APCERT : APNIC Meeting 2014’ International Collaboration for Regional Cybersecurity Risk Reduction - APCERT Collaboration with Stakeholders Yurie Ito Chair, APCERT SC Director, Global Coordination, JPCERT/CC

General Introduction Asia Pacific Computer Emergency Response Team Forum of CSIRTs in the Asia Pacific region Established in February 2003 Annual Events 1.APCERT AGM & Conference 2.APCERT Drill (Simulation exercise of cyber attacks) APCERT Annual Report

Computer Security Incident Response Team CERT Services : by CERT/CC SEI CMU

APCERT Members

Key Cybersecurity Risks Threats exposed Data extortion by Persistence Threats Crowd sourced attack IT system down / Data loss by Natural Disaster IT System Environment / Technology Evolves New devices; Mobile Tablets, Smart Phones Social MediaCloud Computing Control System connects to Networks IT System Environment / Technology Evolves Risks Intellectual Property EconomicCompetitionInfrastructureService National Security All those old bad problems still exist Bots Malware, Exploits DDoS, etcCyber ConflictsInsider threats

Applying Root-Cause Analysis to Internet Health

APCERT Security Operations / Regional CERTs Collaboration Opportunities – Collaborate on cyberspace safety, cleanliness and health – clean up malware and cooperate in removing botnets – Focus on measurement and enabling remediation through education, tools, information sharing – Point of Contact (POC) arrangement – Cross boarder incident handling and coordination APCERT efforts should go farther in this area

APCERT 11 years of Achievement 2013 – APCERT 10 th anniversary Collaboration agreement with external experts and global security operations – OIC-CERT, EGC, TF-CSIRT, FIRST and many more industry partners Participated in global dialogues on fostering clean-up norms – Including guest status at APEC-TEL SPSG – AP*, APNIC, ASEAN Regional Forum Partnership with OECD on Cybersecurity Risk measurement program CSIRT Training for Africa and pacific islands APCERT Drills & ASEAN CERT Incident Drills TSUBAME -> Network Monitoring Data and tool sharing program

what can we do more with APNIC, APTLD and Network Operators? Cybersecurity capacity building and training Point of Contact exchange? – APCERT-AP-TLC, APCERT-AP-NIC – NICs – CERTs – ccTLDs – POC for NOGs More Info sharing? Send us Incident Reports Collaborate on regional risk reduction Cyber Green approach

Towards the Safe, Clean and Reliable Internet Ecosystem Yurie Ito Mobile: