Jamaica: victim or perpetrator of cyber crime and intrusions (final)
•
1 like•1,648 views
Presentation given at the Paladion seminar, “Scaling up Security Management for Newer Threats”, on 26 June 2012 in Kingston, Jamaica
Recommended
Recommended
More Related Content
What's hot
What's hot (19)
Viewers also liked
Viewers also liked (20)
Similar to Jamaica: victim or perpetrator of cyber crime and intrusions (final)
Similar to Jamaica: victim or perpetrator of cyber crime and intrusions (final) (20)
Recently uploaded
Recently uploaded (20)
Jamaica: victim or perpetrator of cyber crime and intrusions (final)
- 1. Jamaica: Vic)m or perpetrator of cyber crime and intrusions? INFOSEC Execu)ve Breakfast Kingston, Jamaica Ÿ 26 June 2012
- 2. Cyber incidents not widely reported in the Caribbean A few possible excep.ons: • Tax Administra.on of Jamaica – June 2012 • Hacking of Trinidad & Tobago Parliament website – April 2012 • Hacking of Trinidad & Tobago Ministry of Finance website – March 2012 • DDoS aHack LIME Barbados network – March 2012
- 3. What do Caribbean network security experts think about cyber security in the region?
- 4. Intrusions are highly prevalent in the Caribbean • Success rate of aHempts unknown • Top sources for threats – Russia, China, HK • Organisa.ons have a narrow view of security • Caribbean has not commiHed the necessary resources or effort to strengthen frameworks • In addi.on to threats in-‐country, Caribbean countries can be used as jump-‐off points for aHacks in other countries
- 5. What is the situa)on in Jamaica?
- 6. A legal & enforcement framework exists for cyber crime • Cybercrimes Act 2010 exists along with a Cybercrime Unit (CCU) • CCU can only enforce with coopera.on of vic.ms and other affected interests • Unit has its hand full tackling local crimes plus loHo/telemarke.ng scams targeted at the US • LoHo scams are affec.ng country’s reputa.on – “Beware 876” campaign
- 7. CCU tackled 32 cases in 2011
- 8. So far, Jan—May 2012: 26 cases
- 9. CCU data doesn’t tell us much • Incidents reported as cyber crimes are done according to Cybercrimes Act • CCU’s main goal is prosecu.on • Focus likely to be incidents origina.ng in Jamaica • LiHle or possibly no framework for incidents affec.ng Jamaicans but origina.ng elsewhere • Cases reported to CCU only a drop in the bucket
- 10. How can we stem the )de?
- 11. Cyber incidents can be debilita)ng and isola)ng • Majority of organisa.ons are unaware that they have been compromised • Incidents cost organisa.ons $MM – .me, revenues, produc.vity, remedia.on • Many organisa.ons could be having iden.cal experiences – unbeknownst to the other • Oaen limited insight into scope of incidents -‐ frequency, characteris.cs, paHerns, possible solu.ons, etc.
- 12. Internally, we must be beUer prepared and equipped • Comprehensively examine systems, networks, equipment • Strategically establish priori.es & con.ngencies • Invest in the con.nual maintenance and update of defences • Exercise even greater vigilance • Support staff training and capacity building
- 13. We must also be prepared to establish trust rela)onships CERTs/CSIRTs are urgently needed: • Provide expert informa.on and support • Supplement internal security plans/structures • Increase awareness of incidents -‐ frequency, characteris.cs, commonali.es, possible solu.ons, etc. • Ensure that appropriate industry standards and prac.ces are established
- 15. Image credits • Stethoscope: dreams designs / FreeDigitalPhotos.net, hHp://www.freedigitalphotos.net/images/view_photog.php?photogid=1449 • Binocular image: Ntwowe / FreeDigitalPhotos.net, hHp://www.freedigitalphotos.net/images/view_photog.php?photogid=2043 • Hermosa Wave image: watch4u / flickr, hHp://www.flickr.com/photos/look4u/