Download to read offline
Uploaded bygree_tech
[International Workshop on Cybersecurity] THREAT INFO SHARING IN PRIVATE SECTOR
The document discusses the importance of threat information sharing in the private sector to prevent account compromises and enhance security. It emphasizes the need for significant investment in security personnel and the balance between security measures and privacy rights as outlined in various legislative acts. The conclusion suggests collaboration among companies and legislative support to enhance cybersecurity while addressing privacy concerns.
More Related Content
![[Grom] Enabling the Protection, Detection, and Response to Cyber-Threats](https://cdn.slidesharecdn.com/ss_thumbnails/7vww7asraa2jtu1rhfml-signature-d4523b3bf020616e67040d2a940ba8bf9aeab187b20da49956548f98de22ea12-poli-180606121949-thumbnail.jpg?width=640&height=640&fit=bounds)
Similar to [International Workshop on Cybersecurity] THREAT INFO SHARING IN PRIVATE SECTOR
[International Workshop on Cybersecurity] THREAT INFO SHARING IN PRIVATE SECTOR
- 1. THREAT INFO SHARING INPRIVATE SECTOR Nov Matake, GREE Inc.
- 2. NOV MATAKE • SecurityEngineer, GREE Inc. • Evangelist, OpenID Foundation Japan • Interested in.. • Digital Identity • Privacy • Security
- 3. PASSWORD LEAKS • Yahoo!JAPAN • OCN • Adobe • LinkedIn • etc…
- 4. PASSWORD LIST ATTACKS •CyberAgent • GREE • DeNA • mixi • Nintendo • etc.
- 5.
- 6.
- 7. –Eric Sachs, Google “Ifyou’re typing a password into something, unless they have 100+ full-time engineers working on security and abuse and fraud, you should be nervous.”
- 8.
- 10. Share information aboutimportant security events in order to thwart attackers from leveraging compromised accounts from one Service Provider to gain access to accounts on other Service Providers.
- 11.
- 12. – Consumer PrivacyBill of Rights Act of 2015, White House “The term “personal data” shall not include cyber threat indicators collected, processed, created, used, retained, or disclosed in order to investigate, mitigate, or otherwise respond to a cybersecurity threat or incident, when processed for those purposes.”
- 13. – Act onthe Protection of Personal Information, Japan “Cases in which the provision of personal data is necessary for the protection of the life, body, or property of an individual and in which it is difficult to obtain the consent of the person”
- 14. CONCLUSION • Hire 100+security engineers, or share information !! • FB & OIDF are going forward with White House backup • Resolve the conflict between security & privacy • Cyber Security Basic Act solves it ?