M1HDi8ZKSwslVx3BooDuiPyqAMtRhPNuuiQWv+w66AthroSh7VVYyKYJUdgNzRUGR0UKCPdtkCzbdrgXfLLqPp1k1MldmaJw6MejBN5dqMIfqn4zbu0x70blYAk3/vsXYzclw9e50veFpVOmLI16W4N

Ky8dnkVh9hXFXNBER7bdonBwdXAtT1+lyXUa6VO/BMwAIp+BNZ7A1bwjBoP0GmnlcA/doDUIvMVwi53FGKpysJx/Rn/VH9KthVklEP1bgRBK1tucK/FuuQFjIdhpzQqr7MhArMRWGjq2hg4fzHB1FK+
1 Agenda
SJpD+0Ja1oWBMuC13ZAxHhyU2va4Hsf8+DRIbq4PQgxm+1QROWVlbkcAEz+T/19hqTNlZSql0Q3jhyBCMUtZDgx71y+8GQp4q+VdOGohAtFyWRb/Io76+uRUmg/jsxf+Yx+sdws6Uwm3ILyIxv4RDv
tH5XBVNpZlbCSnCrHdDTuyjOZyEpzQbcuNSBsYbCW8oHSl8VR+VWNAJnV9S2JwARPqMbjQxn1FWkMhi6F26KHrpwY/y8d+TgQpr/K8k26auQEtJMpDHrxaMa30HdwrruzcQ8tOAOwBaeVfDW
BbgKxEOmnbPuPOPx4XS+x/azMX+B41hL1V45zPOms7FXJ71pza0txYWs7t/ntTOw+djE0c4qIJqyYjzclf3Z3LK8Co7LnM5szibGdbc+b54JF/XFlLsIRFJix31T0yLyEQOE1M04NCHMKBLuRoaKHPLZu
B85i6LyYlcvjF7prPbvQ0sSy9c4ztHB9arY4koKWb/YJI6feLWaLgJNFo+zn9nBqbL4CmaFLiVORp/6ra1YudmDHFS7eTx2cRfFcOGmcOKQWtJKwgUaTCuvUKNFvT2ollEJnj7H8tKqEwQxBNW5L29
tXCEB8Ytr5UPccK7AmV5Y8SnJ+0J0q8gtbrl28na4bUxazX2HSZN/aug5BVQGS7qtQ8Eru6RsWJGS7iZ6RXLWlWIsimKMmNSRX4veEVuZ9BUbRpCXo4LVTp6/k2BDsAtV3o4Da6NnNX5jcRHr3m
QrrwhTK7/x6w8zBtlMW8W7Tj4XCC9v6Sa1feuxvX3LlXi1+Aathz8k7c18Xm6WgoVpOLy0Gel9u/hAR+OnTDgCK3pWOVFA5HmeEfYNx6rY3LC7Wxb84IY+8/5nOIEcJel9vJ3D5zQENXC1v8H2a8
vpt3MtdR4L/3Nypu5tdJlYTG363NLO9YtX3BUDPqKAgxPUe58TLRbU1viVEXMtZ3WH/OQZWh/hactj5kFwBd2jc1+q4WcDswT4xcaYJavEywChtgSFgxodVuNjaMLUP0GPaKYGXD488NN2NckgSx
ihTNzvuYD/RsKYJH8NM2G67cj1/6g1ERKRI9phberE5beBcJ5NvOoI+qRagD/z4GlYRfrvQS6Smn4kdcUv1WQXxn/D7bKc/GPCJNVipj+WOBhW7m5Ya750oqUOX8aQA88aZDYBFCX/y0wz/k9qXT

