Introduction to ICT supply chain (Cyber norms awareness)

•

1 like•325 views

The document discusses securing the ICT supply chain from cyber threats. It provides examples of past cyber attacks that targeted software supply chains, such as the Xcode Ghost attack in 2015 that compromised the iOS app developer toolchain. The document also discusses the risks of hardware supply chains being compromised through tactics like planting spy chips during the manufacturing and distribution process, as was reported done by the NSA on Cisco routers and servers from Amazon and Apple. It advocates breaking the cyber kill chain and securing different components of the ICT supply chain from chips to end customers to help stop threats.

Technology

Cyber Norms: Securing the
ICT Supply Chain
United Nations Singapore Cyber Programme 2019
Benjamin Ang,
Head Cyber Homeland Defence, CENS RSIS NTU
Twitter @benjaminang

Part of the software supply chain
Source
Code
Compiler
Binary
Code

XCode Ghost 2015 (Part 1)
IOS App
Developer
IOS XCode
Compiler
IOS App

XCode Ghost 2015 (Part 2)
IOS App
Developer
Ghost
Compiler
IOS App
Hello,
Beijing

MeDoc Tax Accounting software (2017)
updates
NOTPETYA

Everything is modular
https://www.msn.com/en-sg/?AR=1

Hardware supply chain: Where are you?
chips
computers
printers
routers
Packaging &
Distribution
customers
Snowden: NSA planted
bugs in Cisco Routers

Snowden: NSA planted bugs in Cisco routers

Bloomberg: Spy chip planted in Amazon,
Apple, US DOD servers

Break the
Cyber Kill
Chain
Reconnaissance
Weaponize
Delivery
Exploit
Install
Command
& Control
Action

Post It: What can you secure, and how?
chips
computers
printers
routers
Packaging &
Distribution
customers

The Internet industry is undergoing a fundamental change as it transitions from IPv4 to IPv6. These slides are from the June 2011 webcast which provided an overview of IPv6 Threats, recommendations on how to stay protected during the transition to IPv6 as well as information on what Commtouch is doing to ensure its solutions are IPv6 compliant. The webcast features Commtouch security experts Asaf Greiner and Gabriel M. Mizrahi. You can view the webcast on the Commtouch Slideshare page.

Venkasure Total Security + Presentation

venkasureantivirus

Liran Tal - StrangerDanger - Finding Security Vulnerabilities Before They Fin...

Liran Tal

Open source modules on the NPM ecosystem are undoubtedly awesome. However, they also represent an undeniable and massive risk. You’re introducing someone else’s code into your system, often with little or no scrutiny. The wrong package can introduce severe vulnerabilities into your application, exposing your application and your user’s data. This talk will use a sample application, Goof, which uses various vulnerable dependencies, which we will exploit as an attacker would. For each issue, we’ll explain why it happened, show its impact, and – most importantly – see how to avoid or fix it.

17 resources to become an IoT Pro

Allied Consultants

SCSJPA Recommended Apps

scsjpa

NXP'S-PORTFOLIO-FOR-ADDRESSING-IOT-SECURITY.pdf

ssuser57b3e5

Privacy and security in IoT

Vasco Veloso

An overview of security and privacy challenges that must be faced and solved when creating new Things for the Internet of Things. We discussed why are Things inherently insecure together with examples of attack vectors and learned some risk mitigation strategies. We realized why should users be wary of Things violating their privacy and gained awareness of upcoming EU privacy legislation that affects providers of IoT-based solutions. Talk given at Pixels Camp 2017, Lisbon.

Ransomware protection in loT using software defined networking

IJECEIAES

Internet of things (IoT) is the network of physical objects connected to provide various services. IoT is expanding rapidly, and is positively influencing many areas. The impact of IoT is evident in medical field, manufacturing units and livestock. The IoT is also vulnerable to many cyber threats, owing to its limited resources and battery operation. In contemporary times the security threats like DDoS, botnet malware, man in the middle, flood attacks and ransomware are affecting the smooth functioning of IoT. Ransomware has emerged as one of the biggest threat in cyber world. Ransomware is a type of malware that stops the access to files by encrypting them and decrypts the files only when a ransom is paid. The negligence towards the IoT ransomware can result in disastrous outcomes. In this paper, the growth of ransomware attacks for past few years is shown with special focus on ransomwares threatening IoT. A detection mechanism for IoT ransomware attack is presented that is designed after study of ransomware for IoT. The proposed model monitors the incoming IoT traffic through Software Defined Network (SDN) gateway. It uses policies framed in SDN controller for detection and alleviation of ransomware in IoT.

