Peter Burnett Head of Information Sharing National Infrastructure Security Co-ordination Centre
Background Late 70’s – Programming Evaluation & Certification, CLEFs Compusec, Infosec CNI/CIP Programme CERT Management EU & Intnl Liaison
EU Involvement Support DTI (EISO, CSTF) EWIS workshops WISE bid DDSI work CASES CERTs, CSIRTs & WARPs
UK CERT Involvement UNIRAS - Govt CERT est Incorporated into CIP organisation Links to US/CAN/AUS/NZ European Govt CERTs Forum Participation in TF/CSIRT, FIRST Information Sharing
UK Initiatives UK CERTs forum Encouraging new CERTs in UK Encouraging Information Sharing Bodies –SAINT, ISACs Support for EU projects (CASES, EWIS etc) Conceive & promote WARPs –Warning, Advice & Reporting Points –Linked to CyberHood Watch (IAAC) Information Sharing
Objectives Increase Awareness, Education : –general e-environment (reduce Viruses, Worms, Trojans, DDoS etc) Provide useful and timely warnings –To small communities (including citizens & SMEs) Gather incident reports –Crime reports (pass on only with consent) –Statistics, Trends –Attack detection Information Sharing
Warning, Advice & Reporting Points (WARPs) - Functions Issue Alerts & Warnings from CERT/WARP network (and CASES) Act as helpdesk for Advice on Internet/Infosec problems Gather, sanitise, and share Incident Reports (with CERTs, WARPs, CASES) Geared to SMEs, small organisations & Citizens Information Sharing
The WARP model e-COMMUNITY WARP Information Sharing Network Incident Reports Problems Warnings Advice Trade association, interest group, local authority, industry sector
Information Sharing Network NISCC/ UNIRAS ISACs CIP orgs Other Sources CSIRTs WARPs CASES
WARPs Approach Internet-based –Distributed, User-oriented, Devolved, Cooperative Small is beautiful –In touch with community, Builds trust & confidence Builds on successful ideas –Neighbourhood Watch, Citizens Advice Bureaux A cost effective alternative to CERTs/CSIRTs Fits into most Information Sharing models Information Sharing
CASES Cyber-Awareness and Security Enhancement Structure A Coordinating Centre to encourage dissemination of Warning & Awareness materials via National Nodes
NCP Dissemination NCP CASES Dissemination National Contact Point (Node)
CASES – Transnational approach Builds on elements already there (CSIRTs, WARPs, e- Platforms) Provides Coordination i.e. Cooperation (not control) Aids e-Europe Programmes (confidence) Promotes new national nodes (where they don’t exist) Stimulates national Dissemination network, WARPs Complements R&D work (identifies needs) Provides test-bed CASES
WARP e-COMMUNITY WARP CASES e-COMMUNITY National Node
Plain Sailing from now on ?
No such thing as Plain Sailing !
Thank You