Three things:
L4rLGARVp6YdmPph9XJGS9piPKa+oCNsdKt/njkNL2BVn1O5e6SzzqYwEdJGzL7z0yGJ53w23kRIs0j+JI/4w6SO1L0vDSwtfHJMAYAA+4062NlCFadJ8WAmGhbkFCpTBZNwYkkxg7V0O4vi19v/nL
Eu6m/v9A+sZOWZcnO052t/U9WK1GCxuoiZ40IllrhVdYQe2dlRKo4Tt4yh3sQJ2exGMPQ2Fho3PQp6Hn3KwzDpPYE+77K5A8Z1OfhIAzCRIvA2SJ8e5BTRa7kBLBBohZOcvbxxBOS2CZ+xZxFMQq
MAodHdnEkOruFopek9dbU3YmttU8QL+sanVLnhzUkWcE7uWxvXgkH5ZhGpJ/Ehr8CDohpY/AVy1QkCDuA0eszi/LzhYf1BK+23OasWSTHjaMhGNAOfwdDoYy0ewxOngwIgcAbYWigkZw/qvP7n6i1
EiAKYpqDKg+VDKTCVynToO80qdYeskgd7ZHv2lbKDYe+A8ap9hgDE4jXorrtZbeHl2zCfCnzt+kczOE2NlT31XV/numPnm+OtKN2X2tZlbw9kjcxvmNAZVUGw7lX7z7FmHA8O3fMLfGcQNGhwrLr8gH
Aro5O3o/XnBmbOtn1t7ort8A0OMOULnUyv4/6mb/ifOl5RiJpB0hvvdz7PIL2xSaAt1h4TD8IPh04KzkHGnRTHeCQX5tCoF7Nc7ceHcRP9O9gdYc/1m9/TsqAMsttfR5n+EHU0ICudSIZKySk0Kf8EH
Ce43H45eJcZxF9u7EpT7Gt6UwJg07T303cNRy6oZiI2msNh4bWsFV6+GWUsu0Jo99+dx/zj1/8EH8+qut2e45z3+xK9p3azo2Kh4McEnwEZiJHA9UjoUoGdwI24jslvK70YwH3IF7a2ip3Lbxx0raJ4T
TJt1jqdk5DQhqYGY6PNWvaE10DW5JKEKv2RYsLmt2bVGLBfd23zTRJujal7LtYOrI+Vxnx+5v9R0ncY7c8NUV9XP0LusJCWxCpFrr5lgA2iGWNRWgXufih8poqFu1vRGy1ynQASOk+HEsPtPDsZfSqB
4ehHQq3SjaLRDokh0vvumzXrR2RBfsZfj4AWUZGZhDwdSeX2L6yBpKkINJDXTZv/b6pD+l645Y+IXdBga722K5Edt7H3V48GmFDIrChxoui0OMIcBp+f0mkGQ8ggc/MavB/YVRzEyPxbE4gP1xS0cw
gTK4mVIsqvXcVJNAfYquE/JKIJIVJ9q2asjw9wuX99Hc9wwegKcHd10DOKpKwBe7HROlIgpEWM9KPJT8d4/YJhIIwdQNO+Jz9ZXiMmtvN0Np6UNbLajWlExeey9AnEgbkjNot0I4wy4s/jemU8h
Qn6mFk8TmLfvOAx9Pp/SsydNo9b22wCDX9fs4crPi1e6jBNiKAScld6grH/AM+dODF6839OiSvPJITTR+f+FU9Zor60LX+FnD0uRrzAmXR5r4uE4L3EsgbCWZTcf6EeoaxM/K3wn8k3HhlZ8g1pVYsS
+xH/LXC/j734yTKHPfXQHhp0A41YbYGgNeeliguVsup5r0D8gqa+Zk2aLEaHWPbk0Xk2vQS5l/dq+/pyFWqpwEkOoFZYauTALqs44kEFGxoWkVbpisnNLmdyIz49gKCVphEjNwOQIijgfh2ArigCxWd8
oBwQugIxBTXnG8cVbQSwO5RwpHY0O3J4+3Ip22yXedIY9HySmUF3Tm3+m5kNUphKbqktGJjOy4jS4vHtnmxwmyWj4N3wIIX3kbUgejuaA3+S6Wj0XrQUg9mu8QsFuNNUjc/eMUb3T1xu507o
sRDzASW6PCO95iW72/xZDM5jZP+igJus8STDtXahzGa50rJX4n5nSifbr3oYr8oQ8uT37RL5lfahJ8BYONVKmBvG5Y+I+7MmxiOpt7ITuhx5Ur8aNmjKrX7sYXiNm0T+wrGINn87ezubmXBNjGLED
wd4SisRbHSn/bT6V5jwGAFLlqcvzZ2eb+wrMQwXBw+bvgY4OANu6y0juF9THva//TaJyuQSgCKOwWEuV2/OMMtVVi0nr0ohcAn0A/mUk3AcVOGBQ55hRleFqyjG2/HdEdiDZBSVbDz1tabIIqBI8n
6zAv8EYneQz4a/SSMW3BS7WKILvzPW73oN8PytQoR7toc67HFzZ6DnO4IgA6woHiddaz7FCE8mf8GVtpRuztSDKCFWNRJJEPT1ZnEW1+ZvKyHgyDvKlA4dN+Y5PBvoLiCj1QDyMaIyJxiYTOUSe
3Uc2rmLglLE0qwMT98KeO4Nk4bfpAlDRh2Jj0j6nTZ8L15gJbA/4/roThuxNBLuFm5kWVHzXWxhZbmYJjppNiAo/cyKWof/NEFDKYslFtYLCtNyucE/oZiZXIEYi5Hv1atjGcmSPePmY6gfxRqgRDD0
6r0+43OA1r1g559MlUKKpMljd3Wwj6cBj2Y9y5VS9fZDDnKrufZGQq1D7pQGT1XAlFVR7xC+rlR0Btp9EQfAWWx0hWvu8Fc1quTUvzgalMkWSe7YsUnkKQ2CLmHnHumuCcSVNjVBHfLRwWE8+V4
+kFS9A2tPEVkOl4Yrs6cyvWn0aVvJcuJ3UxepDGMFMeWRSnlCJdpzElU6tyw7oegE4HFhh9it4gfW1UlCjZ0Z4Tbl3r99D8gaUGnLAhvpeB+FtpvZDMsavrf2kvVVgxPsDIi8o91rqg0CeZ2HHvCEw9X/2
+zqNMbx7aPkrG9xATNGIZe2GotkJPYuPSEHGoVeFlu3dxgzKmLwNM/Z9JoAvnN6vIIgsK9qRsWsqiinJ0sktBVVjvbmT2SY2P5pVm9OMRBm3PbKRZdR6g6cjAmS3h29j97I0Na6hIEVd3GH/LWVed
9HZ9kF/hSeSXkCSW5fQ4sKd8ihsyeAvsSwHYofiMZi97kxtWFisMQSCcTZTRN6jMAwqydrAd2WA5erfpvoJKFWcKkoqjIdG/HgNX2fHHyAS052KiLXLfChJdEdNRfl/knwYjI1KedKN1lkiY2+uFgl

What Nature has been teaching us about

Be1k8kxe4cJDbvNhfoAY949poDAXTlRXbpPtibgp1vzvxp0wt6tCnMqofUgO8VKMT+LHMbfhtWVQTuRxkGys0adXCJdjdknhh5Io2o/ad/6D9iv2eBkd5U5K9MEwPuo8oXyegxU4sGw4yvllCB/bQQa1f
kQwAlSPO0lla8yaOuH64NziJBNDZbrCpsj5XpMPkgA5Gecvg7bs/Pql2rZYlJ5x2/udTSMswPi2mIQhMolKTx0fit35docUHx42iLEsV3SFey+WiRYBRtXxeiTK9IWUkJ/j7JjcnEMKkagcTqrku5el8RM
U0LQmS6yweVc9q8W05mb+f1EyBiC2jrMduWUow92WW1ANkr/n50AnpCHsDIzFX45lKr3VJnBd5jIVofy0Mul+FBFgqrQekTArvsKDtcLF1vB6X5Uq6tv01Y+9oZuwSI8m//sjyTLsSSBsxPDSej/+Fb
7B3OghdQzKDmswq0BAdl5dld9HQVDAGIQ2S6bYEM4o6uwnUS1DaHRSzI2jD36YUd8WaxO/mbvsWIUqXIQWvoXx1pS65solX361iuJa1Z3uCbKdWILnmiiTiaW/hJ3VcBeDySfn19dMVzzNUes2
UN1sjY3sed25YzpLSauow3q01TBBiSY+1qil13C4GY4/fHUb6Kb7PwlrwSmuYotMCv55A5BrQarBtpbN/1NUbZpWkEdVDyMdL0Q2eE9a6vkbAeG7bf5LtwV4Yup9x0dZq+DN4GSUqnJY+44PmvO9aJo

