Cyber Security for National Security «Coordination, Capacity Building and National Solutions»

Size: px

Start display at page:

Download "Cyber Security for National Security «Coordination, Capacity Building and National Solutions»"

Alban Pitts
5 years ago
Views:

1 Cyber Security for National Security «Coordination, Capacity Building and National Solutions» Mustafa AFYONLUOĞLU Cyber Security, e-governance and egovernment Chief Expert

Cyber Security for National Security National Security:

regional and global environment in order to take measures

processes to determine the politics appropriate to these issues

Security Committee)* NATIONAL SECURITY MILITARY POLITICAL

) NATO Summit in Warsaw, 2016 2016: Cyber attacks to NATO ICT

Cyber Security Budgets France (2014): 1 Billion UK (2016): 2.

University Research Report) * http://www.mgk.gov.tr/index.

2 Cyber Security for National Security National Security: Identification of threats and opportunities by monitoring the regional and global environment in order to take measures against the threats to the national state and security, and the processes to determine the politics appropriate to these issues and to implement the most appropriate policies (National Security Committee)* NATIONAL SECURITY MILITARY POLITICAL DIPLOMATIC ECONOMIC CYBER (?) NATO Summit in Warsaw, : Cyber attacks to NATO ICT System 500 Attacks/month (60% increase w.r.t. 2015) National Cyber Security Budgets France (2014): 1 Billion UK (2016): 2.5 Billion 2030 Cyber UnSecurity Volume: 90 Trillion $ (Denver University Research Report) * **

3 PEOPLE DIGITAL LIFE PUBLIC AGENCIES SERVICE PROVIDER SERVICE REQUESTOR PRIVATE SECTOR CITIZEN UNIVERSITIES D A T A SECURITY MACHINES NGO POWER

4 PEOPLE DIGITAL LIFE PUBLIC AGENCIES SERVICE PROVIDER SERVICE REQUESTOR PRIVATE SECTOR CITIZEN UNIVERSITIES D A T A SECURITY MACHINES NGO POWER

5 PUBLIC SECTOR & PRIVATE SECTOR LIKE TWO WINGS OF A BIRD IN HARMONY!

6 What happens on the internet for 60 seconds? (February 2017)

7 What happens on the internet for 1 Hour? (February 2017)

8 Internet Connected Devices Internet of Things 2016 Symantec Internet Security Thread Report,, Gartner IoT Report 10 Kasım 2015

9 Internet Connected Devices Internet of Things 2016 Symantec Internet Security Thread Report,, Gartner IoT Report 10 Kasım 2015

10 Internet Connected Devices Internet of Things IoT Güvenlik Sorunları Expected Economical Size in IoT 2016 Symantec Internet Security Thread Report,, Gartner IoT Report 10 Kasım 2015

11 Internet Connected Devices Internet of Things

WHAT HAPPENS IN 2 MONTHS? CI: Health October 4th, 2016 J&J: Attack on Diabetic Insulin Pumps CI: Finance October 22th, 2015 3.

000 Mirai BotNET to Dyn DNS 10 Tbps National October 23rd, 2016 Interenet interrruption on 78% of ABD with 14 Million IoT $ 7 Billion loss October 24th, 2016 UK: «Motor Vehicles Cyber Security Guide»

November 28th, 2016 Otonomy Systems Cyber attack to San Francisco Municipal Global: İnternet Metro System CI: Communication November 28th, 2016 Cyber attack to 900.

12 WHAT HAPPENS IN 2 MONTHS? CI: Health October 4th, 2016 J&J: Attack on Diabetic Insulin Pumps CI: Finance October 22th, million bank card information of Indian October 15th, 2016 IoT: DDoS Attack of Mirai BotNET to Dyn DNS 10 Tbps National October 23rd, 2016 Interenet interrruption on 78% of ABD with 14 Million IoT $ 7 Billion loss October 24th, 2016 UK: «Motor Vehicles Cyber Security Guide» published CI: Health November 3rd, 2016 UK National Health System closed down due to malware National November 15th, 2016 Pre-loaded 700,000 phone sends data to China CI: Transport banks stolen November 28th, 2016 Otonomy Systems Cyber attack to San Francisco Municipal Global: İnternet Metro System CI: Communication November 28th, 2016 Cyber attack to routers of Alma Telekom Terrorism November 30th, 2016 Files of 54 terrorist groups leaked from from Europol National December 7th, 2016 The North Korean Operating System «Red Star» was captured by a remote attack October 10th, 2016 Cyber Attack on Germany Nuclear Power Plants CI: Energy October 22nd, 2016 DDoS attack to Singapore Telekom Starhub CI: Communication November 1st, 2016 Cyber attacks on Schneider Electrics ICS Panels CI: Industry November 9th, 2016 Central heating system in Finland closed with DDoS attack Public Service November 25th,2016 Massive DDoS Attack on European Commission servers Institutional November 28th,2016 Data Breach: 26,500 UK National Lottery User Account Taken Public December 3rd, million Android downloads were attacked via AirDroid Mobile December 4th, 2016 Visa cards break in 06 seconds CI: Finance Cyber Security for National Security: «Coordination, CI: Critical Infrastructure Capacity Building and National Solutions" ICS: Industrial Control System IoT: Internet of Things ( IoT: $ - DarkWeb)

