Security in critical infrastructures

www.thalesgroup.com Security in critical infrastructures Business Cluster Semiconductors @ NedCard Nijmegen, 14 february 2014 lukas.roffel@nl.thalesgroup.com CTO Thales Nederland B.V.

2 / Profile Collective intelligence for a safer world Whenever critical decisions need to be made, Thales has a role to play. In all its markets aerospace, space, ground transportation, defence and security Thales solutions help customers to make the right decisions at the right time and act accordingly. World-class technology, the combined expertise of 65,000 employees and operations in 56 countries have made Thales a key player in keeping the public safe and secure, guarding vital infrastructure and protecting the national security interests of countries around the globe. Employees 65,000 Global presence 56 countries (workforce at 31 Dec. 2012) Research and development billion euros (approx. 20% of revenues) 2.5 A balanced revenue structure Defence Civil 55 % 45 % Revenues in 2012 14.2 billion euros Shareholders (at 31 May 2013) Float 47 % of which employees 3% French State 27 % Dassault Aviation 26 %

3 / Dual markets Military & Civil Markets we serve GROUND AEROSPACE SPACE DEFENCE SECURITY TRANSPORTATION TRUSTED PARTNER FOR A SAFER WORLD WHEREVER SAFETY AND SECURITY ARE CRITICAL, THALES DELIVERS. TOGETHER, WE INNOVATE WITH OUR CUSTOMERS TO BUILD SMARTER SOLUTIONS. EVERYWHERE.

4 / Whenever critical decisions have to be taken, Thales has a role to play THE CRITICAL DECISION CHAIN Radars Optronics Sonars Electronic warfare Inertial Passive sensors Etc. Sensing Cryogenics Observation and electronic surveillance satellites UAVs and airborne reconnaissance systems Ground-based surveillance and intelligence Airspace surveillance Etc. Data gathering Secure communication networks Tactical datalinks Satcoms Radio communications Etc. Secure data transmission SECURITY / INTEGRITY Data processing > Information Command systems Air and rail traffic supervision Combat management systems Advanced information processing (imagery, video, semantics) Data fusion and big data Decision support Jamming Missiles and other armaments Air traffic management Rail traffic management Thales solutions help customers to make the right decisions at the right time and act accordingly Etc. Action Assessment Information from sensors, data gathering systems and data transmission and processing systems

5 / A strategy driven by innovation Long-term vision 20% of revenues invested in R&D Focus on key technical domains Complex systems Hardware (sensor technologies) Software Algorithms and decision support Open research policy International network of research centres Cooperation with academic and government research institutes worldwide Focused product policy Shorter development cycles Risk reduction Inventing tomorrow s products today ALBERT FERT scientific director of the CNRS/Thales joint physics unit and winner of the 2007 Nobel Prize in Physics. Thales confirmed as one of the world's most innovative companies for the second consecutive year, in Thomson Reuters 2013 Top 100 Global Innovators

6 / Ground Transportation Boosting the capacity and efficiency of transportation systems with improved safety, lower costs and better passenger services Corporate Communications December 2013

7 / Ground Transportation Serving ground transportation operators, infrastructure managers, integrators, EPCs Optimising rail and road infrastructure Safety Efficiency Traveller services Rail & Public Transport Train Control for mainline and urban rail Route & Operation Control Field Elements Tramways & LRT Fare Collection Management Roads Tolling, Traffic Management, Car Park Management N 2 Worldwide in rail signaling World leader in ETCS systems (European Train Control System) for mainline rail networks CBTC solutions (Communications-Based Train Control) for urban rail networks Integrated communication and supervision systems for transportation networks Fare Collection systems Driving improvements in transportation safety and efficiency

8 / Ground Transportation references Signalling systems for urban transport networks, with CBTC: 56 metro lines over 30 cities: London Undergroud, Vancouver SkyTrain, Dubai, Shanghai, Beijing, Istanbul, Hong Kong, New York, South Korea, Fare collection systems: Netherlands, Auckland, Toronto, Beijing, Santo Domingo, Oslo, Lisbon, Mexico, New Delhi, Bangkok, Cairo, Singapore, Gautrain, Operation Control and integrated communications & supervision for rail networks: Caracas, Dubai, Athen, Manchester, Paris, Brussels, Bangalore, Istanbul, Mecca, Guangzhou, Hong Kong, Copenhagen, Florence, Lausanne, Signalling systems for main line rail with ETCS: Spain, Switzerland, Mexico, Austria, Germany, Poland, Turkey, South Korea, Saudi Arabia, Denmark, Portugal, Hungary, etc.

THALES NEDERLAND B.V. AND/OR ITS SUPPLIERS Subject to restrictive legend on title page 9 / THALES NEDERLAND B.V. Date. reference

THALES NEDERLAND B.V. AND/OR ITS SUPPLIERS Subject to restrictive legend on title page 10 / THALES NEDERLAND B.V. Date. reference

11 / OV Chipkaart in figures 2013: 1.906.196.268 +6,74% 2012: 1,8 miljard 2010: 900 miljoen 2009: 250 miljoen Sinds de start van het systeem in 2005 zijn tot nu toe totaal 6,3 miljard transacties gegenereerd. Inmiddels 18,5 miljoen OV-chipkaarten geproduceerd. Hiervan zijn er 13,6 miljoen actief: 8 miljoen persoonlijke OV-chipkaarten en 5,5 miljoen anonieme OV-chipkaarten. Per week worden gemiddeld 2,8 miljoen kaarten gebruikt. 2007 1.906.196.268 2010 2011 2012 2013

12 / Architecture Integrated Transit Hub Central Processing Systems Station Processing Systems Depot Process Systems Front End Equipment Fare Media Contactless Smart Tickets & Cards Level 0 Level 1 Level 2 Level 3 Level 4 THALES Light Rail & -Trail Products Range W AN BUS & Tram Products Range W LAN WiFi

THALES NEDERLAND B.V. AND/OR ITS SUPPLIERS Subject to restrictive legend on title page 13 / Station Lelylaan TVM 20.04 Extreme damage, TVM total loss, missing parts internally. TVM needs to be replaced.