Information Security?
pPSaOCha4sYQOdPFBXiLWhMUc9q4GXAm3gEajGD6Lrm86oIArBFUqRJhKdYK6wW2Y5LMIZ60pkdQInQOfIKwJxPeP6XB8vB3yWbJzmyPjc9z5zTT06Np+ziARORlujRkP1xs0iR5cGYyQZ8wfEm
/2ekqmawnNCUW2xRZ3cr1xIbuAG5dj6E74zJLnPHyGMaD/wX9VKJoeHuUHMfsvFvLF6AtFqg0oEHVha9tKORS9gjPhFzbAKqR41MtZOfqp6MpLDkv3DRYlhpttVOC7T1p9DLPq4mmr7DA28z0Hcpo
sounfeZO60bmsMhOdIa7A/bBMLId+DQDgzUjNPoJMU/P9hBXGC0CRpL0xt45Pq29fHwzoXdbXWpea3890XHs07zH/4TxLGR8nk1CeM48L+1wBgw76hKhAE5FJt0Lw60k/S8ZqJh30fkS7E69m/jp
fJFkzQK/3S6U0CojxqNMxWFRIyqxiYJGnuSmdUhtIyHlZH4lptK9hRFZgM8d4KY4gLPQ/gNIWuA7z0Rxw1fJYYsApaFDFTBuLN4rld/SYDFE/W5IOps3FNJ5mWl7grmN5HJ29n9+TYzHqLtFqsv/
FSrS3gw2v7KB/ErLOuBJkJS7eBf2p5XTTQrR3AXOZLoCt/YPi3xaiEHAF/UWQXhjLXncDgMVZKO/swAVJwTh8zZINFevgrtRTmb3YqyaNQMcIulGRfaQkIq+qh3Os8wDPkeez78wzjMRLS1Y3xS3
jIO9K/N0LlsFEXiNU4aq97LVdIncqDsvSaIAfF1jt4foLwiQ30AwoXOEOIBxpKbUVeHUBnjLtmu4+OBCCc9flrrSEXoVLeWqs0IjtN6LEii77HfLWN7nyUsi92phKY9g/U0Z36c/qTdqC2Ttd5X/iH5Qp
pdVgKOEyujZ4mjVQMKklYv/FrpsFVC/v9oX875RxbjgBESuUGklQgbPy2oAFC9Sqx/mMCYqtHRY4NtamXhUl3FxmWnXN8FOc8lJKik3ocXt/Mdj5ljCm+fXSEuHS/0N/mecOcaaCC3PeIqm0yLa4oUL
pAV9W4h5PtKDozr0ZtBNUFd1+bmuxcDt2Mv3VnX2rXlzONqz0/eSNVVDI70j98aKyr+Lrv7A6nYpIsds+WjMqJ+0t5NlNTaTyI6iS+IrQiD60CEq5vwB4+41M9r1w46+CmTHPIWOrwU+wZCCuvGkpq1
8KsLe652FJ24N2QQR7VUvD/zpSNm+0apYhrbnfcrYlVrDR57OfXPyKi4SaEdA2imSzNBv7az4QBldM+6G2aYb+UI31sd9mqHkftO5VFohYqT0Bzv91i8xikxIkUgZh1s9AnW8D0H2xIJAQiFmfAGHk
Roberto Rigolin Ferreira Lopes
9SBSgOGDDhzdZ+W8rkLahNkd/1XxSTg9YvG+1eCFC3FXN+NDoIAhqw5yEP019JqARgYlqhhkGc9ZgqAksfLSQ7DqmjEj7iluxuwr/8834zf86L9ij9F5yG5y8LlAfGqSkfvJT5sAUhKL/9QZYktE8v9W
GEySxWNdTBh5p4xho7OHw9VEjchzJKq92aMBaYBuWe545DiHBkPWMCCBs7dXKDgKoczDHTVomRxr4v6TY9mqJnYs9NzvgWdMDbQb1lREFShGR3eGxwzi/dYwxBWQG/YJFHipva6zhl8Bamueoy
roberto.lopes@ntnu.no
R1kVn5gNKrXRd4TOtZO4Bxmwnz8uyvmYJo/Db9LAFvf2njU2Yr8q0CVPPVuGQ4wIEKsC++ahJLHi0kSkn8GMxPJ9pqWbrVX2kZJyqfNcOEM7fF8RMwWBiIJatxCnfbzcGl6sfbDhPuXDVPP9gSgQQ
CkzzdSoyQX98nW6h0HbQaDlwVSfSodpxPv/Hy9JJUbVDaAk64fnIqWOlv6BCb0PakFF3TFzxWrHI3XQb0RRV544ZoqWHZHTRyW0hMOO7TszKu0t6A2zWyVckj5wVobrQ6MJRJ9J0jcbURWu
CVHVFeMvkTM4Jjz9CV9zGWpt5NSDV/RkTiDCqncK13Mx0txAybjZ75aTt4nAdbXPy7PNgOsjYdYBg9Uv3t06gKfD7Yhs9/W27+Qe8Ct/tEJHn4bGyaJ7VUkF5uqwkXJKYu2chFP1jx5ehc1D0W5kQ
9DKOoXQkXERm9Kdl5N9MF/rqoTeL/OnJYmiTZ5QHG2cTB3EMk/My++2dHk59wcNwe6k0ceFJJvXQVi6picyWdHHsyJgudFFd5gxOWjkBdkSLASSRgvyJlPfxHwjGBtz1mmFRDP8m4RCz2hofLrQ
G13s1xN1QV193nlqwXqRFw/Tu2RlCPAhK9UA61mkwQKufHLvrHwvU/STJYhvBvL88Gx4JcfOi9fA8ZBxCbysBaaKd8bU83U1nfiASjwE2l6jdFkiskPTojMFOVCLMQ2Y0bK6dzEt/hN2jZ9HAnOqYs3
J60A6schuZUI10D6g+kiyeB1HtA8rOUczJNrNiuDP3LmRc/HMGnV6sYFYx4KACtyNWAampquMzjWupvOUGW8n8oIfgmXofmnzEx8vNjzTKbCMfvHpl4K2XVvdwtGIofs2B5/bv3xBZnUGfZWCx7p
19th February 2016 - Gjøvik, Norway
D6nU0axtXs7YyEsO22pA30S+Md6H25DuYIapMjdzjQBxIJp695BHWAIZBJeqZ8IQuc0imhSCqWGWtop7WTzINA+FBeE/9qvsuAWZbfDRiXDF70SCm3edGAHtbSdFe8CNvtMIwsN9yAmwLcJ6
Hr79tq3S5DGluGjGex1X9o5EGb02YIMbYUi1TT/EGQA7k3WWvYAScoJADIprLm0070f4L+aQCf8SjwcogGuDbRptaIz+lPGxy8hdMwWrr3Fu/ZCXVP0MPMWFAjRzJUQ4YgO8p8+6LAZBVWaDPd
8T4LOI8EDL2FtxN8Om70z+AmhetG1TrCxvhgqzq9jANdJwhu27f5QCQLICuEk3+mRkCfKg9jibzGCTYLXIIRw7OI96PHDywn0KLE0wsGXHsCcaRcu5YHr6Y1jKCJ0If5MJcGD7bUW8+Ym3YyUgkR
Presentation title yyyy-mm-dd
4M+QBCbq2ia8TPkbQz29HLZBNvp1yIMc/JRuj/txDZcWGir3TnbPgN3bnamOFkIhAhELxBb+9haFwGWN1C59L+kgFQVKvkrhbOinJrcQZbHK47OupO/hrAuxPcyyQjvvXEz9IqIwuWKm/PPkoqnNQ
 2 Agenda

