute !
    It seized the root/admin privilege on the system.

    View Slide

  25. Malware hijacked the system
    Gian and Suneo suppressed the opponents’ ship.

    View Slide

  26. 3. CONCLUSION

    View Slide

  27. Dad, what is “Advanced Persistent Threat” ?

    View Slide

  28. That’s what Gian & Suneo did in
    “Nobita’s Treasure Island”
    Dad, what is “Advanced Persistent Threat” ?

    View Slide

  29. You can explain APT as easily as this !
    That’s what Gian & Suneo did in
    “Nobita’s Treasure Island”
    Dad, what is “Advanced Persistent Threat” ?

    View Slide