http://www.nato.int/cps/en/natolive/news_109346.htm
NATO is advancing its efforts to both confront and address the wide range of cyber threats faced by Allies each day and this includes engaging industry, academia and public institutions in these efforts.
“Cyber security incidents are increasing in both scope and scale every day. Our defensive mechanisms have been outpaced by the scope and scale of malicious cyber activities and, as a result, this issue now sits as one of the most important emerging security challenges facing our countries today”, says Melissa Hathaway, Council of Experts, Global Cyber Security Centre (GCSEC), Rome, Italy.
She was speaking at a ‘Book Talk’ event held at NATO HQ on 10 February 2014, which discussed the conclusions drawn from a workshop that focused on exploring common interest issues for improving Allied and partner cyber defence practices.
The workshop, held end 2013, was supported by the NATO Science for Peace and Security (SPS) Programme and addressed cyber defence and NATO’s cyber defence policy implementation. It brought together a multi-disciplinary team of experts from 16 countries and three international institutions to share experience, knowledge and opinions. Together they generated 21 specific findings and 12 papers to help improve the cyber defence posture of NATO member countries and their partners.
The papers formed the basis of a book that was published as part of the NATO Science Series. The editor and co-directors of the project were invited to brief the relevant committee responsible for cyber defence at NATO on the findings of the workshop, and the publication was launched at this ‘Book Talk’ event.
The NATO Country Project Director and editor of the publication, Melissa Hathaway, said, “This demands that they collectively take action to reduce vulnerabilities of organisations’ information systems, assets, infrastructures and people. Accordingly, organisations are shifting their security approach toward monitoring ingress and egress routes, cataloguing the tactics, techniques, and procedures of adversary activity to better understand impacts and manage risk. Equally important, they are investing in advanced counter-measures to strengthen security postures and become more resistant to cyber threats. In the future, they will need to focus initiatives toward the protection, resilience, recovery, and restoration of services that transcend national boundaries, like electric power, navigation, and telecommunications. After all, defence does not stop at the corporate enterprise or sovereign border.”
The chapters of the publication ‘Best Practices in Computer Network Defense: Incident Detection and Response’ are available at each of the authors institutions as follows:
Chapter 1: Advanced Research Workshop Findings
Author: Melissa Hathaway, Council of Experts, Global Cyber Security Centre (GCSEC)
Link: http://belfercenter.ksg.harvard.edu/files/hathaway-findings-chapter.pdf
Chapter 2: Computer Network Defense: New Threats and Trends
Authors: Andrea Rigoni and Gustav Lindstrom, Geneva Centre for Security Policy (GSCP)
Link: http://www.gcsp.ch/Media/Files/Computer-Network-Defense-New-Threats-and-Trends
Chapter 3: Advanced Technologies/Tactics Techniques, Procedures: Closing the Attack Window, and Thresholds for Reporting and Containment
Author: John Stewart, Cisco Systems and Council of Experts, Global Cyber Security Center (GCSEC)
Link: http://www.cisco.com/web/about/security/intelligence/JNS_TTPs.pdf
Chapter 4: Beyond Perimeter Defense: Defense-in-Depth Leveraging Upstream Security
Author: Dave McMahon, The SecDev Group
Link: https://www.secdev.com/featured-publications#
Chapter 5: Back to Basics: Beyond Network Hygiene
Authors: Felix ‘FX’ Lindner (Recurity Labs GmbH, Germany) & Sandro Gaycken (Freie University of Berlin, Germany)
Link: http://recurity-labs.com/content/pub/Lindner_Gaycken-Back-to-Basics.pdf
Chapter 6: Aligning National Cyber Security Strategies to International Guidance: A First Step Toward Improving Incident Response Capabilities Across NATO
Author: Matt Holt, CEO, Intellium
Link: http://www.intelliumgroup.com/news/item/111-best-practices-in-computer-network-defense-cnd-incident-detection-and-response
Chapter 7: Evolution of National and Corporate CERTs – Trust, the Key Factor
Author: Olaf Kruidhof, Capgemini, The Netherlands
Link: http://www.nl.capgemini.com/sites/default/files/resource/pdf/olaf_kruidhof_-_evolution_of_national_and_corporate_certs.pdf
Chapter 8: Standards for Cyber Security
Author: Steve Purser, European Union Network and Information Security Agency (ENISA)
Link: https://www.enisa.europa.eu/publications/articles/standards-for-cyber-security
Chapter 9: A Model for Positive Change: Influencing Positive Change in Cyber Security Strategy, Human Factor, and Leadership
Author: Will Pelgrin
Link: http://www.cisecurity.org/documents/Pelgrin2014chapter.pdf
Chapter 10: Coordination and Cooperation in Cyber Network Defense: The Dutch Efforts to Prevent and Respond
Authors: Elly van den Heuvel (National Cyber Security Centre in The Hague, The Netherlands) and Gerben Klein Baltink (Dutch Cyber Security Council)
Link: https://www.ncsc.nl/english/current-topics/news/best-practices-in-computer-network-defense.html
The book is available at IOS publishers: http://ebooks.iospress.nl/volume/best-practices-in-computer-network-defense-incident-detection-and-response-2
NATO is advancing its efforts to both confront and address the wide range of cyber threats faced by Allies each day and this includes engaging industry, academia and public institutions in these efforts.