In short
Three things:
Thermodynamics
~13.8 billion years +
Life Nature
Milk Way
~3.8 billion years +
zUkWcE7uWxvXgkH5ZhGpJ/E
hr8CDohpY/AVy1QkCDuA0eszi/
Language +
LzhYf1BK+23OasWSTHjaMhGN
AOfwdDoYy0ewxOngwIgcAbY
WigkZw/qvP7n6i1EiAKYpqDKg+V
~100.000 years
DKTCVynToO80qdYeskgd7ZHv2
Entropy
lbKDYe+A8ap9hgDE4jXorrtZbe
Hl2zCfCnzt+kczOE2NlT31XV/n
Information Theory
umPnm+OtKN2X2tZlbw9kjcxvm
NAZVUGw7lX7z7FmHA8O3fML
fGcQNGhwrLr8gHAro5O3o/Xn
67 years (1948)
BmbOtn1t7ort8A0OMOULnUyv

What’s the relation with Cyber Security?

... inspiration for a Tactical Service Infrastructure (TSI)

1st Programming Language RSA World Wide Web

62 years (1954) 38 years (1977) 26 years (1989)
Presentation title
 3 Agenda

Agenda
Three things:
Let us have look at Cyber Security from a different angle…

@src Dead Poets Society (1989) scene

http://www.imdb.com/title/tt0097165/
+Presentation
fake titlethermo view by Photoshop yyyy-mm-dd
4 Agenda

Captain, my captain; our tools:

Three things:

i. Copernicus attitude
Hey, Earth isn’t the center of the Universe!

ii. DeLorean to travel in time

Deadlines, hum?!

iii. Millennium Falcon Fram…

We can use it to leave Earth, right?

iv. Basic Physics

Presentation title Just for fun... 
yyyy-mm-dd
5 Agenda

What if we ask a Security Expert:

Three things:
What’s up?
Say it is a good day
We are keeping systems running… (and runs to grab some coffee)

Systems + + …

That is, MISSION IMPOSSIBLE business

Risk Assessment + … etc

Presentation title yyyy-mm-dd
 6 Agenda

What if we ask an Astrophysicist:

Three things:
What’s up?
Say it is a good day
She will show you the latest simulated picture of the Universe:

Systems + + …
System with 10 billion galaxies interacting

Explaining: If you can compute the entropy S of such system, you will notice
That’s why Cyber Security is Mission Impossible?
that the amount of disorder is always increasing.
It is easier to break in than to protect systems...
That is, Second law of Thermodynamics
𝑑𝑆 ≥ 0 dSuniverse = (dSsurroundings + dSsystem ) ≥ 0
Amount of disorder always increase.Presentation title yyyy-mm-dd
7 Agenda

Thermodynamics ~13.8 billion years

Three things: You can’t break it!
Zero law : Temperature

First law : Conservation o Energy

Energy can be neither created nor destroyed
Second law : Entropy
Amount of disorder always increase 𝑑𝑆 ≥ 0
What if the Universe is an OS?
Hypothesis: Then thermodynamics is
an unbreakable subsystem.

yyyy-mm-dd
 8 Agenda

Let’s give it a try… Put on your Copernicus hat!

Three things:

What’s the relation?

zUkWcE7uWxvXgkH5ZhGpJ/Ehr
8CDohpY/AVy1QkCDuA0eszi/Lzh
Yf1BK+23OasWSTHjaMhGNAOf
wdDoYy0ewxOngwIgcAbYWigkZ
w/qvP7n6i1EiAKYpqDKg+VDKTCVy
nToO80qdYeskgd7ZHv2lbKDYe+
A8ap9hgDE4jXorrtZbeHl2zCfCn
zt+kczOE2NlT31XV/numPnm+OtK
N2X2tZlbw9kjcxvmNAZVUGw7l
X7z7FmHA8O3fMLfGcQNGhwrL
r8gHAro5O3o/XnBmbOtn1t7ort8
A0OMOULnUyv

Rubiks’ cube Paper ball Encrypted

message

Second law of Thermodynamics: 𝑑𝑆 ≥ 0

dSuniverse = (dSsurroundings + dSsystem ) ≥ 0 Amount of disorder always increase.
Presentation title yyyy-mm-dd
9 Agenda

Warm up in short
Three things:

Designed to be reversible

Public: BigNumber

Hard to reverse!

