Special Focus: Fighting Botnets

Transcription

1 Special Focus: Fighting Botnets 2 nd European Cybercrime Expert Forum Fighting Cybercrime: How Best to Cope with Current Cyber Threats 8 th - 9 th November 2012, Berlin Brochure With Experts from: European Cybercrime Centre at Europol United Nations Office on Drugs and Crime (UNODC) European Space Agency (ESA) Ministry of Security and Justice, the Netherlands Criminal Police Directorate, Slovenia NFI Netherlands Forensic Institute Eco Association of the German Internet Industry/Anti-Botnet-Advisory Centre 1

2 2 nd EUROPEAN CYBERCRIME EXPERT FORUM Fighting Cybercrime: How Best to Cope with Current Cyber Threats Do you know how best to cope with cybercrime? There is no sector neither public nor private that has not been a victim of cyber attacks this year! Even major European as well as national institutions, the Police itself and big technology companies were affected. Cyber threat environment has changed enormously in recent times and does so every day. Not only has the extent of cybercrime increased but also the diversity of its forms. Furthermore, small attacks can already have huge effects. States, institutions, citizens and businesses are equally exposed to this risk. Are you up-to-date with the latest developments? Do you know how to improve cooperation with EU institutions, other Member States and between law enforcement agencies (LEAs) and internet service providers (ISPs)? Have you set up effective strategies to fight cybercrime? And do you know how best to cope with cyber attacks and how to oppose botnets? Improvement is needed on European and national level Due to its far developed internet infrastructure, Europe is particularly affected by cybercrime. Therefore, common actions within the European Union are essential. Several measures have already been established. However, further European cooperation is needed. One step to combat cybercrime in Europe will be the new European Cybercrime Centre at Europol starting its work in However, also Member States themselves have to become active. They need to face rapid technical developments. In particular botnets continuously pose an immense challenge both to law enforcement agencies investigating and combating those and the final internet users suffering from unnoticed involvement, malware and spam. The 2 nd European Cybercrime Expert Forum is a must-attend platform for exchanging information and experiences on all current topics related to detection, fighting and preventing cybercrime. Learn about current threats and developments in fighting cybercrime and discuss practical solutions for present challenges and strategies with speakers and participants involved in cybercrime law enforcement, investigation and legislation from all across Europe. 2 Who is this seminar for? Public administrations responsible for law enforcement, investigation, legislation or security in the context of: - Cybercrime and cyber terrorism - High-Tech crime - Economic, financial and organised crime - Internet policy - Internal affairs and internal security - IT security and information assurance - Implementation of international treaties Especially: - Police - Criminal Offices - Ministries of Interior - Ministries of Justice - Computer Forensics - National centers of expertise for cybercrime, cyber defense and cyber security - CERTs (Computer Emergency Response Teams) - CSIRTs (Computer Security Incident Response Teams) - Counterintelligence Agencies - 24/7 Points of Contact - Other public bodies responsible for the coordination of cybercrime policies Internet service providers (ISPs) Telecommunication companies (Defence) Lawyers and barristers Managing directors, experts, specialists and executive staff in the private sector responsible for - Cyber crime and cyber crime investigation/technology - Cyber defence - High-Tech crime - IT security and IT security management - Information security and information assurance - Payment security - Business security and continuity - Risk management - Emergency response - Data protection, legal governance & compliance