What's hot

P05 | Covid-19 & Apps | Anurag Gupta | MCA

ANURAGGUPTA570

Mobile Defense Product Overview

Griffin

Pure retail training presentation v2kaspersky-lab

Pure retail training non animationkatelyn-fogarty

Pure retail training presentationkatelyn-fogarty

Pivotal tracker

Mike Silvis

Top 10 Cyber Security Tips for SMEs

DarraghCommsec

Writing Secure Mobile Apps for Drones

Godfrey Nolan

Cyberdefense in depth with validy technologyGilles Sgro

Network security history

shahab ali

How to get Started in Cyber Security - Rayan Crasta

Rayan Crasta

Wireless Networkingjvonschilling

Data Privacy Day 2022: Tips to Ensure Data Privacy

Tripwire

Implementation of Wireless Sensor Network in disaster detection and monitoring

Sinthana Sambandam

Slides from IPv6 Threats

Cyren, Inc

Venkasure Total Security + Presentation

venkasureantivirus

Liran Tal - StrangerDanger - Finding Security Vulnerabilities Before They Fin...

Liran Tal

17 resources to become an IoT Pro

Allied Consultants

SCSJPA Recommended Apps

scsjpa

What's hot (19)

P05 | Covid-19 & Apps | Anurag Gupta | MCA

Mobile Defense Product Overview

Pure retail training presentation v2

Pure retail training non animation

Pure retail training presentation

Pivotal tracker

Top 10 Cyber Security Tips for SMEs

Writing Secure Mobile Apps for Drones

Cyberdefense in depth with validy technology

Network security history

How to get Started in Cyber Security - Rayan Crasta

Wireless Networking

Data Privacy Day 2022: Tips to Ensure Data Privacy

Implementation of Wireless Sensor Network in disaster detection and monitoring

Slides from IPv6 Threats

Venkasure Total Security + Presentation

Liran Tal - StrangerDanger - Finding Security Vulnerabilities Before They Fin...

17 resources to become an IoT Pro

SCSJPA Recommended Apps

Similar to Introduction to ICT supply chain (Cyber norms awareness)

NXP'S-PORTFOLIO-FOR-ADDRESSING-IOT-SECURITY.pdf

ssuser57b3e5

Privacy and security in IoT

Vasco Veloso

Ransomware protection in loT using software defined networking

IJECEIAES

전력 계통망에 있어서 보안일반 및 이슈와 기술 그리고 정책 방향-소셜 네트워크 서비스 등 차세대 기술 환경 맥락으로-

JM code group

주최 : 한국전기연구원 전문가 자문 발표 발표장소 : 한국전기연구원 발표주제 :전력 계통망에 있어서 보안일반 및 이슈와 기술 그리고 정책 방향-소셜 네트워크 서비스 등 차세대 기술 환경 맥락으로- 발표일:2009년 10월 20일 발표자 : 강장묵(세종대학교 정보통신공학과 BK사업단 소속 교수) redsea@sejong.ac.kr mooknc@gmail.com

Irdeto Spokesman Yuan Xiang Gu Speaks At ISI SSP Beijing 2011

EASTWEST Public Relations

beware of Thing Bot

Bellaj Badr

Case Study on supply chain attack-how an rce in jenkins leads to data breache...

idsecconf

Iot(security)

Shreya Pohekar

Unauthorized Access Detection in IoT using Canary Token Algorithm

IJSRED

A Study on Modern Methods for Detecting Mobile Malware

IRJET Journal

The Seven Most Dangerous New Attack Techniques, and What's Coming Next

Priyanka Aash

Which are the most dangerous new attack techniques for 2016/2017? How do they work? How can you stop them? What's coming next and how can you prepare? This fast-paced session provides answers from the three people best positioned know: the head of the Internet Storm Center, the top hacker exploits expert/teacher in the U.S., and the top expert on cyberattacks on industrial control systems. (Source: RSA USA 2016-San Francisco)

The Seven Most Dangerous New Attack Techniques, and What's Coming Next

Priyanka Aash

Internet of Things (IoT) Security using stream cipher.ppt

AliSalman110

Architecting cybersecurity to future proof smart cities against emerging cybe...