15 / Beyond Smart Card and Transport Roadmap of contactless technologies and extended applications E-purse / micro-payments Parking meters Retail Fast food Vending machines Public facilities Museums Cinemas Taxis Mobile phones Near Field Communication (NFC) technology Mobile phone replaces fare media Download fare products and additional applications Timetables Routes Integration with banking world Mastercard PayPass Visa Cash Co-branding with banks Integrate with credit and other payment cards Other Access control for offices University applications Libraries E-tolls Card customisation

16 / Security Developing integrated solutions, resilient networks and value-added services to protect citizens, sensitive data and critical infrastructure Corporate Communications December 2013

17 / Thales products currently protect data for: 21 NATO member countries 19 of the 20 largest banks in the world 3,000 financial institutions worldwide Securing over 70% of the payment transactions 4 out of 5 top energy companies 4 out of 5 aerospace companies A comprehensive approach Supporting governments and enterprises worldwide in order to protect: Critical Information Systems Critical Industrial Information Systems (e.g. SCADA) Critical Embedded Information Systems Critical global systems Sensitive data And to prevent unpredictable events with integrated & resilient solutions

18 / Security references States (e-border, border surveillance, national security, identity) More than 250 million secure identity documents in over 25 countries. French market leader in civil biometric systems Critical Infrastructure (airports, sensitive sites, energy) 4 major international hubs: Dubai, Doha, Durban airports and Singapore Changhi airport France: securing the Defence Minister s new site, Balard Cities (Urban security) Mexico - Ciudad Segura: urban security for Mexico City, the most complex urban security system in the world Saudi Arabia: Security of the Mecca pilgrimage France: Security of public sites in Paris Cyberspace: security products and solutions in 50 countries (25 NATO countries). Protection of 70% of the world's banking transactions. TEOPAD, a secure professional environment for smartphones and tablets

19 / IT Security Services Thales IT Security Services offer solutions that protect organizations from threats and vulnerabilities while reducing the costs and complexity of security: Business risk analysis and compliance IT security architecture design IT security training & awareness Disaster Recovery Plan (DRP) & Business Continuity Plan (BCP) Crisis management Dedicated penetration testing services focusing on business applications and network security Incident response Audit and Risk analysis Security policies Security solutions ISO 17999 ISO 27001 Security management EBIOS

20 / Mistral Datacryptor ECHINOPS TCE 621 Network security TEOPAD Mobile security Thales Portfolio Protection Active defense nshield connect nshield Solo nshield edge Security Modules THEMIS ELIPS Security Gateway Crosslevel CYBELS istop Hypervision

21 / TEOPAD Smartphones & Tablets security 250 million mobile workers in 2013 Mobility cause multiple threats to data security In business, only 17% of data is secure Teopad creates a secure desktop for business applications Support all available applications on the market Hardware based authentication (option) Encryption of stored and exchanged data Secure phone calls (SIP-TLS, SRTP) Secure access to corporate network (TLS VPN) Large choice of Smartphone (Android) A leading edge solution to secure professional apps on smartphones & tablets

22 / Cyber-Security Hypervision Today, nation s critical infrastructure and defense are more interconnected on the Internet than ever before Increased connectivity brings increased risk thus making cybersecurity one of most important national security priorities Improve the detection, analysis, mitigation and response to sophisticated cyber threats, provide effective countermeasures against such attacks istop Vulnerability Scanner CYBELS Sensor CYBELS View CYBELS Practice

23 / Balard IT Security solutions for physical access control system Bionet Security expertise and HSM for biometric visa application management (FR) Security references Ciudad Segura Risk analysis and security review for Mexico Urban Safety program Uzbekistan Biometric Passport Security policy and security hardening of enrolment stations THALES NEDERLAND B.V. AND/OR ITS SUPPLIERS Subject to restrictive legend on title page

24 / Galileo Galileo security IOC & FOC EGNOS Accreditation support Space references Athena FIDUS Security study Iridium Component Evaluation THALES NEDERLAND B.V. AND/OR ITS SUPPLIERS Subject to restrictive legend on title page

25 / Netherlands Risk analysis, Security Policy, Crisis Management and HSM Risk analysis support and penetration testing for Urban Rail (TORONTO) Ground Transportation references Danish Travel Cards Security review before the system goes live EU FP7 SECUR-ED Cybersecurity scenario THALES NEDERLAND B.V. AND/OR ITS SUPPLIERS Subject to restrictive legend on title page

THALES NEDERLAND B.V. AND/OR ITS SUPPLIERS Subject to restrictive legend on title page 26 26 / / / Questions?