%PDF-1.4 % 32 0 obj <> endobj 35 0 obj <>stream /Artifact <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 491.265 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [(ISA)5.4(CA JOURN)-8.8(AL)]TJ ET /GS3 gs BT 7 0 0 7 543.6147 23.0228 Tm .63 .06 1 0 k [( V)6.4(OL 5)]TJ ET EMC /Artifact <>BDC BT 7 0 0 7 587.3827 23.0228 Tm (1)Tj ET EMC /P <>BDC /GS2 gs BT 9 0 0 9 144.1656 611.5177 Tm 0 0 0 1 k -.005 Tc [(Information security pr)9.8(ogr)19.5(ams ar)9.3(e not easy or)]TJ ET EMC /P <>BDC BT 9 0 0 9 324.6287 611.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 599.5177 Tm -.005 Tc [(t)9.8(otally successful on a global scale. In fact,)]TJ ET EMC /P <>BDC BT 9 0 0 9 313.3909 599.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 587.5177 Tm -.005 Tc [(per)-7.3(forming a tak)9.8(edownthat is, successfully)]TJ ET EMC /P <>BDC BT 9 0 0 9 320.5088 587.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 575.5177 Tm -.005 Tc [(r)9.3(emo)7.3(ving or blocking malwar)9.3(e implemented on a)]TJ ET EMC /P <>BDC BT 9 0 0 9 336.5994 575.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 563.5177 Tm -.005 Tc [(v)7.3(ast scale and/or st)9.8(opping malicious individuals or)]TJ ET EMC /P <>BDC BT 9 0 0 9 344.6264 563.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 551.5177 Tm -.005 Tc [(or)9.3(ganizations that cr)9.3(eate and disseminate itis)]TJ ET EMC /P <>BDC BT 9 0 0 9 331.2404 551.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 539.5177 Tm -.005 Tc [(v)6.4(e)0(r)-8.8(y)0( dicult for many r)9.3(easons. Examining se)6.4(v)6.4(e)0(r)19.5(a)0(l)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.3298 539.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 527.5177 Tm -.005 Tc [(cybersecurity r)9.3(esponse pr)9.8(ogr)19.5(ams, e)6.4(v)7.3(aluating their)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.3658 527.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 515.5177 Tm -.005 Tc [(le)6.4(v)6.4(els of success and describing v)7.3(arious common)]TJ ET EMC /P <>BDC BT 9 0 0 9 341.0226 515.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 503.5177 Tm -.005 Tc [(malwar)9.3(e pr)9.8(ogr)19.5(ams can help r)9.3(e)6.4(v)6.4(eal methods t)9.8(o)0( help)]TJ ET EMC /P <>BDC BT 9 0 0 9 346.1413 503.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 491.5177 Tm -.005 Tc (combat cyberincidents. )Tj ET EMC /P <>BDC /GS3 gs BT /F3 1 Tf 11 0 0 11 144.1656 465.5177 Tm .9 .53 .1 0 k [(Malwar)9.3(e Response Pr)17.6(ogr)14.7(ams and)]TJ ET EMC /P <>BDC BT 11 0 0 11 308.4682 465.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 11 0 0 11 144.1656 451.5177 Tm -.005 Tc [(Oper)14.7(ations )]TJ ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 144.1656 433.5177 Tm 0 0 0 1 k [(W)15.2(orld authorities, v)6.4(endors and many countries ha)7.3(v)6.4(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 348.0683 433.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 421.5177 Tm -.005 Tc [(been working t)9.8(ogether t)9.8(o)0( ght cyber)9.3(crime and the)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.2306 421.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 409.5177 Tm -.005 Tc [(spr)9.3(ead of malicious softwar)9.3(e with limited success. )]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 144.1656 385.5177 Tm -.0293 Tw [(Botnet T)82.1(a)0(k)9.8(edowns )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 144.1656 373.5177 Tm 0 Tw [(Botnets ar)9.3(e malicious softwar)9.3(e that spr)9.3(ead t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 324.242 373.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 144.1656 361.5177 Tm -.005 Tc [(vulner)19.5(able computing de)6.4(vices including deskt)9.8(ops,)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.024 361.5177 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 611.5182 Tm -.005 Tc [(lapt)9.8(ops, smar)-24.4(tphones, tablets, ser)-8.8(v)6.4(ers and Internet)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.2432 611.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 599.5182 Tm -.005 Tc [(of )19.5(Things \(IoT\) de)6.4(vices. )19.5(The)6.4(y inf)11.7(ect tens of)]TJ ET EMC /P <>BDC BT 9 0 0 9 530.7856 599.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 587.5182 Tm -.005 Tc [(thousands of computing de)6.4(vices and per)-7.3(form a)]TJ ET EMC /P <>BDC BT 9 0 0 9 549.8051 587.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 575.5182 Tm -.005 Tc [(v)7.3(ariety of malicious activitiesfor example,)]TJ ET EMC /P <>BDC BT 9 0 0 9 532.9388 575.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 563.5182 Tm -.005 Tc [(spamming, stealing cr)9.3(edentials, r)9.3(edir)9.3(ecting users t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.894 563.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 551.5182 Tm -.005 Tc [(alternativ)6.4(e websites, spr)9.3(eading malwar)9.3(e and)]TJ ET EMC /P <>BDC BT 9 0 0 9 537.9365 551.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 539.5182 Tm -.005 Tc [(conducting click fr)19.5(aud \(in which a host is paid when)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.2015 539.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 527.5182 Tm -.005 Tc [(users click the host)54.7(s ad\)all without the de)6.4(vice)]TJ ET EMC /P <>BDC BT 9 0 0 9 550.4898 527.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 515.5182 Tm -.005 Tc [(owner)-7.8()54.7(s)0( knowledge. )]TJ ET EMC /P <>BDC BT /F3 1 Tf 9 0 0 9 362.6656 491.5182 Tm [(Figur)9.3(e 1)]TJ ET EMC /P <>BDC BT /F1 1 Tf 5.4 0 0 5.4 395.2648 494.2181 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 396.5566 491.5182 Tm -.005 Tc [(contains samples of botnet tak)5.9(edowns and)]TJ ET EMC /P <>BDC BT 9 0 0 9 567.0801 491.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 479.5182 Tm -.0052 Tc .0002 Tw [(pr)5.7(ovides insight int)5.7(o their levels of success. )11.7(The)]TJ ET EMC /P <>BDC BT 9 0 0 9 551.6859 479.5182 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 467.5182 Tm -.005 Tc [(tak)5.9(edowns wer)5.6(e not all fully successful. In some)]TJ ET EMC /P <>BDC BT 9 0 0 9 553.6576 467.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 455.5182 Tm -.005 Tc [(cases, the malicious act)5.9(ors \(i.e., hack)5.9(ers, botnet)]TJ ET EMC /P <>BDC BT 9 0 0 9 551.5874 455.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 443.5182 Tm -.0051 Tc .0001 Tw [(cr)5.5(eat)5.8(ors and/or administr)11.6(at)5.8(ors\) r)5.5(eceived leniency)]TJ ET EMC /P <>BDC BT 9 0 0 9 557.1187 443.5182 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 431.5182 Tm -.0051 Tc .0001 Tw [(because they cooper)11.6(ated with authorities. In one)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.1128 431.5182 Tm 0 Tc 0 Tw ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 419.5182 Tm -.005 Tc [(instance, the bot cr)5.6(eat)5.9(or was fr)5.6(eed because of a)]TJ ET EMC /P <>BDC BT 9 0 0 9 552.3682 419.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 407.5182 Tm -.005 Tc (loophole in the law \(i.e., he did not attack his own)Tj ET EMC /P <>BDC BT 9 0 0 9 556.0237 407.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 395.5182 Tm -.005 Tc [(countr)-5.3(y\).)]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 397.8204 398.2181 Tm -.0083 Tc (1 )Tj ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 362.6656 371.5182 Tm -.005 Tc [(Cyber)9.3(criminal Mark)9.8(etplace )29.3(T)82.1(a)0(k)9.8(edowns )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 362.6656 359.5182 Tm [(A cyber)9.3(crime mark)9.8(etplace is a place wher)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 531.5709 359.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 347.5182 Tm -.005 Tc [(criminals such as thie)6.4(v)6.4(es buy and sell st)9.8(olen goods.)]TJ ET EMC /P <>BDC BT 9 0 0 9 567.0848 347.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 335.5182 Tm -.005 Tc [(It is also a place wher)9.3(e malwar)9.3(e is sold, softwar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.4634 335.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 323.5182 Tm -.005 Tc [(vulner)19.5(ability information is pr)9.8(o)7.4(vided, personal)]TJ ET EMC /P <>BDC BT 9 0 0 9 541.5359 323.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 311.5182 Tm -.005 Tc [(identity information is sold and much mor)9.3(e. )19.5(The)]TJ ET EMC /P <>BDC BT 9 0 0 9 551.2742 311.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 299.5182 Tm -.005 Tc [(Internet has also been used t)9.8(o)0( coor)9.3(dinate many)]TJ ET EMC /P <>BDC BT 9 0 0 9 550.137 299.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 287.5182 Tm -.005 Tc [(types of cyber-r)9.3(elated crimes. Some criminal)]TJ ET EMC /P <>BDC BT 9 0 0 9 538.4408 287.5182 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.6656 275.5182 Tm -.005 Tc [(mark)9.8(etplace tak)9.8(edowns include: )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 373.6656 257.5182 Tm -.02 Tc [(AlphaBa)7.3(y cyber)9.3(criminal mark)9.8(etplace had 200,000)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 562.3892 257.5182 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 362.6656 257.5182 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 373.6656 245.5182 Tm 0 0 0 1 k -.02 Tc [(users, 40,000 v)6.4(endors and 250,000 listings of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 545.7952 245.5182 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.6656 233.5182 Tm -.02 Tc [(illegal documents, counter)-7.3(f)11.7(eit goods, malwar)9.3(e,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 551.0204 233.5182 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.6656 221.5182 Tm -.02 Tc [(computer hacking t)9.8(ools, r)9.3(earms and fr)19.5(audulent)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 556.9224 221.5182 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.6656 209.5182 Tm -.02 Tc [(ser)-8.8(vices.)]TJ ET EMC /LBody <>BDC BT 5.4 0 0 5.4 407.6108 212.2181 Tm -.0333 Tc (2, 3)Tj ET EMC /LBody <>BDC BT 9 0 0 9 415.3521 209.5182 Tm -.02 Tc [( )19.5(The tak)9.8(edown r)9.3(equir)9.3(ed months of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 546.2454 209.5182 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.6656 197.5182 Tm -.02 Tc [(planning and inv)7.3(olv)6.4(ed the US F)10.3(eder)19.5(al Bur)9.3(eau of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 552.7783 197.5182 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.6656 185.5182 Tm -.02 Tc [(Inv)6.4(estigation \(FBI\), E)8.3(u)0(r)9.8(opol, and law enfor)9.3(cement)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 560.399 185.5182 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.6656 173.5182 Tm -.02 Tc [(authorities in Canada, F)12.7(r)19.5(ance, Lithuania, the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 538.9528 173.5182 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.6656 161.5182 Tm -.02 Tc [(Netherlands, )19.5(Thailand and the United Kingdom.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 553.1604 161.5182 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.6656 149.5182 Tm -.02 Tc [(The site)39.1()54.7(s)0( cr)9.3(eat)9.8(or and administr)19.5(at)9.8(or was Alpha02)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 559.854 149.5182 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.6656 137.5182 Tm -.02 Tc [(\(aka Admin\), a 25-y)6.4(ear-old Canadian citiz)7.8(en living)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 560.4211 137.5182 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.6656 125.5182 Tm -.02 Tc [(in )19.5(Thailand. He and his wif)11.7(e amassed numer)9.8(ous)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 556.7507 125.5182 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.6656 113.5182 Tm -.02 Tc [(high-v)7.3(alue assets, including luxur)-8.8(y v)6.4(ehicles,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 538.0168 113.5182 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.6656 101.5182 Tm -.02 Tc [(r)9.3(esidences and a hotel in )19.5(Thailand. )19.5(The)6.4(y)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 526.1243 101.5182 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.6656 89.5182 Tm -.02 Tc [(possessed millions of US dollars in cr)-8.8(ypt)9.8(ocurr)9.3(ency)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 566.0066 89.5182 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.6656 77.5182 Tm -.02 Tc (\(which has been )Tj ET EMC /LBody <>BDC BT 9 0 0 9 438.1629 77.5182 Tm -.005 Tc [(seiz)7.8(ed\). )]TJ ET EMC /Artifact <>BDC /GS3 gs BT /F6 1 Tf 30 0 0 30 144.1656 675.894 Tm .63 .06 1 0 k -.02 Tc -.0195 Tw [(Cybersecurity T)55.2(a)0(k)9.8(edowns )]TJ 18 0 0 18 144.1656 648.8942 Tm 0 Tw (A Primer for Success)Tj ET EMC /Artifact <>BDC 0 .35 .9 0 k .16605 67.5 349.076 90.861 re f EMC /Artifact <>BDC BT /F3 1 Tf 11 0 0 11 36.2185 144.0617 Tm 0 0 0 0 k [(Larr)-8.8(y G. Wlosinski,)]TJ /F1 1 Tf 8.0097 0 TD [( CISA, CRISC, CISM, CAP)158.2(, CBCP)158.2(, CCSP)158.2(, CDP)158.2(, )]TJ -8.0097 -1.0909 TD [(CIPM, CISSP)158.2(, I)14.2(TIL V3, PMP )]TJ /F3 1 Tf 9 0 0 9 36.2185 121.2617 Tm 0 Tc (I)Tj /F1 1 Tf .2915 0 TD [(s a senior consultant at Coalr)9.3(e F)10.3(eder)19.5(al with mor)9.3(e than 20 y)6.4(ears of )]TJ -.2915 -1.2 TD [(experience in I)14.2(T)19.6( security and priv)7.3(acy)52.3(. Wlosinski has been a speak)9.8(er on a )]TJ T* [(v)7.3(ariety of I)14.2(T)19.6( security and priv)7.3(acy t)9.8(opics at US go)7.3(v)6.4(ernment and pr)9.8(of)11.7(essional )]TJ T* [(conf)11.7(er)9.3(ences and meetings, and he has written numer)9.8(ous ar)-24.4(ticles for )]TJ T* (magazines, journals and newspapers.)Tj ET EMC /Artifact <>BDC /GS2 gs BT 7 0 0 7 36 22.1458 Tm 0 0 0 1 k [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ /F2 1 Tf 15.355 0 TD [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d q 1 0 0 1 572.622 31.289 cm 0 0 m 0 -39.376 l S Q EMC /Artifact <>BDC 0 0 0 0 k /GS3 gs 36 692.116 58.529 54.884 re f EMC /Artifact <>BDC Q q 1 i 36 747 58.5 -54.759 re W n .015686 .3451 .8902 0 k /GS3 gs q 1 0 0 1 36 747 cm 0 0 m 0 -54.884 l 9.375 -54.884 l 9.375 -9.945 l 49.977 -9.945 l 49.977 0 l 0 0 l f Q Q /GS3 gs BT /F7 1 Tf 9 0 0 9 55.1411 721.6074 Tm .015686 .3451 .8902 0 k .0249 Tc 0 Tw (FEATURE)Tj ET EMC /Artifact <>BDC q 1 i -.26004 342.884 349.502 -172.5 re W* n 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n q 350.941 0 0 -174.013 -.5535 343.614 cm /Im2 Do Q EMC Q endstream endobj 36 0 obj <>/XObject<>/ExtGState<>>> endobj 52 0 obj <> endobj 57 0 obj <> endobj 62 0 obj <> endobj 65 0 obj <>stream /Artifact <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 414.6031 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ /F2 1 Tf 15.355 0 TD [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 154 244.0624 Tm -.005 Tc [(Hansa mark)9.8(etplace facilitated the sale of illegal)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 341.3583 244.0624 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 143 244.0624 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 154 232.0624 Tm 0 0 0 1 k -.005 Tc [(drugs, t)9.8(o)10.3(xic chemicals, malwar)9.3(e, counter)-7.3(f)11.7(eit)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 327.0506 232.0624 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 220.0624 Tm -.005 Tc (identication documents and other illegal)Tj ET EMC /LBody <>BDC BT 9 0 0 9 317.311 220.0624 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 208.0623 Tm -.005 Tc [(ser)-8.8(vices. )19.5(This tak)9.8(edown r)9.3(esulted in the arr)9.3(est of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 342.5713 208.0623 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 196.0623 Tm -.005 Tc [(hundr)9.3(eds of people and was done at the same)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 336.3768 196.0623 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 184.0623 Tm -.005 Tc [(time as the AlphaBa)7.3(y tak)9.8(edown.)]TJ ET EMC /LBody <>BDC BT 5.4 0 0 5.4 280.5753 186.7623 Tm 0 Tc (4)Tj ET EMC /LBody <>BDC BT 9 0 0 9 283.5626 184.0623 Tm -.005 Tc -.0195 Tw [( The)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 300.5301 184.0623 Tm 0 Tc 0 Tw ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 172.0623 Tm -.005 Tc [(Netherlands National High-T)48.4(ech Crime Unit)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 323.4677 172.0623 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 160.0623 Tm -.005 Tc [(\(NH)14.2(T)13.7(CU\) was cr)9.3(edited with this successful)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 322.8394 160.0623 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 148.0623 Tm -.005 Tc [(tak)9.8(edown. )19.5(The police seiz)7.8(ed mor)9.3(e than 2,500)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 332.0834 148.0623 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 136.0623 Tm -.005 Tc [(bitcoins, along with details of o)7.3(v)6.4(er 26,000)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 317.243 136.0623 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 124.0623 Tm -.005 Tc [(tr)19.5(ansactions. Hundr)9.3(eds of arr)9.3(ests followed)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 322.5527 124.0623 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 112.0623 Tm -.005 Tc [(because of the information gather)9.3(ed. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 154 94.0623 Tm [(Russian Anonymous Mark)9.8(etplace \(RAMP\) dealt)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 341.2733 94.0623 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 143 94.0623 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 154 82.0623 Tm 0 0 0 1 k -.005 Tc [(in all sor)-24.4(ts of illegal pr)9.8(oducts \(primarily drugs\).)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 337.5901 82.0623 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 70.0623 Tm -.005 Tc [(Russian authorities wer)9.3(e able t)9.8(o)0( tak)9.8(e this)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 315.8993 70.0623 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 154 58.0623 Tm -.005 Tc [(mark)9.8(etplace down, but a clone sur)-7.3(faced a f)11.7(e)0(w)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 335.2815 58.0623 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 244.0624 Tm -.005 Tc [(da)7.3(ys later)60.1(. )19.5(The clone died out for unknown)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 539.1102 244.0624 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 232.0624 Tm -.005 Tc [(r)9.3(easons. A new ser)-8.8(vice called RuT)48.4(or was)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 533.1456 232.0624 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 220.0624 Tm -.005 Tc [(adv)6.4(er)-24.4(tised as an alternativ)6.4(e mark)9.8(etplace.)]TJ ET EMC /LBody <>BDC BT 5.4 0 0 5.4 534.7563 222.7623 Tm -.0083 Tc (5 )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 202.0623 Tm -.005 Tc [(The In F)12.7(r)19.5(aud W)15.2(e)0( )19.5(T)36.6(rust mark)9.8(etplace was a)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 541.6997 202.0623 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 361.5 202.0623 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 372.5 190.0623 Tm 0 0 0 1 k -.005 Tc [(par)-24.4(tially successfully shut down. A)5.4(uthorities)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 546.4109 190.0623 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 178.0623 Tm -.005 Tc [(failed t)9.8(o)0( arr)9.3(est e)6.4(v)6.4(e)0(r)-8.8(y)7.3(one inv)7.3(olv)6.4(ed. It had 10,901)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 557.9512 178.0623 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 166.0623 Tm -.005 Tc [(r)9.3(egister)9.3(ed members. )19.5(The shutdown was led b)5.4(y)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 556.4105 166.0623 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 154.0623 Tm -.005 Tc [(the FBI, but many other countries wer)9.3(e inv)7.3(olv)6.4(ed.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 561.0811 154.0623 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 142.0623 Tm -.005 Tc [(Of the 36 indicted, only 13 wer)9.3(e arr)9.3(ested. )19.5(The)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 550.3033 142.0623 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 130.0623 Tm -.005 Tc [(mark)9.8(etplace sold cr)9.3(edit car)9.3(d numbers, taxpa)7.3(y)6.4(e)0(r)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 559.7825 130.0623 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 118.0623 Tm -.005 Tc [(numbers, compr)9.8(omised accounts and material t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 566.8103 118.0623 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 372.5 106.0623 Tm -.005 Tc [(cr)9.3(eate counter)-7.3(f)11.7(eit car)9.3(ds.)]TJ ET EMC /LBody <>BDC BT 5.4 0 0 5.4 469.0308 108.7623 Tm -.0083 Tc (6 )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 82.0623 Tm -.005 Tc [(T)48.4(oda)7.3(y)52.3(,)0( multiple mark)9.8(etplaces r)9.3(emain t)9.8(o)0( be tak)9.8(en)]TJ ET EMC /P <>BDC BT 9 0 0 9 552.2091 82.0623 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 70.0623 Tm -.005 Tc [(down, but, in some cases, authorities ha)7.3(v)6.4(e)0( acted)]TJ ET EMC /P <>BDC BT 9 0 0 9 552.2563 70.0623 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 58.0623 Tm -.005 Tc (against them.)Tj ET EMC /P <>BDC BT 5.4 0 0 5.4 415.6359 60.7623 Tm 0 Tc (7)Tj ET EMC /P <>BDC BT 9 0 0 9 418.6233 58.0623 Tm -.005 Tc [( )19.5(The frustr)19.5(ating par)-24.4(t for law)]TJ ET EMC /P <>BDC BT 9 0 0 9 526.2899 58.0623 Tm 0 Tc ( )Tj ET EMC /Artifact <>BDC BT 7 0 0 7 39.7789 24.9858 Tm [(ISA)5.4(CA JOURN)-8.8(AL)]TJ ET /GS3 gs BT 7 0 0 7 92.1285 24.9858 Tm .63 .06 1 0 k [( V)6.4(OL 5)]TJ ET EMC /Artifact <>BDC BT 7 0 0 7 13.2407 24.9858 Tm (2)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 30.704 33.462 cm 0 0 m 0 -39.377 l S Q EMC /Artifact <>BDC Q q 1 i 566 734.365 -422 -463.25 re 144 734.365 m W n 144 734.365 422 -463.25 re W n .63 .06 1 0 k /GS3 gs 144 718.865 422 15.5 re f Q 0 .35 .9 0 k /GS3 gs 1 i 144 718.865 87.1 -14.75 re 231.1 718.865 111.633 -14.75 re 342.733 718.865 111.633 -14.75 re 454.367 718.865 111.633 -14.75 re f .246 .051 .15 .003 k 144 704.115 87.1 -114.75 re 231.1 704.115 111.633 -114.75 re 342.733 704.115 111.633 -114.75 re 454.367 704.115 111.633 -114.75 re 144 494.615 87.1 -104.75 re 231.1 494.615 111.633 -104.75 re 342.733 494.615 111.633 -104.75 re 454.367 494.615 111.633 -104.75 re f .158 .015 .25 0 k 144 589.365 87.1 -94.75 re 231.1 589.365 111.633 -94.75 re 342.733 589.365 111.633 -94.75 re 454.367 589.365 111.633 -94.75 re 144 389.865 87.1 -84.75 re 231.1 389.865 111.633 -84.75 re 342.733 389.865 111.633 -84.75 re 454.367 389.865 111.633 -84.75 re f q 566 734.365 -422 -463.25 re 144 734.365 m W n 144 734.365 422 -463.25 re W n 0 0 0 0 K 0 J 0 j 2 w 10 M [] 0 d q 1 0 0 1 144 718.865 cm 0 0 m 87.1 0 l S Q Q 0 0 0 0 K 0 J 0 j 2 w 10 M [] 0 d q 1 0 0 1 231.1 718.865 cm 0 0 m 111.633 0 l S 1 0 0 1 111.633 0 cm 0 0 m 111.633 0 l S Q q 566 734.365 -422 -463.25 re 144 734.365 m W n 144 734.365 422 -463.25 re W n q 1 0 0 1 454.367 718.865 cm 0 0 m 111.633 0 l S Q 1 w q 1 0 0 1 144 704.115 cm 0 0 m 87.1 0 l S Q Q 1 w q 1 0 0 1 231.1 704.115 cm 0 0 m 111.633 0 l S 1 0 0 1 0 -114.25 cm 0 0 m 0 113.75 l S 1 0 0 1 111.633 114.25 cm 0 0 m 111.633 0 l S 1 0 0 1 0 -114.25 cm 0 0 m 0 113.75 l S Q q 566 734.365 -422 -463.25 re 144 734.365 m W n 144 734.365 422 -463.25 re W n q 1 0 0 1 454.367 704.115 cm 0 0 m 111.633 0 l S Q Q q 1 0 0 1 454.367 589.865 cm 0 0 m 0 113.75 l S 1 0 0 1 -223.267 -199.5 cm 0 0 m 0 103.75 l S 1 0 0 1 111.633 0 cm 0 0 m 0 103.75 l S 1 0 0 1 111.634 0 cm 0 0 m 0 103.75 l S Q q 566 734.365 -422 -463.25 re 144 734.365 m W n 144 734.365 422 -463.25 re W n q 1 0 0 1 144 589.365 cm 0 0 m 87.1 0 l S Q Q q 1 0 0 1 231.1 589.365 cm 0 0 m 111.633 0 l S 1 0 0 1 111.633 0 cm 0 0 m 111.633 0 l S Q q 566 734.365 -422 -463.25 re 144 734.365 m W n 144 734.365 422 -463.25 re W n q 1 0 0 1 454.367 589.365 cm 0 0 m 111.633 0 l S Q Q q 1 0 0 1 231.1 495.115 cm 0 0 m 0 93.75 l S 1 0 0 1 111.633 0 cm 0 0 m 0 93.75 l S 1 0 0 1 111.634 0 cm 0 0 m 0 93.75 l S Q q 566 734.365 -422 -463.25 re 144 734.365 m W n 144 734.365 422 -463.25 re W n q 1 0 0 1 144 494.615 cm 0 0 m 87.1 0 l S Q Q q 1 0 0 1 231.1 494.615 cm 0 0 m 111.633 0 l S 1 0 0 1 111.633 0 cm 0 0 m 111.633 0 l S Q q 566 734.365 -422 -463.25 re 144 734.365 m W n 144 734.365 422 -463.25 re W n q 1 0 0 1 454.367 494.615 cm 0 0 m 111.633 0 l S 1 0 0 1 -310.367 -104.75 cm 0 0 m 87.1 0 l S Q Q q 1 0 0 1 231.1 389.865 cm 0 0 m 111.633 0 l S 1 0 0 1 111.633 0 cm 0 0 m 111.633 0 l S Q q 566 734.365 -422 -463.25 re 144 734.365 m W n 144 734.365 422 -463.25 re W n q 1 0 0 1 454.367 389.865 cm 0 0 m 111.633 0 l S Q Q q 1 0 0 1 231.1 305.615 cm 0 0 m 0 83.75 l S 1 0 0 1 111.633 0 cm 0 0 m 0 83.75 l S 1 0 0 1 111.634 0 cm 0 0 m 0 83.75 l S Q q 566 734.365 -422 -463.25 re 144 734.365 m W n 144 734.365 422 -463.25 re W n q 1 0 0 1 144 305.115 cm 0 0 m 87.1 0 l S 1 0 0 1 0 -33.5 cm 0 0 m 87.1 0 l S Q Q q 1 0 0 1 231.1 271.615 cm 0 0 m 111.633 0 l S 1 0 0 1 111.633 0 cm 0 0 m 111.633 0 l S Q q 566 734.365 -422 -463.25 re 144 734.365 m W n 144 734.365 422 -463.25 re W n q 1 0 0 1 454.367 271.615 cm 0 0 m 111.633 0 l S Q Q q 1 0 0 1 231.1 305.115 cm 0 0 m 111.633 0 l S 1 0 0 1 111.633 0 cm 0 0 m 111.633 0 l S Q q 566 734.365 -422 -463.25 re 144 734.365 m W n 144 734.365 422 -463.25 re W n q 1 0 0 1 454.367 305.115 cm 0 0 m 111.633 0 l S Q Q q 1 0 0 1 231.1 704.615 cm 0 0 m 0 13.25 l S 1 0 0 1 111.633 0 cm 0 0 m 0 13.25 l S 1 0 0 1 111.634 0 cm 0 0 m 0 13.25 l S Q BT /F8 1 Tf 10 0 0 10 263.711 722.8654 Tm 0 0 0 0 k -.015 Tc -.006 Tw [(Figur)9.8(e )-27.9(1Botnet T)81.4(a)-.4(k)9.8(e).7(downs )-28(and Their )-28(Success)]TJ 9 0 0 9 175.8789 708.1154 Tm -.0095 Tc .0006 Tw [(Botnet)-6108.5(Botnet Description)-4308.5(T)82.6(a).1(k)10.4(e)1.6(down P)6.1(a).1(r)-22.7(t)-.1(icipants)-3351.9(E)13(v)7.9(aluation of )29.4(T)82.6(a).1(k)10.4(e).6(down)]TJ ET /GS2 gs BT /F9 1 Tf 9 0 0 9 148.0059 693.3643 Tm 0 0 0 1 k -.0096 Tc 0 Tw [(Z)10(e).5(r)9(o)-.6(Access)-9.7( )]TJ ET /GS3 gs BT /F10 1 Tf 9 0 0 9 235.1079 693.3643 Tm .82 .17 .5 .01 k 0 Tc ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 239.5181 693.3643 Tm 0 0 0 1 k -.0093 Tc .0003 Tw [( )219.8(Cr)9.7(eated in 2011)]TJ ET /GS3 gs BT /F10 1 Tf 9 0 0 9 235.1079 683.3654 Tm .82 .17 .5 .01 k 0 Tc 0 Tw ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 239.5181 683.3654 Tm 0 0 0 1 k -.0095 Tc -.0006 Tw [( )219.5(Included a peer-t)8.9(o-peer)-9.7( )]TJ .219 -1.111 TD .0005 Tw (\(P2P\) network)Tj ET /GS3 gs BT /F10 1 Tf 9 0 0 9 235.1079 663.3673 Tm .82 .17 .5 .01 k 0 Tc 0 Tw ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 239.5181 663.3673 Tm 0 0 0 1 k -.0094 Tc .0004 Tw [( )219.7(49 domains wer)9.5(e)-.1( suspected)-9.7( )]TJ .219 -1.111 TD -.0006 Tw [(of association with the)-10.1( )]TJ T* 0 Tw (botnet)Tj ET /GS3 gs BT /F10 1 Tf 9 0 0 9 235.1079 633.3703 Tm .82 .17 .5 .01 k 0 Tc ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 239.5181 633.3703 Tm 0 0 0 1 k -.0095 Tc -.0006 Tw [( )219.4(Included 18 IP addr)9.4(esses)-9.2( )21( )]TJ .219 -1.111 TD -.0098 Tc -.0003 Tw [(in E)8.2(u)-.1(r)9(o)-.5(pe)]TJ ET /GS3 gs BT /F10 1 Tf 9 0 0 9 235.1079 613.3723 Tm .82 .17 .5 .01 k 0 Tc 0 Tw ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 239.5181 613.3723 Tm 0 0 0 1 k -.0093 Tc .0003 Tw [( )219.9(Had a command and)-9.5( )]TJ .219 -1.111 TD -.0096 Tc -.0005 Tw [(contr)9.5(ol \(C&C)12.4(\) backup)-9.4( )]TJ T* -.0094 Tc 0 Tw (mechanism)Tj 11.695 11.111 TD .0003 Tw [(FBI, E)8.8(u).6(r)9.6(o)0(pean Cyber)9.7(crime)-10( )]TJ 0 -1.111 TD [(Center)60.7(, se)6.1(v)6.7(e).1(r)19.8(a).3(l high-tech)-8.9( )]TJ T* [(companies including A10)-8.9( )]TJ T* 0 Tw (Networks)Tj 12.404 3.333 TD .0003 Tw [(P)5.8(a)-.8(r)-23.2(t).1(ially successful:)-9.3( )10.1( )]TJ 0 -1.111 TD [(A)5.4(u).3(thorities t)9.4(ook down only 40)-8.7( )]TJ T* [(per)9.5(c)0(ent of its infr)19.6(astructur)9.5(e)-.3(,)-9.9( )]TJ T* [(and the tak)10.4(e).1(down aff)11.2(e).1(cted)-9.6( )]TJ T* .0005 Tw [(unsuspecting security)-9.4( )]TJ T* .0004 Tw [(monit)9.3(oring r)9.6(e).1(sear)9.6(chers.)]TJ -34.485 -7.194 TD -.0092 Tc 0 Tw [(A)24.7(v)7.9(alanche)-9.6( )]TJ ET /GS3 gs BT /F10 1 Tf 9 0 0 9 235.1172 578.6323 Tm .82 .17 .5 .01 k 0 Tc ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 239.5269 578.6323 Tm 0 0 0 1 k -.0095 Tc .0005 Tw [( )219.8(Used t)8.9(o)-.2( manage mass)-9.4( )]TJ .219 -1.111 TD -.0093 Tc .0003 Tw [(global malwar)9.9(e attacks)-8.9( )]TJ T* -.0095 Tc -.0006 Tw [(and mone)5.9(y)-.3( mule r)9.5(e)-.1(cruiting)-9( )]TJ T* -.0092 Tc 0 Tw (campaigns)Tj ET /GS3 gs BT /F10 1 Tf 9 0 0 9 235.1172 538.6364 Tm .82 .17 .5 .01 k 0 Tc ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 239.5269 538.6364 Tm 0 0 0 1 k -.0093 Tc .0003 Tw [( )219.7(Estimated t)9.2(o).1( cause)-10( )]TJ .219 -1.1111 TD [(hundr)9.7(eds of millions)-9.1( )]TJ 0 -1.111 TD [(of eur)9.6(o).5(s in damages)-9.1( )]TJ T* -.0095 Tc 0 Tw (worldwide)Tj ET /GS3 gs BT /F10 1 Tf 9 0 0 9 235.1172 498.6393 Tm .82 .17 .5 .01 k 0 Tc ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 239.5269 498.6393 Tm 0 0 0 1 k -.0094 Tc .0004 Tw [( )219.5(180 countries wer)9.5(e)0( aff)11(e)-.1(cted)]TJ 11.914 8.889 TD [(Germany)52.7(,).2( US Depar)-23.5(t)0(ment of)-10( )]TJ 0 -1.111 TD .0005 Tw [(Justice, FBI, E)8.5(u).3(r)9.3(o)-.3(pol, W)16(e)-.3(stern)-9.4( )]TJ T* .0003 Tw [(District of P)6.8(ennsylv)7.8(a)-.7(nia and)-9.4( )]TJ T* [(global par)-23.4(t).3(ners)]TJ 12.404 3.333 TD [(Successful: Fiv)6.7(e).1( individuals)-8.9( )]TJ 0 -1.111 TD [(wer)9.5(e)-.1( arr)9.6(ested, 37 pr)9.5(emises)-9.2( )]TJ T* [(wer)9.6(e)0( sear)9.5(ched and 39)-8.9( )]TJ T* [(ser)-8.4(v)6.5(ers wer)9.6(e).1( seiz)7.2(ed. )20(T)28.7(w).3(o)-9( )]TJ T* [(hundr)9.4(ed twenty-one ser)-8.5(v)6.4(ers)-9.3( )]TJ T* -.0092 Tc .0002 Tw [(wer)9.8(e).2( tak)10.6(e).2(n offline via abuse)-9.7( )]TJ T* -.0094 Tc .0004 Tw [(notifications. 