{"id":6605,"date":"2020-03-14T14:00:02","date_gmt":"2020-03-14T14:00:02","guid":{"rendered":"https:\/\/athenadynamics.com\/?p=6605"},"modified":"2021-02-19T03:01:44","modified_gmt":"2021-02-19T03:01:44","slug":"defending-against-the-undetectable-via-detectionless-technologies","status":"publish","type":"post","link":"https:\/\/athenadynamics.com\/defending-against-the-undetectable-via-detectionless-technologies\/","title":{"rendered":"Defending Against the Undetectable via Detectionless Technologies"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"6605\" class=\"elementor elementor-6605\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-2a19b91 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"2a19b91\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-fe3a3cc\" data-id=\"fe3a3cc\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e0b8e46 elementor-widget elementor-widget-heading\" data-id=\"e0b8e46\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.21.0 - 25-04-2024 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h2 class=\"elementor-heading-title elementor-size-default\">Details<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3110d65 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"3110d65\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.21.0 - 25-04-2024 *\/\n.elementor-widget-divider{--divider-border-style:none;--divider-border-width:1px;--divider-color:#0c0d0e;--divider-icon-size:20px;--divider-element-spacing:10px;--divider-pattern-height:24px;--divider-pattern-size:20px;--divider-pattern-url:none;--divider-pattern-repeat:repeat-x}.elementor-widget-divider .elementor-divider{display:flex}.elementor-widget-divider .elementor-divider__text{font-size:15px;line-height:1;max-width:95%}.elementor-widget-divider .elementor-divider__element{margin:0 var(--divider-element-spacing);flex-shrink:0}.elementor-widget-divider .elementor-icon{font-size:var(--divider-icon-size)}.elementor-widget-divider .elementor-divider-separator{display:flex;margin:0;direction:ltr}.elementor-widget-divider--view-line_icon .elementor-divider-separator,.elementor-widget-divider--view-line_text .elementor-divider-separator{align-items:center}.elementor-widget-divider--view-line_icon .elementor-divider-separator:after,.elementor-widget-divider--view-line_icon .elementor-divider-separator:before,.elementor-widget-divider--view-line_text .elementor-divider-separator:after,.elementor-widget-divider--view-line_text .elementor-divider-separator:before{display:block;content:\"\";border-block-end:0;flex-grow:1;border-block-start:var(--divider-border-width) var(--divider-border-style) var(--divider-color)}.elementor-widget-divider--element-align-left .elementor-divider .elementor-divider-separator>.elementor-divider__svg:first-of-type{flex-grow:0;flex-shrink:100}.elementor-widget-divider--element-align-left .elementor-divider-separator:before{content:none}.elementor-widget-divider--element-align-left .elementor-divider__element{margin-left:0}.elementor-widget-divider--element-align-right .elementor-divider .elementor-divider-separator>.elementor-divider__svg:last-of-type{flex-grow:0;flex-shrink:100}.elementor-widget-divider--element-align-right .elementor-divider-separator:after{content:none}.elementor-widget-divider--element-align-right .elementor-divider__element{margin-right:0}.elementor-widget-divider--element-align-start .elementor-divider .elementor-divider-separator>.elementor-divider__svg:first-of-type{flex-grow:0;flex-shrink:100}.elementor-widget-divider--element-align-start .elementor-divider-separator:before{content:none}.elementor-widget-divider--element-align-start .elementor-divider__element{margin-inline-start:0}.elementor-widget-divider--element-align-end .elementor-divider .elementor-divider-separator>.elementor-divider__svg:last-of-type{flex-grow:0;flex-shrink:100}.elementor-widget-divider--element-align-end .elementor-divider-separator:after{content:none}.elementor-widget-divider--element-align-end .elementor-divider__element{margin-inline-end:0}.elementor-widget-divider:not(.elementor-widget-divider--view-line_text):not(.elementor-widget-divider--view-line_icon) .elementor-divider-separator{border-block-start:var(--divider-border-width) var(--divider-border-style) var(--divider-color)}.elementor-widget-divider--separator-type-pattern{--divider-border-style:none}.elementor-widget-divider--separator-type-pattern.elementor-widget-divider--view-line .elementor-divider-separator,.elementor-widget-divider--separator-type-pattern:not(.elementor-widget-divider--view-line) .elementor-divider-separator:after,.elementor-widget-divider--separator-type-pattern:not(.elementor-widget-divider--view-line) .elementor-divider-separator:before,.elementor-widget-divider--separator-type-pattern:not([class*=elementor-widget-divider--view]) .elementor-divider-separator{width:100%;min-height:var(--divider-pattern-height);-webkit-mask-size:var(--divider-pattern-size) 