Lecture

Cybersecurity for Humanitarian Organizations

Graph Chat

Chat with Graph Search

Ask any question about EPFL courses, lectures, exercises, research, news, etc. or try the example questions below.

DISCLAIMER: The Graph Chatbot is not programmed to provide explicit or categorical answers to your questions. Rather, it transforms your questions into API requests that are distributed across the various IT services officially administered by EPFL. Its purpose is solely to collect and recommend relevant references to content that you can explore to help you answer your questions.

Description

This lecture delves into the impact of cyber attacks on humanitarian organizations, discussing real-life examples and consequences. The instructor, Fabien Leimgruber, emphasizes the importance of cybersecurity measures, such as training staff, implementing basic rules, and understanding the threat landscape. He highlights the vulnerabilities of NGOs due to limited resources and the need for external support. The lecture also addresses the challenges of securing funding for cybersecurity and the role of senior leadership in advocating for it. Fabien provides practical tips for individuals working in humanitarian fields, stressing the presence of a cybersecurity champion within organizations and the importance of community support in combating cyber threats.

Official source

Related concepts (12)

Computer security

Computer security, cyber security, digital security or information technology security (IT security) is the protection of computer systems and networks from attacks by malicious actors that may result in unauthorized information disclosure, theft of, or damage to hardware, software, or data, as well as from the disruption or misdirection of the services they provide. The field is significant due to the expanded reliance on computer systems, the Internet, and wireless network standards such as Bluetooth and Wi-Fi.

Cyberattack

A cyberattack is any offensive maneuver that targets computer information systems, computer networks, infrastructures, personal computer devices, or smartphones. An attacker is a person or process that attempts to access data, functions, or other restricted areas of the system without authorization, potentially with malicious intent. Depending on the context, cyberattacks can be part of cyber warfare or cyberterrorism. A cyberattack can be employed by sovereign states, individuals, groups, societies or organizations and it may originate from an anonymous source.

Vulnerability (computing)

Vulnerabilities are flaws in a computer system that weaken the overall security of the device/system. Vulnerabilities can be weaknesses in either the hardware itself, or the software that runs on the hardware. Vulnerabilities can be exploited by a threat actor, such as an attacker, to cross privilege boundaries (i.e. perform unauthorized actions) within a computer system. To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness.

Cyber spying

Cyber spying, cyber espionage, or cyber-collection is the act or practice of obtaining secrets and information without the permission and knowledge of the holder of the information using methods on the Internet, networks or individual computers through the use of proxy servers, cracking techniques and malicious software including Trojan horses and spyware. Cyber espionage can be used to target various actors- individuals, competitors, rivals, groups, governments, and others- in order to obtain personal, economic, political or military advantages.

Proactive cyber defence

Proactive cyber defence, means acting in anticipation to oppose an attack through cyber and cognitive domains. Proactive cyber defence can be understood as options between offensive and defensive measures. It includes interdicting, disrupting or deterring an attack or a threat's preparation to attack, either pre-emptively or in self-defence. Proactive cyber defence differs from active defence, in that the former is pre-emptive (does not waiting for an attack to occur).

Related lectures (30)

Zero Days Vulnerability: Security Breaches on Personal Devices

Explores zero days vulnerability, ethical hacking, cyber attacks, and defense strategies against cyber threats.

Cybersecurity: Threat Modeling and Solutions

Explores cybersecurity fundamentals, threat modeling, real-world case studies, and digital forensics procedures.

Introduction to Information Security: Threats and Defenses

Explores cybersecurity principles, threats, and defenses, emphasizing the importance of protecting digital information and systems.

Data Protection and Cybersecurity Essentials

Explores data breaches, cyber attacks, legal requirements, incident response, communication strategies, cybersecurity skills gap, and Swiss government activities.

Protecting Work: Threats