800,000)-8.9( )]TJ T* [(domains wer)9.7(e).1( seiz)7.2(ed, sink)-8.5( )]TJ T* .0005 Tw [(holed or block)10.2(ed.)]TJ -34.485 -1.639 TD -.0096 Tc 0 Tw [(Gamarue/Andr)9.2(omeda)]TJ ET /GS3 gs BT /F10 1 Tf 9 0 0 9 235.126 483.8973 Tm .82 .17 .5 .01 k 0 Tc ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 239.5361 483.8973 Tm 0 0 0 1 k -.0098 Tc -.0003 Tw [( )219.4(Distributed 80 malwar)9(e)-10.6( )]TJ .219 -1.111 TD -.0093 Tc .0003 Tw [(species t)9.4(o).1( an a)7.3(v)6.6(er)19.7(age of 1)-8.8( )]TJ T* (million machines per month)Tj ET /GS3 gs BT /F10 1 Tf 9 0 0 9 235.126 453.9003 Tm .82 .17 .5 .01 k 0 Tc 0 Tw ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 239.5361 453.9003 Tm 0 0 0 1 k -.0095 Tc -.0006 Tw [( )219.1(Mor)9.4(e)-.1( than 1,500 domain)-9.3( )]TJ .219 -1.111 TD -.0098 Tc .0008 Tw [(names wer)8.9(e).5( seiz)7.7(ed)]TJ ET /GS3 gs BT /F10 1 Tf 9 0 0 9 235.126 433.9023 Tm .82 .17 .5 .01 k 0 Tc 0 Tw ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 239.5361 433.9023 Tm 0 0 0 1 k -.0093 Tc .0003 Tw [( )219.9(Se)6(v)6.7(e)0(n C&C ser)-8.3(v)6.5(ers wer)9.7(e)-10( )]TJ .219 -1.111 TD -.0091 Tc .0001 Tw (sink holed)Tj ET /GS3 gs BT /F10 1 Tf 9 0 0 9 235.126 413.9043 Tm .82 .17 .5 .01 k 0 Tc 0 Tw ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 239.5361 413.9043 Tm 0 0 0 1 k -.0095 Tc .0005 Tw [( )219.6(223 countries and mor)9.4(e)-10.2( )]TJ .219 -1.111 TD -.0093 Tc .0003 Tw [(than 2 million de)6.3(vices)-8.9( )]TJ T* 0 Tw [(inf)11.3(e).1(cted)]TJ 11.695 10.0001 TD .0003 Tw [(FBI, Germany)52.9(,).3( E)8.9(u).7(r)9.7(o).1(pol, J-CA)62.5(T)106.7(,)-9.7( )]TJ 0 -1.1111 TD [(E)8.8(u).5(r)9.6(o).1(just and priv)7.6(ate-sect)9.3(o).5(r)-9.5( )]TJ T* -.0098 Tc 0 Tw [(par)-24(t)-.5(ners)]TJ 12.404 2.2221 TD -.0093 Tc .0003 Tw [(P)5.7(a)-.7(r)-23.3(t).3(ially successful: Char)9.7(ges)-9( )]TJ 0 -1.1111 TD -.0095 Tc .0005 Tw [(wer)9.4(e)-.3( dr)9.4(opped after the bot)-10.2( )]TJ T* -.0093 Tc .0003 Tw [(cr)9.7(eat)9.2(o).1(rs helped authorities)-9.1( )]TJ 0 -1.111 TD [(understand and catch other)-9.5( )]TJ T* -.0097 Tc -.0193 Tw [(cyber)9.1(c)-.4(riminals. The )-19.9(criminals)-9.5( )]TJ T* -.0095 Tc .0005 Tw [(r)9.3(e)-.3(turned US$5,400.)]TJ -34.485 -6.0829 TD -.0098 Tc 0 Tw [(Mir)18.8(a).5(i)-9.5( )]TJ ET /GS3 gs BT /F10 1 Tf 9 0 0 9 235.1353 379.1653 Tm .82 .17 .5 .01 k 0 Tc ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 239.5449 379.1653 Tm 0 0 0 1 k -.0093 Tc .0003 Tw [( )219.8(Hijack)10.5(ed millions of IoT)10.6( )]TJ .219 -1.111 TD [(de)6(vices \(including security)-9.2( )]TJ T* [(camer)19.6(a)-.9(s, home r)9.5(o)-.1(uters,)-9.9( )]TJ T* -.0199 Tc 0 Tw [(DV)-10.2(R)-11(s)-9.3(\))]TJ ET /GS3 gs BT /F10 1 Tf 9 0 0 9 235.1353 339.1693 Tm .82 .17 .5 .01 k 0 Tc ()Tj ET /GS2 gs BT /F9 1 Tf 9 0 0 9 239.5449 339.1693 Tm 0 0 0 1 k -.0095 Tc -.0006 Tw [( )219.3(Many sites/de)5.8(vices wer)9.3(e)-10.3( )]TJ .219 -1.111 TD -.0093 Tc .0003 Tw [(for)9.7(c).1(ed offline)]TJ 11.695 5.556 TD .0002 Tw [(FBI)-11157.7(P)5.9(ar)-23.1(tially successful:)-9.2( )]TJ 12.404 -1.111 TD .0003 Tw [(V)22.1(a)-.7(riations exist. Because)-9.8( )]TJ T* [(thr)9.5(e)-.1(e bot cr)9.4(eat)9.2(o)-.1(rs helped)-9.7( )]TJ T* [(the authorities, the)6.1(y)-.2( r)9.6(e).1(ceiv)6.5(ed)-9.6( )]TJ T* [(fiv)6.5(e).1( y)6.8(e).1(ars pr)9.7(obation, 2,500)-8.9( )]TJ T* -.0095 Tc .0005 Tw [(hours of community ser)-8.5(vice)-10.1( )]TJ T* -.0093 Tc .0003 Tw [(and wer)9.5(e).1( for)9.6(c).1(ed t)9.2(o).1( r)9.7(e)0(turn)-9.1( )]TJ T* -.0095 Tc 0 Tw (US$127,000.)Tj 6 0 0 6 148 296.6153 Tm -.0092 Tc .0002 Tw [(Sour)9.1(ce: Based on Adhikan, R.; Micr)9.1(o)-.9(soft)53.9(s).1( Z)9.5(e).7(r)9.1(o)-.8(Access Botnet )19.6(T)56.1(a)-.7(k)9.9(e).7(down No Mission Accomplished,)83.4( )]TJ /F11 1 Tf 39.1792 0 TD -.01 Tc 0 Tw [(T)48.6(e)-1.6(chNewsW)14.7(orld)]TJ /F9 1 Tf 6.096 0 TD -.0093 Tc .0003 Tw (, 9 December 2013, )Tj /F11 1 Tf 7.5742 0 TD 0 Tw [(https:/)109(/)-.3(www)60.9(.technewsworld.com/st)9.4(o)-.6(r)-7.6(y/ )]TJ -52.8493 -1.167 TD (79586.html)Tj /F9 1 Tf 4.3065 0 TD .0002 Tw [(; E)8.6(u).7(r)9.2(o)-.8(pol, )52.4()58.1(A)24.5(v)8.4(alanche)39.9( Network Dismantled in International Cyber Oper)19.2(ation,)82.4( 1 December 2016, )]TJ /F11 1 Tf 36.447 0 TD 0 Tw [(https:/)109(/).1(www)61(.eur)10.6(opol.eur)10.5(opa.eu/newsr)10.3(oom/news/%E2%80%98a)8.5(v)8.4(a).6(lanche)21.1( )]TJ -40.7535 -1.167 TD [(%E2%80%99-network-dismantled-in-international-cyber-oper)20.5(a).8(tion; )]TJ /F9 1 Tf 24.78 0 TD .0004 Tw [(Micr)8.9(osoft Security)52.3(,)-.1( Micr)8.9(o)-1.2(soft )20(T)48.9(e).5(ams Up With Law Enfor)8.9(c)-1.2(ement and Other Par)-24.1(tners t)9.8(o)-1.2( Disrupt Gamarue)-9.5( )]TJ -24.78 -1.167 TD [(\(Andr)9(o)-1(meda\),)82.3( 4 December 2017)]TJ ET EMC endstream endobj 66 0 obj <>/ExtGState<>>> endobj 82 0 obj <> endobj 87 0 obj <> endobj 92 0 obj <> endobj 97 0 obj <> endobj 102 0 obj <> endobj 117 0 obj <> endobj 122 0 obj <> endobj 123 0 obj <>stream /Artifact <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ /F2 1 Tf 15.355 0 TD [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /Artifact <>BDC BT /F1 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA JOURN)-8.8(AL)]TJ ET /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm .63 .06 1 0 k [( V)6.4(OL 5)]TJ ET EMC /Artifact <>BDC BT 7 0 0 7 584.9167 23.0228 Tm (3)Tj ET EMC /P <>BDC /GS2 gs BT 9 0 0 9 36.9471 698.7538 Tm 0 0 0 1 k -.005 Tc [(enfor)9.3(cement authorities is that because ther)9.3(e ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 231.1259 698.7538 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 686.7538 Tm -.005 Tc [(so many criminal or)9.3(ganizations, any v)7.3(oid opened b)5.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 240.1335 686.7538 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 674.7538 Tm -.005 Tc [(tak)9.8(edowns is gener)19.5(ally quickly lled b)5.4(y)0( other)]TJ ET EMC /P <>BDC BT 9 0 0 9 211.9874 674.7538 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 662.7538 Tm -.005 Tc [(perpetr)19.5(at)9.8(ors. It is an ongoing challenge for law)]TJ ET EMC /P <>BDC BT 9 0 0 9 219.9911 662.7538 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 650.7538 Tm -.005 Tc [(enfor)9.3(cement ar)9.8(ound the world. )]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 36.9471 626.7538 Tm [(Other Cyberr)9.3(esponse Successes )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 36.9471 614.7538 Tm [(Aside fr)9.8(om bots, botnets and criminal)]TJ ET EMC /P <>BDC BT 9 0 0 9 185.0265 614.7538 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 602.7538 Tm -.005 Tc [(mark)9.8(etplaces, ther)9.3(e ar)9.3(e other types of malicious)]TJ ET EMC /P <>BDC BT 9 0 0 9 226.7412 602.7538 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 590.7538 Tm -.005 Tc [(activity on the Internet. )19.5(The following information)]TJ ET EMC /P <>BDC BT 9 0 0 9 230.5657 590.7538 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 578.7538 Tm -.005 Tc [(details other wa)7.3(ys that criminals misuse the)]TJ ET EMC /P <>BDC BT 9 0 0 9 210.5382 578.7538 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 566.7538 Tm -.005 Tc [(Internet for personal gain and why it is impor)-24.4(tant t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 238.6451 566.7538 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 554.7538 Tm -.005 Tc [(addr)9.3(ess cyber)9.3(criminal activity)52.3(. Instances of)]TJ ET EMC /P <>BDC BT 9 0 0 9 207.3479 554.7538 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 542.7538 Tm -.005 Tc [(malicious cybersoftwar)9.3(e and corr)9.3(esponding)]TJ ET EMC /P <>BDC BT 9 0 0 9 210.2469 542.7538 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 530.7538 Tm -.005 Tc [(tak)9.8(edowns include the following: )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 512.7538 Tm [(In December 2016, 34 teenagers wer)9.3(e arr)9.3(ested)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 231.9356 512.7538 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 36.9471 512.7538 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 47.9471 500.7538 Tm 0 0 0 1 k -.005 Tc [(b)5.4(y)0( the FBI, E)8.3(u)0(r)9.8(opol and law enfor)9.3(cement in 12)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 227.9532 500.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 488.7538 Tm -.005 Tc [(E)8.3(u)0(r)9.8(opean nations for conducting distributed)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 221.2845 488.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 476.7538 Tm -.005 Tc [(denial of ser)-8.8(vice \(DDoS\) attacks for fun.)]TJ ET EMC /LBody <>BDC BT 5.4 0 0 5.4 205.1454 479.4538 Tm 0 Tc (8)Tj ET EMC /LBody <>BDC BT 9 0 0 9 208.1325 476.7538 Tm -.005 Tc -.0195 Tw [( The)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 225.1001 476.7538 Tm 0 Tc 0 Tw ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 464.7538 Tm -.005 Tc [(teenagers paid for softwar)9.3(e that would ood)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 223.2575 464.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 452.7538 Tm -.005 Tc [(websites and ser)-8.8(v)6.4(ers with massiv)6.4(e amounts of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 233.1618 452.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 440.7538 Tm -.005 Tc [(data that left them inaccessible t)9.8(o)0( users. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 422.7538 Tm (In April 2017, Interpol, working with countries)Tj ET EMC /LBody <>BDC BT 9 0 0 9 225.1255 422.7538 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 36.9471 422.7538 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 47.9471 410.7538 Tm 0 0 0 1 k -.005 Tc [(\(China, Indonesia, Mala)7.3(ysia, My)7.3(anmar)60.1(,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 197.9908 410.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 398.7538 Tm -.005 Tc [(Philippines, Singapor)9.3(e, )19.5(Thailand, Vietnam\) and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 230.0659 398.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 386.7538 Tm -.005 Tc [(priv)7.3(ate or)9.3(ganizations \(Boo)7.8(z Allen Hamilt)9.8(on,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 218.1028 386.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 374.7538 Tm -.005 Tc [(British )19.5(T)48.4(elecom, Cyber Def)11.7(ense Institute, F)10.3(o)0(r)-24.4(tinet,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 241.5349 374.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 362.7538 Tm -.005 Tc [(Kaspersky Labs, P)5.4(alo Alt)9.8(o Networks, )19.5(T)36.6(r)9.3(end)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 216.4921 362.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 350.7538 Tm -.005 Tc [(Micr)9.8(o\), t)9.8(ook down 270 websites and about 8,800)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 239.6416 350.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 338.7538 Tm -.005 Tc [(command and contr)9.8(ol \(C&C)12.7(\) ser)-8.8(v)6.4(ers that hosted)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 238.7462 338.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 326.7538 Tm -.005 Tc [(malwar)9.3(e, launched DDoS attacks and mor)9.3(e.)]TJ ET EMC /LBody <>BDC BT 5.4 0 0 5.4 219.8461 329.4538 Tm 0 Tc (9)Tj ET EMC /LBody <>BDC BT 9 0 0 9 222.8333 326.7538 Tm ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 314.7538 Tm -.005 Tc [(Thr)9.3(ee suspects wer)9.3(e arr)9.3(ested in Spain and two)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 232.4093 314.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 302.7538 Tm -.005 Tc [(wer)9.3(e arr)9.3(ested in the United Kingdom. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 284.7538 Tm [(In Ma)7.3(y 2017, Russia)32.7()54.7(s)0( Ministr)-8.8(y of Internal Affairs)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 237.6599 284.7538 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 36.9471 284.7538 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 47.9471 272.7538 Tm 0 0 0 1 k -.005 Tc [(with the help of the Gr)9.8(oup-IB \(a v)6.4(endor of thr)9.3(eat)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 234.932 272.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 260.7538 Tm -.005 Tc [(intelligence\) arr)9.3(ested the Cr)9.8(on gang of 20 for)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 224.5772 260.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 248.7538 Tm -.005 Tc [(running a mobile Cr)9.8(onbot, a banking tr)9.8(ojan, and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 233.7827 248.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 236.7538 Tm -.005 Tc [(fak)9.8(e apps and websites. )19.5(Their malwar)9.3(e inf)11.7(ected)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 236.1393 236.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 224.7538 Tm -.005 Tc [(mor)9.3(e than 1 million Andr)9.8(oid de)6.4(vices t)9.8(o)0( mak)9.8(e)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 223.6179 224.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 212.7538 Tm -.005 Tc [(tr)19.5(ansf)11.7(ers and inter)9.3(cept bank text messages. )19.5(The)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 238.3706 212.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 200.7538 Tm -.005 Tc [(gang opened mor)9.3(e than 6,000 accounts and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 221.6215 200.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 188.7538 Tm -.005 Tc [(made mor)9.3(e than US$890,000.)]TJ ET EMC /LBody <>BDC BT 5.4 0 0 5.4 165.2849 191.4537 Tm -.0083 Tc (10 )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 170.7538 Tm -.005 Tc [(In July 2017, two Latvian citiz)7.8(ens wer)9.3(e arr)9.3(ested)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 234.208 170.7538 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 36.9471 170.7538 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 47.9471 158.7538 Tm 0 0 0 1 k -.005 Tc [(b)5.4(y)0( the US Depar)-24.4(tment of Justice \(DOJ\) and the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 232.5191 158.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 146.7538 Tm -.005 Tc [(FBI for running the VisuT)48.4(otal-for-Cr)9.8(ooks)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 210.6462 146.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 134.7538 Tm -.005 Tc [(ser)-8.8(vices, which included a softwar)9.3(e t)9.8(ool)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 205.1727 134.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 122.7538 Tm -.005 Tc [(\(Scan4Y)31.8(ou\) that check)9.8(ed malwar)9.3(e for visibility t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 240.5043 122.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 110.7538 Tm -.005 Tc [(antivirus softwar)9.3(e.)]TJ ET EMC /LBody <>BDC BT 5.4 0 0 5.4 121.0921 113.4537 Tm -.0083 Tc (11, 12, 13)Tj ET EMC /LBody <>BDC BT 9 0 0 9 143.6292 110.7538 Tm -.005 Tc [( )19.5(The r)9.3(esults of this crime)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 241.1917 110.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 98.7538 Tm -.005 Tc [(ser)-8.8(vice wer)9.3(e the theft of 40 million cr)9.3(edit and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 225.5341 98.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 86.7538 Tm -.005 Tc [(debit car)9.3(d numbers, appr)9.8(o)10.3(ximately 70 million)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 225.256 86.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 74.7538 Tm -.005 Tc [(addr)9.3(esses, phone numbers, and other personal)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 232.7618 74.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 62.7538 Tm -.005 Tc [(information. It caused one r)9.3(etailer US$292)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 214.4694 62.7538 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 549.6951 Tm -.005 Tc [(million in losses. )19.5(The softwar)9.3(e was also used in)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 454.2547 549.6951 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 537.6951 Tm -.005 Tc [(the de)6.4(v)6.4(elopment of Citadel. )19.5(The hack)9.8(ers wer)9.3(e)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 446.4895 537.6951 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 525.6951 Tm -.005 Tc [(sentenced t)9.8(o)0( 14 y)6.4(ears in prison. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 507.6951 Tm [(In A)5.4(ugust 2017, technology or)9.3(ganizations)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 429.8383 507.6951 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 255.4471 507.6951 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 266.4471 495.6951 Tm 0 0 0 1 k -.005 Tc [(\(Akamai, CloudFlar)9.3(e, Flashpoint, Google, Or)19.5(acle)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 452.6167 495.6951 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 483.6951 Tm -.005 Tc [(Dyn, RiskIQ, )19.5(T)48.4(eam Cymru and others\) t)9.8(ook down)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 455.7301 483.6951 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 471.6951 Tm -.005 Tc [(the Wir)9.3(eX Andr)9.8(oid botnet that was hosted b)5.4(y)0( the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 456.8925 471.6951 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 459.6951 Tm -.005 Tc [(Google Pla)7.3(y st)9.8(or)9.3(e. )19.5(The malwar)9.3(e that was)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 427.4399 459.6951 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 447.6951 Tm -.005 Tc [(associated with appr)9.8(o)10.3(ximately 300 applications)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 454.582 447.6951 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 435.6951 Tm -.005 Tc [(\(apps\) was hidden in media pla)7.3(y)6.4(ers, ringt)9.8(ones)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 447.0069 435.6951 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 423.6951 Tm -.005 Tc [(and st)9.8(or)19.5(age managers.)]TJ ET EMC /LBody <>BDC BT 5.4 0 0 5.4 357.6207 426.395 Tm -.0083 Tc (14, 15)Tj ET EMC /LBody <>BDC BT 9 0 0 9 371.8766 423.6951 Tm -.005 Tc [( )19.5(The botnet had)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 433.5295 423.6951 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 411.6951 Tm -.005 Tc [(spr)9.3(ead t)9.8(o)0( users in mor)9.3(e than 100 countries. )]TJ ET EMC /P <>BDC /GS3 gs BT /F3 1 Tf 11 0 0 11 255.4471 385.6951 Tm .9 .53 .1 0 k [(K)12.7(e)6.4(y Pr)17.6(oblem Ar)9.3(eas )]TJ ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 255.4471 367.6951 Tm 0 0 0 1 k (Despite these successes, challenges persist and)Tj ET EMC /P <>BDC BT 9 0 0 9 446.376 367.6951 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 355.6951 Tm -.005 Tc [(often pr)9.3(e)6.4(v)6.4(ent or deter complete success, e.g., )]TJ ET EMC /P <>BDC BT 9 0 0 9 255.4471 343.6951 Tm [(in the ar)9.3(eas of people \(and or)9.3(ganizations\),)]TJ ET EMC /P <>BDC BT 9 0 0 9 421.384 343.6951 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 331.6951 Tm -.005 Tc [(enfor)9.3(cement, pr)9.8(ocesses and techniques, and)]TJ ET EMC /P <>BDC BT 9 0 0 9 432.1911 331.6951 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 319.6951 Tm -.005 Tc [(technology)52.3(. )19.5(Ther)9.3(e ar)9.3(e some pr)9.8(oblems/challenges)]TJ ET EMC /P <>BDC BT 9 0 0 9 450.4948 319.6951 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 307.6951 Tm -.005 Tc (associated with taking down bots, botnets and)Tj ET EMC /P <>BDC BT 9 0 0 9 438.9557 307.6951 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 295.6951 Tm -.005 Tc [(cyber)9.3(crime mark)9.8(etplaces. )]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 255.4471 271.6951 Tm (Bots and Botnets )Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 255.4471 259.6951 Tm [(Challenges in taking down bots and botnets ar)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 442.69 259.6951 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 247.6951 Tm -.005 Tc [(numer)9.8(ous and include: )]TJ ET EMC /LBody <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 266.4471 229.6951 Tm .82 .17 .5 .01 k [(Inadequate coor)9.3(dination among softwar)9.3(e)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 431.0576 229.6951 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC BT /F5 1 Tf 12 0 0 12 255.4471 229.6951 Tm ()Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 266.4471 217.6951 Tm -.005 Tc [(v)6.4(endors or Internet malwar)9.3(e r)9.3(esear)9.3(chers)]TJ ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 428.8857 217.6951 Tm 0 0 0 1 k (It is)Tj ET EMC /LBody <>BDC BT 9 0 0 9 450.0831 217.6951 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 205.6951 Tm -.005 Tc [(better t)9.8(o)0( st)9.8(op bad beha)7.3(vior than let it pr)9.8(opagate)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 454.0956 205.6951 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 193.6951 Tm -.005 Tc [(out of contr)9.8(ol. )19.5(T)48.4(o)0( that end, ther)9.3(e should be)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 433.3411 193.6951 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 181.6951 Tm -.005 Tc [(specially focused gr)9.8(oups dedicated t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 416.2535 181.6951 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 169.6951 Tm -.005 Tc [(consistency in pr)9.8(o)7.3(viding softwar)9.3(e solutions. )]TJ ET EMC /LBody <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 266.4471 151.6951 Tm .82 .17 .5 .01 k [(F)16.6(ailur)9.3(e t)14.7(o)0( update antivirus \(A)37.6(V)-9.7(\))0( softwar)9.3(e in a)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 444.3824 151.6951 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC BT /F5 1 Tf 12 0 0 12 255.4471 151.6951 Tm ()Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 266.4471 139.6951 Tm -.005 Tc [(timely manner or consistently acr)17.6(oss v)6.4(endors)]TJ ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 448.6867 139.6951 Tm 0 0 0 1 k 0 Tc ()Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 127.6951 Tm -.005 Tc [(Because updating A)42.5(V)0( signatur)9.3(es is a)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 410.424 127.6951 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 115.6951 Tm -.005 Tc [(ne)6.4(v)6.4(er-ending task, system owners nd it tedious)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 456.0927 115.6951 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 103.6951 Tm -.005 Tc [(and unpr)9.8(otable. Howe)6.4(v)6.4(e)0(r)60.1(,)0( patching system)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 438.9604 103.6951 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 91.6951 Tm -.005 Tc [(softwar)9.3(e and updating A)42.5(V)0( systems in a timely)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 446.608 91.6951 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 79.6951 Tm -.005 Tc [(manner is critical, especially if ther)9.3(e ar)9.3(e )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 67.6951 Tm [(z)7.8(e)0(r)9.8(o-da)7.3(y vulner)19.5(abilities. )]TJ ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d q 1 0 0 1 570.156 31.289 cm 0 0 m 0 -39.376 l S Q EMC /Artifact <>BDC 0 .35 .9 0 k /GS3 gs 255.447 565.033 346.317 140.471 re f EMC /Artifact <>BDC BT 14 0 0 14 288.6932 675.9336 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [(THE)17.5( FRUSTRA)63(TING)17.6( P)67.3(A)0(R)39(T)37.1( FOR)17.5( L)-9.3(A)33.7(W)17.5( )]TJ -1.7143 -1.2857 TD [(ENFORCEMEN)14.1(T)37.1( A)8.3(UTHORI)14.1(TIES)17.5( IS)17.5( )19.6(TH)-8.8(A)63(T)37.1( )]TJ T* [(BECA)8.3(USE)17.5( )19.6(THERE)17.5( ARE)17.5( SO)17.5( M)-8.8(A)0(N)13.6(Y)17.5( CRIMIN)-8.8(AL)17.5( )]TJ T* [(ORGANIZ)-6.4(A)63(TIONS)17.5(,)35.1( AN)13.6(Y)17.5( V)6.3(OID)17.5( OPENED)17.5( B)26.8(Y)17.5( )]TJ T* [(T)38.5(AKEDOWNS)17.5( IS)17.5( GENERALL)116.7(Y)17.5( QUICKL)116.7(Y)17.5( FILLED)17.5( )]TJ T* [(B)26.8(Y)17.5( O)13.2(THER)17.5( PERPE)-9.8(TRA)63(T)13.6(ORS)17.5(.)]TJ ET EMC /Artifact <>BDC Q q 1 i 450.436 594.159 23 -23.75 re W n .81961 .15686 .49412 .015686 k /GS3 gs q 1 0 0 1 468.54 583.871 cm 0 0 m -.099 -2.881 -.579 -5.075 -1.441 -6.582 c -2.301 -8.089 -3.643 -9.223 -5.464 -9.985 c -3.279 -13.462 l -.265 -12.104 1.937 -10.101 3.328 -7.452 c 4.389 -5.464 4.918 -2.252 4.918 2.186 c 4.918 10.382 l -4.67 10.382 l -4.67 0 l 0 0 l h -12.64 0 m -12.739 -2.881 -13.219 -5.075 -14.081 -6.582 c -14.941 -8.089 -16.283 -9.223 -18.104 -9.985 c -15.919 -13.462 l -12.905 -12.104 -10.703 -10.101 -9.312 -7.452 c -8.251 -5.464 -7.722 -2.252 -7.722 2.186 c -7.722 10.382 l -17.31 10.382 l -17.31 0 l -12.64 0 l f Q EMC /Artifact <>BDC Q q 1 i 261.64 701.359 23 -23.75 re W n .81961 .15686 .49412 .015686 k /GS3 gs q 1 0 0 1 266.558 687.991 cm 0 0 m .099 2.881 .579 5.075 1.441 6.582 c 2.301 8.089 3.643 9.223 5.464 9.985 c 3.279 13.462 l .265 12.104 -1.937 10.101 -3.328 7.452 c -4.389 5.464 -4.918 2.252 -4.918 -2.186 c -4.918 -10.382 l 4.67 -10.382 l 4.67 0 l 0 0 l h 12.64 0 m 12.739 2.881 13.219 5.075 14.081 6.582 c 14.941 8.089 16.283 9.223 18.104 9.985 c 15.919 13.462 l 12.905 12.104 10.703 10.101 9.312 7.452 c 8.251 5.464 7.722 2.252 7.722 -2.186 c 7.722 -10.382 l 17.31 -10.382 l 17.31 0 l 12.64 0 l f Q EMC Q endstream endobj 124 0 obj <>/ExtGState<>>> endobj 130 0 obj <> endobj 135 0 obj <> endobj 140 0 obj <> endobj 145 0 obj <> endobj 150 0 obj <> endobj 155 0 obj <> endobj 160 0 obj <> endobj 165 0 obj <> endobj 170 0 obj <> endobj 181 0 obj <> endobj 186 0 obj <> endobj 191 0 obj <> endobj 192 0 obj <>stream /Artifact <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 414.6031 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ /F2 1 Tf 15.355 0 TD [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /LBody <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 155 643.5065 Tm .82 .17 .5 .01 k -.005 Tc [(K)12.7(eeping up with aler)-24.4(ts and commer)9.3(cial softwar)9.3(e)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 347.9074 643.5065 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC BT /F5 1 Tf 12 0 0 12 144 643.5065 Tm ()Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 155 631.5065 Tm -.005 Tc (patches)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 186.8399 631.5065 Tm 0 0 0 1 k [(Not all or)9.3(ganizations ar)9.3(e committed t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 345.5519 631.