NUS-ISS

Survey of Operating Systems for the IoT Environment

Eswar Publications

This paper is a comprehensive survey of the various operating systems available for the Internet of Things environment. At first the paper introduces the various aspects of the operating systems designed for the IoT environment where resource constraint poses a huge problem for the operation of the general OS designed for the various computing devices. The latter part of the paper describes the various OS available for the resource constraint IoT environment along with the various platforms each OS supports, the software development kits available for the development of applications in the respective OS’es along with the various protocols implemented in these OS’es for the purpose of communication and networking.

A Review Paper on Cyber-Security

IRJET Journal

Tsunami of Technologies. Are we prepared?

msyukor

Resin.io overview (2016 July)

Balena

JacksonvilleJUG_CVE101.pdf

Theresa Mammarella

iOS Hacking: Advanced Pentest & Forensic Techniques

Ömer Coşkun

Similar to Introduction to ICT supply chain (Cyber norms awareness) (20)

NXP'S-PORTFOLIO-FOR-ADDRESSING-IOT-SECURITY.pdf

Privacy and security in IoT

Ransomware protection in loT using software defined networking

전력 계통망에 있어서 보안일반 및 이슈와 기술 그리고 정책 방향-소셜 네트워크 서비스 등 차세대 기술 환경 맥락으로-

Irdeto Spokesman Yuan Xiang Gu Speaks At ISI SSP Beijing 2011

beware of Thing Bot

Case Study on supply chain attack-how an rce in jenkins leads to data breache...

Iot(security)

Unauthorized Access Detection in IoT using Canary Token Algorithm

A Study on Modern Methods for Detecting Mobile Malware

The Seven Most Dangerous New Attack Techniques, and What's Coming Next

Internet of Things (IoT) Security using stream cipher.ppt

Architecting cybersecurity to future proof smart cities against emerging cybe...

Survey of Operating Systems for the IoT Environment

A Review Paper on Cyber-Security

Tsunami of Technologies. Are we prepared?

Resin.io overview (2016 July)

JacksonvilleJUG_CVE101.pdf

iOS Hacking: Advanced Pentest & Forensic Techniques

More from Benjamin Ang

Cybersecurity in ASEAN and Singapore Columbia - Lecture for Columbia SIPA 202...

Benjamin Ang

Lecture on cybersecurity in ASEAN and Singapore - Definitions of cybersecurity in ASEAN (vs western definitions) - Cyber threat landscape in ASEAN / types of cyber incidents and cyber crime in ASEAN Why ASEAN is vulnerable - Characteristics of ASEAN in cyberspace non-interference, sovereignty non-attribution of cyber attackers - ASEAN cooperation in cyberspace AMCC (ASEAN Ministers Cyber Conference) ACICE (ADMM Cyber Info Centre of Excellence) INTERPOL

International Cooperation to Impose Consequences for Malicious Cyber Activity...

Benjamin Ang

Session 4 - International Cooperation to Impose Consequences on Malicious Cyber Activities Many states are concerting joint efforts to impose costs for irresponsible behaviors in cyberspace by sharing information, jointly disclosing attribution, or issuing joint statements with allies, partners, or like-minded states. Being aware of the importance of the roles played by private sectors for national cybersecurity, states are seeking ways to induce cooperation from private sectors as well. Session 4 covers cooperation efforts at the international level for imposing consequences on irresponsible state behavior in cyberspace. Speakers are expected to address the following points. H. Introduce cases where costs for irresponsible state behavior in cyberspace are effectively imposed with joint efforts among states. I. Introduce cases where cooperation between private and public sectors has contributed to impose costs for irresponsible state behavior in cyberspace. J. Underscore specific areas where efforts for international cooperation need to be concerted to effectively impose consequences for irresponsible state behavior in cyberspace. [Panel] Moderator: Caitriona Heinl (Azure Forum for Contemporary Security Strategy) Speaker: James Lewis (Center for Strategic and International Studies) Speaker: Benjamin Ang (Nanyang Technological University) Speaker: Karsten Geier (Centre for Humanitarian Dialogue) [12:00-13:30, KST (GMT+9)] Luncheon

