Cyber Security in Japan (v.2)
|
|
|
- Maximilian Hunt
- 8 years ago
- Views:
Transcription
1 Cyber Security in Japan (v.2) Ryusuke Masuoka and Tsutomu Ishino Cyber Security Policy Research Team Center for International Public Policy Studies (CIPPS) December 2012
2 Outline Japanese Government s Approach Situation in Japan NISC and Four Key Agencies Cyber Incidents Cybercrime Trends in Japan References 1
3 JAPANESE GOVERNMENT S APPROACH 2
4 Approach by Japanese Government Cross-sectional Framework Lead by Cabinet Secretariat Director-General: Prime Minister Vice Director-Generals: Minister of State for Science and Technology Policy Chief Cabinet Secretary Minister of Internal Affairs Minister of Economy, Trade and Industry Members: All other Ministers of State and Experts (10) Secretariat IT Strategic Headquarters Cabinet Secretariat IT Dep t Chief : Assistant Chief Cabinet Secretary (Domestic affairs) Agencies in charge of critical infrastructures Financial Services Agency: Financial Institutes Minister of Internal Affairs: Municipals, Communication Ministry of Health, Labour and Welfare: Hospitals, Water Minister of Economy, Trade and Industry: Electric Power, Gas Ministry of Land, Infrastructure, Transport and Tourism: Railways, Airlines, Distribution Other agencies Ministry of Education, Culture, Sports, Science and Technology: Cyber Security Education Chairman: Chief Cabinet Secretary Deputy Chairman: Minister of State for Science and Technology Policy Members: CISO Conference Secretariat Director: Assistant Chief Cabinet Secretary (Risk & Security) Deputy Director: Councillor, Cabinet Secretariat (2) Cabinet Counsellors (6) Advisors on Information Security (3) Information Security Policy Council National Public Safety Commission Chairman Minister of Internal Affairs Minister of Economy, Trade and Industry Minister of Defense Members from the private-sector (6) Special Committee on Critical Infrastructures National Information Security Center (NISC) Special Committee on Technological Strategy National Police Agency Ministers from four key agencies Special Committee on Edification and Education Four Key Agencies Ministry of Internal Affairs and Communications Ministry of Economy, Trade and Industry Ministry of Defense 3 Critical Infrastructures Governmental Agencies Businesses Individuals
5 NISC and Four Key Agencies National Information Security Center (NISC) Coordinating government efforts National Police Agency (NPA) Fighting Cybercrimes Ministry of Internal Affairs and Communications (MIC) Communication and Network Policies Ministry of Economy, Trade and Industry (METI) IT Policies Ministry of Defense (MOD) National Security 4
6 SITUATION IN JAPAN 5
7 Situation in Japan - Started bearing fruit, but still a long way to go Wake up call Mitsubishi Heavy Industries (MHI), Sep Cyber security particularly hot after a cyber attack on MHI revealed Anonymous hits Japan July 2012 (Sony in 2011) Stuxnet raised awareness for cyber attacks on critical infrastructures Many relevant books published Information Security 2012 July eng.pdf 1. Strengthening Measures for Sophisticated Threats to Companies and Organizations Handling Important National Information on Security 2. Maintaining a Safe and Secure User Environment for Addressing the Emerging Risks Associated with the Proliferation of New Information and Communications Technology Including the Full-Fledged Widespread Use of Smart Phones 3. Reinforcement of International Alliances 6
8 Situation in Japan - Progresses and Setbacks Progresses Laws are being updated Cybercrime Convention into force 1 Nov MOD stands up to meet the challenges beyond its IT infrastructure Control System Security Center (CSSC) Mar Setbacks PC Hijack Case Concern of too many pilots 7
9 NISC AND FOUR KEY AGENCIES 8
10 National Information Security Center (NISC) - Coordinating government efforts Information Security 2012 July eng.pdf 1. Strengthening Measures for Sophisticated Threats to Companies and Organizations Handling Important National Information on Security 2. Maintaining a Safe and Secure User Environment for Addressing the Emerging Risks Associated with the Proliferation of New Information and Communications Technology Including the Full-Fledged Widespread Use of Smart Phones 3. Reinforcement of International Alliances FY B JPY Planned (Japanese Government Total) 9
11 National Police Agency (NPA) Fighting Cybercrimes Cyber-Security Activities 1. Cyber Force Center (Reorganized 140 IT Staffs of NPA) 2. Information sharing with CCI-Designated Companies 3. Council to Prevent Unauthorized Communications to Counter Cyber-Intelligence (with 4,800 companies all over Japan) FY B JPY Planned 1. Improve response capability against cybercrimes 2. Improve response capability against cyber attacks to state secrets and critical infrastructures 3. Extend international collaboration 4. Keep analysis and law enforcement capabilities up to date with changing IT technologies and laws CCI: Counter Cyber Intelligence 10
