%PDF-1.4 % 34 0 obj <>stream /Artifact <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 490.9714 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [(ISA)5.4(CA JOURN)-8.8(AL)]TJ ET /GS3 gs BT 7 0 0 7 543.321 23.0228 Tm .73 .19 0 0 k [( V)6.4(OL 1)]TJ ET EMC /Artifact <>BDC 0 0 0 1 k /GS2 gs 572.364 0 .51599 31.289 re f EMC /Artifact <>BDC /GS3 gs BT 7 0 0 7 587.3827 23.0228 Tm .73 .19 0 0 k (1)Tj ET EMC /P <>BDC /GS2 gs BT 9 0 0 9 35 611.5177 Tm 0 0 0 1 k -.005 Tc [(Many know the adage, time is mone)6.4(y)]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 184.0526 611.5177 Tm -.088 Tc [(.)-83( )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 190.8785 611.5177 Tm -.005 Tc (It is a)Tj ET EMC /P <>BDC BT 9 0 0 9 212.1277 611.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 599.5177 Tm -.005 Tc [(sensible guide for any)7.3(one with persistent str)9.3(ess in)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.2923 599.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 587.5177 Tm -.005 Tc [(their pr)9.8(of)11.7(essional \(and personal\) liv)6.4(es. )19.5(The)]TJ ET EMC /P <>BDC BT 9 0 0 9 202.8166 587.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 575.5177 Tm -.005 Tc [(IBM/P)6.4(onemon Institute )]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 129.3454 575.5177 Tm [(2018 Cost of a Data Br)9.3(each)]TJ ET EMC /P <>BDC BT 9 0 0 9 235.6573 575.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 563.5177 Tm -.005 Tc (Study)Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 56.8928 563.5177 Tm [( is a must-r)9.3(ead guide for chief information)]TJ ET EMC /P <>BDC BT 9 0 0 9 222.4341 563.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 551.5177 Tm -.005 Tc [(security ocers \(CISOs\), chief priv)7.3(acy ocers)]TJ ET EMC /P <>BDC BT 9 0 0 9 216.2102 551.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 539.5177 Tm -.005 Tc [(\(CPOs\), data pr)9.8(otection ocers, risk managers and)]TJ ET EMC /P <>BDC BT 9 0 0 9 236.3506 539.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 527.5177 Tm -.005 Tc [(boar)9.3(ds t)9.8(o)0( r)9.3(ead car)9.3(efully and plan actions and)]TJ ET EMC /P <>BDC BT 9 0 0 9 212.5013 527.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 515.5177 Tm -.005 Tc [(policies t)9.8(o)0( manage their cyberrisk and concomitant)]TJ ET EMC /P <>BDC BT 9 0 0 9 236.9823 515.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 503.5177 Tm -.005 Tc [(costs when a br)9.3(each occurs.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 148.0257 506.2177 Tm 0 Tc (1)Tj ET EMC /P <>BDC BT 9 0 0 9 151.013 503.5177 Tm -.005 Tc [( )19.5(The r)9.3(epor)-24.4(t has r)9.3(ecast)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.3823 503.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 491.5177 Tm -.005 Tc [(the old sa)7.3(ying as, time is r)9.3(eal mone)6.4(y)]TJ ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 180.7271 491.5177 Tm -.088 Tc [(.)-83( )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 35 467.5177 Tm -.005 Tc [(While the r)9.3(epor)-24.4(t points out the high cost of data)]TJ ET EMC /P <>BDC BT 9 0 0 9 222.956 467.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 455.5177 Tm -.005 Tc [(br)9.3(eaches, ther)9.3(e ar)9.3(e some in the cybersecurity)]TJ ET EMC /P <>BDC BT 9 0 0 9 213.468 455.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 443.5177 Tm -.005 Tc [(community who admit t)9.8(o)0( not knowing if or when)]TJ ET EMC /P <>BDC BT 9 0 0 9 225.153 443.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 431.5177 Tm -.005 Tc [(br)9.3(each activity is happening within their networks.)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.6727 431.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 419.5177 Tm -.005 Tc [(Some k)9.8(eep their heads in the sand and do not)]TJ ET EMC /P <>BDC BT 9 0 0 9 215.0686 419.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 407.5177 Tm -.005 Tc [(prioritiz)7.8(e detection as a means of knowing. Recent)]TJ ET EMC /P <>BDC BT 9 0 0 9 234.2884 407.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 395.5177 Tm -.005 Tc [(priv)7.3(acy r)9.3(egulations r)9.3(equir)9.3(e timely r)9.3(epor)-24.4(ting of a)]TJ ET EMC /P <>BDC BT 9 0 0 9 220.6972 395.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 383.5177 Tm -.005 Tc [(data br)9.3(each when known t)9.8(o)0( the data contr)9.8(oller)60.1(. )19.5(This)]TJ ET EMC /P <>BDC BT 9 0 0 9 238.805 383.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 371.5177 Tm -.005 Tc [(ma)7.3(y lead some t)9.8(o)0( think that a)7.3(v)7.3(oiding knowledge of)]TJ ET EMC /P <>BDC BT 9 0 0 9 235.5156 371.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 359.5177 Tm -.005 Tc [(a br)9.3(each is a good str)19.5(ategy t)9.8(o)0( a)7.3(v)7.3(oid the costs)]TJ ET EMC /P <>BDC BT 9 0 0 9 213.924 359.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 347.5177 Tm -.005 Tc [(associated with r)9.3(epor)-24.4(ting, but this )29.8(ostrich str)19.5(ategy)-7.3()]TJ ET EMC /P <>BDC BT 9 0 0 9 238.5865 347.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 335.5177 Tm -.005 Tc (is not only unwise and unethical, it is far costlier)Tj ET EMC /P <>BDC BT 9 0 0 9 223.2913 335.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 323.5176 Tm -.005 Tc [(than meets the e)6.4(y)6.4(e. Enterprises that inv)6.4(est in faster)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.1769 323.5176 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 311.5176 Tm -.005 Tc [(detection of data br)9.3(eaches can substantially r)9.3(educe)]TJ ET EMC /P <>BDC BT 9 0 0 9 238.9324 311.5176 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 299.5176 Tm -.005 Tc (losses. )Tj ET EMC /P <>BDC /GS3 gs BT /F3 1 Tf 11 0 0 11 35 273.5177 Tm .9 .53 .1 0 k [(Costs Ar)9.3(e Staggering )]TJ ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 35 255.5177 Tm 0 0 0 1 k [(In the United States, the cost of a br)9.3(each, on)]TJ ET EMC /P <>BDC BT 9 0 0 9 208.5714 255.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 243.5177 Tm -.005 Tc [(a)7.3(v)6.4(er)19.5(age, is a staggering US $3.86 million, up 6.4)]TJ ET EMC /P <>BDC BT 9 0 0 9 222.9121 243.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 231.5177 Tm -.005 Tc [(per)9.3(cent fr)9.8(om the prior y)6.4(ear)-7.8()54.7(s)0( analysis.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 182.7345 234.2177 Tm 0 Tc (2)Tj ET EMC /P <>BDC BT 9 0 0 9 185.7218 231.5177 Tm -.005 Tc -.0195 Tw [( These)]TJ ET EMC /P <>BDC BT 9 0 0 9 212.008 231.5177 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 219.5177 Tm -.005 Tc [(statistics should be of r)9.3(eal concern. And this is just)]TJ ET EMC /P <>BDC BT 9 0 0 9 235.9937 219.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 207.5177 Tm -.005 Tc [(the tangible costs of a br)9.3(each. )19.5(This amount does)]TJ ET EMC /P <>BDC BT 9 0 0 9 227.6723 207.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 195.5177 Tm -.005 Tc [(not account for the costs of r)9.3(egulat)9.8(or)-8.8(y nes. Hence,)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.4411 195.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 183.5177 Tm -.005 Tc [(the numbers seen in this r)9.3(epor)-24.4(t must be consider)9.3(ed)]TJ ET EMC /P <>BDC BT 9 0 0 9 238.2216 183.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 171.5177 Tm -.005 Tc (a lower bound. Other potential costs include)Tj ET EMC /P <>BDC BT 9 0 0 9 208.6042 171.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 159.5177 Tm -.005 Tc (expenses associated with litigation, nes for)Tj ET EMC /P <>BDC BT 9 0 0 9 209.9919 159.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 147.5177 Tm -.005 Tc [(r)9.3(egulat)9.8(or)-8.8(y noncompliance and lost r)9.3(e)6.4(v)6.4(enue due t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.0143 147.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 135.5177 Tm -.005 Tc [(cust)9.8(omers who lea)7.3(v)6.4(e)0( as a r)9.3(esult of a br)9.3(each. With)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.0112 135.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 123.5177 Tm -.005 Tc [(all the inv)6.4(estment in cybersecurity pr)9.8(oducts and)]TJ ET EMC /P <>BDC BT 9 0 0 9 223.3965 123.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 111.5177 Tm -.005 Tc [(pr)9.8(of)11.7(essional ser)-8.8(vices, why ha)7.3(v)6.4(e)0( the costs of data)]TJ ET EMC /P <>BDC BT 9 0 0 9 228.5547 111.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 99.5177 Tm -.005 Tc [(br)9.3(eaches not decr)9.3(eased? )]TJ ET EMC /P <>BDC BT 9 0 0 9 35 75.5177 Tm [(Each new data priv)7.3(acy r)9.3(egulation, such as the EU)]TJ ET EMC /P <>BDC BT 9 0 0 9 227.3164 75.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 63.5177 Tm -.005 Tc [(Gener)19.5(al Data Pr)9.8(otection Regulation \(GDPR\) or the)]TJ ET EMC /P <>BDC BT 9 0 0 9 229.7553 63.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 35 51.5177 Tm -.005 Tc [(US state of California Consumer Priv)7.3(acy Act)]TJ ET EMC /P <>BDC BT 9 0 0 9 208.368 51.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 611.5182 Tm -.005 Tc [(\(CCP)67.4(A\), calls for )24.4(appr)9.8(opriate security measur)9.3(es t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 456.2361 611.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 599.5182 Tm -.005 Tc [(a)7.3(v)7.3(oid nes, but b)5.4(y)0( r)9.3(elying on t)9.8(ools that ar)9.3(e easily)]TJ ET EMC /P <>BDC BT 9 0 0 9 443.8094 599.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 587.5182 Tm -.005 Tc [(susceptible t)9.8(o)0( compr)9.8(omise via emplo)7.3(y)6.4(ee err)9.8(or and)]TJ ET EMC /P <>BDC BT 9 0 0 9 452.962 587.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 575.5182 Tm -.005 Tc [(st)9.8(olen cr)9.3(edentials, enterprises ar)9.3(e failing t)9.8(o)0( pr)9.8(otect)]TJ ET EMC /P <>BDC BT 9 0 0 9 453.3557 575.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 563.5182 Tm -.005 Tc [(themselv)6.4(es adequately)52.3(. )]TJ ET EMC /P <>BDC BT 9 0 0 9 253.5 539.5182 Tm [(The most v)6.4(exing aspect of these new r)9.3(egulations is)]TJ ET EMC /P <>BDC BT 9 0 0 9 455.8426 539.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 527.5182 Tm -.005 Tc (that the liability for data lies with the originating)Tj ET EMC /P <>BDC BT 9 0 0 9 440.3929 527.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 515.5182 Tm -.005 Tc [(or)9.3(ganization. )19.5(This means that an or)9.3(ganization is)]TJ ET EMC /P <>BDC BT 9 0 0 9 443.1664 515.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 503.5182 Tm -.005 Tc [(r)9.3(esponsible for the security of that data r)9.3(egar)9.3(dless)]TJ ET EMC /P <>BDC BT 9 0 0 9 452.3206 503.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 491.5182 Tm -.005 Tc [(of with whom the data ar)9.3(e shar)9.3(ed and how the data)]TJ ET EMC /P <>BDC BT 9 0 0 9 456.0767 491.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 479.5182 Tm -.005 Tc [(ar)9.3(e handled once the)6.4(y ar)9.3(e outside of the originating)]TJ ET EMC /P <>BDC BT 9 0 0 9 455.8229 479.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 467.5182 Tm -.005 Tc [(or)9.3(ganization)39.1()54.7(s)0( contr)9.8(ol. )19.5(The contr)19.5(actual obligations)]TJ ET EMC /P <>BDC BT 9 0 0 9 450.3573 467.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 455.5182 Tm -.005 Tc [(of a thir)9.3(d-par)-24.4(ty pr)9.8(o)7.3(vider t)9.8(o)0( secur)9.3(e data once it has)]TJ ET EMC /P <>BDC BT 9 0 0 9 449.6795 455.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 253.5 443.5182 Tm -.005 Tc [(access ma)7.3(y not be wor)-24.4(th the pr)9.8(o)7.3(v)6.4(erbial paper on)]TJ ET EMC /P <>BDC BT 9 0 0 9 445.5406 443.