Changing Domains - The Cyber Info Realm 2023.pdf

Benjamin Ang

CYBERSPACE: A global domain within the information environment consisting of the interdependent networks of information technology infrastructures and resident data, including the Internet, telecommunications networks, computer systems, and embedded processors and controllers. Definition Foreign interference occurs when a foreign entity (state or non-state actor), with hostile intent, takes actions to deliberately, covertly and deceptively disrupt the politics and policies of the target state Source: Fog of war: how the Ukraine conflict transformed the cyber threat landscape, published by Google TAG (Threat Analysis Group) Overview 1. Russian government-backed attackers have engaged in an aggressive, multi-pronged effort to gain a decisive wartime advantage in cyberspace, often with mixed results. 2. Moscow has leveraged the full spectrum of IO – from overt state-backed media to covert platforms and accounts – to shape public perception of the war. 3. The invasion has triggered a notable shift in the Eastern European cybercriminal ecosystem that will likely have long term implications for both coordination between criminal groups and the scale of cybercrime worldwide. Sources: Defending Ukraine: Early Lessons from the Cyber War (Microsoft)* Defense against a military invasion now requires for most countries the ability to disburse and distribute digital operations and data assets across borders and into other countries. Recent advances in cyber threat intelligence and end-point protection have helped Ukraine withstand a high percentage of destructive Russian cyberattacks. As a coalition of countries has come together to defend Ukraine, Russian intelligence agencies have stepped up network penetration and espionage activities targeting allied governments outside Ukraine. In coordination with these other cyber activities, Russian agencies are conducting global cyber-influence operations to support their war efforts. This calls for a coordinated and comprehensive strategy to strengthen defenses against the full range of cyber destructive, espionage, and influence operations. The Strontium group was targeting Ukrainian institutions, media organizations, and government institutions and think tanks in the United States and the European Union Microsoft got court orders 16 times to redirect internet traffic from Strontium domains into a ‘sinkhole’ How to defend the information domain Public coverage and exposure Clear counter-messages Legislation Build media and digital literacy Work with citizens, influencers Detect and expose fake accounts Active measures Work strategically, not reactively Build a strong narrative that is more attractive than the adversary

Cooperation between ASEAN military civil academic in international cybersecur...

Benjamin Ang

3 areas of cooperation Council for Security Cooperation in the Asia Pacific (CSCAP) Track II Network of ASEAN Defence and Security Institutions (NADI) UN OEWG Open-ended Working Group on security of and in the use of information and communications technologies Council for Security Cooperation in the Asia Pacific (CSCAP) non-governmental (second track) process for dialogue on security issues in the Asia Pacific informal mechanism for scholars, officials and others in their private capacities to discuss political and security issues and challenges facing the region provides policy recommendations to inter-governmental bodies convenes regional and international meetings establishes linkages with institutions and organisations in other parts of the world exchanges information, insights and experiences in the area of regional political-security cooperation. Track II Network of ASEAN Defence and Security Institutions (NADI) Secretariat is RSIS Aims of the forum network and to build confidence and familiarity among the Asean think tanks and research institutions to facilitate closer cooperation. policy analysts specialising in defence and security issues, academics researching security cooperation and defence officials to discuss issues of security cooperation that the Asean Summit and Asean Defence Ministers have raised participants to think beyond their governments’ positions and to provide timely fresh ideas and relevant recommendations for the Asean defence track to consider. UN OEWG on Cyber Open-ended Working Group on security of and in the use of information and communications technologies The group is mandated to further develop the rules, norms and principles of responsible behaviour of States; consider initiatives of States aimed at ensuring security in the use of information and communications technologies; establish, under the auspices of the United Nations, regular institutional dialogue with the broad participation of States; continue to study, with a view to promoting common understandings, existing and potential threats in the sphere of information security, inter alia, data security, and possible cooperative measures to prevent and counter such threats, and how international law applies to the use of information and communications technologies by States, as well as confidence-building measures and capacity-building.

