Deepak Maheshwari Director, Government Affairs, India & ASEAN, Symantec Presentation to IEEE forum, CyberWeek2016, Tel Aviv Israel

1. Review of Previous ETAP Forums
22 June 2016 – Tel Aviv, Israel
Deepak Maheshwari
1

2. IEEE Internet Initiative (3I):
Connecting the Global Technology & Policy Making Communities
on Internet Governance, Cybersecurity, and Privacy
The IEEE Internet Initiative connects the technology and policy
making communities, both at a global and local level, in order to:
– Inform debate and decisions
– Ensure trustworthy technology solutions and best practices
The IEEE Internet Initiative facilitates the engagement of
technology, industry and policy experts in a neutral environment
for the collective benefit of all stakeholders
Technology
Experts
Policy
Makers
IEEE
Internet
Initiative
2

3. IEEE Experts in Technology and
Policy (ETAP) Forums
The ETAP Forums are a series of events that bring together
technology developers and policy makers to debate current
and future Internet technology policy issues that impact
everyone on a global, national, and local level
“Local conversations on a global scale”
Five previous ETAP Forums:
– San Jose, USA, May 2015
– Tel Aviv, Israel, August 2015
– Washington DC, USA, February 2016
– Delhi, India, March 2016
– Beijing, China, May 2016
3

4. General ETAP Agenda Structure
Introduction
Keynote presentations
Rapid-fire round for everyone to introduce their most
important issue
Panel discussion
Ranking and selection of top rapid-fire issues for
breakout discussions
Breakout sessions
Breakout summaries
Actions and wrap up
4

5. ETAP Forum San Jose, USA
May 2015
Inaugural ETAP Forum
Goal: Identify key
issues to be addressed,
and build kernel of
expert community for
follow-on work
40 participants from 5
regions: China, India,
Africa, Europe, North
America
5

6. San Jose: Top 6 of 20 Identified
Issues
1. Threats and opportunities in data analytics
2. Multi‐stakeholder Internet governance
3. Protecting Internet traffic, managing meta‐data analysis,
and how to implement both security and privacy at scale
4. Fragmentation of the Internet due to local policies and how
to avoid it
5. Algorithmic decision making that exacerbates existing
power balances and ethical concerns
6. How to best engage IEEE as a platform for contributing to
the resolution of these and related issues
6

7. San Jose: Proposed Actions
Conduct additional ETAP Forums around the
world, to collate diversity of regional views
Future ETAP Forums should focus on and
refine the six top issues identified, with the
goal of moving several to a format for
action
Open nature of ETAP Forums should allow
regional participants to introduce priority
issues of their own
7

8. ETAP Forum Tel Aviv, Israel
August 2015
30 participants from 4
regions: Middle East,
India, Europe, North
America
Many participants were
local, but included
representation from
government, industry,
law, academia
8

9. Tel Aviv 2015: Top 3 of 13
Identified Issues
1.User assessment of trustworthiness of
devices, enterprises and governments
2.Educating users about characteristics of
information society
3.Machine-readable privacy agreements and
who enforces them
9

10. Tel Aviv 2015: Proposed Actions
Prepare a draft proposal for a standard for
machine-readable privacy agreements
Develop educational material such as games
and icons that encourage safe and ethical
online behavior
Consider certification of developers for privacy
and security best practices and certification of
websites and applications for privacy and
security
Plan future ETAP Forums in Israel and India in
2016
10

11. ETAP Forum Washington DC, USA
February 2016
50 participants from 4
regions: Russia, Japan,
India, North America
Many participants were
local, including
representation from
government, industry,
law, academia
11

12. Washington DC: Top 4 of 39
Identified Issues
1.Data localization
2.Education and ethics
3.End-to-end security/privacy by design
4.Technology-policy development process
12

13. Washington DC: Proposed Actions
Create tips and tools and/or host events to alleviate tension across
technical and regulatory communities and policy makers of different
jurisdictions
Identify fundamental policy principles that are being called into
question by the proliferation of the IoT (e.g., right to opt in/out)
Strive to create a layered model (similar to OSI network model) to
guide policy for end-to-end security and privacy by design
For data localization, develop case studies (e.g., house monitoring,
medical devices that travel with users, efficient routing, etc.), gather
economic analyses, perform technical analyses, and explore
certification for data practices
Develop content and programs for education and ethics around IoT,
identify partner channels for creation and distribution of the content,
and determine performance indicators
Continue the conversation on-line, to elaborate on the issues voiced
during the rapid-fire brainstorming, and to develop and execute action
plans for the above identified opportunities
13

