Ã山ǿ¼é

Le Centre des politiques en propriété intellectuelle accueille (University of New South Wales) pour une conférence sur le cyberactivisme et la surveillance par le biais des mégadonnées.

¸éé²õ³Ü³¾Ã©

[En anglais seulement] This presentation looks at how big data analytics are used to monitor security vulnerability disclosures in the dark market, and how to prevent the zero day vulnerabilities from becoming escalated acts of persistent advanced cybersecurity threats. A software vulnerability is a weakness in a computer system that can be exploited by an attacker.  A zero data exploit is a vulnerability that is exploited against a target on the day on which public awareness of the existence of the vulnerability occurs (that is, zero days have elapsed since between the awareness and the use).

Vulnerabilities are lucrative commodities in the dark market as well as in legitimate markets. For example, the US government purchased vulnerabilities to launch the Stuxnet virus that slowed down Iran’s nuclear power program. This also includes monitoring of hacktivists and ethical hackers through social media, the dark market, 4chan, and through FBI infiltrated technology services.

The paper draws on work undertaken over the last six years both in the fields of security vulnerabilities, and ethical hacking drawing on analytics from the media and blogs, as well as analytics run on a number of hacking and cyber jihad dark market forums. It will be demonstrated that there are fewer safeguards in place for this type of big data surveillance than there are for more traditional (and the focus of media stories) big data uses in national security, and in particular for terrorism. It will be argued that more transparency and safeguards are required for less known forms of big data surveillance.

La conférencière

[En anglais seulement] Alana Maurushat, BCL'01, LLB'01, is currently Senior Lecturer at the Faculty of Law, and Director of The Cyberspace Law and Policy Centre at the University of New South Wales. Her areas of expertise include big data for national security and law enforcement; cybersecurity, cybercrime and cyberwar; ethical hacking; digital copyright; and online civil liberties.

L’événement est ouvert à tous. Nous avons demandé une accréditation d’un dispensateur reconnu aux fins de la formation continue obligatoire pour une durée de 1,5 heures. Des frais de 30$ s’appliqueront pour les avocats qui demandent une attestation d’accréditation CLE.