01-03 day two April 2019 BROUGHT BY
Her Excellency Dr. Aisha Bint Butti Bin Bishr officially inaugurates GISEC
H
er Excellency Dr Aisha Bint Butti Bin Bishr, Director General of Smart Dubai, officially opened the Gulf Information Security Expo and Conference (GISEC) 2019 – the largest cybersecurity event in the Middle East, Africa and South Asia, running April 1-3 at Dubai World Trade Centre (DWTC). Supported by Dubai Electronic Security Center, Dubai Police and Smart Dubai, the annual cybersecurity meet aims to unravel the complex web of cyber security, attracting an audience of industry experts and business leaders – with special appearances from some of the world’s greatest ever hackers, on-hand to guide businesses on where their systems
could be susceptible to rogue attacks. It is co-located alongside the Internet of Things Expo (IoTX) and the Future Blockchain Summit, the latter of which returns for its second year. Opening the event, Her Excellency took a tour of the GISEC show floor, where more than 170 companies from over 86 countries are showcasing their latest products and services that meet the growing demands for cybersecurity solutions in the region and beyond. The delegation stopped at the stands of various exhibitors and government entities, including Dubai Electronic Security Center, Dubai Police, Nedaa, as well as Spire, Huawei, Proofpoint, SAP,
Carbon Black and Crowdstrike. Trixie LohMirmand, Senior Vice President, Events & Exhibitions Management, Dubai World Trade Centre, said: “Cybersecurity is not a new phenomenon, but it has become an increasingly crucial topic for organisations around the world. As data breaches and cyber security attacks are keeping organisations and governments on their toes, GISEC offers to take a deep dive into both sides of the equation preparing businesses and governments alike for this new era of connectivity and data. Together with IoTX and Future Blockchain Summit, GISEC and Dubai World Trade Centre’s Future Technology Week will shed light on the smart technologies that are creat-
ing intelligent cities and on how Blockchain is changing the way we interact with one another.” Headlined by two of the world’s most famous hackers, Kevin Mitnick – once on the FBI’s Most Wanted list after hacking more than 40 major corporations – and Jamie Woodruff – Europe’s top ethical hacker renowned for hacking Kim Kardashian’s website, as well as that of Google, Microsoft, Facebook and Twitter – GISEC’s debut Dark Stage will be centre-point for groundbreaking hacking expertise. The Dark Stage is a first ever for Dubai, where an open forum will take a deep dive into the dark web and perform exciting live hacks as way of exposing potential threats this new platform poses.
03
GISEC welcomes headline speakers Kevin Mitnick and Jamie Woodruff As the UAE continues to lead the way as MENA’s foremost technology hub, GISEC – the region’s largest cybersecurity event – provides ample opportunity for web security experts from around the world to gather and discuss the latest trends within the increasingly crucial field. Headlined by two of the world’s most famous hackers, Kevin Mitnick – once on the FBI’s Most Wanted list after hacking more than 40 major corporations – and Jamie Woodruff – Europe’s top ethical hacker renowned for hacking Kim Kardashian’s website, as well as that of Google, Microsoft, Facebook and Twitter – at GISEC will showcase their hacking capabilities and alert local businesses to where they could be making themselves susceptible to attack. With more than 200 confirmed speakers and 170 exhibiting companies descending on the event from 86 countries, GISEC, the event runs alongside both IoTX and the Future Blockchain Summit, providing welcome opportunities for individuals, business-leaders, vendors, channel partners and subject-matter-experts to get the very latest knowledge on everything related to cyber security and digital tech. Presented in simplified ways, Mitnick – and Jamie Woodruff – will lead GISEC’s Dark Stage in offering first-hand accounts and demonstrations of how easy it is for hackers to penetrate the most hidden of system vulnerabilities – hacks that could potentially compromise the data of millions of users worldwide and bring businesses to their knees.
DESC Highlights Latest Developments and Practices at GISEC Dubai Electronic Security Center (DESC) has participated as the official government cyber security partner for the second consec-
utive year at the Gulf Information Security Expo and Conference (GISEC), the largest annual information security event in the
Middle East, which brings together cybersecurity experts from around the world. DESC will highlight the latest developments and
practices in cybersecurity as well as initiatives geared at making Dubai’s cyber space the most secure in the world. DESC is exhibiting a password interactive screen which is geared to discovering just how secure individuals are online by testing the strength of their passwords. Visitors will also receive tips on improving their password strength to enhance their online security. “These days the volume of cyberattacks are getting more sophisticated and disruptive as they pose a great risk to the growth of the digital economy and smart infrastructures. Each year at GISEC, we outline the latest cyber security practices correlating these with emerging technologies, to scale up safety and, in turn establish trust to our cyberspace. Our main priority is to protect Dubai digitally against cyber threats by securing their privacy and data, and safeguard Dubai’s digital wealth,” noted Amer Sharaf, Director of Compliance, Support and Alliances at DESC. Sharaf added, “DESC is perpetually working to implement the Dubai Cyber Security Strategy. As Dubai is moving deeper into its digital transformation, we aim to create a society that is highly aware of risks and able to stay vigilant against cyber-attacks.”
