INTRODUCING THE UAE

NATIONAL CYBER SECURITY

CHAMPION
JANUARY 2016

CONTENTS

THE CYBER SECURITY PARADIGM

DARKMATTER: GUARDED BY GENIUS

OUR CAPABILITIES

OUR PEOPLE

01

THE CYBER SECURITY PARADIGM

THE WORLD IS GETTING MORE AND MORE CONNECTED...

Time to reach
50 million users
(Years)
Connected devices
adoption to explode in
the coming years

Technology is becoming
cheaper

More people and things

are getting connected to
the internet every day

Processing power is
growing exponentially

>2 Billion smartphones

in 2016

Over the last 10 years

40x drop in Bandwidth Prices
60% decrease in sensors
prices

217 new Internet users

every minute

60x decline in cost of

processing power

38
13
4
3
1
9 months

RESULTING IN EXPONENTIAL GROWTH IN CYBER THREATS

317 +500% 295 348

MILLION

New malware detected

in 2014 alone

Increase in mobile malware

over 1 year

DAY

average time it took to

detect the top 5 zero-day
exploits in 2014

MILLION

identities exposed in 2014

in healthcare, retail,
education &
government

ATTACKS ARE GETTING INCREASINGLY COMPLEX

AND DAMAGING

SOURCE: EY

GOVERNMENTS AND ENTERPRISES ARE NOT READY

TO HANDLE CYBER THREATS
56%

HIGHLY
UNLIKELY

OF RESPONDENTS SAY
IT IS UNLIKELY OR
HIGHLY UNLIKELY THAT
THEIR ORGANISATION
COULD DETECT A
SOPHISTICATED ATTACK

3545%
OF RESPONDENTS
RATED THEMSELVES
STILL A LOT
TO IMPROVE

NEARLY TWO THIRDS OF

ORGANISATIONS DO NOT HAVE WELLDEFINED AND AUTOMATED IDENTITY
& ACCESS MANAGEMENT PROGRAMS

53%

37%

OF ORGANISATIONS SAY THAT

LACK OF SKILLED RESOURCES IS
ONE OF THE MAIN OBSTACLES THAT
CHALLENGE THEIR INFORMATION
SECURITY

SAY THAT REAL

TIME INSIGHT ON
CYBER RISK IS
NOT AVAILABLE

43%

42%

OF ORGANISATIONS
TOTAL INFORMATION
SECURITY BUDGET
WILL STAY THE SAME
IN THE COMING
12 MONTHS

42%

OF ORGANISATIONS
DO NOT HAVE A
SECURITY
OPERATIONS CENTRE
SOURCE: EY

COST OF CYBER ATTACKS

In 2014 the cost of cyber attacks for the worlds economies was in excess of $400 billion
with over 42 million attacks
50

DETECTED CYBER CRIME (MILLIONS)