12 Ministry of Internal Affairs and Communications (MIC) - Communication and Network Policies Cyber Security Activities Cyber Attack Analysis Council, jointly with METI IPA, JPCERT/CC, NICT, Telecom-ISAC Japan Smart Phone Information Security FY B JPY Planned Comprehensive security environment ready for new types of cyber attacks 2.62B JPY IPA: Information-technology Promotion Agency, Japan JPCERT/CC: Japan Computer Emergency Response Team Coordination Center METI: Ministry of Economy, Trade and Industry NICT: National institution of information and communications technology Telecom-ISAC Japan: Telecom Information Sharing and Analysis Center Japan 11
13 Ministry of Economy, Trade and Industry (METI) - IT Policies Cyber Security Activities Initiative for Cyber Security Information sharing Partnership Japan (J-CSIP) Information sharing of cyber attacks Cyber Attack Analysis Council, jointly with MIC IPA, JPCERT/CC, NICT, Telecom-ISAC Japan Building a pool of advanced information security experts National security competitions, etc. Securing control systems Cyber security exercises, etc. Control System Security Center (CSSC) Mar Established in Tokyo and Tsunami-affected area (Miyagi Reconstruction Park) FY B JPY Planned Information security promotion projects 1.6B JPY Hubs for security verification and education Control systems test beds at CSSC B JPY IPA: Information-technology Promotion Agency, Japan JPCERT/CC: Japan Computer Emergency Response Team Coordination Center MIC: Ministry of Internal Affairs and Communications NICT: National institution of information and communications technology Telecom-ISAC Japan: Telecom Information Sharing and Analysis Center Japan 12
14 Ministry of Defense (MOD) National Security Cyber Security Activities 6 core approaches 1. Improve information and telecommunication systems security 2. Reinforce protection systems 3. Prepare rules and regulations 4. Develop Human resources 5. Promote information sharing 6. R&D of latest technologies FY B JPY Planned Cyberspace Guard (tentative name) ~100 members, 10B JPY MOD Cyber Range 1.59B JPY Add network monitoring equipment Training through Japan-U.S. joint exercises 13
15 CYBER INCIDENTS 14
16 Case: Advanced Persistent Threat (APT) (4) Final Attack Execution (3) System Survey Confidential Info Obtained Attacker Spear Phishing (0) Preliminary Investigation (1) Initial Penetration (2) Building Attack Infrastructure Based on a Fujitsu slide, Modified by CIPPS 15
17 Case: PC Hijack 2012 TOR (6) Culprit Writes commands TOR? TOR Livedoor Shitaraba BB (Used as C&C) Uploads software with virus to Dropbox (1) Post to 2 Channel with link to Dropbox file Reads commands regularly Dropbox Timer.zip (BKDR_SYSIE.A) 2 Channel Siberia Super Fast BB (2) Siberia PO 405th [Repost Request] Executes software and gets infected (7) (9) Writes Post is done when successful Software BB Is there software like? Part. 149 How about this? Reads the post and downloads software Announces crime plans (5) Suspect (11) Arrests him based on IP Address (4) (8) 8/1 (8) 7/29 BB: Bulletin Board C&C: Command and Control TOR: The Onion Router This figure based on Kango/ / JAL (Customer Service) Unsuspecting proxy to repost Osaka City (Suggestion Box) (10) (3) (3) Proxy Consults with police 16
18 CYBERCRIME TRENDS IN JAPAN 17
19 Cybercrime Offenses Cleared 8,000 7,000 6,000 5,000 4,000 1, ,740 2, , Unauthorized Access Violations 3,000 2,000 3,918 4,334 3,961 5,199 5,388 Crimes Targeting Computers / Electronic Records Networking Crimes 1, Source: NPA 18
20 Networking Crimes Cleared in Details Violations of Trademark Law 4% Copyright Infringements 7% Others 16% Unauthorized Access Violations 4% Crimes Targeting Computers / Electronic Records 2% Frauds 16% Violations of Youth Protection Laws 8% Networking Crimes Child Pornography Offenses 15% Child Prostitution Offenses 8% Violations of Dating Site Regulation Act 8% Distribution of Obscene Materials 12% Source: NPA 19
21 Cybercrime Counseling 90,000 80,000 70,000 60,000 50,000 40,000 73,193 7,644 3,497 3,005 12,707 8,871 4,645 81,994 9,095 4,039 4,522 8,990 11,516 6,038 83,739 9,502 3,785 4,183 7,859 11,557 6,538 75,810 10,009 3,847 3,668 6,905 10,212 9,836 80,273 11,259 3,382 4,619 5,905 10,549 11,667 Others Illegal / Harmful Information Unauthorized Accesses / Computer Viruses Auctioning Defamation / Libels Spams 30,000 Frauds / Fraudulent Businesses 20,000 32,824 37,794 40,315 31,333 32,892 10, Source: NPA 20
