NATO CIS Services Agency TechNet International Keynote Speech Session I – International Threats – Regional Solutions Presented by Lieutenant General Kurt Herrmann, Director NCSA 29 October 2009 Brussels, Belgium PROVISION OF CIS-SERVICES IN A DYNAMICALLY EVOLVING CYBER WORLD

NATO UNCLASSIFIED2 Understanding NCSA Free Flow of Information and Knowledge Security in the Cyber World NATO’s Response to Cyber Risks Outline

NATO UNCLASSIFIED3 To ensure the provision of secure end-to-end information exchange services and information processing services required for NATO Consultation, Command and Control, using fielded Communications and Information Systems in the most cost effective manner. NCSA Mission

NATO UNCLASSIFIED4 NCSA Organisation CIS OperationsStatic CIS Support Service Delivery Systems Management NATO INFOSECSignal Battalions

NATO UNCLASSIFIED5 CIS support to NATO Operations Military Committee OPCON (for Operations) SACEUR NAC Policy direction NCSA DCIS elements DCMs CIS Logistic Depot Supporting NATO elements NC3A NAMSA Contractors Supporting National CIS elements CIS support to Static HQ structures SLAsOpPlans/OpOrders C2 for NFS Nations’ customers Consul- tation NATO HQ Brussels C2 for NCS ACT +Sub- structure C2 for NCS ACO +Sub- structure NATO C3 Board NCSA’s Position NCSA “as a whole” (indivisible mission / organisation)  Reach back 

NATO UNCLASSIFIED6 Future Area of Responsibility EUFOR KFOR ISAF IRAQ NL. GR Norfolk Mons Brunssum Naples Northwood Heidelberg Ramstein Madrid Lisbon Izmir Sector Norfolk Sector Mons Sector Brunssum Sector Naples Sector Lisbon NCSA Squadron NCSA Detachment NCSA Support Element Stavanger Bydgoszcz Finderup Udem Larissa Poggio Renatico JALLC Monsanto La Spezia Yeovilton

NATO UNCLASSIFIED7 Darfur ISAF NTM-I ACTIVE ENDEAVOUR NHQS KFOR NCSA Connecting NATO …

NATO UNCLASSIFIED8 Federated & Integrated Architecture for ISAF SIPRNeT (US) CENTRIX S GCTF 80 nations CENTRIX S GCTF 80 nations CENTRIX S ISAF CENTRIX S ISAF ISAF Secret (FOC+, MP4, IOC, Overtask) NATO Secret NATO Secret Shared ISAF Information Domain 41 TCN National Mission Secret National Mission Secret NATO HQ Mission Secret NATO HQ Mission Secret NATO HQ Mission Secret NATO HQ Mission Secret National Mission Secret National Mission Secret National Mission Secret National Mission Secret ISAF General-Purpose Communication System

NATO UNCLASSIFIED9 FREE FLOW INFORMATION AND KNOWLEDGE: Network price performance (doubling every 12 months) Source:

NATO UNCLASSIFIED10 Globally Applied IP Networking 14 billion devices will be connected to the Internet by Billion 300 Million Source: / Forrester Research, February 2005

NATO UNCLASSIFIED11 The World Is Changing Fast Information flows freely Devices Experience Content/Applications Source:

NATO UNCLASSIFIED12 Cloud Computing 12

NATO UNCLASSIFIED13 Security Concerns 13

NATO UNCLASSIFIED14 Security in the Cyber World: The Social Revolution of the Internet Generation Social Networks Growth Instant Messaging Instant Messaging Social Networking Social Networking Global Collaboration Global Collaboration

NATO UNCLASSIFIED15 Spam Malware (viruses, worms, trojans..) Web defacements Denial of Service Active Threats

NATO UNCLASSIFIED16 Classified Information Leakage Vulnerabilities exposed by poor maintenance User indiscretions Active Threats (2)

NATO UNCLASSIFIED17 Script Kiddie Recreational Hacker Cyber Activist Organized Crime Terrorist Organization Nation-state Insider Threat The Attackers....

NATO UNCLASSIFIED18 Cyber Defence in NATO Commitment by Nations Effective Cyber Defence Policies NATO Cyber Defence Management Authority (CDMA) NATO Computer Incident Response Capability

NATO UNCLASSIFIED19 DETECT RESPONDRECOVER FEEDBACK PROTECT / PREVENT Security Activities

NATO UNCLASSIFIED20 Authorise – Inform – Advise - Report NATO CYBER DEFENCE: Functional View NATO wide CD Mgmt Body Policy Strategic Direction Response Teams Intrusion Detection Security Mgmt

NATO UNCLASSIFIED21 Cyber Defence Security Services System Hardening measures NATO-wide anti-malware support Specialist advice to projects Vulnerability Assessments (VA) and Penetration Testing NATO-wide Vulnerability Notification Training and Awareness

NATO UNCLASSIFIED22 Cyber Defence Security Services (2) Intrusion Detection System Mail Content Checking Website Monitoring 24/7 Incident Response Capability On and Off-line Computer Forensic Services

NATO UNCLASSIFIED23 NATO Core Network Voice Data VTC Land, Air & Maritime Forces Land, Air & Maritime Forces Balkan s NTMI Exercise s Service Interface Nations NATO’s CIS Network ISAF

NATO UNCLASSIFIED24 NCSA: NATO’s Driving Force for Efficient CIS Services Questions? NATO CIS Services Agency