100%;mask-size:var(--divider-pattern-size) 100%;-webkit-mask-repeat:var(--divider-pattern-repeat);mask-repeat:var(--divider-pattern-repeat);background-color:var(--divider-color);-webkit-mask-image:var(--divider-pattern-url);mask-image:var(--divider-pattern-url)}.elementor-widget-divider--no-spacing{--divider-pattern-size:auto}.elementor-widget-divider--bg-round{--divider-pattern-repeat:round}.rtl .elementor-widget-divider .elementor-divider__text{direction:rtl}.e-con-inner>.elementor-widget-divider,.e-con>.elementor-widget-divider{width:var(--container-widget-width,100%);--flex-grow:var(--container-widget-flex-grow)}<\/style>\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-057cf1a elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"057cf1a\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-971f394\" data-id=\"971f394\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-72d837c elementor-widget elementor-widget-text-editor\" data-id=\"72d837c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.21.0 - 25-04-2024 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p><strong>Cyber Security Thought Leadership Series<\/strong><br \/><em>Author: Ken Soh, Group CIO, BH Global and CEO, Athena Dynamics<\/em><br \/><em>Copyright \u00a9 Mar 2020 All Rights Reserved Athena Dynamics Pte Ltd<\/em><\/p>\n<hr \/>\n<p><strong><em>Executive Summary<\/em><\/strong><\/p>\n<p>This paper focuses on the common yet long-neglected pitfall of today\u2019s cyber protection technologies. It addresses the fundamentals why incidents continue to happen despite substantial investment into cyber protection.<\/p>\n<p>To address such pitfall, detectionless technology of \u201cContent Dis-arm Reconstruction (CDR)\u201d or \u201cContent Deconstruction, Neutralization and Reconstruction (CDNR)\u201d technology is discussed. The paper also provides concise and important verification guideline to help readers identify a true CDR\/CDNR tool from many that claim to be one.<\/p>\n<p><strong><em>Why do we continue to make the same mistake?<\/em><\/strong><\/p>\n<p>Today, advanced threats are not detectable. Unfortunately, security leadership continues to focus only on detection centric technologies. Be it multi-AV, sandboxing, machine-learning, threat-intelligence etc, they are all working on the same fundamental of \u201cexploiting the most advanced technologies to detect the bad in order to remove the bad\u201d. Such paradigm works but is dangerously inadequate for the basic reason that we cannot detect many of the advanced threats in the first place. Even if they are detected today, it cannot be done so tomorrow. We cannot be focusing on running a never-ending catch-up game.<\/p>\n<p><strong><em>Why is detection-only mindset so dangerous?<\/em><\/strong><\/p>\n<p>Detection-only mindset provides a dangerously false sense of security. \u201cWe have deployed the most marketed, most well-known world-class cyber security protection technologies and we are now safe\u201d. For security leaders who protect with such mindset, not only that there is no 100% security, mostly likely the \u201cmost well-known world-class\u201d technologies are detection centric. It is important to have detection centric protection. However, it is dangerously incomplete without complementing it with detectionless technologies.<\/p>\n<p><strong><em>So, what do we mean by \u201cdetectionless technologies\u201d?<\/em><\/strong><\/p>\n<p>Detectionless technology is a broad term that I use to describe any technology that does not protect by\u00a0<em>\u201csensing out the bad\u201d<\/em>. In many occasions when I mention that we protect detectionlessly, I am likely be mistaken by \u201cah certainly, you are referring to pre-empted, pro-active prevention\u201d. Many do not get the point the first time. I typically need to educate them that I am not referring to \u201cprotection by prevention only\u201d. We\u00a0<em>prevent detectionlessly<\/em>. Unfortunately, from experience, this concept typically takes time to share and educate. This could be due to the fact that the detection oriented mindset is deeply ingrained in most peoples\u2019 minds all this while.<\/p>\n<p><strong><em>Detectionless Protection as an Ongoing Pursuit<\/em><\/strong><\/p>\n<p>As mentioned earlier, detectionless is a broad term of our focused pursuit thus far. It entails technologies that focus on neutralization, isolation and specific peripheral technologies that augment the detectionless approach when it falls short. We reckon that the quest for \u201cdetectionless\u201d is never a destination but an ongoing journey, since new, disruptive approaches emerge from time to time. It is the nature of technology development. In this article, we would like to introduce a selection of such technologies as general references.