22 Calls to Internet Hotline Center (IHC) Calls Forwarded to Police 189, ,757 Harmful Information Illegal Information 44,683 9,667 41,400 4,827 33, , ,391 6,217 20,333 16,418 3,600 6,122 27,751 35,016 36,573 91,769 12,818 14, ,310 8,221 20,659 22,964 23,846 Calls about Illegal/Harmful Information Source: NPA 21
23 REFERENCES 22
24 References Documents Information Security 2012, eng.pdf Japanese Government's Efforts to Address Information Security Issues (November 2007), eng.pdf The White Paper on Police 2011 [Digest Edition] Cyber Security in Special Feature II WHITE PAPER on POLICE2011.htm Police of Japan 2012 Section 7 of Community Safety on Cybercrime Organizations CIPPS: Center for International Public Policy Studies IPA: Information-technology Promotion Agency, Japan JPCERT/CC: Japan Computer Emergency Response Team Coordination Center NICT: National institution of information and communications technology NISC: National Information Security Center Telecom-ISAC Japan: Telecom Information Sharing and Analysis Center Japan 23
25
Cybersecurity Strategy in Japan
Cybersecurity Strategy in Japan Jan 21, 2015 Hiroshi Kawaguchi, CISSP Little earth Corporation Co., Ltd. Chief Evangelist hiroshi.kawaguchi @ lac.co.jp What is this? 2 Global Risks 2014 http://www3.weforum.org/docs/wef_globalrisks_report_2014.pdf
How To Protect Critical Infrastructure
Cybersecurity Strategy in Japan October 9th 2014 Yasu TANIWAKI Deputy Director-General National Information Security Center (NISC) Government of JAPAN Big Data Society and Cybersecurity Open data Digitally
Information Security 2012
Information Security 2012 July 4, 2012 Information Security Policy Council Contents I Preface... - 2 - II Changes in the Environment Surrounding Information Security. - 3 - III Basic Lines... - 9 - (1)
An Overview of Cybersecurity and Cybercrime in Taiwan
An Overview of Cybersecurity and Cybercrime in Taiwan I. Introduction To strengthen Taiwan's capability to deal with information and communication security issues, the National Information and Communication
The Policy Approaches to Strengthen Cyber Security in the Financial Sector (Summary) July 2, 2015 Financial Services Agency
The Policy Approaches to Strengthen Cyber Security in the Financial Sector (Summary) July 2, 2015 Financial Services Agency 1 Challenge for Cyber Security in Financial Sector (1) Necessity to Strengthen
Initiative for Cyber Security Information sharing Partnership of Japan (J-CSIP) Annual Activity Report FY2012
Initiative for Cyber Security Information sharing Partnership of Japan (J-CSIP) Annual Activity Report FY2012 IT SECURITY CENTER (ISEC) INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN Initiative for Cyber
Cyber Crime and Digital Forensics in Japan
Cyber Crime and Digital Forensics in Japan Tetsutaro UEHARA Academic Center for Computing and Media Studies, Kyoto University uehara@media.kyoto-u.ac.jp Table of Contents Introduction: Motivation and Background
Working Towards the 2020 Tokyo Olympics
Working Towards the 2020 Tokyo Olympics - The Current Situation in 2015 Mariko Miya Cyber Defense Institute, Inc. miya@cyberdefense.jp Agenda 1. Introduction 2. The current situation in Japan 2015 Analytics
Cyber Security Threats and Countermeasures
GBDe 2006 Issue Group Cyber Security Threats and Countermeasures Issue Chair: Buheita Fujiwara, Chairman, Information-technology Promotion Agency (IPA), Japan 1. Overview Cyber security is expanding its
The trend of the Cyber Security and the efforts of NEC. December 9 th, 2015 NEC Corporation
The trend of the Cyber Security and the efforts of NEC December 9 th, 2015 NEC Corporation Agenda 1. NEC Corporate Profile 2. NEC s Activity for Safer-City 3. NEC Cyber Security Solution 3.1 Security Operation
Information security education for students in Japan
Information security education for students in Japan Introduction This article aims to introduce the current situation of elementary and secondary school education on information security in Japan, as
MIC s Efforts on Cybersecurity Human Resource Development
ASEAN-Japan Cyber Security International Symposium MIC s Efforts on Cybersecurity Human Resource Development October 9 th 2014 Yuji NAKAMURA Director for the ICT Security Strategy, Ministry of Internal
The Challenge of Raising Business Value through Objective Evaluation of IT Security, & Japan s IT Security Policy
Ministry of Economy, Trade and Industry The Challenge of Raising Business Value through Objective Evaluation of IT Security, & Japan s IT Security Policy September 28, 2005 TANABE, Takefumi Deputy Director,
Global Cybersecurity Index Good Practices
