Proceedings of the 11th European Conference on Information ...

More documents

Recommendations

Info

Evaluation <strong>of</strong> Nation-State Level Botnet Mitigation Strategies Using DEMATEL Christian Czosseck Cooperative Cyber Defence Centre <strong>of</strong> Excellence, Tallinn, Estonia Abstract: Botnets have been recognised as a possible threat to national security, and over recent years national cyber security thinkers have started to draft national level strategies to reduce <strong>the</strong> threat posed. The steady increase in <strong>the</strong> number <strong>of</strong> infected machines and <strong>the</strong> damage caused by botnet-mounted attacks shows that <strong>the</strong> success so far has been limited. This research analyses nation-state and inter-state level botnet defence and mitigation strategies and ultimately evaluates <strong>the</strong>ir impact on <strong>the</strong> botnet threat by employing <strong>the</strong> Decision-Making Trial and Evaluation Laboratory (DEMATEL) method on empirical data collected via interviews from experts in <strong>the</strong> field. This paper develops and presents a system <strong>of</strong> nationstate level strategy groups and a simple model <strong>of</strong> effects <strong>the</strong>y might have on <strong>the</strong> botnet threat. Based on this framework, <strong>the</strong> reciprocal influence <strong>of</strong> each element pair is identified, with <strong>the</strong> help <strong>of</strong> knowledgeable experts, and serves as <strong>the</strong> basis to conduct an analysis utilising <strong>the</strong> DEMATEL method. As a result we present a model <strong>of</strong> <strong>the</strong> influence that <strong>the</strong>se strategy groups have on <strong>the</strong> botnet threat, identify strongly and weakly influential elements in this system and present a ranking based on <strong>the</strong>se findings. This will lead to a recommendation as to which is <strong>the</strong> preferred strategy. Keywords: botnets, DEMATEL, cyber defence, strategy evaluation 12
Telefonica – Potential Victim <strong>of</strong> American Espionage Joey Dreijer 1 , Mat<strong>the</strong>w Roberts 2 , Neera Jeymohan 2 , Jeremy Julien 3 , Tommy Karlsson 4 , Raquel Cuesta 5 , Nils Monning 6 and Elif Duru 1 1 Hogeschool van Amsterdam University <strong>of</strong> Applied Sciences, Amsterdam, Ne<strong>the</strong>rlands 2 University <strong>of</strong> Salford, Salford, UK 3 ESIEA, Laval, France 4 Mid Sweden University, Sweden 5 University <strong>of</strong> Alcala, Alcala de Henares, Spain 6 University <strong>of</strong> Applied Sciences Bonn-Rhine-Sieg, Germany Abstract: During <strong>the</strong> year <strong>of</strong> 2010, a set <strong>of</strong> reports were released that contained important information regarding <strong>European</strong> multinationals and local governments. These reports were published by Wikileaks and were described as ‘cables’. These cables were sent from American embassies to <strong>the</strong> United States’ government. Suspicions were raised that <strong>the</strong> United States might have been spying on <strong>European</strong> countries, companies and <strong>the</strong>ir respective partners. One <strong>of</strong> <strong>the</strong> companies being mentioned in <strong>the</strong> cable files is Telefonica. Telefonica is a major Spanish telecom, television and Internet service provider operating in Europe and Latin America. The United States could have political and/or economic reasons to spy <strong>the</strong> Sou<strong>the</strong>rn American continent. The main question during our research is to find out what reasons <strong>the</strong> United States might have to spy on Latin American countries and if <strong>the</strong> rumors were true that <strong>the</strong>y have indeed spied upon Telefonica. And if <strong>the</strong>se rumors are true, what pr<strong>of</strong>its <strong>the</strong>re to be found within <strong>the</strong> cables and o<strong>the</strong>r relevant sources? During our research, we found relevant data containing possible evidence related to American espionage. The data found within <strong>the</strong> cables contain information about America’s interest in Telefonica and <strong>the</strong> pressure being put on <strong>the</strong>ir investments in Latin America. The cables contain quotes referring to America’s interest in Venezuela and Cuba. The cables contain messages being sent to an American <strong>of</strong>ficial, stating that <strong>the</strong> United States should be aware <strong>of</strong> Telefonicas vast growing market share and influences in Sou<strong>the</strong>rn American countries. O<strong>the</strong>r relevant cables contain quotes referring to ‘informed sources’. Who are <strong>the</strong>se sources and how did <strong>the</strong>y obtain relevant information about Telefonicas expenses? Most <strong>of</strong> <strong>the</strong> o<strong>the</strong>r relevant cables refer to o<strong>the</strong>r investments being done in Latin America, especially in Brazil 13
Page 1 and 2: Proceedings <stron
Page 3 and 4: Contents Paper Title Author(s) Guid
Page 5 and 6: Paper Title Author(s) Guide Page Se
Page 7 and 8: Paper Title Author(s) Guide Page Sw
Page 9 and 10: Preface This year sees the<
Page 11 and 12: Greece); Hamid Jahankhani (Universi
Page 13 and 14: Biographies Conference</str
Page 15 and 16: versity Paris 6 on the</str
Page 17 and 18: ic Advisory Group, the</str
Page 19 and 20: Tim Hartog graduated in 2005 at <st
Page 21 and 22: Pierre Leandre is a student in his
Page 23: several years working as both a s<s
Page 26 and 27: malware signatures to all users or
Page 28 and 29: Who are you Today? Prof</st
Page 30 and 31: Recent Cyberwar Spectrum and its An
Page 32 and 33: Keywords: measurement framework, me
Page 34 and 35: EU law and Internet Traffic Control
Page 38 and 39: and Mexico. The United States have
Page 40 and 41: ut also attitudes and values are pr
Page 42 and 43: countries are currently missing som
Page 44 and 45: Towards an Automated Security Aware
Page 46 and 47: the selection <str
Page 48 and 49: to classify these
Page 50 and 51: eport on future prospects o
Page 52 and 53: 21st century introduced the
Page 54 and 55: strictions; it obstructs th
Page 56 and 57: possibilities and opportunities to
Page 58 and 59: pendent on being aware of</
Page 60 and 61: ed cells. The outcome of</s
Page 63: PHD Papers 39
Page 66 and 67: Law of Armed Confl
Page 68 and 69: nerabilities have increased as a re
Page 71: Information Systems Security Manage
Page 75 and 76: CNA by Social Media, or is it 5th G
Page 77 and 78: could there be a c

Proceedings of the 11th European Conference on Information ...

Create successful ePaper yourself

Delete template?

Save as template?