42.8
40
28.9

30
22.7

24.9

20

9.4

10
3.4
0

2009

2010

2011

2012

2013

SOURCE: VISUAL CAPITALIST 2015 THE CYBER SECURITY BOOM

2014

CYBER WARFARE IS A DAILY REALITY

THE UAE NEEDS A TRUSTED LOCAL

PARTNER WITH GLOBAL EXPERTISE TO
PROVIDE THE ENTIRE SPECTRUM OF
CYBER SECURITY SOLUTIONS

02

DARKMATTER:
GUARDED BY GENIUS

WHO WE ARE

UAE
Headquartered

The worlds
elite cyber
security talent

Trusted to
protect the
nation

Offering the
complete
portfolio of
cyber security
solutions

Driving &
developing
the next
generation
cyber solutions

WE HAVE GATHERED THE WORLDS

BEST TALENT

Saeed Omar Salem Basweidan

Senior Vice President
Technology Research

Harshul Joshi
Senior Vice President
Cyber Governance, Risk & Compliance

Stephen Brennan
Senior Vice President
Cyber Network Defence

Eric Eifert
Senior Vice President
Managed Security Services

Michael Pak
Senior Vice President
Secure Communications Engineering

Dr. Robert Statica

Senior Vice President
Special Projects

Dr. Najwa Aaraj

Vice President Special Projects

Paul Lawson
Vice President Infrastructure &
System Integration

TO ADDRESS THE MOST

ADVANCED CYBER THREATS

GOVERNANCE, RISK
& COMPLIANCE

CYBER NETWORK
DEFENCE

MANAGED SECURITY
SERVICES

SECURE
COMMUNICATIONS

INFRASTRUCTURE
& SYSTEM
INTEGRATION

SMART SOLUTIONS

DARKMATTER CAN SUPPORT THE UAE IN

COMPLEX NATIONAL CYBER INITIATIVES
Government
Secure
Communications

Superior Cyber
Security
Centre

Smart City
Cyber Security

Elite Cyber
Academy

National Root
Certificate

National Crypto
Suite

03

OUR CAPABILITIES

GOVERNANCE, RISK & COMPLIANCE

GOVERNANCE & STANDARDS

As strategic partner to the UAE government and with senior members of our leadership team
developing globally recognised national and international standards, DarkMatter is uniquely
positioned to help customers address all aspects of governance, risk and compliance.

Risk Assessment
Audit Readiness
Assessments

Compliance
NESA UAE IA controls
assessments

Cyber Regulations

Vertical based compliance

and risk assessments

Standards development

Oil and Gas

Government
Finance

Smart City Cyber security

regulations

GRC Platform
implementation
Implementation of Industry
leading GRC platform
Business process redesign

CYBER NETWORK DEFENCE

ADVANCED THREAT DETECTION & REMEDIATION

Our multi disciplinary team provides a suite of security assessments, forensic and incident
response services designed to help our clients to understand the threats and vulnerabilities they
face and determine how best to manage them.

Security assessment
Technology compliance
Vulnerability assessment
Penetration testing
Application security

Incident response
Cyber Incident Readiness
Emergency / Critical
Response
Incident Management
Digital Forensics

Active defence & advanced

research
Social Engineering Assessment
Malware and Reverse
Engineering
Advanced Threat Intelligence
Limited Stealth Operations
Expert Services

Digital investigative
services
Digital / Mobile Forensics
E-Discovery
Data Recovery
Password Recovery

MANAGED SECURITY SOLUTIONS

NETWORK MONITORING & INCIDENT RESPONSE

Round the clock, security monitoring, remediation and resolution service providing peace of mind
to organisations regarding their operations and networks.

On Premise Security
Operations Centre
Manage On-Premises Security
Operations Centres
World class on-site Intrusion
Monitoring, Incident Analysis,
Investigation and Response
Continuous Monitoring as a service

Managed Remote SOC

Advisory and Design of SOC

Remote monitoring, remediation

and resolution

Conduct gap assessments and

provide recommendations

Advanced Correlation Analysis

Develop use cases to determine

capabilities

We work with you to plan and

define a scalable cyber security
solution

Review current infrastructure,

workflows, SLA/SOPs

SECURE COMMUNICATIONS

DELIVERING PRIVACY & CONFIDENTIALITY

We provide services and products targeted at protecting the confidentiality and integrity of voice;
chat, email and overall data communication over the mobile network and landline.

Secure communication
products
Hardened Android OS
Hardened IP Phone
Voice, Chat and email
File sharing
News
Calendar
Emergency alerting
News application
File sharing

Advisory & Assessment

of Products
Cryptographic algorithms
Cryptographic
implementation
Secure requirements and
architecture
Design and
implementation reviews
Security response

Managed Service
Products hosted, managed
and secured within our
infrastructure.
On-premise deployment
within the clients
infrastructure.

INFRASTRUCTURE &
SYSTEM INTEGRATION

TRUSTED INFRASTRUCTURE
Managing projects from initiation and planning through to execution and completion.
Designing the tools, services, software and hardware to deliver bespoke infrastructural and technical
solutions, guaranteed inherent security tailored to every organisations needs.