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 619.5065 Tm -.005 Tc [(sta)7.3(ying informed about security aler)-24.4(ts and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 321.4214 619.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 607.5065 Tm -.005 Tc [(implementing softwar)9.3(e security patches. )19.5(This lax)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 348.3975 607.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 595.5065 Tm -.005 Tc [(attitude ma)7.3(y lea)7.3(v)6.4(e)0( an enterprise open t)9.8(o)0( system)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 344.0875 595.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 583.5065 Tm -.005 Tc [(compr)9.8(omises, malwar)9.3(e inf)11.7(ections, data)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 310.2205 583.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 571.5065 Tm -.005 Tc [(br)9.3(eaches, etc. )]TJ ET EMC /LBody <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 155 553.5065 Tm .82 .17 .5 .01 k [(Number of hack)9.8(ers)]TJ ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 231.478 553.5065 Tm 0 0 0 1 k [(The number of hack)9.8(ers)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 329.7213 553.5065 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 144 553.5065 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 155 541.5065 Tm 0 0 0 1 k -.005 Tc [(continues t)9.8(o)0( gr)9.8(ow because malwar)9.3(e t)9.8(ools ha)7.3(v)6.4(e)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 340.496 541.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 529.5065 Tm -.005 Tc [(become easy t)9.8(o)0( use, and hack)9.8(ers pr)9.8(o)7.3(vide each)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 338.8392 529.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 517.5065 Tm -.005 Tc [(other with tr)19.5(aining and assistance. )]TJ ET EMC /LBody <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 155 499.5065 Tm .82 .17 .5 .01 k [(Thr)9.3(eat of DDoS attacks)]TJ ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 247.7633 499.5065 Tm 0 0 0 1 k (Because Internet)Tj ET EMC /LBody <>BDC BT 9 0 0 9 321.442 499.5065 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 144 499.5065 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 155 487.5065 Tm 0 0 0 1 k -.005 Tc [(ser)-8.8(vice pr)9.8(o)7.3(viders \(ISPs\) pr)9.8(o)7.3(vide ser)-8.8(vices t)9.8(o)0( many)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 348.8271 487.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 475.5065 Tm -.005 Tc [(cust)9.8(omers, attacking ISPs \(e.g., via DDoS)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 317.0629 475.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 463.5065 Tm -.005 Tc [(attacks\) ma)7.3(y aff)11.7(ect the pr)9.8(oductivity)52.3(, r)9.3(eputation)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 338.6417 463.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 451.5065 Tm -.005 Tc [(and pr)9.8(ot of all users who shar)9.3(e common)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 319.214 451.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 439.5065 Tm -.005 Tc [(ser)-8.8(vices \(e.g., cloud pr)9.8(oducts and platforms\). )]TJ ET EMC /LBody <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 155 421.5065 Tm .82 .17 .5 .01 k -.02 Tc [(F)16.6(ailur)9.3(e t)14.7(o)0( tak)9.8(e down malwar)9.3(e completely or)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 323.2091 421.5065 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC BT /F5 1 Tf 12 0 0 12 144 421.5065 Tm ()Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 155 409.5065 Tm -.02 Tc [(thor)17.6(oughly)]TJ ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 196.6929 409.5065 Tm 0 0 0 1 k [(Online malwar)9.3(e tak)9.8(edowns ma)7.3(y miss)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 346.1093 409.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 397.5065 Tm -.02 Tc [(de)6.4(vices that ar)9.3(e not power)9.3(ed on or not included b)5.4(y)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 346.9192 397.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 385.5065 Tm -.02 Tc [(activity analysis, ther)9.3(eb)5.4(y lea)7.3(ving unr)9.3(emedied)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 324.1281 385.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 373.5065 Tm -.02 Tc [(de)6.4(vices. F)10.3(ollow-up tak)9.8(edowns ar)9.3(e needed t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 323.8595 373.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 361.5065 Tm -.02 Tc [(incr)9.3(ease the per)9.3(centage of er)19.5(adication.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 303.5782 361.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 155 343.5065 Tm .82 .17 .5 .01 k -.005 Tc [(Compr)17.6(omised computer systems)]TJ ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 287.9759 343.5065 Tm 0 0 0 1 k (Content)Tj ET EMC /LBody <>BDC BT 9 0 0 9 326.2131 343.5065 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 144 343.5065 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 155 331.5065 Tm 0 0 0 1 k -.005 Tc [(management systems \(CMSs\) \(e.g., W)15.2(o)0(r)9.3(dPr)9.3(ess\))]TJ ET EMC /LBody <>BDC BT 9 0 0 9 344.9134 331.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 319.5065 Tm -.005 Tc [(ar)9.3(e common tar)9.3(gets for hack)9.8(ers because these)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 341.5901 319.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 307.5064 Tm -.005 Tc [(websites ar)9.3(e easily cr)9.3(eated but not alwa)7.3(ys)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 321.4698 307.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 295.5064 Tm -.005 Tc (maintained \(i.e., updated or patched\). )Tj ET EMC /LBody <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 155 277.5064 Tm .82 .17 .5 .01 k [(Cyber)-24.4(thr)9.3(eats on the IoT)]TJ ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 5.4 0 0 5.4 249.5157 280.2064 Tm 0 0 0 1 k -.0083 Tc (16)Tj ET EMC /LBody <>BDC BT 9 0 0 9 255.4902 277.5064 Tm -.0052 Tc .0002 Tw [(Devices consider)5.4(ed)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 339.5063 277.5064 Tm 0 Tc 0 Tw ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 144 277.5064 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 155 265.5064 Tm 0 0 0 1 k -.0052 Tc .0002 Tw [(t)5.7(o)-.2( be in the categor)-5.5(y of IoT)11.5( ar)5.4(e often developed)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 341.1984 265.5064 Tm 0 Tc 0 Tw ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 253.5064 Tm -.0051 Tc .0001 Tw [(with almost no thought t)5.8(o)-.1( security)31.3(. Many devices)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 348.0634 253.5064 Tm 0 Tc 0 Tw ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 241.5064 Tm -.0052 Tc .0002 Tw [(have been compr)5.7(omised and ar)5.4(e used as par)-14.8(t of)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 345.618 241.5064 Tm 0 Tc 0 Tw ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 229.5064 Tm -.005 Tc [(a botnet for DDoS attacks. IoT)11.7( technology has)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 336.2321 229.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 217.5064 Tm -.0051 Tc .0001 Tw [(intr)5.8(oduced new thr)5.5(eats t)5.8(o)-.1( personal privacy and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 339.8417 217.5064 Tm 0 Tc 0 Tw ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 205.5064 Tm -.005 Tc (sometimes enterprise information. )Tj ET EMC /LBody <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 155 187.5064 Tm .82 .17 .5 .01 k [(De)6.4(vice congur)14.7(ation complexity and e)6.4(v)7.3(olving)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 336.4144 187.5064 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC BT /F5 1 Tf 12 0 0 12 144 187.5064 Tm ()Tj ET EMC /LBody <>BDC BT /F3 1 Tf 9 0 0 9 155 175.5064 Tm -.005 Tc (technology)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 199.4447 175.5064 Tm 0 0 0 1 k [(Computing de)6.4(vices ha)7.3(v)6.4(e)0( changed in)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 348.762 175.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 163.5064 Tm -.005 Tc [(terms of capabilities and f)11.7(eatur)9.3(es and,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 306.2062 163.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 151.5064 Tm -.005 Tc [(consequently)52.3(, their complexity has gr)9.8(own.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 319.9766 151.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 139.5064 Tm -.005 Tc [(Suppor)-24.4(t staff need continual/periodic tr)19.5(aining t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 344.8149 139.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 127.5064 Tm -.005 Tc [(k)9.8(eep pace with the thr)9.3(eats. )19.5(This mak)9.8(es for an)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 334.0702 127.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 115.5064 Tm -.005 Tc [(une)6.4(v)6.4(en tar)9.3(get envir)9.8(onment in which some)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 319.6622 115.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 103.5064 Tm -.005 Tc [(tar)9.3(gets ar)9.3(e weak)9.8(er than r)9.3(equir)9.3(ed. It only tak)9.8(es)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 334.5865 103.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 155 91.5064 Tm -.005 Tc [(one vulner)19.5(ability t)9.8(o)0( gain access t)9.8(o)0( a network. )]TJ ET EMC /LBody <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 373.5 643.5065 Tm .82 .17 .5 .01 k [(W)15.2(eaponiz)7.8(ed ar)-24.4(ticial intelligence \(AI\))]TJ ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 523.5909 643.5065 Tm 0 0 0 1 k 0 Tc ()Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 362.5 643.5065 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 373.5 631.5065 Tm 0 0 0 1 k -.005 Tc [(W)15.2(eaponiz)7.8(ed AI is a new and gr)9.8(owing thr)9.3(eat)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 543.3676 631.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.5 619.5065 Tm -.005 Tc [(v)6.4(ect)9.8(or that enables hack)9.8(ers \(and bots\) t)9.8(o)0( nd)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 552.2932 619.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.5 607.5065 Tm -.005 Tc [(and compr)9.8(omise systems quickly)52.3(. )]TJ ET EMC /LBody <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 373.5 589.5065 Tm .82 .17 .5 .01 k [(Inadequate inf)11.7(ection and detection t)14.7(ools)]TJ ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 534.7334 589.5065 Tm 0 0 0 1 k 0 Tc ()Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 362.5 589.5065 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 373.5 577.5065 Tm 0 0 0 1 k -.005 Tc (Intrusion detection systems \(IDS\) and intrusion)Tj ET EMC /LBody <>BDC BT 9 0 0 9 558.9224 577.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.5 565.5065 Tm -.005 Tc [(pr)9.3(e)6.4(v)6.4(ention t)9.8(ools \(IPS\) ma)7.3(y not be quick enough)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 559.8201 565.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.5 553.5065 Tm -.005 Tc [(t)9.8(o)0( st)9.8(op z)7.8(e)0(r)9.8(o-da)7.3(y and AI-driv)6.4(en attacks.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 524.4733 553.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.5 541.5065 Tm -.005 Tc [(Information security pr)9.8(of)11.7(essionals must be)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 543.2128 541.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.5 529.5065 Tm -.005 Tc [(vigilant t)9.8(o)0( new thr)9.3(eats and t)9.8(ools that can help)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 552.6998 529.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.5 517.5065 Tm -.005 Tc [(them pr)9.8(otect the or)9.3(ganization. )]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 362.5 325.5065 Tm [(Cyber)9.3(crime Mark)9.8(etplaces )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 362.5 313.5065 Tm [(Cyber)9.3(criminal mark)9.8(etplaces allow criminals and)]TJ ET EMC /P <>BDC BT 9 0 0 9 551.3511 313.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 301.5064 Tm -.005 Tc [(associated or)9.3(ganizations t)9.8(o)0( conduct business and,)]TJ ET EMC /P <>BDC BT 9 0 0 9 562.7651 301.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 289.5064 Tm -.005 Tc [(thus, constitute a worldwide pr)9.8(oblem. Some of the)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.6777 289.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 277.5064 Tm -.005 Tc [(challenges in taking down the cyber)9.3(crime)]TJ ET EMC /P <>BDC BT 9 0 0 9 525.6583 277.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 362.5 265.5064 Tm -.005 Tc [(mark)9.8(etplaces include: )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 373.5 247.5064 Tm -.02 Tc [(De)6.4(v)6.4(eloping countries that ar)9.3(e often challenged)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 550.8066 247.5064 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 362.5 247.5064 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 373.5 235.5064 Tm 0 0 0 1 k -.02 Tc [(with weak economies and labor mark)9.8(ets ar)9.3(e ripe)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 558.4091 235.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.5 223.5064 Tm -.02 Tc [(for the gr)9.8(owth of cyber)9.3(criminal activity)52.3(. )19.5(This)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 539.7675 223.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.5 211.5064 Tm -.02 Tc [(continues t)9.8(o)0( be a pr)9.8(oblem because Internet)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 538.9404 211.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.5 199.5064 Tm -.02 Tc [(access is expanding in many de)6.4(v)6.4(eloping countries.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 566.9526 199.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.5 181.5064 Tm -.005 Tc [(Hack)9.8(ers can adapt. W)15.2(eak economies often)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 542.8293 181.5064 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 362.5 181.5064 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 373.5 169.5064 Tm 0 0 0 1 k -.005 Tc [(encour)19.5(age criminal endea)7.3(v)7.3(ors, including fr)19.5(aud,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 556.7835 169.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.5 157.5064 Tm -.005 Tc [(malwar)9.3(e, identity theft, data theft, etc. Ha)7.3(ving)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 551.5385 157.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.5 145.5064 Tm -.005 Tc [(r)9.3(eadily a)7.3(v)7.3(ailable t)9.8(ools, ser)-8.8(vices and buy)7.3(able)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 545.1697 145.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.5 133.5064 Tm -.005 Tc [(information mak)9.8(es data and identity pr)9.8(otection a)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 565.5703 133.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.5 121.5064 Tm -.005 Tc (big challenge. )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.5 103.5064 Tm [(Criminals shar)9.3(e malicious softwar)9.3(e t)9.8(ools, tricks)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 560.3496 103.5064 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 362.5 103.5064 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 373.5 91.5064 Tm 0 0 0 1 k -.005 Tc (\(e.g., phishing\) and techniques \(e.g., poisoned)Tj ET EMC /LBody <>BDC BT 9 0 0 9 554.3345 91.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 373.5 79.5064 Tm -.005 Tc [(domains and web ser)-8.8(vices\) with one another)60.1(.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 551.8031 79.5064 Tm 0 Tc ( )Tj ET EMC /Artifact <>BDC BT 7 0 0 7 39.7789 24.9858 Tm [(ISA)5.4(CA JOURN)-8.8(AL)]TJ ET /GS3 gs BT 7 0 0 7 92.1285 24.9858 Tm .63 .06 1 0 k [( V)6.4(OL 5)]TJ ET EMC /Artifact <>BDC BT 7 0 0 7 13.2407 24.9858 Tm (4)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 30.704 33.462 cm 0 0 m 0 -39.377 l S Q EMC /Artifact <>BDC 0 .35 .9 0 k /GS3 gs 362.5 346.057 205.5 157.326 re f EMC /Artifact <>BDC BT 14 0 0 14 395.7461 473.8128 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [(WEAPONIZED)17.5( AI)17.5( IS)17.5( A)17.5( )]TJ -1.7143 -1.2857 TD [(NEW)17.6( AND)17.5( GROWING)17.6( )]TJ T* [(THREA)63(T)37.1( VEC)14.1(T)13.6(O)0(R)17.5( )19.6(TH)-8.8(A)63(T)37.1( )]TJ T* [(EN)-8.8(ABLES)17.5( H)-8.8(A)5.3(CKERS)17.5( )17.6(\()17.5(AND)17.5( )]TJ T* [(BO)13.2(T)7.8(S)17.5(\))35.1( )19.6(T)13.6(O)17.6( FIND)17.5( AND)17.6( )]TJ T* [(COMPROMISE)17.5( SY)7.8(STEMS)17.5( )]TJ T* 0 Tw [(QUICKL)116.7(Y)120.6(.)]TJ ET EMC /Artifact <>BDC Q q 1 i 434.725 375.786 23 -23.75 re W n .81961 .15686 .49412 .015686 k /GS3 gs q 1 0 0 1 452.829 365.498 cm 0 0 m -.099 -2.881 -.579 -5.075 -1.441 -6.582 c -2.301 -8.089 -3.643 -9.223 -5.464 -9.985 c -3.279 -13.462 l -.265 -12.104 1.937 -10.101 3.328 -7.452 c 4.389 -5.464 4.918 -2.252 4.918 2.186 c 4.918 10.382 l -4.67 10.382 l -4.67 0 l 0 0 l h -12.64 0 m -12.739 -2.881 -13.219 -5.075 -14.081 -6.582 c -14.941 -8.089 -16.283 -9.223 -18.104 -9.985 c -15.919 -13.462 l -12.905 -12.104 -10.703 -10.101 -9.312 -7.452 c -8.251 -5.464 -7.722 -2.252 -7.722 2.186 c -7.722 10.382 l -17.31 10.382 l -17.31 0 l -12.64 0 l f Q EMC /Artifact <>BDC Q q 1 i 368.693 499.239 23 -23.75 re W n .81961 .15686 .49412 .015686 k /GS3 gs q 1 0 0 1 373.611 485.871 cm 0 0 m .099 2.881 .579 5.075 1.441 6.582 c 2.301 8.089 3.643 9.223 5.464 9.985 c 3.279 13.462 l .265 12.104 -1.937 10.101 -3.328 7.452 c -4.389 5.464 -4.918 2.252 -4.918 -2.186 c -4.918 -10.382 l 4.67 -10.382 l 4.67 0 l 0 0 l h 12.64 0 m 12.739 2.881 13.219 5.075 14.081 6.582 c 14.941 8.089 16.283 9.223 18.104 9.985 c 15.919 13.462 l 12.905 12.104 10.703 10.101 9.312 7.452 c 8.251 5.464 7.722 2.252 7.722 -2.186 c 7.722 -10.382 l 17.31 -10.382 l 17.31 0 l 12.64 0 l f Q EMC Q endstream endobj 193 0 obj <>/ExtGState<>>> endobj 199 0 obj <> endobj 204 0 obj <> endobj 209 0 obj <> endobj 214 0 obj <> endobj 223 0 obj <> endobj 228 0 obj <> endobj 233 0 obj <> endobj 238 0 obj <> endobj 243 0 obj <> endobj 252 0 obj <>stream /Artifact <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ /F2 1 Tf 15.355 0 TD [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /Artifact <>BDC BT /F1 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA JOURN)-8.8(AL)]TJ ET /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm .63 .06 1 0 k [( V)6.4(OL 5)]TJ ET EMC /Artifact <>BDC BT 7 0 0 7 584.9167 23.0228 Tm (5)Tj ET EMC /LBody <>BDC /GS2 gs BT 9 0 0 9 47.9471 643.5065 Tm 0 0 0 1 k -.005 Tc [(The criminal under)9.3(gr)9.8(ound includes many)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 208.6772 643.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 631.5065 Tm -.005 Tc [(cybermark)9.8(etplaces wher)9.3(e criminals buy and sell)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 237.0092 631.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 619.5065 Tm -.005 Tc [(information, identities, ser)-8.8(vices, t)9.8(ools/malwar)9.3(e,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 233.807 619.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 607.5065 Tm -.005 Tc [(etc., all of which mak)9.8(e pr)9.3(e)6.4(v)6.4(enting attacks a)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 217.614 607.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 595.5065 Tm -.005 Tc [(daunting task for law enfor)9.3(cement. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 577.5065 Tm [(Gr)9.8(owing cyber)9.3(criminal tr)9.3(ends such as spear)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 220.7448 577.5065 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 36.9471 577.5065 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 47.9471 565.5065 Tm 0 0 0 1 k -.005 Tc [(phishing and r)19.5(ansomwar)9.3(e ar)9.3(e the latest wa)7.3(ys)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 226.237 565.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 553.5065 Tm -.005 Tc [(criminals obtain/steal mone)6.4(y)52.3(.)0( Because the t)9.8(ools)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 237.7861 553.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 541.5065 Tm -.005 Tc [(ar)9.3(e so ubiquit)9.8(ous, the)6.4(y ar)9.3(e dicult t)9.8(o)0( eliminate. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 523.5065 Tm [(The sharing of malwar)9.3(e sour)9.3(ce code \(i.e.,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 210.3134 523.5065 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 36.9471 523.5065 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 47.9471 511.5065 Tm 0 0 0 1 k -.005 Tc [(v)7.3(ariations\) is a gr)9.8(owing thr)9.3(eat because)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 200.7178 511.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 499.5065 Tm -.005 Tc [(perpetr)19.5(at)9.8(ors often do not f)11.7(ear captur)9.3(e or criminal)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 240.7801 499.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 487.5065 Tm -.005 Tc [(consequences. New malwar)9.3(e and sour)9.3(ce code)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 231.8641 487.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 475.5065 Tm -.005 Tc [(pr)9.8(olif)11.7(er)19.5(ate easily acr)9.8(oss the dark web and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 211.8636 475.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 463.5065 Tm -.005 Tc [(cyber)9.3(criminal mark)9.8(etplaces. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 445.5065 Tm [(Adv)7.3(anced softwar)9.3(e de)6.4(v)6.4(elopment t)9.8(ools often)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 222.5565 445.5065 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 36.9471 445.5065 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 47.9471 433.5065 Tm 0 0 0 1 k -.005 Tc [(eliminate the need for coders. Malwar)9.3(e)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 201.769 433.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 421.5065 Tm -.005 Tc [(pr)9.8(ogr)19.5(ammers do not ha)7.3(v)6.4(e)0( t)9.8(o)0( be numer)9.8(ous)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 213.9728 421.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 409.5065 Tm -.005 Tc [(because t)9.8(ools ar)9.3(e r)9.3(eadily a)7.3(v)7.3(ailable in the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 207.2142 409.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 397.5065 Tm -.005 Tc [(under)9.3(gr)9.8(ound t)9.8(o)0( construct code easily)52.3(. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 379.5065 Tm [(Illicit softwar)9.3(e testing t)9.8(ools and ser)-8.8(vices ensur)9.3(e)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 235.7571 379.5065 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 36.9471 379.5065 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 47.9471 367.5065 Tm 0 0 0 1 k -.005 Tc [(that malwar)9.3(e e)6.4(v)7.3(ades detection. Quality check)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 226.7546 367.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 355.5065 Tm -.005 Tc [(pr)9.8(ogr)19.5(ams a)7.3(v)7.3(ailable in the cyber)9.3(criminal)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 202.4932 355.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 343.5065 Tm -.005 Tc [(mark)9.8(etplace ar)9.3(e used t)9.8(o)0( test and conrm that)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 227.9236 343.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 331.5065 Tm -.005 Tc [(malwar)9.3(e cannot be found b)5.4(y)0( A)42.5(V)0( softwar)9.3(e. )]TJ ET EMC /P <>BDC BT 9 0 0 9 36.9471 307.5064 Tm [(Many k)9.8(e)6.4(y challenges cut acr)9.8(oss bots, botnets and)]TJ ET EMC /P <>BDC BT 9 0 0 9 233.4209 307.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 295.5064 Tm -.005 Tc [(cyber)9.3(criminal mark)9.8(etplaces: )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 277.5064 Tm [(If coders ar)9.3(e not caught, ther)9.3(e is no deterr)9.3(ent.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 227.4229 277.5064 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 36.9471 277.5064 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 47.9471 265.5064 Tm 0 0 0 1 k -.005 Tc [(T)55.2(a)0(k)9.8(edowns often apply only t)9.8(o)0( equipment and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 229.4407 265.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 253.5064 Tm -.005 Tc [(softwar)9.3(e and, thus, pr)9.8(oduce only par)-24.4(tial solutions)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 241.6546 253.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 241.5064 Tm -.005 Tc [(if the originat)9.8(ors and par)-24.4(ticipants ar)9.3(e not caught. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 223.5064 Tm [(Monetar)-8.8(y gains ar)9.3(e often not tr)19.5(ack)9.8(ed or)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 203.7456 223.5064 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 36.9471 223.5064 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 47.9471 211.5064 Tm 0 0 0 1 k -.005 Tc [(r)9.3(eco)7.3(v)6.4(e)0(r)9.3(ed. Mor)9.3(e work needs t)9.8(o)0( be done t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 213.6675 211.