<\/p>\n<p><strong><em>\u201cCDR\u201d vs \u201cCDNR\u201d and why \u201cNeutralization\u201d?<\/em><\/strong><\/p>\n<p>Some call it Content Dis-arm and Reconstruction (CDR), we prefer to call it Content Deconstruction, Neutralization and Reconstruction (CDNR). We have published a separate paper on this which is available via\u00a0<a href=\"https:\/\/athenadynamics.com\/event\/cdr-cdnr-important\"><em>this link<\/em><\/a>. Simply, we felt that the word \u201cDis-arm\u201d infers detection, and since the technology does not involve detection, CDNR would be a more accurate articulation of this technology in our opinion. This way, the essence and beauty of detection-less paradigm would stand-out naturally.<\/p>\n<p>Specifically, with reference to dictionary.com, to neutralize something means to make it neutral or harmless. Neutralization is the name of this process. If you help defuse a bomb, you contribute to its neutralization. This would be a great term than some other commonly used ones such as \u201cscrubbing\u201d, \u201csanitizing\u201d, \u201cflattening\u201d etc.<\/p>\n<p><strong><em>Detectionless via Neutralization<\/em><\/strong><\/p>\n<p>What do we mean by Neutralization? In lay-man\u2019s words, we do not \u201cdetect\u201d, just \u201cdetox\u201d. There are too many examples that detection-based parameter defences would screen and approve incoming traffic for users positively, only ending up users being attacked by advanced threats via such \u201capproved clean traffic\u201d eventually. We cannot detect advanced threats. Detect nothing does not mean it is safe in today\u2019s threat landscape.<\/p>\n<p>So what do we do via Neutralization? At file level, Neutralization re-constructs files via file conversation implemented as a highly scalable, enterprise cross-domain or e-mail platforms. At packet level, re-construction is implemented via packet conversion platform that accepts user-exits that interfaces with custom user-defined deconstruction and reconstruction routines. Both technologies have already protected numerous CIIs at classified and secret levels.<\/p>\n<p>In a nutshell, Neutralization is a zero-trust, white-listing approach at its conceptual level. While it is difficult to identify the bad, we simply pick up the good since we know what are the good better than what are the bad. By simply removing the \u201cbad\u2019 or \u201cimpurities\u201d regardless of whether it is malware, by sieving out only the required good that we know best, we achieve high level of protection since the impurities could be known or unknown malware, which could be zero-day viruses or even unborn viruses.<\/p>\n<p>Finally, it is also important to understand that once the approach is detection centric, the subconscious thought is that the world is all good and hence the objective is to identify the bad. This has been proven ineffective needless to explain. Neutralization works on the concept that the world is bad and we simply pick up the good that we want, since we know that best. It is an implicit and indirect work of white listing.<\/p>\n<p><strong><em>Identifying a True CDR\/CDNR Tool from the Claiming-to-be<\/em><\/strong><\/p>\n<p>While the market starts to understand the strength of CDR\/CDNR just like decades ago when the term \u201cFirewall\u201d first emerged, it is also risky to choose a CDR\/CDNR platform at face value. Now that CDR\/CDNR has started to reach the peak of the technology hype curve, various propositions are starting to claim their availability of CDR\/CDNR feature. How hence could we identify the real McCoy? For that, we would recommend some key identifying facts that end-users could reference in their procurement evaluation effort:<\/p>\n<p><strong>1 \u2013 Fidelity of neutralized files\/packets<\/strong><\/p>\n<p>Every vendor would claim that they are the best. Use case oriented stress testing is therefore the most direct and useful approach to identify the \u201creal McCoy\u201d.<\/p>\n<p><strong>2 \u2013 How many file types does the solution support?<\/strong><\/p>\n<p>A matured CDR\/CDNR product should support at least all common file types which would usually amount to around 100 types. It would be unfortunate to realize after deployment that the platform does not support certain file types needing to be neutralized.<\/p>\n<p><strong>3 \u2013 Track record<\/strong><\/p>\n<p>When did the product start to offer CDR capabilities? How many productive CIIs does the product protect till date? It is observed that some security products claim to have enhanced with CDR\/CDNR capabilities. Deeper assessment based on this list is key.<\/p>\n<p><strong>4 \u2013 Is there deep CDR\/CDNR at finer granularity of files and emails?<\/strong><\/p>\n<p>Many perform CDR\/CDNR at just the file or email level. There is benchmark that proves multiple folds of efficacy of threat prevention to perform CDR\/CDNR at finer granularity of file or email.