“Cyber security incidents are increasing in both scope and scale every day. Our defensive mechanisms have been outpaced by the scope and scale of malicious cyber activities and, as a result, this issue now sits as one of the most important emerging security challenges facing our countries today”, says Melissa Hathaway, Council of Experts, Global Cyber Security Centre (GCSEC), Rome, Italy.
She was speaking at a ‘Book Talk’ event held at NATO HQ on 10 February 2014, which discussed the conclusions drawn from a workshop that focused on exploring common interest issues for improving Allied and partner cyber defence practices.
The workshop, held end 2013, was supported by the NATO Science for Peace and Security (SPS) Programme and addressed cyber defence and NATO’s cyber defence policy implementation. It brought together a multi-disciplinary team of experts from 16 countries and three international institutions to share experience, knowledge and opinions. Together they generated 21 specific findings and 12 papers to help improve the cyber defence posture of NATO member countries and their partners.
The papers formed the basis of a book that was published as part of the NATO Science Series. The editor and co-directors of the project were invited to brief the relevant committee responsible for cyber defence at NATO on the findings of the workshop, and the publication was launched at this ‘Book Talk’ event.
The NATO Country Project Director and editor of the publication, Melissa Hathaway, said, “This demands that they collectively take action to reduce vulnerabilities of organisations’ information systems, assets, infrastructures and people. Accordingly, organisations are shifting their security approach toward monitoring ingress and egress routes, cataloguing the tactics, techniques, and procedures of adversary activity to better understand impacts and manage risk. Equally important, they are investing in advanced counter-measures to strengthen security postures and become more resistant to cyber threats. In the future, they will need to focus initiatives toward the protection, resilience, recovery, and restoration of services that transcend national boundaries, like electric power, navigation, and telecommunications. After all, defence does not stop at the corporate enterprise or sovereign border.”
The chapters of the publication ‘Best Practices in Computer Network Defense: Incident Detection and Response’ are available at each of the authors institutions as follows:
Chapter 1: Advanced Research Workshop Findings
Author: Melissa Hathaway, Council of Experts, Global Cyber Security Centre (GCSEC)
Link: http://belfercenter.ksg.harvard.edu/files/hathaway-findings-chapter.pdf
Chapter 2: Computer Network Defense: New Threats and Trends
Authors: Andrea Rigoni and Gustav Lindstrom, Geneva Centre for Security Policy (GSCP)
Link: http://www.gcsp.ch/Media/Files/Computer-Network-Defense-New-Threats-and-Trends
Chapter 3: Advanced Technologies/Tactics Techniques, Procedures: Closing the Attack Window, and Thresholds for Reporting and Containment
Author: John Stewart, Cisco Systems and Council of Experts, Global Cyber Security Center (GCSEC)
Link: http://www.cisco.com/web/about/security/intelligence/JNS_TTPs.pdf
Chapter 4: Beyond Perimeter Defense: Defense-in-Depth Leveraging Upstream Security
Author: Dave McMahon, The SecDev Group
Link: https://www.secdev.com/featured-publications#
Chapter 5: Back to Basics: Beyond Network Hygiene
Authors: Felix ‘FX’ Lindner (Recurity Labs GmbH, Germany) & Sandro Gaycken (Freie University of Berlin, Germany)
Link: http://recurity-labs.com/content/pub/Lindner_Gaycken-Back-to-Basics.pdf
Chapter 6: Aligning National Cyber Security Strategies to International Guidance: A First Step Toward Improving Incident Response Capabilities Across NATO
Author: Matt Holt, CEO, Intellium
Link: http://www.intelliumgroup.com/news/item/111-best-practices-in-computer-network-defense-cnd-incident-detection-and-response
Chapter 7: Evolution of National and Corporate CERTs – Trust, the Key Factor
Author: Olaf Kruidhof, Capgemini, The Netherlands
Link: http://www.nl.capgemini.com/sites/default/files/resource/pdf/olaf_kruidhof_-_evolution_of_national_and_corporate_certs.pdf
Chapter 8: Standards for Cyber Security
Author: Steve Purser, European Union Network and Information Security Agency (ENISA)
Link: https://www.enisa.europa.eu/publications/articles/standards-for-cyber-security
Chapter 9: A Model for Positive Change: Influencing Positive Change in Cyber Security Strategy, Human Factor, and Leadership
Author: Will Pelgrin
Link: http://www.cisecurity.org/documents/Pelgrin2014chapter.pdf
Chapter 10: Coordination and Cooperation in Cyber Network Defense: The Dutch Efforts to Prevent and Respond
Authors: Elly van den Heuvel (National Cyber Security Centre in The Hague, The Netherlands) and Gerben Klein Baltink (Dutch Cyber Security Council)
Link: https://www.ncsc.nl/english/current-topics/news/best-practices-in-computer-network-defense.html
The book is available at IOS publishers: http://ebooks.iospress.nl/volume/best-practices-in-computer-network-defense-incident-detection-and-response-2
No comments:
Post a Comment