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 199.5064 Tm -.005 Tc [(r)9.3(ecaptur)9.3(e the spoils of malicious activity)52.3(.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 209.0764 199.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 187.5064 Tm -.005 Tc [(Whene)6.4(v)6.4(er criminals can hide their gains for later)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 237.8631 187.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 175.5064 Tm -.005 Tc [(use, the)6.4(y win. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 157.5064 Tm -.02 Tc [(P)6.4(enalties for cyber)9.3(criminals ar)9.3(e often light, and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 226.7879 157.5064 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 36.9471 157.5064 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 47.9471 145.5064 Tm 0 0 0 1 k -.02 Tc [(many loopholes existfor example, perpetr)19.5(at)9.8(ors)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 231.9289 145.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 133.5064 Tm -.02 Tc [(ma)7.3(y not be pr)9.8(osecuted if the)6.4(y cause no harm)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 219.9049 133.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 121.5064 Tm -.02 Tc [(within their own countries. Ne)6.4(v)6.4(e)0(r)-24.4(theless, the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 216.249 121.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 109.5064 Tm -.02 Tc [(damage can be de)6.4(v)7.3(astating, not only t)9.8(o)0( individuals)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 240.1387 109.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 97.5064 Tm -.02 Tc [(and small or)9.3(ganizations, but also t)9.8(o)0( some lar)9.3(ge)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 228.0664 97.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 85.5064 Tm -.02 Tc [(enterprises. P)6.4(enalties should be standar)9.3(diz)7.8(ed)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 221.549 85.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 73.5064 Tm -.02 Tc [(acr)9.8(oss countries, and monetar)-8.8(y gains should be)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 230.5446 73.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 61.5064 Tm -.02 Tc [(uniformly r)9.3(eco)7.3(v)6.4(e)0(r)9.3(ed fr)9.8(om cyber)9.3(criminals.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 204.4796 61.5064 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 643.5065 Tm -.005 Tc [(Bots, botnets and criminal cybermark)9.8(etplaces)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 446.986 643.5065 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 255.4471 643.5065 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 266.4471 631.5065 Tm 0 0 0 1 k -.005 Tc [(can be r)9.3(eplaced quickly)52.3(. )19.5(T)55.2(a)0(k)9.8(edowns ar)9.3(e often)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 445.4831 631.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 619.5065 Tm -.005 Tc [(only tempor)19.5(ar)-8.8(y)52.3(,)0( because other bad act)9.8(ors rush in)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 458.3374 619.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 607.5065 Tm -.005 Tc [(t)9.8(o)0( tak)9.8(e the place of the original perpetr)19.5(at)9.8(ors. )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 589.5065 Tm [(Malwar)9.3(e backups ensur)9.3(e continuity)52.3(.)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 408.0036 589.5065 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 255.4471 589.5065 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 266.4471 577.5065 Tm 0 0 0 1 k -.005 Tc [(Cyber)9.3(criminals follow best pr)19.5(actices and often)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 449.6689 577.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 565.5065 Tm -.005 Tc [(r)9.3(eco)7.3(v)6.4(er systems fr)9.8(om backups. Additionally)52.3(, t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 450.4908 565.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 553.5065 Tm -.005 Tc [(be competitiv)6.4(e, new mark)9.8(et entr)19.5(ants cop)5.4(y the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 445.5491 553.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 541.5065 Tm -.005 Tc (code and the setup of existing criminal)Tj ET EMC /LBody <>BDC BT 9 0 0 9 419.2178 541.5065 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 529.5065 Tm -.005 Tc [(mark)9.8(etplaces. )]TJ ET EMC /P <>BDC /GS3 gs BT /F3 1 Tf 11 0 0 11 255.4471 335.5065 Tm .9 .53 .1 0 k [(Cyberhy)6.4(giene )]TJ ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 255.4471 317.5065 Tm 0 0 0 1 k [(Good cyberhy)6.4(giene is often not ingr)19.5(ained in the)]TJ ET EMC /P <>BDC BT 9 0 0 9 440.6938 317.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 305.5065 Tm -.005 Tc [(pr)19.5(actices of small- and medium-siz)7.8(ed enterprises,)]TJ ET EMC /P <>BDC BT 9 0 0 9 451.5111 305.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 293.5065 Tm -.005 Tc [(which tend t)9.8(o)0( gr)9.8(ow with r)9.3(elativ)6.4(ely little thought)]TJ ET EMC /P <>BDC BT 9 0 0 9 438.477 293.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 281.5065 Tm -.005 Tc [(de)6.4(v)7.3(oted t)9.8(o)0( data security)52.3(. Pr)19.5(acticing good)]TJ ET EMC /P <>BDC BT 9 0 0 9 416.517 281.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 269.5065 Tm -.005 Tc [(cyberhy)6.4(giene helps k)9.8(eep data saf)11.7(e and well)]TJ ET EMC /P <>BDC BT 9 0 0 9 426.2761 269.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 257.5065 Tm -.005 Tc [(pr)9.8(otected against theft and outside attacks. All)]TJ ET EMC /P <>BDC BT 9 0 0 9 440.1302 257.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 245.5065 Tm -.005 Tc [(or)9.3(ganizations need t)9.8(o)0( implement saf)11.7(eguar)9.3(ds that)]TJ ET EMC /P <>BDC BT 9 0 0 9 449.7202 245.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 233.5065 Tm -.005 Tc [(pr)9.3(e)6.4(v)6.4(ent the unauthoriz)7.8(ed r)9.3(elease of their data and)]TJ ET EMC /P <>BDC BT 9 0 0 9 451.3167 233.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 221.5065 Tm -.005 Tc (their possible corruption. Without the knowledge or)Tj ET EMC /P <>BDC BT 9 0 0 9 456.8132 221.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 209.5065 Tm -.005 Tc [(exper)-24.4(tise t)9.8(o)0( secur)9.3(e computing de)6.4(vices and)]TJ ET EMC /P <>BDC BT 9 0 0 9 424.6512 209.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 197.5065 Tm -.005 Tc [(envir)9.8(onments, the or)9.3(ganization is at risk.)]TJ ET EMC /P <>BDC BT 9 0 0 9 414.8943 197.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 185.5065 Tm -.005 Tc [(Regar)9.3(dless of siz)7.8(e, cyberhy)6.4(giene should be)]TJ ET EMC /P <>BDC BT 9 0 0 9 424.7249 185.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 173.5065 Tm -.005 Tc [(standar)9.3(d pr)19.5(actice acr)9.8(oss all or)9.3(ganizations with)]TJ ET EMC /P <>BDC BT 9 0 0 9 439.5469 173.5065 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 161.5065 Tm -.005 Tc [(digital pr)9.8(ocessing envir)9.8(onments. )]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 255.4471 137.5065 Tm [(P)6.4(erimeter )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 255.4471 125.5064 Tm [(Pr)9.8(otecting the perimeter is the rst ar)9.3(ea of concern)]TJ ET EMC /P <>BDC BT 9 0 0 9 456.5573 125.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 113.5064 Tm -.005 Tc [(because it is the connection t)9.8(o)0( the Internet and the)]TJ ET EMC /P <>BDC BT 9 0 0 9 455.1379 113.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 101.5064 Tm -.005 Tc [(door)-8.3(wa)7.3(y int)9.8(o the digital envir)9.8(onment. Not)]TJ ET EMC /P <>BDC BT 9 0 0 9 418.1209 101.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 89.5064 Tm -.005 Tc [(implementing the saf)11.7(eguar)9.3(ds r)9.3(esults in a risk t)9.8(o)0( the)]TJ ET EMC /P <>BDC BT 9 0 0 9 457.5638 89.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 77.5064 Tm -.005 Tc [(condentiality)52.3(, integrity and a)7.3(v)7.3(ailability of data.)]TJ ET EMC /P <>BDC BT 9 0 0 9 439.5647 77.5064 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 65.5064 Tm -.005 Tc [(Security teams should pr)9.8(otect the perimeter b)5.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 439.917 65.5064 Tm 0 Tc ( )Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d q 1 0 0 1 570.156 31.289 cm 0 0 m 0 -39.376 l S Q EMC /Artifact <>BDC 0 .35 .9 0 k /GS3 gs 254.949 358.245 205.5 160.251 re f EMC /Artifact <>BDC BT 14 0 0 14 288.1955 488.9263 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [(REGARDLESS)17.5( OF)17.5( SIZE)17.5(,)35.1( )]TJ -1.7143 -1.2857 TD [(CYBERH)13.6(Y)14.1(GIENE)17.5( SHOULD)17.5( BE)17.5( )]TJ T* [(ST)38.5(AND)10.2(ARD)17.5( PRA)5.3(C)14.1(TICE)17.5( )]TJ T* [(A)5.3(CROSS)17.5( ALL)17.5( )]TJ T* [(ORGANIZ)-6.4(A)63(TIONS)17.5( WI)14.1(TH)17.6( )]TJ T* [(DIGI)14.1(T)38.5(A)0(L)17.5( PROCESSING)17.5( )]TJ T* 0 Tw [(ENVIRONMEN)14.1(T)7.8(S)17.5(.)]TJ ET EMC /Artifact <>BDC Q q 1 i 382.018 390.22 23 -23.75 re W n .81961 .15686 .49412 .015686 k /GS3 gs q 1 0 0 1 400.122 379.932 cm 0 0 m -.099 -2.881 -.579 -5.075 -1.441 -6.582 c -2.301 -8.089 -3.643 -9.223 -5.464 -9.985 c -3.279 -13.462 l -.265 -12.104 1.937 -10.101 3.328 -7.452 c 4.389 -5.464 4.918 -2.252 4.918 2.186 c 4.918 10.382 l -4.67 10.382 l -4.67 0 l 0 0 l h -12.64 0 m -12.739 -2.881 -13.219 -5.075 -14.081 -6.582 c -14.941 -8.089 -16.283 -9.223 -18.104 -9.985 c -15.919 -13.462 l -12.905 -12.104 -10.703 -10.101 -9.312 -7.452 c -8.251 -5.464 -7.722 -2.252 -7.722 2.186 c -7.722 10.382 l -17.31 10.382 l -17.31 0 l -12.64 0 l f Q EMC /Artifact <>BDC Q q 1 i 261.143 514.352 23 -23.75 re W n .81961 .15686 .49412 .015686 k /GS3 gs q 1 0 0 1 266.061 500.984 cm 0 0 m .099 2.881 .579 5.075 1.441 6.582 c 2.301 8.089 3.643 9.223 5.464 9.985 c 3.279 13.462 l .265 12.104 -1.937 10.101 -3.328 7.452 c -4.389 5.464 -4.918 2.252 -4.918 -2.186 c -4.918 -10.382 l 4.67 -10.382 l 4.67 0 l 0 0 l h 12.64 0 m 12.739 2.881 13.219 5.075 14.081 6.582 c 14.941 8.089 16.283 9.223 18.104 9.985 c 15.919 13.462 l 12.905 12.104 10.703 10.101 9.312 7.452 c 8.251 5.464 7.722 2.252 7.722 -2.186 c 7.722 -10.382 l 17.31 -10.382 l 17.31 0 l 12.64 0 l f Q EMC Q endstream endobj 253 0 obj <>/ExtGState<>>> endobj 285 0 obj <>stream /Artifact <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 414.6031 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ /F2 1 Tf 15.355 0 TD [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 143 657.9563 Tm -.005 Tc (dening boundaries, assigning ownership and)Tj ET EMC /P <>BDC BT 9 0 0 9 323.4739 657.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 645.9563 Tm -.005 Tc [(cr)9.3(eating accountability)52.3(, implementing boundar)-8.8(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 329.6979 645.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 633.9563 Tm -.005 Tc [(r)9.3(ewalls and Internet gatewa)7.3(ys, and establishing an)]TJ ET EMC /P <>BDC BT 9 0 0 9 346.4008 633.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 621.9563 Tm -.005 Tc [(inv)6.4(ent)9.8(or)-8.8(y of har)9.3(dwar)9.3(e and softwar)9.3(e. )19.5(This inv)6.4(ent)9.8(or)-8.8(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 342.271 621.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 609.9563 Tm -.005 Tc [(can help ensur)9.3(e that nothing is missed when)]TJ ET EMC /P <>BDC BT 9 0 0 9 318.6619 609.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 597.9563 Tm -.005 Tc [(per)-7.3(forming vulner)19.5(ability scans and that)]TJ ET EMC /P <>BDC BT 9 0 0 9 296.8033 597.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 585.9563 Tm -.005 Tc [(unauthoriz)7.8(ed softwar)9.3(e and har)9.3(dwar)9.3(e can be)]TJ ET EMC /P <>BDC BT 9 0 0 9 316.4052 585.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 573.9563 Tm -.005 Tc [(r)9.3(ecogniz)7.8(ed and r)9.3(emo)7.3(v)6.4(ed. )]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 143 549.9563 Tm (Network )Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 143 537.9563 Tm [(The network should be pr)9.8(otected b)5.4(y)0( installing)]TJ ET EMC /P <>BDC BT 9 0 0 9 322.1799 537.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 525.9563 Tm -.005 Tc [(appr)9.8(opriate t)9.8(ools and/or applying appr)9.8(opriate)]TJ ET EMC /P <>BDC BT 9 0 0 9 322.2239 525.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 513.9563 Tm -.005 Tc [(techniques. Segmentation with enhanced contr)9.8(ols)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.6304 513.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 501.9563 Tm -.005 Tc [(t)9.8(o)0( pr)9.8(otect sensitiv)6.4(e and condential information)]TJ ET EMC /P <>BDC BT 9 0 0 9 332.0601 501.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 489.9563 Tm -.005 Tc [(exists should be assur)9.3(ed. Additionally)52.3(, user-access)]TJ ET EMC /P <>BDC BT 9 0 0 9 343.0741 489.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 477.9563 Tm -.005 Tc [(contr)9.8(ols ar)9.3(e necessar)-8.8(y)52.3(.)0( )19.5(These contr)9.8(ols include)]TJ ET EMC /P <>BDC BT 9 0 0 9 325.8747 477.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 465.9563 Tm -.005 Tc [(minimizing administr)19.5(ativ)6.4(e accounts, applying )]TJ ET EMC /P <>BDC BT 9 0 0 9 143 453.9563 Tm (the principle of least privilege and using )Tj ET EMC /P <>BDC BT 9 0 0 9 143 441.9563 Tm [(multifact)9.8(or authentication. )]TJ ET EMC /P <>BDC BT 9 0 0 9 143 417.9563 Tm [(Softwar)9.3(e and systems \(e.g., antivirus softwar)9.3(e,)]TJ ET EMC /P <>BDC BT 9 0 0 9 327.2316 417.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 405.9563 Tm -.005 Tc (patch management systems and network)Tj ET EMC /P <>BDC BT 9 0 0 9 306.76 405.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 393.9563 Tm -.005 Tc [(monit)9.8(oring t)9.8(ools [such as IDS]\) can also help)]TJ ET EMC /P <>BDC BT 9 0 0 9 318.6952 393.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 381.9563 Tm -.005 Tc [(pr)9.8(otect the network. E)12.7(v)6.4(ent log monit)9.8(oring systems)]TJ ET EMC /P <>BDC BT 9 0 0 9 341.3932 381.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 369.9563 Tm -.005 Tc [(and centr)19.5(aliz)7.8(ed monit)9.8(oring dashboar)9.3(ds ma)7.3(y also be)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.2246 369.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 357.9563 Tm -.005 Tc [(useful t)9.8(ools in pr)9.8(otecting the network. Enterprises)]TJ ET EMC /P <>BDC BT 9 0 0 9 338.8773 357.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 345.9563 Tm -.005 Tc (should also consider scanning incoming email,)Tj ET EMC /P <>BDC BT 9 0 0 9 327.5894 345.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 333.9563 Tm -.005 Tc [(periodically scanning de)6.4(vices for vulner)19.5(abilities, and)]TJ ET EMC /P <>BDC BT 9 0 0 9 347.3556 333.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 321.9562 Tm -.005 Tc [(contr)9.8(olling wir)9.3(eless and r)9.3(emote access. )]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 143 297.9563 Tm [(De)6.4(vices )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 143 285.9563 Tm [(De)6.4(vices include ser)-8.8(v)6.4(ers, workstations, lapt)9.8(ops,)]TJ ET EMC /P <>BDC BT 9 0 0 9 326.1593 285.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 273.9563 Tm -.005 Tc [(tablets, smar)-24.4(tphones, etc. Acquisition,)]TJ ET EMC /P <>BDC BT 9 0 0 9 293.4678 273.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 261.9563 Tm -.005 Tc [(congur)19.5(ation, maintenance, encr)-8.8(yption and)]TJ ET EMC /P <>BDC BT 9 0 0 9 313.1489 261.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 249.9563 Tm -.005 Tc [(oper)19.5(ational policies need t)9.8(o)0( be implemented and)]TJ ET EMC /P <>BDC BT 9 0 0 9 334.922 249.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 237.9563 Tm -.005 Tc [(enfor)9.3(ced for all de)6.4(vices. Congur)19.5(ation standar)9.3(ds)]TJ ET EMC /P <>BDC BT 9 0 0 9 334.9034 237.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 225.9563 Tm -.005 Tc [(need t)9.8(o)0( be dened and implemented for all digital)]TJ ET EMC /P <>BDC BT 9 0 0 9 338.1324 225.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 213.9563 Tm -.005 Tc [(de)6.4(vices. Individual de)6.4(vices should be pr)9.8(otected b)5.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.0912 213.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 201.9563 Tm -.005 Tc [(implementing secur)9.3(e congur)19.5(ations t)9.8(o)0( har)9.3(den the)]TJ ET EMC /P <>BDC BT 9 0 0 9 339.378 201.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 189.9563 Tm -.005 Tc [(de)6.4(vices, maintaining mobile de)6.4(vices, and)]TJ ET EMC /P <>BDC BT 9 0 0 9 303.8071 189.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 177.9563 Tm -.005 Tc [(monit)9.8(oring and contr)9.8(olling permitted/appr)9.8(o)7.3(v)6.4(ed)]TJ ET EMC /P <>BDC BT 9 0 0 9 327.9369 177.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 165.9563 Tm -.005 Tc [(softwar)9.3(e/apps. Or)9.3(ganizations need t)9.8(o)0( ha)7.3(v)6.4(e)0( a)]TJ ET EMC /P <>BDC BT 9 0 0 9 319.9232 165.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 153.9563 Tm -.005 Tc [(pr)9.8(ocess in place t)9.8(o)0( ensur)9.3(e that only appr)9.8(o)7.3(v)6.4(ed)]TJ ET EMC /P <>BDC BT 9 0 0 9 321.7185 153.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 141.9563 Tm -.005 Tc [(softwar)9.3(e is loaded ont)9.8(o their de)6.4(vices. If saf)11.7(eguar)9.3(ds)]TJ ET EMC /P <>BDC BT 9 0 0 9 344.7166 141.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 129.9563 Tm -.005 Tc [(ar)9.3(e not in place, or)9.3(ganizations risk allowing)]TJ ET EMC /P <>BDC BT 9 0 0 9 312.7317 129.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 117.9563 Tm -.005 Tc [(malwar)9.3(e ont)9.8(o the de)6.4(vices and int)9.8(o their network,)]TJ ET EMC /P <>BDC BT 9 0 0 9 333.9014 117.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 105.9563 Tm -.005 Tc [(pr)9.8(o)7.3(viding an authoriz)7.8(ed access point for hack)9.8(ers,)]TJ ET EMC /P <>BDC BT 9 0 0 9 336.4668 105.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 93.9563 Tm -.005 Tc [(br)9.3(eaking cop)5.4(yright laws and mor)9.3(e. )]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 361.5 657.9563 Tm (Data )Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 361.5 645.9563 Tm [(Data pr)9.8(otection softwar)9.3(e and techniques \(including)]TJ ET EMC /P <>BDC BT 9 0 0 9 563.3373 645.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 633.9563 Tm -.005 Tc [(data minimization and r)9.3(eal-time scanning for)]TJ ET EMC /P <>BDC BT 9 0 0 9 538.031 633.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 621.9563 Tm -.005 Tc [(sensitiv)6.4(e data mo)7.3(v)6.4(ement\) should be used t)9.8(o)0( pr)9.8(otect)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.4619 621.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 609.9563 Tm -.005 Tc [(data. Encr)-8.8(yption for data at r)9.3(est and in tr)19.5(ansit)]TJ ET EMC /P <>BDC BT 9 0 0 9 539.5649 609.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 597.9563 Tm -.005 Tc [(should be used wher)9.3(e)6.4(v)6.4(er possible. Data should be)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.8481 597.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 585.9563 Tm -.005 Tc [(back)9.8(ed up r)9.3(egularly and tested so that the)6.4(y can be)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.4261 585.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 573.9563 Tm -.005 Tc [(r)9.3(est)9.8(or)9.3(ed in an emer)9.3(gency in the e)6.4(v)6.4(ent of data)]TJ ET EMC /P <>BDC BT 9 0 0 9 539.177 573.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 561.9563 Tm -.005 Tc [(corruption, system cr)19.5(ash or a r)19.5(ansomwar)9.3(e e)6.4(v)6.4(ent.)]TJ ET EMC /P <>BDC BT 9 0 0 9 553.8087 561.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 549.9563 Tm -.005 Tc [(Despite taking all pr)9.3(ecautions, security br)9.3(eaches)]TJ ET EMC /P <>BDC BT 9 0 0 9 551.7852 549.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 537.9563 Tm -.005 Tc [(ma)7.3(y happen, so establish and r)9.3(egularly test the)]TJ ET EMC /P <>BDC BT 9 0 0 9 546.6412 537.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 525.9563 Tm -.005 Tc [(or)9.3(ganization)39.1()54.7(s)0( incident r)9.3(esponse plan. )]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 361.5 501.9563 Tm [(Thir)9.3(d P)5.4(a)0(r)-24.4(ties )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 361.5 489.9563 Tm [(Thir)9.3(d par)-24.4(ties can be par)-24.4(tners, online information)]TJ ET EMC /P <>BDC BT 9 0 0 9 551.3413 489.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 477.9563 Tm -.005 Tc [(suppliers, Internet and CSPs, and any or)9.3(ganization)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.7933 477.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 465.9563 Tm -.005 Tc [(that pr)9.8(o)7.4(vides or shar)9.3(es data with an or)9.3(ganization.)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.3721 465.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 453.9563 Tm -.005 Tc [(The)6.4(y can e)6.4(v)6.4(en be har)9.3(dwar)9.3(e v)6.4(endors. )19.5(These thir)9.3(d)]TJ ET EMC /P <>BDC BT 9 0 0 9 551.4851 453.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 441.9563 Tm -.005 Tc [(par)-24.4(ties must be secur)9.3(ed b)5.4(y)0( using them in a secur)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.6954 441.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 429.9563 Tm -.005 Tc [(manner \(e.g., encr)-8.8(ypted tr)19.5(ac, data minimization\))]TJ ET EMC /P <>BDC BT 9 0 0 9 557.6958 429.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 417.9563 Tm -.005 Tc [(and mandating suitable security contr)9.8(ols \(e.g.,)]TJ ET EMC /P <>BDC BT 9 0 0 9 543.5167 417.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 405.9563 Tm -.005 Tc [(de)6.4(vice congur)19.5(ations, back)9.8(gr)9.8(ound checks, limiting)]TJ ET EMC /P <>BDC BT 9 0 0 9 560.1831 405.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 393.9563 Tm -.005 Tc [(building access\) in any ser)-8.8(vice and/or)]TJ ET EMC /P <>BDC BT 9 0 0 9 510.7296 393.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 381.9563 Tm -.005 Tc [(inter)9.3(connection agr)9.3(eements. Without security)]TJ ET EMC /P <>BDC BT 9 0 0 9 541.1248 381.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 369.9563 Tm -.005 Tc [(saf)11.7(eguar)9.3(ds, or)9.3(ganizations risk exposur)9.3(e of their)]TJ ET EMC /P <>BDC BT 9 0 0 9 548.8901 369.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 357.9563 Tm -.005 Tc [(data \(be the)6.4(y sensitiv)6.4(e, condential, personal, etc.\),)]TJ ET EMC /P <>BDC BT 9 0 0 9 561.8698 357.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 345.9563 Tm -.005 Tc [(the or)9.3(ganization)39.1()54.7(s)0( r)9.3(eputation and its futur)9.3(e. )]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 361.5 321.9562 Tm (Supply Chain )Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 361.5 309.9562 Tm [(The supply chain should be pr)9.8(otected b)5.4(y)0( r)9.3(equiring)]TJ ET EMC /P <>BDC BT 9 0 0 9 557.4497 309.9562 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 297.9563 Tm -.005 Tc [(security r)9.3(e)6.4(views and/or assessments and enfor)9.3(cing)]TJ ET EMC /P <>BDC BT 9 0 0 9 565.3862 297.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 285.9563 Tm -.005 Tc [(uniform le)6.4(v)6.4(els of security acr)9.8(oss the supply chain.)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.5287 285.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 273.9563 Tm -.005 Tc [(Examples of enfor)9.3(cement that can be conducted)]TJ ET EMC /P <>BDC BT 9 0 0 9 553.5604 273.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 261.9563 Tm -.005 Tc [(include inspections and r)19.5(andom visits that test)]TJ ET EMC /P <>BDC BT 9 0 0 9 545.5206 261.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 249.9563 Tm -.005 Tc [(access and authentication contr)9.8(ols, building)]TJ ET EMC /P <>BDC BT 9 0 0 9 535.2625 249.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 237.9563 Tm -.005 Tc [(security)52.3(, and incident r)9.3(esponse and contingency)]TJ ET EMC /P <>BDC BT 9 0 0 9 550.5787 237.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 225.9563 Tm -.005 Tc [(plans and pr)9.8(ocedur)9.3(es. )]TJ ET EMC /P <>BDC /GS3 gs BT /F3 1 Tf 11 0 0 11 361.5 199.9563 Tm .9 .53 .1 0 k [(Recommendations t)14.7(o)0( Reduce Risk )]TJ ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 361.5 181.9563 Tm 0 0 0 1 k [(T)48.4(o)0( r)9.3(educe risk of data br)9.3(eaches \(and many other)]TJ ET EMC /P <>BDC BT 9 0 0 9 552.6354 181.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 169.9563 Tm -.005 Tc (types of malicious activity\) on a global scale,)Tj ET EMC /P <>BDC BT 9 0 0 9 537.7334 169.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 157.9563 Tm -.005 Tc [(enterprises, v)6.4(endors and r)9.3(egulat)9.8(or)-8.8(y authorities)]TJ ET EMC /P <>BDC BT 9 0 0 9 544.5846 157.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 145.9563 Tm -.005 Tc [(should tak)9.8(e the following actions, in addition t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 547.1313 145.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 133.9563 Tm -.005 Tc [(those pr)9.3(esented pr)9.3(e)6.4(viously)52.3(. )]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 361.5 109.9563 Tm (Handling Bots and Botnets )Tj ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 361.5 97.9563 Tm [(Enterprises can per)-7.3(form many activities t)9.8(o)0( pr)9.3(e)6.4(v)6.4(ent)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.9712 97.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 85.9563 Tm -.005 Tc [(malwar)9.3(e \(e.g., bots and botnets\) fr)9.8(om gaining a)]TJ ET EMC /P <>BDC BT 9 0 0 9 548.2936 85.9563 Tm 0 Tc ( )Tj ET EMC /Artifact <>BDC BT 7 0 0 7 39.7789 24.9858 Tm [(ISA)5.4(CA JOURN)-8.8(AL)]TJ ET /GS3 gs BT 7 0 0 7 92.1285 24.9858 Tm .63 .06 1 0 k [( V)6.4(OL 5)]TJ ET EMC /Artifact <>BDC BT 7 0 0 7 13.2407 24.9858 Tm (6)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 30.704 33.462 cm 0 0 m 0 -39.377 l S Q EMC Q endstream endobj 286 0 obj <>/ExtGState<>>> endobj 294 0 obj <> endobj 299 0 obj <> endobj 304 0 obj <> endobj 309 0 obj <> endobj 314 0 obj <> endobj 319 0 obj <> endobj 334 0 obj <> endobj 339 0 obj <> endobj 344 0 obj <> endobj 349 0 obj <> endobj 358 0 obj <>stream /Artifact <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ /F2 1 Tf 15.355 0 TD [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /Artifact <>BDC BT /F1 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA JOURN)-8.8(AL)]TJ ET /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm .63 .06 1 0 k [( V)6.4(OL 5)]TJ ET EMC /Artifact <>BDC BT 7 0 0 7 584.9167 23.0228 Tm (7)Tj ET EMC /P <>BDC /GS2 gs BT 9 0 0 9 36.9471 657.9563 Tm 0 0 0 1 k -.005 Tc [(foothold in their infr)19.5(astructur)9.3(es. )19.5(The)6.4(y can r)9.3(educe)]TJ ET EMC /P <>BDC BT 9 0 0 9 228.7078 657.