AUSTRALIA Global Cybersecurity Index Good Practices LEGAL Australia has acceded to the Council of Europe Convention on Cybercrime. The convention came into force on 1 March 2013. Cybercrime Legislation
Kshetri, N. (2014). Japan s changing cyber security landscape, Computer, 47(1), 83 86. doi: 10.1109/MC.2014.17
Japan's Changing Cybersecurity Landscape By: Nir Kshetri Kshetri, N. (2014). Japan s changing cyber security landscape, Computer, 47(1), 83 86. doi: 10.1109/MC.2014.17 Made available courtesy of Institute
The Second Action Plan on. Information Security Measures for. Critical Infrastructures. Safety as a matter of course for our daily lives
The Second Action Plan on Information Security Measures for Critical Infrastructures Safety as a matter of course for our daily lives - Safe and secure social infrastructure for everybody - February 3,
Basic Law on Intellectual Property (Law No.122 of 2002) (Provisional Translation)
Basic Law on Intellectual Property (Law No.122 of 2002) (Provisional Translation) Table of Contents Chapter I General Provisions (Articles 1 to 11) Chapter II Basic Measures (Articles 12 to 22) Chapter
Executive Director Centre for Cyber Victim Counselling www.drjaishankar.co.nr / www.cybervictims.org
Dr. K. Jaishankar Senior Assistant Professor Department of Criminology and Criminal Justice Manonmaniam Sundaranar University Tirunelveli, Tamil Nadu, India Executive Director Centre for Cyber Victim Counselling
About Botnet, and the influence that Botnet gives to broadband ISP
About net, and the influence that net gives to broadband ISP Masaru AKAI BB Technology / SBB-SIRT Agenda Who are we? What is net? About Telecom-ISAC-Japan Analyzing code How does net work? BB Technology
Cyber Security Strategy(Information Security Policy Council, June 10, 2013)
Environmental Change Vision to aim as a Goal Basic Principles Cyber Security Strategy(Information Security Policy Council, June 10, 2013) Areas of Efforts Increasing severity of the risk surrounding cyberspace
Cybersecurity Global status update. Dr. Hamadoun I. Touré Secretary-General, ITU
Cybersecurity Global status update Dr. Hamadoun I. Touré Secretary-General, ITU Cybercrime takes a toll on the global economy - Online fraud, identity theft, and lost intellectual property; - On governments,
2 Information and Telecommunications
Strategic Priority Setting in S&T 2 Information and Telecommunications Information and communication technology sparks an enormous revolution in a wide range of socio-economical activities, including realization
CAPACITY BUILDING TO STRENGTHEN CYBERSECURITY. Sazali Sukardi Vice President Research CyberSecurity Malaysia
CAPACITY BUILDING TO STRENGTHEN CYBERSECURITY by Sazali Sukardi Vice President Research CyberSecurity Malaysia SCOPE INTRODUCTION CYBER SECURITY INCIDENTS IN MALAYSIA CAPACITY BUILDING The Council For
Cyber Security Recommendations October 29, 2002
Cyber Security Recommendations October 29, 2002 Leading Co-Chair (Asia/Oceania) Co-Chair (Americas) Co-Chair (Europe/Africa) Dr. Hiroki Arakawa Executive Vice President NTT Data Corporation Richard Brown
Threats of P2P File Sharing Software
Threats of P2P File Sharing Software -- a Japanese Situation About "Winny -- JPCERT/CC is an independent non-profit organization, acting as a national point of contact for the other CSIRTs in Japan. Since
Virginia Joint Commission on Technology and Science. Cybersecurity Legislation
Virginia Joint Commission on Technology and Science Cybersecurity Legislation Pending Legislation Widespread agreement of need for legislation Three approaches CISPA Cybersecurity Act of 2012 SECURE IT
Promoting a cyber security culture and demand compliance with minimum security standards;
Input by Dr. S.C. Cwele Minister of State Security, Republic of South Africa Cyber Security Meeting, Johannesburg 27 March 2014 I would like to thank the Wits School of Governance for inviting us to contribute
Acceptable Use Policy
Acceptable Use Policy Contents 1. Internet Abuse... 2 2. Bulk Commercial E-Mail... 2 3. Unsolicited E-Mail... 3 4. Vulnerability Testing... 3 5. Newsgroup, Chat Forums, Other Networks... 3 6. Offensive
Computer Crime & Security Survey
3 rd Japan & US Computer Crime & Security Survey Katsuya Uchida Associate Professor Institute of Information Security uchidak@gol.com Graduate School of Information Security Intentionally blank Respondents
b. Harm to minors. Using the Services to harm, or attempt to harm, minors in any way.
1. INTRODUCTION Accesshosting.com's ("AUP") is intended to help enhance the use of the Access Hosting Service by preventing unacceptable use. All users of Accesshosting.com s Access Hosting Services (the
STATEMENT OF RANDY S. MISKANIC VICE PRESIDENT, SECURE DIGITAL SOLUTIONS U.S. POSTAL SERVICE BEFORE THE SUBCOMMITTEE ON FEDERAL WORKFORCE, U.