04
Keynotes at IOTX Stage The development of the Internet of Things or IoT is increasing the attack surface of businesses and institutions. Hence IoT cannot progress unless there is trust in the viability of the underlying platforms. “Without trust IoT will not flourish and IoT is the future,” stated Jorge Sebastiao, CISSP CTO Ecosystem, at Huawei. Globally, Huawei is using 20 open labs to develop innovation in the area of IoT and is also partnering globally to make progress in IoT. These partnerships are giving Huawei the confidence to test the capability of all IoT devices. Sebastiao points out that IoT implies that every device in existence will have an IP address. The principal use cases for IoT on a global scale are smart grids, smart video, smart cars, smart parking, energy management, amongst others. This combination of digital use cases is driving the development of mixed reality also called augmented reality. Roland Ristig, IoT Principal Global Expansion Manager at Vodafone, pointed out that as per surveys, 35% of companies are using IoT, up from last year’s 29%. A round table discussed the benefits of monetizing data generated through IoT. Participants pointed that while data generated through IoT may not have a direct com-
JORGE SEBASTIAO, CISSP CTO ECOSYSTEM AT HUAWEI. ROLAND RISTIG, IOT PRINCIPAL GLOBAL EXPANSION MANAGER AT VODAFONE. ROUNDTABLE ON IOT DATA WITH IAN KHAN AS THE MODERATOR; JOSEPH BRADLEY AT CISCO; AKIN ADAMSON AT RICARDO ENERGY AND ENVIRONMENT; MOHAMMAD IBRAHIM AT SAP; AND THOMAS HANNAPI AT VODAFONE.
mercial value in terms of revenue, it was up to the end user organization to monetize the data by improving productivity and efficiency of legacy processes. This would help them to generate a commercial return from their invest-
ment in IoT solutions. The panel consisted of Ian Khan as the moderator; Joseph Bradley at Cisco; Akin Adamson at Ricardo Energy and Environment; Mohammad Ibrahim at SAP, and Thomas Hannapi at Vodafone.
Arrival of singularity, global machines overtake human compute By the year 2035 onwards, humanity will reach a tipping point, where the entire global computing capability embedded in machines and devices will begin to exceed the human capability. At this stage and from this point of time onwards, there will be no doubt about who is superior in terms of computing capability. This point of time is called the singularity, according to Ian Khan, Technology Futurist. Speaking at the opening keynote of the IOTX Stage Conference, collocated with Gisec 2019, Khan pointed out that singularity raises the question of whether, humanity will become slaves to machines, after singularity. Human beings are amazing and are constantly changing, moving toward sustainable happiness, in the hope that tomorrow will be better. It is easier to cope with change, by embracing change and accepting that change is a constant. Khan points out that technologies are growing at an exponential rate. This means that the time duration between each significant disruptive technology change is getting shorter and shorter. “Exponential innovation is taking us where we have not gone before,” said Khan. He presented the smart toilet as an example of how the convergence of technologies can lead to unpredictable innovations. The smart toilet continuously tracks the health of users based on their usage of the toilet and is connected to both a physician and a laboratory. The results of such continuous testing can predict and alert the user much before they fall sick about the need for medication or to change their diet. Khan points out that an innovation like this can disrupt the entire eco system of practicing doctors in clinics and the supporting eco system of testing laboratories. Technology is made complicated by technologists and Khan feels the arrival of future can be simplified and explained. The future is being defined by seven dynamic forces. These include algorithms, automation, convergence, experiences, mobile, tokens, and trust. Some of the latest technologies are built on these foundations. For example, blockchain is built on a layer of trust; artificial intelligence is built on the understanding of generating freedom; IoT is built on the availability of connectivity; and quantum computing on the requirement of faster and faster speeds. Hence the challenge remains of how to succeed in the future that is being driven by exponential innovation? Khan stressed that the future is always about purpose, and that all innovation is being driven by a purpose and is not aimless. Along this journey into the future, accountability, partnerships, and empowering others are key enablers as well.
