Download 10 years APCERT - Conferences

APCERT : APNIC Meeting 2014’
International Collaboration
for Regional Cybersecurity Risk Reduction
- APCERT Collaboration with Stakeholders
Yurie Ito
Chair, APCERT SC
Director, Global Coordination, JPCERT/CC
General Introduction

Asia Pacific Computer Emergency Response Team

http://www.apcert.org




Forum of CSIRTs in the Asia Pacific region
Established in February 2003
Annual Events
1. APCERT AGM & Conference
2. APCERT Drill (Simulation exercise of cyber
attacks)
APCERT Annual Report
http://www.apcert.org/documents/index.html
Computer Security Incident Response Team
CERT Services : by CERT/CC SEI CMU
APCERT Members
Key Cybersecurity Risks
Threats exposed 2011-12
Data extortion by Persistence
Threats
IT system down / Data loss by
Natural Disaster
Crowd sourced attack
All those old bad problems still exist
Malware,
Exploits
Bots
DDoS, etc
IT System Environment /
New devices; Mobile
Tablets, Smart Phones
Social Media
Cyber Conflicts
Insider threats
Technology Evolves
Control System
connects to Networks
Cloud Computing
IT System Environment
Risks/ Technology Evolves
Intellectual
Property
Economic
Competition
Infrastructure
Service
National
Security
Applying Root-Cause Analysis to Internet Health
APCERT Security Operations /
Regional CERTs Collaboration
• Opportunities
– Collaborate on cyberspace safety, cleanliness and
health – clean up malware and cooperate in
removing botnets
– Focus on measurement and enabling remediation
through education, tools, information sharing
– Point of Contact (POC) arrangement
– Cross boarder incident handling and coordination
APCERT efforts should go farther in this area
APCERT 11 years of Achievement
• 2013 – APCERT 10th anniversary
• Collaboration agreement with external experts and global security
operations
– OIC-CERT, EGC, TF-CSIRT, FIRST and many more industry partners
• Participated in global dialogues on fostering clean-up norms
– Including guest status at APEC-TEL SPSG
– AP*, APNIC, ASEAN Regional Forum
• Partnership with OECD on Cybersecurity Risk measurement
program
• CSIRT Training for Africa and pacific islands
• APCERT Drills & ASEAN CERT Incident Drills
• TSUBAME -> Network Monitoring Data and tool sharing program
what can we do more with
APNIC, APTLD and Network Operators?
• Cybersecurity capacity building and training
• Point of Contact exchange?
– APCERT-AP-TLC, APCERT-AP-NIC
– NICs – CERTs – ccTLDs
– POC for NOGs
• More Info sharing?
• Send us Incident Reports
• Collaborate on regional risk reduction Cyber
Green approach
Towards the Safe, Clean and Reliable
Internet Ecosystem
Yurie Ito
[email protected]
Mobile: +1 310.463.2776