APT-in-Doraemon-movie-Nobitas-treasure-island-eng

Explaining "Advanced Targeted Threat" with Doraemon movie "Nobita's Treasure Island"

Transcript

1. ADVANCED PERSISTENT THREAT
   IN DORAEMON MOVIE
   “NOBITA’S TREASURE ISLAND”
   @MC_SEC_KB
   

   View Slide

2. CONTENTS
   1. Replay
   2. Explanation from the viewpoint of security
   3. Conclusion
   

   View Slide

3. 1. REPLAY
   

   View Slide

4. Gian & Suneo tried to stop the opponents…
   Opponent2:
   Swordmaster
   Opponent1:
   Gunmaster using 2guns,and stretching arms.
   

   View Slide

5. They could not move because the opponent targeted with the gun.
   But they found Doraemon’s secret tool in their foot.
   Becoming captain hat：
   If one wears this hat, he/she can…
   1 : change the scenery of all people on the same ship into Caribbean style.（Advanced Reality tool）
   2 : have the strongest privilege on the ship and make all people on the same ship obey to him/her.
   （Privilege elevation tool）
   

   View Slide

6. Dive into the sea to avoid the gun.
   

   View Slide

7. Dive to inside space of the gun’s range.
   

   View Slide

8. Attack from the air…
   

   View Slide

9. Cut !
   

   View Slide

10. Ship wrecked, and Suneo was thrown into the sea, but…
    

    View Slide

11. Gian wearing the hat landed on the opponents’ ship.
    

    View Slide

12. He used the power of the tool, it means that…
    The captain's
    command is absolute !
    

    View Slide

13. Having the strongest privilege on the ship and make all people
    on the same ship obey to him.（Privilege elevation tool）
    アイアイサー！
    Aye, aye, sir! The captain's
    command is absolute !
    

    View Slide

14. Gian and Suneo suppressed the opponents’ ship.
    

    View Slide

15. 2. EXPLANATION FROM THE VIEWPOINT OF SECURITY
    Explanation from the viewpoint of
    security is written in this box.
    

    View Slide

16. Network protection with Firewall :
    Blocking unecessary port .
    Gian & Suneo tried to stop the opponents…
    

    View Slide

17. Evasion of Firewalls:
    Diving into the target with commonly used ports,
    e.g.http/https/ftp/smtp/DNS and so on.
    Dive into the sea to avoid the gun.
    

    View Slide

18. Dive to inside space of the gun’s range.
    Evasion of Firewalls:
    Diving into the target with commonly used ports,
    e.g.http/https/ftp/smtp/DNS and so on.
    

    View Slide

19. They could avoided firewalls
    and reached to the target.
    Attack from the air…
    

    View Slide

20. The target reacted to the phishing mail…
    Cut !
    

    View Slide

21. “I opened the file, but I don’t know about it.”
    The target deleted the phising mail, but…
    Ship wrecked, and Suneo was thrown into the sea, but…
    

    View Slide

22. At the same time, more powerful and more
    evil something was downloaded…
    To tell the truth, this is just a decoy.
    Gian wearing the hat landed on the opponents’ ship.
    

    View Slide

23. It commands the privilege elevation on the system.
    He used the power of the tool, it means that…
    The captain's
    command is absolute !
    

    View Slide

24. アイアイサー！
    Having the strongest privilege on the ship and make all people
    on the same ship obey to him.（Privilege elevation tool）
    Aye, aye, sir! The captain's
    command is absolute !
    It seized the root/admin privilege on the system.
    

    View Slide

25. Malware hijacked the system
    Gian and Suneo suppressed the opponents’ ship.
    

    View Slide

26. ３. CONCLUSION
    

    View Slide

27. Dad, what is “Advanced Persistent Threat” ?
    

    View Slide

28. That’s what Gian & Suneo did in
    “Nobita’s Treasure Island”
    Dad, what is “Advanced Persistent Threat” ?
    

    View Slide

29. You can explain APT as easily as this !
    That’s what Gian & Suneo did in
    “Nobita’s Treasure Island”
    Dad, what is “Advanced Persistent Threat” ?
    

    View Slide