<div class="gmail_quote"><div>FYI:</div><div><font face="Times New Roman"><a href="http://www.enisa.europa.eu/media/press-releases/fighting-cyber-threats-plugging-the-gaps.-new-report-on-proactive-detection-of-cyber-security-incidents-to-make-201cdigital-fire-brigades201d-more-effective" target="_blank"><font color="blue" face="Arial"><u>http://www.enisa.europa.eu/media/press-releases/fighting-cyber-threats-plugging-the-gaps.-new-report-on-proactive-detection-of-cyber-security-incidents-to-make-201cdigital-fire-brigades201d-more-effective</u></font></a></font></div>
<div><font face="Times New Roman"> </font></div><div><font face="Times New Roman"><a href="http://www.enisa.europa.eu/act/cert/support/proactive-detection/proactive-detection-report/at_download/fullReport" target="_blank"><font color="blue" face="Arial"><u>http://www.enisa.europa.eu/act/cert/support/proactive-detection/proactive-detection-report/at_download/fullReport</u></font></a></font></div>
<div><font face="Times New Roman"> </font></div><div style="margin-bottom:5pt"><font size="6"><span style="font-size:24pt"><b>Fighting cyber threats; Plugging the gaps. New report on proactive detection of cyber security incidents to make “digital fire-brigades” more effective </b></span></font></div>
<div>Fighting cyber threats; Plugging the gaps. EU Agency ENISA launches report on proactive detection of cyber security incidents to make “digital fire-brigades” more effective </div><div><font face="Times New Roman"> </font></div>
<div style="margin-bottom:5pt"><font size="3"><span style="font-size:12pt">Proactive detection measures are key to more effectively fight cyber threats </span></font></div><div style="margin-bottom:5pt"><font size="3"><span style="font-size:12pt"><b>The Agency today launches a </b><a href="http://www.enisa.europa.eu/act/cert/support/proactive-detection/" target="_blank"><font color="blue"><b><u>report </u></b></font></a><b>which identifies 16 shortcomings in detection of network security incidents. The report reveals that not all available tools are used widely enough by the ‘’digital fire-brigades’’, the Computer Emergency Response Teams (CERTs) to effectively fight cyber threats. Therefore, the Agency issues 35 recommendations to data providers, data consumers, and at EU/national levels to mitigate the shortcomings. </b></span></font></div>
<div style="margin-bottom:5pt"><font size="3" face="Times New Roman"><span style="font-size:12pt"> </span></font></div><div style="margin-bottom:5pt"><font size="3"><span style="font-size:12pt">The <a href="http://www.enisa.europa.eu/act/cert/support/proactive-detection/" target="_blank"><font color="blue"><u>study </u></font></a>has identified that the CERTs are currently not fully utilizing all possible external sources at their disposal. Similarly, many CERTs neither collect, nor share incident data about other constituencies with other CERTs. This is concerning, as information exchange is key to effectively combating malware and malicious activities, which is extremely important in fighting cross-border cyber threats.</span></font></div>
<div style="margin-bottom:5pt"><font size="3"><span style="font-size:12pt"><b>Shortcomings</b></span></font></div><div style="margin-bottom:5pt"><font size="3"><span style="font-size:12pt">The 16 shortcomings in detection of incidents are examined in depth. Top technical gaps include insufficient data quality (false positives in provided data, poor timeliness of delivery), lack of standard formats, tools, resources and skills. The most important legal problem involves privacy regulations and personal data protection laws that hinder information exchange.</span></font></div>
<div><font size="3"><span style="font-size:12pt">“National/government CERT managers should use the report to overcome identified shortcomings, by using more external sources of incident information, and additional internal tools to collect information to plug the gaps” says the Agency Executive Director, <a href="http://www.enisa.europa.eu/about-enisa/structure-organization/executive-director" target="_blank"><font color="blue"><u>Professor Udo Helmbrecht</u></font></a>.</span></font></div>
<div style="margin-bottom:5pt"><font size="3"><span style="font-size:12pt"><b>35 recommendations to mitigate the shortcomings</b></span></font></div><div style="margin-bottom:5pt"><font size="3"><span style="font-size:12pt">For <b>data providers,</b> the key recommendations focus on how to better reach CERTs, better data format, distribution, as well as data quality improvement. For <b>data consumers</b>, they include additional activities by a CERT to verify the quality of data feeds, and specific deployments of new technologies recommended. Finally, at the E<b>U or national level</b> balancing of the privacy protection and security needs is necessary, as well as facilitating the adoption of common formats, integration of statistical incident data, and research into data leakage reporting.</span></font></div>
<div style="margin-bottom:5pt"><font size="3"><span style="font-size:12pt"><b>Background:</b> Proactive detection of incidents is the discovery of malicious activity, before the complaints and incident reports about it are received. As such, it is a cornerstone for an efficient CERT services portfolio. It can greatly boost a CERT’s efficiency in operations, thus <a href="http://www.enisa.europa.eu/act/cert/support/files/baseline-capabilities-of-national-governmental-certs-policy-recommendations" target="_blank"><font color="blue"><u>strengthening CERT’s Incident Handling capability</u></font></a> which is one of the core services of national / governmental CERTs.</span></font></div>
<div style="margin-bottom:5pt"><font size="3"><span style="font-size:12pt"><b>For </b><a href="http://www.enisa.europa.eu/act/cert/support/proactive-detection/" target="_blank"><font color="blue"><b><u>full report</u></b></font></a></span></font></div>
<div style="margin-bottom:5pt"><font size="3"><span style="font-size:12pt"><b>Background:</b> <a href="http://ec.europa.eu/information_society/newsroom/cf/fiche-dae.cfm?action_id=196&pillar_id=45&action=Action%2038:%20Member%20States%20to%20establish%20pan-European%20Computer%20Emergency%20Response%20Teams" target="_blank"><font color="blue"><u>Digital Agenda for Europe action point 38 </u></font></a></span></font><br clear="all">
<font color="#888888">
<br>-- <br><i><b><span style="color:rgb(0,0,153)">Joseph MANDJOLO MUSH</span></b></i><br><i style="color:rgb(0,153,0)"><b>Chef de Service Qualités des Services<br>Assistant Technique et Maintenance <br>projet gestion nom de domaine .CD</b></i><br>
<i style="color:rgb(204,0,0)"><b>SCPT/DRC</b></i><br><i><span style="color:rgb(204,51,204)">Mobile: <a href="tel:%2B243%209%2098%2042%2091%2025" target="_blank" value="+243998429125">+243 9 98 42 91 25</a></span><br style="color:rgb(204,51,204)">
<span style="color:rgb(204,51,204)"> <a href="tel:%2B243%2089%2080%2086%20263" target="_blank" value="+243898086263">+243 89 80 86 263</a></span><br style="color:rgb(204,51,204)">
<span style="color:rgb(204,51,204)">B.P. 1130 Kinshasa 1</span><br>e-mail: <a href="mailto:josemandjolo@ocpt.cd" target="_blank">josemandjolo@ocpt.cd</a><br> <a href="mailto:josemandjolo@hotmail.com" target="_blank">josemandjolo@hotmail.com</a></i><br>
<br>
</font></div>
</div><br><br clear="all"><br><br>