Technology Disruption Digital Inclusion and the Law.pdf

Benjamin Ang

What is technology disruption? A new technology that changes The way things are done Expectations and behaviors Market or industry Uber/Grab vs taxi business Airbnb vs hotel business Netflix vs TV, DVD, cinemas Blockchain vs financial institutions Google vs books, libraries ChatGPT vs Google How can technology disrupt the Law? DoNotPay https://donotpay.com/ Bizibot https://www.btlnet.co.uk/digital-transformation-solutions-overview/bizibot WeVorce https://www.wevorce.com OCBC Online Will Generator https://www.ocbc.com/personal-banking/lifegoals/willgenerator/#/ Transcripts https://fortherecord.com/transcript-express/ Law firms using Blockchain https://www.raconteur.net/technology/blockchain/blockchain-revolutionising-legal-sector/ LawGeex AI vs human lawyers, on reviewing standard contracts Accuracy Time taken to review contract Courts used technology to deliver justice during COVID But litigants with resources had the advantage https://www.pewtrusts.org/en/research-and-analysis/reports/2021/12/how-courts-embraced-technology-met-the-pandemic-challenge-and-revolutionized-their-operations Disruption has no ethics. But we do. Must bridge the Digital Divide Parties may need help https://www.ncsc.org/__data/assets/pdf_file/0026/53738/PPP-Technology-Digital-Divide-Considerations.pdf Using AI for judgments Benefits Exclude legally irrelevant factors Standardise decisions Help courts to prioritise cases, increase efficiency Encourage parties to settle if success is predicted to be unlikely https://www.cppr.in/articles/predictive-justice-using-ai-for-justice-introduction Risks Over reliance on machine decisions Algorithmic bias: bad history = bad future Bad data feedback into bad data Inability to explain decisions: bad for rule of law https://www.suls.org.au/citations-blog/2020/9/25/predictive-judicial-analytics-implications-for-rule-of-law-and-the-legal-profession Cases of AI bias in justice system COMPAS (for probation) Black defendants were 2x wrongly predicted to be high risk of recidivism White defendants were 2x wrongly predicted to be low risk of recidivism Black defendants were 2x more likely to be misclassified as high risk of violent recidivism White violent recidivists were 63% more likely to have been misclassified as low risk https://www.propublica.org/article/how-we-analyzed-the-compas-recidivism-algorithm Public Safety Assessment (for bail) More likely to recommend high bail for males than females https://venturebeat.com/ai/study-finds-crime-predicting-judicial-tool-exhibits-gender-bias/ How does this type of AI work? How does this type of AI work? Where did the ML (Machine Learning) come from? Garbage In = Garbage Out Always check what’s going in and what’s coming out Rand Report on Protecting Individuals using tech in the Justice

Why Application of International Law Applies to ASEAN.pdf

Benjamin Ang

There is no international definition of these concepts in cyberspace Armed attack Use of force Act of war Traditional definitions require physical damage or physical injury Rules of Law of Armed Conflict / International Humanitarian Law(but in cyber?) Distinction – must distinguish between civilians and military targets Proportionality – must avoid excessive harm to civilians / objects Military necessity – allows force that is reasonable, lawful (see above), and operationally justified Limitation – prohibits tactics that cause unnecessary suffering Humane treatment – e.g., of captured prisoners Do we need a Binding Legal Instrument? US - No new international legal instrument needed, can interpret existing law China - States must reach international consensus, new international legal instruments EU - No new international legal instrument needed, can interpret existing law ASEAN chooses its own terms on norms/law ASEAN supported both UNGGE and OEWG tracks in 2018 – Indonesia, Singapore, and the Philippines said both processes were not incompatible ASEAN has always followed its instinct of creating an internationally agreed, rules-based order based on its own interests, which is consistent with other arenas where international law or rules are unsettled ASEAN may even consider plurilateral treaties What ASEAN states need to move forward Common language related to cyberspace Legislation that can be translated across members Capacity building in Cyber issues, policy making, critical infrastructure protection (ASCCE) and Military operations (ADMM Cyber and Information COE) Confidence building measures e.g., CERT-CERT communications, contact lists More participation from states, academia, and civil society What is Cybersecurity – C, I, A? Cybersecurity or Information Security? Activities of foreign political, economic, military, intelligence, and information entities The striving of countries toward dominance in the world information space Development (by states) of information war concepts that create means for dangerous attack on the information spheres of other countries Infringing the state’s control over information flows and public opinion (called “cyber sovereignty”) ASEAN leaders Value the principles of “mutual respect” and “non-interference” View sovereignty as sacrosanct principle among ASEAN member states Do not define ‘sovereignty’ – this provides flexibility in foreign and domestic policy ASEAN member states also attach great importance to the creation of an international rules-based order, which includes forming and adhering to international law and norms. like the UN Convention of the Law of the Sea or UNCLOS.

Lessons learned from Capacity Building on International Cyber Norms in Southe...

Benjamin Ang

Capacity building is recognized as a key to promote the adoption and implementation of international norms of responsible state behaviour in cyberspace. States at varying levels of cyber maturity benefit from these efforts, to develop a shared understanding of how international cyber norms support the stability of cyberspace, and to grow their own capacity and capabilities to implement these norms. This presentation draws on the experiences of the academics and practitioners who have been conducting cyber capacity building activities in southeast Asia and beyond, to derive lessons of what has (or has not) worked, some potential best practices, and to provide suggestions on how cyber capacity building can provide more value to the further growth of international cyber norms in the world. UNGGE 2015 Cyber Norms UN Open Ended Working Group (UN OEWG) UN Singapore Cyber Programme (UNSCP) Norms Implementation Checklist RAP Matrix ASEAN Ministers Cyber Conference (AMCC) Capacity building Confidence Building Measures (CBMs)

Cybersecurity and National Security in Southeast Asia 2022.pdf

Benjamin Ang

Cybersecurity and Geopolitical Risk.pdf

Benjamin Ang

Cybercrime and Cyber Warfare (and Information Operations) – Your questions an...

