& cplSiteName &

AT&T's Amoroso: To Battle New Threats, Mobilize Your People

Dan Jones
9/5/2014
50%
50%

Your biggest online concern these days might be those embarrassing nude selfies suddenly appearing on the web, but AT&T Chief Security Officer (CSO) Ed Amoroso is here to tell you that there are far worse things lurking in cyberspace.

Amoroso highlighted one of the key security areas that CSOs should be concerned about as a new wave of advanced persistent threats (APT) loom, and they're aiming to do more than just swipe thousands (or millions) of credit card numbers.

"The next step is probably terrorists trying to destroy critical infrastructure," he told Light Reading over breakfast Wednesday morning, "with the emphasis on destructive," he added, as he demolished a "broken yolk sandwich" (which looked a lot better than the name suggests).

Amoroso doesn't seem like a man given to idle fear-mongering, despite his job title. In fact, he's one of the more informative and jovial speakers you're likely to see on the often sawdust-dry tech conference circuit. (See AT&T's Ed Amoroso on Mobile Security for proof of how entertaining he can be.)

An advanced persistent threat is one organized by a specific group, sometimes using multiple methods, to break into a particular target. Recent examples would include data breaches at Home Depot and Target.

Amoroso says the APT pattern started with nation states and the military, moved on to criminal gangs, and is shifting to terrorist groups. "The one thing you won't be able to rationalize is the destructive stuff," he suggested in his keynote at the AT&T Cyber Security conference in New York City Thursday.

This is not, of course, an unknown concept. Former US Defense Secretary Leon Panetta has long warned of a "cyber Pearl Harbor." Even if the idea of what constitutes cyber terrorism is still somewhat cloudy, the broad idea is that groups could attack critical communications, energy and water networks and cause damage and wide-scale disruption.


Need to know more about mobile network security? Then check out the agenda for Mobile Network Security Strategies 2014, December 3 at the Westin Times Square, New York City.


Where Amoroso may differ is that he isn't suggesting that there is a pure technological solution to widespread security problems. The basic thrust of his keynote Thursday was: Be safer by training your employees not to do dumb stuff.

Advanced firewalls and network appliances are useful tools but people are the weakest link in the chain, he suggested. "All the times I've been hacked in my career, it was because of something that was off my radar," he said at the keynote, adding that systems are just too complicated to be 100% secure.

The focus cannot just be on technology, he suggested: People also have to be involved. Which, in the corporate environment, means pumping up the security awareness team.

"We've kind of punted on that before," he told Light Reading Wednesday. "A typical awareness document will put you to sleep."

In AT&T's case, the new approach meant using video to show employees what not to do. The funny, cutesy videos that Amoroso showed at the Thursday keynote targeted phishing attacks. They emphasized that people should not open attachments from suspicious senders, that they should run their mouse over URL links to see where they actually lead, and be very careful about information shared on social media.

AT&T has been working on this during the past six months. The amount of employees now not clicking on the faux phishing email tests that the security office sends out suggests that awareness about phishing attacks is up by 54%.

"Making the video doesn't have to be expensive," Amoroso said. The animated AT&T videos were made in-house: Firms could even use interns from film school for great results, he suggested.

"They'll love it," he said.

For more insights from Amoroso, see:

— Dan Jones, Mobile Editor, Light Reading

(2)  | 
Comment  | 
Print  | 
Newest First  |  Oldest First  |  Threaded View        ADD A COMMENT
Atlantis-dude
50%
50%
Atlantis-dude,
User Rank: Light Sabre
9/8/2014 | 1:08:35 PM
Ent or SP
Is he referring to AT&T the enterprise or the service-provider?
DanJones
50%
50%
DanJones,
User Rank: Blogger
9/5/2014 | 2:44:51 PM
Breakfast
I had sliced grapefruit BTW
From The Founder
The independent evaluation of Nokia's key virtual network functions (VNFs) was a defining moment for the Finnish giant.
Flash Poll
Live Streaming Video
The Real-World View of Service Provider Innovation
Executives from Deutsch Telekom, Facebook, AT&T, Vodafone, and Masergy share insights from their company’s major transformation efforts and updates on key issues including open source, managed cloud connections and 5G.
LRTV Documentaries
Light Reading Hall of Fame 2016

5|23|16   |   05:43   |   (0) comments


Find out who has been welcomed into Light Reading's Hall of Fame this year.
LRTV Custom TV
ZTE TM Forum Highlights

5|23|16   |     |   (0) comments


ZTE showcased its new ICT solutions at TM Forum in Nice.
LRTV Interviews
Gamma's MD on the Emergence of UC2

5|20|16   |     |   (0) comments


Gamma Communications Managing Director David Macfarlane believes the unified communications (UC) market has reached a tipping point.
LRTV Custom TV
The Ultimate 5-Minute Guide to Digital Customer Engagement