3 What will you learn at this seminar? Which innovative technical tools for the investigation and prevention of cybercrime exist and how to use them? What do you need to know about the new European Cybercrime Centre at Europol? How best to conduct cross-border law enforcement and European cooperation What are the latest EU regulation developments and how do they affect your work? How to improve inter-institutional cooperation and public private cooperation between law enforcement agencies and internet service providers How to oppose botnets What are the responsibilities of Internet Service Providers (ISPs)? How best to cope with cyber attacks as well as how to combat cyber crimes How does a Security Incident Response Team work? Great event! something new for me, a lot of interesting things. Your benefits Improve your investigation techniques to fight cybercrime more efficiently Receive a special inside in the work of the new European Cybercrime Centre at Europol Discover innovative tools and new approaches helping you in your own daily work Boost your knowledge on how to combat botnets Learn how to enhance dialogue with your peers and other stakeholders beyond borders Be proactive and avoid cyber attacks prepare for the next cyber attack and learn more about strategies to protect from cyber crime Exchange with our various experts meet EU Institutions, Police, Law Enforcement Departments, Internet Industry and Forensic Scientists Benefit from first-hand reports Extend your network share experiences with colleagues from all across Europe Good Networking! 3

4 PROGRAMME DAY 1 Fighting Cybercrime: How Best to Cope with Current Cyber Threats Registration and Handout of Seminar Material Opening Remarks from the European Academy for Taxes, Economics & Law Welcome Note from the Chair and Round of Introductions Erik Planken, Vice Chair to the Committee on the Cybercrime Convention of the Council of Europe and Senior Policy Advisor on Cybercrime at the Law Enforcement Department of the Ministry of Security and Justice, the Netherlands Combating Cybercrime in Europe Latest Developments, Challenges and Trends Challenges in fighting cybercrime, particularly botnets and malware Alliance to pool intelligence from business, government, law enforcement and security agencies (Project 2020) Managing the fight against cybercrime: Preventing, investigating and prosecuting Alexander Schol, Seconded National Expert in Strategy and Outreach, European Cybercrime Centre, Europol Coffee Break and Networking Opportunity Starting in 2013: The Role of the New European Cybercrime Centre at Europol in The Hague Europol s work for combating cybercrime The new European Cybercrime Centre at Europol - What is its role? - Priorities - Actions Alexander Schol, Seconded National Expert in Strategy and Outreach, European Cybercrime Centre, Europol Case Study Combating Cyber Threats and Risks A Global Challenge Links between cybercrime and organised crime an evolving and increasingly specialised threat Assisting least developed countries to counter cybercrime and in this way protect also Europe from cyber attacks UNODC mandates related to cybercrime United Nations Global Cybercrime Study/Technical Assistance Programmes UNODC initiatives for countering the use of the internet for terrorist purposes Challenges and issues associated with international cooperation perspectives from law enforcement and the private sector Systematic approaches to investigations and prosecutions associated with electronic evidence Case study: mobile device forensics Cameron Brown, Legal and Forensic Specialist, Organized Crime and Illicit Trafficking Branch, Division for Treaty Affairs, United Nations Office on Drugs and Crime (UNODC) ALEXANDER SCHOL Seconded National Expert in Strategy and Outreach, European Cybercrime Centre, Europol In preparation to host the European Cybercrime Centre from 2013 onwards, Alexander Schol is currently working for the Europol Cybercrime Centre. His tasks comprise outreach to law enforcement, private parties and academia as well as the creation of a web based collaboration platform to bring these stakeholders together. Before, Alexander Schol worked for the Europol Knowledge and Analysis Unit, where he was dealing with knowledge management, outreach and R&D including the evaluation of project proposals in the framework of European funding schemes. In 2008, he started as a Liaison Officer for the Bundeskriminalamt (German Federal Criminal Police Office) at Europol. The focus of his work has been on the facilitation of international police cooperation for German law enforcement agencies in the fields of payment card fraud, corruption, cybercrime and terrorism. CAMERON BROWN Legal and Forensic Specialist, Organized Crime and Illicit Trafficking Branch, Division for Treaty Affairs, United Nations Office on Drugs and Crime (UNODC) Cameron Brown works within a multifaceted team tasked with addressing and responding to global challenges associated with cybercrime. His present undertakings include a comprehensive Global Cybercrime Study and delivery of advice associated with a broad overarching programme to cover technical assistance activities. Cameron Brown is a qualified lawyer and forensic practitioner with law enforcement investigations experience. His professional background encompasses information security, analysis and presentation of electronic evidence, and prosecuting offences associated with technology enabled crime Lunch Break and Networking Opportunity

