Profile of Gadi Evron

CEO & Founder, Cymmetria, head of Israeli CERT, Chairman, Cyber Threat Intelligence Alliance

News & Commentary Posts: 70

Gadi is CEO and founder of Cymmetria, a cyber deception startup and chairman of the Israeli CERT. Previously, he was vice president of cybersecurity strategy for Kaspersky Lab and led PwC's Cyber Security Center of Excellence, located in Israel. He is widely recognized for his work in Internet security and global incident response, and considered the first botnet expert. Gadi was CISO for the Israeli government Internet operation, founder of the Israeli Government CERT and a research fellow at Tel Aviv University, working on cyber warfare projects. Gadi authored two books on information security, organizes global professional working groups, chairs worldwide conferences, and is a frequent lecturer.

Articles by Gadi Evron

View Content By Month

How Facebook Raises A Generation Of Intelligence Analysts

6/2/2016
In the process of creating and administering groups, users learn how to read data points, create a risk profile in their head, and watch for changes over time.
Post a Comment

Doing Tech Evangelism Right

3/8/2012
Kaspersky Lab's public request for help on an unsolved mystery surrounding Duqu serves as a case study about the power of technology evangelism
Post a Comment

Eavesdropping Trojans Used In Cell Phone Spying Case

9/26/2011
Israeli case a reminder of all types of social engineering threats
Post a Comment

Stuxnet: An Amateur's Weapon

10/15/2010
Stuxnet, a Trojan supposedly designed to attack Iran's nuclear program, is so technically advanced that it is said to be able to remotely explode a power plant without the controller noticing. Such an advanced weapon was developed by people with means. But whoever they are, they're amateurs.
Post a Comment

State Of Cybercrime Legislation Around The World

9/13/2010
The main problem with international law enforcement on cybercrime is that even with efforts by the FBI and others, international communication between different agencies around the world is extremely slow.
Post a Comment

'Virus Crashes Plane' And Poor Safety Protocols

9/10/2010
Now that people are done making noise about how a "virus crashes a plane," the subject can be discussed reasonably.
Post a Comment

Ownage By USB Keyboard

9/8/2010
When was the last time Windows asked you for permission before adding your new hardware -- say, a mouse?
Post a Comment

Girl Quits Job! Oh, What A Meme

8/11/2010
Who hasn't yet seen the "Girl quits her job on dry erase board, emails entire office" meme? It hit the Net like an hurricane, and I liked it immediately. In fact, fake or not -- I still do. What can we learn from it?
Post a Comment

Yet Another Facebook Malware Evolution

8/9/2010
Every once in a while I like to discuss the strategic view and how different players affect each other in the realm of cybercrime. This post is about the latest evolutionary development in the fight -- with Facebook malware.
Post a Comment

Killed By Code: The FDA And Implantable Devices Security

7/26/2010
A new report from the Software Freedom Law Center deals with the security implications of bionic medical devices being implanted into the human body.
Post a Comment

Facebook And National Security: Two Cases

7/9/2010
Dark Reading's Kelly Jackson Higgins wrote about the fake Robin Sage account, which duped many in vetted circles to add "Robin" as a Facebook friend. Now from Israel comes a story of how soldiers from a secret IDF base created a Facebook group for it.
Post a Comment

Kyrgyzstan On Verge Of Cyberwar? Not So Much

6/24/2010
Cyberwarfare has become one of these buzzwords people just like to use. But in most cases -- it isn't used accurately.
Post a Comment

Search Google, Surf Facebook Using HTTPS

6/18/2010
While more and more sites support encryption (Twitter, LinkedIn), sometimes even by default (Gmail), others still send your data in the clear. The new Firefox extension is just what the doctor ordered.
Post a Comment

Turkish Hackers Defacing Israeli Facebook Accounts

6/5/2010
Following the Gaza flotilla incident, Turkish hackers have been defacing Facebook accounts of Israelis and uploading anti-Israeli material to them.
Post a Comment

The Myth Of Cyberattack Deterrence

5/10/2010
Deterrence online is one of the biggest idiocies of the past couple of years. There are some interesting research possibilities in the subject matter, but not as it is portrayed today -- a cure-all strategy.
Post a Comment

