Security of network and information systems Author: MAGDALENA ŠLJIVIĆ III. International student conference „Safety in local communities-legal and criminological perspectives“’, Podgorica., April 2019

SECURITY OF NETWORK AND INFORMATION SYSTEMS The emergence of the internet as well as the global growing use of information and telecommunications technologies has contributed to the increase of illegal activities in this field III. International student conference „Safety in local communities-legal and criminological perspectives“’, Podgorica., April 2019

SECURITY OF NETWORK AND INFORMATION SYSTEMS The Criminal Code of Montenegro defines six criminal offenses regarding security of computer data, which are the following : Article 349 - Damaging Computer Data and Programs : (1) Anyone who without authorization deletes, alters, damages, conceals or otherwise makes useless computer data or program shall be punished by a fine or a prison term up to one year. Article 350 - Computer System Interference : (1) Anyone who enters, destroys, deletes, alters, damages, conceals or otherwise makes useless computer data or computer system with the intention to obstruct the operations of a computer system shall be punished by a fine or a prison term up to three years. Article 351 - Producing and Entering Computer Viruses (1) Anyone who makes a computer virus with the intention of entering it into a computer system of another person shall be punished by a fine or a prison term up to one year. III. International student conference „Safety in local communities-legal and criminological perspectives“’, Podgorica., April 2019

SECURITY OF NETWORK AND INFORMATION SYSTEMS Article 352 - Computer Fraud : (1) Anyone who enters, alters, erases, omits to enter correct data or otherwise conceals or misrepresents a piece of computer data or otherwise interferes with the functioning of a computer system and thereby influences the result of electronic processing, transfer of data and functioning of a computer system with the intention of obtaining illicit pecuniary gain for himself or for another person and thereby causes property damage to another person shall be punished by a prison term from six months to five years. Article 353 - Unauthorized Access to Computer System : (1) Anyone who, without authorization, makes access to the entire computer system or part thereof shall be punished by a fine or a prison term up to one year. Article 354 - Misuse of Devices and Programs : (1) Whoever produces, sells, procures for use, imports, distributes and otherwise places at disposal devices and computer programs or computer codes and similar data shall be punished by a prison term from three months to three years III. International student conference „Safety in local communities-legal and criminological perspectives“’, Podgorica., April 2019

SECURITY OF NETWORK AND INFORMATION SYSTEMS In accordance with the mission to enable detection of cyber threats and incidents and adequatly react and respond to the same, Montenegro formed Directorate for protection of computer and security incidents on the internet - CIRT III. International student conference „Safety in local communities-legal and criminological perspectives“’, Podgorica., April 2019

SECURITY OF NETWORK AND INFORMATION SYSTEMS year attack on websites scams on the internet abuse of profiles on soc. networks malver total 2012 3 2 - 5 2013 10 1 19 2014 6 20 31 2015 17 37 77 2016 18 36 50 124 2017 91 34 368 511 2018 (till dec.) 13 68 39 333 453 (statistic of incidents reported to CIRT) III. International student conference „Safety in local communities-legal and criminological perspectives“’, Podgorica., April 2019

CYBER ATTACK IN MONTENEGRO Attack of the computer system of Ministry of defence of the Montenegro by the Russian hacker group called APT28 (Fancy bear) III. International student conference „Safety in local communities-legal and criminological perspectives“’, Podgorica., April 2019

STRATEGY FOR THE INFORMATION SOCIETY DEVELOPMENT 2020 III. International student conference „Safety in local communities-legal and criminological perspectives“’, Podgorica., April 2018

THANK YOU FOR YOUR ATTENTION ! III. International student conference „Safety in local communities-legal and criminological perspectives“’, Podgorica., April 2019