13 December 14 th 2015 nic TR Domain Name System DDoS Attack December 24 th, 2015 Finance

14 April 08 th, 2016 National ID Number Data Breach May 18 th, 2016 Health Sector Data Breach

15 December 30 th 2016 Energy Sector July 2016 Institutional Data Breach

16 WEAK LINKS QUALIFIED HUMAN RESOURCE INVALID CONFIGURATION NON-NATIONAL SOLUTIONS

17 WEAK LINKS NİTELİKLİ İNSAN KAYNAĞI HATALI KONFİGÜRASYON MİLLİ OLMAYAN ÇÖZÜMLER

December 2016: Cyber defense is one of NATO's key tasks in the field of collective defense.

18 February 2016: The Technical Arrangement on cooperation in cyber defense with the European Union was signed. July 2016: Cyber Space is the 5th operational area after Land, Air, Sea and Space. December 2016: Cyber defense is one of NATO's key tasks in the field of collective defense. International law should also be applied to the cyber field. NATO will develop cyber training and exercise skills.

19 GOVERNANCE HOW? Personal Privacy Public Data Trade Secrets

20 Syber Security Governance Model of Netherlands Ministry of Security and Justice National Cyber Security Council (NCSS) ICT Response Board (IRB) Governance Board Directorate of Cyber Security National Coordinator for Counterterrorism and Security Policy Division Incident Response Team Knowledge Services Team Development Team National Cyber Security Centre (NCSC) GOVCERT.NL Security Operation Center (SOC)

South Korea E-Government Governance Model Expert Committee Strategy Ownership / Top Level Responsibility Program Efficiency Administrative Authority President Prime Ministry Information Society

21 South Korea E-Government Governance Model Expert Committee Strategy Ownership / Top Level Responsibility Program Efficiency Administrative Authority President Prime Ministry Information Society Council Administrative Board e-government Expert Board Co-Chairman: Prime Minister and Private Sector Representative Members: Repr. from Ministries + Private Sector Managers Co-Chairman: MoI Vice President and Private Sector Representative Members:Senior bureaucrats and experts Chairman: MoI Vice President and Private Sector Representative Members:Senior bureaucrats and experts Execution / Support MoI (MOSPA) Planning / Evaluation Technology / Project Support NIA MOSPA / MoI: Ministry of Security & Public Administration NIA: National Information Society Agency Administration, Technology Support Local Government Ministry Project Execution Ministry Project Execution

22 South Korea E-Government Governance Model Expert Committee Strategy Ownership / Top Level Responsibility Program Efficiency Administrative Authority President Prime Ministry Information Society Council Administrative Board e-government Expert Board Co-Chairman: Prime Minister and Private Sector Representative Members: Repr. from Ministries + Private Sector Managers Co-Chairman: MoI Vice President and Private Sector Representative Members:Senior bureaucrats and experts Chairman: MoI Vice President and Private Sector Representative Members:Senior bureaucrats and experts Execution / Support MoI (MOSPA) Planning / Evaluation Technology / Project Support NIA MOSPA / MoI: Ministry of Security & Public Administration NIA: National Information Society Agency Administration, Technology Support Local Government Ministry Project Execution Ministry Project Execution

23 Japan E-Government Governance Model Efficiency of Programs IT Strategies Headquarters Chairman: Prime Minister Members: Representatives from All Ministries and Private Sector Representatives Strategy Ownership / Top Level Responsibility Planning Board Chairman: Minister of Science & Technology Policies Members: Deputy Minister Public Programs Management Office (E-Government Incentive and Management Office, Cabinet Secretariat) Planning & Evaluation Administrative Authority CIO Council Chairman: Deputy Secretary of Cabinet Members: Ministry CIO s Strategy / Technology Consultancy Technology / Project Consultancy Advisory CIO Council (Members: Ministry s Consultant CIO s (Private) 2003 te kuruldu. CIO Council Technical Management Board (Members: Ministry s ICT Managers) Program Management Office Members: CIO, Advisory CIO, Strategic Planning Departments Ministry A Ministry B Ministry C Technology / Project Support