Benjamin Ang

Slides from a talk given to Eunoia Junior College, Singapore ------------------- Cyber Warfare questions Are the concerns about cyber warfare overblown? Why should young people care about cyber warfare? What are the national/international systems or structures currently in place to protect us from cyber warfare? Are these protections adequate? Considering that Singapore is a small country, is there really anything we can do in the face of the challenges posed by cyber warfare? ------------------- Cybercrime Questions How do scammers make Singaporeans lower their guard despite them already knowing that scams are prevalent in our society? Why do you think people still fall for scams? By the time new types of scams are reported, new types of scams are already being created. How do you think the Singapore government can break this cycle? How hard is it to find out criminals behind cyber attacks? ----------- Information Operations questions The Russo-Ukraine War, what are your thoughts on it being publicized on social media unlike many wars from the past? Are there any political implications regarding the publication of the war on TikTok? Could posting the war on TikTok create any social issues?

Disinformation in Southeast Asia and Pro Russian Anti Ukraine Narratives

Benjamin Ang

Case studies of disinformation and misinformation from Southeast Asia including Asian examples of Pro-Russia Anti-Ukraine narratives at the start of the Russian invasion of the Ukraine. Presented at the Conference on Disinformation and Cybersecurity of the War Studies University, Warsaw Poland, in 2022. Refers to the RSIS Framework on Information, Influence and Interference, from the Centre of Excellence for National Security at the S Rajaratnam School of International Studies (RSIS) at Nanyang Technological University (NTU) Singapore

Foreign Interference and National Security - Law Society Public Law conferenc...

Benjamin Ang

[ To read and download the Policy Report that this presentation is based on, see https://www.rsis.edu.sg/rsis-publication/cens/cases-of-foreign-interference-in-asia/ ] The Public and International Law Committee of the Law Society of Singapore invites you to join us for the Public Law Conference 2021 which aims to promote interest in the administrative and constitutional law of Singapore, highlight new judicial decisions, and facilitate discussion of recent developments. To be held online on 15 September, we are pleased to have the Minister for Home Affairs and Law, Mr K Shanmugam, deliver a keynote speech on the public law issues relating to online harms and foreign interference. These issues are important and topical as they have a significant impact on society today, not just in Singapore, but worldwide. This will be followed by a panel that will analyse and develop the themes raised in the keynote, as well as discuss possible solutions, including legislative solutions, to such issues, in the context of public law. The panellists will comprise the Honourable Minister himself, practitioners, legal officers and academics active in the fields of administrative and constitutional law. This conference provides a platform to hear from legal experts, and for different sectors of the legal industry to share ideas. We hope it will be relevant to all legal practitioners, government decision-makers, public-sector policy makers, academics and law students interested in public law.

Technology Disruption in the New Normal, Digital Inclusion and the Law

Benjamin Ang

Technology disruption has swept through legal practice and the justice system, as it has in every other aspect of life in our new normal of remote work and online access. While digital transformation has been hugely beneficial to our society, there are new legal and cybersecurity questions that we need to grapple with as we continue to serve the public. Among the public, varying levels of digital capability and access raise new issues of digital inclusion for us to address in policy and operations. This talk seeks to raise awareness of these issues and to develop ideas for practical application.

Contract law - an infographic view

Benjamin Ang

Law and warfare in the cyber domain (for NSSP, AFP, NDCP)

Benjamin Ang

Covers 1. Cyber threats to ASEAN and recent incidents, 2. International Law relating to cyber conflict, Gaps in IHL and LOAC, 3. UN and ASEAN steps to prevent cyber warfare. Lecture for the National Defense College of the Philippines (NDCP), government’s highest center for education, training, and research on defense and national security, in the National Security Studies Program (NSSP) for Armed Forces of the Philippines (AFP) officers.

Framework of responsible state behaviour in cyberspace - for Marshall Center ...