Alert: Disposable Facebook Apps Installing Adware

5/6/2010
Just like throwaway domains on the wider Internet, it seems like criminals now use throwaway applications on Facebook. They bring one app online to lure users and potentially infect them, and by the time one is taken down by Facebook, they create yet another.
Post a Comment

Al Qaeda Implicated In Cyberattacks

4/30/2010
Some papers recently became publicly available in the case of terrorism suspect Mohamedou Ould Slahi, accused of being one of Al-Qaeda's top recruiters. The papers revealed Al-Qaeda hacking activity, which demonstrates what proof of accountability in Internet attacks is, and how many of us jump to conclusions about countries, such as China, without it.
Post a Comment

New Full Disclosure, Website Vulnerabilities Database

4/16/2010
The biggest news in security circles in the past day or so is the new full disclosure site, Vulnerable Sites DB database.
Post a Comment

NSA Director On The Cyber-Counterattack

4/15/2010
According to an Associated Press report, the director of the National Security Agency told Congress the U.S. should respond in force to computer-based attacks -- even when the attacker is not known. Is that possible, and is it a good idea?
Post a Comment

Stop Counting Bots

4/9/2010
How many bots are on the Internet, and why should we care? This is an argument I've been making since the late 1990s, and it is high time I got it in writing outside of closed circles.
Post a Comment

A Russian Strategist's Take On Information Warfare

3/26/2010
Today I'd like to introduce you to one of the main thinkers on information warfare, who most of you never heard of. S.P. Rastorguev (Расторгуев C.П.). He is a Russian strategist who unfortunately, as far as I can find, hasn't been translated.
Post a Comment

So Long, And No Thanks: Why User Education Fails

3/18/2010
In "So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users," Cormac Herley of Microsoft Research tries to answer why users don't respond to security advice.
Post a Comment

Cyberwarfare: Play Offense Or Defense?

3/11/2010
One of the key differences in military theory between Internet warfare and kinetic warfare is whether defense or offense are stronger. Here's a shortened version of an argument I am formulating about this matter following years of debate.
Post a Comment

Social Networks, Data Leaks, And Operation Security

3/4/2010
Following a Facebook update from a soldier on an upcoming operation, the Israeli Defense Forces (IDF) canceled an operation into the West Bank, illustrating how the connected world makes maintaining operational security (OPSEC) all the more difficult.
Post a Comment

Mozilla's Add-On Policies And Spyware Surprises

2/17/2010
I've been using FlashGot on and off for years. It is a useful plug-in that helps you download multiple files from the same Web page "automagically." So when Firefox informed me about a new update for an add-on I've used for years, I clicked "OK" and updated it, only to find a surprise the next time I used Google.
Post a Comment

How Much Crypto You Really Need

2/11/2010
Last month an international team of researchers announced they had managed to factor a 768-bit RSA key. This raises interesting questions about handling encryption and planning ahead in your security strategy.
Post a Comment

'Brand' Your Employees

2/5/2010
You might want your product to be in the news every day, and for your PR to create miracles for you. But if you want attention, then your company must speak out on big security issues and news.
Post a Comment

Google/China Reality Check Amid The Fog Of Cyberwar

1/21/2010
We've all heard about the Chinese attacks against Google by now. We've heard of Google's moral standing, how corporations now impact international relations, and how censorship is bad and freedom is good. However, some important questions lost in the fog of war need to be asked.
Post a Comment

Share Your New Security Innovations

1/15/2010
I am working with InformationWeek Analytics to create an analysis of the year's top five technology innovations in the security arena. If you are a vendor and believe you have the next big thing, then you should contact us.
Post a Comment

We Have Nothing To Say -- Or Do We?

1/12/2010
The first rule of appearing smart, they say, is to keep quiet, but keeping quiet doesn't help your PR. What are you to do?
Post a Comment

Facebook's Security Team Frustrates Cybercriminals

1/5/2010
Though Facebook is one of the potentially most virulent platforms on the Internet, its security team is very talented, which makes life for cybercriminals all the more difficult.
Post a Comment

Security PR: How To Disclose A Vulnerability

12/22/2009
When your team discovers a new security vulnerability in a third-party product, there are ways to handle it correctly to achieve maximum visibility.
Post a Comment

Security PR: How To Talk To Reporters

12/11/2009
Here are some tips for security professionals and security public relations representatives on how to pitch reporters when you have something new and exciting to share.
Post a Comment

The Secret Sauce For Security Blogging

12/1/2009
I recently wrote in my personal blog about how some security blogs manage to engage their audience better than others and make their readers feel more in touch with what's happening -- on top of earning credibility.
Post a Comment

New Facebook Worm Warning: Wanna See Something Hot?