24 Japan E-Government Governance Model Efficiency of Programs IT Strategies Headquarters Chairman: Prime Minister Members: Representatives from All Ministries and Private Sector Representatives Strategy Ownership / Top Level Responsibility Planning Board Chairman: Minister of Science & Technology Policies Members: Deputy Minister Public Programs Management Office (E-Government Incentive and Management Office, Cabinet Secretariat) Planning & Evaluation Administrative Authority CIO Council Chairman: Deputy Secretary of Cabinet Members: Ministry CIO s Strategy / Technology Consultancy Technology / Project Consultancy Advisory CIO Council (Members: Ministry s Consultant CIO s (Private) 2003 te kuruldu. CIO Council Technical Management Board (Members: Ministry s ICT Managers) Program Management Office Members: CIO, Advisory CIO, Strategic Planning Departments Ministry A Ministry B Ministry C Technology / Project Support

SUGGESTIONS : Coordination & Leadership 1. Cyber Security should be coordinated from top level in ONE CENTERAL ADMINISTRATION 2. In this Center, there should be Public-Private Governance Board 3.

25 SUGGESTIONS : Coordination & Leadership 1. Cyber Security should be coordinated from top level in ONE CENTERAL ADMINISTRATION 2. In this Center, there should be Public-Private Governance Board 3. National Cyber Security Policy and Prioritized Sectoral Areas should be prepared National Solutions in «Perimeter Security» Layer: National Firewall National Intrusion Detection & Prevention systems National Web Filtering PRIVATE SECTOR PUBLIC National Anti-virus Solutions National Cyber Thread Intelligence Bank (CTIB) National Operating System National National Storage Cloud Secure Public Network

26 SUGGESTIONS : Capacity Building 4. Government should support private sector, while developing Sectoral Capacity * Definitions of Cyber Security, Data Security and e-government Expertizes / Professions * Software Development and Cyber Security Education Programs from Primary School to Universities * Preparation of HR Capacity Developing Programs for private sectotr * Innovation Incentives in prioritized areas 5. The government should be beside the sector in creating the regional and global power of the sector 6. Special incentives for the sector targeted to grow in the region (financial and administrative)

Sectoral Capacity * Definitions of Cyber Security, Data Security

and Cyber Security Education Programs from Primary School to

private sectotr * Innovation Incentives in prioritized areas 5.

sector Coding in creating the Advanced regional Codingand global

(financial and Screen-time Management Digital Empathy

Footprint Gamification Data Security Critical Thinking Cyber

27 SUGGESTIONS : Capacity Building 4. Government should support private sector, while developing Sectoral Capacity * Definitions of Cyber Security, Data Security and e-government Expertizes / Professions * Software Development and Cyber Security Education Programs from Primary School to Universities * Preparation of HR Capacity Developing Programs for private sectotr * Innovation Incentives in prioritized areas 5. The government Software Development should be beside Secure the sector Coding in creating the Advanced regional Codingand global power of the sector Robotics Cyber Security Management Cyber Bullying Management 6. Special incentives for the sector targeted to grow in the region (financial and Screen-time Management Digital Empathy administrative) Privacy Management Digital Citizen ID Digital Footprint Gamification Data Security Critical Thinking Cyber Security Cryptography & Software Security Computer Networks & Telecomm. Digital Media Web Technologies Cyber Law and Ethic Governance & Leadership Cyber Investigation Digital Forensics

28 SUGGESTIONS : National Solutions 7. Use of NATIONAL PRODUCTS without exception as a National Policy in the public sector «WE WILL USE FIRST!» Dissemination Policy in Public Sector: «Company Rating» in public procurement with accreditation and certification Promotion Model: R&D For successful results «Production Support» Pilot Applications Support & Development Infrastructure Positioning in Public Current products in the first layer, National Products in the second layer After transition and maturity, national products in all layers At least two National Solution Policy in each segment Regional Dissemination

2017 Mustafa AFYONLUOĞLU Cyber Security & e-governance Chief Expert

29 Cyber Security for National Security «Coordination, Capacity Building and National Solutions» Mustafa AFYONLUOĞLU Cyber Security & e-governance Chief Expert afyonluoglu [at] gmail.com Linkedin: Twitter: Web: afyonluoglu.com

Digital Life and Cyber Security «Public-Private Governance" Mustafa AFYONLUOGLU Cyber Security & e-governance Chief Expert

Digital Life and Cyber Security «Public-Private Governance" Mustafa AFYONLUOGLU Cyber Security & e-governance Chief Expert March 7th 2017 HUMAN DIGITAL LIFE PUBLIC AGENCIES SERVICE PROVIDER SERVICE REQUESTOR