Benjamin Ang

Adapting to changing cyber security threats in South East Asia (IFRI 2020)

Benjamin Ang

Cyber threats and cooperation in Indo Pacific for Pacific Forum 2020

Benjamin Ang

This public, 90-minute session examined the prevalence of cyber threats in the Indo-Pacific region based on some of the high-profile cyber-attacks and data leaks, as well as advanced persistent threat campaigns. It assessed the growing prominence of information warfare, especially in the current pandemic. The session highlighted the most common tactics, techniques and procedures used by malicious actors, and the countermeasures that governments and the private sector have undertaken to fortify their cyber defenses in the emerging data-driven economy. This session then examined the role played by the US and Singapore in enhancing regional cybersecurity as well as clarify the points of convergence and divergence between Singapore and the US to improve future cooperation.

Singapore Asean cyber conflict and cybersecurity strategy - for Columbia Univ...

Benjamin Ang

Legal Technology Vision (Singapore) and the future of legal tech (2020 update)

Benjamin Ang

This lecture covers the The Legal Technology Vision which is a five-year roadmap to help the legal industry in Singapore to leverage technology to enhance their practice. It is also a call to action for legal technology providers to engage in public-private collaboration for the building of a legal tech ecosystem. You can find it at https://www.sal.org.sg/Resources-Tools/Legal-Technology-Vision You can follow Benjamin Ang on Twitter for updates and commentary on technology policy and legal issues at http://twitter.com/benjaminang Thinking of a career as a paralegal, lawyer, prosecutor, in-house counsel, or even outside the legal industry, or starting your own business as an entrepreneur? You'll be surprised what Legal Technology could mean for your future.

More from Benjamin Ang (20)

Cybersecurity in ASEAN and Singapore Columbia - Lecture for Columbia SIPA 202...

International Cooperation to Impose Consequences for Malicious Cyber Activity...

Changing Domains - The Cyber Info Realm 2023.pdf

Cooperation between ASEAN military civil academic in international cybersecur...

Technology Disruption Digital Inclusion and the Law.pdf

Why Application of International Law Applies to ASEAN.pdf

Lessons learned from Capacity Building on International Cyber Norms in Southe...

Cybersecurity and National Security in Southeast Asia 2022.pdf

Cybersecurity and Geopolitical Risk.pdf

Cybercrime and Cyber Warfare (and Information Operations) – Your questions an...

Disinformation in Southeast Asia and Pro Russian Anti Ukraine Narratives

Foreign Interference and National Security - Law Society Public Law conferenc...

Technology Disruption in the New Normal, Digital Inclusion and the Law

Contract law - an infographic view

Law and warfare in the cyber domain (for NSSP, AFP, NDCP)

Framework of responsible state behaviour in cyberspace - for Marshall Center ...

Adapting to changing cyber security threats in South East Asia (IFRI 2020)

Cyber threats and cooperation in Indo Pacific for Pacific Forum 2020

Singapore Asean cyber conflict and cybersecurity strategy - for Columbia Univ...

Legal Technology Vision (Singapore) and the future of legal tech (2020 update)

Recently uploaded

PHP Frameworks: I want to break free (IPC Berlin 2024)

Ralf Eggert

In this presentation, we examine the challenges and limitations of relying too heavily on PHP frameworks in web development. We discuss the history of PHP and its frameworks to understand how this dependence has evolved. The focus will be on providing concrete tips and strategies to reduce reliance on these frameworks, based on real-world examples and practical considerations. The goal is to equip developers with the skills and knowledge to create more flexible and future-proof web applications. We'll explore the importance of maintaining autonomy in a rapidly changing tech landscape and how to make informed decisions in PHP development. This talk is aimed at encouraging a more independent approach to using PHP frameworks, moving towards a more flexible and future-proof approach to PHP development.

Knowledge engineering: from people to machines and back

Elena Simperl

How world-class product teams are winning in the AI era by CEO and Founder, P...

Product School

ODC, Data Fabric and Architecture User Group

CatarinaPereira64715

DevOps and Testing slides at DASA Connect

Kari Kakkonen

Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...

UiPathCommunity

💥 Speed, accuracy, and scaling – discover the superpowers of GenAI in action with UiPath Document Understanding and Communications Mining™: See how to accelerate model training and optimize model performance with active learning Learn about the latest enhancements to out-of-the-box document processing – with little to no training required Get an exclusive demo of the new family of UiPath LLMs – GenAI models specialized for processing different types of documents and messages This is a hands-on session specifically designed for automation developers and AI enthusiasts seeking to enhance their knowledge in leveraging the latest intelligent document processing capabilities offered by UiPath. Speakers: 👨‍🏫 Andras Palfi, Senior Product Manager, UiPath 👩‍🏫 Lenka Dulovicova, Product Program Manager, UiPath