<\/p>\n<p><strong>5 \u2013 Does the solution handle encrypted email attachment?<\/strong><\/p>\n<p>Encryption protects privacy for us for the longest time in the history of information sharing. Unfortunately, today, it also protects viruses. A well implemented CDR\/CNDR enterprise platform should have matured process flow to handle and CDR\/CNDR encrypted attachments., providing a good balance between security and productivity operationally.<\/p>\n<p><strong>6 \u2013 Does it support a highly scalable enterprise platform?<\/strong><\/p>\n<p>Since enterprise CDR\/CDNR typically forms an integral part of businesses, it is important that it comes with highly scalable capability that allows scaling up and down without the need for down time.<\/p>\n<p><strong>7 \u2013 Does the vendor have credible, local presence?<\/strong><\/p>\n<p>Since CDR\/CNDR will be an integral protection shield of the organization\u2019s crown jewel, it is important to verify that the supplier has a credible local presence for ongoing support requirements.<\/p>\n<p><strong>8 \u2013 Does it offer external connectors to other solutions in the workflow for situations when checking of executables are necessary? e.g. SCADA domain.<\/strong><\/p>\n<p>CDR\/CNDR provides strong protection. Unfortunately, the technology by nature does not support executable binaries. The platform should therefore provide flexible SDK\/API and connectors for customized workflow in use cases when executables needs to be shared.<\/p>\n<p><strong><em>Other Detectionless Technologies<\/em><\/strong><\/p>\n<p>CDR\/CDNR is a strong and effective option to protect detectionlessly. There are other options such as Isolation and Containment (ISOC), Micro-Segmentation etc which are not the focus of this paper. We are happy to share more if there is specific interest to know more. Please feel free to contact us via\u00a0<a href=\"mailto:contact@athenadynamics.com\">contact@athenadynamics.com<\/a>.<\/p>\n<p><strong><em>What Constitutes a Complete Cyber Protection Technology?<\/em><\/strong><\/p>\n<p>With the understanding of detection centric vs detectionless cyber protection paradigm, the typical technical strategy is therefore to complement detection-based hygiene level protection with detectionless innovations as per the following illustration. We do not oppose the use of detection technology. Detection operation typically saves time. However, since we cannot detect advanced threats in the first place, it is best to complement existing detection strategy with the detectionless technology to complete the loop.<\/p>\n<p>In a nutshell, unlike the detection way which typically focuses on the hygiene level of protection and the cause of attack, detectionless way focuses on eradicating the undetectable at the source in a bid to eradicate the causes. Collectively, both approaches would provide a highly strengthened security posture.<\/p>\n<p><strong><em>How would the above Paradigm affect the Traditional Cyber Protection Strategy?<\/em><\/strong><\/p>\n<p>As per the above, we advocate strongly the combination of detection centric and detectionless technologies. However, cyber protection is not just about technology. It is the usual People, Process, Technology (or Platform) that cover the full spectrum of cyber protection considerations. We have only discussed about the Technology element in this paper. For the People and Process elements, we too have radically different views from the traditional approach. We are keen to explore separately with the reader should there be interest. These could be addressed separately since each of these element entails larger and deeper subject matters.<\/p>\n<hr \/>\n<p><strong><em>Disclaimer:\u00a0<\/em><\/strong>\u00a0<em>The outcome of best practices introduced in this material may vary due to environmental and contextual parameters. Neither BH Global Corporation Ltd, Athena Dynamics Pte Ltd nor the writers is responsible for any direct or indirect implications\/impacts to the readers due to the adoption of these practices.<\/em><\/p>\n<p><strong><em>Not for General Distribution. Copyright \u00a9 2020 All Rights Reserved.<\/em><\/strong>\u00a0<em>No part of this presentation materials may be distributed\/reproduced without the writers\u2019 expressed consent.