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 645.9563 Tm -.005 Tc [(the enterprise)39.1()54.7(s)0( cyber)19.5(attack sur)-7.3(face b)5.4(y: )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 627.9563 Tm [(Minimizing open por)-24.4(ts, pr)9.8(ot)9.8(ocols, de)6.4(vices with)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 230.5053 627.9563 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 36.9471 627.9563 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 47.9471 615.9563 Tm 0 0 0 1 k -.005 Tc [(access, and wir)9.3(eless access and accounts )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 597.9563 Tm [(Implementing hidden backups t)9.8(o)0( thwar)-24.4(t)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 204.9342 597.9563 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 36.9471 597.9563 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 47.9471 585.9563 Tm 0 0 0 1 k -.005 Tc [(r)19.5(ansomwar)9.3(e )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 567.9563 Tm [(Using v)6.4(endor-pr)9.8(o)7.3(vided security-as-a-ser)-8.8(vice t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 229.4771 567.9563 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 36.9471 567.9563 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 47.9471 555.9563 Tm 0 0 0 1 k -.005 Tc [(enhance def)11.7(ensiv)6.4(e pr)9.8(ogr)19.5(ams and delegate)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 215.4966 555.9563 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 543.9563 Tm -.005 Tc [(pr)9.3(e)6.4(v)6.4(ention t)9.8(o)0( exper)-24.4(ts )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 525.9563 Tm [(Implementing a def)11.7(ense-in-depth str)19.5(ategy)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 212.0985 525.9563 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 36.9471 525.9563 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 47.9471 513.9563 Tm 0 0 0 1 k -.005 Tc (\(including, for example, multiple barriers and)Tj ET EMC /LBody <>BDC BT 9 0 0 9 222.9951 513.9563 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 501.9563 Tm -.005 Tc [(network segmentation\) t)9.8(o)0( pr)9.8(o)7.3(vide a mor)9.3(e secur)9.3(e)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 239.5934 501.9563 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 489.9563 Tm -.005 Tc [(envir)9.8(onment, especially for lar)9.3(ge or)9.3(ganizations)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 231.6206 489.9563 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 477.9563 Tm -.005 Tc [(whose pr)9.8(otectiv)6.4(e measur)9.3(es wer)9.3(e initially)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 207.8403 477.9563 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 465.9563 Tm -.005 Tc [(de)6.4(v)6.4(eloped in r)9.3(esponse t)9.8(o)0( a specic compr)9.8(omise )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 447.9563 Tm [(P)6.4(e)0(r)-7.3(forming fr)9.3(equent penetr)19.5(ation testing of the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 229.4024 447.9563 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 36.9471 447.9563 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 47.9471 435.9563 Tm 0 0 0 1 k -.005 Tc [(or)9.3(ganization)39.1()54.7(s)0( network t)9.8(o)0( determine the str)9.3(ength)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 238.7432 435.9563 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 423.9563 Tm -.005 Tc [(of cyber)9.3(def)11.7(enses and r)9.3(emediate vulner)19.5(abilities )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 405.9563 Tm [(Enhancing network pr)9.8(otection b)5.4(y)0( using AI t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 221.513 405.9563 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 36.9471 405.9563 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 47.9471 393.9563 Tm 0 0 0 1 k -.005 Tc (combat botnet attacks )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 369.9563 Tm -.02 Tc [(Detecting bots and botnets r)9.3(equir)9.3(es enterprises t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 227.8424 369.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 357.9563 Tm -.02 Tc [(monit)9.8(or their infr)19.5(astructur)9.3(e softwar)9.3(e for unauthoriz)7.8(ed)]TJ ET EMC /P <>BDC BT 9 0 0 9 240.2402 357.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 345.9563 Tm -.02 Tc [(changes \(e.g., in ex)9.8(ecutable le siz)7.8(es, in hash v)7.3(alues\).)]TJ ET EMC /P <>BDC BT 9 0 0 9 240.8118 345.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 321.9562 Tm -.005 Tc [(Responding t)9.8(o)0( cyberinf)11.7(ections includes r)9.3(est)9.8(oring)]TJ ET EMC /P <>BDC BT 9 0 0 9 229.4922 321.9562 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 309.9562 Tm -.005 Tc [(original access rights and any aff)11.7(ected de)6.4(vice)]TJ ET EMC /P <>BDC BT 9 0 0 9 217.2377 309.9562 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 297.9563 Tm -.005 Tc [(congur)19.5(ations, followed b)5.4(y)0( cleaning inf)11.7(ected)]TJ ET EMC /P <>BDC BT 9 0 0 9 212.8587 297.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 285.9563 Tm -.005 Tc [(systems and les. )19.5(T)48.4(o)0( r)9.3(eco)7.3(v)6.4(er quickly)52.3(, enterprises)]TJ ET EMC /P <>BDC BT 9 0 0 9 229.3724 285.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 273.9563 Tm -.005 Tc [(must ha)7.3(v)6.4(e)0( secur)9.3(e baseline congur)19.5(ations for)]TJ ET EMC /P <>BDC BT 9 0 0 9 214.4416 273.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 261.9563 Tm -.005 Tc [(network, ser)-8.8(v)6.4(er and other de)6.4(vices r)9.3(eady at all times. )]TJ ET EMC /P <>BDC BT 9 0 0 9 36.9471 237.9563 Tm [(In addition t)9.8(o)0( enterprises, authorities also can help)]TJ ET EMC /P <>BDC BT 9 0 0 9 235.6261 237.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 225.9563 Tm -.005 Tc (combat the risk associated with bots and botnets.)Tj ET EMC /P <>BDC BT 9 0 0 9 234.2855 225.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 213.9563 Tm -.005 Tc [(A)5.4(uthorities can detect bot and botnet inf)11.7(ection)]TJ ET EMC /P <>BDC BT 9 0 0 9 220.2778 213.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 201.9563 Tm -.005 Tc [(attempts b)5.4(y)0( running cyber)-24.4(tak)9.8(edowns r)9.3(epeatedly t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 236.7476 201.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 189.9563 Tm -.005 Tc [(clean aff)11.7(ected de)6.4(vices. )19.5(The)6.4(y should also coor)9.3(dinate)]TJ ET EMC /P <>BDC BT 9 0 0 9 241.3587 189.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 177.9563 Tm -.005 Tc [(e)6.4(vidence gathering and r)9.3(esponse effor)-24.4(ts b)5.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 207.7146 177.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 165.9563 Tm -.005 Tc [(implementing mor)9.3(e Internet tr)19.5(ac monit)9.8(oring)]TJ ET EMC /P <>BDC BT 9 0 0 9 216.8498 165.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 153.9563 Tm -.005 Tc [(centers. A)5.4(uthorities should seek t)9.8(o)0( st)9.8(op bots early)]TJ ET EMC /P <>BDC BT 9 0 0 9 234.2966 153.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 141.9563 Tm -.005 Tc [(so that the sheer v)7.3(olume of inf)11.7(ected de)6.4(vices does)]TJ ET EMC /P <>BDC BT 9 0 0 9 232.9012 141.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 129.9563 Tm -.005 Tc [(not pr)9.8(ohibit compr)9.3(ehensiv)6.4(e tak)9.8(edowns. )]TJ ET EMC /P <>BDC BT 9 0 0 9 36.9471 105.9563 Tm [(V)21.5(endors also can coor)9.3(dinate pr)9.3(e)6.4(v)6.4(entiv)6.4(e activities)]TJ ET EMC /P <>BDC BT 9 0 0 9 229.9964 105.9563 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 36.9471 93.9563 Tm -.005 Tc [(and pr)9.8(oducts, such as: )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 75.9563 Tm [(De)6.4(v)6.4(eloping malwar)9.3(e pr)9.8(oles t)9.8(o)0( k)9.8(eep antivirus)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 226.6492 75.9563 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 36.9471 75.9563 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 47.9471 63.9563 Tm 0 0 0 1 k -.005 Tc [(softwar)9.3(e v)6.4(endors mor)9.3(e curr)9.3(ent and eff)11.7(ectiv)6.4(e)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 222.9368 63.9563 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 47.9471 51.9563 Tm -.005 Tc [(against new attack v)6.4(ect)9.8(ors and thr)9.3(eats )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 527.5964 Tm [(Implementing ser)-8.8(vices that help enterprises and)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 456.2114 527.5964 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 255.4471 527.5964 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 266.4471 515.5964 Tm 0 0 0 1 k -.005 Tc [(softwar)9.3(e v)6.4(endors detect vulner)19.5(abilities specic)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 451.7905 515.5964 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 503.5964 Tm -.005 Tc [(t)9.8(o)0( giv)6.4(en business sect)9.8(ors \(e.g., hotel, airline,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 439.6914 503.5964 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 491.5964 Tm -.005 Tc [(r)9.3(etail or pharmaceutical industries\) )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 473.5964 Tm [(Pr)9.8(o)7.3(viding testing ser)-8.8(vices \(be)6.4(y)7.3(ond scanners\) t)9.8(o)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 453.6274 473.5964 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 255.4471 473.5964 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 266.4471 461.5964 Tm 0 0 0 1 k -.005 Tc [(weed out pr)9.8(ogr)19.5(am vulner)19.5(abilities )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 443.5964 Tm [(Conducting bug bounty pr)9.8(ogr)19.5(ams, a contest in)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 448.4406 443.5964 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F5 1 Tf 12 0 0 12 255.4471 443.5964 Tm .82 .17 .5 .01 k ()Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 266.4471 431.5964 Tm 0 0 0 1 k -.005 Tc [(which cyberpr)19.5(actitioners tr)-8.8(y t)9.8(o)0( inf)11.7(ect the)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 424.989 431.5964 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 419.5964 Tm -.005 Tc [(sponsoring or)9.3(ganization)39.1()54.7(s)0( network infr)19.5(astructur)9.3(e)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 457.2871 419.5964 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 266.4471 407.5964 Tm -.005 Tc [(t)9.8(o)0( ush out network and softwar)9.3(e weaknesses )]TJ ET EMC /P <>BDC BT 9 0 0 9 255.4471 383.5964 Tm [(V)21.5(endors could also facilitate detection b)5.4(y)0( using AI)]TJ ET EMC /P <>BDC BT 9 0 0 9 452.5198 383.5964 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 371.5964 Tm -.005 Tc [(technology t)9.8(o)0( isolate and tr)19.5(ack cyber)19.5(anomalies and)]TJ ET EMC /P <>BDC BT 9 0 0 9 458.4578 371.5964 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 359.5964 Tm -.005 Tc [(r)9.3(epor)-24.4(t them t)9.8(o)0( the pr)9.8(oper authorities. V)21.5(endors could)]TJ ET EMC /P <>BDC BT 9 0 0 9 460.2708 359.5964 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 347.5964 Tm -.005 Tc [(de)6.4(v)6.4(elop IoT)19.5( r)9.3(ecognition systems or de)6.4(vices t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 436.174 347.5964 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 335.5964 Tm -.005 Tc [(enhance continuous monit)9.8(oring and facilitate)]TJ ET EMC /P <>BDC BT 9 0 0 9 434.171 335.5964 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 323.5964 Tm -.005 Tc [(computer inv)6.4(ent)9.8(or)-8.8(y and risk analysis. )]TJ ET EMC /P <>BDC BT 9 0 0 9 255.4471 299.5963 Tm [(Enterprises whose users ha)7.3(v)6.4(e)0( inf)11.7(ected computers)]TJ ET EMC /P <>BDC BT 9 0 0 9 452.3789 299.5963 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 287.5963 Tm -.005 Tc [(ma)7.3(y consider implementing a tr)19.5(ade-in policy that)]TJ ET EMC /P <>BDC BT 9 0 0 9 447.3197 287.5963 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 275.5963 Tm -.005 Tc [(r)9.3(educes the number of malicious/inf)11.7(ected de)6.4(vices)]TJ ET EMC /P <>BDC BT 9 0 0 9 453.2876 275.5963 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 263.5963 Tm -.005 Tc [(and simultaneously pr)9.8(o)7.3(vides r)9.3(eplacements with)]TJ ET EMC /P <>BDC BT 9 0 0 9 443.3635 263.5963 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 251.5963 Tm -.005 Tc [(mor)9.3(e secur)9.3(e and/or up-t)9.8(o-date systems. )]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 255.4471 227.5963 Tm [(Addr)9.3(essing Cyber)9.3(criminal Mark)9.8(etplaces )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 255.4471 215.5963 Tm [(Go)7.3(v)6.4(ernment/countr)-8.8(y law enfor)9.3(cement authorities)]TJ ET EMC /P <>BDC BT 9 0 0 9 450.1914 215.5963 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 203.5963 Tm -.005 Tc [(need t)9.8(o)0( monit)9.8(or the cyber)19.5(activity of criminals as)]TJ ET EMC /P <>BDC BT 9 0 0 9 444.8885 203.5963 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 191.5963 Tm -.005 Tc [(diligently and compr)9.3(ehensiv)6.4(ely as the)6.4(y monit)9.8(or the)]TJ ET EMC /P <>BDC BT 9 0 0 9 455.1048 191.5963 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 179.5963 Tm -.005 Tc (good guys \(e.g., via audits and assessments\). One)Tj ET EMC /P <>BDC BT 9 0 0 9 453.4579 179.5963 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 167.5963 Tm -.005 Tc [(possibility is t)9.8(o)0( use imposter criminal mark)9.8(etplaces)]TJ ET EMC /P <>BDC BT 9 0 0 9 458.069 167.5963 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 155.5963 Tm -.005 Tc [(t)9.8(o)0( identify criminals. Another is t)9.8(o)0( incr)9.3(ease the)]TJ ET EMC /P <>BDC BT 9 0 0 9 438.4418 155.5963 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 143.5963 Tm -.005 Tc [(number of sensors on the Internet t)9.8(o)0( obtain)]TJ ET EMC /P <>BDC BT 9 0 0 9 426.6355 143.5963 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 131.5963 Tm -.005 Tc [(information about the sour)9.3(ce\(s\). )19.5(This information)]TJ ET EMC /P <>BDC BT 9 0 0 9 450.3114 131.5963 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 119.5963 Tm -.005 Tc [(could be used t)9.8(o)0( minimiz)7.8(e the spr)9.3(ead of malwar)9.3(e,)]TJ ET EMC /P <>BDC BT 9 0 0 9 451.3144 119.5963 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 107.5963 Tm -.005 Tc [(impr)9.8(o)7.3(v)6.4(e cyberr)9.3(esponses, establish new contr)9.8(ols)]TJ ET EMC /P <>BDC BT 9 0 0 9 445.0938 107.5963 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 255.4471 95.5963 Tm -.005 Tc [(and nd the attack)9.8(ers. )]TJ ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d q 1 0 0 1 570.156 31.289 cm 0 0 m 0 -39.376 l S Q EMC /Artifact <>BDC 0 .35 .9 0 k /GS3 gs 255.447 543.209 346.317 121.497 re f EMC /Artifact <>BDC BT 14 0 0 14 288.6932 635.1361 Tm 0 0 0 0 k .0351 Tc -.0371 Tw [(RESPONDING)17.6( T)13.6(O)17.5( )-19.6(CYBERINFEC)14.1(TIONS)17.5( )]TJ -1.7143 -1.2857 TD -.0175 Tw [(INCL)26.3(UDES)17.5( REST)13.6(ORING)17.5( ORIGIN)-8.8(AL)17.5( A)5.3(CCESS)17.5( )]TJ T* [(RIGH)14.1(T)7.8(S)17.5( AND)17.5( AN)13.6(Y)17.5( AFFEC)14.1(TED)17.5( DEVICE)17.5( )]TJ T* [(CONFIGURA)63(TIONS)17.5(,)35.1( FOLL)31.7(OWED)17.5( B)26.8(Y)17.5( CLEANING)17.5( )]TJ T* [(INFEC)14.1(TED)17.5( SY)7.8(STEMS)17.5( AND)17.5( FILES)17.5(.)35.1( )]TJ ET EMC /Artifact <>BDC Q q 1 i 482.585 572.334 23 -23.75 re W n .81961 .15686 .49412 .015686 k /GS3 gs q 1 0 0 1 500.689 562.046 cm 0 0 m -.099 -2.881 -.579 -5.075 -1.441 -6.582 c -2.301 -8.089 -3.643 -9.223 -5.464 -9.985 c -3.279 -13.462 l -.265 -12.104 1.937 -10.101 3.328 -7.452 c 4.389 -5.464 4.918 -2.252 4.918 2.186 c 4.918 10.382 l -4.67 10.382 l -4.67 0 l 0 0 l h -12.64 0 m -12.739 -2.881 -13.219 -5.075 -14.081 -6.582 c -14.941 -8.089 -16.283 -9.223 -18.104 -9.985 c -15.919 -13.462 l -12.905 -12.104 -10.703 -10.101 -9.312 -7.452 c -8.251 -5.464 -7.722 -2.252 -7.722 2.186 c -7.722 10.382 l -17.31 10.382 l -17.31 0 l -12.64 0 l f Q EMC /Artifact <>BDC Q q 1 i 261.64 660.562 23 -23.75 re W n .81961 .15686 .49412 .015686 k /GS3 gs q 1 0 0 1 266.558 647.194 cm 0 0 m .099 2.881 .579 5.075 1.441 6.582 c 2.301 8.089 3.643 9.223 5.464 9.985 c 3.279 13.462 l .265 12.104 -1.937 10.101 -3.328 7.452 c -4.389 5.464 -4.918 2.252 -4.918 -2.186 c -4.918 -10.382 l 4.67 -10.382 l 4.67 0 l 0 0 l h 12.64 0 m 12.739 2.881 13.219 5.075 14.081 6.582 c 14.941 8.089 16.283 9.223 18.104 9.985 c 15.919 13.462 l 12.905 12.104 10.703 10.101 9.312 7.452 c 8.251 5.464 7.722 2.252 7.722 -2.186 c 7.722 -10.382 l 17.31 -10.382 l 17.31 0 l 12.64 0 l f Q EMC Q endstream endobj 359 0 obj <>/ExtGState<>>> endobj 381 0 obj <> endobj 386 0 obj <> endobj 391 0 obj <> endobj 396 0 obj <> endobj 401 0 obj <> endobj 406 0 obj <> endobj 407 0 obj <>stream /Artifact <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 414.6031 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ /F2 1 Tf 15.355 0 TD [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /P <>BDC BT /F4 1 Tf 9 0 0 9 143 697.6495 Tm -.005 Tc (Handling Both Botnets and Criminal)Tj ET EMC /P <>BDC BT 9 0 0 9 285.141 697.6495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 685.6495 Tm -.005 Tc [(Cybermark)9.8(etplaces )]TJ ET EMC /P <>BDC BT /F1 1 Tf 9 0 0 9 143 673.6495 Tm [(A)5.4(uthorities can off)11.7(er r)9.3(ewar)9.3(ds for information)]TJ ET EMC /P <>BDC BT 9 0 0 9 319.183 673.6495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 661.6495 Tm -.005 Tc [(leading t)9.8(o)0( arr)9.3(ests \(especially in other countries\) of)]TJ ET EMC /P <>BDC BT 9 0 0 9 340.6594 661.6495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 649.6495 Tm -.005 Tc [(those associated with malicious cyber)19.5(activity)52.3(.)]TJ ET EMC /P <>BDC BT 9 0 0 9 323.818 649.6495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 637.6495 Tm -.005 Tc [(A)5.4(uthorities should de)6.4(v)6.4(elop a sear)9.3(ch engine t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 322.6106 637.6495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 625.6495 Tm -.005 Tc [(identify de)6.4(vices with cer)-24.4(tain patterns and/or)]TJ ET EMC /P <>BDC BT 9 0 0 9 316.7087 625.6495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 613.6495 Tm -.005 Tc [(signatur)9.3(es and r)9.3(egister them for futur)9.3(e action)]TJ ET EMC /P <>BDC BT 9 0 0 9 322.0031 613.6495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 601.6495 Tm -.005 Tc (\(perhaps one potential application of AI\).)Tj ET EMC /P <>BDC BT 9 0 0 9 303.9237 601.6495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 589.6495 Tm -.005 Tc [(A)5.4(uthorities should le)6.4(v)6.4(e)0(r)19.5(age the effor)-24.4(ts of v)6.4(endors)]TJ ET EMC /P <>BDC BT 9 0 0 9 338.0434 589.6495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 577.6495 Tm -.005 Tc [(and r)9.3(esear)9.3(chers who r)9.8(outinely monit)9.8(or network)]TJ ET EMC /P <>BDC BT 9 0 0 9 328.7541 577.6495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 565.6495 Tm -.005 Tc [(tr)19.5(ac t)9.8(o)0( help narr)9.8(ow sear)9.3(ch ar)9.3(eas and pinpoint the)]TJ ET EMC /P <>BDC BT 9 0 0 9 343.5453 565.6495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 553.6497 Tm -.005 Tc [(sour)9.3(ce of malwar)9.3(e or botnet attacks. )19.5(The)6.4(y should)]TJ ET EMC /P <>BDC BT 9 0 0 9 338.2256 553.6497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 541.6497 Tm -.005 Tc [(de)6.4(v)6.4(elop and test scenario-based r)9.3(esponse plans on)]TJ ET EMC /P <>BDC BT 9 0 0 9 345.6294 541.6497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 529.6497 Tm -.005 Tc [(a multi-countr)-8.8(y basis and shar)9.3(e information)]TJ ET EMC /P <>BDC BT 9 0 0 9 314.865 529.6497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 517.6497 Tm -.005 Tc [(r)9.3(egar)9.3(ding malicious activity among authorities and)]TJ ET EMC /P <>BDC BT 9 0 0 9 342.5741 517.6497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 505.6497 Tm -.005 Tc [(acr)9.8(oss bor)9.3(dersrst t)9.8(o)0( establish and then t)9.8(o)]TJ ET EMC /P <>BDC BT 9 0 0 9 319.4739 505.6497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 493.6497 Tm -.005 Tc [(optimiz)7.8(e a coor)9.3(dinated r)9.3(esponse plan. )]TJ ET EMC /P <>BDC BT 9 0 0 9 143 277.6497 Tm [(T)48.4(o)0( detect botnets and cyber)9.3(criminal mark)9.8(etplaces,)]TJ ET EMC /P <>BDC BT 9 0 0 9 342.4126 277.6497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 265.6497 Tm -.005 Tc (authorities should work with other countries \(i.e.,)Tj ET EMC /P <>BDC BT 9 0 0 9 334.7464 265.6497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 253.6497 Tm -.005 Tc [(United Nations [)8.8(UN] par)-24.4(tnerships\))]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 275.6191 256.3496 Tm -.0083 Tc (17)Tj ET EMC /P <>BDC BT 9 0 0 9 281.5937 253.6497 Tm -.005 Tc [( t)9.8(o)0( nd and)]TJ ET EMC /P <>BDC BT 9 0 0 9 325.7297 253.6497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 241.6497 Tm -.005 Tc [(arr)9.3(est Cyber)-7.8()54.7(s)0( Most W)16.1(anted.)83()]TJ ET EMC /P <>BDC BT 5.4 0 0 5.4 259.6975 244.3496 Tm -.0083 Tc (18)Tj ET EMC /P <>BDC BT 9 0 0 9 265.6721 241.6497 Tm -.005 Tc ( All countries need)Tj ET EMC /P <>BDC BT 9 0 0 9 338.6675 241.6497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 229.6497 Tm -.005 Tc [(t)9.8(o)0( arr)9.3(est those who commit cyber)9.3(crimes, no matter)]TJ ET EMC /P <>BDC BT 9 0 0 9 344.9922 229.6497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 217.6497 Tm -.005 Tc [(their countries of origin. As a best pr)19.5(actice,)]TJ ET EMC /P <>BDC BT 9 0 0 9 311.6583 217.6497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 205.6497 Tm -.005 Tc (authorities should implement malicious)Tj ET EMC /P <>BDC BT 9 0 0 9 298.9928 205.6497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 193.6497 Tm -.005 Tc [(cyber)19.5(activity detection t)9.8(ools and techniques acr)9.8(oss)]TJ ET EMC /P <>BDC BT 9 0 0 9 345.3285 193.6497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 181.6497 Tm -.005 Tc [(all law-enfor)9.3(cement or)9.3(ganizations. )]TJ ET EMC /P <>BDC BT 9 0 0 9 143 157.6497 Tm [(Finally)52.3(, authorities should mak)9.8(e mor)9.3(e arr)9.3(ests)]TJ ET EMC /P <>BDC BT 9 0 0 9 319.3279 157.6497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 145.6497 Tm -.005 Tc (worldwide and hold countries accountable via)Tj ET EMC /P <>BDC BT 9 0 0 9 323.4421 145.6497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 133.6497 Tm -.005 Tc [(penalties. P)6.4(enalties must be stiff t)9.8(o)0( deter futur)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 330.6386 133.6497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 121.6497 Tm -.005 Tc [(activity eff)11.7(ectiv)6.4(ely and encour)19.5(age local)]TJ ET EMC /P <>BDC BT 9 0 0 9 295.7784 121.6497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 143 109.6497 Tm -.005 Tc [(go)7.3(v)6.4(ernments t)9.8(o)0( tak)9.8(e action. )]TJ ET EMC /P <>BDC /GS3 gs BT /F3 1 Tf 11 0 0 11 361.5 696.1495 Tm .9 .53 .1 0 k (Conclusion )Tj ET EMC /P <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 361.5 678.1495 Tm 0 0 0 1 k -.02 Tc [(Malicious cyber)19.5(activity has gotten out of contr)9.8(ol.)]TJ ET EMC /P <>BDC BT 9 0 0 9 546.7219 678.1495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 666.1495 Tm -.02 Tc [(Cyber)9.3(crime can be anonymous, quick and does not)]TJ ET EMC /P <>BDC BT 9 0 0 9 556.253 666.1495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 654.1495 Tm -.02 Tc [(r)9.3(equir)9.3(e a lot of r)9.3(esear)9.3(ch, giv)6.4(en the ubiquity and easy)]TJ ET EMC /P <>BDC BT 9 0 0 9 558.4825 654.1495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 642.1495 Tm -.02 Tc [(access of cyber)9.3(crime mark)9.8(etplaces. Enterprises,)]TJ ET EMC /P <>BDC BT 9 0 0 9 546.4797 642.1495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 630.1495 Tm -.02 Tc [(v)6.4(endors and go)7.3(v)6.4(ernment authorities need t)9.8(o)0( do mor)9.3(e.)]TJ ET EMC /P <>BDC BT 9 0 0 9 566.0844 630.1495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 618.1495 Tm -.02 Tc [(The curr)9.3(ent standar)9.3(d information security postur)9.3(e)]TJ ET EMC /P <>BDC BT 9 0 0 9 361.5 606.1495 Tm [(namely)52.3(, r)9.3(esponding t)9.8(o)0( pr)9.8(oblems after the fact r)19.5(ather)]TJ ET EMC /P <>BDC BT 9 0 0 9 559.0269 606.1495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 594.1495 Tm -.02 Tc [(than striving t)9.8(o)0( pr)9.3(e)6.4(v)6.4(ent big, costly and uncontr)9.8(ollable)]TJ ET EMC /P <>BDC BT 9 0 0 9 561.8928 594.1495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 582.1495 Tm -.02 Tc [(crises in adv)7.3(ancemust change. Implementing the)]TJ ET EMC /P <>BDC BT 9 0 0 9 555.8618 582.1495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 570.1495 Tm -.02 Tc [(r)9.3(ecommendations her)9.3(ein ma)7.3(y help turn the tide b)5.4(y)]TJ ET EMC /P <>BDC BT 9 0 0 9 552.72 570.1495 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 558.1497 Tm -.02 Tc [(teaching cyber)9.3(criminals t)9.8(o)0( f)11.7(ear r)9.3(eprisalsnot only)]TJ ET EMC /P <>BDC BT 9 0 0 9 551.2482 558.1497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 546.1497 Tm -.02 Tc [(tak)9.8(edowns, but also r)9.3(epossession of ill-gotten gain)]TJ ET EMC /P <>BDC BT 9 0 0 9 554.6234 546.1497 Tm 0 Tc ( )Tj ET EMC /P <>BDC BT 9 0 0 9 361.5 534.1497 Tm -.02 Tc (and lengthy prison time.)Tj ET EMC /P <>BDC BT 9 0 0 9 453.0912 534.1497 Tm 0 Tc ( )Tj ET EMC /P <>BDC /GS3 gs BT /F3 1 Tf 11 0 0 11 361.5 508.1497 Tm .9 .53 .1 0 k -.005 Tc (Endnotes )Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 378.8636 490.1497 Tm 0 0 0 1 k [(Cimpanu, C.; )58.6(Adr)9.8(omeda Botnet Oper)19.5(at)9.8(or)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 539.2334 490.1497 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 366.5 490.1497 Tm .82 .17 .5 .01 k (1)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 378.5 478.1497 Tm 0 0 0 1 k -.005 Tc [(Released With a Slap on the W)10.3(rist,)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 515.0634 478.1497 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 378.5 466.1497 Tm -.005 Tc [(BleepingComputer)60.1(, 27 A)5.4(ugust 2018,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 519.6049 466.1497 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 378.5 454.1497 Tm -.005 Tc [(https:/)109.4(/www)60.6(.bleepingcomputer)60.1(.com/news/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 378.5 442.1497 Tm [(security/andr)9.8(omeda-botnet-oper)19.5(at)9.8(or-r)9.3(eleased-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 378.5 430.1497 Tm (with-a-slap-on-the-wrist/ )Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 378.8636 418.1497 Tm [(F)10.3(eder)19.5(al Bur)9.3(eau of Inv)6.4(estigation, Darknet)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 539.2259 418.1497 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 366.5 418.1497 Tm .82 .17 .5 .01 k (2)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 378.5 406.1497 Tm 0 0 0 1 k -.005 Tc [(T)55.2(a)0(k)9.8(edown: A)5.4(uthorities Shutter Online Criminal)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 559.5037 406.1497 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 378.5 394.1497 Tm -.005 Tc [(Mark)9.8(et AlphaBa)7.3(y)52.3(,)83( 20 July 2017, USA,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 524.6818 394.1497 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 378.5 382.1497 Tm -.005 Tc [(https:/)109.4(/www)60.6(.fbi.go)7.3(v/news/st)9.8(ories/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 378.5 370.1497 Tm [(alphaba)7.3(y-tak)9.8(edown )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 378.8636 358.1497 Tm [(Depar)-24.4(tment of Justice, )58.6(AlphaBa)7.3(y)52.3(,)0( the Lar)9.3(gest)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 558.918 358.1497 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 366.5 358.1497 Tm .82 .17 .5 .01 k (3)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 378.5 346.1497 Tm 0 0 0 1 k -.005 Tc [(Online Dark Mark)9.8(et,)83( Shut Down,)83( 20 July 2017,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 561.8878 346.1497 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 378.5 334.1497 Tm -.005 Tc (USA, )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 399.316 334.1497 Tm [(https:/)109.4(/www)60.6(.justice.go)7.3(v/opa/pr/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 378.5 322.1497 Tm [(alphaba)7.3(y-lar)9.3(gest-online-dark-mark)9.8(et-shut-down )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 378.8636 310.1497 Tm [(Gr)9.3(eenber)9.3(g, A.; Oper)19.5(ation Ba)7.3(y)7.3(onet: Inside )]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 366.5 310.1497 Tm .82 .17 .5 .01 k 0 Tc (4)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 378.5 298.1497 Tm 0 0 0 1 k -.005 Tc [(the Sting )19.5(That Hijack)9.8(ed an Entir)9.3(e Dark )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 378.5 286.1497 Tm [(W)15.2(eb Drug Mark)9.8(et,)83( )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 453.2104 286.1497 Tm [(Wir)9.3(ed)]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 475.4811 286.1497 Tm [(, 8 Mar)9.3(ch 2018,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 535.6751 286.1497 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 378.5 274.1497 Tm -.005 Tc [(https:/)109.4(/darkwebnews.com/darkwebmark)9.8(ets/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 378.5 262.1497 Tm [(inside-the-oper)19.5(ation-that-br)9.8(ought-down- )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 378.5 250.1497 Tm [(hansa-mark)9.8(et/ )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 378.8636 238.1497 Tm [(Cimpanu, C.; Russian A)5.4(uthorities Announce)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 552.5139 238.1497 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 366.5 238.1497 Tm .82 .17 .5 .01 k (5)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 378.5 226.1497 Tm 0 0 0 1 k -.005 Tc [(T)55.2(a)0(k)9.8(edown of RAMP Dark W)15.2(eb Mark)9.8(etplace,)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 551.9293 226.1497 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 378.5 214.1497 Tm -.005 Tc [(BleepingComputer)60.1(, 19 September 2017,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 534.7101 214.1497 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 378.5 202.1497 Tm -.005 Tc [(https:/)109.4(/www)60.6(.bleepingcomputer)60.1(.com/news/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 378.5 190.1497 Tm (security/russian-authorities-announce-)Tj ET EMC /LBody <>BDC BT 9 0 0 9 378.5 178.1497 Tm [(tak)9.8(edown-of-r)19.5(amp-dark-web-mark)9.8(etplace/ )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 378.8636 166.1497 Tm [(V)22.5(aas, L.; )52.3(In F)12.7(r)19.5(aud W)15.2(e)0( )19.5(T)36.6(rustCyber)9.3(crime )]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 366.5 166.1497 Tm .82 .17 .5 .01 k 0 Tc (6)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 378.5 154.1497 Tm 0 0 0 1 k -.005 Tc [(Or)9.3(g Bust Shows W)15.2(e)39.1(r)9.3(e Fighting Pr)9.8(os,)83( )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 378.5 142.1497 Tm [(Nak)9.8(ed Security)]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 436.7438 142.1497 Tm [(, 26 F)10.3(ebruar)-8.8(y 2018,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 511.4135 142.1497 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 378.5 130.1497 Tm -.005 Tc [(https:/)109.4(/nak)9.8(edsecurity)52.3(.sophos.com/2018/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 378.5 118.1497 Tm [(02/26/in-fr)19.5(aud-we-trust-cyber)9.3(crime-or)9.3(g- )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 378.5 106.1497 Tm [(bust-shows-wer)9.3(e-ghting-pr)9.8(os/ )]TJ ET EMC /Artifact <>BDC BT /F1 1 Tf 7 0 0 7 39.7789 24.9858 Tm 0 Tc [(ISA)5.4(CA JOURN)-8.8(AL)]TJ ET /GS3 gs BT 7 0 0 7 92.1285 24.9858 Tm .63 .06 1 0 k [( V)6.4(OL 5)]TJ ET EMC /Artifact <>BDC BT 7 0 0 7 13.2407 24.9858 Tm (8)Tj ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d /GS2 gs q 1 0 0 1 30.704 33.462 cm 0 0 m 0 -39.377 l S Q EMC /Artifact <>BDC 0 .35 .9 0 k /GS3 gs 143 300.809 205.5 177.804 re f EMC /Artifact <>BDC BT 14 0 0 14 176.2461 449.043 Tm 0 0 0 0 k .0351 Tc -.0175 Tw [(AS)17.5( A)17.5( BEST)37.1( PRA)5.3(C)14.1(TICE)17.5(,)35.1( )]TJ -1.7143 -1.2857 TD [(A)8.3(UTHORI)14.1(TIES)17.5( SHOULD)17.5( )]TJ T* [(IMPLEMEN)14.1(T)37.1( M)-8.8(ALICIOUS)17.5( )]TJ T* 0 Tw [(CYBERA)5.3(C)14.1(TIVI)14.1(T)-7.8(Y)17.5( )]TJ T* -.0371 Tw [(DE)-9.8(TEC)14.1(TION)17.5( T)13.6(OOLS)17.5( )-19.6(AND)17.5( )]TJ T* -.0175 Tw [(TECHNIQUES)17.5( A)5.3(CROSS)17.5( ALL)17.5( )]TJ T* 0 Tw [(L)-9.3(A)33.7(W)46.9(-)17.5(ENFORCEMEN)14.1(T)37.1( )]TJ T* [(ORGANIZ)-6.4(A)63(TIONS)17.5(.)]TJ ET EMC /Artifact <>BDC Q q 1 i 272.647 330.709 23 -23.75 re W n .81961 .15686 .49412 .015686 k /GS3 gs q 1 0 0 1 290.751 320.421 cm 0 0 m -.099 -2.881 -.579 -5.075 -1.441 -6.582 c -2.301 -8.089 -3.643 -9.223 -5.464 -9.985 c -3.279 -13.462 l -.265 -12.104 1.937 -10.101 3.328 -7.452 c 4.389 -5.464 4.918 -2.252 4.918 2.186 c 4.918 10.382 l -4.67 10.382 l -4.67 0 l 0 0 l h -12.64 0 m -12.739 -2.881 -13.219 -5.075 -14.081 -6.582 c -14.941 -8.089 -16.283 -9.223 -18.104 -9.985 c -15.919 -13.462 l -12.905 -12.104 -10.703 -10.101 -9.312 -7.452 c -8.251 -5.464 -7.722 -2.252 -7.722 2.186 c -7.722 10.382 l -17.31 10.382 l -17.31 0 l -12.64 0 l f Q EMC /Artifact <>BDC Q q 1 i 149.193 474.469 23 -23.75 re W n .81961 .15686 .49412 .015686 k /GS3 gs q 1 0 0 1 154.111 461.101 cm 0 0 m .099 2.881 .579 5.075 1.441 6.582 c 2.301 8.089 3.643 9.223 5.464 9.985 c 3.279 13.462 l .265 12.104 -1.937 10.101 -3.328 7.452 c -4.389 5.464 -4.918 2.252 -4.918 -2.186 c -4.918 -10.382 l 4.67 -10.382 l 4.67 0 l 0 0 l h 12.64 0 m 12.739 2.881 13.219 5.075 14.081 6.582 c 14.941 8.089 16.283 9.223 18.104 9.985 c 15.919 13.462 l 12.905 12.104 10.703 10.101 9.312 7.452 c 8.251 5.464 7.722 2.252 7.722 -2.186 c 7.722 -10.382 l 17.31 -10.382 l 17.31 0 l 12.64 0 l f Q EMC Q endstream endobj 408 0 obj <>/ExtGState<>>> endobj 414 0 obj <> endobj 419 0 obj <> endobj 424 0 obj <> endobj 429 0 obj <> endobj 434 0 obj <> endobj 439 0 obj <> endobj 444 0 obj <> endobj 449 0 obj <> endobj 454 0 obj <> endobj 459 0 obj <> endobj 464 0 obj <> endobj 469 0 obj <> endobj 470 0 obj <>stream /Artifact <>BDC q 1 i 0 783 603 -783 re 301.5 391.56 m W n .059998 783 603 -783 re W n /GS2 gs BT /F1 1 Tf 7 0 0 7 36.9471 23.0228 Tm 0 0 0 1 k 0 Tc 0 Tw [( 2019 ISA)5.4(CA. All rights r)9.3(eser)-8.8(v)6.4(ed. )]TJ /F2 1 Tf 15.355 0 TD [(www)60.6(.isaca.or)9.3(g)]TJ ET EMC /Artifact <>BDC BT /F1 1 Tf 7 0 0 7 488.5055 23.0228 Tm [(ISA)5.4(CA JOURN)-8.8(AL)]TJ ET /GS3 gs BT 7 0 0 7 540.8551 23.0228 Tm .63 .06 1 0 k [( V)6.4(OL 5)]TJ ET EMC /Artifact <>BDC BT 7 0 0 7 584.9167 23.0228 Tm (9)Tj ET EMC /LBody <>BDC /GS2 gs BT 9 0 0 9 49.3107 697.6495 Tm 0 0 0 1 k -.005 Tc [(Swinhoe, D)49.8(.; Dark W)15.2(eb )19.5(T)55.2(a)0(k)9.8(edowns Mak)9.8(e Good)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 234.523 697.6495 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 36.9471 697.6495 Tm .82 .17 .5 .01 k (7)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 53.9471 685.6495 Tm 0 0 0 1 k -.005 Tc [(Headlines, Do Little for Security)52.3(,)83()0( )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 183.298 685.6495 Tm (CSO)Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 200.1612 685.6495 Tm (, 8 July)Tj ET EMC /LBody <>BDC BT 9 0 0 9 227.4472 685.6495 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 673.6495 Tm -.005 Tc (2019, )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 77.8867 673.6495 Tm [(https:/)109.4(/www)60.6(.csoonline.com/ar)-24.4(ticle/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 661.6495 Tm [(3406319/dark-web-tak)9.8(edowns-mak)9.8(e-good-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 649.6495 Tm [(headlines-do-little-for-security)52.3(.html )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 49.3107 637.6495 Tm [(Howell ONeill, P)158.2(.; DDoS-Happ)5.4(y )19.5(T)48.4(eenagers)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 215.0606 637.6495 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 36.9471 637.6495 Tm .82 .17 .5 .01 k (8)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 53.9471 625.6495 Tm 0 0 0 1 k -.005 Tc [(Arr)9.3(ested in International Cyber)9.3(crime Bust,)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 220.3454 625.6495 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 613.6495 Tm -.005 Tc (Cyberscoop, 12 December 2016,)Tj ET EMC /LBody <>BDC BT 9 0 0 9 181.7277 613.6495 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 53.9471 601.6495 Tm -.005 Tc [(https:/)109.4(/www)60.6(.cyberscoop.com/ddos- )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 589.6495 Tm [(eur)9.8(opol-arr)9.3(est-december-2016/ )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 49.3107 577.6495 Tm (Cimpanu, C.; Interpol Identies 8,800 C&C)Tj ET EMC /LBody <>BDC BT 9 0 0 9 216.0395 577.6495 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 36.9471 577.6495 Tm .82 .17 .5 .01 k (9)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 53.9471 565.6495 Tm 0 0 0 1 k -.005 Tc [(Ser)-8.8(v)6.4(ers Used for Malwar)9.3(e, Ransomwar)9.3(e,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 213.1182 565.6495 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 553.6497 Tm -.005 Tc [(Others,)83( BleepingComputer)60.1(, 24 April 2017,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 217.6493 553.6497 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 53.9471 541.6497 Tm -.005 Tc [(https:/)109.4(/www)60.6(.bleepingcomputer)60.1(.com/news/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 529.6497 Tm [(security/interpol-identies-8-800-candc-ser)-8.8(v)6.4(ers-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 517.6497 Tm [(used-for-malwar)9.3(e-r)19.5(ansomwar)9.3(e-others/ )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 54.4744 505.6497 Tm [(V)22.5(aas, L.; P)6.4(olice Swoop on Gang )19.5(That Planted)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 233.7607 505.6497 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 36.9471 505.6497 Tm .82 .17 .5 .01 k (10)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 53.9471 493.6497 Tm 0 0 0 1 k -.005 Tc [(Banking )19.5(T)36.6(r)9.8(ojan on 1m Phones,)83( )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 178.3428 493.6497 Tm [(Nak)9.8(ed Security)]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 236.5867 493.6497 Tm 0 Tc (,)Tj ET EMC /LBody <>BDC BT 9 0 0 9 238.3082 493.6497 Tm ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 481.6497 Tm -.02 Tc [(24 Ma)7.3(y 2017, )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 107.3257 481.6497 Tm [(https:/)109.4(/nak)9.8(edsecurity)52.3(.sophos.com/)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 238.676 481.6497 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 469.6497 Tm -.005 Tc (2017/05/24/police-swoop-on-gang-that-planted-)Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 457.6497 Tm [(banking-tr)9.8(ojan-on-1m-phones/ )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 54.4744 445.6497 Tm [(Cimpanu, C.; Owners of VirusT)48.4(otal-for-Cr)9.8(ooks)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 239.5716 445.6497 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 36.9471 445.6497 Tm .82 .17 .5 .01 k (11)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 53.9471 433.6497 Tm 0 0 0 1 k -.005 Tc [(Ser)-8.8(vice Arr)9.3(ested,)83( BleepingComputer)60.1(, 6 July)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 225.3464 433.6497 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 421.6497 Tm -.005 Tc (2017, )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 77.8867 421.6497 Tm [(https:/)109.4(/www)60.6(.bleepingcomputer)60.1(.com/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 409.6497 Tm [(news/security/owners-of-virust)9.8(otal-for-cr)9.8(ooks-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 53.9471 397.6497 Tm [(ser)-8.8(vice-arr)9.3(ested/ )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 272.9743 697.6495 Tm [(Cimpanu, C.; Hack)9.8(er Gets a Whopping )]TJ ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 255.4471 697.6495 Tm .82 .17 .5 .01 k 0 Tc (12)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 272.4471 685.6495 Tm 0 0 0 1 k -.005 Tc [(14 Y)31.8(ears in Prison for Running Scan4Y)31.8(ou)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 433.5498 685.6495 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 673.6495 Tm -.005 Tc [(Ser)-8.8(vice,)83( )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 307.7116 673.6495 Tm (ZDNet)Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 332.3555 673.6495 Tm (, 22 September 2018,)Tj ET EMC /LBody <>BDC BT 9 0 0 9 415.6111 673.6495 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.4471 661.6495 Tm -.005 Tc [(https:/)109.4(/www)60.6(.z)7.8(dnet.com/ar)-24.4(ticle/hack)9.8(er-gets-a-)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 649.6495 Tm [(whopping-14-y)6.4(ears-in-prison-for-running- )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 637.6495 Tm [(scan4y)7.3(ou-ser)-8.8(vice/ )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 272.9743 625.6495 Tm [(Howell ONeill, P)158.2(.; Latvian National Convicted)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 451.3347 625.6495 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 255.4471 625.6495 Tm .82 .17 .5 .01 k (13)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 272.4471 613.6495 Tm 0 0 0 1 k -.005 Tc [(of Running VirusT)48.4(otal-for-Criminals Malwar)9.3(e)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 450.6778 613.6495 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 601.6495 Tm -.005 Tc [(Scanner)60.1(,)83()0( Cyberscoop, 16 Ma)7.3(y 2018,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 414.6585 601.6495 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.4471 589.6495 Tm -.005 Tc [(https:/)109.4(/www)60.6(.cyberscoop.com/scan4y)7.3(ou- )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 577.6495 Tm [(ruslan-bondars-convicted-malwar)9.3(e-scanner/ )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 272.9743 565.6495 Tm [(Thomson, I.; T)48.4(ech Firms )19.5(T)55.2(a)0(k)9.8(e)0( Down Wir)9.3(eX)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 441.5422 565.6495 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 255.4471 565.6495 Tm .82 .17 .5 .01 k (14)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 272.4471 553.6497 Tm 0 0 0 1 k -.005 Tc [(Andr)9.8(oid Botnet,)83( )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 337.9828 553.6497 Tm (The Register)Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 386.7144 553.6497 Tm [(, 28 A)5.4(ugust 2017,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 454.8647 553.6497 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.4471 541.6497 Tm -.005 Tc [(https:/)109.4(/www)60.6(.ther)9.3(egister)60.1(.co.uk/2017/08/28/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 529.6497 Tm [(tech_rms_tak)9.8(e_down_wir)9.3(ex_andr)9.8(oid_botnet/ )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 272.9743 517.6497 Tm [(Cochr)19.5(an, J.; The Wir)9.3(eX Botnet: How Industr)-8.8(y)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 449.8306 517.6497 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 255.4471 517.6497 Tm .82 .17 .5 .01 k (15)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 272.4471 505.6497 Tm 0 0 0 1 k -.005 Tc [(Collabor)19.5(ation Disrupted a DDoS A)8.3(ttack,)83( )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 493.6497 Tm [(The Cloudar)9.3(e Blog, 28 A)5.4(ugust 2017,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 418.2566 493.6497 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.4471 481.6497 Tm -.005 Tc [(https:/)109.4(/new)60.6(.blog.cloudar)9.3(e.com/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 469.6497 Tm [(the-wir)9.3(ex-botnet/ )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 272.9743 457.6497 Tm [(Wlosinski, L. G.; The IoT)19.5( as a Gr)9.8(owing )19.5(Thr)9.3(eat)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 450.971 457.6497 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 255.4471 457.6497 Tm .82 .17 .5 .01 k (16)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 272.4471 445.6497 Tm 0 0 0 1 k -.005 Tc [(t)9.8(o)0( Or)9.3(ganizations,)83( )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 343.7288 445.6497 Tm [(ISA)5.4(CA)]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 5.4 0 0 5.4 368.3023 448.6197 Tm 0 Tc ()Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 372.5024 445.6497 Tm -.005 Tc ( Journal)Tj ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 403.9019 445.6497 Tm [(, v)7.3(ol. 4, 2019,)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 454.4585 445.6497 Tm 0 Tc ( )Tj ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 272.4471 433.6497 Tm -.005 Tc [(www)60.6(.isaca.or)9.3(g/ar)9.3(chiv)6.4(es )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 272.9743 421.6497 Tm [(I)14.2(TU, Global P)5.4(a)0(r)-24.4(tnership,)83()]TJ ET EMC /LBody <>BDC BT 9 0 0 9 370.8839 421.6497 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 255.4471 421.6497 Tm .82 .17 .5 .01 k (17)Tj ET EMC /LBody <>BDC /GS2 gs BT /F2 1 Tf 9 0 0 9 272.4471 409.6497 Tm 0 0 0 1 k -.005 Tc [(https:/)109.4(/www)60.6(.itu.int/en/I)14.2(TU-D/Cybersecurity/ )]TJ ET EMC /LBody <>BDC BT 9 0 0 9 272.4471 397.6497 Tm [(P)5.4(ages/global-par)-24.4(tnership.asp)7.3(x )]TJ ET EMC /LBody <>BDC BT /F1 1 Tf 9 0 0 9 272.9743 385.6497 Tm [(F)10.3(eder)19.5(al Bur)9.3(eau of Inv)6.4(estigation, Cyber)-7.8()54.7(s)0( Most)]TJ ET EMC /LBody <>BDC BT 9 0 0 9 453.8275 385.6497 Tm 0 Tc ( )Tj ET EMC /Lbl <>BDC /GS3 gs BT /F3 1 Tf 9 0 0 9 255.4471 385.6497 Tm .82 .17 .5 .01 k (18)Tj ET EMC /LBody <>BDC /GS2 gs BT /F1 1 Tf 9 0 0 9 272.4471 373.6497 Tm 0 0 0 1 k -.02 Tc [(W)16.1(anted,)83( USA, )]TJ ET EMC /LBody <>BDC BT /F2 1 Tf 9 0 0 9 327.9134 373.6497 Tm [(https:/)109.4(/www)60.6(.fbi.go)7.3(v/wanted/cyber)]TJ ET EMC /Artifact <>BDC 0 0 0 1 K 0 J 0 j .75 w 10 M [] 0 d q 1 0 0 1 570.156 31.289 cm 0 0 m 0 -39.376 l S Q EMC Q endstream endobj 471 0 obj <>/ExtGState<>>> endobj 6 0 obj <> endobj 5 0 obj <> endobj 33 0 obj <>stream AdobedC         #"""#'''''''''' k" s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjz?f͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6lٳf͛6l endstream endobj 34 0 obj <>stream Adobed         #"""#''''''''''     !! !!''''''''''k""  s!1AQa"q2B#R3b$r%C4Scs5D'6Tdt& EFVU(eufv7GWgw8HXhx)9IYiy*:JZjzm!1AQa"q2#BRbr3$4CS%cs5DT &6E'dtU7()󄔤euFVfvGWgw8HXhx9IYiy*:JZjz?Ygu)2l}'; ͗KS$*1;I$T.҈~GyX.]'@[X@j~Vft#;,̌spZO.=[] 1I+:j?W'C⌎06.=<$:w:Ӝ#lzO.(qbBO@S|Q[#^r_z2\0e[fVxM+ 1^R^O+R8Ҝ8޸j׺5)ZiiLxԊW}1&Я"퓂ii[P&uYėwXĩSTCPsϡ9j:{shudd#f^/nZgBL1!)K<# |BhVjǙ䔖|0pcT\^L;h)jt=V;4B7N<}_?!/XZB+ A9{wɐT|qslNVWdWpNEV}L;^ `UTRSU aP)u^Ixht ̍*!Zri?$N&,0B4৶ XEq<#V[,dJ1k->. X*#/m-MS)'551ɿ%^yjR?q3xg9U\A:a C};dvΪR.! YD8ke%:qy_KWP$?5rз8U1XԜViVMJ4Su­G43aW/͈Iܹcms!vOf?y+pF\}۩OU1A 51 Ȃq8CV'dXq 䊥 3ԍw{c.|B60g/zr>Y(Ʈ#&?$Wcpr]")@=e?%C5˙nyfQxF#cAh+q*D8Ifq`` >Ix6!c$0 ,K1O 0U@6aBwŗQ`_"*C q(XڤcLc>E^4/X2W|nn0 FUHޫRsƕ 7{4x֕:&%-֘OmY7(~0RR>~MPSLY漵YCDhe6em!V ;#P,ױ ֵe+ 22}?3NCm_uԲC-<${F=WE~Uzu!,TPkykWmId44ZЃZn>!JSekr1UiBBu{zg771N>| sa) @ fsUI>YK:NT#ۓSpF;wFSLD. `mf`Z7ED](v1΄#rgjX^5!1@f>hJ3EyQ\ *м,Ky=MycR:wCq nmG Rn%uB㒸*G8j)HOCJVVֺnLMiLB2쟅]߁u!B=xrPqň8YM#Ayn-ϥ/֍P;f@;[AkL'ld$-71f=/ȭdC@Ia8o0_?:ի"Y}:/1̀#.C'2 ĦbEIN_D~g -˨3^]EI&"?B~2ɑ~l6bP;- U=T_c f1OPXoN^b{RK a9lNO1: 1g9e. ϥ0Xt' NJf^eUݥY[PB `-SqrSקW; 69MbLTڞ>g >G_2OX#c NN"!]qA Ƣ !9@E'r>ٝ4:OM3}I+F h,W0Wsy}8K {$OkGiaב0.;+wZTnp_1iqVO ̘t=iFHh-Ťm5c%/ Seyq$bxI*ߕbr} \.udd kر\P~p5n nb:A5E4Jgos C1to>C |yWT.|1B=8Pj}ɧżwk)%R;tStz bC*K~gXa-F(C4X\&wcrG)NH́˘Ieڔ-쥃tHSn[3i۠ 3`SL0<{mlƮ=N%un0<.*){/ܴr!{W={S'!I0=G$8D(c-v8xukeFVmx^HRңm]QD}>FKK`7THHz.>cZ0e WVc+`ysp~4t~[DS0DEO\[_#͕ē.͍su\٪3S6E.f]q [(K5Ĭm?P%mfWa=뚳^k%LfOF1*z7J)5H67N~x_3|C{ [U+jVwM"9xdOP7*[i1[{L!޽f͛7k>'*h1ђcRzzaE儒H[~n5cpճ)0r ,@\B[T?k&MxrcpIQǞH5(rOBjαJ_mHdyr)A# Y6d9;/ot{/"oܞ@̨%?g{!g&Q+1(cfb/UmX"2˗&yG9eXռ,5DD Cc:F<_'fv%_V@wP6Eie5'v=YN kOc՛yogQ(l: 'OR|qS0袧 fgo xS`0$h<)J=Y@QS4+#ƃJ훈]$I W5`0ræDҡo 'oS^G2mlZ8?\rV>ߪ8XhrҒRL6%~>01ﴪiM޹n]mQng 0CHDM}}:]B@oe$'4.*/ي11pIBXgGHyxWU7ǠNzAuHcS$!Z1PAoG(4W=IˑDcy${t]Q$}0D@ʐ**1(0I|Ӑi\‡ߡFDevRSεB)e)YO\O5r">[wf_>iӛ{`i9b"!M@w6d3 Iyeo'=q.ൺ|rz 2ӵR_s(qfL3$Dd'S%caj`ȿ/o}grJT0&"7u]tʻ MtL9V`1 nmnN_Q' 48橦y0V^oԀK5j3S8=6MQjq`#8d>bYÊYNL>y%fCz3A%Ll]Z/;A}#gt]&( NCu6ǿ"NIu+,$*6cKFDM#lq ȍÔc".nr5M{(NGoav,iX(Cw:lI#ڙ !;׏ʘcj2<ޟ"caZ.ԴPΆR)_` tEM(H<w<u蒙_A5?t`!jDZVx).B(}zoL,r>w,$M1@iNI $W p jS.]q i@i(!d~T+b&:s%I|iQ<$(&_tiF%қ Ɋ\#-A4_._yk,’뿎w]S0n%͔x2'!'7z|x|`>EZ;9. Luł#ntK5|XRFnUɰj;%QJg+N;:Z[o]F#:'9YR0#j\zuNcTb i(H i1,{;YW0)]ӦKjJ[=2Qk 9!# ZLmd趄*I;P7$a]L.J*1L$ٞey1ۥRO`;4#/T~R 5_d[Z栀LQ'8O":a۾i}lٙm1儡W9Ww6Yh9t#7of{nYR$.:M_1/%M7Y$I6#t}ϋ~Z/+RƕɵT)'Nyl2Z%D>!uYtm5Jރ27YYũ˂Zi2-Mn:;\# <9b&9HY>\5$'P1Awc ]DȰM)׭)in!օn&ݪpL N57;ۧ>%H21AX`fBmԷر.~LJP8Iqm%U=Ǹ2yʕVb;(#퓜"I;~6`#UϗXE[쟿o `9 p( Lj.6$"lѳmPXKwP*^3/Ќ0bTm@?e{{2յds oBz݆v=NH#@@=DqX<2d|wtfc)q2#q.[RKyA'{?UpxOL(<>YM'&7nr%(ƻaQċjTx |֣hmca2bƘRԐ d?C)m2rf8K&IBR;F1,pib $sr`E=*0w:0\"nyQwO͑݋tx_O3@bFK8̿ P]i_p;}@9iq,% G{IO=[p<߭_UJ#?^Ot}N=Z.q'taf,L_0Zf9 pVaN(ǖQ "$bp 3fӚW 3yyޙes'[fxY#ɗ pNxe)jJ9 Ug`*`2{MFxt`Yf`PzISοG򽺪W؟~7>1>j$'-ZZ6yK RF( ޹NO;xD|KGRQP(eڳt9;%կbӡ<:z%3C^#$Ѥ0v̈b7L/y?bv[ߍݍqL m[Ooi@a9v^YauuiuyFe6#~y,ȑavc؁y=y|O!4[D`: n|T>yQYk,oOQW7"v\$K%?U[|YhCiA*׬,ӕwa1|;=XB (XI38,*MOl j6~ Q/FWS1annOF2-J.+tPZZml!B i;W!A'e!!q |Ɯȁ_|'eЉIn X"{%z^<9gR '*7Wٚ밌DŽ|}a1imԭw pGYd֞;1 3TsZp6jEs٧҃]qT($ӳmrlL ⃑1 8{ y+&"g(q&j{L0k:bS\ XY]QUUē,;ǽD,'= -Jh0u$XבK9@'`WiPz-sNr+]5dԤkY u5Ryx>Wo#vrh ^O9)wo iHiQ;8!s4~FX-޳ySlAnf7j7?T  dl>KԤ*G}2H(o*R}_cƘAA׀cӂR1m+QM0 "XÁOo 'ƻVB~8ǹԠqR)O-++q\2_¹ai_~x-[p*ӒIG@JVx0v9ɧdw0=4G$pE((+09Eʀv+1 Ɣͨ=q)O\ &~}yJ[߭O|?˟ >9da"Ϫ>rdž&r3@sB#+C9ϙWr="3T?U묖"뉊Dr!>^PzݽP㒏_/I4'cY#.Ƌɷdpk+Y׋HîG[ ]0Sc!Mjq=턆)Mb:zj}ֵKaDE RͽYrHc?mkxPC)F2&VHgh[bwXto ne'KBZ|?xr 1Frr+/ eiч#nm~ˇ ѨkL8us 9!\B0d%.p.qr;Gs؃l ~1՜ h5մi7m4 EQhr2 R[9z᝼. ظa!%e0ݼ6%R: <`_b-9!@4̘F13 "*G4dJB#(>'"$JYu'afflVfZң$Z5wVA[z|1 R)jv,@G{dž!,Ѯ|XMZ/lO>s47Fp>=s݈j *'Yi2/oUOj,hlE5)ܥj(?@ɪ<~#g+pdeKJ '8p77_Y.ip^AsFExyd*X B3DsEɍQ/7?Nt}nuMF=172&BT|F[xgz||O߶T O×ͿOxjQ;Q抠'r3umq,+ "ynI&'E~C*vZ?9执Gb|Gw'-G:;DmXb kQ儴Y!#8O G qG)Y9rvlcz^,~('w?9"pʮH$|YMPH܂"0:uZ$Sh h0X@Ō& +7ԣݶQ?͛7M-oTm%"$ |N#!>*/FlŹ2ᒨt,ƞ€֨`|_vcˏcK|V19 YRYQV8Sr=֦Zz ')>ػ8ѡ500Yf(ckoNR=)ɏze7V\!$Uu1Z3QV6#dm㛽Օh)߹ƣ]z0}8egp9I#%@syVX N8櫪&)9ks^=$U '!#qx{ p4ɬP,s.]Iigvd]sװuwtr\PUjg$,$QA3UA|iȒX^R,m-!=|,s2=D!RXG6$ӕڒ-t%ۼ:8gr= VשzjgRD$0TQ@M),ץp4sTgh"NvBEQLʽOш azm!/Fwڍ}1[sGEZINެIs?PznzKOx̪jw>'56zc Gbޒܓ<kڐ6 A ԽJ"=wbIhW('/ SӉx N 7coSVQ$* HUݑW\]cJ> D/j" nR}6#5?evm1*%6>w3r4E|EY|ɪ^"Q۹p9Nk-ePa2\H޵yk;wlݜrgˀ6<2Ul"O>\3\CnpW> :Isq%8/yEd?D?oc&@ R!dz| 4(rCaw'yQSe[Hҳw'=>C"OHD 5BkB3Ɣ!]m@ @Վ[XdY~&5Qhz8\!5߭A*=%4u[~TnkُTfƃ.5=;[mnAw(Uď#ʚͶRQ+uGC{yz_຋SRR6;*:e_i.2$wk@f;^r &EqMx q5<#n`/s:1QW']cDx%7&=Uw-=#} =RT#Яŭ-Kf{Prv58HnTR{W_t;r! qWw58 `xU5iҽ+A, w^;g-ח+oN35?.' с!^o򽗙r]X/9Z V= 585Ð黏Ia0&a!zJ'懞6F˹-mٓIenMXG{DǯB:;9ySK#J]eby}w$O?-I4TxUSR5WȾ wޛmK뺖>K]߇V`竫?t1.Ǜ3ox`L4}fVUww/A.ki](sqc߹6Wbw>'h;uB?Iʡ޼X/ >ZjV7;h\“.,3=c~ D =q 5Wi?b?WQO ±:RQii " Py]\5N@$H xbSwREzmse-r# 8YcfQ ETȮ&s+\nW pa<0WտFKAy4ʈ4Ey xbb0pIV__."<ѧBnIz #|vщIXP _i2JP"q88N7@3LM97y^eĉm'6j>c$ȼN8q)>!,,ű_d#ywk#CIu}J3 XmV΂P}4AuZފ־=0{ARȾ(~9ok;GUQ-<' ŋ|Z;̦@` cK$ rꜣV">x`)iKqrd`OP~uÑ؉=am> ZF-P RwJ&7׈ӕe*x朇jk5H݇HCf/60,EpIQQnEeG#\TYy,~ M rB I[:Zе P-(G߇6NkޛgҎE b'f8"Ф\E~dgC#֋90;"bj|qsj#cNU?y'D,t?)^?VY譤cnG{ZՁ|YũǥL˖(8Gw_dLt_:}Ir6=8@Ka'G{olyLBJIڽ#ofN3|O_)U?1bէ\%HQ Su6:w U{F~'jak%ZC~d~pHRl\#TQ D $77Z#{`ˮ`P>˹7YcB>U4.Y SP2?7otc3|2Ëi'}ښ &\paO1͎Y|Xta"S2ɘQڭkVj(Pp[!۰Mr,qYX"qY:}LßFpcFn>FK {:r@ϢC\4z D \|=6I6&r:UDt+d>.> URu([ <٩Pr v:7иMÖjVoeZΛjVũE~;S<ӝY"I7@Hg3Q q8q8r.i"P^>^ޢF,Wn䍆L-.a{sXUOr<^Qg]!ۇܶdӧ90Ѿ/8-Zz&=>᏾c`jJi%O!Abs8Ծcc;1I: :?i ++\~(`y~usy -7$R3u݆$RErkf%:׷VaWGIɥ_+'z{Ì09Ӯ]奐Y@~&US{fJ[D}ڞu(e'攖+PzqvOkV+u S4  Ttg9"-@4'6JG[¨WdMHf @@( o ji:榡j鈭t&Qʧߗ|ˢ%ێ0/p0Cquf4Jaᨽ_i~je+cy~Lݙc˓<#K?9nU]-[͒irZZDnD4J{$V]-/FseQ`ws ?jI\ctz-e!lAsOkPn3C헳:na˗"F>"֜hǹ99=7 :-=23R/ `G|;,&I%N2S")[t5mČn=@",QHy[LprGQVMu16WF觮 $S~]jꞩ>.!QGʮnҕp${¨k#|`bV;S2 sGêӾ8#{dPh2&7!+y*2d]6ljf͈Kc+,frebZۦlgTcRm:C k_RdIsϖVqOUfm02Eoz9 sOݥ=M#.ojaclQ YrGvڏX1!͐c79y Zƃnd*l?G lMԩ($S# ;;gb土> Eui5)Tu=;Q4Bjxkvͮ9 zvf|ѕU8 OB7xNjIctl }9F(0Ƿ/jKSR/`?Ev|-3ZRz?ߟ;GG,1Hk,[~}=nC3Tq1WQՐ#A_o!i\jPXQRHcXl%B5?kC( Wǔ@oiA{_:pepl{EG`J&$qG1)GI{`kQ!XT}x"Gۢc0J#ئ#tix=:VGOh|pX2ק>)=ZM' _Med=;Pe;P[_NE>'r(-u@t#|l`^(/Vs}U,{>Xc<QRԸ_ï0]uv?fEav (EF ;P`ٔc3cFIf`j1RZ4†ߋ,wv 0fleߩ'T;W4a4>[+JXCyU}28Z)71 yH_Ҧ:+!CڛLgA.:?_3" 3Ǎc^%/Gmϝ@̤* ,|uc]L4mc{fv½ \}e28]s n|?5&_I?d|[\ٺ(LT$;[!lBK IO& 0oP΂0 ?ݽ:+8O!t]z$ }t?p.U+49R#Cq^6L"S-}x5(a3#ז; ӹg6~lҊ/W#zr}1 9%n rZnhD$dW!,dM*h@ c{iTweA$?)i)ⲯ/' *QW!1"#/֣zQ8|->4XwDHEU%G.t[Tf׋$. o;˧@N?w_^'wDŽ?QY)et ɸ'#gi^eNBup%מіO仉g-qƤ`^1и?[UM- Y?rd8 %VŜ{_֑2C\韚iut9th{?OŤϪÏ6j`NwӽLxe ~JB3A>0WGu ~ e8o5E(Bs#^jvHx|̯ZAz@7,j sm;FjlTni`Y!dNWWෆƭSOظ1\z W$$A\6hunµ5nRHCw0W0 LM1Ov1($ ȎIH mTxp/=ԑ/\}h7qom1F猨o#xB!?o2 )7R ~!Ӛ7+%~=S(EU cf5Lj߶,ami,c, .`OYTN(,pzam 4]^H?e Z|WhKkk:sS$0! 4VP ՑpG!9u:C駟[nöh+#cw_8~XEHRF$éP03!زr?$߇Q a tP;[?Fsk'j̝#kOJ 9GJ3r?qhIr;ޘX\'Txʬ2 ud`;և"`To 1¬Ho?Y5{.潝&bƢ2!4mAiu0M8< DeLkhJsvrϰ4̓'S=F [7#YH+SIzÔ4gg}wR"2쿰'ZN{ }z\80ɏ4xvuY?3b6"6%ˊ$I܊p_֑5:Wn|}}1[XfFq5U7٢5@;g ?.|ͨޭO `Gg[]. &*"=;uW 5ͭOCmOxB)W{/O~0({еO?gvf4 d=8ܺscqߠ\Rߛ,\"+=r}66EpoӦXM˴$SbzbxVy#yy|JжNz? iߏ~ɬKzw? SkHl2?9 Y4S203͛WD>Ttjrvv&)hd8(ă>=#5K2)C!O|r2*9ր1a~f &ƤW'~Pu?Jy{Sw9t4A5c;tg.3'5rFw[hҀ.Mv|ku5$ljڹ;o-f70!Oaʺxdwc=F-f,LN~?>zvnzcB>63*FXJ]G^9{bq$vF A%'WM(0OѯoYu/*_]zQB1Jl!\dSh7B ?ˊMUu# zOse2iOO oLY%é bG͜h7W,Ƿ,ۭW]MOfcX\:m\⏐9!`Z-i$w Y}b/"OJ҄8٭RT(n☜"VdMzr=S0orx#x^z9S,ș(ŋmkmjbQ᎖#.\EGS+gnhaNX N%?ш= &yv:p-ց_FnkpV#N #OIyC.@ l`f nxN!l, rJЃctMQđu$W2뜪gFG&mBS3X]P}>a:q)3DG.8H hxT&hKKG^f،%AƵO ?1^D(P{dJҭf]AS!ebR,,兼LE& !@GT~Amp evߗm4{` 2]"Mq>b oTWW˼VKkй/?Meg_lIq ;Pg<5ߗ%Pr'ev>\RrH常CHs>_N@,F|U"LboBŽ,겏o9-,?w ΣKq6m-}fZTztKH~aO|?Do\هY䉊qzVح~J]:J)omqdNR|Ga#ᲘW+h\) :j\5z2~#InV\#T(~xDBb|2ŸέI~TJEe< q̀0bʔs}e+,2/(SK}r` = Fdc o {$9<e!&To䒱N x4-T˧|$u¿#[vNuV%٪Hjڌ\~_~]bvIǓ+w?P?̅N'1t5˯^ϖԧŀ`#UmA);1AzWύN+5Zbj@ _Lo;x}>5k=;v|0F)Ig_H5y:RQhJq)qrV0n9{X> Wc#b_5?}^7n(M!{vo,f=NKOj$_='CM2ZKhޥ>pR2S#"G>_k;i- 6sɷud<2yԸ#{LF_UO_q]FyDzoa@W z2[I1W>7"ޫaaq"C&s{?5B6as#^8(;:~&Q6<Ѱ> &'na>GQ(ߘ߯|~',5,~'#${Ey1-I1f!Fjo$'S Eѩ'u=.e\P f͛6q6l wt)$Ȁ7CClَ%$F*(먌In<Ži1hI^X azFrX  59`KkŘҽpz(a2`Q9c*0^e;dSVF&^ͅźCDxk:S<3o~ Tv2)k\G@,)Nm|s,XYQl3JP@(~]ۇᩎ->IS ?v>mR鵞vucLt\Me?On {fDW؜X8+u/$B!K={4vfRlbܜy"%^|7˫蚭P >'_׏}_AJ4_)"c":@[bB(~12"9WqLVJqڹ"FRxtG"?}9!HIE3l,;ET=1im ROmzpH+[N /OaQ5X-E?fwOn q,Yb%"?iD, z15ugG~I0{E Q l'ԣ-&䞙;տ.v71(yt*iާ9T;cZNǖHy2dO/+6\kr>(LDŽ)P߄ s^$bl>5;Gёe{xC'r{`T1F<>?..-?5v¨5ZJঝsKzMV.j<-F2G.&]=Nju:8qe$#sɔ]At4sGDa =S(R}Fp8Fl ̑$ֵ9K{ti*+N$z9o"?_$=c2C{)RJ,=Eꢣ|jIJ_:#hG%Z7+Gr.Od?dx a{<}{ ؞듋Q k *`J`nTcD½i.d͗-xaf܂˺Y2۫O"ǥ~]0AZa2ATva7%wMr91&,a@c%MG ZI0]!&) ~#{zl>Ip^l 9 WNl,.Ф+8K7tLadx//lxl]Ul7K9p^"9EE £8 0k 4? 9vKB֚Q~s1XG7FsJX-yxg ސ;z o\b rQgN*>pUqק_4E`232p9ֵ}JU ¹7e5a2ݜMoS_We5Q:WgeO`4A zgK 1"y9jv/lW3cU2*:grv׌0gj<85a %HϏCNY0{BB}٫͌Ys]K-w Xî^7lpM>EXdocf `+ zKG1stVRSPzv"x`Fٶ› ӻxIfAQ_6^/l‹PnO?