Technical architect
Virtual assessment
IT security assessment

Implementation
Desktop migration

Infrastructure assessment

Office migrations
Window servers migration

Critical facilities assessment

Messaging migration

Identify sophisticated and

customised solutions

Project management
Evaluate needs
Planning & execution
Project delivery

SMART SOLUTIONS

INNOVATIVE PHYSICAL SECURITY

Smart Solutions offers a comprehensive security suite of services comprising
four elements of protection for both home and buisinessess.

Secure Home & Office

Access Control

Technical Surveillance

Mobile Peace of Mind

Countermeasures

Express Mobile Device Repair

Wifi

Assessment

Mobile Monitoring Services

CCTV

Procurement

Secure Data Transfer

Parental Monitoring

Sweeps
Monitoring
Training

Trusted Hardware Supply

ROOT CERTIFICATION
AUTHORITY

PROMOTING NATIONAL TRUST

National CA program aims to promote national trust level, achieve full interoperability,
and enable the digital economy

National CA Program Strategic Objectives

Establish and operate a national trust anchor

Increase the uptake of digital certificates as enablers of electronic transactions
Encourage collaboration of all stakeholders to improve the national CA ecosystem
Improve the UAE legal environment to enable the national CA services
Obtain international recognition for the national root CA
Establish a governance model that enables control while promoting innovation

04

OUR PEOPLE

SAEED OMAR SALEM BASWEIDAN

14+ years of leadership / project
management experience in telecom,
IT and cybersecurity
Education and Certifications
Bachelor of Science Degree in Engineering
from Weber State University, USA

Senior Vice President

Technology Research

Employment History
Executive Director of Technology and Applied
Research, National Electronics Security
Authority (NESA)
Senior Vice President of Business
Development, Mubadala Development
Company
CEO, Khazna Data Centre
COO, Injazat Data Systems
Senior Manager in the Services Division, Al Yah
Satellite Communications Company (Yahsat)
International Carrier Relations Manager at
Emirates Integrated Telecom Company (du)

Cyber Security - Related Experience

Chairperson of Yahsats R&D Committee,
overseeing strategy and developments in IPTV,
VSAT, broadcast, broadband, and civil services
Establishing numerous bilateral agreements
with international telecom giants while at du

HARSHUL JOSHI
20 years+ experience in information
and systems security
Education and Certifications
MBA, Montclair State University, USA
Masters Degree in Information Systems,
Bentley College, USA
Bachelors of Science Degree in Chemical
Engineering
Global ISO 27007 Editor and part of US
Delegation to ISO SC27
CISSP, CISM, CISA

Senior Vice President

Cyber Governance,
Risk and Compliance

Employment History
Head, Cloud Security, Salesforce, San
Francisco, USA
Executive Director, Cyber Security Practice,
PricewaterhouseCoopers, Silicon Valley, USA
Managing Director, Cyber Security, CBIZ, USA
Head Security Auditor, Sony Corp of America,
USA
Chief Security Architect, Verizon (Formerly
GTE Internetworking), USA

Cyber Security - Related Experience

Ran Salesforces global Security Governance
program working with Regulators from USA,
Germany, France, Hong Kong Australia and
other countries
Involved in creation of Connected Cities
Vision for Salesforce working with key City
Governments
Led PwCs Silicon valley Technology Sector
focused Cyber Security Practice
Currently involved in various standards in a
leadership capacity
Member of Smart Cities Council

STEPHEN BRENNAN
25+ years of cybersecurity experience to
corporations and governments
International Experience
Developed, led and delivered Cyber Solutions
in over 160 Countries on 6 continents.
Specialising in global solutions for complex
systems in hostile environments.
Worked with UN, Interpol, FVEY, NATO,
Mdecins Sans Frontires, UNICEF.
Industry specialist across Government,
Aerospace & Defence, Diversified Energy,
Financial Services, Healthcare and Life
sciences, Oil & Gas, Transport

Senior Vice President

Cyber Network Defence

Educational Experience
Master of Information Systems Security
Charles Sturt University
A.DIP, Adv Electronics and Industrial Computer
Systems JSST St George TAFE
Winner Ingenious Minds Global Award for
CSCs top thinkers

