Saleem G. Zoughbi. UN Expert and IEEE Computer Society e-government STC

Transcription

1 Saleem G. Zoughbi UN Expert and IEEE Computer Society e-government STC The ICT-driven security indispensable to the security of individuals, properties, institutions, states and the entire world ICT AS A MODERN SOLUTION O TO SECURITY THREAT, EARLY DETECTION AND PREVENTION OF CRIMES CAFRAD International Conference of ICT Security and Defense Experts June 23-25, 2014, Tangiers, Morocco Keywords The ICT-driven security indispensable to the security of individuals, properties, institutions, states and the entire world. The ICT-driven security indispensable to the security of individuals, properties, institutions, states and the entire world. The ICT-driven security indispensable to the security of individuals, properties, institutions, states and the entire world. 2/37 1

2 I. Information & Communications Technologies (ICT) II. ICT-driven security policies III. Implementation options paradigm IV. The first steps. 3/37 Information, technology & computing! Information is a key resource for all government offices, especially the police. Information is created, used, retained, disclosed and destroyed. Technology plays a key role in these actions. Technology is becoming pervasive in all aspects of business and personal life. Ubiquitous computing is becoming common 4/37 2

3 Spectrum to technologies for ICTdriven security Technologies Mobile Applications Data Centers and Clouding Smart technology Shared Sevrices Technology Broadbands Operational technology 5/37 10 New trends in Technology that will shape future e-government 1. Hybrid Cloud and IT as Service Broker Bringing together personal clouds and external private cloud services is an imperative. More deployment compositions will emerge as CSBs and IaaS. 2. Cloud/Client Architecture Cloud/client computing models are shifting. In the cloud/client architecture, the client is a rich application running on an Internet-connected device, and the server is a set of application services hosted in an increasingly elastically scalable cloud computing platform. 3. The Era of Personal Cloud The personal cloud era will make a power shift away from devices toward services. 6/37 3

4 Technology for future e- Government 4. Mobile Device Diversity and Management More sophisticated and yet smarter smart phones, including bring gyour own device (BYOD) programs will make "everything everywhere" strategies unachievable. 5. Mobile Apps and Applications: Such as improved JavaScript performance will begin to push HTML5 and the browser as a mainstream enterprise application development environment. 6. The Internet of Everything (IoE) 7/37 The Internet is expanding beyond PCs and mobile devices into enterprise assets such as field equipment, and consumer items such as cars and televisions: something beyond the Internet of Things (IoT): Manage; Monetize; Operate; Extend. 7. Software Defined Anything Software-defined anything (SDx) is associated with improved standards for infrastructure programmability and data center interoperability driven by automation inherent to cloud computing. 8. Web-Scale IT Web-scale IT is a pattern of global-class computing that delivers the capabilities of large cloud service providers within an enterprise IT setting by rethinking positions across several dimensions. 9. Smart Machines Through 2020, the smart machine era will blossom with a proliferation of contextually aware, intelligent personal assistants, smart advisors (such as IBM Watson), advanced global industrial systems and public availability of early examples of autonomous vehicles D Printing (and not before long 4-D) Worldwide shipments of 3D printers are expected to grow 75 percent in 2014 followed by a near doubling of unit shipments in /37 4

5 Potential Smart technologies for security The Semantic Web and Other Metadata: Metadata, or data about data, enables greater automated analysis of information Digital Identity Management and Biometrics: allows the amassing and automatic processing of personal data; biometrics provides means by which human beings can be uniquely identified. Radio Frequency Identification & Sensors: These technologies monitor the physical world, using communications technology to distribute information about a specific location. 9/37 The Geospatial Web and Location-Based Services: these technologies serve to associate digital data with physical locations. Mesh Networking: formation of networks across areas without existing communications infrastructures Grid Computing: This technology may allow the world s computing power and data storage resources to be pooled for people to access as needed. New Computing Technologies: a powerful mix of optics, quantum computing, and other new technologies has potential to bring about a global brain. 10/37 5