Key Trends Shaping the Future of Infrastructure.pdf

Cheryl Hung

Accelerate your Kubernetes clusters with Varnish Caching

Thijs Feryn

FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf

FIDO Alliance

IOS-PENTESTING-BEGINNERS-PRACTICAL-GUIDE-.pptx

Abida Shariff

"Impact of front-end architecture on development cost", Viktor Turskyi

Fwdays

I have heard many times that architecture is not important for the front-end. Also, many times I have seen how developers implement features on the front-end just following the standard rules for a framework and think that this is enough to successfully launch the project, and then the project fails. How to prevent this and what approach to choose? I have launched dozens of complex projects and during the talk we will analyze which approaches have worked for me and which have not.

FIDO Alliance Osaka Seminar: Overview.pdf

FIDO Alliance

Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024

Tobias Schneck

As AI technology is pushing into IT I was wondering myself, as an “infrastructure container kubernetes guy”, how get this fancy AI technology get managed from an infrastructure operational view? Is it possible to apply our lovely cloud native principals as well? What benefit’s both technologies could bring to each other? Let me take this questions and provide you a short journey through existing deployment models and use cases for AI software. On practical examples, we discuss what cloud/on-premise strategy we may need for applying it to our own infrastructure to get it to work from an enterprise perspective. I want to give an overview about infrastructure requirements and technologies, what could be beneficial or limiting your AI use cases in an enterprise environment. An interactive Demo will give you some insides, what approaches I got already working for real.

FIDO Alliance Osaka Seminar: Passkeys at Amazon.pdf

FIDO Alliance

To Graph or Not to Graph Knowledge Graph Architectures and LLMs

Paul Groth

Search and Society: Reimagining Information Access for Radical Futures

Bhaskar Mitra

The field of Information retrieval (IR) is currently undergoing a transformative shift, at least partly due to the emerging applications of generative AI to information access. In this talk, we will deliberate on the sociotechnical implications of generative AI for information access. We will argue that there is both a critical necessity and an exciting opportunity for the IR community to re-center our research agendas on societal needs while dismantling the artificial separation between the work on fairness, accountability, transparency, and ethics in IR and the rest of IR research. Instead of adopting a reactionary strategy of trying to mitigate potential social harms from emerging technologies, the community should aim to proactively set the research agenda for the kinds of systems we should build inspired by diverse explicitly stated sociotechnical imaginaries. The sociotechnical imaginaries that underpin the design and development of information access technologies needs to be explicitly articulated, and we need to develop theories of change in context of these diverse perspectives. Our guiding future imaginaries must be informed by other academic fields, such as democratic theory and critical theory, and should be co-developed with social science scholars, legal scholars, civil rights and social justice activists, and artists, among others.

Transcript: Selling digital books in 2024: Insights from industry leaders - T...

BookNet Canada

The publishing industry has been selling digital audiobooks and ebooks for over a decade and has found its groove. What’s changed? What has stayed the same? Where do we go from here? Join a group of leading sales peers from across the industry for a conversation about the lessons learned since the popularization of digital books, best practices, digital book supply chain management, and more. Link to video recording: https://bnctechforum.ca/sessions/selling-digital-books-in-2024-insights-from-industry-leaders/ Presented by BookNet Canada on May 28, 2024, with support from the Department of Canadian Heritage.

GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...

Sri Ambati

FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf

FIDO Alliance

Leading Change strategies and insights for effective change management pdf 1.pdf

OnBoard

Recently uploaded (20)

PHP Frameworks: I want to break free (IPC Berlin 2024)

Knowledge engineering: from people to machines and back

How world-class product teams are winning in the AI era by CEO and Founder, P...

ODC, Data Fabric and Architecture User Group

DevOps and Testing slides at DASA Connect

Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...

Key Trends Shaping the Future of Infrastructure.pdf

Accelerate your Kubernetes clusters with Varnish Caching

FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf

IOS-PENTESTING-BEGINNERS-PRACTICAL-GUIDE-.pptx

"Impact of front-end architecture on development cost", Viktor Turskyi

FIDO Alliance Osaka Seminar: Overview.pdf

Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024

FIDO Alliance Osaka Seminar: Passkeys at Amazon.pdf

To Graph or Not to Graph Knowledge Graph Architectures and LLMs

Search and Society: Reimagining Information Access for Radical Futures

Transcript: Selling digital books in 2024: Insights from industry leaders - T...

GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...

FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf

Leading Change strategies and insights for effective change management pdf 1.pdf