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F4 1 Tf 30 0 0 30 35 675.894 Tm .73 .19 0 0 k -.02 Tc [(Cost of a Data Br)9.3(each )]TJ ET EMC /P <>BDC BT 18 0 0 18 35 648.8942 Tm [(Time t)9.8(o)0( Detection Sa)7.3(v)6.4(es Real Mone)6.4(y)]TJ ET EMC /Artifact <>BDC .9 .53 .1 0 k 253.309 44.842 349.499 186.095 re f EMC /P <>BDC BT /F3 1 Tf 11 0 0 11 266.6892 214.4766 Tm 0 0 0 0 k [(Salv)7.3(at)14.7(or)9.3(e J. St)14.7(olfo,)]TJ ET EMC /P <>BDC BT /F1 1 Tf 11 0 0 11 355.994 214.4766 Tm [( Ph.D)49.8(. )]TJ ET EMC /P <>BDC BT 9 0 0 9 266.6892 203.6766 Tm 0 Tc [(Is a tenur)9.3(ed pr)9.8(of)11.7(essor at Columbia Univ)6.4(ersity \(New Y)31.8(ork City)52.3(, New Y)31.8(ork,)]TJ ET EMC /P <>BDC BT 9 0 0 9 550.1146 203.6766 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 266.6892 192.8766 Tm (USA\). He has been teaching computer science since 1979. He is the)Tj ET EMC /P <>BDC BT 9 0 0 9 537.2121 192.8766 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 266.6892 182.0766 Tm [(cofounder and chief technology ocer of Allur)9.3(e Security)]TJ ET EMC /P <>BDC BT 9 0 0 9 490.718 182.0766 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 266.6892 171.2766 Tm (\()Tj ET EMC /P <>BDC BT /F2 1 Tf 9 0 0 9 269.7654 171.2766 Tm [(http:/)109.4(/www)60.6(.allur)9.3(esecurity)52.3(.com/)]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 390.7382 171.2766 Tm [(\), a D)10.3(ARP)67.4(A-funded cybersecurity star)-24.4(tup)]TJ ET EMC /P <>BDC BT 9 0 0 9 550.0927 171.2766 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 266.6892 160.4766 Tm [(specializing in data pr)9.8(otection and the detection of data br)9.3(eaches. St)9.8(olfo)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.0208 160.4766 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 266.6892 149.6765 Tm [(has been gr)19.5(anted mor)9.3(e than 75 patents and has published 230 papers and)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.6962 149.6765 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 266.6892 138.8766 Tm [(books in the ar)9.3(eas of par)19.5(allel computing, ar)-24.4(ticial intelligence knowledge-)]TJ ET EMC /P <>BDC BT 9 0 0 9 266.6892 128.0765 Tm (based systems, data mining, computer security and intrusion detection)Tj ET EMC /P <>BDC BT 9 0 0 9 548.7433 128.0765 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 266.6892 117.2766 Tm [(systems. His r)9.3(esear)9.3(ch has been suppor)-24.4(ted b)5.4(y)0( numer)9.8(ous US go)7.3(v)6.4(ernment)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.1884 117.2766 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 266.6892 106.4766 Tm [(agencies, including D)10.3(ARP)67.4(A, the US National Science F)10.3(oundation \(NSF\),)]TJ ET EMC /P <>BDC BT 9 0 0 9 547.2142 106.4766 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 266.6892 95.6765 Tm [(Oce of Na)7.3(v)7.3(al Resear)9.3(ch \(ONR\), the US National Security Agency \(NSA\),)]TJ ET EMC /P <>BDC BT 9 0 0 9 551.4374 95.6765 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 266.6892 84.8766 Tm [(Intelligence Adv)7.3(anced Resear)9.3(ch Pr)9.8(ojects Activity \(I)-8.8(ARP)67.4(A\), the US Air F)10.3(o)0(r)9.3(c)0(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.2523 84.8766 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 266.6892 74.0764 Tm [(Oce of Scientic Resear)9.3(ch \(AFOSR\), Army Resear)9.3(ch Oce \(ARO\), the US)]TJ ET EMC /P <>BDC BT 9 0 0 9 561.558 74.0764 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 266.6892 63.2766 Tm [(National Institute of Standar)9.3(ds and )19.5(T)48.4(echnology \(NIST\), and the US)]TJ ET EMC /P <>BDC BT 9 0 0 9 529.368 63.2766 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 266.6892 52.4766 Tm [(Depar)-24.4(tment of Homeland Security \(DHS\).)]TJ ET EMC /Artifact <>BDC Q q 1 i 253.309 429.974 349.503 -186.095 re 431.005 52.477 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS3 gs q 352.318 0 0 -188.549 252.124 431.161 cm /Im1 Do Q EMC /Artifact <>BDC Q q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 36 22.1458 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ /F2 1 Tf 15.355 0 TD [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /Artifact <>BDC 0 0 0 0 k /GS3 gs 502.351 679 79.02 80.759 re f EMC /Artifact <>BDC Q /GS3 gs BT /F5 1 Tf 9 0 0 9 514.9976 721.4609 Tm .88627 .53333 .098039 0 k .0247 Tc 0 Tw (FEATURE)Tj ET 1 i q 1 0 0 1 568.714 746.872 cm 0 0 m 0 -54.884 l -9.375 -54.884 l -9.375 -9.945 l -49.977 -9.945 l -49.977 0 l f Q EMC endstream endobj 35 0 obj <>/XObject<>/ExtGState<>>> endobj 60 0 obj <>stream /Artifact <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ /F2 1 Tf 15.355 0 TD [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /Artifact <>BDC BT /F1 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA JOURN)-8.8(AL)]TJ ET /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm .73 .19 0 0 k [( V)6.4(OL 1)]TJ ET EMC /Artifact <>BDC 0 0 0 1 k /GS2 gs 569.898 0 .51599 31.289 re f EMC /Artifact <>BDC /GS3 gs BT 7 0 0 7 584.9167 23.0228 Tm .73 .19 0 0 k (2)Tj ET EMC /P <>BDC /GS2 gs BT 9 0 0 9 36.9471 694.3146 Tm 0 0 0 1 k -.005 Tc [(which it was printed. GDPR, for example, pier)9.3(ces)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.9608 694.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 682.3146 Tm -.005 Tc [(any such agr)9.3(eements and puts the entir)9.3(e onus on)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.2729 682.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 670.3146 Tm -.005 Tc [(the originating or)9.3(ganization as the r)9.3(esponsible par)-24.4(ty)]TJ ET EMC /P <>BDC BT 9 0 0 9 241.9146 670.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 658.3146 Tm -.005 Tc [(for any data losses, t)9.8(o)0( the tune of up t)9.8(o)0( 4 per)9.3(cent of)]TJ ET EMC /P <>BDC BT 9 0 0 9 240.27 658.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 646.3146 Tm -.005 Tc [(t)9.8(otal r)9.3(e)6.4(v)6.4(enues or 20 million per violation. P)6.4(erhaps)]TJ ET EMC /P <>BDC BT 9 0 0 9 236.5369 646.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 634.3146 Tm -.005 Tc [(r)9.3(easonable)6.8( best pr)19.5(actices ar)9.3(e not good enough.)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.1753 634.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 622.3146 Tm -.005 Tc [(P)6.4(erhaps cybersecurity technology is not being used)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.8083 622.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 610.3146 Tm -.005 Tc [(t)9.8(o)0( tackle the right pr)9.8(oblem. )]TJ ET EMC /P <>BDC /GS3 gs BT /F3 1 Tf 11 0 0 11 36.9471 584.3146 Tm .9 .53 .1 0 k (Better Detection and Response )Tj ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 36.9471 566.3146 Tm 0 0 0 1 k [(The a)7.3(v)6.4(er)19.5(age mean time t)9.8(o)0( identify a br)9.3(each is now)]TJ ET EMC /P <>BDC BT 9 0 0 9 235.0809 566.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 554.3146 Tm -.005 Tc [(197 da)7.3(ys.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 75.1044 557.0146 Tm 0 Tc (3)Tj ET EMC /P <>BDC BT 9 0 0 9 78.0915 554.3146 Tm -.005 Tc [( )19.5(This is a slight impr)9.8(o)7.3(v)6.4(ement o)7.3(v)6.4(er the)]TJ ET EMC /P <>BDC BT 9 0 0 9 225.2558 554.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 542.3146 Tm -.005 Tc [(pr)9.3(e)6.4(vious y)6.4(ear)60.1(, but still unacceptably long. Imagine)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.53 542.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 530.3146 Tm -.005 Tc [(living with a thief who is taking e)6.4(v)6.4(e)0(r)-8.8(ything of v)7.3(alue)]TJ ET EMC /P <>BDC BT 9 0 0 9 234.1495 530.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 518.3146 Tm -.005 Tc [(for 197 da)7.3(ys. )]TJ ET EMC /P <>BDC BT 9 0 0 9 36.9471 494.3146 Tm [(All data br)9.3(eaches, no matter the siz)7.8(e and depth,)]TJ ET EMC /P <>BDC BT 9 0 0 9 223.8934 494.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 482.3146 Tm -.005 Tc [(r)9.3(esult in mone)6.4(y lost due t)9.8(o)0( time and mone)6.4(y spent)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.1269 482.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 470.3146 Tm -.005 Tc [(during the inv)6.4(estigation pr)9.8(ocess, r)9.3(eputation)]TJ ET EMC /P <>BDC BT 9 0 0 9 207.4446 470.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 458.3146 Tm -.005 Tc [(management, lost cust)9.8(omers, nes, etc. Of most)]TJ ET EMC /P <>BDC BT 9 0 0 9 228.167 458.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 446.3146 Tm -.005 Tc [(inter)9.3(est and most impor)-24.4(tant in the r)9.3(epor)-24.4(t)54.7(s analysis)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.7146 446.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 434.3146 Tm -.005 Tc [(is the r)9.3(e)6.4(v)6.4(elation that Companies that contained )]TJ ET EMC /P <>BDC BT 9 0 0 9 36.9471 422.3146 Tm [(a br)9.3(each in less than 30 da)7.3(ys sa)7.3(v)6.4(ed o)7.3(v)6.4(er )]TJ ET EMC /P <>BDC BT 9 0 0 9 36.9471 410.3146 Tm [(\(US\) $1 million vs. those that t)9.8(ook mor)9.3(e than )]TJ ET EMC /P <>BDC BT 9 0 0 9 36.9471 398.3146 Tm [(30 da)7.3(ys t)9.8(o)0( r)9.3(esolv)6.4(e.)83()]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 113.22 401.0146 Tm 0 Tc (4)Tj ET EMC /P <>BDC BT 9 0 0 9 116.2072 398.3146 Tm -.005 Tc [( )19.5(This is a staggering statistic.)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.636 398.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 386.3146 Tm -.005 Tc [(How do those or)9.3(ganizations detect a br)9.3(each and)]TJ ET EMC /P <>BDC BT 9 0 0 9 228.2197 386.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 374.3146 Tm -.005 Tc [(mitigate it so quickly? Why has e)6.4(v)6.4(e)0(r)-8.8(y)7.3(one not)]TJ ET EMC /P <>BDC BT 9 0 0 9 211.2327 374.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 362.3146 Tm -.005 Tc [(followed suit? How might br)9.3(eaches or attempted)]TJ ET EMC /P <>BDC BT 9 0 0 9 229.1118 362.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 350.3146 Tm -.005 Tc [(exltr)19.5(ation be detected befor)9.3(e it occurs? )]TJ ET EMC /P <>BDC BT 9 0 0 9 36.9471 326.3146 Tm [(Consider the typical beha)7.3(vior of attack)9.8(ers. )19.5(The)6.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 224.0957 326.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 314.3146 Tm -.005 Tc (follow a tried and true methodology:)Tj ET EMC /P <>BDC BT 9 0 0 9 179.2486 314.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 302.3146 Tm -.005 Tc [(r)9.3(econnaissance t)9.8(o)0( locate a tar)9.3(get and points of)]TJ ET EMC /P <>BDC BT 9 0 0 9 222.8091 302.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 290.3146 Tm -.005 Tc [(entr)-8.8(y)52.3(,)0( followed b)5.4(y)0( initial entr)-8.8(y \(typically b)5.4(y)0( spear)]TJ ET EMC /P <>BDC BT 9 0 0 9 224.175 290.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 278.3146 Tm -.005 Tc [(phishing users within their chosen tar)9.3(get\). Once)]TJ ET EMC /P <>BDC BT 9 0 0 9 224.9481 278.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 266.3146 Tm -.005 Tc [(the)6.4(y succeed at stealing a legitimate user)-7.8()54.7(s)]TJ ET EMC /P <>BDC BT 9 0 0 9 206.4293 266.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 254.3146 Tm -.005 Tc [(cr)9.3(edentials, the)6.4(y set up a foothold t)9.8(o)0( establish)]TJ ET EMC /P <>BDC BT 9 0 0 9 218.2905 254.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 242.3146 Tm -.005 Tc [(contr)9.8(ol for long periods of time. )19.5(The)6.4(y mo)7.3(v)6.4(e)0( later)19.5(ally)52.3(,)]TJ ET EMC /P <>BDC BT 9 0 0 9 240.925 242.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 230.3146 Tm -.005 Tc [(sear)9.3(ching for other cr)9.3(edentials, ser)-8.8(v)6.4(ers, logs, les)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.5226 230.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 218.3146 Tm -.005 Tc [(and documents the)6.4(y desir)9.3(e. Documents and data)]TJ ET EMC /P <>BDC BT 9 0 0 9 230.5983 218.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 206.3146 Tm -.005 Tc [(ar)9.3(e bundled and exltr)19.5(ated using popular pr)9.8(ot)9.8(ocols)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.5057 206.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 194.3146 Tm -.005 Tc [(and thir)9.3(d-par)-24.4(ty sites that ser)-8.8(v)6.4(e)0( as staging ser)-8.8(v)6.4(ers)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.2556 194.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 182.3146 Tm -.005 Tc [(fr)9.8(om which the)6.4(y can download their st)9.8(olen goods.)]TJ ET EMC /P <>BDC BT 9 0 0 9 233.5615 182.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 170.3146 Tm -.005 Tc [(Ha)7.3(ving established a foothold allows for long-term)]TJ ET EMC /P <>BDC BT 9 0 0 9 236.1081 170.