Employment history
Global General Manager and Senior Managing
Partner of CSCs Global Cybersecurity
Consulting practice
Global Technical Consulting Lead and
Managing Parter of CSCs Global Cybersecurity
Consulting practice
Global Program Director of CSCs StrikeForce
Senior Security Architect of CSCs Global
CyberSecurity Managed Services
Cybersecurity - Related Experience
Instrumental in the creation of CSCs elite
StrikeForce, the industrys first commercial
ethical hacking and digital forensics group
Senior Contributor to the discovery, research
and publishing of the first Human-Morphic
threats.
Senior Contributor to CSCs Security Stack
and Cloud Security Alliance programs.
Developed Over 30 key cyber solutions and
offerings for global markets
Senior contributor to managing threats in
emerging technologies and markets
Developed and written first- to thirdgeneration languages on a wide range of
platforms.

ERIC EIFERT
20 years+ experience in information and
systems security
International Experience
USA, Middle East, Europe

Senior Vice President

Managed Security Services

Education and Certifications

Masters Degree in Information Systems from
Webster University
Bachelors of Science Degree in Criminology
from the University of Minnesota
Certified Special Agent and Computer Crime
Investigator, United States Air Force Office of
Special Investigations
Certified Expert Witness in Computer
Forensics, Cyber Crime, and Cyber
Investigations
Certified Program Management Professional
from the Program Management Institute, PMP
293691#
Certified HIPAA Security Professional
Employment history
Senior Vice President, Cyber Security
Solutions, ManTech International Corp, USA
and Middle East
Adjunct Graduate Professor, Computer
Forensics and Cyber Investigations, George
Mason University, VA, USA

Special Agent, Computer Crime Investigator,

U.S. Air Force Office of Special Investigations,
USA, Middle East, and Europe
Cybersecurity - Related Experience
Built, operated, and managed the U.S. DoD
Cyber Security Range and the U.S. Marine
Corps Cyber Security Range
Program Manager for the U.S. Department of
Homeland Securitys Continuous Diagnostics
and Mitigation (CDM) program
Built, operated, and managed over a dozen
large Cyber Security Operations Centers
Developed training material for basic,
intermediate and advanced cyber training
courses
Conducted cyber investigations, computer
forensics, cyber threat intelligence,
vulnerability assessments and incident
response

MICHAEL PAK
25+ years of security product and solution
engineering experience
International Experience
South Korea, United States, Middle East (UAE)
Educational Experience
Master of Science Degree in Scientific Computing
and Computational Mathematics from Stanford
University
Bachelor of Science Degree in Computer Science
and Mathematics - University of San Francisco
Applied Mathematics/Computer Science
coursework - Carnegie Mellon University

Senior Vice President

Secure Communications Engineering

Employment history
Head of Security and Privacy Engineering, Google
Nest Labs, Palo Alto, CA, USA
VP of Engineering, Samsung Mobile
Communications, Suwon, South Korea
Senior Engineering Manager - Mobile Linux
Development, Wind River/Intel, Hillsboro, OR,
USA
Senior Director of Engineering, Head of Mobile
Security engineering and co-founder of McAfee
Mobile Security group, McAfee, Beaverton, OR,
USA
Software Development Manager, MyCIO.com/
Network Associates/McAfee, Beaverton, OR, USA
Software Development Engineer, Hewlett-Packard,
Vancouver, WA, USA

Senior Software Engineer, Anti-virus Emergency

Response Team, Network Associates/McAfee,
Beaverton, OR, USA
Chief Architect/Director, DS Interactive, Seoul,
South Korea
Cybersecurity - Related Experience
18 security patents
Founded and managed Samsung Mobile
Communications global security engineering team
Engineered worlds first consumer mobile devices
independently validated and approved for
classified use by the US Government
Commercialised worlds first hardware-based
security platform for mobile apps and services
Directed development of worlds first biometricbased mobile payment system, architected
Samsung Pay security
Architected Tizen platforms application security
framework
Represented his companies at Open Mobile
Alliance, Linux Mobile Foundation (LiMo), Fast
Identity Online (FIDO) and Tizen Alliance

