third Cyber Security Assessment Netherlands - NCSC

More documents

Recommendations

Info

harm to the integrity of such information. The chapter also reviews current developments here. Threats consist of accidental events and negligence, or the actors’ (Chapter 2) intentional or intended activities. An attack may manifest itself but be detected and countered. In this case, the resilience is adequate. The degree to which the actors have the intention and skills to equip themselves with technical and other tools (Chapter 3) largely determines the potential impact and chance of success of an attack. The Resilience of end-users, organisations, and society can limit the chance of a threat manifesting itself and its subsequent impact. Resilience comprises the absence or presence of vulnerabilities among people, organisations or technology (Chapter 4) and measures to boost resistance, strengthen defences and limit vulnerabilities (Chapter 5). Chapter 6 describes the Manifestations in the Interests, Threats, and Resilience triangle. This chapter also describes expected developments with respect to threats. Topics of particular interest are discussed further in the detailed sections, including: Cyber crime, Cyber espionage, Botnets, DDoS, Hyperconnectivity, Grip on information, Vulnerability of IT, Vulnerability of the end user, and Industrial Control Systems. These topics were selected with the consensus of a large number of the parties who collaborated on this CSAN. The core assessment was compiled from information sourced from the detailed sections. For the sake of readability, we do not always provide references to actual sources. The Appendices contain the References, a summary of Incidents dealt with by the NCSC, and a Glossary of terms and abbreviations. Throughout the text, numbers in superscript refer to footnotes on the same page while references to the list of references (see appendix 1) contain a short description of the reference. « 14
Core assessment 1 Interests 17 2 Threats: actors and their intentions 21 3 Threats: tools 27 4 Resilience: vulnerabilities 31 5 Resilience: measures 37 6 Manifestations 43 15
Page 1: Cyber Security Assessment Netherlan
Page 4 and 5: National Cyber Security Centre The
Page 7: Contents Foreword 3 Summary 7 Intro
Page 10 and 11: on governmental organisations and b
Page 12 and 13: However, it is assumed that they ar
Page 15: Introduction Information Technology
Page 20 and 21: 1.2 Dependency IT dependency contin
Page 22 and 23: Increased IT dependency in electric
Page 24 and 25: on the internet such as an electric
Page 26 and 27: approached or incited by states for
Page 28 and 29: Actor Intentions Skills Targets Sta
Page 30 and 31: get the script kiddies started. One
Page 32 and 33: location’, there is no one single
Page 34 and 35: Furthermore, business information c
Page 36 and 37: environments often arise from the i
Page 38 and 39: not only smart phones, tablets or c
Page 40 and 41: 5.3 Technology Norms, guidelines an
Page 42 and 43: ACM seeks active collaboration with
Page 45 and 46: Core assessment » 6 Manifestations
Page 53: Core assessment » 6 Manifestations
Page 57 and 58: Detailed section » 1 Cyber crime
Page 59: Detailed section » 1 Cyber crime
Page 62 and 63: magnitude of digital espionage inci
Page 65 and 66: Detailed section » 3 Botnets 3 Bot
Page 67 and 68:
Detailed section » 3 Botnets » Do
Page 69 and 70:
Detailed section » 4 DDoS 4 DDoS
Page 71:
Detailed section » 4 DDoS 4.3 Resi
Page 74 and 75:
An attacker can abuse devices linke
Page 77 and 78:
Detailed section » 6 Grip on infor
Page 79 and 80:
Detailed section » 6 Grip on infor
Page 81 and 82:
Detailed section » 7 Vulnerability
Page 83 and 84:
Page 85 and 86:
Page 87 and 88:
Page 89 and 90:
Page 91:
Page 94 and 95:
Leak in the Humannet website belong
Page 96 and 97:
In 2012, ACM received a total of 14
Page 98 and 99:
car park will not open. It is annoy
Page 100 and 101:
9.6 The resilience of ICS Security
Page 102 and 103:
100 [22: McAfee 2013-2] McAfee: Thr
Page 104 and 105:
102
Page 106 and 107:
Incidents Types of government incid
Page 108 and 109:
Classification Classified data Clou
Page 110 and 111:
Information Information security In
Page 112 and 113:
Spoofing/IP spoofing SQL injection
Page 114:
112
show all

third Cyber Security Assessment Netherlands - NCSC

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?