IAN KHAN, TECHNOLOGY FUTURIST
OFFICIAL GOVERNMENT CYBER SECURITY PARTNER
OFFICIALLY SUPPORTED BY
THE WORLD'S MOST FAMOUS HACKER AND EX-#1 ON THE FBI'S MOST WANTED LIST TO HACK LIVE IN DUBAI See the jaw-dropping live hack by KEVIN MITNICK for as little as AED 1,999. #GISEC www.gisec.ae I gisec@dwtc.com I +971 4 308 6805
OFFICIALLY SUPPORTED BY
STRATEGIC PARTNERS
GOLD SPONSORS
IOT PARTNER
POWERED BY
CO-LOCATED WITH
PLATINUM SPONSOR
ORGANISED BY
DIAMOND SPONSOR
06
Robust Security for Telecom
AKIB SAYYED, MANAGING DIRECTOR, MATRIX SHELL
Matrix Shell is a predominant provider of Telecom Security and also has a fair share of services in IoT and Automation space as well. The company’s Network Security Assessment helps in to take preventative measures to safeguard the infrastructure from internal/external unauthorized access, misuse, malfunction, modification, destruction, or improper disclosure. The Matrix Shell objective is to offer ‘Robust Cyber Security Solutions to our clients in the fast-evolving telecom , IoT, Automotive and cybersecurity domain. The continuous threat of cybersecurity affects the businesses and identities of customers; hence we have developed our Robust Cyber Security Solutions (RCSS) proprietary process to protect them. “We work with the leading operators like Etisalat, Ooredoo, etc.” says Akib Sayyed, MD of Matrix Shell “We are launching our homegrown cloud based solution that would enable the telecom
operators to perform all their signaling system in just a press of a button. We are the only company in India and Middle East presently to have developed all services in-house that comprise. The company is headquartered in India and currently looking to opening an office in Dubai to enhance their Middle East operations. One of the key focus of Matrix Shell at GISEC is its SS7 & Sigtran Security Assessment portfolio. “We are bringing forth a cloud scanner that will take the burden off the shoulder of the telecom operators in terms of manual testing and permission settlements in just a click of a button. Also, in terms of security assessment, we provide detailed documentation for the entire penetration attempt vectors, detailing the types of tests that were attempted, the status of their success or failure, any discovered issues and the resultant risks (sorted by priority), and suggested remediation efforts.”
Transform, protect, futureproof
HASSAN SABAHUDHEEN, CEO, CDC
According to Hassan Sabahudheen, CEO of CDC (Ciber Digital Consultants), organizations should be looking towards futureproofing their business with the right kind of cyber security solution rather than pumping all their budgets to buy all the technologies available under the sun and still remain vulnerable to attacks. “We are an innovative cyber security company. We work towards protecting the most critical asset of your company in the budget that you provide, irrespective of the size of your organization.” CDC has introduced a breakthrough and innovative cyber security solution in the market that is designed and owned by the CDC team and take a big step towards protecting the small organizations and helping to optimize the large organizations of multimillion spending. The product is called CDC ON and has been developed over the last couple of years by the in-house team. It is a tailor-made solution that perfectly fits your business risk appetite and budget. It provides 24/7 comprehensive, integrated, contextual cybersecurity and breach prevention for large enterprises and small and medium businesses’ IT, OT and IoT environments.” CDC-On is a comprehensive, contextual Cybersecurity platform that integrates and aggregates: SOC, NOC, governance, compliance, security audit, SIEM, log management, incident management, critical asset identification, vulnerability management, internal, external, network, wireless penetration testing, intrusion detection…..etc.
Esharah Unleashes Smart City Innovations at GISEC Esharah Etisalat Security Solutions is showcasing smart IoT innovations at this year’s GISEC 2019. Esharah’s participation in the 7th edition of the event endorses its efforts towards providing more integrated solutions for customers that harness innovative technologies to enhance city management, manage transportation challenges and implement smart living for residents. The company‘s new and advanced Internet of Things (IoT) solutions for businesses and cities developed across verticals, are the latest addition to its existing suite for smart city products, software and services. Esharah demonstrates its intelligently engineered Smart Car Park Platform that utilizes Automatic Number Plate Recognition (ANPR) and predictive analytic capabilities with advanced sensors and wireless communications to enable carpark operators manage multiple parking systems concurrently. When implemented, these solutions will result in reducing operating and maintenance costs. Residents will also benefit from improved parking experiences. Also on showcase is Esharah’s bestof-breed IoT technologies that support holistic smart applications such as smart indoor tracking and waste management monitoring. Indoor tracking applications have varied uses, from retail to tracking cars in a parking facility, and numerous technologies such as WiFi, Bluetooth Low-Energy (BLE), Ultrasonic, Computer Vision, etc., can be deployed to track assets indoors. “Intelligent IoT platforms have essential roles to play in the evolution of smart cities; delivering optimized efficiency and enhanced experiences for citizens. As a key enabler for smart city transformation, Esharah leverages latest technologies to boost innovation, optimize services and foster economic development with solutions that improve the lives of citizens. We are very excited to be part of this event, to share our expertise for building smarter, future tech cities; ensuring technologies developed are “secure by design” for economic, social and environmental sustainability.” said Ali Bahlooq, General Manager Esharah Etisalat Security Solutions.