STATEMENT OF RANDY S. MISKANIC VICE PRESIDENT, SECURE DIGITAL SOLUTIONS U.S. POSTAL SERVICE BEFORE THE SUBCOMMITTEE ON FEDERAL WORKFORCE, U.S. POSTAL SERVICE AND THE CENSUS UNITED STATES HOUSE OF REPRESENTATIVES
Information Security Outreach and Awareness Program. July 8, 2011 Established by the Information Security Policy Council
Information Security Outreach and Awareness Program July 8, 2011 Established by the Information Security Policy Council Table of contents 1. Preface... 3 2. People and enterprise awareness of information
OVERVIEW. 1. Cyber Crime Unit organization. 2. Legal framework. 3. Identity theft modus operandi. 4. How to avoid online identity theft
OVERVIEW 2 1. Cyber Crime Unit organization 2. Legal framework 3. Identity theft modus operandi 4. How to avoid online identity theft 5. Main challenges for investigation 6. Conclusions ORGANIZATION 3
For Discussion Paper No. 9/2011 on 3 November 2011 DIGITAL 21 STRATEGY ADVISORY COMMITTEE. Cyber Security
For Discussion Paper No. 9/2011 on 3 November 2011 DIGITAL 21 STRATEGY ADVISORY COMMITTEE Cyber Security Purpose This paper briefs Members on the global cyber security outlook facing governments of some
Cybersecurity: Thailand s and ASEAN s priorities. Soranun Jiwasurat www.etda.or.th
Cybersecurity: Thailand s and ASEAN s priorities Soranun Jiwasurat www.etda.or.th Cyber Threat Landscape Overview 2 Cyber threat a hostile act using computers, electronic information and/or digital networks
ALM Virtual Corporate Counsel Managing Cybersecurity Risks and Mitigating Data Breach Damage
ALM Virtual Corporate Counsel Managing Cybersecurity Risks and Mitigating Data Breach Damage VENABLE LLP Attorneys at Law Washington, DC/New York/San Francisco/Los Angeles/Baltimore/Virginia/Delaware November
Viewpoint: Implementing Japan s New Cyber Security Strategy*
Presented by: The ACCJ s Internet Economy Task Force Valid Through November 2014 The 2013 Cyber Security Strategy, released in June 2013, and the International Strategy on Cybersecurity Cooperation, released
Provisional Translation
Provisional Translation 1 2 It has been 8 years since the National Information Security Center (NISC) was established in the Cabinet Secretariat in April of 2005 and the Information Security Policy Council
National Cyber Security Strategy of Afghanistan (NCSA)
Islamic Republic of Afghanistan Ministry of Communications and IT National Cyber Security Strategy of Afghanistan (NCSA) Prevention Protection Safety Resiliency AUTHOR VERSION CONTROL DATE ZMARIALAI WAFA
"Industry Side Views of cyber security in Japan"
"Industry Side Views of cyber security in Japan" Event 2: Cyber Security in East Asia and Policy Cooperation between Japan and the United States USJI-Week, September 7-10, 2010 US-Japan Research Institute
Strategy Advisory Group SA. Corporate Training. Information Security Awareness Program 1
IT & IP Strategy Advisory Group SA Corporate Training Information Security Awareness Program 1 March 2011 - SONY : Over 100 million stolen personal data September 2011 - Mitsubishi Heavy Industries : At
Trends Concerning Cyberspace
Section 2 Trends Concerning Cyberspace 1 Cyberspace and Security Owing to the information technology (IT) revolution in recent years, information and communication networks such as the Internet are becoming
Council Conclusions on a Concerted Work Strategy and Practical Measures Against Cybercrime
COU CIL OF THE EUROPEA U IO EN Council Conclusions on a Concerted Work Strategy and Practical Measures Against Cybercrime 2987th JUSTICE and HOME AFFAIRS Council meeting Brussels, 27-28 ovember 2008 The
Privacy and Security in Healthcare
5 th 5 th th National HIPAA Summit National Strategy to Secure Cyberspace Privacy and Security in Healthcare October 31, 2002 Andy Purdy Senior Advisor, IT Security and Privacy The President s Critical
International Strategy on Cybersecurity Cooperation
資 料 9-2 International Strategy on Cybersecurity Cooperation - j-initiative for Cybersecurity - October 2, 2013 Information Security Policy Council Contents 1 Objectives 1 2 Basic Principles 2 2.1 Ensuring
National Cyber Crime Unit
National Cyber Crime Unit Kevin Williams Partnership Engagement & National Cyber Capabilities Programme Kevin.Williams@nca.x.gsi.gov.uk Official Problem or opportunity Office for National Statistics In
Security Intelligence
IBM Security Security Intelligence Security for a New Era of Computing Erno Doorenspleet Consulting Security Executive 1 PARADIGM SHIFT in crime Sophistication is INCREASING Attacks are More Targeted Attackers
How To Prevent Cyber Crime
, pp.13-20 http://dx.doi.org/10.14257/ijsia.2015.9.2.02 An International Comparative Study on Cyber Security Strategy Kyoung-Sik Min, Seung-Woan Chai and Mijeong Han Korea Internet & Security Agency kyoungsik@kisa.or.kr,
