![\"Image](\"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2017\/02\/keyboard-621830_640.jpg\" "\\"Image")
<\/p>\n<\/p>\n
Australia and Indonesia have agreed to deepen their cooperation on cyber security issues<\/a> following the latest meeting of the bilateral Ministerial Council on Law and Security. The joint communique noted<\/a> the Ministers had agreed to new initiatives including a new Australia\u2013Indonesia Cyber Policy Dialogue later this year, cyber strategy workshops in Australia to share best practice for policy development, and exchanges on lessons learned from the establishment of the Australian Cyber Security Centre to assist the creation of Indonesia\u2019s new cyber security agency. Cyber security has been a sensitive issue between the two countries since the Snowden leaks revealed that Australia had spied on former president Susilo Bambang Yudhoyono<\/a>, and the new initiatives are a welcome sign of cooperation with a key regional player.<\/p>\n Yesterday Justice Minister Michael Keenan released the 2016 statistics for the Australian Cybercrime Online Reporting Network (ACORN)<\/a>, revealing that there wwere about 44,500 reports of cybercrime in Australia last year. The figures show that Victorians were the biggest victims of cybercrime, and that nearly half of reported incidents related to online fraud and scams. The ACORN report was released on international Safer Internet Day<\/a>, an initiative that seeks to raise awareness of cyber security and safety issues, with a particular focus on children.<\/p>\n The Australian Signals Directorate has built on the success of its award winning Top 4 mitigation strategies<\/a> this week, releasing the \u2018Essential Eight\u2019 as part of its new Strategies to Mitigate Cyber Security Incidents.<\/a> ASD considers the eight mitigation measures to be the cyber security baseline for organisations<\/a>, and additional measures should be adopted based on the risk profile of the organisation. Combined, the eight measures create a defence posture by seeking to prevent malware running on networks, limiting the extent of incidents and aiding the recovery of data. Implementation of the Top 4 is mandatory for Australian government agencies<\/a>, but it\u2019s not clear if it will be expanded to include the four new essential mitigation measures.<\/p>\n Saudi Arabia and Iran\u2019s ongoing cyber spat has sparked up again as up to 15 Saudi government agencies and companies have been hit by a renewed wave of Shamoon 2 malware<\/a>. Famously used in 2012 against Saudi Aramco<\/a>, the virus wipes the data on affected machines. Shamoon 2 emerged late last year and reportedly affected Saudi Arabia\u2019s Civil Aviation Authority<\/a>. Cyber security firms Symantec and Palo Alto have released analysis that indicates Shamoon 2\u2019s creators have undertaken significant preparatory work<\/a> to assist its spread. That includes the use of stolen passwords that Palo Alto reported<\/a> are likely to have been taken through phishing, based on the passwords\u2019 strength.<\/p>\n The second edition of the Tallinn Manual was released this week<\/a> by the NATO Cooperative Cyber Defense Centre of Excellence (CCDCOE). The manual addresses the application of international law to cyber operations in peacetime or in conflict short of war, following on from the first manual that addressed the law of armed conflict and its application to cyberspace. ICPC is pleased to be hosting the Australian launch of the Tallinn Manual 2.0 on 24 February. Register here<\/a> if you would like to come along.<\/p>\n And finally, in the news this week, Samoa has launched a five year cyber security strategy<\/a>, noting the need to protect Samoans and build confidence in the country\u2019s economy. In the UK the Public Accounts Committee has criticised<\/a> the government\u2019s approach to cyber security. The Committee\u2019s report<\/a> calls out \u2018chaotic\u2019 data breach processes, and lack of action on personnel shortages, and calls for a plan for the new National Cyber Security Centre. In the US, Treasury has already eased some of the sanctions imposed on the Russian Federal Security Servic<\/a>e (FSB) in response to malicious Russian cyber activities including attempting to influence the 2016 US election. The changes specifically ease the restrictions on the supply of IT products to the FSB. Also in the US, a court has issued an order to Google<\/a> to retrieve information from a foreign server, reversing the precedent set by an earlier case involving Microsoft in which the court ruled data stored overseas was beyond the reach of a US warrant. In darker places, a vigilante has brought down about one fifth of the \u2018Dark Web\u2019<\/a>. The unknown actor hacked Tor hosting service Freedom Hosting II<\/a> because they believed the company was knowingly hoisting large child pornography sited. And here is an interesting account of how Google fought the massive DDoS on KrebsOnSecurity<\/a> last September.<\/p>\n","protected":false},"excerpt":{"rendered":" Australia and Indonesia have agreed to deepen their cooperation on cyber security issues following the latest meeting of the bilateral Ministerial Council on Law and Security. The joint communique noted the Ministers had agreed to …<\/p>\n","protected":false},"author":364,"featured_media":30475,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[915,1056,391,8],"class_list":["post-30474","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general","tag-asd","tag-bilateral-relations","tag-cyber","tag-indonesia"],"acf":[],"yoast_head":"\n