~Pk,84` Е:㋻=oP\~.@á}B;WrS$_HlUGOm BG5( Į!FPPFpqƃ#TxZ0Yʟs?RWڃ\D2`oF5 W28^75>cQR'';V7eTU7۟Ny3ᑔ',?xk'wD! 4z~ ۸,Ë*wǶU\\?5.a<[|@~u=K$;~ FnuNk멗G 5Z)[[?.`R@㘽D?0e<ÈxgXhɞ+2)p x/N aTX۴ҰNJ"weo$)iXh*gáp Oƛy~|NT[/cѾYOgS玛&,L#_̖+LsDeBGt/C/?rԵ&vPh'м̷[Q&,yגr)Syxew8QlQ9׮YUv"N_8 9+ L UM~KyYռ0)#I >x5@g]OS07tU擋lq=N՞s_fh}qA9+U !0$R3sqemL5wur']K] s&CC'n yiEo WVպ+xkNrǰ`z%[f"lN8C$Yx1dw7/|s+V"A"8{zHRtӹ˷ƼKri$'m$0UGU(_׆+D Hbbԯd Jq PDt۷ъ#na_rp_5}=s1S*2h'18IL:$XP  TAѰT22vghJS7\G8ep桨My,H@_4\7mb:%_&c3k n>@LN{l?)_ yGqHO<-f[;bfY=)7 ֙{Yj0OKˣϏUCQ3͎L9(˦͏S ]rWHRTsT#9N/9~AfVF*㐮̎،t πh;&UI؜~F"}_֝l:=f~MQ8Ӝid'IvilـL?Э[DJ~?;f֛g*QY++бg@ҵZ*-F}~_K c!INJ5 @DW*.#-*<ѝ2)dCmɚRYߤp a޶!opL?n>6A?#MŸ⠑OZ{9rә>8}`L3/bO bv9n9pHç8ӌ3Ē%6hpdmQlG<$ŗGVcYSԡ.ѧB >NtIq#QXsabRU}^YE7#ơ$l"[?y!b=Ed#|?eJĜUv%),V"ƮGE:(9?EvFu_Zu=dj}*~P"R|G(_$:bkWvʳt١,c81pe]t2"I&-R" EȩAjx <Ե#$!?kjV?F%=ZCv_4|C{/C]2N1nQC$nN9s>=n2 Y BMu:(N5<}jz`#oͮ4ͤlR+`|{Kۙv^]Fd8kh`:Guˋ&YC$ߋky5>=F\͜t0]y6aE"}^ 1<& |yfvs˥l#qf;tEF+mGl(kʬwf9h ف|WubXv,HJH6zezA7j݉s_), (eb(IXkD ~$oĵƗD⧽ 㐃"{ pTG#?X~I),o#_++ZjR Y? {7Օ9MVO;~>l'f9XȞ'Jv#{8xnU#V 2a?ܾPFmsC|-&xQZG[y8Sѿ2pL$}QOegӜGM L~ٸ_#n_|42djoQ7 b4m"5S2WꗁN4ɝqĨS9z֚\cG\H~dFHʵ:6gņx/1>EBh MՓ?yTe)!-VXCSbU7IӢ()s@UF VEۦXnݔQ%\68=" U@.Ԛtf l#"H_ZfoedWqLDR[|.ʭNc㛯N?6Lbl$1J)*+ d_ HWl05́.mU?8١ ?`:W$1Ln}i;kMY}x#QG}/V+Upy%h 7%M1Gt[;#oX_ _zx:~3LE\5k~6OVEsZ?8z9JD uKRK7o30@(}c~_ } cכRJ|!GV9QMyHC8Gw$)Y>HPQIq=F#[k[ j(rOpFD-Swmc1LcBWN+=zc0C=jV#Jd"H%RE-GqQX5|zheQ8~ϛXLdJ$\H6 wxǧ!SVS.Yx2nGZݧ)top]N/!wCIhթTVyfu$T.baH>aoLVS%:msǻk]=1gHgy=ieO'#:iz]6bbo\YI' Uh@c\{#$x^Ո>Y*ּHT߿C7\kvvaώ|1VUƠpgI+0 lB(k*pqZ`é6#- xև zǖS, 7ٞdUKFcb6y%V 3rv)Nc:bp m1D#E,N 8f 'a{[Y(HVBzK*oHžY 87>CeI*D܀Uj+Yܤ"?N7{/Ը:7/gni#&SPv&5){"\fjNʞݿVKXr,s'rO3.5[+[rܠo(US[Zuz -#k0s޷JTWH祳KE*~3&| F6¸S'c}5wMjTV3*Ȏ$'5uk! PIjj"K{sPŦXљ6!k{Ѩ k[mR!xx~}&kja℣ b!=0Qn$c41Tk`@h0 dHWUoCe3a~i;9f,hǸs,{CY0N\1Rkh;9|7$vwT z)$Sҵi[v*)ۇ1Nr} X*MNtқEe@$ ~-\ŮK'Hqik4Ũ G<0mێ!Jx3YLF^aru"5lJKv#LRU(>*f5n 3D>?l8$A6@Lɢ i"z)*އո*C"31sPvLwa IEOs4Vèd 勞(0Z`ܐl<<3YVZ>,fPqYxG:MNOec9)bAQxrکD"~@ ?͖VSQS%, ENGp7n~8ʧ=75iXԈ7?rܺ5%B9-nDS,&UhAz:YDwn'Nx3-9_ /AwO n]9S;7(f+0;*3I ? {\O\ sp1bpII<M ,iS4}qY1|;C.~P|L1bqrp`}:׍yBIצk= 8u\R9ٳ̽CUo'qşEwӳf͛6la3Tejz؃ٳcFOу⛘R) 7z?]gX3_LE`fO^-Vr囇;; ZY._Lǔf?Ls^H)~&9Z^L ]F,F,zsQzܚQ&cqz}t{qۓϭxcJS?TSmߺ \G6lZkiH\_osy4:Z'ɆQ9ŏOi&%Q)ci> FXsCFsgU հ~!/|te& \z@N~^A;CFf~BQm꪿ڽ1t h~5mDt+šٶ8}H^%W$N1*4$ӡFĮ &ݿ_$>JGX{|8…&_RDZɡՐ!+?3H74u،P,N2z#^*ڥSK IӐk˼Y8HD˳.0wס1 $f Xک,xt>,fu|,Ԭ iBZfEڙuq0&!qgݷ¹F}D42#<:,gyYjǸ8-, 2\!B .er|%fu|u,ǓQNLځ,F#hmT`̙ͫxΣ Cq BH5t8u31JyLV :\hwm!Xw$ T:ǁlk{3;k$rP<2%lBL=[)~*{4NJ H9)wG|2zbscuǡ:k-M~:Ś K(ӬyAX `;6J\G܆@X ʠ+0zdC]ń\I! kp[H!vI4 !TA[8mSNc噾Rb:ɔ!{̂OA՘Q$uE,I=+q!@kgӇ%7< M/P+(>ے- F"g:t~㈈"gzXZ%%+9\tM^vR[b#ZSXN UvȯtZ}F$D0hp3Eb-CNӠamM€~x)*2Fn9}V017RqlTf亡Ɣv틇Iڸ6ѷWS5\aۮa1\CGh,pcF|:rAڐ~I *ƀu'^\E+JWR!ܣn%}ȦoY uƳWO1jz*Cz( g)ZKss6,|s5-D?VC" ֤1'k}4}ߐ EyI86xM/ɂRÚ"p 'τHQ}UQ[ BO$Ty"Zy@C1n,\u4Ëu2l,NVEG]68PEF,#8@cfK1]2aQg0>Tg&0,/O8ڶ7wnd*(EA_ nd+(e BCJ[J\=K)$ہ'Orn:Ye-H(sz}>92G$g,Y#~|2Aki f]㑉")"#Α,!R:¿m@wW.iX&aX-Nӿ//ڊ6Il7KU[u[knc JUMeRhOb=Z3C>Pu90KxF<85-qHQː9 O|aebxՏJ $ ^]4>>' R0Sn;}=í0 q NXdd51$"k:ANwY0z MF,bv ]0,凓"~˒8W^à#x@2ok{RqZjq#S8o&d1[ Jg|pBB2ˎ$@Ӧɷ9IblI†Xjh{SN Hf C~0k%R6aʸEY@zr> A:r|]]?"i!nG|~mlO .@$s9Lyt›~HwkwYhpD:p~ [FQ"WbG_dAׂ:+FQc lwͩ[TS"S鳣+v98F5,aa aCo_a %2kUрV0YڮͽpVr;,jvLcdP68҉cדUqb$D GỺ1 RH(g"6VZ[uU;wٳg ?i1겜?PpDOk`sr$O:?y.͛6VlٳG1>#Cn,$|ٳf͛6sXY2flH|C۝Lc.YdQ y;6lٳf͖j'h;w&ŨC.&O aBݭ*pVBaqKvtLp7~8o?) iYEVZ4.!*O)+vzp X4EU&3I@#q71[qJ"-bk<ygn~ˡɇ[H4YYFޓDw}.M,J:Q8 <' 3C>>< KlXlaier ֵ_0LOD0\<ƤdQ?f3P<~2xg.ٿrg 8:|r#!,Ǔ$oHT01e)lۘW=J2KdZ @: ɳ{@ }s 'ӎ@Tt&G\i2EhiAz\$Qp< \$*(;{r7'3Җ]6Ň֧ەծù&Ao9yDce9cN=yk H~]TA{+vJnquxᖟn2OܮWv2oo-EVb~.-Z"X5DwDy"TG?Fs͸#ٛ:cP~j{bQƑON'źQEq1Tr?E2]ǚޙ@ߓ9F{cF$}o_+ŲB"/x^{x0Pol]9yF}f[.@I8 Hrh;!zDӶi#;c I +]ٸ,.{Ԓ8rd?0C E@ x9P("NdFzbOEy}E)F8Ecl?.Lp2>/ᝀ01W+MÇ嘚st:"4<0QiɄNXM33w B42=y>J֯U\%V_]6Kf=PL`Ll=)GD@;׌Ɵ@/Kfe.pok0P燍/qO |CN>']]w$W2*z!~gj} 1AYƌ^\=g'd/+B 1(p:r8i?OP@ƃ b  7 k`kTjDSc\O{`ĤZa3:!kZ{܅Kw=9N-KŽ5/S8:=3,#2o /,j0%4{Hz(0AhFF[vdȥbx•e [J,S֌WjV_sO;#CD_}b|q ՙY.+@xhfgo0x3}p$>1b/Q AIW\(Rax?KzlGt9)' ")l2!:^AqFzQU>vU`7͎,@AX#lOT0t8!0OST}aO )n%pʨI9|HM>!ԮR7(InI+W "G_mZv/^[oqF|@-Ze'k_HxTS_t~rq ~eBW 1rp@xN?OXL#O7PŰ-ԴS!?6McT3QjvQ3kcI8Zv+:hѾ&dE] "@:bwRxg,}##A{MN^j2e&J͛,7PӥV'{>N%hP7Dl/E6wP08SYxB a#|tz_|]Zڝ9f;|2Cn$ wь7O~U.@ɎFy̯ѣe8_$iq28rFV6r _cXѢ&-ձY d\@N!. 86V^y"a񝗨ɢ켚)"F\c͛+6^VU$1f$DG).͛6[Z#5 ֻS- +ӢPJ$AAs.~Xsj[v怍:f&Z ^G FF"9F"68;񮎫ǡåb#R ϊm.sn挪]ZpܭRBzgJ!ݗgR+-3z$EX`MP|Vmշ"dwVxǸ9Яn~C$|mmp5z$v: 7'1v0Wkw hCbZJ6ao0ZA3i 8i[^G,҃1 A!j3f^gmZeēQWvfmTw$2nuRTgTm^a~&zw-Pxo#zчy $a˿cd/{g!.-2=v(ܒv ĜS,7SGPtQJ~'Wo_ez/jwVsG#츎VRX$I9 mx5Q)͆Z]N0pb$a7ZݦÁvnl'FLr!hZz6~?|{Į,*wμ-SL3+dS#$;bmvp;7r>Oט3:zżVW%J|{-F9lR8mkyQ 0z%U;T$r)4d:7tJIW* ZRERkP:[ͺilE"/fSEcFWs;kGxF}fQBI2=jr1!)^ )Nٹp=Z1PN9ߘ;X1%~_|>s ׯ$L 7WKgI@Z;։%j23ecalrHFCe+ @1#`kǞ%M &hj%q|qV׌| ؟sӜ=i] [}o mOy/t) W$4xwȞT>Rlc[yZup:&eoo\-ai^&O֣D;-M䌟p={?pP̏q!2"NQ-.(B|1+ükqѣ<b7QrPW o8lyȷfM,) $TuF#DխZ~#AMŶjdxTq M=ݥt:gqrjp$f>7\|LC6 6ku]钋+ԹMjQy2~l_PAٷl[kڝ>:k~%f/>#IXzl1r F2hI: 1QHv-h`mF;$UU X%&{ ؽզuXB[ {m$!/mEnmd9qgaj#U9V'çܶhD( |Fu&5?O!ҽ L@18PӮuITnC?%:^x|iNGGf^Bm#?屐4v>=j.@cɼ@N>?$KCJf5jxemsPz4${?qvaw85+_dr}V[3ûPx?;!.= tZV}vwP?IIG8!rO.CQ<$znZQ zejþ21 'Mf~@?!.Ruc_YzwgfrNa+.O5Uy5$o3>m9if|rf˶r{/F~<!xCt }cɧdϧÞ\9Ghe> Y s8DtN#Dnp}HEov‡n8ixJ@,YcRN$L^_B!_YƷh1isrecpp{?[R3Oz!\(Z xr-~$`<_lO/ gEc䪮AHa= )N^hxňrχw'.t,y#WW|Y9 6FJf?}\ ?POSB \&nn}2zWpS(zvβ$DN')T8ҽY1qɶQ[yLOj҃E0X 1x}(FuJw>Fy#3[#WmelVĂ#F?h !_Rֽu9m?4-A 4eWwVqr`Ɯ1k;:eecQ،x`m`]B]<٤>o؅pF8Y_ ;wu4iUe'u΁, @=pꨑN/nYe-&v~AN؄YHz!1{r]ˣ\־M~ٿs +z/9$m.\s䘹6$2^zԎ|[tTğr\F FEG /R9UEiȱ3y;YfeɡB촏nƣ:tkGzTdEyM?%E*yM2__}b!^VDF咍:-c 2_qr0K9~"}H)Q!40#Ͱ\r .'m<_9"Ww$*/Ȧ\ oSع ՗9=kЌ该 y;7]|K@v]vO!C j:aF91䉌.RK|~pTwSpcQزD!27j22 *zl^&I vm -f {cYz|x8 ?(1H~>Vlٳeeg=<22l_9,Q5|s~.8e`ϱ$pxL=''6l*Gǰqg#^lZR$t C;GdG=K3=. K0rfFPB_jg!y3ZBRC҈sqqa HP2l>_28\==u#Ï~x'z 󅑲YmP:w]odq_9M5|LS"A$hwv]) L^7"R!~i i%Eh:oW/5KX N}jcZZTSFX-`S$VaM体tY5X5dY7>'qz-n ugW)s# WQǷs+_ݎ? XPHe4avN[=aOaH*<۽'QaO$WC\iڀvu ի!;Sr$:JR+g_-3ݭ'ȒOQFYt?<&ZVa_ _q/ՙa׾H$JXDn@qD}_PSڧ $' zïs/|5ۺ~#j~ÚnicaI|Kw w~d2I'~Q=Oz|:؏cS'riN?<\26M>u|ˆX怔yLFpN`k ir#./ hsJ":>y&xt+TpzoqLIkkCs1zasdFӄP-LK0/'?lԏېes}^3x,[l ;Mt7,<!xUby>v E|q*IY LMؐY#a], -?E@eJDp(|y >#W!*7j2!m)V_yQ`>FkM..ocD{d l^AJv<~^vr,ԕ@Bhdpj/OMXn# %tPiذ'<>s@HK[TPB&11C>9.8ȊE]-/ F痾Wԭa ~U%X ـqvPGN?)u]1SlPPvE pX(o!%;=> z|1#1&g+6ܐygDLcY݀=F6JfpWk#G#xrW/8\XIvkrA#<拭cY:o{+d_Ѵd_O뗼ЩŌivVw$ϙm}dU@Tҙλ_Wڳe]fZ|2m8{1jE"iwR- eRD,7RGC뇻?ފv͎]Fn -ogp9Gp@dÖع䘔=F)#DŽʥ kp=Nנ>#PJL@q~1-Z+xdD8`0 Ȅ_=|A{7{Ikj"K/XĒbZf#|YFlXo"Cn=QZ+"~%f;"b 2$~]8Z޲GL;ኇhISѾbrD爏V/uSs tq+Hv.HLX7 j >MˏZHAA4#$N+i iPPG'rQZ}Z"|uË *?9޸%.KSjOsLv B ;4f-0)dgSZFJ j6?Bc,zB2q= js`WexXls̽y'(4#M=-l`gՓ"G!9}p>abDѱbX<i/x0(3G:Gt9ۭMv}gNN|YAvV !Z<9ǒ7]1N͛6'gf F7$VdUt# [/q4m*mJOV=m,?wϛ] 5Z"hc.?DŽ?'5'/U(xg)X>+I-SvtZKDh>ga,eR2zE%R(m(IZ=4?Ea4y󗼝M x0bb'@U3̣4$Ө\6OH} -‘@)8J^tniҿkIzV@L45$EXC6d7@9?&]Gҷ֘^>4 N;eۻ\\*];WPխ}vj֗1\~\z{cQXwpA}>6w)b,T1[gdaJ/e \Eq"NeV޼ ?_N-JokG -NI !lnFnO3bn\l'"L)kà V?[O/Jo֯ӆZ`g6Va7#$ 7}isn#AF=>X6;>p3C')@z'{8=hG@8M\j+ڀRr%-WL !A1fv!~t 0fĮGHOjƟ2W!$~T?K1>to幎;`1HA~d'Y@-MeKV|qqddz#DF[#iRE0ʺstQLkc{lw݋ 4@,p6ɓ BDӿԥb$Bz?ݍQd20k-xUs0zr=;vgqZ'EP_GrjG?=,FD 9oL oE'iU'ߑ5MBc7(şp;o?'Vڕ .#'r7n{MٽGW)O.QqÈqqɗhh{&ͭ!<( G(ATF-;d+\9ڄI2ygg$8&AS4(N29;K{xp;p| fv4u}@nYfţAU_ =2SBe JN6=F-]9Ǧc>-_8D] t(L9ȵ(~4o">=mMby@3PlY YGNQk:c~C I1Clkk#Y\?ٍѓ'Тu =%۠?O6frVdL>Xm"XT{0V pP?Ocvf r4-83^ptE>ґ> d`K T,~5gA4oȄ p$'p{&#Гȭ@G ~dYo"V>sHS >Ș}59.ԡil[qs-2=0 4)q}3RXU|4ȦMObkVQŅz@,XNF0Y0ye :`QOOI4e:Od5)ks}L81Ki z6S8Db>džY\X]Ň-׸;ķV2FɏyG\nS*_\h0\{Sgѯ//$kc]&@};vpgxjqLt?#iA ׄٛKj LiQ2u弟zrwV0\!PÑ]8K 4ym66 ׄSY;R Lh5N'~b7pT5W"Y$} ofܔF*<+%dO?Q2$<}w0䑕nH=+סiNJc$GxCJTdjNzSoqek]]غ1s˄0~wݟ`a{~ _KΧq:Ev̖>DP= /6xG-v`CS1/I(n_7].~[ u2(n3f͇5!SAqsu$(v lnrC;mvh?MX;'.͐Ꮗ(u{}<]ie)8"16D =*,LKwĤnnҦ|Q;NznpnFTK?RCյKu] )Pzds˲\j'V?vDH9&БeJ:^`@n>$1:?K^On-)a:(la`BeDHǗD^> tUyyրGuvY[v>xy'Mc#2/NW9ma _ʠ}A?3>zX# vw+8HM=-zvxNA,Gݭn$Kt?ǗnN m" aE##ZNocn@y4cXtxօ#BGK{:8X"3 NRl[EѵKW? |qe]SP^P S_O?h 2](Q٪Ths$ )43?SXdP FQ܊ง"Au1QۦyvIvf? 8FtmI m+Aa-f쪪5,X1T}!aB1lF9=I : R=oAc2(n;P֭'Ky*]3.f \5ze\v$`;^67"£aϢS*W/l/l_~vu YIU |Z꾙ܴS#+\_~Iւ҉msv_Ah֠nJ{I2rqCSYec[Y`/)Ö1θ1<{Pk[baJ1#q*KJ!2]-,]B)2Xm]7k2Va=pFg+m7@㺨3*GsqG6+k}D>lWyXz<#nq[XH{_],Д3,}8"R/5I y8r~c&9rxazE5J-y?ƕB~.JtӐ8sK˅CPRs?H:~en⌱(#ޘ|mőB(EP :xc qB"#= ez5Ca Q\a4ƪt1^ %}tFpN)Ў☋EO>B>mmmv5.y3E#(<+'UOEX=X%XzB;_3ں-HYeq_#8k;[]gd$ #ˠ>>N|\d>WK%1ƈ1Tj\TJ/ɳ0S?j:EunG|Ei'h1-I˙%{(aKw A={sᝲ!s:dv^8,Ìqb(~{/uܛ"72R .;3Jx=*{=-ݜ#yu[OKb*9a1%h(=I7k)mBb'~u[^:BtwI΋ro]8_?*KKFlbvxGoI4LOA1;Hk}/O>!1 -`X|IM>$>0'Xæ£ ﴥˇWD1TC9hW!ſH"Q ,AR۫STua7B"9N* 7/bFGхk+G,ZQs[%XB9qT1N”s]'gbJ\_1c_ ٖ&?Ft%ӣ?&4 \:4ZmEZtk_.äGs*gU>e8xadw.Oä <_-4 2 OѢTnzilS+Lf)\i)CLRlp+fQ.f,#-B+~{W< 2pvtPZçqW]0 LF%uþE&R V(z@,6ʓwA}nGE,4ѯĔ @9{@m%jK J ?Oasd(WԦƙ1ͳHFތ}n ~~‹kIw#&~i젚29,w2[~SSc(@E+L~Xp.aAڣ&zϔ/ P:jd {?GgWK_ e=(0iW78F~%2Ucd+ %9 )Nv/}2HMŦSv; K8< {ok0k1J8݇ɎSr>i&R)Eh^"Wv>aƶ|%m␩ԜSޚ*Q\HuV fu"I0.jQw"!+_숯Xz[]$MFŗ=5%n(ބTIt"1mR@KM;½:={ăH㲶z.OQJ1Ǔ.).AA\08zc3Ogb2?a%ܷISbG#ruh`gqr<6_gBa(@B\R܊ĤMv16OqyX- $t@F|OLuc>RDS`]N2p0\׬Nf6@<oO#c@ }b=Lt[\jmoc\$ ԯ|v0=U2WPqc_YBeSMzxxANV=>$Ϛ7!ZPa|0Rt2EJHۅPI b2'p=l׷WZjM uq\YjvbԆT|@쓝2MFf"U!CNK]=A1V7[0e8* ^,7V.#'pؾi[%j ܞR' bOQͬMVj +S)ZdS~9أ 9LeFoNt0Ñ<{O]~yM6])k9 %r} '/eqpCÂ/oFdytAM4Ԏ/g,h:4NC109|y&)ݜc_k챔k»S&K:ZҐ |<~Cl/ȷrƒH:?۝go9͆ǖFg8\O_lq憣J3f&HLe pLv=^j_^Y3Ff7}F_" cF'}/HԜ\ JpͮǗ?~ *x᜿ϊz;kk(BƂGL;zD!Oge{;ɒ(t37)FiC|MF"qe  ŖDo!ҝOc5x}=&mQL9!<wh]F[rb9}eS93.5 ӎ Uܞ:NɨJW:btya:<285u$(zL0 v=ɣ92fx<88K4RC2=O$X0_8::TWm dANj7inJ YsA $uه\/,X>c&˅OQ[ o_ ga#Qile؎Q',(}X\^THL/mX}MUH m5HZG#9OS1C% ^|O둌k>M.->31&qB5FU۾Uǧ F-@R2>);1Sj1T "YB/8ڿ<+4=>ˢcQȁ>g94"6 oav#z\""'D_'4,O w =RfMzMMݿN-4a@ao,ii1 ."a(ܺo|4FST`> g~546߇ 6 -5h(g=Vnq1譮GKRc!d C~И_~$Wd P}ΗvGW?ޘ*+53X=J{!3iZ+?& Qㇺ5ϦjL3U9xń"jp;tby`BPaA~UY2yB&r^*7s-?hjOhnjx.|D'ivjgkl#Y qT܎}Ay6Ki#|'Ω{Er21yȔg8fGrbIG`zxFn$W0om{[ 0j{rp 92e pCM]2hWo8#$7]u=K5NH3S)FC=B[(P*~}0<@@ridG7ݎ+QAy-.$Yf3F9sA:bKb.WQXծ=zoð͛69T8i9ȼ=2iّQ!z B+۷sm+]9Yj$7'x7 (@9*槥qz[ bqM'KMiDpm;k8cOXCk:>X*'տNouuHjq_ R@V*Ha u9A^&hiǖ}5P~ ү4u5tv;&jx$r c?k)VJ\ʬ~Ȇ6lxwQtFþ`~ˑ K|E^ YmG+oHɡ??1#svjR68]4MCq]ve iQ~cl*\[*V@Wկ;/y,xs `z=N™{K!V0+ z>Tdc=!\sH<'7AMQ}y#I?V?^:PB^ھ5x4 ;LfSdGj?rz7Q''#뎊E/yqOʧ:Idҭ$+,G4g]B}'  o t%z'{pr*.1?DBJDO~Ե?Dk^_31""C?3"PS!̉#S*w5l-I5,*14x-9?l8n@t;gna%NW *NépQ9'MkO7b+Ĝ/סQ3cueqӚ:t-/_NEzuA݉F/i}| XzE)k/Ӄ?%Ƭ<~~8駳CGp7C_Ujӄ7Z]xG+iX9OA!'d&>d{y<)'O@+}m=F #e8Rq tc>k_Kn+wkIͩFmn;5;#ڙ2~d#nǧ@2Ednҧ{ kjŬ2ˎX$W<=ٮ؞QkvoUQVv4 4hԕo{ 15V dt<]H#旳EbrpG0I+qJ8hqyi5"q#DmgvȆy˦xe .`c pڦgJe1?@Twd1 ֱ=Z&R_ٲ=jony ծN|ͨ)W JaL=<9ښ c$ Ξt0472歃oo \0]<ӯolyrgKw8[dKM Q~lZ3*yEN_<>1^,xO>N/kdxz?_++TC%6j~#"z*CjHO$_lysarXm,tx-d_7DgKF,ٖEA#!̧N|,41NIl/G衫(*$Eꀃ֚L w$\GP5VY(VIn+[tbуÐSiK3Z΁օXT wi'% ӱ"ɻr0ԕB@䝓t#|Cc31;~(@#?N݄RG~Q@~u d"5O mA9)AQBiRk,=J'G@EskMa䨮j~ND($g"cq9ݟ\@;wLD+(?vbNկmnm ok2Hw}i)'XA= Rh)wrIcpUˬni^}Qhe)8c'wAiM3O8ҔY9Z4ȯPTGsirZT؎A8|.4a%WXͶu/`ji{Ri%1u֞eiph˳#uZ5 6U Aդё,t#pYqL%/)~xYv-B)Vr0`H4 MD?kˢa@QXׯr9gǓQ3w>yz{\(s4|jv8`Tөi'/6(r2ËQ8$#8ep2AC<2G鉸DGIK҂|OᅑZ*5w>Jg`h׮|#:q@S3ij#Эg9<η1ɖR=J{Xr#ndl gTU0SӒ*:#wBkv$^Vr?a؂*2-i RHsf; lŽofQ6j ى$daRf{⿥}Nxd|Xw*]:{eLIȮCẈC 4kV> ߔ5s QˊDry@ IsfU ~q 9'xx`(cKTʣ猔+ۧ!MgI*omV@ |#%=5ՖmԊ>N_ 3QaW6>HQa@]t>/Åq!=f>Q4N64!,>s*e_@ъ2ot$2`ƍ/;y<4(/lyy@$qK?K.-i4_N{݊ϤxnEv|>QVtNkY琈31 ?EK{g)ێ;K4S6踔ÅDlw6wEcjv~gR pbKʯwOsǧX1TkxQ# yk6("w? /r|2;&~x;M⹸Djz}&n!N\s8ȡaA{ (buj}0ZgU6}lcռ%+Yw?`@lub;j292ڧ_kmFxHm ى3rZqSJ힮) *tmV t]CLE܅ 5_)ϴuzC<012E9#(W>!_b_|X܏Q[\XJGOB=ȥ5si\#%?dG?+.+L)(Ή,NcED ˛2V۩(<2FޙA{;tg!"#)D(B01{AaKrt_ג#!QۨM!j) (x\!`xӪ#}i%w6 {o!ZtoXl2ɤ`)vԶa٪GћcR";fR:TRhѬ/{衩߂ /;|  Y#om[J)i) zO;HmY0FK &W!_ <J#b Z/MMA0}X=(@UJ.ԟ6T4R1S!픗߁}-pf.l#Qd<3vˋjB]Df^=2m!A72˛M1yt۶y>$5%zm;Lu6ARFcˊ1O44ڻ*ݰ&sqs3Ʉ8z[BdOQӚe$j6=kwQUv샜څDh)f13\%'5›#$2- 7MI 0e%;eg2Posud${W6Bn& (dNVOOppdpK{@^-eko޲=i'V[E,ԮF乨p~Dƻp"JS1I,lsf/v5 ε-ۆ 0% #Ǡ< O{@f3-3{pw^2[).ėDŦ.Q݊L1bN%J9ScgO/z,J/ '|h3?Zsnf1fvW={پqyɷ}ei01b2Я\`ȅ&Z1S*I:^9x&,&n>ɡA?*@DG!F"ݯjXG%tܝ*_O: q5ϼ.DiŒ|-p-8 6?<NC//c`0%58ld+lYMdrAaÎxLcX,Cl'3Lm&xOih _d뜾5iqt=fu;Pw!hEErp.ç9e[ÕS ֑N;ed63?µ+yH^ C\!e70@i$(UFD]!ƞxv/?}>@}gDC$ }?Gh6P7p#"j0֣ܝV"zc SOgpF7OG,[dE) 2S9ih|2;=WR[ OŧV4넒̝+$ǟjf.lV㟓y>§-J'?G\5:]eGq[Օx<ƀVfXxDLl2$ͪ?DŽY(K'*11\nlŋnN 6i0GђM*]C6ٳ;;'7g@#r?x e]cv9Wl2Ӭ}r }>3FH|)~}o2,}8OgPhpP%dd<"g GztzD%iq^%' UWmO~?ۻFkcģՒ]`y/!"OC  ~W chu"{ 8H~;|\CWc: %Zy iRّiKS;r=,{iotHqK%I{m[[?؍'hɈӥŰ%O% qF2pDj @AdU/{a%1[n PgËf l,{8=ۘצwvӭCO0iPʍ%Upv>5rÖ3Եf"ӡdK1Y+gn!i_ltQxZΒAE\“0"G=<>a2Dfp16(HNϳ;744zhf [mv`.Gh4Ue2>O;Oˠ>^Br 34iuoukN,ѻ#b4a q /W7C:rMmy"55̠mq^#>OPXn= ?J)[*>y?zO_MUx O ׈5F11> rܢO1|l(~`<_\XtՎ$I4rN6=G$(S5mEE`Whh#Tc0<]wOs2!ybɭFC5E4_J0~9Hh{iUr2kk~ ~Gau v[Gw^3چYjX$FEtRz? :{P9X;Ȁ@#('o`sj H@'rO=`RȀ)w??ӭV 6"9_߳â͓>9`\1^LnPPHF}f6U4R w$Te_q`?ѵ;c1ʤ0hAR6?FH$#94D4mcWh[[IDה#ath_VWLxx|G%m!^} ;TaaQfU,]=H _~SZmRDPX}i4j"ы\ <-O،nG7̈́,ވ7O!$e, Q;nO5jz(9t@@ ( &:M*΄у ᐖceAMktqc}5Ɲ.7ڋy"Q>?CS0ukmi `TxcM \U׃+?ۂC np5\D0  oH/䒀j*>8>s/_jūZֲ"a5~/CO9u :DQ^h p XTW(XOGHD~Њ΋q(]Hh߭H WoX7Ⱦѓ$"qCM8G$D" opV]O0X(Iq BoM - UIymw$2>ƹe^Pe|o5`hkWG4ܞgKTR'E1(u)AU֝@E0#Fާ.)6{vOFsw+uv%TSQIRLJp#vp(]H\7͐+_+- -P;L x u*MrБY1PZ0yFr^mƂ&O_|ϥ~^_ mqhI\Pc9~YVI#M-TZo:! ȘLPnҙ[^[bHɯOA'袏g/9M#kWZdmќϲ=}Gi< zLq_G{v;C . @瞯lyn"~;ՐbZҙ2ݓ$k# 9մہ$+SE&}*p0~&xѐ2ڠb r=1K8='YK>G:'(0S%H9)(bD EcC *{a2ZἚnMH2 \L`eNı=Wef}BiE L_DcaސQՍ5֙D\_zxNKnNcT](TqmȅރR[doQw _:IbG܉ hc?F5z 7cϗ+MW# k{y ^N>Ww,:6:s_FH}d~˳FI1垌m$Rh"AgdgKl;M7l>ynOc;=*FXns/X)ݗ66uFt; qm_IdYyQn(ɥbp(ۜONT[/lUG˨yhOW諅"u\I^zSk5CQdTouVmr5c@̵=Ma) `##1Ǎw?L7^jcnѸ((Ie傐ku_CfN:tfO2[OԒ9TyX)eU:<$ZyBtVy6 _~5^Iђ ~'Pc9[8y#]-wWT CycHح{ឭFiU'p˷F+#L:=mI:HS\E}V4(o֕9fۋSuŕYC < @=(,'0FNF{{^?J-k->F龼wFïӃ}Y|bv}8:yK ^d{gcs_`ky-.dGA+ )=x*j6:-  !fjE߶K95=? pa'#<0FP1+ĈD 0^qvQoȖdxb2%p[d$M椞'"W4ҿ_佻n_%v0vdd$gJ0!9 ^`y#ڣ1cL86[6۸γbF{( 9jm` jH<<]=P*ӾWDd<[Øut uGR !J3Xjl~mX 7&F┮t]v4鑟2j;ϩj%xM_ fI8rab7RL};bFZ Ë9#Q#'kXNso.j\q5;w+D,OL&4dqkqe"J.O'9&+-;ŽH(^U-GcZ1S&H@-_ :qp8I}"7" ՟h#qqwb w ةgRXPqda"9 RAS"m4rcm_l&~z퇋d6P jCjl!ߐ;8QzEqǛcjlӴa)(p;e{Plwp|< KC^o\Ų9#U1]DI(*>I"feTњu`v 1(ت 8Jb"QHGS^oZMZD ̜g/b(Atre3ƢJ05ޚ&v,>Ydbn!n QH9S]'HԽs(FrViϟ< Ӟ tt(9ϫ#W  q7s ">JC޹ij<7- f>##~/ۥ)M~WHx3q[Y*|;kvf]J\#F; %Ylа]2/\4H~늕dLyPa>4a\="¿d{\Evc;gZ4EͣsII*:KK"fEI䴠.B'( xe,rX_ [L[yz|{>dcʚrG(ҵ$rSU٧5 IF$:d+KqGhM%96YdzfMld2eBB<"d&#u@c ,dc&O p Rߗ h{Ev1ޝ1dR +|%6 k!4r"GҜO[{##cjy|9I@c>KJ_N~Uڭgjӝo#̬(@:s;t} DQXOm<ģ/гȠ@yޛ0dwtGive?L&e Tda2S s((2("ykV&݋=0CV3%lJI f=9ц1J;Ɯ:DXTw0: 99I(o.PF`R}&2j6C\dVטS.$~3C=>C_-î۴R5Wh˨fŃ' F2"6,>4F?h|Ey"ۅZde  XG}APs݇Wn\.FI~]}abF5εi b@iY(jd oXjg|N%Bg4:N(A퇐2 =kҙ-+6ti+PmZ׀`TW$vW!M2R+"Rj[#؊j!wQSeV0RXYe@N\JtdWu2 (EG,tw[2$(FDQ!?7֟:Gm[L7h;T8ct,ꑩ+TBG ${IYOՇWBJ r=\Ÿpu, 1*<%ԓI&gea,eb@Fn)Ujܸw*#Q?Qgv¿IF ONJUFGm>Pq5!e\Oтt\Fv.WqmKG֋Jtԕ&fBzHz6O)FF='dyKǟǀ,fKmg#`0=CbSxGBwr?#/4y*#^Wa/Y{O}IkQsmG1_FR8JMuG]qC-}sU`(Z :110V:=7{|3pbMZ+/uk|CHŁ"b1XP?0 k!@)ITTv~gbe,d%OTFI6~|GPpV|$PULrCD[ ƾ1|?'gqЗv2(D=6:hůna5Bj6*]TŸh6J ,Q?؝ ᥔb(~Y 2R}y',7T N',MBǾA|93P`~$`? QC$\ehדAHay["Z-Gmn0M[u4nGqdɌ)BV M0d1@||H.vPq56Yr| BP'%~j;M)n.LQQob4v~Ep͒O.; 3h#hܟ]Ih뤷Bc g ICL;| t4H>50%QZKܓ XG?~Rӟ Kۿgt9l5!',A㏧q>v~[ dҎ(7 2 o؍ͳDSnؐw|ӹ Qp)v=X2|~|Zձ^`u+|Qx_z]II "l^ãՌdyLpq8Kch;o{L59w ^񿚱5ߡšebG|q%6=2We Jɺ}kd;C#R7$Ĵ v($};T~970D3z㷛~\Qj;ݐY|MX}z#QF|ptrHIHXɱ8yLIZaJBѢV`wRy8ocgvo2J$lya3 2* *bԩ„ѫ5wN'DQo2Is}NZPuoyus Xtb 7/,5,O*Pki9T \=n<,3>ϞA$`aFb<ruqvVru[gSΝ2E^dUtPY9thث>Y@ԩ=AùeLвy[]z,WF߶@/k+FJ)QwtX Ӊ}ٶڍ_g~|9Q1ÆsɊ3Ɉ!~ C׍gYc! 8mѽY򵌗ZƝIgA0)QĊMXeW>#0Ԑ)3LG.3}F2|S&%QA݈=AAfv) ;ǨpCQI>LL,VPLf26ˆ콅r=lXT'\Ȼl4n 蟰pTlv;߂Z"=" 7F"e me E|1{83h-UJ2<023&e"D$C5ZW(7]Niq2 x=epd v$b-ㅚ {pjkw ԃ$}&nĤ=pAv9:/'!efsJtڧ_KJq߅:t_1sn-|Ѩٸ}e'>Z)NTiy%GPr ~!|!?9G# O~4888y / 뗥;v& C;Nߎ%\Wn땮I:OUou:;W㞹f ASFKx8d`Q qz;{`+ˈal=VT ݚ ꣎xr@-*#~V>I=^i^ܢܠ`ǵ3WfTK9@ 4\~Xi0}Z MjMME̶ƣy?}BXB7$y}QNsT4in 1l۳wf&8 k"#;Ht_/z*=?ݝ""fCn?Oω#z2*z*츤j\'rKw-ޘ$(b >/,q_RmT%G;|܇.Nynhc.;Am>r^›8"}7dix~4'7;G:O8q_+?U}q aC|٨"&VJv_&.kH9_j4eAD| D Xcmvdբ >A-k(!⪒zktMrߗ|eĿ薑~v^Aā4buH?TM|7SI $R)د]6İav#[Ӵ׹xe#TC T"^J06VJ#?^H/0imf򂮌:7Qq.QҦSHk,Ek?̼zg:Oo.m5;q/**:e2j2vƟivn/VY8oz>)Y%-NDdGw/`)e߉،TK!ed#ᯈL&;-_*ڸSo+K\.L7 ։D]y.3~Uy Z_cΞR+_Nd^K[ޕ3y:Y|,e$rSz8~U84=20%|y #)O}"äa7֑7&)ddMCصXdx7?l}ǎ2&#}l']4 Todw45C*=9*Ӈ806EH=T"-Gĸ_5;EA;a1MOljfIjeؚSNNJH1|$DE0 x^6d`H s|;mdž% i5ٸj;b| p';] %׃]iK:#pEF*na aއ.*~4ܩ_Ȩb4F,`xG&/}m7XT{;J:-c[a65u5!'m/h$KP: rCcm)"y[8S#w=ѾW m15 rR wI{w`gI20a ge1 d,edRh׋ Uaц9H"-3ToEQűuGEeSOJ[6}cs鱝bA=;^CwhIZYd52#1IpL tO/chx',q?u#=+?MB2bvF~w*~}DQhmIX;|[0A B|T2@V& lUD ^mGݎ6XϗuDf-m)xdϩCvq7Pv]QIS 7OljhGL >m\%`:SA9٫X]M5'=qu;b2I U@e[fZO*ӏZ1X° , -; tmʎ 7eH{(.4R1tT] P.Gl_ FJh~b|65 :d"Zwynvoņr4=qzBJ. .i XVAF\^o|)G <HP|L E25d 7W_ _NіF$ aQl D- v7l6VIC$WZ\si醥uh HzPt綞F̻ pK>DzH vYy, U&%n8g#0Uh(,PxCBF Lgiިz 4H ;a_?1 &=ʾ@խdt(կӒ Ma 2&>ޘ\Ζ\FYsm"iS 4/KctgH@z6}ʈ>IZ!U) zjxe$Bc&5ˡƶi0]\jEe{Gw 2>$Nc,Op%ԗzKҒ{uiO NdsKrpNAL*}4+UOphwG8n 6[eE3%4P>j)DBsNY/Ia nDR5# )(y?ҝ9Z)>_5FFaDXJC|_Ri#bljoGMy>~/z:ǡ2E}@?ioң]NxKY%UUrOu[Rr{&ܕhσue#uqȣRL3ݑZG*۩^b74ťI#]%Ӆ)an>,Jl>I8}&DT|'0c^I*a$<Ki\9DC>7~`@6J8dKr  ut#Ü%Ճ#ٖUkeHɏ[0J2R+ʵ HVBpRvΥB@Tg̒a-}5shWܔ[y} i N Gi!Y* ,nN\b "r=F Z]MT,?Qg & 3kih\G]ڣFc8ƋZTЇcCz7$hB&ꈣf"vmjx3A=_lkna n?e5oc'˲2Rn$ܸX1He#J=>fs*7 >uj]NHHZk__"[YM* >n%r5 )k0{-&Qɩ$D)B\6cd?ͮ;[>Ua&aS=NX/ <0wd=#]-&a[|3hԭ̑%ocsd?<;n>CF<#OУыC9ϳp&!\ F$pT\(G7,1)HhcK.wN,dV"ga:$mm=;?.Z 51.90@#⢃UaBǶ*Ev wB ƀkkrqUq`eay:68PS\v |]NL-<:1HțI[˶<`pOL:Xd(C< ?Ek\eesb$G'qh b7;zB- XPl#+6L b3e =E uf//44F>HSFxȄV%cJ~8^~wS\W ˲G[w @Vnxv>HMWtuٔ)Dh}g%MLKoxQT#`S<_4jk3WKKzĬUs^6"9KIj>U[6X]'JJVH=3ofvóϋRs +w7AUOiħșC wk_O]"~mv:uƭ꺑C,QK Q>ı-M(gE^_x\Q!WvF<8a`@YJUc,Rv)FbM`rs s[ǯ#>^.tݮR7 ӾJGO<4iu,.UHl Ow`7gs,5=;E../&\= …iLq \N>3K0 |<%|uաFc8D 2 ]JTW8Ywܶ`Cq03K?o4X5P<9bE^./Bœ\IT'(Hr<o24& } SL%NԂ[Ɇj^A$}g>yFhx@2D' >g^XHhxpzyvphVC%!B7zUT}w9僳E#eRk9&%5dڍӏѓ [4o]4[GN9;J#*C cӴϫi-b$Ԉ6{韐].Ww&m.Lv@|ךT.լHd/<zH{qߜ/F)LC&kFdd1=dbćc"Qor[v[[~-Gz{amY-fqEI^ /j11 f9-ѣ' 05^/ kH{gbv5,b2zWǾq<51q~[)K-ȍn"I"f":Ra( e2+ 0xm򳧁ׅ\֨DITo`mSNftc47` ~7ꗑڊ/)A`Te$A0eu ʠP¼[S7/<{Kx8Hᯧ}V{w/5qݫ7 )(5# <‘ ĵMV Ej~{f+|2|v֢E?/('qJV4ݯg~J?˯ϑ2BY2cde-GrXX as,jlxa?JsqmS 1ɎȆwY8QR:~0_1걡W'3\PizǫꉨzRdqt #zx;+cˎs5 F_Kf$C|"q u+=:68ag$ös\$n^5Zʢ]ga}oPI燧/: #NOKR :%*g} w;۞^3+j j* a\X%^_n-gBP1-+kfVc34ؤ 1\eHhpD 69P,}0IPN/]vX( 0d" ~P.?"~wdi$Lj#% ~pEQr 21k=N`;Ѳ`jrolռr܌"U\<-#]#&Eso"zq@-cv("HaX#ߔ u? ~ 2Ca0dFFEaHv\>ҢhP7^,ġT5ªI'i#\P~Z ?wɵA@`2!3/N fFERV!.:b(EF4GfM=}{W.fW&젶 re1YjB[\G :Lv2#1'fw|zkZ½S[>;&DUԙд1mo^ .mc>?"[FɢPu^;~,>3['Tx_UND.rgOtd`+sE X ݦq' LjUr` R8;d'XV~q7Hр?[krRZS7j}f=:}.;[e悲q,m/47o4'ZfJWzgЇ<5X<:|޴DbZIN1?i8bns|-~h]Ϙ+ƻK6iq|?MWhStXQ u? }ݱlB1~8/H͢FutsiK5:\rs\̇errMrSb\lPч# r)'C^xI$fa^H~#y,fK7?LO-_{fMMa29P7Sf>9:=ҝD L ǬJve0Y]kXu|ëCy 1IGS9UuFD}9}UwT(V,p Lƺzy{hfD#6,F4CVc?=X-.z5Kdá,Gv8k7vh~_WP]=i>wwUj94/0,w21gǔ <>aLS Aq!8C0s㑋/2+sB|v-r `™4Vib! ըȗMϑ ,ۦ\0BĮN ݸaǣRSwض9.bm?4r1N(7ltSa Zkvd4x咜p FȾcfP2Č\u/ eEԒ<7&A͛6%s "N \HƖd%!`kA!n_H/|'෸ط:9+IY$#b2Ί{¹/U*75ef̺ZN PS3m1 NAFʸ}siH zuF;VXkmΓ'Cўp{IؐvtȌxo .% u\ylN=I~Mǖ#_r;0$'[Cym%AŔ{g/z5M ˚RAi6^Ki)R߾`~Mz-˦!"I^E^5۷s5y7S% Kt6R\,ME) (]-kou-sҚSLѠ!%@vj|Jz'h5O;lgy'aX8ĥb0apC"%.\>,91P wえ .uUݢhb o+uZZgIIhѕ?>}=k^anOoX3Mvy ] ڗ晴m 1;}Yv~ 3.%A縸RH+!*"={.ͯA4<SAY%k:=ɧE(R_SuI\UQ:vOݗ=F=GoA %!<0?OU<<1\\.~t}g_1Rfu$q?#´^BEi}gOUi?w~b1Lnfvx+w?sYj}6iN"O 'M ]r:^ .30Z~iZTZ}/Znxy ݠV-H䎵:|W45LvWP㲳a(y:x_G=f9 [Jԩźo9Ƶ\#OYv&N›W:t*[h-@fD7G oȤNy8<m1|_,7xD(E|uN\@9ЬtH(E t1S2Fg(E4EU_ ~B;+l 7@;dP"] ď Xۅ4+k#L vJ) aWHV.QW6ŇlHP Wƫdo\دʠ9/6l@Wqn͈LȂoXOlw:#QI>V\ُHBЌ'l)h &S-`EUNdGc'F(ֽr3$l6M,2a! qm˧8 \g"!0H6O92t3}L#fp´ȊZޙݯT?j\ "_KL2W-c v)If3:PA>1нAL72e;煶a9tH,KB,pYD^`UA '`㑫q%K1i-67W&Ő R&>?^en㕞ܗ4a|`7Z*mͺ|T>%eDV͖ܽP9G1ѝClU~{q0!&H㔆&Q${ .BN&?-cO0ԱXZ*G4Og~(I11n.nF=`ŠB8W}nxHA># 8& N.f +[~pMh$^clO yUGz >GçLd5 j(X!Qˋ<پ*8uc;F@q}0???Ѳރ2ChglŽև:28Ogi<(-%> \<Ȼ49uXt\rFTw:\q 3g'e{juV-66,: @Y9 .-=81g=NƇa@K1BHNeg2I26ZxNQC\WlK$S I=t?xrKb-8?{q]Oλ]V洜|2!Ė躯կ;*r j$qk ej4ӏaRqw9 5wpd_bvҀ: +O/J߿a9Wo`nM+,x$2w{diX"~s{ u}E-mԑ#zIх(B)e>OhF~SN}2eŐq8BFsP`> Bc8x%+5D9jvA@rS+sGdFK˄!VsOΝef ɹW m^6)އ;hw޸\nREph)5JM)G~G)ю#X{39,u9l}0-1 źbR8qsb3IɏcIBqZLFV.-:fe&[Gwi0Lu;^gvWZ|#>0?睑Z_j6m `3SSO 峏.8$hח'UZbU\=FiTdr*ɦÿ-H'с*[cDAV9VՅz;Rd00qOߙW#XagcAg}u; i.=4o{6L3qjux8̰$ሒ 7ݟbGCWV WP HD:S n1_NIvt&6nj?,r9/#sVC$ 疟ƒ$yYy鴺}.i1Q8B#q1ch"%^etۑf2elub|sf͔zeԎ; aK/z;9<ࡌّERM'O|Lc5ZSQT` jH./+#tՊ0To`ıTٲ"3S/se`i좘n0Vl%*lW AC&F M0n^Cˆޕ.צ( ctU ͛%*tf L+6^lmWW0M|r͕*8LWEsfąoSS X[[\`jIc@o)HT-2l2Njo鄷 ruԯ t'~z]1Y%mB:7 =2F<ÁH#%5G1:?Ð{oIV?l_$nPޭV`:mr'qi:9\ I gcտWl5~E ѿ ' Ȍ*zfK2349cuA 15߄s#h9(&#̑ B0_Zi$6Nm8U.v]X9ys+X ㌁0@AFUGPOl PbŰh&Ԑe8t:Rԍy M~FZ·ά;A[ɥ\9G .D~97 rFqOXFx e#d uO˩bxN>ğELp\mՎB1G,%c=EQ{%0DRUC" S@5hZte~9?'t -jZe5'ٲ@0ȌZ(~Hkb, Ûfv^Fχ&\S<[cE'.W׌"u>zfMR( ȒkԮ-mc1ȇaǓXa'6qq2_My80$(=61A}]̒@n#o NiP)fm dG򮗤X`U`i致pF\GR(!C,`MvwhHUqzȼhd0@5K@&Pxm{BDI8ɺr;0K)E}FK$鍧R-=E aNZ=Iǥc,XG@nym,Qpc%]O8pG M.< [by| *`Y kW #m :!!#Ҏإ;ӮfLYO\/M2ZdEUa7wGeA *-+A6+C""^a}L%ΗƁqB^oEqK[~@sKBiKp*Oq~S=th'|Uj:03R2%$c 8|N/VH#"^]~dǵrgJ)*ݫm&^Y`bP)Ou|nQv~N醕ܦQm(qٌ'0ËMF~]T/Zӵ0I"[^()-jOrrK%(@k4DaZ,l} [Qȍ7٢}uhmVFZ蚖3> @>@!ķ|zm\0kA_z,bv1>}`~!FQ0=qPN8yrVYy~7Ƣ uhpN^ͩG q'2΁/41E#V)ybYyhW89Tk_Lcmk?ˊGX4/L\NM p ͘mUK*BF\W|v(e?9c)6\.0%0NiQn5ي֗Í5 0_}wWvivH%^.Ѓj  8EzmI8(uab0-^lڊ`,1WZS3SMV!ioRV`odR]"lvrFQzR0N$ f(͓i*J*vP?Q/6l3f͛6lUٳeqg|@3ec%"cj)58Ǚ[s Lk\AEvlS4;aS0\$ߦ[#21ʨ9`6lٱ[kc52UTcVT ~l"Ҡ<6^Vl4L9Y8H-ƕʴV5>Lv]3f͓Ҍv`3p]yG]jVEybxM$xb21PNĤPpGdPd뇠W l`&⢞p9(W[G$WPb)~Êr?,eFHHp@w?<+[~td^Cq) xDo *4)om܏`rNJ*ָ闶5P|'E$צWl$s;,=rzc\ 02Ӯ?~%QNbvRƕߍ*lƹ@/}ћZ`GMWtbȞkG V^޻clH"G&d&Ht'7NDd΁6!T ,t~ _ģ^#\+A>VJFUGM%jNJr7*c6A9.4wӭ1at#Qހ)YK$X$f_fCOq>nK(Gxk\4cOc,!x9 m!A~: i&`Y!P%DF%j|fq֘N'/{G _7݈:Eq1%v$OncZ|4܌kG$B " ǂSkF$:`(Tf5xcH8kNev9ECT2d8)WB,}-Xc#ˁM<"0s*7Wk ]d{;ej%NqF?|7+Kt&[:O`]>y)qzdEME޵|8zSK@=1WݺoK| C f3Hnێ>ǝ Ma!O8H(z+1xs*!S Ĥ 1c͉5' i=+0E5LJl"!Lʘӌ$ 3Qb)[0 UV\Oeb[Z{ nj1\1x'lQ\Xef͗rvfA+6^liTLu^V^VlPlkqælsf8 lALOxQ☟G#6U/l{PG#B|1zv5O)ny8NIEcF낡6^V^I*&N(q& IL}ye <>I])reG}muJadÊJr;/Lٳf厹Yf͛1f͛6*9]îlٲ*m\]edRGlٲJfyXBWU qQe F`dcї!@+L6lL#_lYyW/(2f̈́@vb*2`+\(0o1p!j'm^8Y%P1کqON迏|pwh_lIjt89;c$r[! 7lA{p1w/Z.f͐cHin9A\lQ,1'j]?F9PyqM^|E-hw_3F ҙ50MG0jWlzN5E|Zr82cՈXAdӣxr em=g%4?qId=1:a"=k"* *cI0rªá#kmΟ[~4y{r~<~1p#u2Ȧ2? >?g(0zbk\rii+"OFlkVf_Qإ7Fh;a]1ݞ2^F낎˷LPc_9Vn:a{uӧfR*ExשδSc,4Wh5ܿҟ5y}4F}jxpE > endobj 473 0 obj <> endobj 474 0 obj <> endobj 475 0 obj <> endobj 476 0 obj <> endobj 44 0 obj <> endobj 45 0 obj <> endobj 477 0 obj <> endobj 478 0 obj <>stream HTU{T]U F|ˣXE"O# -єZ ᨩF 5MD0>FI7w59''߹~:1FHJZ0wQܒ־^HD*F*Q&KS&}IWJ{Ŀ44o_Vx1Hu5 јX*J׮)( 6+)YS3xUϜBdG'9,t}~^ 0י0L2NL,e GR%(3&yj^tk:88=p|ιOmel {K>l/?ЍOշ..Qfm4#i&bkXqŚlV>`Ғ#wdk3TPgbvZH J=GTUb7goU!X?RaX~V9( X)A03"NA-2s=b q+٫njsMӍN!5)il1%CA2mSQ4i)pg LG4.x\7"bP/C:*oIY6'Gf2|ȍw9/ErI t"b5!ـ?:ԅq`q[ú*da-eXJ]]d cj Ѐ 4Y<]&?uGaUُ&1Rժ[UD<"7X#QsVA)k{V:Qhr=l=V:db^|?"?7aQJ6pO,׬j =HUąFFRr'_cF>W"$ECgo; Y#1Hׄ{Sq<ܼ4]^ꆥ8g=KZ)ԭAi!f;Y{n"exQ>]4)\MNe`gWC.UTW(䩢z&4CYI[T Kz K(4*<6m ӘߢxN:h1^A$S>ѳSl:s蹣g~SG&NTN #bp8~G'- c w+."KdeTc}wN ɞ/͞"9Ȇ{2y 7 gBUMIrHQk@XYVx~Lʙc,Vj|.B(NA  hJ^/X'oIx/F"XhmMT4qZhH }26>XvF>,+vT1EC JO6Z{ZD_ZJSEj,ǮjÛ6<0J6(Nzމ*LRau}2h66WQj,[[-f,-J+ W Ep՞Ǣ/*~J*K'8:E̞\~f<8|UYxjAO1Ņ]RkX`"E/xy$E䱳8-&S 9Gp^6&=1;x6XpC q}=E luU?HE͜ntg o*B%O$ p$]HSa!}G G3iG¯AVօ+AiLN’bbB0-Ɣ,3ӒadEg^}n~6B`ؔ"x8YLR J=K5\0UВ 5}ۍ99A_=FDfL&fWݩ#аyїV^ C8`N0F$,JF`CI Eq40X,`E +6lWM !߂ RKr*u [y8KQ3>Մj \ޘ endstream endobj 479 0 obj <> endobj 480 0 obj <>stream HLU PTew sE\uiIN0NƨM6j:ф5HZEl}ڨQ v̝s;߯c|}N74??oRآ*gUMhGUp"a90MP[~B5ki`߱_@ ,4bI`GKȜT+/+%&kZU̖gTlem=cta D0_fıLco`*tƮUgucuyf]O3CR]c?`_p!\ȵqOW\~~}o׀{ g!U$V.Pa#kto[!f`|wg>?D{<Κ^}d% Ț}{*PemzHXeGAQMQ#P'dk"Y{NQWGܜ C5 Js^l$;Mb$IA[oHmձ t-ja6ތޔgP̣8ptI47IsTHmZ.wuVA[`$bMbN iuâPD5挚Bk ;`DH 3rOcg'9i`TsY*[)I$ύHDZb^M(YRԌ/%zۛ IG2EïQ]f*z5VS`i}4;s~3^] DŽc)SW-ɶf/. Iq&rNEs`Bs#Qmo V ৖"6zz{Nm̏9Q3SXe7b\fVe8f_Z"GS& J+|x6,+f ohS^Hwd۪c&/ l+L:o.8"b>BByց~C6!WA_g)z1vaZeJB4qkO6Q&u2p=֩ԓNKRMiI̋k^V=f 0MLbA\U/қ 3v}mu!%2N=VбL|;=5I3UX㋦d,y4k*Cֈ#:B_ UT+s/,rIWn(]vp>W̪,j5R./\In{h>2ċ(e*=J?1;TDJXd\ֱgP-ea7΅ X1wkNԭ[jzUu+YYq,@4Ex0ʇUiyԴ%zcI]7 N`$fK%pGw0 ?$`>B&U<0H?{̭>Ʒ`ąa-R3D*c>@6mP,,J4|*mfq*h쾟El>ubeCeCa{j,ffM;<*_M<,ZkḶ`IY$!1%hgVP%A2䷟m0GIA|=q0q Ca)Nܨ2죨YD̩dhSat||4{ bBb40`Z@u4kg69fd*AvK4x,w&^ёMb4.3fgUW8w ~z~rMKb;Ps8J"p}6}O15R4`CSS B}CGg,/ ZeoW4z"}m4KӳPe(Z֔E>^s kE*nbCk2ČmBm2)"$y8a &1)dA^Fp2|((}7dk-5t x,V+ 0R|O2QGBO<#]-icPBg,M'b/ˆe.WQwΓ vlg~=i9pRe?!,,~&XS-_wY 7jE -8.Pj_z/| We;8MG-LV'ygLX;gǑD!8l!Qn>C "$~`8ƿ7T7V^cf0Zw Ŷn<\=dP/qDf A~ђGnFBzϣZ `0w ¸.[VG(!(J 'ȁ4qNܔhiY˴n+U)qq$ %qfaad"*j4ujkvD@#O/T+z줦(VHr{`.Ng*]"{~Fz-X8RsA'Hn^?M v3LN}O >L#V`##w>{ݶm[ݸ+_|䇻 #%c,^+cO`u?Lk?K0wOH l߹.}`KwqߛY7{ m[HxQea."Ò/ `I endstream endobj 481 0 obj <> endobj 482 0 obj <>stream HTiTWǫjE@7Qʨ("*KP PDINbTCQ95DM@qqÜI\f3șungarSwoջ1z'Fӹ$͉W$$ =Jt^5=Vo[yl(g&fl##mp7N7q%UeӼ&zǗ{'bbyWy/>c|ƗaBf2I 0sL,qe)2^ZeΨ{$8mqz~HTMer 7S)|5-b-=l=lMdEjxɚYO"Z.b7f+Lu aeHU9rdZs`A`!5aZ9.1tُ8f}Dm)J{$jp㉂a"X$߀hkrf+rS " BM<=l*B[kߜ>{B˕9 !1% xz(*6B ]|YC.rL~)4ć' ՚ ׳hUٶ'T$( ֨w+E 1J%7*XQ" C 6+>)iߴ89.s~pʐ1\ޯ%T|*r_r 9T'RV^s&L\[o@jJ<ٚǎZiZ3ǒ;?t5<: ]huP.*0BY!ٗ 8Пhdy*+=U/S)N>uOuƩ>>hj2PJOȞ)Țn¸R dݹW?ccvsl6-b"kid-C^WyM&e3byK%8Lߏ(n\ۦ.IOx2|6-cɬ CLNrىc-<}Чͧmf{ÊÕ/ݏPM.!4BM6´>=)`ܖrUϻ=+~iݒs2L-?ٹ"e"^QqpfGC\ݔJoeK>*^PB(&8!QT+Yb_ӾzM 6H=xW> endobj 484 0 obj <>stream HUkTT{  |a)A`xiQZLkڠѕEC|J`ljZwgLct8k=;4MXA9 *XUFR~aFub.v.77;?c07l4 <4ōo~ɜbg՚'ͫN6%ϏKj66$O9N8o  ,pv5g8-ǽq-7W}~U*7aJ;kn{xyg$^WW; SnQ'aM## _^}c oi?aΤ} 1 pMk_ Yr57tSe_J]ã"2#DTE-bHr4]wRQ*rPpFCt7zv/xC+M}Ǽk6XW7<{ xu! Y2YtϮL-##ʩ̤3 EJ)%Ρ%%cX~z7L.ao s4:azd|j:^[]POqgt.M+hBvh1 ZFZ׳UDdVb(eDUJ`D "jD!8#οv&D.vvo0jLjuP%Yo xYB#:etXzfK*Nc)Hs\K)A]*/յ5nnV7\ais{۶=;+-j7/2-j^01'F!T 4AHX)cWQ4J邁.R4UM*ֱk@Q暨KHV&#M6Pa τ=3^1` E1)<ѵxUoDF)y6 zQU+ɘq-c9e"ThWP(_Na-2i a7k4!-x^Ax VUqbɞ e ǎ)Ǿnۀao~qӱ2qIN7w˷e¢MvxKLS ^1=*:%GnRӿPA-UOrR2򔼪iElYEi#唏^ڟ*m7?4 sw#cj31aL2E*#a4t/.NM}7_gFYJ0yL\'\d:\'l1C@ȫWR%:lXw]'la{aφ SaVX2:l~0ilD%x3jd/EL Jgj ¸N 2붐{Q Kp 3;Eyk$FrW(1JPB,Ɣ$kX>0({NԞvVMM9}~}BlA pPTmBNB5vb47TV<$2r#Fq$,֒J2#J0råE?/p*֝>sS_K 5?onߴ;-4a6x8Ў,q 0>6(%Jx!ٵN%Mrke G]ѴF;3у(B_H i@3Q6u]Npk|Pe'h2-[\9jaxዛe׹`g8<|+/}OQzWծJxTbR88Av ^[.0V9(Ю˸A9ok9z{7ۤqfӳy򱡖U YoɫʕMgk[j[r^;M, i#{\Cp7hBy?0.ϐʒ%y_R͊:czy*J츃0DhDA}"MH}˛7lBChVN^x(3-usn\iղ-<8seS\S7ji@9JI0m7O|Y} S-Y;G21780Ƅn/  ~8o`*%sh 0^"B&)l p]II2SRa yVBq줆mW+JŒg\j FM;Vہ D\Oe]0*^ܥtfxA2@|wo2ϟP#|^AUTQW`<\. B)*ŏ^JJ+$Hi45ǒ!**}dLHZYؙ;sss*ʪu[k͵+4}i}FW.YL[4=̎_[T0Eu٪쵟a3,TBӴdX|\,] m!4x0n^[(| q&p5n/h ƶOƻUw$s.lפobΤ F+1BaX[hP ;Y} s`hFFFE s./K㞳5۔MGN :~j.gЍPG=3~%fvCs9QKÃHa  `( 8`c0*dCwI<,Gspe% >!z;/M$0|ԡ6E{]%Q.z)⌤d,a}'W9$܏83p 7SA_o$}-p3`@GzkzHd딨&ׇ&B [l-Cs:r}][v d `*ʙؔ,G8Y ހ)p9FϞੂǷ_詅!0 R&SMBp ={[;A?!2 ,}Q24sb4 ̯uN xrFA,r%vjw4#B߾>wCB3E82]QW}dnf_rnSf~,wQa |KlBu* tUB: )\a߈lFEB:FCpfe]]_u8w % c!غ(2iXmo;@_J`m_o82 x<#~NۡH1U1a } 4H&MfXI扲vVhfp*{-|/q[Uء7J 9k ZB 9zƝP'1K5&wI*.{ 0\t endstream endobj 485 0 obj <> endobj 486 0 obj <>stream HU{Tŝݰ,/we\DeEu)Be ., j1 1G#ZDAHҴBSVsg&=m93g~'"6H$5q> QXRPUV\"sqZn-0H"#Kbb_O.X{u|vs"DMa/f{p`P¼] 7ͥ7)y ;“ o`C#" BM"Ξ,% D@H'v'ˢբ,lm 63 ߑdeO)^rHX,ERYlL6[Oۣv]]\qFq~}C],sN;e;u;Y&G]rȚXR钴oh0+ad,f # &-r?a,=N9\A CT\!o@$ʤe._߱۴wv0h4Lӆ5e2SQG~TБ60|HJI=CMZryp! ,o}}33jpp542|:ofe+ƷЙMxQɳpVy> xBJ=5 ]rmT=sC~LMCp |CIHD&i` UPনU+s7}kԵΠpjt~_M^$^J}=HKAy.FpkUGUUhb\ɢ/ 0HhҁI91Aw';T^;AXBQ"kD-F`'ે%) bHWH{]ԖL3(leڒf%᳕ Lx w~#tjI~ Bnglz#חa:7cZ vPAh!.SnPiAy*qJҚOa5TXRr.cRe{CP) tpvp^Ԟۻoe_2e$k@;! zYT7xϺm:kpױm]ۚԧ` a; 9W\V\¦Zr^` KMї4( 2MBeQqam,z/ANj(`|:U߅pT+A>BG',IgtAa{jAf5Ha ˍ!O!V-J}ߘ# C ̈1CvXh DZ7 ] 5|"LIsJ $QO>mn@?.@$8wbq;SwwBj}B}q}q?͒^κ^:"=PHqEӔv:z޵_vAʺ8 :<XY~ϱ,Z<8Kށd G%1 FKv 29GLŬ;䋅AΈ[7hLԯJ\ lUa*mr_y|F&Wn)iG RZYinK*Pߪ͸23at rP$>& [v m]y[pA DCq#lӁj [RR,s0?tdd0Rf\)ԏ{O!F{^x#YzcqhnSoaupB ~NҭTAIazgm Gq!t,wxv5PKLM-4ٔh:Eܰz>$КO+?S|n -u3$+Gbbgݱ $o;!e(>b^Fo7w4ݪpDƟ+#:;Lb|2S1ȔUȰDC="0nŏN$PV)fSLiн -X"V9}_t諿񒻿c'"B Q Ł1X2{d8CcHumvepqOT-KH{;sؽxBp" c$'0ږ`kjPC>ЯCA lj)G ѧ_S }0s[TdSsNlG 0Z&7 Zy,{L D ~1CχZqխW:M&V֕վvggT5=nu_u:<^3[YHᣌ;ag|ՌtOihC0UH^4TQ[d[dii7^A{Vu3DDzh)SUGp@8jAsTIm_=Oؒzq.83civ觧W'9CΘj'_Nh`AUeޅUz[eq[%*jR?vJJkHNqH@g>;W 8࿹.ې0xC`]Ӌ72BS, VAHY2皯`MCR !A  5>>7:wS9}>Ib̦_x6"]~2<1}onk:ۻ\B ƉNdZ\ٹOjX0F]<2 U}SiZ[BXupRb*[eַT? ̥ӆ'Q)V^Hu1n֦C(Y|xz!Ţ,BJJ2R4EO84KYq%,yA"tXgl”Ư `lgȓcȟVRWlkL|B#QXJT-WG0~ zhBU_7C`!fxc7Bc,xs.HmDJ=)f1-k[ff V1"ykč)}:ь[6E@?=qK˟8; nfOJ endstream endobj 487 0 obj <> endobj 488 0 obj <>stream Hbd`ad`ddrsv,LuIL [f!CG_լr > endobj 490 0 obj <>stream HTOMHTQݗ4Xoa͢d&)¿$cp V "$q&\BQQP0REZP`R=h]9W͍ /޵}%՛zX*1t"'(Sx~8mEIofcg8 cOÏ[g[} ]T`G/l)M }崢Ѩȇ0*$fFGM-k0%kor5 91h `~wÒ`Y/^[ᙓB~DN?Wddnl5>V͘3MC_ T.žX cig,3It ECtJuVm!Hx$/-zRGlLf LPg3wN>5!ָwں+ 0 o endstream endobj 491 0 obj <> endobj 492 0 obj <>stream LLJDLD+Arial-Black V5 Arial-BlacktQhhgke^^e{lklk{e^^elk{{l endstream endobj 493 0 obj <> endobj 494 0 obj <>stream HlT{L[6{EmEdlKҩJ#]%UKuIȋg`; Mxh¤(IttJL=]ZiM篣;Χ_(#]='衜OZ{jUEbAbߖ%r<]Y/W_ql>۲1I&hH+]H7MtP$:DrDEybQH ߈V$i{ӎ:Dr7%2vfg|-~M\-O_ E.O}j!(I`IoGWĩ_3 b,#Vdυ BEΟ1I"(^A{М]| N3-150 (7Jy}c V7Q;pz!G|{XͪlZ3Z.