5 Detecting and Fighting Cybercrime Improve Your Techniques Through Innovative Tools Technical challenges and achievements - Detection - Big data (Im)possibilities of investigation - Encryption Innovative tools for cybercrime investigation - Computer forensics Good practices - Latest techniques for investigating cybercrimes and in particular botnets Recent cases lessons learnt Erwin J. van Eijk, Forensic Scientist, NFI Netherlands Forensic Institute Coffee Break and Networking Opportunity How to Enhance Your Cyber Security Plans Cyber security versus combating cybercrime related but not the same Cybersecurity strategies EU approach to cybercrime and to cyber security - Recently upcoming policy plans to enhance cyber security Erik Planken, Vice Chair to the Committee on the Cybercrime Convention of the Council of Europe and Senior Policy Advisor on Cybercrime at the Law Enforcement Department of the Ministry of Security and Justice, the Netherlands Interactive Discussion Cross-Border Law Enforcement How Can it be Improved? Weaknesses and challenges of cross-border law enforcement and the cooperation of different LEAs The Council of Europe s Convention on Cybercrime - International collaboration - Practical issues How to cope with the immense differences of national law? What have we learnt so far? What are possible ways for improvement? Legislation as an indispensable measure? Erik Planken, Vice Chair to the Committee on the Cybercrime Convention of the Council of Europe and Senior Policy Advisor on Cybercrime at the Law Enforcement Department of the Ministry of Security and Justice, the Netherlands ERWIN J. VAN EIJK Forensic Scientist, Department for Digital Technology, NFI Netherlands Forensic Institute Erwin J. van Eijk works as a technical lead in the Netherlands Forensic Institute in The Hague, the Netherlands. He is specialised in digital forensics on hard drives, in networks and on the internet. He holds a M.Sc. in Computer Science of the University of Twente, the Netherlands. ERIK PLANKEN Vice Chair to the Committee on the Cybercrime Convention of the Council of Europe and Senior Policy Advisor on Cybercrime at the Law Enforcement Department of the Ministry of Security and Justice, the Netherlands Since 2010, Erik Planken has been acting as Vice Chair to the T-CY, the committee to the Budapest Convention on cybercrime, the only binding international instrument dealing with cybercrime. Erik Planken has been working at the Policy Unit on Cybercrime of the Ministry of Security and Justice in the Netherlands since Within the unit he is inter alia responsible for international contacts. Previously, Erik Planken worked as policy advisor in the field of law enforcement, with emphasis on the investigations on crime End of Day One 5