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 158.3146 Tm -.005 Tc [(data exltr)19.5(ation at a pace that suits their needs. )]TJ ET EMC /P <>BDC BT 9 0 0 9 36.9471 134.3145 Tm [(Most deception appr)9.8(oaches miss the mark on early)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.2655 134.3145 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 122.3145 Tm -.005 Tc [(detection. A v)7.3(ariety of deception technology)]TJ ET EMC /P <>BDC BT 9 0 0 9 210.1691 122.3145 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 110.3145 Tm -.005 Tc [(companies t)9.8(out hone)6.4(ynets as early detect)9.8(ors. )19.5(This)]TJ ET EMC /P <>BDC BT 9 0 0 9 235.538 110.3145 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 98.3145 Tm -.005 Tc [(actually is unlik)9.8(ely t)9.8(o)0( be the case. Hone)6.4(ynets ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 227.6312 98.3145 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 86.3145 Tm -.005 Tc [(installed alongside oper)19.5(ational ser)-8.8(v)6.4(ers, and)]TJ ET EMC /P <>BDC BT 9 0 0 9 207.6246 86.3145 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 74.3145 Tm -.005 Tc [(attack)9.8(ers would be attr)19.5(acted t)9.8(o)0( those hone)6.4(ynets)]TJ ET EMC /P <>BDC BT 9 0 0 9 227.2432 74.3145 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 62.3145 Tm -.005 Tc [(only if the)6.4(y ar)9.3(e led t)9.8(o)0( them. Car)9.3(e is tak)9.8(en t)9.8(o)0( pr)9.3(e)6.4(v)6.4(ent)]TJ ET EMC /P <>BDC BT 9 0 0 9 238.3365 62.3145 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 694.3146 Tm -.005 Tc [(or)9.3(dinar)-8.8(y users fr)9.8(om connecting t)9.8(o)0( hone)6.4(ynets;)]TJ ET EMC /P <>BDC BT 9 0 0 9 433.9866 694.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 682.3146 Tm -.005 Tc [(other)-8.3(wise, false alarms will adv)6.4(ersely impact)]TJ ET EMC /P <>BDC BT 9 0 0 9 431.6871 682.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 670.3146 Tm -.005 Tc [(business. And, b)5.4(y)0( the time an attack)9.8(er has fallen)]TJ ET EMC /P <>BDC BT 9 0 0 9 445.8158 670.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 658.3146 Tm -.005 Tc [(int)9.8(o a hone)6.4(ynet, he or she must alr)9.3(eady ha)7.3(v)6.4(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 430.3831 658.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 646.3146 Tm -.005 Tc [(sear)9.3(ched thr)9.8(ough the oper)19.5(ational network and lik)9.8(ely)]TJ ET EMC /P <>BDC BT 9 0 0 9 459.1028 646.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 634.3146 Tm -.005 Tc [(alr)9.3(eady st)9.8(olen his or her quarr)-8.8(y)52.3(.)0( )19.5(This appr)9.8(oach is)]TJ ET EMC /P <>BDC BT 9 0 0 9 446.0829 634.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 622.3146 Tm -.005 Tc [(ineff)11.7(ectiv)6.4(e for detecting and r)9.3(esponding t)9.8(o)0( data)]TJ ET EMC /P <>BDC BT 9 0 0 9 442.6177 622.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 610.3146 Tm -.005 Tc [(loss. )19.5(Ther)9.3(e ar)9.3(e emer)9.3(ging sensor technologies that)]TJ ET EMC /P <>BDC BT 9 0 0 9 452.8471 610.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 598.3146 Tm -.005 Tc [(off)11.7(er a better wa)7.3(y and ar)9.3(e deplo)7.4(y)6.4(ed dir)9.3(ectly within)]TJ ET EMC /P <>BDC BT 9 0 0 9 451.153 598.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 586.3146 Tm -.005 Tc [(an oper)19.5(ational envir)9.8(onment. F)10.3(or example, data loss)]TJ ET EMC /P <>BDC BT 9 0 0 9 456.9548 586.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 574.3146 Tm -.005 Tc [(sensors can be aut)9.8(omatically gener)19.5(ated, highly)]TJ ET EMC /P <>BDC BT 9 0 0 9 440.1806 574.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 562.3146 Tm -.005 Tc [(belie)6.4(v)7.3(able deco)7.4(y documents with embedded)]TJ ET EMC /P <>BDC BT 9 0 0 9 430.9233 562.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 550.3146 Tm -.005 Tc [(beacons that ar)9.3(e str)19.5(ategically placed in folders,)]TJ ET EMC /P <>BDC BT 9 0 0 9 441.2235 550.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 538.3146 Tm -.005 Tc [(dir)9.3(ect)9.8(ories or thir)9.3(d-par)-24.4(ty shar)9.3(es t)9.8(o)0( entice attack)9.8(ers)]TJ ET EMC /P <>BDC BT 9 0 0 9 454.4381 538.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 526.3146 Tm -.005 Tc [(t)9.8(o)0( open them and aler)-24.4(t security teams t)9.8(o)0( early-)]TJ ET EMC /P <>BDC BT 9 0 0 9 255.4471 514.3146 Tm [(stage br)9.3(each activity)52.3(. )]TJ ET EMC /P <>BDC /GS3 gs BT /F3 1 Tf 11 0 0 11 255.4471 292.3145 Tm .9 .53 .1 0 k [(Studying the Lif)11.7(e Cy)6.4(cle of Masquer)14.7(aders:)]TJ ET EMC /P <>BDC BT 11 0 0 11 456.6836 292.3145 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 11 0 0 11 255.4471 278.3146 Tm -.005 Tc [(D)10.3(ARP)86.9(A)58.6()113.3(s Experiment )]TJ ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 255.4471 260.3146 Tm 0 0 0 1 k [(The lack of lar)9.3(ge-scale, r)9.3(eal-world r)9.3(esear)9.3(ch data has)]TJ ET EMC /P <>BDC BT 9 0 0 9 460.129 260.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 248.3146 Tm -.005 Tc [(hinder)9.3(ed the de)6.4(v)6.4(elopment of eff)11.7(ectiv)6.4(e intrusion)]TJ ET EMC /P <>BDC BT 9 0 0 9 441.542 248.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 236.3146 Tm -.005 Tc [(detection systems \(IDSs\) that can st)9.8(op an attack)]TJ ET EMC /P <>BDC BT 9 0 0 9 447.4647 236.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 224.3146 Tm -.005 Tc [(early in its lif)11.7(e cy)6.4(cle. Most or)9.3(ganizations that)]TJ ET EMC /P <>BDC BT 9 0 0 9 430.7612 224.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 212.3146 Tm -.005 Tc [(experience these types of attacks pr)9.3(ef)11.7(er not t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 438.624 212.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 200.3146 Tm -.005 Tc (announce them publicly out of liability and)Tj ET EMC /P <>BDC BT 9 0 0 9 421.674 200.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 188.3146 Tm -.005 Tc [(condentiality concerns. Se)6.4(v)6.4(enty-two per)9.3(cent of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 459.4807 188.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 176.3146 Tm -.005 Tc [(insider incidents that occurr)9.3(ed )]TJ 13.5412 0 TD -.0064 Tc .0014 Tw [(at the sur)-10.2(veyed)]TJ ET EMC /P <>BDC BT 9 0 0 9 437.3848 176.3146 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 164.3146 Tm -.005 Tc [(institutions wer)9.3(e handled internally without legal)]TJ ET EMC /P <>BDC BT 9 0 0 9 445.551 164.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 152.3146 Tm -.005 Tc [(action or the inv)7.3(olv)6.4(ement of law enfor)9.3(cement.)]TJ ET EMC /P <>BDC BT 9 0 0 9 436.319 152.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 140.3146 Tm -.005 Tc [(Another 13 per)9.3(cent of the insider incidents wer)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 444.3182 140.3146 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 128.3145 Tm -.005 Tc (handled internally with some legal action.)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 418.5638 131.0146 Tm 0 Tc (5)Tj ET EMC /P <>BDC BT 9 0 0 9 421.551 128.3145 Tm ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 116.3145 Tm -.005 Tc [(Announcing such attacks ma)7.3(y also ha)7.3(v)6.4(e)0( mark)9.8(et-)]TJ ET EMC /P <>BDC BT 9 0 0 9 255.4471 104.3145 Tm [(shar)9.3(e implications. F)10.3(or the same r)9.3(easons, br)9.3(each)]TJ ET EMC /P <>BDC BT 9 0 0 9 449.2402 104.3145 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 92.3145 Tm -.005 Tc [(victims ar)9.3(e e)6.4(v)6.4(en less lik)9.8(ely t)9.8(o)0( shar)9.3(e r)9.3(eal-world data)]TJ ET EMC /P <>BDC BT 9 0 0 9 454.9611 92.3145 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 80.3145 Tm -.005 Tc [(that could be used t)9.8(o)0( study such attacks with the)]TJ ET EMC /P <>BDC BT 9 0 0 9 448.5799 80.3145 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 68.3145 Tm -.005 Tc [(r)9.3(esear)9.3(ch community)52.3(. )]TJ ET EMC /Artifact <>BDC .9 .53 .1 0 k /GS3 gs 254.5 308.432 205.5 194.697 re f EMC /Artifact <>BDC BT 14 0 0 14 290.7461 473.5591 Tm 0 0 0 0 k .0351 Tc -.0371 Tw [(B)26.8(Y)17.5( THE)17.5( TIME)17.5( )-19.6(AN)17.5( )]TJ -1.9286 -1.2857 TD -.0175 Tw [(A)63(T)-7.8(T)38.5(A)5.3(CKER)17.5( H)-8.8(A)0(S)17.5( F)83(ALLEN)17.5( )]TJ T* [(IN)14.1(T)13.6(O)17.5( A)17.5( HONEYNE)-9.8(T)124(,)35.1( HE)17.5( OR)17.5( )]TJ T* [(SHE)17.5( MUST)37.1( ALREAD)21(Y)17.5( H)-8.8(A)42.4(VE)17.5( )]TJ T* -.0371 Tw [(SEARCHED)17.5( THROUGH)17.5( THE)17.5( )]TJ T* -.0175 Tw [(OPERA)63(TION)-8.8(AL)17.5( NE)-9.8(T)-7.4(WORK)17.5( )]TJ T* [(AND)17.5( LIKEL)116.7(Y)17.5( ALREAD)21(Y)17.5( )]TJ T* [(ST)13.6(OLEN)17.5( HIS)17.5( OR)17.5( HER)17.5( )]TJ T* 0 Tw [(QU)10.7(ARR)23.4(Y)120.6(.)]TJ ET EMC /Artifact <>BDC Q q 1 i 308.992 355.06 54.412 -53.458 re W n 308.992 355.06 54.412 -53.458 re W n 320.049 343.027 32.297 -34.595 re 321.701 329.559 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .36078 .047059 .60392 0 k /GS3 gs q 1 0 0 1 342.621 328.585 cm 0 0 m -.099 -2.881 -.579 -5.075 -1.441 -6.582 c -2.301 -8.089 -3.643 -9.223 -5.464 -9.985 c -3.279 -13.462 l -.265 -12.104 1.937 -10.101 3.328 -7.452 c 4.389 -5.464 4.918 -2.252 4.918 2.186 c 4.918 10.382 l -4.67 10.382 l -4.67 0 l h -12.64 0 m -12.739 -2.881 -13.219 -5.075 -14.081 -6.582 c -14.941 -8.089 -16.283 -9.223 -18.104 -9.985 c -15.919 -13.462 l -12.905 -12.104 -10.703 -10.101 -9.312 -7.452 c -8.251 -5.464 -7.722 -2.252 -7.722 2.186 c -7.722 10.382 l -17.31 10.382 l -17.31 0 l f Q EMC /Artifact <>BDC Q q 1 i 247.205 512.935 54.412 -53.458 re W n 247.205 512.934 54.412 -53.458 re W n 254.5 503.129 35.409 -31.944 re 321.701 329.559 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .36078 .047059 .60392 0 k /GS3 gs q 1 0 0 1 268.025 484.353 cm 0 0 m .099 2.881 .579 5.075 1.441 6.582 c 2.301 8.089 3.643 9.223 5.464 9.985 c 3.279 13.462 l .265 12.104 -1.937 10.101 -3.328 7.452 c -4.389 5.464 -4.918 2.252 -4.918 -2.186 c -4.918 -10.382 l 4.67 -10.382 l 4.67 0 l h 12.64 0 m 12.739 2.881 13.219 5.075 14.081 6.582 c 14.941 8.089 16.283 9.223 18.104 9.985 c 15.919 13.462 l 12.905 12.104 10.703 10.101 9.312 7.452 c 8.251 5.464 7.722 2.252 7.722 -2.186 c 7.722 -10.382 l 17.31 -10.382 l 17.31 0 l f Q EMC Q endstream endobj 61 0 obj <>/ExtGState<>>> endobj 79 0 obj <> endobj 84 0 obj <> endobj 89 0 obj <> endobj 94 0 obj <>stream /Artifact <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ /F2 1 Tf 15.355 0 TD [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /Artifact <>BDC BT /F1 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA JOURN)-8.8(AL)]TJ ET /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm .73 .19 0 0 k [( V)6.4(OL 1)]TJ ET EMC /Artifact <>BDC 0 0 0 1 k /GS2 gs 569.898 0 .51599 31.289 re f EMC /Artifact <>BDC /GS3 gs BT 7 0 0 7 584.9167 23.0228 Tm .73 .19 0 0 k (3)Tj ET EMC /P <>BDC /GS2 gs BT 9 0 0 9 36.9471 658.2292 Tm 0 0 0 1 k -.005 Tc [(The study of masquer)19.5(ade attacks, a class of)]TJ ET EMC /P <>BDC BT 9 0 0 9 211.2907 658.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 646.2292 Tm -.005 Tc [(attacks in which an outside adv)6.4(ersar)-8.8(y illegitimately)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.4639 646.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 634.2292 Tm -.005 Tc (poses as, or assumes the identity of, a legitimate)Tj ET EMC /P <>BDC BT 9 0 0 9 229.3713 634.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 622.2292 Tm -.005 Tc [(user)60.1(, suff)11.7(ers similarly fr)9.8(om the scar)9.3(city of r)9.3(eal-world)]TJ ET EMC /P <>BDC BT 9 0 0 9 241.1962 622.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 610.2292 Tm -.005 Tc [(data, despite their signicance. )19.5(Thir)-24.4(ty-v)6.4(e per)9.3(cent)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.6136 610.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 598.2292 Tm -.005 Tc [(of ex)9.8(ecutiv)6.4(es and law enfor)9.3(cement ocials)]TJ ET EMC /P <>BDC BT 9 0 0 9 208.12 598.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 586.2292 Tm -.005 Tc [(experienced unauthoriz)7.8(ed access and use of their)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.8231 586.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 574.2292 Tm -.005 Tc (information, systems and networks.)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 178.2268 576.9293 Tm 0 Tc (6)Tj ET EMC /P <>BDC BT 9 0 0 9 181.2141 574.2292 Tm -.005 Tc [( Masquer)19.5(ade)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.7944 574.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 562.2292 Tm -.005 Tc [(attacks wer)9.3(e second in the t)9.8(op-v)6.4(e list of electr)9.8(onic)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.4406 562.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 550.2292 Tm -.005 Tc [(crimes perpetr)19.5(ated b)5.4(y)0( outsiders after viruses,)]TJ ET EMC /P <>BDC BT 9 0 0 9 215.2119 550.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 538.2292 Tm -.005 Tc [(worms and other malicious attack v)6.4(ect)9.8(ors. )]TJ ET EMC /P <>BDC BT 9 0 0 9 36.9471 514.2292 Tm [(In an effor)-24.4(t t)9.8(o)0( gener)19.5(ate mor)9.3(e r)9.3(eal-world r)9.3(esear)9.3(ch)]TJ ET EMC /P <>BDC BT 9 0 0 9 227.887 514.