1. Romanian National Cyberspace - Quick facts -
Catalin Patrascu
Chief of Incident Handling and Monitoring CERT-RO
08/11/2018
@ The New Global Challenges in Cyber Security

2. @ The New Global Challenges in Cyber Security
About CERT-RO
Romanian National Cyber Security Incident Response Team
Established by Government Decision no. 494/2011
Fully financed from the state budget
Duties:
Point of Contact - collects cyber security alerts from different stakeholders regarding vulnerabilities and incidents (IP’s, domains, URLs, IoC’s);
Incident response - first response, investigations, mitigation, technical support, data dissemination and coordination)
Cooperation (national and international partners)
Security Audits, Pentests, Trainings, Awarness campaigns
08/11/2018
@ The New Global Challenges in Cyber Security

3. @ The New Global Challenges in Cyber Security
2015 Report Summary
68+ mil. of alerts received
26% (2.3 mil.) of unique IPs in RO were involved in at least one cyber security alert
78% (53 mil.) of processed alerts are about vulnerable systems
20,78% (14 mil.) of processed alerts refers to botnets
„.ro” domains were reported to CERT-RO as being compromised in 2015 (on the rise with almost 60% compared to 2014)
08/11/2018
@ The New Global Challenges in Cyber Security

4. @ The New Global Challenges in Cyber Security
Last years comparison
08/11/2018
@ The New Global Challenges in Cyber Security

5. @ The New Global Challenges in Cyber Security
1st Semester of 2016
54+ mil. of alerts received (80% of entire last year)
52% are about botnet infections
47% are about vulnerable systems
Among vulnerabilities we still have:
Heartbleed
POODLE
FREAK
DROWN
Open/vulnerable services: NTP, Proxy, DNS (Open Resolvers) …
08/11/2018
@ The New Global Challenges in Cyber Security

6. @ The New Global Challenges in Cyber Security
Ransomware threat
Fast growing
Rapidly evolving in terms of complexity
All industry sectors affected
Hard to mitigate and stop
08/11/2018
@ The New Global Challenges in Cyber Security

7. @ The New Global Challenges in Cyber Security
What is to be done?
Coordinated and continuous effort
- Users
- Technology and service providers
- Authorities
Cooperation and information sharing
Proper/updated legislation
CERT/CSIRT bodies
- national, governmental, sectorial, private …
08/11/2018
@ The New Global Challenges in Cyber Security

8. @ The New Global Challenges in Cyber Security
Thank You!
Catalin Patrascu
Chief of Incident Handling and Monitoring CERT-RO
08/11/2018
@ The New Global Challenges in Cyber Security