Private: BigPrime x BigPrime

Kabalmysteriet er bygget opp
med en rammefortelling om den
12 år gamle Hans Thomas, som
sammen med faren reiser med
bil gjennom Europa. Inn i denne
rammefortellingen
historien fra Bolleboka, en
Designed to be reversible
finnes
minitayrbok som Hans Thomas
får i Sveits. Hele historien
fortelles i tilbakeblikk av den 18
gamle Hans Thomas. Romanen
har 53 kapitler, med navn etter.
zUkWcE7uWxvXgkH5ZhGpJ/E
hr8CDohpY/AVy1QkCDuA0eszi/
LzhYf1BK+23OasWSTHjaMhGN
AOfwdDoYy0ewxOngwIgcAbY
WigkZw/qvP7n6i1EiAKYpqDKg+V
DKTCVynToO80qdYeskgd7ZHv2
lbKDYe+A8ap9hgDE4jXorrtZbe
Hl2zCfCnzt+kczOE2NlT31XV/n
umPnm+OtKN2X2tZlbw9kjcxvm
NAZVUGw7lX7z7FmHA8O3fML
fGcQNGhwrLr8gHAro5O3o/Xn
BmbOtn1t7ort8A0OMOULnUyv
Presentation title
Kabalmysteriet er bygget opp
med en rammefortelling om den
12 år gamle Hans Thomas, som
sammen med faren reiser med
bil gjennom Europa. Inn i denne
rammefortellingen
historien fra Bolleboka, en
finnes
minitayrbok som Hans Thomas
får i Sveits. Hele historien
fortelles i tilbakeblikk av den 18
gamle Hans Thomas. Romanen
har 53 kapitler, med navn etter.yyyy-mm-dd
10 In Short

TSI Tactical Service Infrastructure

Connectivity graph
VHF, SatCom
VHF WLAN VHF UHF SatCom
Custom
Handheld
UHF, VHF, WLAN, UHF, WLAN
SatCom VHF
HQ Mobile Dismounted
WLAN, UHF

UHF, VHF, SatCom

Example of system: Tactical Ground Support

Laptop Good connectivity

Poor connectivity

Laptop
HQ Presentation title yyyy-mm-dd
No connectivity
 11 In Short

TSI Tactical Service Infrastructure

Brigade
HQ (TN-H)

MEDEVAC Act Observe

Mobile (TN-M)
<Core>
Dismounted (TN-D)
Services

Decide Orient
Custom (TN-C) Company

<Mobile>

Platoon1
… Platoonx
Tactical Ground Support
Squads
Act Observe

Decide Orient
Cyber Napoleon
As you know, cyberwar is a “movie” apart…

The equal capable adversary is here, Tiger

Presentation title yyyy-mm-dd
12
<Faster tempo> Decision Loop

Act Observe
Act Observe
<Disorder>
You win!

Decide Orient
Decide Orient
Vs. Cyber Napoleon

Act Observe
?
The game is get inside the adversary’s decision loop first.

Remember Tiger, these loops scale…

Act Observe

Act Observe

Decide Orient Decide Orient Decide Orient

Platoon Squad Node

13 Agenda

Three things:

What if … ? Information System

= =

If things can blow up, then you call it: Critical System
Presentation title yyyy-mm-dd
14 Agenda

Insights so far
Three things: x

Digital rubber band!

x

= TSI
Tactical Service Infrastructure

show starts now!

Presentation title yyyy-mm-dd
 15 In Short

TSI Tactical Service Infrastructure

Two chains: Static view

Services
Information Systems
Sn

Northbound Interface

<You>
IN OUT 3 Service Mediator

Two Core Services

2 Message Handler Controller
Cross-layer

1 Packet Handler

TSI Node

Southbound Interface

Presentation title yyyy-mm-dd

16
~3.8 billion years
Agenda

The fun chart

Information is the change in entropy
Three things:

Changing entropy
zUkWcE7uWxvXgkH5ZhGpJ/Ehr
8CDohpY/AVy1QkCDuA0eszi/Lzh
Yf1BK+23OasWSTHjaMhGNAOf
wdDoYy0ewxOngwIgcAbYWigkZ
w/qvP7n6i1EiAKYpqDKg+VDKTCVy
nToO80qdYeskgd7ZHv2lbKDYe+
A8ap9hgDE4jXorrtZbeHl2zCfCn
zt+kczOE2NlT31XV/numPnm+OtK
N2X2tZlbw9kjcxvmNAZVUGw7l
X7z7FmHA8O3fMLfGcQNGhwrL
r8gHAro5O3o/XnBmbOtn1t7ort8
A0OMOULnUyv

Also handling information…

47 years (1968)

Constant entropy Presentation title yyyy-mm-dd

 17 Agenda
Information = change in entropy

Life forms
~3.8 billion
Three things:years Food
Heat + gases >
processed food
IN has higher entropy
Negative entropy

Replication

<You>
Increasing entropy OUT
Docking; lots of data is Entropy goes here
transfered to make a baby Presentation title yyyy-mm-dd
 18 Agenda
Information = change in entropy

Calculators of yours
47 years
Three (1968) Microprocessor
things:

Heat + gases >

Software
Software processed food
IN has higher entropy
Negative entropy

Ops! Software Services

Software
Software
<Computer>
Increasing entropy OUT
Docking; lots of data is Entropy goes here
transfered to make a baby Presentation title yyyy-mm-dd
19
3
In Short
Service mediator

TSI Tactical Service Infrastructure 2

1
r
Message handler
Packet handler
Radio {WLAN, UHF, VHF, SatCom}
Dynamic view

TSI Cross-layer calls TSI Cross-layer calls

Service
rin i1 i2 i3 Sn o3 o2 o1 ro
In Out
Traceability::Labelling and Protection::MessageHandling
.readLabel() .writeLabel()
i2 o2 .encryptMsg()
.decryptMesg()
Entropy is zero (dS = 0)
Entropy increases (dS > 0)

Principle of least privilege for methods’ calls:

.readLabel() .writeLabel()
i1 i3 .decryptMesg() o3 o1 .encryptMsg()

Wait a second, we just created another definition of ENTROPY?

Presentation title yyyy-mm-dd
20
How many definitions of entropy outInthere?
Short

Entropy, hum? 1
−(𝑒𝑛𝑡𝑟𝑜𝑝𝑦) = 𝑘 log
1944 Schrödinger 𝐷

𝑆 = 𝑘 log 𝑊
1875 Boltzmann

Metabolism of life forms

𝐻 𝑥 =− 𝑝𝑖 𝑥 log 𝑝𝑖 (𝑥)
1948 Shannon 𝑖
Kinetic theory of gases

yyyy-mm-dd

Information
Presentation titletheory
 21 In Short
1
Cyber Security −(𝑒𝑛𝑡𝑟𝑜𝑝𝑦) = 𝑘 log
1944 Schrödinger 𝐷
𝑎𝑙𝑙

If you go
Iron man, … Metabolism of life forms

𝑆 = 𝑘 log 𝑊 Organic Chemistry

1875 Boltzmann
Brain power
much needed! Biology
Your species
Kinetic theory of gases

Quantum Physics Classical Physics

𝐻 𝑥 =− 𝑝𝑖 𝑥 log 𝑝𝑖 (𝑥)
1948 Shannon 𝑖
<new computing
stuff here>
Systems, computers yyyy-mm-dd
and networks
Let’s do another experiment…
Presentation title
Information theory
 22 Agenda
Milk way will collide with
Andromeda
If 𝑑𝑆 ≥ 0 , then:
Amountthings:
Three of disorder always increase

white dwarf
In 5 billion years
No life and its calculators
All fun must to happen NOW!