5|20|16   |     |   (0) comments


In this short video, you will hear all about how Digital Customer Engagement is the key to meeting customer expectations, keeping them happy, and maximizing revenue. VP Product & Marketing at Pontis, Ofer Razon, breaks down for us the five essential capabilities for successful Digital Customer Engagement. Don’t miss!
LRTV Custom TV
NFV in 2016: Part 1 – NFV Use Cases Get Real

5|19|16   |   05:57   |   (0) comments


Consensus is building around the key use cases for NFV, including managed IP services at the network edge and on customer premises, which can generate new revenues from enterprises/SMBs and consumers; Evolved Packet Core to support LTE migration; and adjacent technologies, such as TAS and IMS, to support VoLTE and next-generation charging and policy control ...
LRTV Custom TV
Nokia's Steve Vogelsang on NFV – Part 3

5|19|16   |     |   (0) comments


Steve Vogelsang discusses the challenges of operational transformation and how Nokia helps its customers. Join Steve at the Big Communications Event in Austin the morning of May 24, on his keynote and optical networking panel.
LRTV Interviews
Level 3: Why UC Is In Demand

5|17|16   |   04:12   |   (1) comment


Andrew Edison, Level 3's senior VP of sales, EMEA region, talks about the drivers of growth in the unified communications services market.
LRTV Custom TV
ARM's OPNFV Action

5|17|16   |     |   (0) comments


At the ARM booth at MWC 2016, Joe Kidder and Bob Monkman speak to Light Reading about OPNFV and their upcoming action.
LRTV Custom TV
Nokia's Steve Vogelsang on NFV – Part 2

5|16|16   |     |   (0) comments


Steve Vogelsang gives advice to service providers on how to move to NFV. Join Steve at the Big Communications Event in Austin the morning of May 24, on his keynote and optical networking panel.
LRTV Interviews
Interoute CTO on NFV's Maturity

5|13|16   |   06:46   |   (1) comment


Matt Finnie, CTO at international operator Interoute, explains how NFV has made life easier in terms of logistics and how Interoute can now enable a 'software-defined moment' for its customers.
LRTV Huawei Video Resource Center
UBBS 2016 Highlights

5|12|16   |     |   (0) comments


Highlights of Huawei's UBBS event in Hong Kong.
LRTV Huawei Video Resource Center
European 2020 Digital Agenda

5|12|16   |     |   (0) comments


Anacom's Fatima Barros discusses the plan to bring ultrafast broadband to Portugal by 2020.
Upcoming Live Events
September 13-14, 2016, The Curtis Hotel, Denver, CO
December 6-8, 2016,
June 16-18, 2017, Austin Convention Center, Austin, TX
All Upcoming Live Events
Infographics
A new survey conducted by Heavy Reading and TM Forum shows that CSPs around the world see the move to digital operations as a necessary part of their overall virtualization strategies.
Hot Topics
WiCipedia: Short Skirts & Back-Up Plans
Eryn Leavens, Special Features & Copy Editor, 5/20/2016
Google Doubles Down on Machine Learning, AI
Mitch Wagner, West Coast Bureau Chief, Light Reading, 5/19/2016
Eurobites: Be More European, EU Tells Streaming Services
Paul Rainford, Assistant Editor, Europe, 5/20/2016
Why I'm Heading to Austin for BCE
Ray Le Maistre, Editor-in-chief, 5/20/2016
Like Us on Facebook
Twitter Feed
BETWEEN THE CEOs - Executive Interviews
In this latest installment of the CEO Chat series, Craig Labovitz, co-founder and CEO of Deepfield, sits down with Light Reading's Steve Saunders in Light Reading's New York City office to discuss how Deepfield fits in with the big data trend and more.
Grant van Rooyen, president and CEO of Cologix, sits down with Steve Saunders, founder and CEO of Light Reading, in the vendor's New Jersey facility to offer an inside look at the company's success story and discuss the importance of security in the telecom industry.
Animals with Phones
Live Digital Audio

Our world has evolved through innovation from the Industrial Revolution of the 1740s to the information age, and it is now entering the Fourth Industrial Revolution, driven by technology. Technology is driving a paradigm shift in the way digital solutions deliver a connected world, changing the way we live, communicate and provide solutions. It can have a powerful impact on how we tackle some of the world’s most pressing problems. In this radio show, Caroline Dowling, President of Communications Infrastructure & Enterprise Computing at Flex, will join Women in Comms Director Sarah Thomas to discuss the impact technology has on society and how it can be a game-changer across the globe; improving lives and creating a smarter world. Dowling, a Cork, Ireland, native and graduate of Harvard Business School's Advanced Management Program, will also discuss her experience managing an international team focused on innovation in an age of high-speed change.