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 502.2293 Tm -.005 Tc [(data, the Def)11.7(ense Adv)7.3(anced Resear)9.3(ch Pr)9.8(ojects)]TJ ET EMC /P <>BDC BT 9 0 0 9 221.0544 502.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 490.2293 Tm -.005 Tc [(Agency \(D)10.3(ARP)67.4(A\) initiated the Activ)6.4(e A)5.4(uthentication)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.7781 490.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 478.2293 Tm -.005 Tc [(pr)9.8(ogr)19.5(am se)6.4(v)6.4(e)0(r)19.5(al y)6.4(ears ago with the mission t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 218.4914 478.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 466.2293 Tm -.005 Tc [(fur)-24.4(ther explor)9.3(e data loss detection appr)9.8(oaches. )19.5(The)]TJ ET EMC /P <>BDC BT 9 0 0 9 240.6423 466.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 454.2293 Tm -.005 Tc [(k)9.8(e)6.4(y driv)6.4(er was t)9.8(o)0( understand the vulner)19.5(abilities of)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.7917 454.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 442.2293 Tm -.005 Tc (the last mile of an attack, with the hope of)Tj ET EMC /P <>BDC BT 9 0 0 9 201.8722 442.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 430.2293 Tm -.005 Tc [(impr)9.8(o)7.3(ving security in this ar)9.3(ea. )19.5(The focus of this)]TJ ET EMC /P <>BDC BT 9 0 0 9 225.9656 430.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 418.2293 Tm -.005 Tc [(r)9.3(esear)9.3(ch was t)9.8(o)0( pr)9.8(otect the data itself within its)]TJ ET EMC /P <>BDC BT 9 0 0 9 224.0408 418.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 406.2293 Tm -.005 Tc [(nativ)6.4(e settingnamely)52.3(, business documents such)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.8207 406.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 394.2293 Tm -.005 Tc [(as W)15.2(o)0(r)9.3(d)0( documents, PDFs and spr)9.3(eadsheets.)]TJ ET EMC /P <>BDC BT 9 0 0 9 216.2543 394.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 382.2293 Tm -.005 Tc [(Resear)9.3(chers wer)9.3(e determined t)9.8(o)0( pr)9.8(o)7.3(vide an)]TJ ET EMC /P <>BDC BT 9 0 0 9 207.9881 382.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 370.2293 Tm -.005 Tc [(eff)11.7(ectiv)6.4(e means of early detection of)]TJ ET EMC /P <>BDC BT 9 0 0 9 181.3175 370.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 358.2293 Tm -.005 Tc [(masquer)19.5(aders. )]TJ ET EMC /P <>BDC BT 9 0 0 9 36.9471 334.2293 Tm [(The k)9.8(e)6.4(y insight fr)9.8(om this experiment:)]TJ ET EMC /P <>BDC BT 9 0 0 9 182.7238 334.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 322.2293 Tm -.005 Tc [(Masquer)19.5(aders, much lik)9.8(e thie)6.4(v)6.4(es br)9.3(eaking int)9.8(o a)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.5971 322.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 310.2293 Tm -.005 Tc (home, must gather information about the)Tj ET EMC /P <>BDC BT 9 0 0 9 199.0342 310.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 298.2293 Tm -.005 Tc [(envir)9.8(onment the)6.4(y just enter)9.3(ed. )19.5(The)6.4(y must learn)]TJ ET EMC /P <>BDC BT 9 0 0 9 221.7247 298.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 286.2293 Tm -.005 Tc [(mor)9.3(e about the home, sear)9.3(ch for v)7.3(aluables t)9.8(o)0( steal)]TJ ET EMC /P <>BDC BT 9 0 0 9 236.952 286.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 274.2293 Tm -.005 Tc [(and package data t)9.8(o)0( exltr)19.5(ate. )19.5(This early-stage)]TJ ET EMC /P <>BDC BT 9 0 0 9 220.9414 274.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 262.2293 Tm -.005 Tc [(activity is k)9.8(e)6.4(y t)9.8(o)0( detecting their nefarious activity)52.3(.)]TJ ET EMC /P <>BDC BT 9 0 0 9 230.2242 262.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 250.2293 Tm -.005 Tc [(Ther)9.3(efor)9.3(e, placing sensors that act as trip wir)9.3(es)]TJ ET EMC /P <>BDC BT 9 0 0 9 224.1429 250.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 238.2293 Tm -.005 Tc [(within the folders and dir)9.3(ect)9.8(ories that ar)9.3(e most)]TJ ET EMC /P <>BDC BT 9 0 0 9 221.2349 238.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 226.2293 Tm -.005 Tc [(lik)9.8(ely t)9.8(o)0( be sear)9.3(ched as par)-24.4(t of an attack ser)-8.8(v)6.4(es as)]TJ ET EMC /P <>BDC BT 9 0 0 9 236.049 226.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 214.2293 Tm -.005 Tc (a detection mechanism. )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 190.2293 Tm (The ecacy of the use of sensors embedded in)Tj ET EMC /P <>BDC BT 9 0 0 9 223.9152 190.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 178.2293 Tm -.005 Tc [(documents as a means t)9.8(o)0( detect data loss was)]TJ ET EMC /P <>BDC BT 9 0 0 9 223.357 178.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 166.2293 Tm -.005 Tc [(pr)9.8(o)7.3(v)6.4(en in a scientic study sponsor)9.3(ed b)5.4(y)0( D)10.3(ARP)67.4(A.)]TJ ET EMC /P <>BDC BT 9 0 0 9 229.7085 166.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 154.2293 Tm -.005 Tc [(The study measur)9.3(ed true and false positiv)6.4(es and)]TJ ET EMC /P <>BDC BT 9 0 0 9 228.4034 154.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 142.2293 Tm -.005 Tc [(true negativ)6.4(es. In the study)52.3(, 39 individual)]TJ ET EMC /P <>BDC BT 9 0 0 9 196.4065 142.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 130.2293 Tm -.005 Tc [(masquer)19.5(aders, all selected because of their)]TJ ET EMC /P <>BDC BT 9 0 0 9 208.5485 130.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 118.2293 Tm -.005 Tc (sophisticated, deep knowledge of computer science)Tj ET EMC /P <>BDC BT 9 0 0 9 242.2001 118.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 106.2293 Tm -.005 Tc [(and systems in gener)19.5(al, wer)9.3(e gr)19.5(anted access t)9.8(o)0( a)]TJ ET EMC /P <>BDC BT 9 0 0 9 230.815 106.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 94.2293 Tm -.005 Tc [(system as if the)6.4(y had alr)9.3(eady succeeded in stealing)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.5481 94.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 82.2293 Tm -.005 Tc [(the necessar)-8.8(y cr)9.3(edentials. )19.5(The masquer)19.5(aders wer)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 237.5737 82.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 70.2293 Tm -.005 Tc [(then t)9.8(old that their job was t)9.8(o)0( steal sensitiv)6.4(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 210.5967 70.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 658.2292 Tm -.005 Tc [(information in the system le)6.4(v)6.4(e)0(r)19.5(aging the cr)9.3(edentials)]TJ ET EMC /P <>BDC BT 9 0 0 9 459.6247 658.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 646.2292 Tm -.005 Tc [(the)6.4(y wer)9.3(e pr)9.8(o)7.4(vided. )19.5(The study followed pr)9.3(escribed)]TJ ET EMC /P <>BDC BT 9 0 0 9 453.058 646.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 634.2292 Tm -.005 Tc [(and statistically v)7.3(alid methodology wher)9.3(eb)5.4(y the)]TJ ET EMC /P <>BDC BT 9 0 0 9 442.3022 634.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 622.2292 Tm -.005 Tc [(masquer)19.5(aders wer)9.3(e giv)6.4(en a scenario of what kind)]TJ ET EMC /P <>BDC BT 9 0 0 9 450.8627 622.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 610.2292 Tm -.005 Tc [(of information t)9.8(o)0( steal, but not how t)9.8(o)0( steal it. )19.5(The)6.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 456.063 610.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 598.2292 Tm -.005 Tc [(wer)9.3(e left t)9.8(o)0( their own de)6.4(vices t)9.8(o)0( nd and exltr)19.5(ate)]TJ ET EMC /P <>BDC BT 9 0 0 9 451.4299 598.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 586.2292 Tm -.005 Tc [(their quarr)-8.8(y)52.3(.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 302.2838 588.9293 Tm -.0083 Tc (7 )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 562.2292 Tm -.005 Tc [(In this study)52.3(, the str)19.5(ategic use of sensors t)9.8(o)0( detect)]TJ ET EMC /P <>BDC BT 9 0 0 9 453.735 562.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 550.2292 Tm -.005 Tc (when documents had been accessed was)Tj ET EMC /P <>BDC BT 9 0 0 9 420.4948 550.2292 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 538.2292 Tm -.005 Tc (successful in: )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.459 520.2292 Tm [(Detecting 98 per)9.3(cent of masquer)19.5(aders )]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F6 1 Tf 12 0 0 12 255.4471 520.2292 Tm .63 .06 1 0 k 0 Tc ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 266.459 502.2293 Tm 0 0 0 1 k -.005 Tc [(Gener)19.5(ating only one false positiv)6.4(e per week of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 447.7254 502.2293 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F6 1 Tf 12 0 0 12 255.4471 502.2293 Tm .63 .06 1 0 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 264.4471 490.2293 Tm 0 0 0 1 k -.005 Tc [(oper)19.5(ation )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 266.459 472.2293 Tm [(Achie)6.4(ving detection within 10 minutes )]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F6 1 Tf 12 0 0 12 255.4471 472.2293 Tm .63 .06 1 0 k 0 Tc ()Tj ET EMC /P <>BDC /GS2 gs BT /F3 1 Tf 9 0 0 9 255.4471 448.2293 Tm 0 0 0 1 k -.005 Tc [(Figur)9.3(e 1)]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 288.0463 448.2293 Tm [( details the measur)9.3(ed time t)9.8(o)0( detection for)]TJ ET EMC /P <>BDC BT 9 0 0 9 455.5739 448.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 436.2293 Tm -.005 Tc [(each masquer)19.5(ader)60.1(. None had sucient time t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 439.7927 436.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 424.2293 Tm -.005 Tc [(succeed in exltr)19.5(ating the les the)6.4(y acquir)9.3(ed and)]TJ ET EMC /P <>BDC BT 9 0 0 9 447.5824 424.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 412.2293 Tm -.005 Tc [(wer)9.3(e pr)9.3(epar)9.3(ed t)9.8(o)0( bundle and exltr)19.5(ate. )19.5(This is solid)]TJ ET EMC /P <>BDC BT 9 0 0 9 455.8454 412.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 400.2293 Tm -.005 Tc [(e)6.4(vidence of the ecacy of the concept of applying)]TJ ET EMC /P <>BDC BT 9 0 0 9 453.6512 400.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 388.2293 Tm -.005 Tc [(sensors t)9.8(o)0( documents as a wa)7.3(y t)9.8(o)0( dr)19.5(amatically)]TJ ET EMC /P <>BDC BT 9 0 0 9 441.1705 388.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 376.2293 Tm -.005 Tc [(r)9.3(educe data losses and the associated costs.)]TJ ET EMC /P <>BDC BT 9 0 0 9 433.815 376.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 364.2293 Tm -.005 Tc [(Considering the a)7.3(v)6.4(er)19.5(age dwell time of an adv)6.4(ersar)-8.8(y)52.3(,)]TJ ET EMC /P <>BDC BT 9 0 0 9 457.9426 364.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 352.2293 Tm -.005 Tc [(detecting irr)9.3(egular beha)7.3(vior of a masquer)19.5(ader)]TJ ET EMC /P <>BDC BT 9 0 0 9 435.4621 352.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 340.2293 Tm -.005 Tc [(within 10 minutes is a signicant impr)9.8(o)7.3(v)6.4(ement. )]TJ ET EMC /P <>BDC BT 9 0 0 9 255.4471 136.2293 Tm [(Early detection of unsanctioned access t)9.8(o)0( sensitiv)6.4(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 457.7141 136.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 124.2293 Tm -.005 Tc [(data, such as the scenario in this D)10.3(ARP)67.4(A r)9.3(esear)9.3(ch,)]TJ ET EMC /P <>BDC BT 9 0 0 9 452.8768 124.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 112.2293 Tm -.005 Tc [(can spar)9.3(e or)9.3(ganizations the pain and cost of a)]TJ ET EMC /P <>BDC BT 9 0 0 9 437.7724 112.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 100.2293 Tm -.005 Tc [(br)9.3(each. )19.5(Ther)9.3(e is a 28 per)9.3(cent chance an enterprise)]TJ ET EMC /P <>BDC BT 9 0 0 9 454.4193 100.2293 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 88.2293 Tm -.005 Tc [(will suff)11.7(er a br)9.3(each within the next two y)6.4(ears.)