![\"Image](\"http:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2016\/04\/17509747641_123146b27c_z.jpg\" "\\"Image")
<\/p>\n<\/p>\n
The major cyber story of the week is the long-awaited release of<\/span> Australia\u2019s Cyber Security Strategy<\/span><\/a>, the first document of its kind<\/span> since 2009<\/span><\/a>. The Strategy outlines<\/span> $230 million of funding<\/span><\/a> for enhanced cyber security efforts over four years, with a focus on<\/span> five key themes<\/span><\/a>. Specifically, significant investment will be funnelled into<\/span> improving<\/span><\/a> the cyber capabilities of the AFP, Crime Commission, Australian Signals Directorate and Australia\u2019s Computer Emergency Response Team (CERT Australia).<\/span><\/p>\n The Strategy\u2019s overarching principle of<\/span> public\u2013private sector partnership<\/span><\/a> informs the establishment of a Cyber Security Growth Centre and Joint Cyber Threat centres in capital cities. The government will also<\/span> relocate Australia\u2019s Cyber Security Centre<\/span><\/a> from the highly classified ASIO building to allow greater private-sector access.<\/span><\/p>\n The Strategy establishes<\/span> new positions<\/span><\/a>: a Minister Assisting the Prime Minister on Cyber Security, a Special Advisor on Cyber Security (to be filled by Alastair MacGibbon), and a Cyber Ambassador to be appointed by Julie Bishop. Further, the development of a sustainable cyber-savvy workforce will be encouraged through investment in STEM education and the creation of<\/span> academic centres of excellence<\/span><\/a> in universities.<\/span><\/p>\n Notably, the Strategy explicitly refers to Australia\u2019s offensive cyber capabilities\u2014a<\/span> first in Australia\u2019s rhetoric<\/span><\/a> surrounding cyber security. At the launch,<\/span> Turnbull stated<\/span><\/a> than an \u2018offensive cyber capability, housed in the Australian Signals Directorate, provides another option for the Government to respond\u2019.<\/span><\/p>\n The Strategy has been hailed as \u2018<\/span>the most important and innovative government strategy yet written<\/a><\/span>\u2019. However, there has been criticism of the document\u2019s language not addressing the seriousness of contemporary cyber threats<\/span> strongly or directly enough<\/span><\/a>. Others are concerned that this underestimation is reflected in the funding on offer, which<\/span> falls short in comparison<\/span><\/a> to the billions being spent by Australia\u2019s peers. Last year, the UK announced plans to invest<\/span> \u00a31.9 billion<\/span><\/a> (A$3 billion) in cybersecurity, while the US has recently upped its spending by US$5 billion to a total of<\/span> US$19 billion<\/span><\/a> (A$24.8 billion). Check out some in-depth analysis of the new Strategy from the ICPC team<\/span> here<\/span><\/a>,<\/span> here<\/span><\/a> and<\/span> here<\/span><\/a>.<\/span><\/p>\n In the US,<\/span> tech firms have banded together<\/span><\/a> to oppose a bill that would<\/span> effectively outlaw end-to-end encryption<\/span><\/a> and require companies to help the government decrypt customer data. A coalition of companies\u2014including Apple, Facebook, Google, Netflix, Microsoft and Twitter\u2014wrote an<\/span> open letter<\/span><\/a> to the sponsors of the<\/span> new bill<\/span><\/a>, Senators Richard Burr and Dianne Feinstein. The tech giants<\/span> warn against<\/span><\/a> the \u2018unworkable policies around encryption that would weaken the very defences we need to protect us from people who want to cause economic and physical harm\u2019.<\/span><\/p>\n In an amusing concurrent development, popular instant messaging service Viber<\/span> just announced<\/span><\/a> it will make end-to-end encryption the default for its 700 million users. The company<\/span> stated<\/span><\/a> that it\u2019s \u2018proud that our users can confidently use Viber without war of their messages being intercepted\u2019. This comes<\/span> only a few weeks after WhatsApp<\/span><\/a> made the same transition.<\/span><\/p>\n This week also brought an exciting development in Artificial Intelligence (AI) technology. Scientists from MIT\u2019s Computer Science and Artificial Intelligence Laboratory (<\/span>CSAIL<\/span><\/a>), in partnership with machine learning start-up<\/span> PatternEx<\/span><\/a>, <\/span>have<\/span> developed a hybrid machine<\/span><\/a> that can learn how to identify 85% of cyber attacks. The findings, which merge state-of-the-art AI and analyst intuition, were published in a paper titled<\/span> AI<\/span><\/i>2<\/span><\/i>: Training a big data machine to defend<\/span><\/i><\/a>. The initiative works on an active learning system, where artificial intelligence network assessments are verified by an analyst, and any corrections are integrated back into the machine as a<\/span> feedback loop<\/span><\/a> that continues to improve its detection accuracy. The system can reportedly<\/span> reduce false positives<\/span><\/a> by a factor of five and is about three times more accurate than comparable technologies\u2014a major development in the potential of AI for cybersecurity.<\/span><\/p>\n Staying stateside, a<\/span> Bloomberg<\/span><\/i> report<\/span><\/a> has revealed that a US$12 billion tactical mobile Internet network used by the US Army suffers significant cyber security vulnerabilities. The<\/span> Warfighter Information Network-Tactical Increment 2<\/span><\/a>, or WIN-T, uses satellite and radio technology to offer secure voice, video and data communications to troops on the move. The network is<\/span> deployed<\/span><\/a> to 11 of the Army\u2019s combat brigades and is already in use in Iraq and Afghanistan. However, an assessment conducted by Johns Hopkins University and the Army Research Laboratory<\/span> recommended<\/span><\/a> \u2018improvement to user training techniques and hardware and software enhancements to harden against the cyberthreat\u2019. In light of those findings, the US Army and General Dynamics are undertaking efforts to upgrade systems already in use and line-up improvements that will be deployed through 2028.<\/span><\/p>\n