11/22/2009
A new Facebook worm is making the rounds today, with a brilliant landing page that has already caused many infections.
Post a Comment

Scrutinizing The White House Cyberspace Policy Review

11/20/2009
A lot was expected of the White House Cyberspace Policy Review, but like in previous cases, disappointment is what we find.
Post a Comment

NSA Iraqi Computer Attacks And U.S. Defense

11/18/2009
A National Journal Magazine article called "The Cyberwar Plan" has been making waves the last few days in our circles -- it's about how cell phone and computer attacks were supposedly used against Iraqi insurgents by the National Security Agency (NSA). Its significance is far more than just what's on the surface, however.
Post a Comment

Never Understimate The Power Of A Botnet

11/14/2009
A deputy director at the Office of Cyber Security in the Cabinet Office in the U.K. said in a recent Home Affairs Committee meeting that botnets are not a big risk for debilitating attacks against the government's networks, but are more likely to be used as a tool to extort money.
Post a Comment

Christian Site's Poll Backfires

10/26/2009
The Alpha Course, a Christian Website, has created an instant Internet poll asking if God exists. So far, 96 percent of respondents clicked on "NO."
Post a Comment

Trusting Trust

10/23/2009
An old and respected paper about compilers teaches us a lot about network security architecture.
Post a Comment

Phishing Your Users for Better Security

10/12/2009
A couple of years ago, William Perlgrin taught users about phishing...by phishing them. In doing so, the director of the New York State Office of Cyber Security and Critical Infrastructure Coordination, created an awareness program that (for the most part) worked.
Post a Comment

Dutch ISPs Sign Anti-Botnet Treaty

9/29/2009
Netherlands ISPs last month launched a joint effort to fight malware-infected computers and botnets -- fondly described by locals as a "treaty."
Post a Comment

A Trick For Defending WordPress, Other Apps

9/17/2009
There's a little trick -- or basic security measure -- you can use to help protect your WordPress blog and other Web applications against the never-ending bombardment of new vulnerabilities and exploits.
Post a Comment

Blacklisting For Extra Mail Server Security

9/10/2009
A majority of systems around the world use Internet blacklists as lists of IP addresses that are most likely compromised -- by bots -- and used by these systems to block or otherwise filter email. However, these lists can sometimes be used beyond the blacklist's design intent for increased security, but only after careful consideration.
Post a Comment

The Story Of A Girl I Met Online

9/7/2009
I have met many people online during the past two decades, and I have many stories to tell. The latest is about a girl who decided I was her future husband.
Post a Comment

Automated Vulnerability Assessment In 2010

9/2/2009
Vulnerability assessment is a relatively older technology in the information security professional's arsenal -- so does it still make sense to use it as you plan your security strategy for the coming year?
Post a Comment

Why I Refuse to Update My Website Certificate

8/20/2009
Every year or so, someone reports a supposed security vulnerability in a site that I run, warning me that the certificate has expired. I always respond that I would be happy to update it when I get a free moment, but that it is far from a priority.
Post a Comment

Reclaiming The Email Channel

8/14/2009
Financial institutions and ecommerce sites use email as a marketing platform, training users to trust email -- essentially blazing a trail for the phishers.
Post a Comment

Security Vendors That Spam

8/3/2009
Every time a security vendor sends spam, an angel's wings get clipped.
Post a Comment

The BlackBerry 'Trojan Horse'

7/23/2009
Research In Motion's announcement that users in the United Arab Emirates (UAE) who installed an update on their BlackBerrys ended up with a surveillance application raises some key questions.
Post a Comment

Incident Response Is Not Forensics

7/16/2009
Professionals who handle computer security incident response traditionally have also been charged with forensics. They find the evidence of wrongdoing, and preserve it in a court-approved fashion. This best practice is a good one, even when saving data for law enforcement is not a necessity or a priority.
Post a Comment