<Low entropy> <High entropy>

No cryptography No cryptography
No life forms Including Information Security… No life forms

Past Now
Presentation title Future yyyy-mm-dd
 23 Agenda

Boundaries for cyber stuff

Three things:
Hypothetical Boundaries for fun Life in the Universe

Origin of life First Digital Electronic

@Earth Computer
[ [ ] ]
H0 Natural selection
H0+y Hx Hx+c
+ Science and Technology
How to compute such conditions?
Computers will
primal simplicity
A. Matrix you must
organized complexity
use collapse after life forms

Closer look at humans:

Little trouble here!
The machines may beat us up…

Natural selection + Science and Technology

Humans today Presentation title Jedi Master

yyyy-mm-dd
 24 Agenda
Matrix in short: Neo is the inverse function of Smith
Three things:

Girls

Neo f -1(y) = x Smith f(x)= y

System’s states: x is protected and y is unprotected

The whole trilogy: f -1(f(x)) = x Just calculations?

What if f(x) is more complex than Yeah, girls!

That is, f(x)= y*g(x) Singularity: humans are then obsolete*

Will be easier cure cancer
than fix a bug…
f(x) > > Neo > guys
Even Neo can’t inverse such thing
25 @detour trying to reach your permanent memory In Short

What if we have a dino?

Defense, hum?

 Mechanics
 Thermodynamics
 Cyber Security
# find / –n rootkit
for dino
food
smart food

Presentation title yyyy-mm-dd

27 In Short

@Tactical network
Diversity of nodes and radios:

Diversity
Battalion
<OWL-DL>
Redundancy
Server(s)

High increases
Detection
Life is protecting information
Diligenceusing flesh and bones…
# classes, instances
Planning
Protection and axioms
Node C Response <OWL-Lite>
Deduction capabilities

Detection decreases
Diligence
Protection
Response
Node B
# policy domains <RDFS>
increase

Detection
Diligence
Protection
Node A Sensor network(s)
Low
General Specialization Specialized
28 In ago...
The mindset one year Short
Let us make TSI so good…
IF E001

«Software»
TSI Node

«Software» «Software»
Service Mediator Controller

«Function» «Function» «Function» IF I003

Session Message Message «Function»
Management Exchange Adaption QoS Handling

«Function»
IF I001 Routing

«Function»
Security
«Software» Handling
Message Handler
IF I004
«Function» «Function» «Function»
Message Message Service Registry
Forwarding Transport

«Function»
Contextual
IF I002 Monitoring

«Function»
Policy
Management
«Software»
Packet Handler
«Function»
«Function» «Function» Metadata
IF I005 Handling
Packet Packet
Forwarding Scheduling

…that an adversary will give us flowers!

IF E002

«ResourceArtifact»
Presentation title yyyy-mm-dd
Tactical Service Infra (TSI) - Just Another
BS Rather Very Intelligent System (JARVIS)
29 Agenda

Future of your species

Three things:
Right now: Given a f-word function f(x), then f(People)

Want to improve Cyber Security?

Fix your species, Tiger!
RSA World Wide Web 47 years (1968)
38 years (1977) 26 years (1989) Microprocessor

What if we GO Interstellar?
Let’s recompile your species with the SECURITY flag TICKED!
All Cyber Security issues are here!

Solar System in scale

Presentation title yyyy-mm-dd
 30 Agenda

Norwegians conquered the last place on

Three things: Earth… the Moon was next…
... something went wrong...
The south pole

What if we could go skiing to the moon?

Then we would have Norwegian flags all over the place...

Cool universe

Cyber skiers... rejoice!

Presentation title yyyy-mm-dd

31 In Short

Entropy and Space Exploration

A human is the lowest-cost, ~70kg, nonlinear,
all-purpose computer system which can be
mass-produced by unskilled labor.
― NASA, man-in-space report, 1965

What about potatoes entropy, NASA? What !?

 
The Force
Presentation title yyyy-mm-dd
32 Agenda

The puzzle http://robertorigolin.com/puzzle/

Three things:

Presentation title yyyy-mm-dd

 33 Agenda

The puzzle http://robertorigolin.com/puzzle/

Three things:

Notables from Lucasfilm: The options:

a) Smaug spitting fire

b) Storm Troopers in a explosion
c) Iron man flying
d) Sherlock blowing something

Presentation title yyyy-mm-dd

34 Agenda

The puzzle
Three things:

Congrats, Smaug!

Presentation title yyyy-mm-dd

35 In Short

Security Domains
First try: Sharks’ hygiene

Security domains:
Planning

Protection

Detection

Diligence

Response
36 3 Missions
Say ‘Hi’ TSI!
Security Handling

<Services>
3 layers <Messages>
<Packets>

TSI Cross-layer calls TSI Cross-layer calls

Service
rin i1 i2 i3 Sn o3 o2 o1 ro
In Out

3 brushes at the same time!