ԃ7)3LlftZ{R: hj|hxi.,E>y"I$O=c:́z__t/ǬtJsQn)ҔR n@Yȋ6^/L~}j LݳEWۉ -L؏\4omW^%oh{[IM|NF;Fhβx'Q8PBѺ)<-3p:\]6+'9E"HO5y)d#yA{  n5r S N@M8zF/*8[Wqc;uaDyLv^Şs%rք7k3tIJHK51G.1F% بU }y8bymM}\_s--%wdTR/=y*GTjdt\bح6_mV#rm hkiYmTr4w"D1M}6euwe4~@vQ~c zZaֲHB<ߑ'DM$x\.r@n\ʕ&G?,gr#ӹߝ;*JGw\"ghj3)9ȓRTIM{YŞIg 9Q0Ի n%5拗Ԡ^Bk-Nf N?ݦ0Eo@H4=":VשdM~Ym Jtٿtd:fT@J66mP̑]Su^$u9;8N.kFp(WZUZIV&ӛ;&.%dbRak8Ѧ}x6a4~|9Ňl*_!ۊSUBw*8ބ{ ÂwVMj80hpk|Qj3fĥ~LAg6{,q &4U>aTj!Υ"BZD-~9b.mv v f@lyf~I&p&ZA{Joq&BSb3tMv4{lt{Z]D[ۋ 2%(O@T1W2}.&\`lTR5U iK*ae.'Sdp'N! KZAWV$.kʋyͯ },Uf?RRji(tj'qCK޸G+OYI dV-m Va D+V~:yZ 5t7YL^^c`D"&\Q$,w!ݗLiMVJ[2ZMH&F|S7k!iPeuPM~'v;8  ?p0S-l")pT+ZCe+P4\H3ݰ6D,Mz >Y}c;>1rW/pߊ[f`v¶+<_BRHC ak[:֬rCNDvD<2iX#*w?KX}WX_x~w#PV{YK}g)cgGY}gi`Urs7Ǐl|l'8 `yX endstream endobj 495 0 obj <> endobj 496 0 obj <>stream HTipS~^<1cwäB(Фc6`xe˲$$YlI-lܧŲ}$U (hB&) KҦL2OnLd;;;;|)Hz*o>+($%*Xίz\T[&3 S)O[`֞gcOCNlÐ] ?Dcȉ$EΡHAH)JN f65#-.CAC_qLax mؿAapƃu662d6g^hHUx01;`>&&9̗?E`/Cma~āR!B&TwD\'K4ר5 cyzknP D1i1b =pgoΚkՙ5@K2$z%KVYz.2KZ_39YF׸i8¥uFg-XIeRyA4PcYfu{iNK1ý3Ar!W!{SVKǛw51["ٴpmr>0>*!g(gJOĔuV~:ly\|v]aҧ7ؕZWqNb`!N˽,J8*Vz/3RSUEe#9c}#F)ޡviF]DN20ks\MV-2L^V,@<1~;*r" &zGQwκD"W3QhH'R.B.Ta'(cB9x429%Z. o3Ը}?<.XeGrP*oEcYu1#+¡ w EOKAuH;1a#\S9 k8{O|#W=EX[!Tv'/! . hx.)Fjrpa7m}}^w,XZ!(˲\ΓD. pO;n&@[*X)@yCm 8ݏ1G^x\Bf=&ߞ/[ԗbD8C3wx)fο-V`P?sVF æy{n6wWd<ҷ[X+|T;QKl[AtL3G-RqwltZ_kP{IդRK@!'^#Zjuz~ȷB9!l9# ~"3 x 0}652( ;&?DtDŐ ,Q6ziK[N[ӵ[؍214(1h}So?'>=e,Rq]W;Z$mTFn1y&. rn)dɩF9tK.1Towf@{RlkUe^,tbzN;Z:G 'C\cN-k7Ag"&TX0 '?Y[wK{ ?G Y-zKfK3<\I婝L g><%ی'x<+mah;74JFyJRA{x$ _|a6\;VL69#V`&L>E{w|ۡœ 8£W{4?\_ A1g6Q U yo0lU$2HA[COj4ŠzK֜.υz4)d'i.h d[;<@Uƚe,r>)ʢj m IxePWb hxy7ri5s# }aսh+ZKW}*f1A _nW3yI0/1YT1U1=h<νe ڈi<9\` Dz܊Hm6a.zƚggA\TtgQs_#ҟLJZI'esd|GH9h/l֢> endobj 498 0 obj <>stream HypcWk ^0o3-%и0ImKmImɔmL,ɇv%Kuْ|0i(Gt LY{uogy}o 5YDڵsm*VUjUKtr•|^k$b2m//_?g D -JOlD[K1L ;xA`ISI%ɾ/RJRRfR Rϑ-BƄ复L{"}MzA.6dXapeXvn,a,u֯ ϊq.>/q0Tx %sאĿPĽNήItq"xK\W[d\OS526{@ͨn[?\8S*bjY]A0wIkAϑzb;%OLfԌH6웷',=*mT14te_vn08ԨRgh$Ekb+D p1@ 8+V0:|Aŭ*˄|~GJG/GA2X')#j:Nu vhZҮeTj[rGkȫqC%4a ~+G$ )]M껼z*`qi#Qs7m>A7qL57jEw¬{, '<].R=O0va[qSlJq1Wp<\̅liLuN{S_?y컻woJ֤ըey XCn(G}a| fgtLo<Tʽk\ ¶uMjlﭨddbL8|2-¥pPqT,;'!;uΕl%yl-c.aQv{Gw/=mah:bcMf`hY$_xaoCw#QQbG"o;IlJ%S.TRBS'arÇCI5t Olj~n=h`Rzװ2X/pV4Ţ%h C9@gfK&ӮE6 d'BQB|&Q*D=.ȣdTQ'vWH)I%ŹVua"  kT_TjZ,'TZ{(}-c'7Ў.FƏ+}"T{6mqeiB4R G`c* "/x=m ĕe}X>˛kT:v,Q_&.{*g~{|bC=ġJ}r;)KYJ#Wҵ֘JTe mX%f%Kyu[Q|&g𨢌) hKME{S[G&Y@+1*{üD<oddF0I4Jp \1M,o0[_; c!5H}ªH ,QRO#eX`r"pzb[uCJ$*8\+$ņ=m)h7FŜA7 c]c/|jl %u%rJ^bܻl eSsĘtzMcBqYPaa2zDg5vZRkį[ )wwĶ|]k_8Z Y1ObzAQHƿ!\>*ꃣo]D4;n¤!vaZڸp;vwqfzD;iv8Ď' -$!hz@yxm\mb+S;3L;̊iWO{w['.TO'dŶ+-A`|B< 5&J><$5kC['!)e S `QaNBh1&IUe.T: 1bX@4uoK >aPpwbG.?TmǰXE48vN/7H@ߍϏ_?XƆov=hLwy_?Fnpt=HAqj1݋ZN ꤘ,8!9ļN]PcOvK vv./e~mT"[@;FX`$b_3/P6ry^HyEQ%)V%Rhwg [xwu9ys&\(h1\ ?\VFCMJoo/ H鱠n.88VL/GS18$  nG[f%x,~Sr1;`I%\@(Ke!0qy&ayN&ZEc/.\D%YAsgn* j>L7FN+4EQP~}Ӟ0?Ú C~xNt,;Ca,v'W˧]gKM HįopSÊ+ETl7ҵ2=DWz6q9'fU⇥:NddN×G~K|<]]Qlj o$BـkQ,y.XCPise Ss&~1d,vpԞ`ҍ&ky,jUXғigAz_sF"T4\1(/qx 4 n a'?T #>BOxJ-_MG&#쏘VqES/yGLNq?f&BD$s&ns9JdjsxqJZaLEM`NԲ֍ac| m)NnV`͊|l6V{ɼѳLZŃcr|,_9?uUޥ6bgQ;g}l݋Kj#fPm4{ ^Y?:; 5vwOdžn?&]&ΛZ.^']p`tDܿWEYп4{v;<yU_U W N@=)UTHsEس|q},Ϋ3WaGKA4&s(r\?DG-gB 'fuQy/w1$V/q󥴰6gE>"n8>u&i0:Q!]zOCi̳$d'ZZsIegV+@Y͠h1v7P Gh4Y%JAU)fME;q%$7!1vaV^]p걏 䨑q~Cskhpj\wm񺵚N-(T@5D|,I,B ёi;cb5u|i4#(؃RM=Oy97옚Agxe# q|tgO/ˆ~Wէ_b3aV |.+oMOd}—-%B-qa:!&=OЭ͆vS gu.u.guL6`zHk@ǜsZ˽ _Vcff]qѥi xy,-23eD1f+DtVRBRZ D^J/}-mWVCaEFnj3Ecb3f.=WOxʲ.~s%ڃp@@ ! \x"00!u* L`6 7\z 66A_yCO8_Ě\E/ӱ3LKXG'2ɐщ$<5(7Gmޗ5;'5E{1;txXt ]h=?+ % oF8rF6Dp${[b?X/:gm*~}#ƛ_xifHz̼PkPv6R=l[OcLk]ʐۖai1Oi*N`7J6):Fğ&eM4Bsr񸇝PzTo?2CCxwgg{Ld f z}inJ2mG ./'|&-q9WW[s CStnGCSu@F0}f&}{miuxxF8#G.;8O9CQ;k!Y|UJ72;I?5pnhw>`Pw_=4u?.ʉ2^Z,$yyti7~>JU?m"ى6Un/'y |?dm/!y3i4%uUf~/3z|+`j6,j,ߨH3ւ+FڎDPMB{ZYkʖe%Q9$qYE^Ĕ.ԔQ&+fDzڧhC[bR$*V/2ǏSG)G0 endstream endobj 37 0 obj <> endobj 38 0 obj <> endobj 39 0 obj <> endobj 40 0 obj <> endobj 41 0 obj <> endobj 42 0 obj <> endobj 43 0 obj <> endobj 67 0 obj <> endobj 68 0 obj <> endobj 69 0 obj <> endobj 70 0 obj <> endobj 499 0 obj <> endobj 501 0 obj <> endobj 503 0 obj <> endobj 505 0 obj <> endobj 507 0 obj <> endobj 509 0 obj <> endobj 500 0 obj <>stream HTMo0 >v@vz؇m4i(Cu^D` 7#Nvq8Nx 4^Yx'DJqrWXlKyѳku /L VDGeT ]-BlchpJSPɤJa h1QS?!s/WI,%)s8'َDƜSdyUMɌjA^毮<KURpq"&ANAؒYEV^Y(X-q)+'86$oh&~ܾDrs 2 endstream endobj 502 0 obj <>stream HTQMo0 Wة @RԵ>vtH#DgmH~DvoWi8_#ZH$; uۦDFaWXgoз cAŹ/ЎCUFD'u-ANdk{FP2@YhCǩ?ʒ S*/&Lx͸ xW =OV(i.), SN ”@y="ɉ>stream HTMo0 >2qH( E}hCJktlɛ~eaoGhZ[{7'< ֌)MH >\mzPJ7F}|܁|5֞avL?H8\ T}YwOpN'}g%u^(cĩ1ڋ2Ih#6HF&jIH:SOXNe+z(brG!)1o‰x EI(Y!BlIKYrf2-qOxl.40`nmk6~;$/-[k endstream endobj 506 0 obj <>stream HTQMo0 WةIj}hvFg'ې_Öz_n} 0{psg!tzZnƁ$2N׶@)!(9Nur=꘾q Tl=5oxqYg%NlƋX$o 0A=G[<<;20+ U`IQ2F{=1QF?': \giaMaV[.; endstream endobj 508 0 obj <>stream HTPj0 +tlaCAJfXd8l76=Iǎ\apdgAj֙uIܯsĩC9 CsNH*h[8y<' ׀J_o69hiDhZq̧fqTRH4a7faNBwVN-m@k endstream endobj 510 0 obj <>stream HTQMo0 Wة-tjRaH#D 6p:L;|s:ukáBi VUWZT|{s!)8nՃO:44r'kC3BEk!ϥ});7t-BFqBW!Oݾ4L܇V!3Ȉ|{L& 4䤜=&C n1S/JF@ ̬zJn!쨃ȼ * B G| 0R endstream endobj 7 0 obj <> endobj 47 0 obj <> endobj 71 0 obj <> endobj 125 0 obj <> endobj 194 0 obj <> endobj 254 0 obj <> endobj 287 0 obj <> endobj 360 0 obj <> endobj 409 0 obj <> endobj 511 0 obj <> endobj 512 0 obj <> endobj 46 0 obj <> endobj 467 0 obj <> endobj 465 0 obj <> endobj 462 0 obj <> endobj 460 0 obj <> endobj 457 0 obj <> endobj 455 0 obj <> endobj 452 0 obj <> endobj 450 0 obj <> endobj 447 0 obj <> endobj 445 0 obj <> endobj 442 0 obj <> endobj 440 0 obj <> endobj 437 0 obj <> endobj 435 0 obj <> endobj 432 0 obj <> endobj 430 0 obj <> endobj 427 0 obj <> endobj 425 0 obj <> endobj 422 0 obj <> endobj 420 0 obj <> endobj 417 0 obj <> endobj 415 0 obj <> endobj 412 0 obj <> endobj 410 0 obj <> endobj 404 0 obj <> endobj 402 0 obj <> endobj 399 0 obj <> endobj 397 0 obj <> endobj 394 0 obj <> endobj 392 0 obj <> endobj 389 0 obj <> endobj 387 0 obj <> endobj 384 0 obj <> endobj 382 0 obj <> endobj 379 0 obj <> endobj 377 0 obj <> endobj 375 0 obj <> endobj 373 0 obj <> endobj 371 0 obj <> endobj 369 0 obj <> endobj 367 0 obj <> endobj 365 0 obj <> endobj 363 0 obj <> endobj 361 0 obj <> endobj 356 0 obj <> endobj 354 0 obj <> endobj 352 0 obj <> endobj 350 0 obj <> endobj 347 0 obj <> endobj 345 0 obj <> endobj 342 0 obj <> endobj 340 0 obj <> endobj 337 0 obj <> endobj 335 0 obj <> endobj 332 0 obj <> endobj 330 0 obj <> endobj 328 0 obj <> endobj 326 0 obj <> endobj 324 0 obj <> endobj 322 0 obj <> endobj 320 0 obj <> endobj 317 0 obj <> endobj 315 0 obj <> endobj 312 0 obj <> endobj 310 0 obj <> endobj 307 0 obj <> endobj 305 0 obj <> endobj 302 0 obj <> endobj 300 0 obj <> endobj 297 0 obj <> endobj 295 0 obj <> endobj 292 0 obj <> endobj 290 0 obj <> endobj 288 0 obj <> endobj 283 0 obj <><><>]/Pg 254 0 R>> endobj 281 0 obj <> endobj 279 0 obj <> endobj 277 0 obj <> endobj 275 0 obj <> endobj 273 0 obj <> endobj 271 0 obj <> endobj 269 0 obj <> endobj 267 0 obj <> endobj 265 0 obj <> endobj 263 0 obj <> endobj 261 0 obj <> endobj 259 0 obj <> endobj 257 0 obj <> endobj 255 0 obj <> endobj 250 0 obj <><><><><><><><><><><><><><><>]/Pg 194 0 R>> endobj 248 0 obj <> endobj 246 0 obj <> endobj 244 0 obj <> endobj 241 0 obj <> endobj 239 0 obj <> endobj 236 0 obj <> endobj 234 0 obj <> endobj 231 0 obj <> endobj 229 0 obj <> endobj 226 0 obj <> endobj 224 0 obj <> endobj 221 0 obj <> endobj 219 0 obj <> endobj 217 0 obj <> endobj 215 0 obj <> endobj 212 0 obj <> endobj 210 0 obj <> endobj 207 0 obj <> endobj 205 0 obj <> endobj 202 0 obj <> endobj 200 0 obj <> endobj 197 0 obj <> endobj 195 0 obj <> endobj 189 0 obj <><><><><><><><><>]/Pg 125 0 R>> endobj 187 0 obj <> endobj 184 0 obj <> endobj 182 0 obj <> endobj 179 0 obj <> endobj 177 0 obj <> endobj 175 0 obj <> endobj 173 0 obj <> endobj 171 0 obj <> endobj 168 0 obj <> endobj 166 0 obj <> endobj 163 0 obj <> endobj 161 0 obj <> endobj 158 0 obj <> endobj 156 0 obj <> endobj 153 0 obj <> endobj 151 0 obj <> endobj 148 0 obj <> endobj 146 0 obj <> endobj 143 0 obj <> endobj 141 0 obj <> endobj 138 0 obj <> endobj 136 0 obj <> endobj 133 0 obj <> endobj 131 0 obj <> endobj 128 0 obj <> endobj 126 0 obj <> endobj 120 0 obj <> endobj 118 0 obj <> endobj 115 0 obj <> endobj 113 0 obj <> endobj 111 0 obj <> endobj 109 0 obj <> endobj 107 0 obj <> endobj 105 0 obj <> endobj 103 0 obj <> endobj 100 0 obj <> endobj 98 0 obj <> endobj 95 0 obj <> endobj 93 0 obj <> endobj 90 0 obj <> endobj 88 0 obj <> endobj 85 0 obj <> endobj 83 0 obj <> endobj 80 0 obj <> endobj 78 0 obj <> endobj 76 0 obj <> endobj 74 0 obj <> endobj 72 0 obj <> endobj 63 0 obj <><><><><><><><><>]/Pg 47 0 R>> endobj 60 0 obj <> endobj 58 0 obj <> endobj 55 0 obj <> endobj 53 0 obj <> endobj 50 0 obj <> endobj 48 0 obj <> endobj 30 0 obj <> endobj 28 0 obj <> endobj 26 0 obj <> endobj 24 0 obj <> endobj 22 0 obj <> endobj 20 0 obj <> endobj 18 0 obj <> endobj 16 0 obj <> endobj 14 0 obj <> endobj 12 0 obj <> endobj 10 0 obj <> endobj 8 0 obj <> endobj 513 0 obj [10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 10 0 R 12 0 R 12 0 R 12 0 R 14 0 R 14 0 R 14 0 R 14 0 R 14 0 R 16 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 18 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 20 0 R 22 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 24 0 R 30 0 R 30 0 R 32 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R 30 0 R] endobj 514 0 obj [50 0 R 50 0 R 52 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 50 0 R 55 0 R 55 0 R 57 0 R 55 0 R 55 0 R 55 0 R 55 0 R 55 0 R 55 0 R 55 0 R 55 0 R 55 0 R 55 0 R 55 0 R 55 0 R 60 0 R 60 0 R 62 0 R 60 0 R 60 0 R 60 0 R 60 0 R 60 0 R 60 0 R 60 0 R 60 0 R 60 0 R 60 0 R 60 0 R 60 0 R 60 0 R 60 0 R 60 0 R 60 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R] endobj 515 0 obj [63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 63 0 R 72 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 74 0 R 80 0 R 80 0 R 82 0 R 80 0 R 80 0 R 80 0 R 80 0 R 80 0 R 80 0 R 80 0 R 80 0 R 80 0 R 80 0 R 80 0 R 80 0 R 80 0 R 85 0 R 85 0 R 87 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 85 0 R 90 0 R 90 0 R 92 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 90 0 R 95 0 R 95 0 R 97 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 95 0 R 100 0 R 100 0 R 102 0 R 100 0 R 100 0 R 100 0 R 100 0 R 100 0 R 100 0 R 100 0 R 100 0 R 100 0 R 100 0 R 100 0 R 100 0 R 100 0 R 100 0 R 100 0 R 100 0 R 100 0 R 103 0 R 105 0 R 105 0 R 105 0 R 105 0 R 105 0 R 105 0 R 105 0 R 105 0 R 105 0 R 105 0 R 105 0 R 105 0 R 107 0 R 109 0 R 109 0 R 109 0 R 115 0 R 115 0 R 117 0 R 115 0 R 115 0 R 115 0 R 115 0 R 115 0 R 115 0 R 115 0 R 115 0 R 115 0 R 115 0 R 120 0 R 120 0 R 122 0 R 120 0 R 120 0 R 120 0 R 120 0 R 120 0 R 120 0 R 120 0 R 120 0 R 120 0 R 120 0 R 120 0 R 120 0 R] endobj 516 0 obj [128 0 R 128 0 R 130 0 R 128 0 R 128 0 R 128 0 R 128 0 R 128 0 R 128 0 R 128 0 R 128 0 R 128 0 R 128 0 R 128 0 R 128 0 R 133 0 R 133 0 R 133 0 R 135 0 R 133 0 R 133 0 R 133 0 R 133 0 R 133 0 R 138 0 R 138 0 R 138 0 R 140 0 R 138 0 R 138 0 R 138 0 R 138 0 R 138 0 R 138 0 R 138 0 R 138 0 R 138 0 R 143 0 R 143 0 R 145 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 143 0 R 148 0 R 148 0 R 148 0 R 150 0 R 148 0 R 148 0 R 148 0 R 148 0 R 148 0 R 148 0 R 148 0 R 153 0 R 153 0 R 153 0 R 153 0 R 155 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 153 0 R 158 0 R 158 0 R 160 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 158 0 R 163 0 R 163 0 R 165 0 R 163 0 R 163 0 R 163 0 R 163 0 R 163 0 R 168 0 R 168 0 R 170 0 R 168 0 R 168 0 R 168 0 R 168 0 R 168 0 R 168 0 R 168 0 R 168 0 R 168 0 R 168 0 R 168 0 R 171 0 R 173 0 R 173 0 R 173 0 R 173 0 R 173 0 R 173 0 R 173 0 R 173 0 R 173 0 R 179 0 R 179 0 R 181 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 179 0 R 184 0 R 184 0 R 186 0 R 184 0 R 184 0 R 184 0 R 184 0 R 184 0 R 184 0 R 184 0 R 184 0 R 184 0 R 189 0 R 189 0 R 191 0 R 189 0 R 189 0 R 189 0 R 189 0 R] endobj 517 0 obj [189 0 R 189 0 R 189 0 R 189 0 R 189 0 R 189 0 R 189 0 R 189 0 R 189 0 R 197 0 R 197 0 R 199 0 R 197 0 R 197 0 R 197 0 R 197 0 R 197 0 R 202 0 R 202 0 R 204 0 R 202 0 R 202 0 R 202 0 R 202 0 R 202 0 R 202 0 R 202 0 R 202 0 R 202 0 R 207 0 R 207 0 R 209 0 R 207 0 R 207 0 R 207 0 R 207 0 R 207 0 R 207 0 R 207 0 R 212 0 R 212 0 R 214 0 R 212 0 R 212 0 R 212 0 R 212 0 R 212 0 R 212 0 R 212 0 R 215 0 R 215 0 R 215 0 R 221 0 R 221 0 R 223 0 R 221 0 R 221 0 R 221 0 R 221 0 R 221 0 R 226 0 R 226 0 R 228 0 R 226 0 R 226 0 R 226 0 R 226 0 R 226 0 R 226 0 R 226 0 R 231 0 R 231 0 R 233 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 231 0 R 236 0 R 236 0 R 238 0 R 236 0 R 236 0 R 236 0 R 236 0 R 236 0 R 241 0 R 241 0 R 243 0 R 241 0 R 241 0 R 241 0 R 241 0 R 241 0 R 241 0 R 241 0 R 241 0 R 241 0 R 244 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 246 0 R 248 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R] endobj 518 0 obj [250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 250 0 R 255 0 R 257 0 R 257 0 R 257 0 R 257 0 R 257 0 R 257 0 R 257 0 R 257 0 R 257 0 R 257 0 R 257 0 R 257 0 R 257 0 R 257 0 R 257 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 259 0 R 261 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 263 0 R 265 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 267 0 R 269 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 271 0 R 273 0 R 275 0 R 275 0 R 275 0 R 275 0 R 275 0 R 275 0 R 275 0 R 275 0 R 275 0 R 275 0 R 275 0 R 275 0 R 275 0 R 275 0 R 275 0 R 277 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 279 0 R 281 0 R 283 0 R 283 0 R 283 0 R 283 0 R] endobj 519 0 obj [283 0 R 283 0 R 283 0 R 292 0 R 292 0 R 294 0 R 292 0 R 297 0 R 297 0 R 299 0 R 297 0 R 302 0 R 302 0 R 304 0 R 302 0 R 302 0 R 302 0 R 307 0 R 307 0 R 309 0 R 307 0 R 307 0 R 307 0 R 307 0 R 307 0 R 307 0 R 307 0 R 307 0 R 307 0 R 312 0 R 312 0 R 314 0 R 312 0 R 312 0 R 312 0 R 317 0 R 317 0 R 319 0 R 317 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 320 0 R 322 0 R 322 0 R 322 0 R 322 0 R 322 0 R 322 0 R 322 0 R 322 0 R 322 0 R 322 0 R 322 0 R 324 0 R 324 0 R 324 0 R 324 0 R 324 0 R 324 0 R 324 0 R 324 0 R 324 0 R 324 0 R 324 0 R 324 0 R 324 0 R 324 0 R 324 0 R 324 0 R 324 0 R 324 0 R 324 0 R 326 0 R 326 0 R 326 0 R 332 0 R 332 0 R 334 0 R 332 0 R 332 0 R 332 0 R 337 0 R 337 0 R 339 0 R 337 0 R 337 0 R 337 0 R 337 0 R 337 0 R 342 0 R 342 0 R 344 0 R 342 0 R 347 0 R 347 0 R 349 0 R 347 0 R 347 0 R 347 0 R 347 0 R 347 0 R 350 0 R 350 0 R 350 0 R 350 0 R 350 0 R 350 0 R 350 0 R 350 0 R 350 0 R 350 0 R 350 0 R 352 0 R 352 0 R 352 0 R 352 0 R 352 0 R 352 0 R 352 0 R 352 0 R 352 0 R 354 0 R 356 0 R 356 0 R 356 0 R 356 0 R 356 0 R 356 0 R 356 0 R 356 0 R 356 0 R 356 0 R 356 0 R 356 0 R 356 0 R 356 0 R 356 0 R 356 0 R 356 0 R 356 0 R 356 0 R 356 0 R 356 0 R] endobj 520 0 obj [361 0 R 361 0 R 361 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 363 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 365 0 R 367 0 R 367 0 R 367 0 R 367 0 R 367 0 R 367 0 R 367 0 R 367 0 R 367 0 R 369 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 371 0 R 373 0 R 379 0 R 379 0 R 381 0 R 379 0 R 379 0 R 379 0 R 379 0 R 379 0 R 379 0 R 379 0 R 384 0 R 384 0 R 386 0 R 384 0 R 384 0 R 384 0 R 384 0 R 384 0 R 384 0 R 389 0 R 389 0 R 391 0 R 389 0 R 389 0 R 389 0 R 389 0 R 389 0 R 394 0 R 396 0 R 394 0 R 394 0 R 394 0 R 394 0 R 394 0 R 394 0 R 394 0 R 394 0 R 399 0 R 399 0 R 401 0 R 399 0 R 399 0 R 399 0 R 399 0 R 399 0 R 399 0 R 399 0 R 404 0 R 406 0 R 404 0 R 404 0 R 404 0 R 404 0 R 404 0 R 404 0 R 404 0 R] endobj 521 0 obj [412 0 R 412 0 R 414 0 R 412 0 R 412 0 R 412 0 R 412 0 R 412 0 R 412 0 R 412 0 R 412 0 R 417 0 R 417 0 R 419 0 R 417 0 R 417 0 R 417 0 R 417 0 R 417 0 R 417 0 R 422 0 R 422 0 R 424 0 R 422 0 R 422 0 R 422 0 R 422 0 R 422 0 R 422 0 R 422 0 R 427 0 R 427 0 R 429 0 R 427 0 R 427 0 R 427 0 R 427 0 R 427 0 R 427 0 R 427 0 R 427 0 R 427 0 R 432 0 R 432 0 R 434 0 R 432 0 R 432 0 R 432 0 R 432 0 R 432 0 R 432 0 R 437 0 R 439 0 R 437 0 R 437 0 R 437 0 R 437 0 R 437 0 R 437 0 R 437 0 R 437 0 R 437 0 R 442 0 R 442 0 R 444 0 R 442 0 R 442 0 R 442 0 R 442 0 R 442 0 R 442 0 R 447 0 R 447 0 R 449 0 R 447 0 R 447 0 R 447 0 R 447 0 R 447 0 R 447 0 R 452 0 R 452 0 R 454 0 R 452 0 R 452 0 R 452 0 R 452 0 R 452 0 R 457 0 R 457 0 R 459 0 R 457 0 R 457 0 R 457 0 R 457 0 R 457 0 R 457 0 R 457 0 R 462 0 R 462 0 R 464 0 R 462 0 R 462 0 R 467 0 R 467 0 R 469 0 R 467 0 R 467 0 R] endobj 522 0 obj <> endobj 4 0 obj <>/K 5 0 R>> endobj 523 0 obj << /Dt (D:20191112140830) /JTM (Distiller) >> endobj 524 0 obj /This endobj 525 0 obj << /CP (Distiller) /Fi 524 0 R >> endobj 526 0 obj << /JTF 0 /MB [ 0.000 0.000 603.000 783.000 ]/W [ 0 8 ]>> endobj 527 0 obj << /Fi [ 525 0 R ]/P [ 526 0 R ]>> endobj 528 0 obj << /Dm [ 603.000 783.000 603.000 783.000 ]>> endobj 529 0 obj << /Me 528 0 R >> endobj 530 0 obj << /D [ 527 0 R ]/MS 529 0 R /Type /JobTicketContents >> endobj 531 0 obj << /A [ 523 0 R ]/Cn [ 530 0 R ]/V 1.100 >> endobj 3 0 obj <> endobj 532 0 obj <>stream QuarkXPress(R) 14.02 %%DocumentProcessColors: Cyan Magenta Yellow Black %%EndComments Sally Kennedy Layout 1 2019-11-12T14:08:24-06:00 QuarkXPress(R) 14.02 2019-11-12T14:08:24-06:00 endstream endobj 1 0 obj <>/MarkInfo<>/QXPr:DeviceNColorants 2 0 R>> endobj 2 0 obj <<>> endobj xref 0 533 0000000000 65535 f 0000345612 00000 n 0000345834 00000 n 0000341910 00000 n 0000341262 00000 n 0000166227 00000 n 0000166181 00000 n 0000314064 00000 n 0000330872 00000 n 0000000000 00000 f 0000330774 00000 n 0000000000 00000 f 0000330720 00000 n 0000000000 00000 f 0000330660 00000 n 0000000000 00000 f 0000330613 00000 n 0000000000 00000 f 0000330505 00000 n 0000000000 00000 f 0000330400 00000 n 0000000000 00000 f 0000330353 00000 n 0000000000 00000 f 0000330263 00000 n 0000000000 00000 f 0000330199 00000 n 0000000000 00000 f 0000330147 00000 n 0000000000 00000 f 0000329973 00000 n 0000000000 00000 f 0000000016 00000 n 0000166286 00000 n 0000170471 00000 n 0000000066 00000 n 0000015281 00000 n 0000305054 00000 n 0000305913 00000 n 0000306548 00000 n 0000307177 00000 n 0000307704 00000 n 0000307874 00000 n 0000308400 00000 n 0000269516 00000 n 0000269675 00000 n 0000316154 00000 n 0000314286 00000 n 0000329921 00000 n 0000000000 00000 f 0000329804 00000 n 0000000000 00000 f 0000015484 00000 n 0000329752 00000 n 0000000000 00000 f 0000329659 00000 n 0000000000 00000 f 0000015534 00000 n 0000329607 00000 n 0000000000 00000 f 0000329502 00000 n 0000000000 00000 f 0000015585 00000 n 0000329162 00000 n 0000000000 00000 f 0000015636 00000 n 0000036063 00000 n 0000308610 00000 n 0000309219 00000 n 0000309925 00000 n 0000310086 00000 n 0000314509 00000 n 0000329115 00000 n 0000000000 00000 f 0000329024 00000 n 0000000000 00000 f 0000328953 00000 n 0000000000 00000 f 0000328901 00000 n 0000000000 00000 f 0000328805 00000 n 0000000000 00000 f 0000036220 00000 n 0000328753 00000 n 0000000000 00000 f 0000328636 00000 n 0000000000 00000 f 0000036271 00000 n 0000328584 00000 n 0000000000 00000 f 0000328479 00000 n 0000000000 00000 f 0000036322 00000 n 0000328427 00000 n 0000000000 00000 f 0000328284 00000 n 0000000000 00000 f 0000036373 00000 n 0000328230 00000 n 0000000000 00000 f 0000328102 00000 n 0000000000 00000 f 0000036424 00000 n 0000328052 00000 n 0000000000 00000 f 0000327957 00000 n 0000000000 00000 f 0000327907 00000 n 0000000000 00000 f 0000327848 00000 n 0000000000 00000 f 0000327723 00000 n 0000000000 00000 f 0000327667 00000 n 0000000000 00000 f 0000327566 00000 n 0000000000 00000 f 0000036477 00000 n 0000327510 00000 n 0000000000 00000 f 0000327401 00000 n 0000000000 00000 f 0000036531 00000 n 0000036585 00000 n 0000057949 00000 n 0000314734 00000 n 0000327345 00000 n 0000000000 00000 f 0000327258 00000 n 0000000000 00000 f 0000058085 00000 n 0000327202 00000 n 0000000000 00000 f 0000327124 00000 n 0000000000 00000 f 0000058138 00000 n 0000327068 00000 n 0000000000 00000 f 0000326978 00000 n 0000000000 00000 f 0000058192 00000 n 0000326922 00000 n 0000000000 00000 f 0000326829 00000 n 0000000000 00000 f 0000058246 00000 n 0000326773 00000 n 0000000000 00000 f 0000326689 00000 n 0000000000 00000 f 0000058300 00000 n 0000326633 00000 n 0000000000 00000 f 0000326534 00000 n 0000000000 00000 f 0000058354 00000 n 0000326478 00000 n 0000000000 00000 f 0000326370 00000 n 0000000000 00000 f 0000058408 00000 n 0000326314 00000 n 0000000000 00000 f 0000326234 00000 n 0000000000 00000 f 0000058462 00000 n 0000326178 00000 n 0000000000 00000 f 0000326072 00000 n 0000000000 00000 f 0000058516 00000 n 0000326021 00000 n 0000000000 00000 f 0000325937 00000 n 0000000000 00000 f 0000325844 00000 n 0000000000 00000 f 0000325788 00000 n 0000000000 00000 f 0000325694 00000 n 0000000000 00000 f 0000058571 00000 n 0000325638 00000 n 0000000000 00000 f 0000325540 00000 n 0000000000 00000 f 0000058626 00000 n 0000325484 00000 n 0000000000 00000 f 0000325127 00000 n 0000000000 00000 f 0000058681 00000 n 0000058736 00000 n 0000078373 00000 n 0000314960 00000 n 0000325071 00000 n 0000000000 00000 f 0000324997 00000 n 0000000000 00000 f 0000078509 00000 n 0000324941 00000 n 0000000000 00000 f 0000324854 00000 n 0000000000 00000 f 0000078563 00000 n 0000324798 00000 n 0000000000 00000 f 0000324717 00000 n 0000000000 00000 f 0000078617 00000 n 0000324661 00000 n 0000000000 00000 f 0000324580 00000 n 0000000000 00000 f 0000078671 00000 n 0000324523 00000 n 0000000000 00000 f 0000324446 00000 n 0000000000 00000 f 0000324390 00000 n 0000000000 00000 f 0000324315 00000 n 0000000000 00000 f 0000078725 00000 n 0000324259 00000 n 0000000000 00000 f 0000324178 00000 n 0000000000 00000 f 0000078779 00000 n 0000324122 00000 n 0000000000 00000 f 0000324014 00000 n 0000000000 00000 f 0000078833 00000 n 0000323958 00000 n 0000000000 00000 f 0000323883 00000 n 0000000000 00000 f 0000078887 00000 n 0000323827 00000 n 0000000000 00000 f 0000323731 00000 n 0000000000 00000 f 0000078941 00000 n 0000323680 00000 n 0000000000 00000 f 0000323524 00000 n 0000000000 00000 f 0000323473 00000 n 0000000000 00000 f 0000322907 00000 n 0000000000 00000 f 0000078995 00000 n 0000097741 00000 n 0000315186 00000 n 0000322857 00000 n 0000000000 00000 f 0000322764 00000 n 0000000000 00000 f 0000322665 00000 n 0000000000 00000 f 0000322615 00000 n 0000000000 00000 f 0000322468 00000 n 0000000000 00000 f 0000322418 00000 n 0000000000 00000 f 0000322303 00000 n 0000000000 00000 f 0000322252 00000 n 0000000000 00000 f 0000322104 00000 n 0000000000 00000 f 0000322053 00000 n 0000000000 00000 f 0000321945 00000 n 0000000000 00000 f 0000321894 00000 n 0000000000 00000 f 0000321810 00000 n 0000000000 00000 f 0000321759 00000 n 0000000000 00000 f 0000321602 00000 n 0000000000 00000 f 0000097877 00000 n 0000115005 00000 n 0000315412 00000 n 0000321517 00000 n 0000000000 00000 f 0000321461 00000 n 0000000000 00000 f 0000321401 00000 n 0000000000 00000 f 0000115131 00000 n 0000321345 00000 n 0000000000 00000 f 0000321284 00000 n 0000000000 00000 f 0000115184 00000 n 0000321228 00000 n 0000000000 00000 f 0000321159 00000 n 0000000000 00000 f 0000115237 00000 n 0000321103 00000 n 0000000000 00000 f 0000321016 00000 n 0000000000 00000 f 0000115291 00000 n 0000320960 00000 n 0000000000 00000 f 0000320891 00000 n 0000000000 00000 f 0000115345 00000 n 0000320835 00000 n 0000000000 00000 f 0000320772 00000 n 0000000000 00000 f 0000115399 00000 n 0000320706 00000 n 0000000000 00000 f 0000320625 00000 n 0000000000 00000 f 0000320520 00000 n 0000000000 00000 f 0000320463 00000 n 0000000000 00000 f 0000320394 00000 n 0000000000 00000 f 0000320338 00000 n 0000000000 00000 f 0000320269 00000 n 0000000000 00000 f 0000115453 00000 n 0000320213 00000 n 0000000000 00000 f 0000320138 00000 n 0000000000 00000 f 0000115507 00000 n 0000320082 00000 n 0000000000 00000 f 0000320019 00000 n 0000000000 00000 f 0000115561 00000 n 0000319963 00000 n 0000000000 00000 f 0000319884 00000 n 0000000000 00000 f 0000115615 00000 n 0000319792 00000 n 0000000000 00000 f 0000319708 00000 n 0000000000 00000 f 0000319657 00000 n 0000000000 00000 f 0000319525 00000 n 0000000000 00000 f 0000115669 00000 n 0000134261 00000 n 0000315638 00000 n 0000319471 00000 n 0000000000 00000 f 0000319337 00000 n 0000000000 00000 f 0000319226 00000 n 0000000000 00000 f 0000319151 00000 n 0000000000 00000 f 0000319101 00000 n 0000000000 00000 f 0000318978 00000 n 0000000000 00000 f 0000318928 00000 n 0000000000 00000 f 0000318747 00000 n 0000000000 00000 f 0000318691 00000 n 0000000000 00000 f 0000318609 00000 n 0000000000 00000 f 0000134387 00000 n 0000318553 00000 n 0000000000 00000 f 0000318467 00000 n 0000000000 00000 f 0000134441 00000 n 0000318411 00000 n 0000000000 00000 f 0000318329 00000 n 0000000000 00000 f 0000134496 00000 n 0000318273 00000 n 0000000000 00000 f 0000318183 00000 n 0000000000 00000 f 0000134551 00000 n 0000318127 00000 n 0000000000 00000 f 0000318037 00000 n 0000000000 00000 f 0000134606 00000 n 0000317981 00000 n 0000000000 00000 f 0000317895 00000 n 0000000000 00000 f 0000134661 00000 n 0000134716 00000 n 0000152832 00000 n 0000315864 00000 n 0000317839 00000 n 0000000000 00000 f 0000317764 00000 n 0000000000 00000 f 0000152958 00000 n 0000317708 00000 n 0000000000 00000 f 0000317630 00000 n 0000000000 00000 f 0000153011 00000 n 0000317574 00000 n 0000000000 00000 f 0000317493 00000 n 0000000000 00000 f 0000153065 00000 n 0000317437 00000 n 0000000000 00000 f 0000317350 00000 n 0000000000 00000 f 0000153119 00000 n 0000317294 00000 n 0000000000 00000 f 0000317216 00000 n 0000000000 00000 f 0000153173 00000 n 0000317160 00000 n 0000000000 00000 f 0000317076 00000 n 0000000000 00000 f 0000153227 00000 n 0000317020 00000 n 0000000000 00000 f 0000316942 00000 n 0000000000 00000 f 0000153281 00000 n 0000316886 00000 n 0000000000 00000 f 0000316808 00000 n 0000000000 00000 f 0000153335 00000 n 0000316752 00000 n 0000000000 00000 f 0000316677 00000 n 0000000000 00000 f 0000153389 00000 n 0000316621 00000 n 0000000000 00000 f 0000316540 00000 n 0000000000 00000 f 0000153443 00000 n 0000316484 00000 n 0000000000 00000 f 0000316416 00000 n 0000000000 00000 f 0000153497 00000 n 0000316360 00000 n 0000000000 00000 f 0000316290 00000 n 0000000000 00000 f 0000153552 00000 n 0000153607 00000 n 0000166065 00000 n 0000268970 00000 n 0000269147 00000 n 0000269240 00000 n 0000269332 00000 n 0000269424 00000 n 0000269836 00000 n 0000270104 00000 n 0000272813 00000 n 0000273200 00000 n 0000277510 00000 n 0000277754 00000 n 0000279849 00000 n 0000280420 00000 n 0000286253 00000 n 0000286643 00000 n 0000291509 00000 n 0000291705 00000 n 0000292015 00000 n 0000292221 00000 n 0000292746 00000 n 0000292943 00000 n 0000293173 00000 n 0000293448 00000 n 0000295662 00000 n 0000296002 00000 n 0000299356 00000 n 0000299856 00000 n 0000310508 00000 n 0000311854 00000 n 0000310961 00000 n 0000312256 00000 n 0000311228 00000 n 0000312644 00000 n 0000311500 00000 n 0000313035 00000 n 0000311653 00000 n 0000313405 00000 n 0000311713 00000 n 0000313694 00000 n 0000316090 00000 n 0000316116 00000 n 0000331378 00000 n 0000332251 00000 n 0000332746 00000 n 0000334062 00000 n 0000335353 00000 n 0000336572 00000 n 0000337879 00000 n 0000339066 00000 n 0000340261 00000 n 0000341144 00000 n 0000341412 00000 n 0000341475 00000 n 0000341499 00000 n 0000341550 00000 n 0000341625 00000 n 0000341677 00000 n 0000341739 00000 n 0000341774 00000 n 0000341849 00000 n 0000342197 00000 n trailer << /Size 533 /Root 1 0 R /Info 3 0 R /ID[] >> startxref 345854 %%EOF