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 432.8188 90.9293 Tm 0 Tc (8)Tj ET EMC /P <>BDC BT 9 0 0 9 435.8062 88.2293 Tm -.005 Tc -.0195 Tw [( This)]TJ ET EMC /P <>BDC BT 9 0 0 9 454.7852 88.2293 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 76.2293 Tm -.005 Tc [(can r)9.3(esult in a US $3.6 million loss based on the)]TJ ET EMC /P <>BDC BT 9 0 0 9 443.8163 76.2293 Tm 0 Tc ( )Tj ET EMC /Artifact <>BDC .9 .53 .1 0 k /GS3 gs 255.447 153 205.5 176.452 re f EMC /Artifact <>BDC BT 14 0 0 14 291.6932 299.882 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [(MOST)37.1( ORGANIZ)-6.4(A)63(TIONS)17.5( )]TJ -1.9286 -1.2857 TD [(ALREAD)21(Y)17.5( REL)116.7(Y)17.5( ON)17.5( )]TJ T* [(NE)-9.8(T)-7.4(WORK)17.6( AND)17.5( ENDPOIN)14.1(T)37.1( )]TJ T* -.0371 Tw [(SENSORS)17.5( T)13.6(O)17.5( )-19.6(COLLEC)14.1(T)37.1( )]TJ T* -.0175 Tw [(CRI)14.1(TICAL)17.5( SECURI)14.1(T)-7.8(Y)17.5( D)10.2(A)63(T)38.5(A)17.5(,)35.1( )]TJ T* [(SO)17.5( WH)13.6(Y)17.5( NO)13.2(T)37.1( REL)116.7(Y)17.5( ON)17.5( )]TJ T* [(SENSORS)17.5( A)63(T)37.1( )19.6(THE)17.5( SOURCE)17.5( )]TJ T* [(OF)17.5( )19.6(THE)17.5( D)10.2(A)63(T)38.5(A)17.5( I)14.1(T)7.8(SELF)17.5(?)]TJ ET EMC /Artifact <>BDC Q q 1 i 397.005 199.962 54.412 -53.458 re W n 397.005 199.961 54.412 -53.458 re W n 408.063 187.928 32.297 -34.595 re 409.841 173.882 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .36078 .047059 .60392 0 k /GS3 gs q 1 0 0 1 430.635 173.486 cm 0 0 m -.099 -2.881 -.579 -5.075 -1.441 -6.582 c -2.301 -8.089 -3.643 -9.223 -5.464 -9.985 c -3.279 -13.462 l -.265 -12.104 1.937 -10.101 3.328 -7.452 c 4.389 -5.464 4.918 -2.252 4.918 2.186 c 4.918 10.382 l -4.67 10.382 l -4.67 0 l h -12.64 0 m -12.739 -2.881 -13.219 -5.075 -14.081 -6.582 c -14.941 -8.089 -16.283 -9.223 -18.104 -9.985 c -15.919 -13.462 l -12.905 -12.104 -10.703 -10.101 -9.312 -7.452 c -8.251 -5.464 -7.722 -2.252 -7.722 2.186 c -7.722 10.382 l -17.31 10.382 l -17.31 0 l f Q EMC /Artifact <>BDC Q q 1 i 248.152 339.258 54.412 -53.458 re W n 248.152 339.257 54.412 -53.458 re W n 255.447 329.452 35.409 -31.945 re 409.841 173.882 m W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .36078 .047059 .60392 0 k /GS3 gs q 1 0 0 1 268.972 310.676 cm 0 0 m .099 2.881 .579 5.075 1.441 6.582 c 2.301 8.089 3.643 9.223 5.464 9.985 c 3.279 13.462 l .265 12.104 -1.937 10.101 -3.328 7.452 c -4.389 5.464 -4.918 2.252 -4.918 -2.186 c -4.918 -10.382 l 4.67 -10.382 l 4.67 0 l h 12.64 0 m 12.739 2.881 13.219 5.075 14.081 6.582 c 14.941 8.089 16.283 9.223 18.104 9.985 c 15.919 13.462 l 12.905 12.104 10.703 10.101 9.312 7.452 c 8.251 5.464 7.722 2.252 7.722 -2.186 c 7.722 -10.382 l 17.31 -10.382 l 17.31 0 l f Q EMC Q endstream endobj 95 0 obj <>/ExtGState<>>> endobj 106 0 obj <> endobj 111 0 obj <> endobj 116 0 obj <> endobj 121 0 obj <> endobj 126 0 obj <> endobj 131 0 obj <> endobj 136 0 obj <> endobj 141 0 obj <> endobj 142 0 obj <>stream /Artifact <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ /F2 1 Tf 15.355 0 TD [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /Artifact <>BDC BT /F1 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA JOURN)-8.8(AL)]TJ ET /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm .73 .19 0 0 k [( V)6.4(OL 1)]TJ ET EMC /Artifact <>BDC 0 0 0 1 k /GS2 gs 569.898 0 .51599 31.289 re f EMC /Artifact <>BDC /GS3 gs BT 7 0 0 7 584.9167 23.0228 Tm .73 .19 0 0 k (4)Tj ET EMC /P <>BDC /GS2 gs BT 9 0 0 9 49.9472 341.2558 Tm 0 0 0 1 k -.005 Tc [(a)7.3(v)6.4(er)19.5(age cost of a data br)9.3(each. Using these)]TJ ET EMC /P <>BDC BT 9 0 0 9 217.9813 341.2558 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 49.9472 329.2558 Tm -.005 Tc [(numbers as a benchmark, detecting a br)9.3(each)]TJ ET EMC /P <>BDC BT 9 0 0 9 227.4251 329.2558 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 49.9472 317.2558 Tm -.005 Tc [(within 30 da)7.3(ys or less \(r)19.5(ather than the a)7.3(v)6.4(er)19.5(age)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.4321 317.2558 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 49.9472 305.2558 Tm -.005 Tc [(197 da)7.3(ys\) sa)7.3(v)6.4(es the or)9.3(ganization US $1 million)]TJ ET EMC /P <>BDC BT 9 0 0 9 234.1886 305.2558 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 49.9472 293.2558 Tm -.005 Tc [(in costs. Most or)9.3(ganizations alr)9.3(eady r)9.3(ely on)]TJ ET EMC /P <>BDC BT 9 0 0 9 221.2092 293.2558 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 49.9472 281.2558 Tm -.005 Tc [(network and endpoint sensors t)9.8(o)0( collect critical)]TJ ET EMC /P <>BDC BT 9 0 0 9 236.6561 281.2558 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 49.9472 269.2558 Tm -.005 Tc [(security data, so why not r)9.3(ely on sensors at the)]TJ ET EMC /P <>BDC BT 9 0 0 9 234.3182 269.2558 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 49.9472 257.2558 Tm -.005 Tc [(sour)9.3(ce of the data itself? If time t)9.8(o)0( detection is)]TJ ET EMC /P <>BDC BT 9 0 0 9 233.3933 257.2558 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 49.9472 245.2558 Tm -.005 Tc [(the k)9.8(e)6.4(y t)9.8(o)0( sa)7.3(ving or)9.3(ganizations signicant)]TJ ET EMC /P <>BDC BT 9 0 0 9 215.2479 245.2558 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 49.9472 233.2558 Tm -.005 Tc [(amounts of mone)6.4(y)52.3(,)0( then the security industr)-8.8(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 227.2252 233.2558 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 49.9472 221.2558 Tm -.005 Tc (must examine new technologies and)Tj ET EMC /P <>BDC BT 9 0 0 9 194.6028 221.2558 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 49.9472 209.2558 Tm -.005 Tc [(appr)9.8(oaches t)9.8(o)0( impr)9.8(o)7.3(v)6.4(e this metric. )19.5(The use of)]TJ ET EMC /P <>BDC BT 9 0 0 9 230.9508 209.2558 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 49.9472 197.2558 Tm -.005 Tc [(data loss sensors is a pr)9.8(o)7.3(v)6.4(en method t)9.8(o)0( catch)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.7769 197.2558 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 49.9472 185.2558 Tm -.005 Tc [(masquer)19.5(aders quickly and early in the attack lif)11.7(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 239.8807 185.2558 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 49.9472 173.2558 Tm -.005 Tc [(cy)6.4(cle. )]TJ ET EMC /P <>BDC /GS3 gs BT /F3 1 Tf 11 0 0 11 255.4471 339.7558 Tm .9 .53 .1 0 k (Endnotes )Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 272.8107 321.7558 Tm 0 0 0 1 k [(IBM and P)6.4(onemon Institute, )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 384.3818 321.7558 Tm (2018 Cost of a)Tj ET EMC /LBody <>BDC BT 9 0 0 9 441.2457 321.7558 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 260.4471 321.7558 Tm .63 .06 1 0 k (1)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 309.7558 Tm 0 0 0 1 k -.005 Tc [(Data Br)9.3(each Study)]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 343.7879 309.7558 Tm (, USA, 2018,)Tj ET EMC /LBody <>BDC BT 9 0 0 9 390.2652 309.7558 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.4471 297.7558 Tm -.005 Tc [(https:/)109.4(/www)60.6(.ibm.com/security/data-br)9.3(each )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.8107 285.7558 Tm (Ibid. )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 260.4471 285.7558 Tm .63 .06 1 0 k 0 Tc (2)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.8107 273.7558 Tm 0 0 0 1 k -.005 Tc (Ibid. )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 260.4471 273.7558 Tm .63 .06 1 0 k 0 Tc (3)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.8107 261.7558 Tm 0 0 0 1 k -.005 Tc (Ibid. )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 260.4471 261.7558 Tm .63 .06 1 0 k 0 Tc (4)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.8107 249.7558 Tm 0 0 0 1 k -.005 Tc (CSO Magazine)Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 329.7339 249.7558 Tm [(, 2010 Cybersecurity W)16.1(atch)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 440.1975 249.7558 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 260.4471 249.7558 Tm .63 .06 1 0 k (5)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 272.4471 237.7558 Tm 0 0 0 1 k -.005 Tc [(Sur)-8.8(v)6.4(e)6.4(ySur)-8.8(v)6.4(e)6.4(y)0( Results,)83( 25 Januar)-8.8(y 2010,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 438.0444 237.7558 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.4471 225.7558 Tm -.005 Tc [(https:/)109.4(/r)9.3(esour)9.3(ces.sei.cmu.edu/asset_les/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 213.7558 Tm (News/2010_100_001_53454.pdf )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.8107 201.7558 Tm (Ibid. )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 260.4471 201.7558 Tm .63 .06 1 0 k 0 Tc (6)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 272.8107 189.7558 Tm 0 0 0 1 k -.005 Tc [(Salem, M. B.; S. St)9.8(olfo; )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 363.1451 189.7558 Tm (On the Design and)Tj ET EMC /LBody <>BDC BT 9 0 0 9 433.8882 189.7558 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 260.4471 189.7558 Tm .63 .06 1 0 k (7)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 177.7558 Tm 0 0 0 1 k -.005 Tc [(Ex)9.8(ecution of Cyber-Security User Studies:)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 431.8338 177.7558 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 165.7558 Tm -.005 Tc [(Methodology)52.3(, Challenges, and Lessons Learned)]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 456.3478 165.7558 Tm 0 Tc (,)Tj ET EMC /LBody <>BDC BT 9 0 0 9 458.0694 165.7558 Tm ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 153.7558 Tm -.005 Tc [(Columbia Univ)6.4(ersity)52.3(, New Y)31.8(ork, USA,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 414.7453 153.7558 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.4471 141.7558 Tm -.005 Tc [(http:/)109.4(/ids.cs.columbia.edu/sites/default/les/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 129.7558 Tm [(CSE)-9.7(T_2011_0.pdf )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.8107 117.7558 Tm (Op cit )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 297.571 117.7558 Tm [(IBM and P)6.4(onemon)]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 260.4471 117.7558 Tm .63 .06 1 0 k 0 Tc (8)Tj ET EMC /Artifact <>BDC 0 0 0 0 k 36 359.26 423 315.274 re f EMC /Artifact <>BDC Q q 1 i 38.194 675.997 426.5 -317.934 re W n 38.194 675.997 426.609 -318.059 re W n 36 674.534 423 -315.274 re W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n .18824 .1098 .031373 0 k /GS3 gs 38.194 359.16 420.866 297.874 re f .74118 .19608 .007843 0 k 38.194 658.997 420.866 15.643 re f Q q 1 i 38.194 675.997 426.609 -318.059 re W n 36 674.534 423 -315.274 re W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS3 gs BT /F7 1 Tf 9 0 0 9 145.3622 663.8169 Tm 0 0 0 0 k 0 Tc 0 Tw [(Figur)9.5(e).1( 1Minutes Elapsed Since Masquer)13(a)-.1(de A)8.8(ttack Star)-24.4(t)]TJ ET 52.805 385.402 394.667 261.666 re f .74609 .67578 .66797 .89844 K 0 J 0 j .5 w 10 M [] 0 d q 1 0 0 1 90.805 426.402 cm 0 0 m 343 0 l S 1 0 0 1 0 4.9 cm 0 0 m 343 0 l S 1 0 0 1 0 4.6 cm 0 0 m 343 0 l S 1 0 0 1 0 4.5 cm 0 0 m 343 0 l S 1 0 0 1 0 4.9 cm 0 0 m 343 0 l S 1 0 0 1 0 4.6 cm 0 0 m 343 0 l S 1 0 0 1 0 4.5 cm 0 0 m 343 0 l S 1 0 0 1 0 4.9 cm 0 0 m 343 0 l S 1 0 0 1 0 4.6 cm 0 0 m 343 0 l S 1 0 0 1 0 4.5 cm 0 0 m 343 0 l S 1 0 0 1 0 4.9 cm 0 0 m 343 0 l S 1 0 0 1 0 4.6 cm 0 0 m 343 0 l S 1 0 0 1 0 4.5 cm 0 0 m 343 0 l S 1 0 0 1 0 4.9 cm 0 0 m 343 0 l S 1 0 0 1 0 4.6 cm 0 0 m 343 0 l S 1 0 0 1 0 4.5 cm 0 0 m 343 0 l S 1 0 0 1 0 4.9 cm 0 0 m 343 0 l S 1 0 0 1 0 4.6 cm 0 0 m 343 0 l S 1 0 0 1 0 4.5 cm 0 0 m 343 0 l S 1 0 0 1 0 4.9 cm 0 0 m 343 0 l S 1 0 0 1 0 4.6 cm 0 0 m 343 0 l S 1 0 0 1 0 4.5 cm 0 0 m 343 0 l S 1 0 0 1 0 4.9 cm 0 0 m 343 0 l S 1 0 0 1 0 4.6 cm 0 0 m 343 0 l S 1 0 0 1 0 4.5 cm 0 0 m 343 0 l S 1 0 0 1 0 4.726 cm 0 0 m 343 0 l S 1 0 0 1 0 4.5 cm 0 0 m 343 0 l S 1 0 0 1 0 4.9 cm 0 0 m 343 0 l S 1 0 0 1 0 4.6 cm 0 0 m 343 0 l S 1 0 0 1 0 4.5 cm 0 0 m 343 0 l S 1 0 0 1 0 4.9 cm 0 0 m 343 0 l S 1 0 0 1 0 4.6 cm 0 0 m 343 0 l S 1 0 0 1 0 4.5 cm 0 0 m 343 0 l S 1 0 0 1 0 4.9 cm 0 0 m 343 0 l S 1 0 0 1 0 4.6 cm 0 0 m 343 0 l S 1 0 0 1 0 4.5 cm 0 0 m 343 0 l S 1 0 0 1 0 4.6 cm 0 0 m 343 0 l S 1 0 0 1 0 4.5 cm 0 0 m 343 0 l S 1 0 0 1 0 4.9 cm 0 0 m 343 0 l S 1 0 0 1 0 4.6 cm 0 0 m 343 0 l S 1 0 0 1 0 4.5 cm 0 0 m 343 0 l S 1 0 0 1 0 4.9 cm 0 0 m 343 0 l S 1 0 0 1 0 4.6 cm 0 0 m 343 0 l S 1 0 0 1 0 4.5 cm 0 0 m 343 0 l S 1 0 0 1 0 4.5 cm 0 0 m 343 0 l S 1 0 0 1 0 4.9 cm 0 0 m 343 0 l S 1 0 0 1 3.596 0 cm 0 0 m 0 -111.726 l S 1 0 0 1 0 2.957 cm 0 0 m 0 -215.968 l S 1 0 0 1 45.071 0 cm 0 0 m 0 -215.968 l S 1 0 0 1 45.07 0 cm 0 0 m 0 -215.968 l S 1 0 0 1 45.071 0 cm 0 0 m 0 -215.968 l S 1 0 0 1 45.07 0 cm 0 0 m 0 -215.968 l S 1 0 0 1 44.991 0 cm 0 0 m 0 -215.968 l S 1 0 0 1 45.07 0 cm 0 0 m 0 -215.968 l S 1 0 0 1 45.071 0 cm 0 0 m 0 -215.968 l S Q .90588 .52157 .094118 0 k 94.807 633.997 338.925 2.1924 re f 0 1 1 0 k 94.492 