SUMMARY OF THE ESTONIAN INFORMATION SYSTEM S AUTHORITY ON ENSURING CYBER SECURITY IN 2012
SUMMARY OF THE ESTONIAN INFORMATION SYSTEM S AUTHORITY ON ENSURING CYBER SECURITY IN 2012 Cyberspace is both an ecosystem consisting of an infrastructure and services, and an environment where and through
ESTABLISHING A NATIONAL CYBERSECURITY SYSTEM IN THE CONTEXT OF NATIONAL SECURITY AND DEFENCE SECTOR REFORM
Information & Security: An International Journal Valentyn Petrov, vol.31, 2014, 73-77 http://dx.doi.org/10.11610/isij.3104 ESTABLISHING A NATIONAL CYBERSECURITY SYSTEM IN THE CONTEXT OF NATIONAL SECURITY
STATEMENT OF JOSEPH M. DEMAREST, JR. ASSISTANT DIRECTOR CYBER DIVISION FEDERAL BUREAU OF INVESTIGATION
STATEMENT OF JOSEPH M. DEMAREST, JR. ASSISTANT DIRECTOR CYBER DIVISION FEDERAL BUREAU OF INVESTIGATION BEFORE THE SUBCOMMITTEE ON CRIME AND TERRORISM COMMITTEE ON JUDICIARY UNITED STATES SENATE ENTITLED:
Strategies for Countering Cyber Threats
UNDERWRITTEN BY Strategies for Countering Cyber Threats By Aliya Sternstein The federal government is out to stop cybercrooks by reaching potential victims before they do. Public outreach is one of the
Australia s proposed accession to the Council of Europe Convention on Cybercrime
Assistant Secretary Telecommunications and Surveillance Law Branch National Security Law and Policy Division Attorney-General's Department 3-5 National Circuit Barton ACT 2600 Email: tslb@ag.gov.au Australia
DEPARTMENT OF DEFENSE 6000 DEFENSE PENTAGON WASHINGTON, D.C. 20301-6000
DEPARTMENT OF DEFENSE 6000 DEFENSE PENTAGON WASHINGTON, D.C. 20301-6000 CHIEF INFORMATION OFFICER October 1, 2015 MEMORANDUM FOR SECRETARIES OF THE MILITARY DEPARTMENTS CHAIRMAN OF THE JOINT CHIEFS OF
Public-Private Partnerships against cybercrime. Jean-Christophe Le Toquin Director Internet Safety Microsoft EMEA
Public-Private Partnerships against cybercrime Jean-Christophe Le Toquin Director Internet Safety Microsoft EMEA The need for Public Private Partnerships to fight cybercrime Evidence needed by police to
Information Security Human Resource Development Program
Information Security Human Resource Development Program July 8, 2011 Information Security Policy Council 0 Table of contents 1. Preface... 3 2. Current status and issues concerning information security
CSSC-CL Announces ISASecure Certification of Hitachi and Yokogawa Industrial Control Devices. ~For More Globally Competitive Control System Devices ~
Press Release July 15, 2014 CSSC Certification Laboratory (CSSC-CL) Control System Security Center (CSSC) CSSC-CL Announces ISASecure Certification of Hitachi and Yokogawa Industrial Control Devices ~For
SAN BERNARDINO CITY UNIFIED SCHOOL DISTRICT Employee Technology Acceptable Use Agreement
SAN BERNARDINO CITY UNIFIED SCHOOL DISTRICT is providing employees access to the district s electronic network. This network includes Internet access, computer services, videoconferencing, computer equipment
DEPARTMENT OF DEFENSE 6000 DEFENSE PENTAGON WASHINGTON, D.C. 20301-6000
DEPARTMENT OF DEFENSE 6000 DEFENSE PENTAGON WASHINGTON, D.C. 20301-6000 CHIEF INFORMATION OFFICER December 9, 2015 MEMORANDUM FOR SECRETARIES OF THE MILITARY DEPARTMENTS CHAIRMAN OF THE JOINT CHIEFS OF
Cybercrimes NATIONAL CRIME PREVENTION COUNCIL
NATIONAL CRIME PREVENTION COUNCIL What is Cybercrime? A crime committed or facilitated via the Internet is a cybercrime. Cybercrime is any criminal activity involving computers and networks. It can range
Acceptable Use (Anti-Abuse) Policy
Acceptable Use (Anti-Abuse) Policy This document describes the Acceptable Use Policy for the Rightside registry. Copyright 2014 Rightside Registry Copyright 2014 Rightside Domains Europe Ltd. Rightside
2.5.1 Policy on Responsible Use of University Computing Resources Introduction This policy governs the proper use and management of all University of
2.5.1 Policy on Responsible Use of University Computing Resources Introduction This policy governs the proper use and management of all University of San Diego computing and network resources. This policy
Preventing & Mitigating Potential Threats at Large-Scale Events: A look at past & future plans involving the Olympics & Super Bowl
Preventing & Mitigating Potential Threats at Large-Scale Events: A look at past & future plans involving the Olympics & Super Bowl 13:30-14:30, Wednesday, 16 September 2015 The World Bank D.C. Headquarters,
Cybersecurity Initiatives
Port Vila, 20 November 2014 The Government of The Republic of Vanuatu Cybersecurity Initiatives Telecommunications & Radiocommunications Regulator By Louise Nasak, Technical and Internet Governance Manager,