Presentation title yyyy-mm-dd
37 Distributed Security Policies

Security Handling

UHF WLAN

Node A

<Dismounted>

WLAN UHF VHF SatCom

WLAN VHF UHF SatCom

Node C
<Mobile>
Node D
HQ
<Deployed>
38 Distributed Security Policies

Security Handling
 Nodes (N), Policies (P) and Security Domains (S)

N1:P1(N1:S1)
N2:P2(N2:S2), N2:P’1(N1:R1)
Ni:Pi(Ni:Si),…, Ni:P’i-1(Ni-1:Ri-1)

UHF WLAN VHF SatCom WLAN UHF VHF SatCom WLAN VHF UHF SatCom

Node A Node D
Node B Node C HQ
<Dismounted> <Mobile> <Deployed>
<Relay>

Resources and # domains

Presentation title yyyy-mm-dd
39 Distributed Policies

owl:thing
Reasoning over policies owl:intersectionOF
owl:unionOf
owl:equivalentClass
Validate owl:equivalentProperty
owl:inverseOf
loop owl:functionalProperty
OWL-lite 2 owl:inverseFunctionalProperty
No Is valid? Yes 20 axioms owl:symmetricProperty
owl:transitiveProperty
Deny Allow OWL-DL 1 owl:hasValue
25 axioms owl:disjointWith
owl:sameAs
owl:differentFrom
owl:thing
owl:distinctMembers
owl:intersectionOF
owl:someValuesFrom
owl:unionOf
owl:allValuesFrom
owl:equivalentClass
owl:cardinality
owl:minCardinality
owl:maxCardinality

OWL-lite 20 axioms OWL-full

40
The happiness equation!
Agenda

Nature calls every day…

Three things:

 -
Feeling heavy?
=  HAPPY again!
less entropy
high entropy
entropy goes here
Second law of Thermodynamics: 𝑑𝑆 ≥ 0
Amount of disorder always increase.

𝑑 = 𝑑𝑆 ≥ 0
The secret of life in short This demands a closer look…
Presentation title yyyy-mm-dd
41 In Short

Happiness with respect to toilet

>0
𝑑
once a week

.  : −)
Hypothesis: = 0is predictable!
happiness
2 weeks
𝑑
<0
entropy goes here + 3 weeks

Presentation title yyyy-mm-dd

42 In Short

Insights so far

=
Rubber ban

= TSI
Tactical Service Infrastructure

= Once a week

Presentation title Hygieneyyyy-mm-dd

43 In Short

Using my expertise C2y

Orchestrations of core services

2 3 i3 C3z ...
Mission Debrief
i2 C2y C22 ... C2n

i1 C1x ...

Olocal ri
S1,...,Sn

How many methods?

TN-xn C*32
i3 C31
...
C3x o3
25 Core Services * 3 Interfaces * 5 methods/Int
C*22
= 375 methods
i2 C21
...
C2x o2
How many permutations?
i1 C11 C*12 C1x o1
... 375 375
= 1010 to 1019
ri ro 5 10
Presentation title yyyy-mm-dd
44 In Short

Using my expertise O1 ={ S1 S2 ...

Sn }
Cyber Napoleon O1 ~ {Observe, Act} O2 ~ {Orient, Act} On ~ {Orient, Decide}
- Unauthorized access/modification TN-D TN-M TN-H
- Replace services
- Mess with orchestrations i1 O1 o1 i2 O2 o2 ... in On on

TSI Cross-layer calls

rin i1 i2 i3
Attack Attack
In
Response Response
S1 S2 Act Observe
Act Observe On O1

O1
VHF SatCom
Decide Orient O2
Sn O3

Cross-layer calls
Decide Orient
TSI
o3 o2 o1 ro
Diligence Diligence
Planning Planning
Out Presentation title
Response
yyyy-mm-dd
45 Distributed Security Policies

 Connectivity Graph and Security domains

<Dismounted> <Mobile> <Deployed> Security domains

SatCom 1 Detection
UHF, 2 Protection
WLAN UHF, VHF, 3 Attack
WLAN 4 Diligence
5 Response
UHF, VHF, 6 Planning
Ni-1 Ni SatCom
Ni+1
{1,2,3} UHF, WLAN {1,2,3,4,5} {1,2,3,4,5,6}
Observe, Act Orie nt, Act Decide L1,n
Observe, Act Orie nt, Decide, Act - L2,n
Observe, Orie nt, Act Orie nt, Decide, Act - L3,n

Knitting kinetic and cyber domains

Presentation title yyyy-mm-dd
 46 In Short

<WANTED>

Mission: catch the creative attackers within the system

Act Observe
Act Observe

Handheld

<Dismounted>
Decide Orient Drone

Act Observe Decide Orient

<Relay>

Hey TSI.JARVIS, the funny

guy is around?

Act Observe

Act Observe

Decide Orient

Decide Orient
Laptop

Decide <Mobile> Orient

Cyber Napoleon Vs. TSI.JARVIS
Presentation title yyyy-mm-dd
Tactical Service Infra (TSI) - Just Another Rather Very Intelligent System (JARVIS)
47 In Short

Path to the Force…

Jedi Masters have high entropy or are hard to find…

dead (thermo equilibrium)

But they wrote books…

so you can meet them!
Presentation title yyyy-mm-dd
48 Agenda

# dmesg | grep The Force

* The figures were stolen from the web and the ideas synthetized
Three things:
from these books:

Presentation title yyyy-mm-dd

49 In Short

Acknowledgment
Thanks to Jostein Gaarder for motivating teenagers
to think for themselves.

Kabalmysteriet
Jostein Gaarder The Solitary Mystery
Warning: this is a “dangerous” book. Use and abuse! 
Presentation title yyyy-mm-dd
 50 Agenda

Take away message:

Three things:
Let us have look at EVERYTHING from a different angle…

Grip dagen, stol så lite som mulig på den neste!

@src Dead Poets Society (1989) scene
Message
Presentation title from the first Norwegian I ever met.
yyyy-mm-dd
http://www.imdb.com/title/tt0097165/
M1HDi8ZKSwslVx3BooDuiPyqAMtRhPNuuiQWv+w66AthroSh7VVYyKYJUdgNzRUGR0UKCPdtkCzbdrgXfLLqPp1k1MldmaJw6MejBN5dqMIfqn4zbu0x70blYAk3/vsXYzclw9e50veFpVOmLI16W4
NfKy8dnkVh9hXFXNBER7bdonBwdXAtT1+lyXUa6VO/BMwAIp+BNZ7A1bwjBoP0GmnlcA/doDUIvMVwi53FGKpysJx/Rn/VH9KthVklEP1bgRBK1tucK/FuuQFjIdhpzQqr7MhArMRWGjq2hg4fzHB1
51 Agenda
FK+SJpD+0Ja1oWBMuC13ZAxHhyU2va4Hsf8+DRIbq4PQgxm+1QROWVlbkcAEz+T/19hqTNlZSql0Q3jhyBCMUtZDgx71y+8GQp4q+VdOGohAtFyWRb/Io76+uRUmg/jsxf+Yx+sdws6Uwm3ILyIxv
4RDvtH5XBVNpZlbCSnCrHdDTuyjOZyEpzQbcuNSBsYbCW8oHSl8VR+VWNAJnV9S2JwARPqMbjQxn1FWkMhi6F26KHrpwY/y8d+TgQpr/K8k26auQEtJMpDHrxaMa30HdwrruzcQ8tOAOwBae
VfDWBbgKxEOmnbPuPOPx4XS+x/azMX+B41hL1V45zPOms7FXJ71pza0txYWs7t/ntTOw+djE0c4qIJqyYjzclf3Z3LK8Co7LnM5szibGdbc+b54JF/XFlLsIRFJix31T0yLyEQOE1M04NCHMKBLuRoa