629.031 44.961 2.1924 re f .90588 .52157 .094118 0 k 139.441 629.031 294.291 2.1924 re f 0 1 1 0 k 94.492 613.068 44.961 2.1924 re f .90588 .52157 .094118 0 k 139.441 613.068 294.291 2.1924 re f 0 1 1 0 k 94.492 607.568 22.487 2.1924 re f .90588 .52157 .094118 0 k 116.966 607.568 316.766 2.1924 re f 0 1 1 0 k 94.492 602.068 67.159 2.1924 re f .90588 .52157 .094118 0 k 161.639 602.068 272.093 2.1924 re f 0 1 1 0 k 94.492 596.735 44.968 2.1923 re f .90588 .52157 .094118 0 k 139.447 596.735 294.285 2.1923 re f 0 1 1 0 k 94.492 591.735 134.993 2.1923 re f .90588 .52157 .094118 0 k 229.472 591.735 204.26 2.1923 re f 0 1 1 0 k 94.492 586.235 44.968 2.1923 re f .90588 .52157 .094118 0 k 139.447 586.235 294.285 2.1923 re f 94.492 580.735 44.968 2.1923 re f 139.447 580.735 294.285 2.1923 re f 94.492 575.568 44.968 2.1926 re f 139.447 575.568 294.285 2.1926 re f 94.492 570.235 44.968 2.193 re f 139.447 570.235 294.285 2.193 re f 94.492 564.735 44.968 2.193 re f 139.447 564.735 294.285 2.193 re f 94.492 559.902 44.968 2.192 re f 139.447 559.902 294.285 2.192 re f 94.492 543.568 44.968 2.193 re f 139.447 543.568 294.285 2.193 re f 94.492 522.568 44.968 2.193 re f 139.447 522.568 294.285 2.193 re f 94.492 517.068 44.968 2.193 re f 139.447 517.068 294.285 2.193 re f 94.492 480.568 44.968 2.193 re f 139.447 480.568 294.285 2.193 re f 94.492 474.568 44.968 2.193 re f 139.447 474.568 294.285 2.193 re f 94.492 469.068 44.968 2.193 re f 139.447 469.068 294.285 2.193 re f 94.492 448.235 44.968 2.193 re f 139.447 448.235 294.285 2.193 re f 94.492 437.568 44.968 2.193 re f 139.447 437.568 294.285 2.193 re f 94.492 432.568 44.968 2.193 re f 139.447 432.568 294.285 2.193 re f 94.492 490.735 44.968 2.193 re f 139.447 490.735 294.285 2.193 re f 0 1 1 0 k 94.492 554.376 22.494 2.192 re f .90588 .52157 .094118 0 k 116.973 554.376 316.759 2.192 re f 0 1 1 0 k 94.492 549.209 44.968 2.193 re f .90588 .52157 .094118 0 k 139.447 549.209 294.285 2.193 re f 0 1 1 0 k 94.492 538.376 112.993 2.192 re f .90588 .52157 .094118 0 k 207.472 538.376 226.26 2.192 re f 0 1 1 0 k 94.492 533.209 67.502 2.193 re f .90588 .52157 .094118 0 k 161.982 533.209 271.75 2.193 re f 0 1 1 0 k 94.492 528.043 22.5 2.192 re f .90588 .52157 .094118 0 k 116.979 528.043 316.753 2.192 re f 0 1 1 0 k 94.492 512.043 22.5 2.192 re f .90588 .52157 .094118 0 k 116.979 512.043 316.753 2.192 re f 0 1 1 0 k 94.492 506.376 22.5 2.192 re f .90588 .52157 .094118 0 k 116.979 506.376 316.753 2.192 re f 0 1 1 0 k 94.492 501.008 22.5 2.192 re f .90588 .52157 .094118 0 k 116.979 501.008 316.753 2.192 re f 0 1 1 0 k 94.492 464.735 22.5 2.193 re f .90588 .52157 .094118 0 k 116.979 464.735 316.753 2.193 re f 0 1 1 0 k 94.492 458.735 22.5 2.193 re f .90588 .52157 .094118 0 k 116.979 458.735 316.753 2.193 re f 0 1 1 0 k 94.492 453.568 22.5 2.193 re f .90588 .52157 .094118 0 k 116.979 453.568 316.753 2.193 re f 0 1 1 0 k 94.492 443.068 22.5 2.193 re f .90588 .52157 .094118 0 k 116.979 443.068 316.753 2.193 re f 0 1 1 0 k 94.492 485.175 67.496 2.192 re f .90588 .52157 .094118 0 k 161.975 485.175 271.757 2.192 re f 0 1 1 0 k 94.492 496.175 203.372 2.192 re f .90588 .52157 .094118 0 k 297.85 496.175 135.882 2.192 re f 0 1 1 0 k 94.492 427.175 203.372 2.192 re f .90588 .52157 .094118 0 k 297.85 427.175 135.882 2.192 re f 94.492 623.364 339.24 2.1924 re f 0 1 1 0 k 94.492 618.197 180.826 2.1924 re f .90588 .52157 .094118 0 k 275.305 618.197 158.427 2.1924 re f BT /F8 1 Tf 8.1 0 0 9 79.1703 625.5485 Tm .69531 .67188 .63672 .73828 k -.0002 Tc (39)Tj 0 -1.1777 TD (37)Tj T* (35)Tj T* (33)Tj T* (31)Tj T* (29)Tj T* (27)Tj T* (25)Tj T* (23)Tj 0 -1.1779 TD (21)Tj 0 -1.1777 TD (19)Tj T* (17)Tj 0 -1.1778 TD (15)Tj T* (13)Tj T* (11)Tj .2468 -1.1777 TD 0 Tc (9)Tj T* (7)Tj T* (5)Tj T* (3)Tj 0 -1.1779 TD (1)Tj 1.3867 -1.7083 TD 5.0739 Tc (0246)Tj /F7 1 Tf 9 0 0 10 177.0502 392.2156 Tm 0 Tc [(Minutes Elapsed Since Masquer)13.3(a)-.1(de A)8.8(ttack Star)-24.4(t)]TJ /F8 1 Tf 8.1 0 0 9 274.0922 408.7726 Tm 4.827 Tc [(81)4823.8(0)246.7(1)4823.8(2)246.9(1)4823.8(4)]TJ /F9 1 Tf 9 0 0 10 110.5848 369.2106 Tm 0 1 1 0 k 0 Tc ()Tj /F8 1 Tf .69531 .67188 .63672 .73828 k .7466 0 TD -.0001 Tw [( Undetected Masquer)15.7(a).1(de Activity )]TJ /F9 1 Tf .90588 .52157 .094118 0 k 17.3345 0 TD 0 Tw ()Tj /F8 1 Tf .69531 .67188 .63672 .73828 k .7466 0 TD -.0002 Tc .0001 Tw [( Detected Masquer)15.2(a)-.1(de Activity)]TJ /F7 1 Tf 0 9 -10 0 70.2567 508.9776 Tm 0 Tw [(Masquer)14.5(a)-.3(de )]TJ ET EMC Q endstream endobj 143 0 obj <>/ExtGState<>>> endobj 6 0 obj <> endobj 5 0 obj <> endobj 41 0 obj <>stream Adobed         #"""#''''''''''     !! !!''''''''''""  s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjzm!1AQa"q2#BRbr3$4CS%cs5DT &6E'dtU7()󄔤euFVfvGWgw8HXhx9IYiy*:JZjz?fP<8=x#Ey\r1 ٳfɃ~|?KpRltzKo1(zMLt6C6lٲb[|=)7]yĆS?,v1͛6lxrrcH_)$OKp -Ic9f͗rc;m$C~Yf͛6\Ih cG߀:f͑('Q>ECߙmlKnxO nZxB ?8TDA-5>H_[#]6{. #7%=em'Ƿ`ec1V#Y<(L_ibOMX~hvzz: "hsY8?# w^n8Goʠ|(O3Ӌ(Im=՜TΔ;0ža(GFDaRZ~kpÒٹ~z\ry~!D}P:| eCq #ӊ qz#_KkAR)N[da.Uo|i 6l|E0[;ȿx~߭iC6l|P̍v/ߖ/#BM=2slR3ʌ>NIMуS rSI5ν$߻57/"e55H鏋RaX5:fƣ2Nh8$ އ3Le1<;_wZO'T{5ʀd'Nhǚ5Wqٱ\>kϧ֕(;Djq}F; }J5)Gs G!1P~zas?,oᑊ|C^ Pև.UY-w?,>>3>8]w\h ysihA|&cȩ&Tw Ϻvlg.>j+ZW2*Xut2FP=c8k^zm~YF^¨u;vq D82jV5K-A1$r} M q(% ȃc3H >(^kqFz)0 PO)6lwc3NHQ,NqwГ6lٲH5Lw!fGnn޴Ks4>*ovq@A(A{ǭ.`6lٰq9ѥ?u>ۏYw?(Wߛ6lxOBPs;Okk[Mh]p͛6l^8o\V5Zdž9fsQ ;r8WH|P~WPmZ ˋ9"e0 JW/eg/Uk#rHISu#kq*?O>kZS*D5ThHF@'\qqD%~}]XE%%L$5U|k}l/-&&KMB[y#[HiscAaݩOt xP#=^H| < WtU q$䎵5 1g{fgK-ZnvCs,>*5zu6n>?ξ8 P12xI$S'8>Q#F %>"6:-OBcb ?p~'Ǩ*CoY:A;S vhzuʚBT}>h\V._BY&IՑjF*) Jӹ괎q1mngv <'D9 弸ݹ:<|:|b@VAeFX4L0 \COHba*ыW })#̾f|5Jt^n/IZ<4fhB_.u3#C锈ͻrlu"UY5h6Oղe+[]̚m̒-K3\>8y"UsP0Sظ =K#Ǡ2v,JҢGf+TSm 쳒8 A590A6&| 3qFv#~qRl'$cbF~с:]) (?:9$Jف.,s2ER337-qʫdžpaugLP:bE.4szP7.'MҸo$ܓ˲cY9c53Y"LC11ڏ?g-IWBxD#)dD "oWS7]NiIE8[J͘}j1bD`\c3=z89;_0DyCm=}BbH9;ih1ZF " !xG璳<+Zz^2*w0@>E? md9T9~Ґ7ʙ+yyhh*+o2|}7dXN>"xI^kۉmmx̼k HtzУ-T܍ƹzj3G7csQ>cu y{Bg"|Q$>C.V۾-m.XC(GdfjG2aEqK /-H㒯 4Y4+Z 0[z4h_z= U9rSs]z>E塞Qz\#NG ~^#[rq79mS<̕׉S|@y_P9waM>'l]֔\`]X~A , P!OM3tM JAF?5lm8=e@ZA->[uh0^A"`]vtM㍔iٟ8~OOngӍTd8+ g)N (_gd4(}ɵ޲њChbصM ܿ.5Tb*ƬͰPXayۼ֭5#%\0FhۃtlVRj$/فDQV!59l-V\r Ai_ڭzEʪEA|iБiu_2X5dLh3w0l2QuEMxB]fqUJJW6|R. 9tÊ0e VHܰ aev,9NSjFǩ s<rK}WJb09ML_ť}~5.@r۹mVh}PEʪ{%H'. 2T /KieNqxP'qglcvئ@>,*ƒʔpu:ۃ܃L5,e!Z׏.?\}y4NeW4 #2GI5PCCʦN\)Mz[T1k4}WIG$p˩(j#CU;1&F,N AQKJZX}5ACLr zJWrehHG^B*I&h̖yA{5Σyw,q|+hmu)1GBKgYm\{;Ark@23W<Ơ} qW9x0>/yzv)dx}J@R:Ćq;oK"nR5+_i`MAV7eR,sᔡ(HôɄe=2H4"`{`[E~LjŚe͛6l7Wڛ3*\r-6l)M9=1G `l6lٲ\7 {P6|-R%^ح2fs@21ٳfHcXP͛6<+j\1< FoNlٳcH!W0SBG\Hf͆jt>|qqAf͍-b3|3f͛ -;f͍& ! m:6l% Lqn {kf͛*c66 \QQp`$į nTٳfyȎ&I$f`֙OCcnJ0͛6lsT˹g8Pp)SC6lQH Y(|r\q=~Cv!f͔zF[abx튽8! &\ӯ!N#y x ~#_YkO9Xf{rpOki\(?h3O~ӕ'Q/ԏQ#W2(-N*8 'K59=3G{Rd晙!=`Q6 b=~֋*hB.P=HP>ë9|2c 0$}Ee#$g<~| ծ-AM$q0\HǹiN8UK"Ԏk^alkHFrI6vC$Hff#e#WQ<lLWz~s_=o}OFQ3zPz()e)̴):5&xyoިP/e0=;6lo}][9Q(>,׍4?KoJ7a"] )gƒp:r8j;/6U$3〖Q |m:~,}J7"+ qj(Ƙ݆{w%n%R!S PncPLI%*:?Z.:x,qۅ<Ljo>@~(I>)zaM|}9*+RćaeT AP#qf9~(b/x}g9_ͣ+SaV鑟Sy1OIg_S~)F8c춨/p/`干L"5PJRb@TQHayyc3ALxzXI4h|xz c#:O ?f͛72xAzLL=_e~6l-2xAz~ 5`}3f͛H?~c/ f>ћ!1NcHf6)z/HS ݫ%ca,T'c-H(!R)kI>Gѿja,h?g,S}_ˊ~Bdž52fDg;#? te+?IQT+-O/cTOe? cl<3q]/M7r~Վ_0d mFܾKw} ?޷_>Տ 5qr+Cʔ$zv_1Nr^$y-ߗ=gď\XҢՈjc 0/y%22MYm62FqBffIV§,x;݋1+ {|Wg ܏18D CUjo>_-r'qh,r1T/D_V2?Zc>XFv0bFJNt7͕bn+ 1ޟXMfrl3fɈ^ vPGPedžWʃ7 C͛۟"9r༼qE Zࣨft@QA6UPđBzw Ȋo_ FDf%`Y(XN*\pU = 2 D1.7vTڼHDk _kОCM6ms4ZM 7Y$pz@vY%1gy&my!2FN $y@2NҴ$-4B ΫM$0YqD KUz > %  j`cq}TVpF6™f͙(58ݔ}=,%blٳaZ%~cgaVf͑2c >ū_č< {{cW1V7+؎2E5M1lٳ`YW2pe.}HuDʪg4$Pv+I &9Y:'"U?7\VYOf͛'Vgm]IޤDuaVZV(NCpM@)% !0wyf͗rٺ#wkQ"_\ѡVaA*zaFB̅e0'JN ͛6lܹN(U(%i 5ڤGƃ*+@wf͛,24M.>#B\'/wnԭ13M w|ѭn_;qs'9"N>'?26(o82t ĆVqhKq$c̀c7]~(0[Ya"?e[IK?_pGnF-QAAGCAg,?#/1AMeyjH\}FELSZp`.c0w*p1JuWcMLm2ѐonYidZa)]I#(ȴ1Pc|cpz) Ğ!)qGRHSHtl x"ȫNT{`e+QtsR|u4eZ팿#|'ĴTxap[pΣ3GR $=x>QD Csp;v ]uo}Y995G#*֕sAI<&]?io7TT|.CyEcOik&ZȣƿdC< z"?>fzǨ|kb{kރZ}L68 ˗XB{òU24\\pccҌA. F ޭ(w̜z[lr:#*'/8 d1NYf͖xrD DDI2S6lٲ 99^&[c t͍ul9,;iݍ9mZx)QZ uzbjaCOkЉ)M#4_lq5+\5uP8 c#s^ \x(AcH@bwwkA~l9 uޤc%P aM A",8#b @H&f{eWj_ރ&Fbo +P{x)͙MG~[ 6qdƹ~qlZzV28B|\X*DlnNX0dž1ᑏ;1kwED0. }l%M)˯|5DVfnt6jW b|<1R$ ӡKW犍2 Vj ҇5!""W :4Yxؘ9PЌ 6LcQpwݎ8i8ay/mE (z]UMRv=X"A}HȎwq3a#|W_~>$+S/>pLg6l!i|$75s.G<0"\q ^|  +o%SJ*IyI?N1灢+f?Zi9D@ (HqLAQVrNBp17fCgcDuR7#Ӧ)ߴ+f*JVq6蕧#Ce@BR@5w~'ѻn-T# JPϏDccސIU2~-qLؚځ)XG$ILH|ܬZ6@.iJ`G+FEEN z͛6\ &x|zi 2~lٳd CP EfxljPa͛6KdV|HJߏklٳdΟb6^t'AUc/E37ΊE-8 lG*[v6lٲU2|&"q^FQS~L)5׭@$I?MMG\ٳfȝ47vf__>KXV:F> ɥo=ޔ\٨3e(Yrty3 vcNՏ$q̼F4 n3f͛-r**0'勻0&)S=^>>ٳfƂp1lA7rܹ❿ ' P:wA6lj3#(@7nƾ.1@$de=f͛6$owЊLQ1[,ΐB=Gd+tB AF ܉PP6lٲ1;83GDIx1f$v|p7W1Cf2dH _ G͌K>OQWlp^;5ɉSڧH/GaԜ\]=ڤbrv,EvYHvVW 핣VUE 4=}XݟZ^K8T?W*j<<rϫ$Y@PzLNY^CP=asc5ڻ~l4(ёM'#pv .G-k3acY\@ u'oTkL[6`2N$Wwqe)"']4dIGƠ{O1|i J>O#Rb*"zlK1MLX izt~hFB .^) R(\~vl|KkNO&?H=OYFLNaiȢnFP|ʮ]e'!ceJԏ %b.g(`81j41>L|8)aD3;ZLR&fQUO:V0uGYQ/Q'qDru)lzJ]i-A]Fa B7&$s"ջ(C*scю @FϢ#+zÃ}y`|nl}m Pu5IAߦr$ԡuoF6O&E^_a/%tI\p=w溻1jsd*-\W|ZmD(p"O%hޛb(LJk4lh@7٦Yߛ1:{cu'olf/ ô9t-VRM]ژ[w5ʦ(llƘ7K9!A_00^m`-R bkijK$Q5K<Ȳ8zz(?# \QP^lٻ;c@ lٳfL8_VcƅSAh{dJʤ=*I;{♲G)& @_'9(*Uhk\{わMˠcx^qٲxqo* 'װޤ+PBG=Q{ٳf̊.@1"S!AN4+sJ vl1@ 6I6X1#fɖC@ 0/ӉjP ˓m vl12NkD8Ly[x2/ІZb,9`ӊc8N1՘P}5͑<fWwwͬ nRNWfM&y\JY+Jlف( $fˁ)#ILjj <1+Żh(B=9TOs5|3 ~߳GK7uN*i|E\asȜ"N; &#)< 1 }\W6 zh 'N(I;|_5ĐĎcesr.3RilR'GrCL_M)(O" 2M>y| Qĸ# rzi@ T(5 ٝOP̉<̤lƅ__ڃIX>O>h>6lp5GzG1v|hIsf͛-w'7TBvTq[~8ק6VlٳeЏ_.V!,O?Oqǎğ2'Gx3f͛6q3S2\M0 ;}g6lٰlO; xZ>9\ٳfJx4{a8ۮ1o6G)KG34;zٳf̓ qJ0hcLlٳfH!/b 23f͛Q*|]wt9\S6lٰb1 |ٳfNF7di1?6=|p("Q[c64!ԮX$0%h{]F gFC֒6_p1&G$n(:oI Q!ƒf?8<'L<\\fl4Pp&u\nOm1dW]L'efJ9I^p$qSQڙspخ͌~N͛6N"Cbhᒧuz$9 _^-mwJs/vHNL>~EN͛6-qOt=N Dg }0]F',ŮɎ\\<<Tlf͛%XO74m2*f/ժ!?Ǵ rf͛&ip$}Qt]ҟO?G-!e̜}}ٳd\8>x:!cUA6۹8)=jٳfT`OQz9Ib᳽{He1~,THW+6 c=F\o,t9+6+*x6Z<5@Ri͆ @oo U_1;˨@ٗ]"kq(zˁ`ؒ( s7ER4E"& ^lٳ.9<тaqqp 8sf͛.OV]p<?" r6Q4oP1)eP?+ˬ8O їG$h_|p޿4&3wϪ@IVGO?6MZU[zw+66V&MG憯Gf͇"@|qEaL"S6lWW/zrc/ 8HlP$ Algs}#Ϫ U.r9T횙y&l# D}eOlIjqUf͙4Hnq>*m\_?7M}pa) SP Ĕr>#G7RJB{u?ܣMs_ o3Ʌz zٌG7SDI;[H^R'2yKF2R9_P2Wl]WdSKĄZ-I?V)"_ȒOTmܸs^J=v4<8%#$l8ekrDdnj0039|]1&\eZc5$9AUn; Y*N瑮)[A_)FܧH^;xZ!SsQTuљ q'p{)^GV!,\hԺ8o"ٳ 4vZD9bg2Ӧ$K)(*uw6^9纬?%Ŀ䁌Mш6lػ?%oK8>?Y&$M/ӚVS?ɰٳf]\ ,yv?F Յr %5?#S,!r'sWm6lsr%#@v>;,_(V_|rL'$8sz'ƙ#ʙ;6lRη1D#UM{ t9 [w/-F8P׿+;GjIu'ٳfʷxfg@ G&cr6 FM`?b۳f͎[xF8 4ᔳpid**@37b{4 *V45̌9d#1wf͛KZExzApy/S,jhzGuqla<NS|"ZI%Qبcңcoz}͛6K9Ze#ΒnBw4֨# 5S5HEq;#czvlٰ[p%~OpQ ſjғt,ٳf=m.ǀLVeXcR?aOšErid0vlٰ?U0YjD1Ec"S2 6lL71js"xJ iҪװŕ6l1dcˌav$KA,6le?ȅpJt2~~ȦJ9w62ٻ[f̓Pbxe$P@m=q>29V3gUUE0l۳f̓Adž%E}*M:ڦOT ˇii,Nٳa,dZ=0LDf ͆K 2#-Rf͆F,iohZkMBZSN6ػ{I̠jUwI'f͛ %9Qf"##pDUUN>ߛ?E3' н=7f͛$` taMPqj `39vQ9q˕hCQ~@/NJxb5|pNlyu$VQj \,UKc"Gx[&Be#^/Dwy m=L ? D<1Q֘9 ƕEկO{wWqaޞ٥ތ$=c4}0e¢e1&lfl=1 fU.ۧݞJh;fd,'k`c_/'BGr]6l80@mbaQXߚA* J!IW@vex=< ~wocEٳfõ=$)N#(>.*IјtnGV3گ2#'bo`;.͛6kmtF=c:ERzKƉɸB^e RЙOJ3)Fω|{n2Í>jU-J ` 0 N˰=qup9S:ӄfi|^Wja2 aT-1(储ʀ. d9)e F`-\tM#i>˽Y~9/R:ߔU*0z8xDj(Kԍ[ CTT|f](>jOљx/b'◇W..FA..Vh\NYʕUPb"pPjⳛu ja+m͛6FC!WMŏ* l N*Y)JWS͛6].aD 7ܞ@)_|+o//=VcsI%e9oF>]+zLW0y]ʃQ6lٲ$Mye1(py 9-44gn ?!vԲn!T `j›_1 $Uԯ)-K+ib-AAx͛6Gbx+o-{:թn0Oy1ۦ]RX*$5M%ā+C{O7C5)lٲκk09/]Ui]R]%Ɔt Dj4iįMqȕ J4$5xUzf=kE<1pyw<^"Szsc d%;2W$iI$nz{5&q;0TJWe718  Ԑ:8$E";tә ;pŷ,O}B́ j`U´\/V?@s=p:o㗛/;܎Y۳f̈́/=o/rGLz]cϱ'&$wތw vlٰq->ƤRXvRL=Fɉ5ٳf»XX0@lx/\Ewvlٱe(L'm.N"!aR(VGR^ٟK+$rvlٲM)wJxV1)Ql'E!Ȟ@vlٲ3a\R ,}qU"H!+U;$~9,z;_l|6lwP8:86M2䘔([߶,#U1Vƞ!'UZ8vlٲ1&#@X3-܍~dTt%"?{M2QȐuqf͛N0ʁG&Ү LqabO ~G2tݗ KO4ٳaf]C,rH Ke:k㫝Fc9=3f͛Ek,qlxW,%1ȅ'nal\̯)'zK]6l/:l5P7~XI1_p)k'Ђ1?W6eٳf[cAQ91|<`d]6lhXeVX1լȗf͛-c57\xo,BLf͂C*twf q)kh/]6l}5lW3#K&MgiJy?)l؜~n͛6>V-z]OWqkśu#h͛6-p@!{f֗\TR|d32?6BkX;L{%sfƷ.؋G|(gO~|s{b3wi|sS Ou9U9aW,\.xkHebRA3QsJRǐztLgn$f(8:oGIȪzu8]sO(h _-CQ)a'qfF^@"/fح:{^'xv.4i7y9TAD pN͓]~w?,V=zzO"9l7G }_?ѯx*/k#F43O'&@M:a y{C1Hd#*؝]\ilKx6|f'bm+_3e-rf 3/<͚OibbG@fřW`1<͉_M_@m9f͊0\H270x.;lӳf͏4(>9>;ݛ6l[n_ХVC W5(>vlٰ;Ӯ) ؑq{d^bFOPE8Fቕ;6l(=2b 'cTfluCc^;vlٲ+\ 2AٳfmA\cAٳf m\X/vlٲ{ckAH͛6;oiJc+\2vlٱ@SBf^&ٳ`qulP5sa0,Ivlٱ\ppbٳcgjHj4d͏)e&0xw4'f͛>8 (a epYWo'Js2tڍ6LӁ.8 7`t=_ݛ6l">8 xm[NTڽ+ #q]xWM\BZxŧ0Q#>!Y" vlٰQkva CS,~(5ĺo`UVl@:Ndσ$rHDDe!ԁ(߽b%ډf͛6mb̃^4pEK5Rj/J\tX jL1Ν6l/IbhN$DTkl32[8:]Y&SfzJ e-V<*xw`e3ٳaY%n_]e䐒Ei g-)gE6۹q3U}K/]aDgeS5PϽٳfѥyè .-THGGx_Ο!ǎDeqB5E=QC{`O֣v#&)Sŷrxc94I)N5(ȃ r n˲t03qGϗ$l/?D4ޔm3[?I=2Zԃ&%6;Ē9(8SQe /+ dtGăHv5l?7#C;ǔ~|bqX1~^ZLIԎ\0ѰϿ#XdP?h0$ĎbgF(Nn`)R@q^9OkD $.l+8<' 20;h-F[Df۠`zLo`^XLaANg zÑ4Nq-~چ͂ӾsV? 2KW~t~ g ɑhUhS͋U|3Ge_L(z@f/ Љ u\?bp@}G6(Qqi9gIM($BQf?;G t+9GˡȖ;,-Ԙjt:(F7d68`3f̀BiOS3/lpzlpi;K?,f͛&-`&ս5SZtL5H)^45zI}X LEtvlٰ]BD#uGo\N%q<,A#%7,ޘ-:mXjd@<#>:;6lI#0Vh1;Y&BuM Ə o/BJ(Z12x ~\&wx6lw{,RzPr4G2]Bƛi#b7T{wVKTB@jiՉj7W6vlٲhTȣ-vޘ$yaI$YjQU-4 ?E9\tkƑk?x2I1%ٳf/.&颸Ɣ']\QFB@`iĜV6 V˫y%u  "f6SuqvlٱvLp3CMsd;za "`~2AAچ_S"!W7ڭze&YOOJۗ4Xvlٱ{idnkъ8Fܝػ>rN\V$ٳc4[f͎j+4;6lˮ5f͛,OlkeٳfAˮ$83d&ٳb؀8Xn͛6 V< SlٳfAn G0kC\w5Oя OAL<)%D6l؝J4."m*[!pWhU&1 &5=rY q JSu[Ǫb6lXJF#fvrS⋋) $e"5:)Pٳf.,hqPC w,bRPk.(3>d0:UGbDcdw13]6lNKyJLk&5 _ f\PfO 4A!$pD<۳f͈Za!-s$`?C}>m^`'6O2ǖ9%@;.r'}ڦ#)Qqց:dZ Uu(„4WiLB\|Hݓx 8N޲E`A,*otLj?