<\/em><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3766fd9 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3766fd9\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-9e92a9d\" data-id=\"9e92a9d\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-9f35e1e elementor-widget elementor-widget-heading\" data-id=\"9f35e1e\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Biography<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c63e655 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"c63e655\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-e83cd61 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"e83cd61\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-c5b74eb\" data-id=\"c5b74eb\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7403748 elementor-widget elementor-widget-image\" data-id=\"7403748\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.21.0 - 25-04-2024 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"208\" height=\"270\" src=\"https:\/\/athenadynamics.com\/wp-content\/uploads\/2021\/02\/Untitled.png\" class=\"attachment-large size-large wp-image-6617\" alt=\"\" srcset=\"https:\/\/athenadynamics.com\/wp-content\/uploads\/2021\/02\/Untitled.png 208w, https:\/\/athenadynamics.com\/wp-content\/uploads\/2021\/02\/Untitled-46x60.png 46w\" sizes=\"(max-width: 208px) 100vw, 208px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-f659fbb\" data-id=\"f659fbb\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-881882d elementor-widget elementor-widget-text-editor\" data-id=\"881882d\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>Ken Soh<\/strong>\u00a0holds concurrent appoints as Group CIO of mainboard listed BH Global Corporation Limited since 3 Mar 2014 and as the founding CEO of the group subsidiary cyber security company Athena Dynamics Pte Ltd.<\/p>\n<p>Ken has more than 25 years of working experience in the ICT industry. Prior to joining BH Global, Ken held various senior positions in public and private sectors at CxO and business leader levels with Master Planning and P&amp;L responsibilities.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-738a168 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"738a168\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-a031f6b\" data-id=\"a031f6b\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-38d245d elementor-widget elementor-widget-text-editor\" data-id=\"38d245d\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Ken has been an avid industry speaker and writer. He holds a Master of Science in Computer Studies from the University of Essex; and a Master of Business Administration (eMBA) from the Nanyang Business School (a Nanyang Technological University and University of California, Berkeley joint programme).<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-11f0231 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"11f0231\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-0c68324\" data-id=\"0c68324\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-0d93a02 elementor-widget elementor-widget-text-editor\" data-id=\"0d93a02\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>More information of Ken\u2019s past industry and media sharing is available via this\u00a0<a href=\"https:\/\/athenadynamics.com\/event\">link<\/a>.<\/p>\n<p>Contact:\u00a0<a href=\"mailto:kensoh@athenadynamics.com\">kensoh@athenadynamics.com<\/a><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"Details Cyber Security Thought Leadership SeriesAuthor: Ken Soh, Group CIO, BH Global and CEO, Athena DynamicsCopyright \u00a9 Mar 2020 All Rights Reserved Athena Dynamics Pte Ltd Executive Summary This paper focuses on the common yet long-neglected pitfall of today\u2019s cyber protection technologies. It addresses the fundamentals why incidents continue to happen despite substantial investment into&#8230; <a class=\"view-article\" href=\"https:\/\/athenadynamics.com\/defending-against-the-undetectable-via-detectionless-technologies\/\">View Article<\/a>","protected":false},"author":6,"featured_media":6173,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_themeisle_gutenberg_block_has_review":false,"footnotes":"","_jetpack_memberships_contains_paid_content":false},"categories":[179],"tags":[],"yst_prominent_words":[],"acf":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/athenadynamics.com\/wp-content\/uploads\/2020\/12\/Untitled-1.jpg","_links":{"self":[{"href":"https:\/\/athenadynamics.com\/wp-json\/wp\/v2\/posts\/6605"}],"collection":[{"href":"https:\/\/athenadynamics.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/athenadynamics.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/athenadynamics.com\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/athenadynamics.com\/wp-json\/wp\/v2\/comments?post=6605"}],"version-history":[{"count":0,"href":"https:\/\/athenadynamics.com\/wp-json\/wp\/v2\/posts\/6605\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/athenadynamics.com\/wp-json\/wp\/v2\/media\/6173"}],"wp:attachment":[{"href":"https:\/\/athenadynamics.com\/wp-json\/wp\/v2\/media?parent=6605"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/athenadynamics.com\/wp-json\/wp\/v2\/categories?post=6605"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/athenadynamics.com\/wp-json\/wp\/v2\/tags?post=6605"},{"taxonomy":"yst_prominent_words","embeddable":true,"href":"https:\/\/athenadynamics.com\/wp-json\/wp\/v2\/yst_prominent_words?post=6605"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}