Awards
Achievement Rewards for College Scientists
(ARCS) Scholarship recipient

DR. ROBERT STATICA

20 years+ experience in information and
systems security
Education and Certifications
- Ph.D (ABD) in Homeland Security from
Northcentral University
- Ph.D in Computer Science from Warren
University
- Master's Degree in Computer Science
(cybersecurity specialization) from New Jersey
Institute of Technology
- Bachelor of Science Degree in Mechanical
Engineering (aeronautics specializtion) from
New Jersey Institute of Technology

Senior Vice President

Special Projects

Employment History
- Co-Founder and Chief Technology Officer of
Wickr
- President and CEO of United Alert
- Founder and Director of the Center for
Information Protection (CIP)
- Senior university lecturer at the New Jersey
Institute of Technology (NJIT)
- Co-Founder and Chief Technology Officer of
Linsafe Inc, a cybersecurity software and
consulting company

Cyber Security - Related Experience

- CTO and co-founder of Wickr, an encrypted
messaging app that exceeds the standards set
for HIPAA, FIPS140-2, and NSA Suite B
encryption / security for top-secret
communication
- Co-founded, architected, designed and created
the first unified Emergency Alert and Secure
Group Communication Service, United Alert
- Founding faculty member of the NJIT
Information Technology Program and the
College of Computing Sciences
- Developed and taught more than 20 courses in
areas such as digital crime, computer
forensics,
cryptography and cybersecurity at NJIT
- Created concentrations and co-developed the
Master in Information Technology
Administration and Security program at NJIT
- Led the design and development of the first
intelligent Intrusion Prevention System (iIPS)
capable of mitigating threats based on
correlating, learning, and adapting to threat
behavior for U.S. Army while at Linsafe
- Architected, designed, built and proposed a
secure communication network for future U.S.
Army combat systems, while at Linsafe
- Registered more than 25 patents

DR. NAJWA AARAJ

12 years+ experience in information
& systems security
International experience
USA, Middle East, Australia, Africa, Asia
Education
Ph.D. with Highest Honors in Computer
Engineering from Princeton University
Masters Degree in Computer Engineering from
Princeton University
B.Eng. in Computer and Communication
Engineering from American University of Beirut

Vice President
Special Projects

Employment History
Lead Senior Associate, Booz & Company,
USA and Middle East
Research Staff Member, NEC Labs-Princeton
University, NJ, USA
Research Staff Member, IBM T. J. Watson,
NY, USA
Research Staff Member, Intel Corporation,
Oregon, USA

Cyber Security - Related Experience

Patents: Optimizing performance of integrity
monitoring; Patent number: 8949797
Analysis and design of a hardware/software
trusted platform module (TPM) for embedded
systems
Energy and execution time analysis of a
software-based trusted platform module (TPM)
INVISIOS: A Lightweight, Minimally Intrusive
Secure Execution Environment
A framework for defending embedded systems
against software attacks
Dynamic Binary Instrumentation-Based
Framework for Malware Defense
Hybrid Arch. for Efficient and Secure Face
Authentication in Embedded Systems
Architectures for efficient face authentication
in embedded systems
Neighbor stranger discrimination: a new
defense mechanism against DDOS attacks
Awards
Recipient of Wu Prize for Research Excellence,
Princeton University
Princeton Commendation List for Outstanding
Teaching
Recipient of Princeton University Fellowship
Recipient of National Mathematics
Mathematics Baccalaureate

PAUL LAWSON
27+ years of IT and project
management experience
International experience
UAE, UK
Certifications
Prince 2
ITIL
iSeries
MQSeries
Unix
WinTel
Tivoli

Vice President
Infrastructure & System Integration

Employment History
Head of Technical Architecture,
Implementation Engineering and Project
Management with Injazat Data Systems, UAE
Head of the Data Center, Service
Transformation and Solution Design teams for
Getronics UK
Cyber Security-related Experience
Assembled and empowered a team of domain
experts from around the world to deliver
projects for Injazat client
Head of The Data Center, the UAEs only Tier
IV facility, and responsible for a team of over
50 technicians and engineers
At Getronics, he led major programs and
projects, consultancy, design, build and
implementation, and solutions architecture
across a range of industries and clients

THANK YOU