ŵy#M>]Yn ۶>M   ^ͬqn:Ƿ5pqvd0ck  ;yb%j<r1k"**z I=4n@{cQ۾]HVRPh~P(~ov#z:|s?Y͗MXuOM@Q,L$ Q88ex$y`qFO"2 <\&)/. ^z -p-ohbMMH]^ݰw N/R _zd/l]/QqD )JOS“^ZeZ:<:\>I 䲜q,2};t݆MF >.. #=?NܽN 8%{ŕua&Qw%b&(=@8=r9!МDHu(#"Qѱ}㪋--=a<&|JkxnAƑ@!)<1ٲ,8Oq#L8Cˆ8[9f͔O!.L2 la͍.НcFxŀ9pg9f͋lXoEHO% @,l$pc]ZN)= \l4@а酳#z'!61jr76biW+06$.͉of&yW^{x sTfã{7R0a6 oeٳf3J8H9:$jq&էY}/r|Y;6l%iiSڕU3MSo $%gP;6l4㈳#mNJ)ݨvLL#oON0g+RvlٰIHn}RU`)A?3&3vlٰ䜪_Y6鷾 WqK#(svlٱzW 9Xӳf͏lO|`ٳcPA1Tz*NlCC$T|xUӛ-j6l TRxSF"_RԓW. :L9ٳc)<$qhqX`|HbulQO GW6l٢P$mJoB{ĢVVbƵHE44מȽݛ6lV E;86bsm cT%ٳcDk*iN]{ӒLq@CO J8M͚JZT.W/ xq"Z-ٳf˂Jjq2 !(zS 8vB96 s^3# 01D=vlٱv 펉~OsXs ͋$LcQK!锟-sr>9ķ"S_ۦ[1)ĚW:`V#cG،:iHh)qY{.yGėT7 pd^$-DEKW> eD;3LK4.|3ƇlPU0wA;!~5djҵgǮ\Gݘ]Ly?9,\IhCf6\_V=cLQmɩ RBmI87=C|x;n8o`\&l@ᶠ'06ǿӏo?<3Pxf>d3`6gIX5jt·0"}ay9&"}/>Jo?N7\\|Rn^nv8YiΑ\3aˊLm kK@ cbqMZ2HT?^70} SÉtN9j2yN|5x|Ɂi[!Ϳ*'R˜\T+W͘b  ƿH3Æ"yGIdDqKh=KVl8!MY]?L>q\_C& x _1ĦCJOhI>eI t/ZReŇC0qs$88EMK[8ު:ź-IXhA"FTM;А tz $GEQ^q%߳<ظDW}T9k* uE'6l,.~GܵØY,p,jG}ksf͈1;y~a[9]f͍&w7ӣJT"nN\ k"fqgf0$7Gwn@-ٳfJαG<+I=F`>*T U<Ӊ59cC eˌcc̼ݛ6lTc,91 9pL2+ӭd&18"RE O"]6lv 1'K2x\Ez8Tbv2e1σ4oRw1{~N͛6Q_8O7Ğ1:hkf&r3JQL4xd&1ǃx)UGƎILLn%fA7ɉvߤ.s[Q?[IH"-(ҕ6{-Uף##dd@) QM3PV .aGŏ1x?EeÏV#H6͍G&"2OZ1>!@ (<37̀gNk%NPcPu5'!9qdNj8r <_42*FGo曤lD?aMϫwAC߾ cPʛ^2uk4)u,zF#VN1IZVxҟ<3 B*<]t ݑ,%OHO6(a㿤Fsq29!.ܢ#0@4& = ;v<8HեkXmd^UI @$t9>]4L\2JSwÛ#b#7͢ZW$8R5u: PH=k~ S剴MO\"@ {eʹ¹!LJUN hWa_|czI:`ىAR|ˌ{?'Y.l.QGlN@S6kp6`d6j͆'Rw_HاFVC L hOʊRi1zÓ,٩x:I K#9Ym~aѯ8~9*82B@/=2/^9f͛"͢]mI؁s 'gzŗf͑~sL)O 6"̵E|3_7@DZ[!f͛"OP|Fg+,?Aw;f?}BnIڝ6l67_P|tሶ5A:SӒf &g!_e]6l)rצ}Vf>޽rLwb2:f7bi ,|gٳfhQGѫڞ8âR}NWӇs]]͛6E(A_: q[!1,dI,*䓾!}J5$~Ds\&a%7a0eB.1|qa6lkfI7V( EĴYK%E* \rXun͛6IeQ# l3# G.[}]Hc!}UE54vKJٳcq O+}с I)3˕G‡e5fRPSH#>A$|pTKf͎XHD)ώ.'JeHp+~48ݬ^0zmેw^u^Vu[svlٰ=]@&x ۨob T j(x?<@*|0{Z ٳf6SO4<"17>[^ٯ9%X ʔ Ku!Bl‡aKIib'+ƙ[]Sf͂E֕'mrf2$j:Th1VVS RNoPJuɈ >ς Sf́yD]k'*iZrq?hPYq>rՅ <R$@䡂Y,6i3N͛6s/N^?hpXVÍ*8cU Pl3uifLb8B5|V 2@vlٰTEZDCm j"В{9aF*;$o{ٳf«{VQ"Aij z J]+i%]4c֏|T 6_gi&<#6q[;v6lQZئZigx"hW.:veMσ#2 $ o7eٳfK\Y!R5\&6,3G>_F#I@-9*쩙O%2ʡɈEɚ:0 "w;l|[H(5q%cSAayKJf.}J3ySLj&kSsf6ojo~O/ \ u0OM$RmO d%TPn=LJW6gɚpn#?__ ԟ? tB+W^GnxٴmR@iw1$qOQ׋WqD[I}_50f=e1'Z,G8#<2ۘ84YD;N?V{h45:}76Z-a'F?Qsmh4q86d=4?M2*q?rM:9B1C_2TEc:\-q$#pZ -6/|YfkاZlv~C)sb31`yp6#rFGbw/Y?_Ğ ^bJb;c2'å0HtfA$pBaPTbp,S U`:ѻ>L}P1!qo͠1UJ&8'^t'} 5io~>?H>&ڡ^u]=[V5'j5 lٲPyyF(1rBF&£6lٱcgH@6]x|¸ ٳfȐ=gΟJ?:v\ٳf);Y#kb?g ^Ef͑!P Kö$ќ103lٳed4d8. uYsf͛+!QP#F(sf͛*j1R#\af͔J-3cH6lDÍ88yӌ# /RSC!'zH ȳ2"}+nVb6,1)p)ǐlٰ#"?3( zsV+# :q\*ElT;;&.jɇQ *IqpPJxf͛l%1>TeBCv²).:}:1gYq<0g8J❛6lNJ#o2%u~b=D )cCճA, Gw⻏25m ,w6l]|I}lB!]đFڒSG + m" n⸜2Cj(kb;W>ey;6lUHPPUbe=9P N姨{zCϧߍjf͛n(ql`dV` (on͛6(|pĖ@vljdˎ.͛6*1bA\PIxc?ĴٳbQVq6|AI;͛6 n=E^Ef͛pN;OH]6lQF{·H"@1 yݻ6l1@1c|3oPٳfb12q#lPJqk@~ŗDly~> vlٱu}`zNx\fb^6@ٳeS6lٱv8ApClٳfDC x3f͛,eQ6l 1s͛6l;i9c͛6lwDcNծ4|hTx/..Dv[}I9q5 9HT"HZ1+ɞݔ5{ nOFCZ]óFIcR!ZS, xca5N d4a~6@L15I:UD>a*J`h̥pNVXmrG)(HEz,6P2bqHp"KN\O"ɱ D2+biN3x )ZW-HH_GlpT@|,h>QMBH|nNьFk=~/wZs{IF vJצ"\{'.A`8Pza]rKP4"Zh<s=A2C cw٪Zh <7f}@k]G\hmlqs^rru.*MkQ6vA%u#ZLjKwK%k鈏T$efɻܢ9u^#6KSmC*Nq&O8DHW`yKٳbͩHN߯N{ ?z^g&IS0q7f͛2+ul]I#sg#Wg峳f͂l 83xSq7l#ٳ`o8G~m;;6l,/3E4;VF_qٳ`#yTw78e>oLC/I>N͛6H}=|XȤ<߷)jrHݔxcٳf9idbi߻ CVr?Sf͛$Y߮QАk5\G;6l%ѧ\R)l+o'>NW4h;6l>(j&r?X.͛6-r>8VG!͛6 |r1y;f͛.Ci{pUa}6er$ٲvlٱq\Dg`oBI_ @Ԕ͛6-ǩ𓸠\VJ?>^ؾ]>"9C;6lgցiby1_Iv?qX9/c^f͛w틛jC\O, vzkY!0_8pvlٰ\Pv+~OWvsqY^#%ٳdecRǾGҠܚu U@@w߮t?h? 2al=^V7I+q +LD3ٖß6yo ܰpFlٳky+T9bGxf͛6Z n󊨑Wă{c6l0O{`rdž8\I16lٲ .6&^D s';kb,^$ Iqb|Arv, Ny2q60; L27\In\Iٳf7 iv4xf,j$»6l\brS<e5@;4=Pw?x~Qijs{I~xBD׊cQȏqv8H͒oӷ"m'I>+Wg|G_ߨ6Zj;s8s}1xGÈW,ez9œTɀddCEH︮])T݀| /X~;ڞǛcFXf;CV9f4O0q}#5t~kYPu7H_!엖W9=>TZBOS!>o(z?homq$r!vVL|뫯_R.z͒ٳg2 xR9Ȏza>!9f͐3h9;rM^k}դA؂F# ZdVO"k>֟͛6Dɨ6V^k>WޮuE$/e?e\H+qcf͕K( F۽;YPuu +Zo,,=y|͕QbhiǏӘyu;Gm8;P!)̂A +x?7|UuAɛ7cqgZ2I ᛋxc;L+(;f$|F!H.N7/xe؇5|4ϱB헰'כd4s{D{cūw2N%C 7|(VGٲni."v^>̯aIbF_=7rϗ톙bgiyCoqyB~% Dѡ+J=vF+8vnO >(D"" iɦlP1%q3ず%Z%+hObg҃Ŗ)iflwE0 ‡/{W bbbH-f͛ %Y ^[:;܂τ>w6l^ۦI @Ew_4G,`w7s;6l ; x;MEscɾdQٳf7/% ޗW554[jtl9?%f͛ |~liKoJb<3.P-{#˹xٳa41+>Oil/1OFr{ݛ6l'_s"V">_!ߢڧA)4 Øޛ޸vlٰQm'CUx8|ct2Le1{f͉+>8Saaٳf S1> ;6l؍1bXKL6l iƵ; #R $v/_>N͛6B xmS_B76Av.S0(mܼ\ ӳf͑5SU׮ --ʑCiZT 쬮cyq".IRۑB7C2:Od.82ԙx$CX!$ƣ[2d ٳfK+KmBKXAV@քzVusxADCjČ7]Y$U_|NkKئ2\˙*xb~ \>Ӽ+cg_6j ٰx<0=>L7{e}SiN}\W+O|z l߶0H;di_M?/airSNIJax(z]7vԽxt;S,sכ͝sN&o,pG# "q|zr +@j!Pz?i 4#Úy7>$>מynοܮ$|kכ}5_'6cZTPe}Rڔxt.٣e+Ĝg_k=Gl6>\} gv޿͛6v`$lIOS0nvsƈ}.;>'#͌rE)͔)K9yFq=.o^]l~yq78-#ZP96o/ٻd5cST/bi)l=#w[ۇRbEYzƗ1>9ѿ}Czfz΋byV?n|kI)6_L! ⮥ewZz+\X7'Y(`#4aCfCw=*͕A&Cr6ҢS3}Shr < b-|aѬ@Pjsf͛&q3c= i@s["f.%"`#sԴKđMGAC15ÔjF~ja&أ力^del {Gaz'u"A0ˍ\#;*(~˹RȤ ej'`^*JҤ6Okqd<>Bi2GSbF GK_[3<1#;S(}WfsL g]: |kCǯjHctr%ѳB8V^t֨;`yʼ k5 DlS$G` gR%b9Hƍ9!,%ˈOixz68c)Hț6}%4O.cڸeČG"(#-ń5'k5<+^5 4*v Hژ"Kꉁ;q ϗ.#V#g8hO&!<ũ1Ɋ GHmngdxAgRlO*|5:NJ*:wzt3HXq킡iZi{`kK)a'KX#Z<-͂$+Fkvlٰ1<aُ>̐6lǍa(FaKBzsf̀1O+Q-eٳfa'o\ō]6lbn81eL6lO1nkN&0x//M#\5?6<ٳfq ֒+|X#zojSM9ppf͛<3?km֕Bԭi:O(|'6la&F72H$T{IJH n~?F bqp6lB3_w 5 -n9Vz튔ip^w6l` (-5.vMu3t-Gɐ{f̀żc^ x:p!g쮼#f́V#_bT(~*bFm0vV2>Oӳf̀Ŭ_1a'& ? fٳ`Ukǭ۠(!ؐ ?CL;6l-#E:P (>#yvF<|4Rf͉"(`EK*Lit&"%ٳftٳw4cQ:cTclٲhi׶d9^)7 N ~*t̀,弒xtdVW=M: j0bG*{m~^:0]O2̞͛!xOEU-J،mw.j|Ҳ'{f͛sI1$4!41k*?j4zir Et| vlٰP+ (Ҿ"~d|6le$*֕`?`|Srɓ("ٳ`֧d"ׁŚOt>Hy;6lǙN0Y%f͛(0;\džbL iٳfƕ/l}ٳfĊ a2ƞH%ٳfN6&Pf<˷Wf͛S51sWriܼ!ٳf)0A^=sQ cW'f͛eSQBWKXvlٱPNJ9ŤdOsf͈w8Zm 2hٳbb=*S aDvlٱ3kLz9M%ٳf]Pȿ]_05gGoG) ϵdd ;6l #F119??i?m'4?j$0@ ~6Fsf̀cf?K~nav1<ƞ!E30> l6l R"c㸜OlaB1c""(Y%iٳf7sp{;2it?=&}.eO vlٳZVe[`„DZNҝ|CL3aM˄n,Zӳfͅ3%R_PҴDN26/jcxEuZ%J1 $v%]6ls?%ԓKOLC yH&M)X\ћ>Dpٳd&˖ C\Qo^^'喸n0hcrScٳf2Ďe_^ۦ-zkHc.OmtT(7(ѨݵG7f͛iOx\رFNmdcc)Ɍ̝Hh 66l p2<9Ώ=m۳f̓#&C7L m2B' ;N3,3͛6mav8"8{cV=͛6dÃX[XbI;{Wq@ԁ %Üg!F'ɼrĎ;ֿᷠ=#*ŏCOՅMr=~ñ4["v+s /988'%Ă7?PDS.p6燜 ΋MǨ abDy)%#\#j|M\]off͗&: ^d|_?1\ ٰ!Y"=i,LFWQ~~]R?6l!( &H-~(82<v~!5yOWlٳd>(bqToɩ'ይW~6lx&[އ N}i~,ٳf25bqL6lٱbE9KcI͛6l T[|I-6lر!Aqkp;sf͛ Z6Il6atÙ&N-@͛6l^7O#` %#kj;l1aNm9j[$O|G|1uc, 8Ci fJ^$KGYMY?/3:+ɧ6_Ygٌ,2I|;/Iꦾ풜٢,2ku槳PdO^|'-6%?ݎrkLsXF?xbc~<0}lعLs`k\Wuv?˓,êx.-#Y?G6+霯L.+y>0ncfv>6L?8,qu 𿭿.rl\E퐻guD? lŞq4(d6^?y44{Ƽ/9yK?j 3K ̱d Y\B<8P=FH|niIEN Ft͂0>^2W/e@(s 9X\i^b>VD}Ą^O Tt9"+dwaxe8rᑔ&"%V8d O0C#nlf X -88?a5ʔur}25QYyL1_O9xF 6DY.PhEF` >e.Y=(1}2켺0,~ =w0l%OdXI/lp7ZmVz|DNQ'2`jnsS/ ooKo. 0AFfXQؔQP0ݤ'S<ϓ$#)cB16TN# lޛ4SligI6X*7 FS*:XH(;>[<2Ş8v3YYLo^Mf͛yuž:o뀭1d G`6bD_QS ǖ38DD,{ 18rC$Ěٳahm!Gһ8Ґ^Nf>N_,TݿX΃m8qONF!Y7\Jxd2GDm|rC0{-p8#9)2 l9Sb2Q{y.$x`2)gJ-7Ē7 NpJ0^`xi#|_joQ9|XVNgzWg9njϿmW`TfQ!!"<0LUD`kXƤpJI7ıc{X!`&/P*Glkq162>8=&8!%F1V;z`N=Z$N"v|BE}JG ƋMRi;a隭jlvN\9^؈jܰ~'23f8wDs208D]xsJ`Zq\q*0/Wz'e J ֿk͛6g\؛J<2"f͛u}6&~yf͍ĞA&Ƙg=3fl<8:Dr,WpnS!#)`HZ wW<,\uGa\[PCcNQ{]v˧Lwcja|\9Б|Q6D3}Өt;|@cCL&`@i<Ci &'xAj1?K4Pqlم>Ӟp?2?iM08ې `I㋁'͛"4px! J1džd-Z3ȑWscJ͔OKXr4 kzw"1F$}T܇"XVqPh؝ +Mq~[b{IVhBv$xS@&#윣+!YOcݨgѬ|[oGŖ?Xo?TlU-PZ',VQ,ᐼ$}'V,<9yw-͗n p?tOpeͬ Arᶕ]n$;/(Ju wYqo)l?‚|# ހFMk1iHBjx vvh#Ÿ?yXsi5/x[u?^<ݿX m)SƂkJv\:6XhC #;N2 sG4ŕbA[Uo ٰm2"7/|/? Rze3I>9tV8\\ 0'ngYXwANkB62 V36!i3Om(7/->xÏ>;16(Xrx|Q`QXb6Ic ğHlͧgK'0QE, Ὴ#bs˄.pqRfڜJƣ=qHmoz>8D}2<+3`I8!UJʆR޴鉛"K)@O+xJQ2 G)'x?7 d*];4HFF';|g֥V?lfh}G4W+U *qL&gJz]2<92!K-b5 8OO鱷>M^69J ݱQJy*c"PxfXV<|.\[_ ͛6f )AӦ,W ٳfӃSbyUlٳdPY1xUF8I6l17,zk,g㊫AaZqUa6l. rh$VMErQn5;6͔ܸ4Mҹx`T~9Kl}$@g/) u, >C5}4my*Bmsy-̰ȑ@ry m^ܽƑ(yn4Ibtu{$L %63>ѬO@]h3Ǭ;&yMT\q pq7[de#,"dP8,XjJq=+P=:֭5=w ><{amq; Z{ KkwUYCBx a&JͰFl0.dN;Y ߓ #> dy##O/${ ABΣ# wH]n@C"G0t)2m—r@ъs Sz+㙺!C"&#?vۚ1e#[;C'!f\n| AelZ`xT БiWQzӢ"I5"Y8;1{e,˃INte)d@vjtإ)JQ&[$DNFǐņ]TKS][ۨi(M1֗J:5Ra\Jr#ԭ}Ӗƙ}FD5P#BGN@^`NO|:o0 /'U/l⌓8>{ZxllP5պ/gkK sڧB1=@'ШcO~x~(:.nSՅҠăV4킢2(~jG〵Yz,vd*t22]lY!\L1,|QĶjR#Mc)]KZԬՅSƊG Ke{Ul.M>!0dqQ$Q)cGc8+1!+omqQpop h"ڥ#pø5q,a d@Ƥ z.o1,fy#(H#uz_( 17eQ Ep]mnAZ]]Gy* hԯ?TRRPW#XȒd$P NbQY# 0CK,xij3XşHW+VLjf>qǤc+GjBŮ\Ƿ#w1~j?4@ͥ;(5)"pUbԁA{ubPL#SRO\ӽҪ̊JŔq%ŔͲ,XX࣑Ͱj5z<:O<\V z12+,1} '2_$Vw%qEn'n)^_5ߨYrRE4LRE8"-_ a⭸sX7Ү*J85z %R5yx1Ç0+DMl̞,qn25{BoOUiźShڤ„OK?1$ 6´vB7|6lݣ#2TKxD[6lٰS Z-lZ;|P3f͛ b LMh͛6@i/kቊG6lYZK,EFbM͛6l`` R Efhsamѵ;B#we(C2W7,& qcq+)f#qDqidbiKA텷$ ){(=]I,B:;|8ƫ B8X)";c#j"Rx+fYskFxNYbA$8p^-ͥRG{H" psu,6Mf͙L*@(9\HN\w#awFVP#b(w 1Y]ԑcI1g8c(pLJ6vՏ )"܁*/ppO yX+R2% NpXRmUQ|bwI H2#:hEq1ٓY, 01 qݛ7ɰhg@7Z2 M=Lj5RyZRxaA9ӢpYGPh3QYTh0aʡˢ*u`'-I|Te8{Q33Ɍ4# &rx( *0tW=~~\aҪ c}OWA_~=.<0/ >14aY@^9{>g#LjFq#jnF>&eu TA9SKⵎ$ Q 6oXF986lx tLQHLDLY{9f͇cxfႌ'6l<4hNF<b>^Lٳf9@hN\iLgbA3f͛*&#N˥s27͛6lw:nRիq1Ll4o{h,kŐ"ldD@>%xqy'4k% vND:ǂqƑ"Ƃcf̸p1(9H"*R*ܬH: :z#*6%v @v,jk N BA3dF 8Tc<'B#"m #u 'CሥI QȓRKu$㢂8a qLt10cDFعWnM#F1?܁F-=I0q( ?J BN滓S5żW1eShq\0~WÏt88*x{"J1xNUx8n%,PЃpsoBQbOI5_Ӝ %9c8 YyXdb 7]3P;돩1b'wTXԱ;nrcP3R瑠XdX"+q 8By#(8}]sL{OAU-qx錣w˟gF8NUqWNPGtn;8++]>3Rj{};d0T͛$!)LD Jg(A2gVwei|]D$jN V ؙ ti)hbiV@d]鸮?6lcD1 +=el{,lKlj}t_aLplgp8Px%DbCjcVb_1-ub6 s@"pz1Z[@QR-!UpIvrUNV|W6' es,G rD\N82}ݼn:ӬķSԟ~'57 tplġtQNq, "ەaەpr0cuhe % P ql^׶IZr"ye0 g Y%ȁd HB9TB"W{Fx4ݿV)qD2Lvk$Ԓ|iH2eaPA8A8Ep]J#ÔCp魪Xك_Tp)u~J yg/@F K6zcb`SO\$2G{W:i^hSAqLPF$U&Nl6Ou|ҳlb6q3 J̋8G*G'+S=bTn0 9=d$ f#bApF2} kNBe͛-o@ bW ٳfR) 1N#_6l8Xn0RF+6lg#F> Cq?-|?se%h4XI"KejՈ?65MENb~%5<"}%UvÂ9+ip悳Ztľ{EOIJv82^@OPkNccz ~܏%"er8ܚ,\g]RkM^,215b++%լDԏOl~lj,ð4,}N#IU# |B)pݐkTPI\KF4]0! -7)Lxb1+&n5>;4N ܃Af)aЏ.\?{`XN./@H69ӿLLI#E'BRM:wƴtH4kL6l7ҜWR R`}caR7;D!M@͛6l0<2#,͛6l6ˊ=ʪ|v!ͼsz6l brGXcH"]doٳfj*2dc}C.ٳQLM: #T'6F4;[3/g_.jFRF ZV4gzeSmĚ3M=?f=4 H;Y'b`105~N޵Ƙ~*i2=^Ӯ-.=83ml $@_5q#emm,uvY|fPR$=Ya#?1ٴ|#fGˊ\S"b#9WR4IkG\Qp=-If!`{^^;Q֪j)Zv ~(ǧxcr0De!+2MDʅrb2iDD q|F M@2u=~HH9G}d:j;@`vc u0dG$1V\`$f>iҘ r }d-#Gy!8<+S#x#&0c_Ύ;ۖR8Ug܉))|sr9fΕ޳#*{e͛53b+*a]\cFf̈́/?7lٳfͅUJL?lJ_ٳfh_(NG$Ƨ6lX-Ui6L|1ιyfEccDiFf͛6Pg>ziUZS++(cݩ\ *lkӛ6l8\ 5qqoSڸJR18"[c6l`3lz,jR+TWVA.+ ~C6lٳ"[daT5wpNSۅRՇFlٳec@Dž?,ٳf[ 5[esf͛x icq8§6lٰR|18k6l)Vc b[͛6yDF.J?lq[vDК3ˣ͛6ln~.W/#ҒBMXt {}2+h䴒91=Þ,8 gWbzٲ]`1b, A؂0o\^D*`c]N~l:/6Vܩ55Uһ-@*׭U͌w4-Q S"!;ao[eRr`@p {!.z[ci+:I#sSAcGKzX#zaR\M||k)bI (E^l؈F̀܁gF"Fb JT kL`je؍oոĂ@߾Mfv%]Elmfxc8w%:tWh jc`K{x8o7ڧA㍔JPmTL<,uña8n*BfR¾1z4H.YQٰ Yw=%p'6l1nˆ|'bAR-<:yY~17l[^1co89|@a'n|O~,yx1ӧPF`%Cf"scsp8t31㏁%'n:pe͙ܺ\3e6lYtYy0:v!ыηt/n"V$tu =c_ՋKyJFyNqjOx%o~'|qx?nhxu>MPGJȴBN.9LaC̾ћp.߫7z/?x>3/?<>;UkZ T}Fsmc4~ o9W!RQ{ܡ65N2(J̉!NJhG /,罞=WOo<:+n/pC>'=wemm}aa!;P{q{hczwGQ_#yT~+\.%C!}}&h"7_s9|[ؿBxYN?\?W]7]\LwAK$"ʅ'f7m^ڒF _=h:Q?4YWT5ͷTĎgx$J5o?tM%J4j f wiH)dyU]Бygo8oƿ1$>?JN(8-_\wҔF[VIZ3c R-E̒a^,v=~ۯ#.Se!;UQ.µ8'L{Zk,LH% +inW"3i?D0;+U7~'Uᶍ5dnk^^XguSvF Ѯk3O*I_33CxoՀn5%$FsJ~1eZa)/REpi~S~/pƹ~/"5MxzS OOٮ}}jOwksLlJÀ~0L =w_E umk;F&?4^ԮMpHZ3; x^/3w[qygp88a|W> KŭK;ir_"?oGMf͛:KI^&->QǨ&<ٳftdlጆUR~)b_ sf͛kk ب<3'LQsf͕h2$3yfúaO X͛6lUG\o<1c6lٱT9b9LٳfeBc,EL6lٱ*T gqCN X͛6l!m=+!'=busf͛MWbf~lޯf͛쇂ނM |v߲߫e |}f͛ʕ}[;~b[~Ň?kf͛ʗoT 'QʛM6lٱTۧooCՈٳfRPACJbquelٳbi p3ýpq͛6l@[}<6l c$6lت+9f͊7ӧl16lخ3#/?A͛6l[+دa6lٲ&hN lنlPh^6lٲC#x8w6lY`j* y'\ٳfȖe##q͛6U'Tˉ/ ٳfeM}TǷL`okeET8ez^ۛеeRhhf[{Fg9m/W#2re&O]CC)ek(jQA=HgeX~qβ^Ꮅz/%?Rf =C>y>;xmg\,{ Hҹ endstream endobj 147 0 obj <> endobj 148 0 obj <> endobj 149 0 obj <> endobj 150 0 obj <> endobj 151 0 obj <> endobj 42 0 obj <> endobj 43 0 obj <> endobj 152 0 obj <> endobj 153 0 obj <>stream Hbd`ab`ddvusH)K-LNK-MuIf!CG_~%~o&6!&F *23J45 --,SR+KRs< KRSsr@RSʀp2R3zRSJSRs|2K* RR2&gd&ea020032k}_D?:}xOf aиeYаѐ㫚3n﬙mپϙqʟ3 mvu endstream endobj 154 0 obj <> endobj 155 0 obj <>stream HlTyTT}#`fXތȎfDe֨BPAA"V`5IQ#sckUm2.Qpp`5&o{>wޫcCN74s=+{rhnYA٪pb)gqE,Ua%+0iwel8[V87.{'_Bhpr_^^Q{7j Fc1vs-ι.tG=~k?,;gX}ƪ;9pI N~/d:wbL- d@hkRkQbdK|gꥰ)#dIkWP K<&~GH+OɎ1./HSgۅ( G8~0$=D)-,sMJHcm;!.8 )G#;1>F;/cą0_NB$]JX[l_)]P0C(.6QB 685e Ll1^}>.`^jAZϩYeރ1&r.6w#g>k5#;i={5+Tmg?q$kE’Ί{j۬m5 m]FJ)Sø*bS9. kr8-䷔I> 2@opaw͑vHyy&F%C@؏/1HXbțcp{faM"& "^h͜rAktMն~jiF liQE1GO'iWZP3Bakg~)D 1Q0ߴHv$NL&6.1xV< K^bκˋYY*Zf $bez> %;\:6irdOZIr0Vǩ94!SmbU3aK! A8(!. 1d8JMِ'YԶi/gl&MoM#c lZ|ީThʆ82S~hbÆfLNXps h+ˍFϳ l+ؤ(^VыEWnU_s_γ? g~#2ssJ|Y82_0:h 9>Aǭ)_RzadZ,ñ=\c}ǖgṚ`urj9B59v<#X"ڶdJ&E?yUpDz]o 6^gnݺ}`(,J.`6)(ɚOfk]O!6sؾCr5qEa@nFtAǵMwEX "JZ^b 5 #jQ:2 -*MԚ*%@):)= ;s= Z0 񱴁M]b+Z;Z;jn)^$)_Am“^Y* M.3s?)u0J骓-yqEW,.O)*[ Ч<,M/$ ȼԈ\!:$G"d24OX|J3[Y2‡(;q,ko+p & A6+?wsczq7'W XS)l44=D,E $:8޶3b:!3gc:@0߅D%p=^KϦnJ b9cp>z]O~Szl)Hi]+ٔԂY#!Sӱ.4^`tT7tz$@9$;,*Q41#;hze25 `nl8.56T>ZED7Xyc=ucta:[~mz e8Fr'Rc#yxMƥ/hYhH#@Z>",oWH_hG{^thg=ӲPW> grp ᾿)_7"EJ@ ?m/.DGWRp_3)v:QQ%! 8”@~9'"@ #rr_ @" ˉJ"XrN\Z[ 1puT%!A1,t^lW[ȠNDnkQ=`RXn@B4Q!`5Fʖ/at iz:Hbri'8r28A utִt o&BC=\U:2rǘ.f\)Ttoaׁbs mV^t(*2VQTIeg99"]gKedl ǂp b›%:Iш5N'-`N W}M#ÎB!Bj >^!ppw9`[: Тѝbn@l`_&[aGP_Y 4үGp3ZN 9c2P`h'}:c- .;$C=# ^gdWkILb.vɴHPސ*_\厤PXÈgãq>#xFLP=sN{`/\ ^ endstream endobj 156 0 obj <> endobj 157 0 obj <>stream HT{TŝU"3YA+*%DEA@As !>QIj Q怨DQ[V+XovB:Ӟ\cta gBсs '-+u#4ɠ 5jK[m@l*a:&Сwc#cl~q1ƾ;h}uq㬱y9UKB s뜜9KC?c`|]Lg c` Lf 3a8SP\5DqӀdej`Y֓Ķqe@=~ld/M'nmChfew$ϕ̬l"kq6XGΠH6r—"U^hG /Tlɢa)zWB;"n߮淧}wƿ?'ς%_4%_\y`=țҝ=X{/KJnlj2hPS 4Sf>\2E-<n+9}G_´V ܚM߽hxT?Їf(Ra .r`<ݦ$}OZrHCdzG<0'x&@E(9lDRHؚ5:3%17̔.j1b(w~_tSg:\Q}D{ciPDB&fLW-3?*ü\<(ooP:rΧ6ŘbjB-<5@7l#j}>Z.udy&_…>Btq[e*dZq\1"(L`PlD]،I^JeySGii޸iɉ/X`}Df0^_SSfQrήh_^tEًw /.MOp<"$ /oG#5MJ+vkߔI\Y$/i&#{;mt]Oz V Q"=iASiK@)iNܟކԣWŲ%o}XgA[i%J5 endstream endobj 158 0 obj <> endobj 159 0 obj <>stream HU}Pv:d;vO)&ʇDQ#W͈i"*%*S&h16vhm4f{gt<߾<ϼj7FfggXmj[l~W'ɊI{(>o/|tu/s[_$x6*g@77 | vCa ۂ薽`b M<{!]:&w>6y67|XSx$EvžV `uNJ@-AYc![lv!ZDGs; 5.U*ϕH>>h'=5"ݻD|Kޔ'a$PIQdiM%)l"Bp} 3QpB銬RjAE,'BYM@s\4 eQIf1 bD~rU;$ds}7ASb(آ;R%fyBj1E_(2q*Rhʢb"V|OEݳJa/Ep1,85 3F_ "o(fO~ =0}xČfdFQ(g,i9xbDS1eP2b|^Rj}='_2b&x yTFzJ#K0eh>Z8 pVu(vO-)VF=p}Y]+Ԍ7 YHkSQq&O pS+ţ8qԡ"H-cp \mT4DJSu7ʃ<(kbg ^VP|brۜTYc㒀dF- ożַ+̦I8ê]1n "E2&IY?