Policies and Practices on Network Security of MIIT
2011/TEL43/SPSG/WKSP/004 Policies and Practices on Network Security of MIIT Submitted by: China Workshop on Cybersecurity Policy Development in the APEC Region Hangzhou, China 27 March 2011 Policies and
The European Response to the rising Cyber Threat
SPEECH/12/315 Cecilia Malmström European Commissioner responsible for Home Affairs The European Response to the rising Cyber Threat Transatlantic Cyber Conference organised by the Center for Strategic
Development of Technology for Detecting Advanced Persistent Threat Activities
FOR IMMEDIATE RELEASE Development of Technology for Detecting Advanced Persistent Threat Activities Visualizing correlations among hosts having suspicious activities to detect attacks such as stealth malware
Computer Crime & Security Survey
4 th Japan & US Computer Crime & Security Survey Katsuya Uchida Professor, Ph. D. Institute of Information Security uchida@iisec.ac.jp Graduate School of Information Security 1 Respondents by Number of
FKCC AUP/LOCAL AUTHORITY
FKCC AUP/LOCAL AUTHORITY The information contained in this section has its basis in Public Law 93.380. It is further enhanced however, by Florida State Board of Education Administrative Rule 6A-14.51 and
Service Monitoring Discrimination. Prohibited Uses and Activities Spamming Intellectual Property Violations 5
WIN reserves the right to prioritize traffic based on real time and non-real time applications during heavy congestion periods, based on generally accepted technical measures. WIN sets speed thresholds
Mustafa AYDINLI NLO CYBER SECURITY ADVISOR
Mustafa AYDINLI NLO CYBER SECURITY ADVISOR AGENDA Introduction to Cyber Security Establishment & History of TR-CERT Responsibilities of TR-CERT Competencies of TR-CERT CYBER SECURITY Cyber security is
Driving Success in 2013: Enabling a Smart Protection Strategy in the age of Consumerization, Cloud and new Cyber Threats. Eva Chen CEO and Co-Founder
Driving Success in 2013: Enabling a Smart Protection Strategy in the age of Consumerization, Cloud and new Cyber Threats Eva Chen CEO and Co-Founder Consistent Vision for 25 Years A world safe for exchanging
El Camino College Homeland Security Spring 2016 Courses
El Camino College Homeland Security Spring 2016 Courses With over 250,000 federal positions in Homeland Security and associated divisions, students may find good career opportunities in this field. Explore
Online International Interdisciplinary Research Journal, {Bi-Monthly}, ISSN2249-9598, Volume-III, Issue-IV, July-Aug 2013
Need to understand Cyber Crime s Impact over national Security in India: A case study P.R. Patil and D.V. Bhosale Dept. of Defence & Strategic Studies, Tuljaram Chaturchand College, Baramati, Dist- Pune,
Public Policy Meeting, Legal Issues on Cyber Security in Africa Dakar, Senegal 21-27 November 2009
Public Policy Meeting, Legal Issues on Cyber Security in Africa Dakar, Senegal 21-27 November 2009 Presenter Adam Mambi,(Advocate of High Court) -Deputy Executive Secretary, Law Reform Commission Tanzania
U. S. Attorney Office Northern District of Texas March 2013
U. S. Attorney Office Northern District of Texas March 2013 What Is Cybercrime? Hacking DDOS attacks Domain name hijacking Malware Other computer related offenses, i.e. computer and internet used to facilitate
Safety by trust: British model of cyber security. David Wallace, First Secretary, Head of of the Policy Delivery Group British Embassy in Warsaw
Safety by trust: British model of cyber security David Wallace, First Secretary, Head of of the Policy Delivery Group British Embassy in Warsaw Strategy Structure Campaign Partnerships Strategy The UK
Chairman's Summary of the Outcomes of the G8 Justice and Home Affairs Ministerial Meeting. (Moscow, 15-16 June 2006)
Chairman's Summary of the Outcomes of the G8 Justice and Home Affairs Ministerial Meeting (Moscow, 15-16 June 2006) At their meeting in Moscow on 15-16 June 2006 the G8 Justice and Home Affairs Ministers
CYBERSECURITY EXAMINATION SWEEP SUMMARY
This Risk Alert provides summary observations from OCIE s examinations of registered broker-dealers and investment advisers, conducted under the Cybersecurity Examination Initiative, announced April 15,
Internet Gaming: The New Face of Cyber Liability. Presented by John M. Link, CPCU Cottingham & Butler
Internet Gaming: The New Face of Cyber Liability Presented by John M. Link, CPCU Cottingham & Butler 1 Presenter John M. Link, Vice President jlink@cottinghambutler.com 2 What s at Risk? $300 billion in
Acceptable Use Policy ("AUP")