6 PROGRAMME DAY 2 Fighting Cybercrime: How Best to Cope with Current Cyber Threats Welcome Note from the Chair Borut Zalokar, Criminal Police Inspector Specialist, Computer Investigation Unit, Criminal Police Directorate, Slovenia Experiences and Good Practices in International Exchange of Evidence and Data Experiences with hackers in Slovenia International cooperation in tracing criminals Good practice in exchanging evidence and data Impact and significance of the Budapest Convention on the daily work of the law enforcement agencies Indictments Borut Zalokar, Criminal Police Inspector Specialist, Computer Investigation Unit, Criminal Police Directorate, Slovenia Coffee Break and Networking Opportunity Case Study: The Mariposa Case The Mariposa Botnet Introduction to the case Investigating botnets International cooperation in the context of the case with USA, Spain, Bosnia and Herzegovina and other countries Finding and arresting main suspects Borut Zalokar, Criminal Police Inspector Specialist, Computer Investigation Unit, Criminal Police Directorate, Slovenia Coping with Cyber Attacks A First-Hand Report from a Cyber Attack Victim The European Space Agency (ESA) and its security context The challenge of inserting security in an open organisation The modular approach taken by ESA Attacks suffered and actions taken Lessons learned Expectations for the future and collaboration among actors in the European arena as well as with LEAs and ISPs Stefano Zatti, ESA Security Office Manager, ESA European Space Agency Case Study Firsthand Report BORUT ZALOKAR Criminal Police Inspector Specialist, Computer Investigation Unit, Criminal Police Directorate, Slovenia Since 2009, Borut Zalokar has been working as Criminal Police Inspector Specialist on digital forensic and investigating computer crime in the Computer Investigation Unit. From 2003 to 2006, he worked at the Criminal Police Directorate as Coordinator Investigations against child sexual exploitation on the internet for Slovenian Police. Prior, Borut Zalokar was Criminal Police Inspector Specialist in cases concerning child sexual abuse, neglect and other crimes against children (since 1999) and Police Officer (since 1991). STEFANO ZATTI ESA Security Office Manager, European Space Agency (ESA) Stefano Zatti is the Manager of the Security Office of the European Space Agency, based in Frascati, Italy, and is covering the role of Infosec Officer for the Agency. He has worked for ESA since 1993, covering roles related to the design and operations of the information systems and the communication networks of the Agency and then focussing on the security thereof. Before, he worked for the IBM Zurich Research Laboratory, where he took part in projects on internetworking, secure authentication, key distribution (Kryptoknight), and security management (Samson). Furthermore, he was employed at the University of California at Berkeley, where he worked on distributed systems. He teaches a graduate course on Corporate Security Policies at the University of Rome La Sapienza Lunch Break and Networking Opportunity 6

7 Optimised Prevention of Botnets and Botnet Attacks Lessons Learnt from an Security Incident Response Team Work of the Anti-Botnet-Advisory Centre: inform clean prevent Its results and lessons learnt so far Methods and techniques for prevention and mitigation of botnets Latest technologies Awareness raising Thorsten Kraft, Senior Technical Project Manager, Eco Association of the German Internet Industry/Anti-Botnet- Advisory Centre Coffee Break and Networking Opportunity Special session: Botnets Public-Private Cooperation of Law Enforcement Agencies (LEAs) and Internet Service Providers (ISPs) LEA-ISP cooperation: One aim different roles - necessities, possibilities and challenges ahead ISPs responsibilities Public-Private Partnerships in the framework of cybercrime How to protect the user s fundamental rights The role of Interpol and Europol New technology new challenges Thorsten Kraft, Senior Technical Project Manager, Eco Association of the German Internet Industry/Anti-Botnet- Advisory Centre THORSTEN KRAFT Senior Technical Project Manager, Eco Association of the German Internet Industry/Anti-Botnet- Advisory Centre, Germany Since 2011, Thorsten Kraft has been working as Senior Technical Project Manager for Eco Association of the German Internet Industry. Before, he was Technical Coordinator (Anti Abuse Engineer Expert Abuse Department) for 1&1 Internet AG. He was responsible for abuse analysis and strategy development. Furthermore, he represented the biggest German internet company in many different Committees (MAAWG, APWG, DCC, etc.) which deal with internet abuse (e.g. spamming, hacking, malware, identity theft). Prior to that, he worked as Network and Administrator for a large pharmaceutical company. Thorsten Kraft is dealing with IT security already since End of Seminar and Handout of Certificates Interesting topics and good discussions 7

