{"id":11413,"date":"2013-12-20T11:00:49","date_gmt":"2013-12-20T00:00:49","guid":{"rendered":"http:\/\/www.aspistrategist.ru\/?p=11413"},"modified":"2013-12-23T09:24:37","modified_gmt":"2013-12-22T22:24:37","slug":"2013-review-the-year-in-cybsecurity","status":"publish","type":"post","link":"https:\/\/www.aspistrategist.ru\/2013-review-the-year-in-cybsecurity\/","title":{"rendered":"2013 review – the year in cybsecurity"},"content":{"rendered":"
Beginning back in January, then Prime Minister Julia Gillard announced<\/a> the creation of the Australian Cyber Security Centre (ACSC). The centre intends to co-locate government operational cyber security assets from DIO, ASD, ASIO, CERT, AGD, the AFP and the ACC whilst working closely with the private sector. The centre still \u2018intends\u2019 to achieve these goals as it’s yet to become operational. This is due to a number of factors, not least of all that its new home, the ASIO building, isn\u2019t ready for occupancy<\/a>.<\/p>\n February saw the release of President Obama\u2019s Cybersecurity executive order<\/a>. Revealed just ahead of the 2013 State of the Union address, the order set a timeline for the introduction of a framework for public\/private collaboration on critical infrastructure protection. What followed was the creation of a Preliminary Cybersecurity Framework, effectively guaranteeing<\/a> minimum standards. It\u2019s a plan that the Australian Government could usefully borrow from<\/a>.<\/p>\n Later that same month, American Cybersecurity firm Mandiant released a report<\/a> exposing China\u2019s PLA Unit 61398<\/a>. The Unit, traced to Shanghai in the highly publicised report, has been linked to several advanced persistent threats reaching back to at least 2006. After a few months laying low following the release of the report, the group seems to have resumed its activities<\/a>. But it\u2019s debatable<\/a> as to how effectively China manages to process and use this information given the haphazard domestic cyber hierarchy that exists within the country.<\/p>\n April saw an attempt by two of the world\u2019s biggest cyber powers to move beyond finger-pointing and improve cooperation, with the establishment of the US-China Cyber Security Working Group. The first meeting held in July was overshadowed to an extent by the Snowden leaks, but made important<\/a> inroads. In June another positive agreement<\/a> was hatched between the US and Russia on the sidelines of the G8 Summit in Northern Ireland. The deal will see Russian and US CERT teams work closer together and the establishment of a ‘cyber hotline’ to aid in the prevention of cyber misunderstandings.<\/p>\n The June UN Group of Governmental Experts decision<\/a> (PDF) saw landmark consensus on the applicability of the UN charter to cyberspace. The decision was particularly significant given that group of 15 experts included representatives from Russia and China. \u00a0Australian Deborah Stokes, now Australia\u2019s High Commissioner to PNG, chaired the group and has been widely praised for her efforts in helping the members reach consensus.<\/p>\n The leaking<\/a> of the existence PRISM and TEMPORA surveillance programs in June by Edward Snowden continues to grab the world\u2019s attention. The disclosure bruised relations between allies and put those with already frosty relations into a deep freeze. While Snowden was exceptionally successful in initiating a discussion on the privacy vs. security debate, should<\/a> he now ease the damaging torrent of information now he\u2019s successfully made his point?<\/p>\n In September online security firm Symantec released a report<\/a> detailing the activities of an online \u2018hackers-for hire\u2019 group it has dubbed \u2018Hidden Lynx\u2019. It described the increasing technical and operational sophistication of high profile attacks seen throughout 2013, including the alleged theft<\/a> of US weapons systems plans from contractors, including the F-35 Joint Strike Fighter.<\/p>\n On the home front, July saw the release<\/a> of the National Plan to Combat Cybercrime and the announcement of the Australian Cybercrime Online Reporting System (ACORN). It followed the publication of Australia\u2019s first National Security Strategy<\/a> in January, which listed cyber as a key national security risk, and the Defence White Paper<\/a> in May, which named \u2018integrated cyber policy and operations\u2019 as a key five year priority.<\/p>\n Finally, in October South Korea played host to the third iteration of the international cyberspace conference process, initiated by the UK Government in 2011. The conference drew together public and private sector cyber experts from over 87 countries to discuss a range of cyber related issues. Julie Bishop became the first Australian Foreign Minister to attend to gathering. The Australian government earned praise<\/a> throughout the conference for its work domestically and internationally in the cyber realm and should try to build upon this image into the New Year.<\/p>\n<\/a>2013 was a significant year in cyberspace, both internationally and closer to home. Whilst the Edward Snowden leaks dominated the headlines, several important agreements and policy achievements were made further away from the glare of the media spotlight.<\/p>\n