Acceptable Use Policy ("AUP") Pacificnet Hosting (PacHosting)'s Acceptable Use Policy ("AUP") is provided to give our customers and users a clear understanding of what PacHosting expects of them while
SPEAR PHISHING AN ENTRY POINT FOR APTS
SPEAR PHISHING AN ENTRY POINT FOR APTS threattracksecurity.com 2015 ThreatTrack, Inc. All rights reserved worldwide. INTRODUCTION A number of industry and vendor studies support the fact that spear phishing
2009 Antispyware Coalition Public Workshop
2009 Antispyware Coalition Public Workshop Jeffrey Fox Technology Editor, Consumer Reports Media contact: Lauren Hackett, 914-378-2561 Background For several years, Consumer Reports has been testing and
Basic Policy and Action Plan for Building IT Disaster-Management Lifeline
Basic Policy and Action Plan for Building IT Disaster-Management Lifeline June 28, 2012 IT Disaster-Management Lifeline Promotion Conference Introduction Basic concept Information and communication technology
Fighting Cyber Crime in the Telecommunications Industry. Sachi Chakrabarty
Fighting Cyber Crime in the Telecommunications Industry Sachi Chakrabarty Agenda Cyber Crime What s all the fuss about CyberCrime? DoS Attacks Telco Solutions Cybercrime? Cybercrime Definition All criminal
LETABA WIRELESS INTERNET CC ACCEPTABLE USE POLICY
LETABA WIRELESS INTERNET CC ACCEPTABLE USE POLICY 1. Introduction LETABA WIRELESS INTERNET CC is committed to complying with legislation and ensuring that all its customers have the ability to use its
The Danish Cyber and Information Security Strategy
February 2015 The Danish Cyber and Information Security Strategy 1. Introduction In December 2014 the Government presented a National Cyber and Information Security Strategy containing 27 government initiatives
Contact Points on Government Procurement as of January 1, 2005
Contact Points on Government Procurement as of January 1, 2005 A. Entities Covered by the Agreement on Government Procurement House of Representatives Accounts Div., General Affairs 03(3581)5111 2323 House
The Cost of Phishing. Understanding the True Cost Dynamics Behind Phishing Attacks A CYVEILLANCE WHITE PAPER MAY 2015
The Cost of Phishing Understanding the True Cost Dynamics Behind Phishing Attacks A CYVEILLANCE WHITE PAPER MAY 2015 Executive Summary.... 3 The Costs... 4 How To Estimate the Cost of an Attack.... 5 Table
By: Gerald Gagne. Community Bank Auditors Group Cybersecurity What you need to do now. June 9, 2015
Community Bank Auditors Group Cybersecurity What you need to do now June 9, 2015 By: Gerald Gagne MEMBER OF PKF NORTH AMERICA, AN ASSOCIATION OF LEGALLY INDEPENDENT FIRMS 2015 Wolf & Company, P.C. Cybersecurity
The FBI Cyber Program. Bauer Advising Symposium //UNCLASSIFIED
The FBI Cyber Program Bauer Advising Symposium October 11, 2012 Today s Agenda What is the threat? Who are the adversaries? How are they attacking you? What can the FBI do to help? What can you do to stop
Vulnerability Disclosure Guideline for Software Developers
Vulnerability Disclosure Guideline for Software Developers Excerpt of Information Security Early Warning Partnership Guideline Appendix 5 Contents 1. Introduction 2 2. Vulnerability Information: Provide
Verification Report. (Summary)
Yoshiharu Ueki, Representative Director & President, Japan Airlines Co., Ltd., Verification Report (Summary) January 14, 2015 of Independent Executives Concerning the Theft of Customer Information 1 Chapter
Trust. The platform for business innovation.
ADP Global Security Trust. The platform for business innovation. HR. Payroll. Benefits. The business operations protection you need, from the partner you trust. These days, every business is in either
Cyber-Crime Protection
Cyber-Crime Protection A program of cyber-crime prevention, data breach remedies and data risk liability insurance for houses of worship, camps, schools, denominational/association offices and senior living
ACCEPTABLE USE POLICY OF BROADVOX, INC; BROADVOX, LLC; WWW.BROADVOX.COM; WWW.BROADVOX.NET (COLLECTIVELY BROADVOX )
ACCEPTABLE USE POLICY OF BROADVOX, INC; BROADVOX, LLC; WWW.BROADVOX.COM; WWW.BROADVOX.NET (COLLECTIVELY BROADVOX ) 1. ACCEPTANCE OF TERMS THROUGH USE This website (the Site ) provides you (the Customer
i-safe America Internet Safety Tips for Parents
i-safe America Internet Safety Tips for Parents Online predators are out there. They can infect your computer with viruses, they want to steal your personal information and possibly your identity, and
Response to the Great East Japan Earthquake By the Ministry of Health, Labour and Welfare, the Government of Japan
Response to the Great East Japan Earthquake By the, the Government of Japan 23 October 2012 Ministry of Health, Labour, and (MHLW) Government of Japan 1 1. Damage caused by Great East Japan Earthquake