8 MEDIAPARTNER Fighting Cybercrime: How Best to Cope with Current Cyber Threats 8

9 ORGANISATIONAL MATTERS Fighting Cybercrime: How Best to Cope with Current Cyber Threats Date of Event 8 th - 9 th November 2012 Booking Number S-524 Event Language The event language will be English. Event Price for Public Administration 1389,- Euro, excl. German VAT (19%) for Others 1589,- Euro, excl. German VAT (19%) The above price covers the following: Entrance on event days Hand-out documents Seminar certificate, if seminar fully attended Soft drinks and coffee/tea Lunch on event days Booking Modalities It is recommended to book soon as seats are limited. For organisational matters, we kindly ask you to complete the booking form in capital letters. BOOKING Fax: +49 (0) booking@euroacad.eu Phone: +49 (0) For online booking please visit our website: Contact European Academy for Taxes, Economics & Law Hausvogteiplatz 13, Berlin, Germany Phone: +49 (0) Fax: +49 (0) info@euroacad.eu Internet: Your contact persons for the programme: Regina Lüning, M. Sc. econ. Head of Marketing and Sales Phone: +49 (0) Fax: +49 (0) regina.luening@euroacad.eu Luise Otto, M.E.S. Conference Manager Phone: +49 (0) Fax: +49 (0) luise.otto@euroacad.eu (Programme is subject to alterations) Event Location abba Berlin Hotel Lietzenburger Straße Berlin Phone: (+49) Fax.: (+49) berlin@abbahoteles.com Please contact the hotel directly and refer to the European Academy for Taxes, Economics & Law in order to benefit from a limited room contingent at a special price. Please book as soon as possible. Of course you can always look for an alternative hotel accommodation. 9

10 NOTE Please note, you can register as many delegates as you wish (except, the seminar is fully booked). You only need to copy this formular for as many persons you wish. European Academy for Taxes, Economics & Law Brauner Klingenberg GmbH Hausvogteiplatz Berlin / Germany Phone.: +49 (0) Fax: +49 (0) info@euroacad.eu BOOKING BOOKING NUMBER: S-524 (PR) 8 th - 9 th NOVEMBER 2012 Herewith we register the following persons for the Seminar: Fighting Cybercrime: How Best to Cope with Current Cyber Threats Delegate 1 Ms. Mr. First name Last name Department Job position Your organisation Street Postcode / City Country Phone Fax Delegate 2 Ms. Mr. First name Last name Department Job position Your organisation Street Postcode / City Country Delegate 3 Ms. Mr. First name Last name Department Job position Your organisation Street Postcode / City Country Phone Fax Phone Fax Invoice organisation To the attention of Street Postcode / City Country Phone Fax In case of registration of more than one delegate - do you prefer: single invoice? collective invoice? With my signature I confirm my registration and accept the General Terms and Conditions as legally binding. I herewith agree to receive further information from the European Academy for Taxes, Economics & Law Place, Date Authorised Signature and Stamp 10