DDoS Cyberwarfare Hurts Us All

7/9/2009
A distributed denial of service (DDoS) attack has been in the news in recent days due to attacks against the U.S. government -- with fingers pointed at North Korea. But people forget a few basic truths people when it comes to information warfare (or cyberwarfare) and DDoS attacks.
Post a Comment

Security Design Goes With Secure Coding

7/1/2009
When professionals without security awareness plan a project, security is often left out. The result costs money in the long run. What can we do to make it better?
Post a Comment

The Iranian 'Proxy War'

6/25/2009
Iranians are using proxies worldwide to circumvent government censorship.
Post a Comment

Facebook Scam: I'm Stranded In London. Send Money!

6/21/2009
Facebook users are facing a new threat, 419 scams in chat form, masquerading as friends.
Post a Comment

Government Takes Action On Internet Badness

6/17/2009
Sources of online criminal activity, such as Atrivo/Intercage and McColo, are no longer around. While I am not quite willing to share the full story behind these takedowns just yet, I can say that community action was the key.
Post a Comment

Trust And Web Ad Services

6/5/2009
Well-respected, highly secure Websites commonly infect the people who surf them. So if they are so secure, then why does this keep happening?
Post a Comment

Cybercriminals: More Obvious Than They Think?

5/29/2009
Attackers often use and abuse security by obscurity, which can lessen the likelihood that they will be caught. From them we can learn a lot about profiling attackers on our networks, and how they work to achieve better operational security. Take their use of encryption.
Post a Comment

Lessons From Fighting Cybercrime, Part 2

5/21/2009
In this article we'll examine three basic guidelines on how to implement solutions into social systems, learned from the fight against spam.
Post a Comment

Lessons From Fighting Cybercrime

5/17/2009
The history of anti-spam teaches us about half-baked ideas and how people succeeded or failed to implement them. The analogy of evolution, while limited, demonstrates how reactionary solutions can achieve strategic goals before they are made obsolete by countermeasures.
Post a Comment

CouchSurfing: A Working Trust Model

5/7/2009
Trust. At the beginning we take it on faith. On the Internet, a fortiori, all the more so. While security professionals struggle to establish online trust, CouchSurfing, a social site for tourists who want to borrow your couch and, perhaps -- wink, wink -- make friends, has a working trust model that is cool to boot.
Post a Comment

The Irony Of Preventing Security Failures

5/1/2009
It used to be that we were judged by not suffering security incidents. But today everyone gets hit, so we are now judged by how we deal with a breach. But what if nothing happens because we stopped it? That may be the most dangerous option in the long term.
Post a Comment

Analyzing Security Psychology

4/21/2009
The integration of psychology into the security strategic-thinking process is critical for the advancement of information security. The human element influences all security controls because all of these controls seek to regulate human behavior.
Post a Comment

I'm Interested, But In You

4/20/2009
Social engineering is a disturbing aspect of overall security threat analysis because it is the human element that is least in our control. Security and psychology -- once again -- go hand in hand.
Post a Comment

SCADA Security: What SCADA Security?

4/7/2009
SCADA, the control systems for such infrastructure services as water and energy, has us worried whenever critical infrastructure defense is mentioned. Why, then, is it the most insecure industry on the planet?
Post a Comment

Conficker's Real Threat

3/31/2009
Conficker is a real problem, but the world won't end on April Fool's Day. Here's why.
Post a Comment

Social Networks Blurring The Line Into Citizen Journalism

3/27/2009
In 2006, Israel sent forces into Southern Lebanon during what is now known as the 2006 Lebanon War. Israel had security concerns about missiles harming its civilian population, but what it didn't bargain for was military citizen journalism.
Post a Comment

Authoritatively, Who Was Behind The Estonian Attacks?

3/17/2009
In the past couple of weeks the press has been humoring a couple of rumors about who was behind the 2007 cyberattacks against Estonia [PDF]. During these attacks, Estonia's infrastructure, which relies heavily on the Internet, nearly collapsed.
Post a Comment

German Intelligence Caught Red-Handed In Computer Spying, Analysis

3/11/2009
According to German Web site Der Spiegel, the German foreign intelligence agency BND has supposedly been spying on computer systems around the world in the past couple of years. Everyone does it. Why not governments?
Post a Comment