14. First ETAP in a developing country
Overarching theme "Universal
Access for Social and Economic
Inclusion - Technology and
Policy Considerations" with
specific emphasis on:
– Security and Privacy in
Biometrics
– Emerging Technologies for
the Last Mile Access
40 participants from India, North
America, Middle East, and beyond
Many participants were local,
including representation from
government, industry, law,
academia
ETAP Forum Delhi, India
March 2016
14

15. Delhi: Top 2 Issues
1.Protecting Internet traffic, managing
meta-data analysis, and how to
implement both security and privacy at
scale
2.Options and challenges in providing
universal access for social and economic
inclusion
15

16. Delhi: Proposed Actions
Development of a white paper on the policy
and technology implications of protecting
Internet traffic
Clarify and refine the scope of a white paper
to be written on the options and challenges
in providing universal access
16

17. Technical Co-Sponsor: China
Internet Network Information
Center (CNNIC)
Topic: Closing the Cyberspace
Policy-Technology Divide to Drive
the Future of the Internet
Focus Areas:
– Assessing technology and policy
factors and actors that affect the
development and management of the
Internet
– Global acceptance of technology
protocols and standards versus policy
localization
– Building an environment that enables
the interaction of technologists and
policy makers
60 participants, including
representation from government,
industry, law, academia
ETAP Forum Beijing, China
May 2016
17

18. Beijing: Top 3 of 18 Identified
Issues
Cyber-threats to critical infrastructure,
including eGovernment/eCommerce
Biodiversity in the Internet ecosystem
Transparency as a source for obtaining
data for evidence-based decision making
18

19. Beijing: Proposed Actions
Create threat intelligence standards that define threat
terminology, categorize the various types of threats,
and create methodologies for sharing information
about threats
Create a platform to allow researchers, industry, and
authorities to carry out a range of important tasks in
combating cyber-threats to critical infrastructure
Create a standardized benchmark for transparency
that could address questions such as how to measure
and track transparency over time
Policymakers and technologists can play a role as
conscientious “gardeners” to ensure diversity,
resilience, and sustainability of the Internet ecology
19

20. Summary of Top Identified Issues
in Internet Technology Policy
Threats and opportunities in data analytics
Algorithmic decision making that exacerbates existing power balances and ethical
concerns
Multi-stakeholder Internet governance
Technology-policy development process
Protecting Internet traffic, managing meta-data analysis, and how to implement
both security and privacy at scale
End-to-end security and privacy by design
Fragmentation of the Internet, and data localization due to local policies
User assessment of trustworthiness of devices, enterprises and governments
Machine-readable privacy agreements, and who enforces them
Educating users about characteristics of information society and ethics
Options and challenges in providing universal access for social and economic
inclusion
20

21. Internet Technology Policy Community
21

22. Whitepapers and Research
Standard for Machine readable privacy agreements, lead by Ori
Freiman, Jonathan Klinger
Protecting Internet traffic (encrypted by default), led by Prasad
Mantri, Dr Dattareya Kulkarni and Rahul Sharma.
Options and challenges in providing universal access, lead by Prasad
Mantri, Subrat Kumar Prusty
End to end trust and security in IoT, lead by Peter Fonash, Brian Done
(DHS), Chris Hrivnak and Alan Chachich
Algorithmic decision making
Threats and opportunities in data analytics (Standard to anonymize
data).
22

23. Get Involved: ITP Community
23
Start new discussions in the Collabratec™ ITP community by posting
relevant issues and asking questions
Open your own private group in Collabratec™ then invite others to research
and co-author with you around specific topics
Participate in and help organize regional Experts in Technology and Policy
(ETAP) events; then lead follow-up activities around the resulting outputs
and takeaways
Participate in IEEE Internet Initiative webinars and other online panel
discussions
http://internetinitiative.ieee.org