9 Key Challenges in Cybersecurity

Summary

The video discusses the growing cyber security challenges faced by higher education institutions, highlighting the volume of digital assets, intellectual property, and compliance obligations that make universities prime targets for cyberattacks. Threats, such as bad actors exploiting personal data, the rise of privacy concerns, and vulnerabilities from Internet of Things devices, are explored. The complexity of securing research data and maintaining security operations amidst increasing threats and a shortage of skilled professionals is emphasized. The move to cloud services is also discussed, with a caution about potential breaches if not handled properly.

Takeaways

• 😀 The sheer volume of digital assets in higher education, including intellectual property, poses significant cybersecurity challenges.
• 😀 The threat environment is increasingly complex, with security operations teams constantly dealing with ongoing attacks.
• 😀 The availability of attack kits on the black market allows bad actors to cause significant damage at a low cost.
• 😀 There has been a shift in cybercriminal activity, with a focus on using personal data for nefarious purposes like influencing elections and social media manipulation.
• 😀 Internet of Things (IoT) devices, while convenient, pose security risks as they often lack proper updates and are outside administrative control.
• 😀 The rise of IoT devices in student dorms can lead to potential security vulnerabilities, including their use in distributed denial-of-service (DDoS) attacks.
• 😀 Compliance obligations for higher education institutions are continuously growing, leading to a heavier workload for security and compliance teams.
• 😀 The demand for qualified security professionals is increasing, but it is becoming more challenging to hire, train, and retain them due to the growing threat landscape.
• 😀 Password reuse remains a significant cybersecurity issue, where a breach in one account can compromise multiple others.
• 😀 The move to the cloud offers opportunities for resource optimization, but improper implementation can lead to massive security breaches.
• 😀 The complexity of large institutions, which include research, teaching, and community service, increases the risk of encountering cyber threats due to their open environments.

Q & A

What is one of the main challenges facing higher education when it comes to cybersecurity?

One of the main challenges is the sheer volume of digital assets collected, produced, and shared within the education community. Many of these assets hold significant value not only within the academic environment but also to external actors such as nation-states.

How have the motivations of cyber attackers shifted over time?

Cyber attackers have shifted from seeking personal data for identity theft to targeting general information for more nefarious purposes, such as influencing elections or manipulating social media to achieve political objectives.

What is a growing issue with Internet of Things (IoT) devices in higher education?

IoT devices, while convenient, pose a security risk as they are often outside of administrative control, difficult to patch, and vulnerable to exploitation. Additionally, these devices can be used in distributed denial of service (DDoS) attacks.

What role is becoming more prominent due to the increasing threats in higher education cybersecurity?

The role of the Chief Privacy Officer (CPO) is becoming more prominent, as privacy concerns and the weaponization of personal data, especially through social media manipulation, are growing issues.

What is a significant obstacle when it comes to maintaining cybersecurity in higher education?

One significant obstacle is the increasing complexity of the threat landscape, including the availability of attack kits on the black market, which make it easier for threat actors to launch damaging attacks.

What are the challenges with compliance obligations in higher education cybersecurity?

Higher education institutions face growing compliance obligations from local, state, and national levels. These include varying regulations and oversight that require constant attention and resources to ensure adherence.

What difficulty do higher education institutions face when hiring and retaining cybersecurity professionals?

Institutions struggle to hire qualified security professionals and provide the necessary training and retention strategies. The need for skilled personnel is high, yet the threat landscape is complex and continuously evolving.

What is the risk associated with password reuse in cybersecurity?

Password reuse is a major risk because if a password is breached on one site, attackers can use the same credentials to compromise other accounts, putting users and institutions at significant risk.

How does the move to the cloud affect cybersecurity in higher education?

While moving to the cloud can offer optimization and efficiency, if not done carefully, it can expose institutions to massive security breaches. Proper cloud security strategies are essential to avoid vulnerabilities.

Why is the open environment of universities a cybersecurity risk?

Universities' open environments, which welcome people from around the world, increase the likelihood of encountering threat actors. This openness can be exploited by attackers, taking advantage of the institution's collaborative and accessible nature.