6 I. Information & Communications Technologies (ICT) II. ICT-driven security policies III. Implementation options paradigm IV. The first steps. 11/37 5/25 We cannot solve our problems with the same thinking we used when we created them. The only source of knowledge is experience. Imagination is more important than knowledge. We cannot speak of ICT-driven security to countries in the same way we speak of ICT development We have to be aware of how ICTdriven security is responding to the actual people governance. This is our source of knowledge for the new change management. Imagination about ways ICT-driven security in countries can go is more important than classical research. 12/37 6

7 Government dependence ON ICT By 2014, more than 50% of IT spending will be decided outside of IT departments in at least 30% of government organizations. By 2015, scenario planning (or equivalent techniques) will be used for IT budgeting in more than 30% of government organizations. By 2016, IT-enabled productivity per government worker in the bottom third of agencies by size will increase at twice the rate in comparison to the top third by size. Gartner, /37 Highlights of technology for public governance Work Place Channels Business Processes Applications Data Infrastructure Blend of police (government) and citizen/consumer tools Intermediary Social media Business process Utilities (BPU) crowdsourcing SaaS citizen/consumer apps Social profiles, Open data Public cloud 14/37 7

8 ICT-driven Security Situations Available resources Integrated Government Safe Country Aware but poor! Mismanagement & Corruption Chaos! Fragmented Government 15/37 Lack of resources 1. Technical know-how is not difficult to attain, what is difficult is commitment and hard work. (No limitation on technology use by poor countries if it is made available) 2. Competition just began : All are in starting line now. If you prepare well in advance for the next generation ICTdriven security, you will become winner. 3. 'Gerschenkron s Hypothesis' in which "Late-comers would become forerunners if they prepare the new technology in advance" can be applied in the era of the Smart Government. We do not have to restart where others started if we work hard 16/37 8

9 ICT-driven security principles Meeting stakeholders needs Separating governance from management Covering the government end-to-end The 5 principle s Enabling a holistic approach Applying a single integrated framework 17/37 ICT-driven security is like a house of cards Difficult to build (build confidence and cooperation) Easy to destroy (struggle for power, switch off networks, hard-headed policies) 18/37 9

10 However: Three requirements become more needed than ever! Digital leadership with a transformative leadership role, not just an IT functional manager. Technology awareness & vision that is least affected by Transitions forces Efficient police-citizen citizen relationship development and communications skills 19/37 General Strategy for ICT-driven Security success factors 20/37 10

11 I. Information & Communications Technologies (ICT) II. ICT-driven security policies III. Implementation options paradigm IV. The first steps. 21/37 Paradigm for implementing ICT-driven security Legislation, privacy, civil rights Innovative technology means Innovative actions to provide security 22/37 11

12 No Security Legislati on& Citizen's rights Good Governa nce Adequat e & Proper Technol ogy 23/37 Week Security Legislati i Good on& Governa Citizen's nce rights Adequat e & Proper Technol ogy 24/37 12

13 Some Security Legislati Good on& Citizen's rights Adequat Governa nce e & Proper Technol ogy 25/37 Strong Security Legislati Good on& Adequat Governa Citizen's e & nce rights Proper Technol ogy 26/37 13

14 Perfect Security Adequat Legislati Good e & on& Governa Proper Citizen's Technol nce rights ogy 27/37 Week Security Overview 28/37 14

15 I. Information & Communications Technologies (ICT) II. ICT-driven security policies III. Implementation options paradigm IV. The first steps. 29/37 The First Steps! 30/37 15

16 Step 1: Define and Respect How Security Can Be Practiced! 31/37 Step 2: Establish Proper Governance Form high-level h l steering committee across major government stakeholders Define Security strategic goals to be achieved 32/37 16

17 Step 3: Identify Security Needs Conduct current risk and security viability survey Adopt prioritized risks and threats with detailed security requirements studied 33/37 Step 4: Harnessing ICT to implement security needs defined in step 3 Develop architecture infrastructure for solutions to security needs defined Develop a framework for monitoring and assessment of successful operation of these solutions 34/37 17

18 Step 5: Establish SERT (Security Emergency Response Team) Establish SRT to work with CERT (Computer Emergency Response Team) to provide immediate help in correcting any malfunction of solutions developed Use simulation, and then select a pilot period of time to test operations, and keep adjusting until satisfied with operations results 35/37 Step 6, 7, ad lib: EDM (Evaluate, Develop & Monitor) 36/37 18

19 THANK YOU 19