Romanian National Cyberspace - Quick facts - Catalin Patrascu Chief of Incident Handling and Monitoring Office @ CERT-RO catalin.patrascu@cert.ro 08/11/2018 @ The New Global Challenges in Cyber Security

@ The New Global Challenges in Cyber Security About CERT-RO Romanian National Cyber Security Incident Response Team Established by Government Decision no. 494/2011 Fully financed from the state budget Duties: Point of Contact - collects cyber security alerts from different stakeholders regarding vulnerabilities and incidents (IP’s, domains, URLs, IoC’s); Incident response - first response, investigations, mitigation, technical support, data dissemination and coordination) Cooperation (national and international partners) Security Audits, Pentests, Trainings, Awarness campaigns 08/11/2018 @ The New Global Challenges in Cyber Security

@ The New Global Challenges in Cyber Security 2015 Report Summary 68+ mil. of alerts received 26% (2.3 mil.) of unique IPs in RO were involved in at least one cyber security alert 78% (53 mil.) of processed alerts are about vulnerable systems 20,78% (14 mil.) of processed alerts refers to botnets 17.088 „.ro” domains were reported to CERT-RO as being compromised in 2015 (on the rise with almost 60% compared to 2014) 08/11/2018 @ The New Global Challenges in Cyber Security

@ The New Global Challenges in Cyber Security Last years comparison 08/11/2018 @ The New Global Challenges in Cyber Security

@ The New Global Challenges in Cyber Security 1st Semester of 2016 54+ mil. of alerts received (80% of entire last year) 52% are about botnet infections 47% are about vulnerable systems Among vulnerabilities we still have: Heartbleed POODLE FREAK DROWN Open/vulnerable services: NTP, Proxy, DNS (Open Resolvers) … 08/11/2018 @ The New Global Challenges in Cyber Security

@ The New Global Challenges in Cyber Security Ransomware threat Fast growing Rapidly evolving in terms of complexity All industry sectors affected Hard to mitigate and stop 08/11/2018 @ The New Global Challenges in Cyber Security

@ The New Global Challenges in Cyber Security What is to be done? Coordinated and continuous effort - Users - Technology and service providers - Authorities Cooperation and information sharing Proper/updated legislation CERT/CSIRT bodies - national, governmental, sectorial, private … 08/11/2018 @ The New Global Challenges in Cyber Security

@ The New Global Challenges in Cyber Security Thank You! Catalin Patrascu Chief of Incident Handling and Monitoring Office @ CERT-RO catalin.patrascu@cert.ro 08/11/2018 @ The New Global Challenges in Cyber Security