11 Terms & Conditions for Conferences, Seminars and other Training Courses 1. Area of Application The following terms and conditions settle the contractual relationship between conference participants and the European Academy for Taxes, Economics & Law Brauner Klingenberg GmbH [referred to as European Academy for Taxes, Economics & Law in the following]. Differing terms and conditions, as well as, other settlements and/or regulations have no validity. 2. Registration / Confirmation of Application A registration can be made via internet, mail, fax, or . The registration is considered granted and legally binding if not rejected by the European Academy for Taxes, Economics & Law in writing within seven (7) days after receipt of registration. The registration will be supplemented by a booking confirmation via . Partial bookings are only valid for seminars designed in modules. 3. Service The course fee covers the fee per participant and course in net, subject to current German VAT. It includes training course documents as per course description, a lunch meal/ snack and refreshments during breaks, as well as, a participation certificate. The European Academy for Taxes, Economics & Law has the right to change speakers/instructors and to modify the course program if and where necessary while maintaining the overall nature of the course. All registered participants will be notified in case of a course cancellation due to force majeure, due to speakers preventions, due to troubles at the chosen location or due to a low registration rate. Course cancellation notification due to a low registration rate is issued no later than two (2) weeks before the course date. Course fees are reimbursed in the cases listed above; however, reimbursement for travel expenses or work absenteeism is only granted in cases of intention or gross negligence by the European Academy for Taxes, Economics & Law. Any reimbursement of travel expenses are to be considered as an exceptional goodwill gesture and form no future general obligation. In case of disturbances and/or interruptions, the European Academy for Taxes, Economics & Law commits itself to solve or limit any problems that might occur in order to maintain and continue the course as planned. 4. Payment Date and Payment, Default of Payment Payment of the course fee is payable immediately upon receipt of invoice. Where payment is not received or lacking clear assignment to a participant prior to commencement of the course, the European Academy for Taxes, Economics & Law may refuse the relevant participant s participation in that course. The course fee, however, is still due immediately and can be claimed as part of a dunning procedure or legal action. In accordance with BGB 247 (1), in case of default of payment within the stipulated time period, default interest on arrears of at least 5% above the ECB base rate is due and payable. The European Academy for Taxes, Economics & Law can claim higher damage for delay if and where proven. Equally, the participant may prove that a damage has not occurred or has had less effect than estimated by the European Academy for Taxes, Economics & Law. Payment shall be made by cashless bank transfer; cash or cheques will not be accepted. The European Academy for Taxes, Economics & Law is not liable for any loss of means of payment. The participant may only offset such claims against the European Academy for Taxes, Economics & Law s as are undisputed, legally recognized or recognized in writing by the European Academy for Taxes, Economics & Law. The right of retention is only acceptable in accordance with a counterclaim based on the same contract. 5. Cancellation Cancellations need to be issued in writing. Cancellation by the participant will be subject to cancellation charges as follows: 30 days or more prior to commencement of the course: service charge of 80,00 net, subject to current German VAT, payable immediately, course fee will be reimbursed, two (2) weeks to 30 days prior to commencement of the course: 50% of course fee net, subject to current German VAT, payable immediately, non-attendance or cancellation less than two (2) weeks prior to commencement of the course: 100% of course fee net, subject to current Germany VAT, payable immediately The European Academy for Taxes, Economics & Law gladly accepts without additional costs a substitute participant nominated in case of a cancellation if the substitute participant is registered at least three (3) days prior to the commencement of the course. Neither cancellation of a specific module/part of the course or substitution per module/per day is possible. 6. Copyright Seminar/course documents are protected by property rights and may not be duplicated, processed, amended, circulated or published in any other way without the written consent of the European Academy for Taxes, Economics & Law. The European Academy for Taxes, Economics & Law reserves all rights. 7. Liability All seminars and courses are prepared and presented by qualified speakers and instructors. The European Academy for Taxes, Economics & Law accepts no liability for the upto-dateness, correctness and completeness of the seminar documentation, as well as, presentation of the seminar. 8. Applicable Law, Place of Jurisdiction, Place of Performance All cases shall be governed and construed in accordance with German law to the exclusion of the UN Sales Convention. As far as legally admissible, place of performance and place of exclusive jurisdiction shall be Berlin, Germany. 9. Data Protection The European Academy for Taxes, Economics & Law protects personal data by taking appropriate protection measures. For the purpose of optimization of the product and service portfolio and according to the regulations of the data privacy laws, it stores and processes person-specific data on the training participants. Hence, all European Academy for Taxes, Economics & Law website hits are registered. All personal data will, in accordance with the law, be used for documentation requests, placed orders or other enquiries in order to send information out by post. The European Academy for Taxes, Economics & Law will, in accordance with the law, inform participants by about special offers that resemble previously booked seminars. If and where personal data needs to be transferred to countries lacking appropriate data protection schemes, the European Academy for Taxes, Economics & Law shall grant alternative adequate protection. Furthermore, the European Academy for Taxes, Economics & Law will use personal data as far as participants have granted respective permission. When collecting personal data, the European Academy for Taxes, Economics & Law will always ask for permission regarding information about offers. The participant may, at any time, express their objection to data collection for the purpose of advertisement or address via or fax. Any data provided to the European Academy for Taxes, Economics & Law will be processed for reservations and bookings, as well as, for information about other seminars. Names and company names will be published in a participants list and forwarded to the mailing company. 11