The end… evolving…

KHPLZuB85i6LyYlcvjF7prPbvQ0sSy9c4ztHB9arY4koKWb/YJI6feLWaLgJNFo+zn9nBqbL4CmaFLiVORp/6ra1YudmDHFS7eTx2cRfFcOGmcOKQWtJKwgUaTCuvUKNFvT2ollEJnj7H8tKqEwQxB
NW5L29tXCEB8Ytr5UPccK7AmV5Y8SnJ+0J0q8gtbrl28na4bUxazX2HSZN/aug5BVQGS7qtQ8Eru6RsWJGS7iZ6RXLWlWIsimKMmNSRX4veEVuZ9BUbRpCXo4LVTp6/k2BDsAtV3o4Da6NnN
X5jcRHr3mQrrwhTK7/x6w8zBtlMW8W7Tj4XCC9v6Sa1feuxvX3LlXi1+Aathz8k7c18Xm6WgoVpOLy0Gel9u/hAR+OnTDgCK3pWOVFA5HmeEfYNx6rY3LC7Wxb84IY+8/5nOIEcJel9vJ3D5zQE
NXC1v8H2a8vpt3MtdR4L/3Nypu5tdJlYTG363NLO9YtX3BUDPqKAgxPUe58TLRbU1viVEXMtZ3WH/OQZWh/hactj5kFwBd2jc1+q4WcDswT4xcaYJavEywChtgSFgxodVuNjaMLUP0GPaKYGXD4
88NN2NckgSxihTNzvuYD/RsKYJH8NM2G67cj1/6g1ERKRI9phberE5beBcJ5NvOoI+qRagD/z4GlYRfrvQS6Smn4kdcUv1WQXxn/D7bKc/GPCJNVipj+WOBhW7m5Ya750oqUOX8aQA88aZDYBF

Three things:
CX/y0wz/k9qXTL4rLGARVp6YdmPph9XJGS9piPKa+oCNsdKt/njkNL2BVn1O5e6SzzqYwEdJGzL7z0yGJ53w23kRIs0j+JI/4w6SO1L0vDSwtfHJMAYAA+4062NlCFadJ8WAmGhbkFCpTBZNwYkk
xg7V0O4vi19v/nLEu6m/v9A+sZOWZcnO052t/U9WK1GCxuoiZ40IllrhVdYQe2dlRKo4Tt4yh3sQJ2exGMPQ2Fho3PQp6Hn3KwzDpPYE+77K5A8Z1OfhIAzCRIvA2SJ8e5BTRa7kBLBBohZOcvbxx
BOS2CZ+xZxFMQqMAodHdnEkOruFopek9dbU3YmttU8QL+sanVLnhzUkWcE7uWxvXgkH5ZhGpJ/Ehr8CDohpY/AVy1QkCDuA0eszi/LzhYf1BK+23OasWSTHjaMhGNAOfwdDoYy0ewxOngwIgc
AbYWigkZw/qvP7n6i1EiAKYpqDKg+VDKTCVynToO80qdYeskgd7ZHv2lbKDYe+A8ap9hgDE4jXorrtZbeHl2zCfCnzt+kczOE2NlT31XV/numPnm+OtKN2X2tZlbw9kjcxvmNAZVUGw7lX7z7FmHA8O
3fMLfGcQNGhwrLr8gHAro5O3o/XnBmbOtn1t7ort8A0OMOULnUyv4/6mb/ifOl5RiJpB0hvvdz7PIL2xSaAt1h4TD8IPh04KzkHGnRTHeCQX5tCoF7Nc7ceHcRP9O9gdYc/1m9/TsqAMsttfR5n+E
HU0ICudSIZKySk0Kf8EHCe43H45eJcZxF9u7EpT7Gt6UwJg07T303cNRy6oZiI2msNh4bWsFV6+GWUsu0Jo99+dx/zj1/8EH8+qut2e45z3+xK9p3azo2Kh4McEnwEZiJHA9UjoUoGdwI24jslvK7
0YwH3IF7a2ip3Lbxx0raJ4TTJt1jqdk5DQhqYGY6PNWvaE10DW5JKEKv2RYsLmt2bVGLBfd23zTRJujal7LtYOrI+Vxnx+5v9R0ncY7c8NUV9XP0LusJCWxCpFrr5lgA2iGWNRWgXufih8poqFu1vR
Gy1ynQASOk+HEsPtPDsZfSqB4ehHQq3SjaLRDokh0vvumzXrR2RBfsZfj4AWUZGZhDwdSeX2L6yBpKkINJDXTZv/b6pD+l645Y+IXdBga722K5Edt7H3V48GmFDIrChxoui0OMIcBp+f0mkGQ8gg
c/MavB/YVRzEyPxbE4gP1xS0cwgTK4mVIsqvXcVJNAfYquE/JKIJIVJ9q2asjw9wuX99Hc9wwegKcHd10DOKpKwBe7HROlIgpEWM9KPJT8d4/YJhIIwdQNO+Jz9ZXiMmtvN0Np6UNbLajWlExe
ey9AnEgbkjNot0I4wy4s/jemU8hQn6mFk8TmLfvOAx9Pp/SsydNo9b22wCDX9fs4crPi1e6

What Nature has been teaching us about

Information Security?

Roberto Rigolin Ferreira Lopes

roberto.lopes@ntnu.no

“Study hard what interests you the most in the most

undisciplined, irreverent and original manner possible.”
― Richard Feynman
Always remember,
entropy goes here... \o/ Presentation title yyyy-mm-dd