07
GISEC gets underway, unravelling hacking methods used to crack into UAE businesses GISEC – the Middle East’s leading cybersecurity event – opened with a stark warning to the region’s businesses: make your staff hack-conscious, or it could bring your company to its knees. That was the message from the world’s most famous hacker Kevin Mitnick, who shared his unparalleled hacking skills and knowhow with a packed Dubai World Trade Centre audience on Day 1 of the three-day event that runs from 1-3 April. Flown in from the US specifically to present at GISEC, Mitnick, 55, wowed the hundreds attending his morning seminar as he performed eye-opening hacks that saw him demonstrate the ease with which someone could plunder information online to impersonate another and go on a hacking spree. His prime method is social engineering, which is a form of hacking that relies on influence, deception and manipulation to convince another party to comply with a request in order to compromise their computer network. In live examples, Mitnick managed to obtain confidential email data that would have allowed him to penetrate a local bank. He also burrowed his way through Google Mail accounts and LinkedIn, live on stage. Opening GISEC’s main stage was Dr Marwan Alzarouni, Director of Information Services Department at Dubai Electronic Security Center. He said: “His Highness Sheikh Mohammad bin Rashid Al Maktoum, Vice President and Prime Minister of the UAE and Ruler of Dubai, always encourages us to be future-forward planners. We continue to look at the challenges within the security landscape, particularly in strategically important sectors such as the medical field, finance and education and subsequently allocate resources. DR. MARWAN ALZAROUNI, DIRECTOR OF INFORMATION SERVICES DEPT. DESC
Goal: Product Innovation with Customer Focus
B. ROBERT RAJA, CEO, ODYSSEY TECHNOLOGIES
Odyssey Technologies is participating in the GISEC and coinciding with its participation, the company is launching its latest software offering styled ‘xorkee’, a key routing framework for authentication, encryption and digital signatures. ‘xorkee’ breaks new ground on several dimensions. For the first time, users get to connect their cryptographic tokens to mobile phones using the USB-OTG feature available on most smart phones. To sweeten this still further, the connection is driverless and compatible with most brands in the market and works on PCs and phones identically. An even bigger advantage of xorkee is that it separates the security channel from the transaction channels making it usable for multiple applications with a uniform and simple interface. The end user experience is the same across applications making user education absolutely simple and eventually unnecessary. ‘xorkee’ infrastructure complements the ones existing today like the PKI or other key management frameworks.
‘xorkee’s key routing has been implemented with the emerging privacy and encryption needs of the internet user in mind and helps organizations to implement a user consent layer for better compliance with various data security regulations in most countries. Odyssey offers a bouquet of products for authentication, digital signatures and encryption including format preserving encryption models running on the xorkee framework. For the users who have been grappling with the complexity of implementing large PKI based applications, OTP applications or biometric and other authentication solutions, the working of ‘xorkee’ seems nothing short of magic! Odyssey believes that xorkee represents a paradigm shift in security and will de facto become the universal model over the next two to three years. Odyssey intends to establish a presence in the Middle East and looks to participation in GISEC as the first step.
Understanding the Customer’s Risk
CONSTANTIN HOCKE, SALES DIRECTOR MIDDLE EAST, VIRTUAL FORGE
Virtual Forge is the leading security provider for SAP globally. The company is 19 years old and has entities in UAE, APAC, US and Europe region. They guarantee their customers the highest security and compliance for their SAP systems. Participating in the GISEC for the first time, Constantin Hocke, Sales Director Middle East, Virtual Forge believes that this platform is a perfect fit for them as it purely focuses on security. In many years of experience working in SAP security, Virtual Forge has identified three main areas that are largely responsible for security vulnerabilities namely systems settings, custom developed code and importing transports. Checking and monitoring roles and authorizations is a key component of any SAP concept and integrated in their solution. With Virtual Forge Security Suite, the company offers
holistic solution. “We are securing SAP systems holistically. We do also professional services around SAP security and software-as-a service. Our solutions enable businesses to run their SAP applications securely,” he said. Constantin believes that there is a great need for security in this region which is why they are here. The company has started having partnerships in Saudi Arabia and also looks forward to partnering in the UAE and rest of the GCC. From one of the largest security shows, Virtual Forge plans create and raise awareness among the people and also look into new business relationships. The company also has an interesting strategy which they explain with their 4 monkeys. To know more about it, visit their stand at GISEC.
www.btxshow.com
APRIL 2019 SAUDI ARABIA 23rd APRIL
BAHRAIN TBA
KUWAIT TBA
OMAN TBA
TRANSFORMATION IN
SECURITY NETWORKING BUSINESS APPLICATIONS IT & COMPUTING BROUGHT BY
OFFICIAL MEDIA PARTNERS