[ -N3g3s g ̚&R#Qy^w\h]\,-*Ϋyzſx]ĄE_ MqϵK(S 5ؤ L)YRVܥڥ]SIekKnmp55ExLRlU۪Z륺 ]Ʈ=rk *=-ˌ*WInZ%w(zSb>Ww:o89uX!Tѳ هJer8|F ;1# Ad9-#UI6JR[Tq=U EY2}qPpGQJ4J{b򸡔 GKI3d,UyUuMZ}[[` ((PQU h ( h4qFFUF3V@%B*XkX?(=;=$mW3;;w{ݹP q vPo|!1lbK2א\J41ga'tP̀eROpBx}on7 T6t`X >k78!!a7R^Hpլ.P[wꈠA͇ fGONP+`J |SNHc8 mÊ,^J*Tف6Vhc- LQpB}._<ӟRt~!C$ c\jd rDƀ6/JVbb~Rbx69 -w C@C V @ڱWt_:sG`fd{j$O)Dm rvOB1@lgty\}qAc1Xz!aU=OγO++HDD$_LA>Ao%J16кⲲrF}bgЯ>ֳu+By #Lࡨβrniˇ!^l\11^ZhQNj!by\FGdG2lP^Kv…#dVW%Lh+:-FY x,S'r5Gw9jaxCG0#M ޑ7VbHG<ֹ0lPjr)h19pᰈwtsF}bUp~-Z5sqfyjL@?C|ɕM j )X %hL}~ƺv> THLbJVKɝ,+-_!PD?뗠W y Y2%SC ◂1_ nD Ϳjt l̅y>PwBpDďB-t5u AʷtحHS9haꙞi䴦6)4rmLeF-%?Jn|a%x B:~wדMkkpezO݌ E]w70p y20Lu^ć|JGe"@tv/ceٹ٭=đh"$ ar"ˤ  S~%GÚ{-9͍Y ,: b\,${U!Id~hn enN <$;OA_ !7t|+i՜qsP'P6S"c?1ܶ ,i\1Y@d aݸ &^*,$,}0$gp]+a;m\5ϳ^ F›Vdz7k_̞ʱ*s~}Þ%bH q>85<:[ڛ]ۘߘӒ,h$wv^^D&;0h"bb??uz ܚ)^&D.:qKV# X'vpz_P@/=4}xCNwҝ|i(VAkT3YEWv$X0Y\e0cmj7 ޷8'mo!\lRp"3Bv@d` `ج3jCЧ`0z/MհǀU93Ycq2碛Zʠ\txې`x&s3< V0j& U:9Lv 2, I8ݢC Qm=.ͳK@p磌!RB0,᠃,i` x~#5ں>A[z67!\oQJ n-A>OPMc8->S8G&$:)|.9z+$rgExjaxznIIB:vЁ-wHƅ'!'"n԰!"S0Mh(꼬ڿǯ6,Q׶~i0''r?] Z> endobj 161 0 obj <>stream HT{PSg|7C.$7~ Q qQ]P T0 1 qZWel}:Qإ #Μv޹=;(%%IKW(0t} vEV+, S:'-!kO2 $B7sH`AQm\ U-**/S~Cj~aj]UZWvft~/ٲ9K9[f9 g1KO81`9&#K m h U, wh2x7Lc2+s~k/^'" _D3k riyَm[M*z{M&SW{x]OTV23y Ρm/9i/`l#$C0P+o>p ]!F<ׂ^b Ǐ;s?uФ3,l.%tB%&*p1mT ɺ~{oS3WTXkɨ+e^i[ڇY 8 f,l+i~3GlOEbNcM6-]Aڔ0Xe!]NsgfΪ Șl?skgN!p [ࣃDXp +1]Q`3 1M/:Ѱ[& lEs_vN h@5-F{A q4HPK1 P2=aOX̡m_.Ggbә8fbOm ̦/9곓eSB"V|7ܼr'Zj ['ފ!j"OV. jpLj9( wIjSrИa'r2H1bWal%C (X SУc+#X0j aZ:LB!cu )vb:cEkv;!@1Z/gf0%H 琀+=R  Z$A/@eX1p˧|Sa2z/;G ^:O4dz0u+CSbx v't8 (0=1^bm V,\עLln!EXWcxW^T+`]_cb'Z IULޘ]mx)//ҡC6qб$q>m?6Tlȸ5(qVm|(G:=Vtgs˴+E۴GV\o{tnH2Y\ f b.,0fy1H =#@8i2pol5JNZkR2E%M w*pbΊ^`mJMVaZ$s?{ -;O;61 d~:.5.uun6Btyld@S~x4xt* zU |Eg8kU{ 8>Ӱ$oIsBSCSVE'%)pQ&s47GwJyJCzk  IPOC"=K rZ8GIY %Lߵ3%,PH[Q-y߂V@]hnƈkW*~Yh#e.v˾ǧ_Z[w} ċf F8gK.RHӍ*p<=.gLp7O[8q~.(7,5,5:*//ӳPLc5$c%0δb\@`!}tP>1DS:4`ӾZQk6-qt6X(P'0&k3 mW7as~/689 _!J` ph(Se~݁S.X?rsĦuъ 3] ,wet?=DBT-"3C+}8X`3R&96^# bŏ0eFmrdj;NV&uP2td]Ivd0Ƶ DHu1Y=yyE{4Y=yyM&m}yuuUuYIr;u ?1U#׊"AddM ՌM.$6^%o}8rI9 &pIީoT,Rm )f(E1dJ/LI!I ~ ~;܊plG3w$?~y>xq'kzY1-{["/I]e:_<6s bT8(x@a&^賜[7%'d%dn8CҀ_꿖SjJ|Sϫp4Yxm2DUkrn@b|6a<ڣ;F: ˮl~x}gdo ;]TCUu>E$)ԭ#XF _C_1%A;SV$#&ˈ~ <ף`/;/v~upޢo1XkG+ҰzP"+:t,X%N |n`_d]/ #1Jʧ`%.KͰ\mZ82KqUU9[SYrBw(џQIۡ !f%=Rη4WFƋG2I2%?{+-j'\ScErm1ܱRp) -ȺF{&9\dFٿ Tf<,3beټk=4t= A)'6F/QMcy%Eoc3h+vZ:%ļoh8r#udjvc߰p' ňib)QIcOoÉu8{F> iAgjb`| UYAÙ({roRiGY\c$L{`>Cӓ߳Xfz^YBĝ5#>b+Bgͯ& 0Y endstream endobj 162 0 obj <> endobj 163 0 obj <>stream HTRKHTa>e2kԮ15BE\G2'Lj䲼ÄDpcA fb\`,jΙ&Y9};E.RW :=}ǥиRVֻVJ x`;1u)FAIc᫝;3ի[ !1{'N ͍MM}`o߻޻)NIQTFULj͔I mei;4eA=5}!r!1Ӂ(8k3O2@_[=RD2\` ]zTU`+r0P>u}c j90&9Ϳa@,*9L0I|8wZ; exzwTR1ˢ/81)z3 Qi*߅jVf޳"`^*_ ?x&7.`4bQz{FdqVY5AD^fVHky ZgY~<*P"nzxk,5GvZ`IDDp:jfG5m}Pư_i>/tZ|.-53[1v0}53;E Ǔeb}?nb`ZLoܜQ g7T7{lv᱋=2ƙ6h ^ W8KɛGբy endstream endobj 164 0 obj <> endobj 165 0 obj <>stream Hbd`ad`ddvusKObݠҜ"2Y_x']YC4( S'c;cH^b?pMg?SC{{~Ժ, df034 endstream endobj 166 0 obj <> endobj 167 0 obj <>stream HlT{L[Cmw^ѴUdڢjkhӲBh@^i0lnb `1Rk¤6kM*m:mPKhN~sl"++PN~E]ΠN[[;yxBS_ľX&?:t+s16Y!r " "C/ix%x Ĺ,ȓ ~,åD%6fyGs@}`7G998LRGC_vJ9+E HPO4>p8#҈IvA**_.X|3lRm44 3 t†Rm{$:Jѳ$L ==$N:%Bc#{Q8_ =~ ѳmU>>ݒ.6ߵR(_m;<]%ɢ\S-J,0U꩎4U%md +k`\L,k)UrhMP7fc,c]0Bp652iӜ`o5Zw%8IUbyJ@9[/Tm4=lYL[V&`ݒ #=֝_e %ӔPTn&S R(.t;׭@c /Bv !qzLoz"ÿG 2ѐ{ L,mqy6)!X^ܮlJ*¤RJmj(ThW> endobj 169 0 obj <>stream Htyp׮ ͨdf&0 sr.-ˇdkW-ɁǀKZaɖ,;!'caHۙ43+gIx}l(++:{_)JzZMUjAU[Yb(KhUzz^?@nړ 퇠*K!ƠY/ggȾOFrhs&r¯w]HZ:ou,w:+Ǘ8\reqwq>g~@9 y!!녉22;3rβ),F)2]w"bބ -(.T?)U ~1gPȔ= 򎛤rJVI'ɎA ]i 5뽔&'P|} _J6f#e0lJuiCf$,u&}^M,^Kl c\3¥(G9%aJ AW !oogxڮ66982/Z.n?nE7sOp K@]B ]ɘUR⸽ʬ!5tU 2lS[H{O< q xo20cqr\U8jvb"xqbTJb8s7rT1Y<8Q] '8{C5p"x T*UO}ӗ۰y~);r%!մΪjwD9buE{B~/]!赪(sT`YzewO/ ¢s)=$\I)BT.`ZT=C^ES5dMr'ɴw}bؑ$<O0a31Hg,^z(;C+p#`4_$:׹RBPz.e` :Pg 2%KiW#쌁HЦg)VTYb E80bȕKN 5 ⡸wk ω(q,9[[)' e JQ" $>f#IL.Sa ibcě ް;FmDc0U'ASLگ^ۅnY \a>S/BDs_݋LR3O S2ț]#\~Q}#; ~ ںH#dAv "\\mb\4|33-|żP<,=ZR@ML2Q^$iݴt(-bܿ|2P)}OF ·6kXT+> w먺F٢,] 9fiz.K )iIq:ZGEMS`j8x)N;onaxs@ Bepa4Z6l> endobj 37 0 obj <> endobj 38 0 obj <> endobj 39 0 obj <> endobj 40 0 obj <> endobj 96 0 obj <> endobj 144 0 obj <> endobj 145 0 obj <> endobj 146 0 obj <> endobj 170 0 obj <> endobj 172 0 obj <> endobj 174 0 obj <> endobj 176 0 obj <> endobj 178 0 obj <> endobj 180 0 obj <> endobj 171 0 obj <>stream HTMo0 ;@G B*i0Q 6$k;~$nQq7i8pso@&z^Ve!uq8nW Nj^ϮEכ3 Nj_8A@]C]7>!SzZįbclqJSPJ5iǢ2T:\2"*BЏ8 tO\z)iG(,]7?*) dSxL[/d#\y!gaEK\`,CC m?]?bnovhyF endstream endobj 173 0 obj <>stream HTMo0 >v!@RԵ>v0@ېOۯ vW?#Nt8ov LU^;| o9N Mxl<|5ζ0;8^ T}YONom 5Nڶ*K*PEh{|j/bdj LXGd*ŞxK;bS$iު~ -q>stream HTMo ;@JQۤ۝EZ"~w)`xZl?| ]oi<{pSo!z@28l7B6_`1_&w _A,G}v vBn{V:\B鵌F ɒuК{bŊc?|2IX3o!p"sA\$mF!qnE:?\F _qfR(*NTNa8@5Y2gӌL5; I9*dP\W@ۻ5[8:[7:j([\ endstream endobj 177 0 obj <>stream HTMk0sܲGD(.n&j QN;wtR~nFQ mi\@c+#{^J#9f=<3M:8\ 7f(@bxf@SU#Dnn1Jt#4Cȣ<;JϱW[Oq|!NCOOYs , F}6߷űw*B iBz_b͉IVhP#ľoh^>CCu7g+/W.#bb endstream endobj 179 0 obj <>stream HTMk 9nكIО$PrͶwW'Шsȿ㼏A/cgM1`8%(B݀6*^9$=q@BSpaCY'~N3=8PAۂƁ˳/rBuM qRavDnApZ?F K)*"xSɐCႥ_()(M%jbi%7a,&? L~ endstream endobj 7 0 obj <> endobj 45 0 obj <> endobj 62 0 obj <> endobj 97 0 obj <> endobj 181 0 obj <> endobj 182 0 obj <> endobj 44 0 obj <> endobj 139 0 obj <> endobj 137 0 obj <> endobj 134 0 obj <> endobj 132 0 obj <> endobj 129 0 obj <> endobj 127 0 obj <> endobj 124 0 obj <> endobj 122 0 obj <> endobj 119 0 obj <> endobj 117 0 obj <> endobj 114 0 obj <> endobj 112 0 obj <> endobj 109 0 obj <> endobj 107 0 obj <> endobj 104 0 obj <> endobj 102 0 obj <> endobj 100 0 obj <> endobj 98 0 obj <> endobj 92 0 obj <><><><><><><><><><><><><><><><><><><><><><><><><><><><><>]/Pg 62 0 R>> endobj 90 0 obj <> endobj 87 0 obj <> endobj 85 0 obj <> endobj 82 0 obj <> endobj 80 0 obj <> endobj 77 0 obj <> endobj 75 0 obj <> endobj 73 0 obj <> endobj 71 0 obj <> endobj 69 0 obj <> endobj 67 0 obj <> endobj 65 0 obj <> endobj 63 0 obj <> endobj 58 0 obj <> endobj 56 0 obj <> endobj 54 0 obj <> endobj 52 0 obj <> endobj 50 0 obj <> endobj 48 0 obj <> endobj 46 0 obj <> endobj 32 0 obj <> endobj 30 0 obj <> endobj 28 0 obj <> endobj 26 0 obj <> endobj 24 0 obj <> endobj 22 0 obj <> endobj 20 0 obj <><><><><><><><><><><><><><><>]/Pg 7 0 R>> endobj 18 0 obj <> endobj 16 0 obj <> endobj 14 0 obj <> endobj 12 0 obj <> endobj 10 0 obj <> endobj 8 0 obj <> endobj 183 0 obj [10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 12 0 R 14 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 16 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 24 0 R 26 0 R 30 0 R 30 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R 32 0 R] endobj 184 0 obj [20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 46 0 R 48 0 R 48 0 R 48 0 R 48 0 R 48 0 R 48 0 R 48 0 R 48 0 R 48 0 R 48 0 R 48 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 52 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 54 0 R 56 0 R 56 0 R 56 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R 58 0 R] endobj 185 0 obj [63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 65 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 67 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 69 0 R 71 0 R 71 0 R 71 0 R 71 0 R 71 0 R 77 0 R 79 0 R 82 0 R 82 0 R 84 0 R 82 0 R 87 0 R 89 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R] endobj 186 0 obj [92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 92 0 R 98 0 R 104 0 R 104 0 R 104 0 R 106 0 R 104 0 R 104 0 R 104 0 R 104 0 R 109 0 R 111 0 R 114 0 R 116 0 R 119 0 R 121 0 R 124 0 R 124 0 R 124 0 R 126 0 R 124 0 R 124 0 R 124 0 R 124 0 R 129 0 R 131 0 R 134 0 R 134 0 R 134 0 R 136 0 R 134 0 R 134 0 R 134 0 R 134 0 R 134 0 R 134 0 R 134 0 R 134 0 R 134 0 R 139 0 R 139 0 R 141 0 R] endobj 187 0 obj <> endobj 4 0 obj <>/K 5 0 R>> endobj 188 0 obj << /Dt (D:20190125130756) /JTM (Distiller) >> endobj 189 0 obj /This endobj 190 0 obj << /CP (Distiller) /Fi 189 0 R >> endobj 191 0 obj << /JTF 0 /MB [ 0.000 0.000 603.000 783.000 ]/W [ 0 3 ]>> endobj 192 0 obj << /Fi [ 190 0 R ]/P [ 191 0 R ]>> endobj 193 0 obj << /Dm [ 603.000 783.000 603.000 783.000 ]>> endobj 194 0 obj << /Me 193 0 R >> endobj 195 0 obj << /D [ 192 0 R ]/MS 194 0 R /Type /JobTicketContents >> endobj 196 0 obj << /A [ 188 0 R ]/Cn [ 195 0 R ]/V 1.100 >> endobj 3 0 obj <> endobj 197 0 obj <>stream 2019-01-25T13:07:53-06:00 2019-01-25T13:07:53-06:00 QuarkXPress(R) 14.02 QuarkXPress(R) 14.02 %%DocumentProcessColors: Cyan Magenta Yellow Black %%EndComments Sally Kennedy Layout 1 endstream endobj 1 0 obj <>/MarkInfo<>/QXPr:DeviceNColorants 2 0 R>> endobj 2 0 obj <<>> endobj xref 0 198 0000000000 65535 f 0000185582 00000 n 0000185804 00000 n 0000181880 00000 n 0000181233 00000 n 0000072422 00000 n 0000072361 00000 n 0000170512 00000 n 0000177082 00000 n 0000000000 00000 f 0000176963 00000 n 0000000000 00000 f 0000176831 00000 n 0000000000 00000 f 0000176784 00000 n 0000000000 00000 f 0000176652 00000 n 0000000000 00000 f 0000176560 00000 n 0000000000 00000 f 0000175988 00000 n 0000000000 00000 f 0000175934 00000 n 0000000000 00000 f 0000175885 00000 n 0000000000 00000 f 0000175836 00000 n 0000000000 00000 f 0000175782 00000 n 0000000000 00000 f 0000175728 00000 n 0000000000 00000 f 0000175562 00000 n 0000000000 00000 f 0000000016 00000 n 0000017194 00000 n 0000163247 00000 n 0000164086 00000 n 0000164717 00000 n 0000165334 00000 n 0000165860 00000 n 0000072481 00000 n 0000139110 00000 n 0000139269 00000 n 0000171469 00000 n 0000170734 00000 n 0000175514 00000 n 0000000000 00000 f 0000175435 00000 n 0000000000 00000 f 0000175317 00000 n 0000000000 00000 f 0000175184 00000 n 0000000000 00000 f 0000174982 00000 n 0000000000 00000 f 0000174924 00000 n 0000000000 00000 f 0000174746 00000 n 0000000000 00000 f 0000017359 00000 n 0000037315 00000 n 0000170957 00000 n 0000174641 00000 n 0000000000 00000 f 0000174514 00000 n 0000000000 00000 f 0000174405 00000 n 0000000000 00000 f 0000174244 00000 n 0000000000 00000 f 0000174178 00000 n 0000000000 00000 f 0000174121 00000 n 0000000000 00000 f 0000174069 00000 n 0000000000 00000 f 0000174015 00000 n 0000000000 00000 f 0000037430 00000 n 0000173963 00000 n 0000000000 00000 f 0000173900 00000 n 0000000000 00000 f 0000037482 00000 n 0000173848 00000 n 0000000000 00000 f 0000173794 00000 n 0000000000 00000 f 0000037534 00000 n 0000173668 00000 n 0000000000 00000 f 0000172677 00000 n 0000000000 00000 f 0000037586 00000 n 0000056553 00000 n 0000166125 00000 n 0000171180 00000 n 0000172629 00000 n 0000000000 00000 f 0000172528 00000 n 0000000000 00000 f 0000172472 00000 n 0000000000 00000 f 0000172398 00000 n 0000000000 00000 f 0000056678 00000 n 0000172342 00000 n 0000000000 00000 f 0000172287 00000 n 0000000000 00000 f 0000056731 00000 n 0000172231 00000 n 0000000000 00000 f 0000172176 00000 n 0000000000 00000 f 0000056784 00000 n 0000172120 00000 n 0000000000 00000 f 0000172065 00000 n 0000000000 00000 f 0000056837 00000 n 0000172009 00000 n 0000000000 00000 f 0000171935 00000 n 0000000000 00000 f 0000056890 00000 n 0000171879 00000 n 0000000000 00000 f 0000171824 00000 n 0000000000 00000 f 0000056943 00000 n 0000171768 00000 n 0000000000 00000 f 0000171679 00000 n 0000000000 00000 f 0000056996 00000 n 0000171623 00000 n 0000000000 00000 f 0000171564 00000 n 0000000000 00000 f 0000057049 00000 n 0000057102 00000 n 0000072212 00000 n 0000166292 00000 n 0000166890 00000 n 0000167294 00000 n 0000138564 00000 n 0000138741 00000 n 0000138834 00000 n 0000138926 00000 n 0000139018 00000 n 0000139430 00000 n 0000139674 00000 n 0000140051 00000 n 0000140399 00000 n 0000143806 00000 n 0000144048 00000 n 0000146071 00000 n 0000146588 00000 n 0000152169 00000 n 0000152551 00000 n 0000156765 00000 n 0000156988 00000 n 0000157803 00000 n 0000158002 00000 n 0000158223 00000 n 0000158484 00000 n 0000160336 00000 n 0000160629 00000 n 0000167449 00000 n 0000168632 00000 n 0000167852 00000 n 0000169028 00000 n 0000168120 00000 n 0000169430 00000 n 0000168359 00000 n 0000169820 00000 n 0000168500 00000 n 0000170193 00000 n 0000168573 00000 n 0000171405 00000 n 0000171431 00000 n 0000177283 00000 n 0000178380 00000 n 0000179519 00000 n 0000180616 00000 n 0000181165 00000 n 0000181382 00000 n 0000181445 00000 n 0000181469 00000 n 0000181520 00000 n 0000181595 00000 n 0000181647 00000 n 0000181709 00000 n 0000181744 00000 n 0000181819 00000 n 0000182167 00000 n trailer << /Size 198 /Root 1 0 R /Info 3 0 R /ID[<10bc9c27d4179be4032bcee4bbfb01a0><10bc9c27d4179be4032bcee4bbfb01a0>] >> startxref 185824 %%EOF