Working Internationally in Cyber-Security – Issues and Opportunities

1. Working Internationally in Cyber-Security – Issues and Opportunities Moderator – Dr Andrew Vallerand Canadian Centre for Security Science Panelists - Mr. Josh Caplan SPAWAR Dr. Peeter Lorents NATO CyberSecurity COE Mr. Mitch Dembin Assistant US Attorney, San Diego Office

2. Important to work internationally? In an interdependent world, the risks faced by any one agent depend not only on its choices but also on the choice of all others. Failures of a weak link in an interdependent system can have devastating impacts on all parts of the system. Because interdependence does not require proximity, the antecedents to catastrophes can be quite distinct and distant from the actual disaster.

3. Cyber Security Like airline passenger flows, cyberspace has a large number of entry points No one country or carrier can independently secure the system or take effective unilateral actions We must work collectively and collaboratively in a variety of areas to close the gaps.

4. Interdependent Security • Demands that we acknowledge others security levels • Suggests it is in our own best interests to share • Threat analysis • Security capability enhancements • Best Practices • Network contacts with Subject Matter Experts • Trans-Border Projects and S&T-based Exercises;

5. Today’s Panelists Each Panelist is a Subject Matter Expert in one of three distinct areas of international cyber security • Cyber Operations and Information Warfare • Cyber Security and Defence • The effective Prosecution of Cyber Crimes

6. Some Canadian perspectives … from the Centre for Security Science

7. Weapons Effects Vehicles Autonomous Systems Military Engineering Chem & Bio Defence 9 Defence R&D Canada Centers Radar, EW Space SystemsInformation Operations CommunicationsSynthetic Environment Electro-optics Combat SystemsCommand & ControlInformation Management Systems Environment Centre for Security Science Underwater Sensing MaterialsAir Vehicles Marine Vehicles Signature Mgt. Centre for Operations Research and Analysis DG Mil Pers R&A Human Factors Decision Support Command Effectiveness Operational MedicineSimulation & Modelling ADM(S&T), DG S&T Ops

8. National Recognition Canada recognizes the importance of interdependency in cyber security as we are about to implement a “National Cyber Security Strategy” At the same time, we are continuing work with Allies and like minded nations to ensure that Canada cannot be used as a base for cyber attacks on our friends and neighbours.

9. Cyber Objectives and Outcomes • Protect Canadians and Canadian interests within cyber space; • Ensure Canada is not a base for cyber threats to friends and allies; and, • Bring to Justicethose who breech Intl & domestic Canadian laws regarding the use of cyber space. S&T as a lead investment effectively links Objectives to Outcomes through enhanced capabilities Objectives & Outcomes are found in the 2004 National Security Policy, International Policy Statement, the Speech from the Throne and other sources • Secure Canadian Federal digital infrastructure; • Secure Canadian National digital infrastructure; and, • Combat cyber crime & protect Canadians online

10. Crowded CyberSecurity Space Canadian national landscape • Privy Council Office (White House in US) • National Security Advisor to the Prime Minister • Public Safety Canada • Government Operations Centre (GOC) • Integrated Threat Assessment Centre (ITAC) / Canadian Cyber Incident Response Centre (CCIRC; CERT in US) • Royal Canadian Mounted Police (RCMP; FBI & US Marshall Serv in US) • Canadian Security Intelligence Service (CIA in US) • Canadian Border Services Agency (CBP in US) • Industry Canada • Communications Research Centre (CRC) • National Research Council (NRC) • National Science and Engineering Research Council (NSERC) • Treasury Board Secretariat • Chief Information Officer • National Defence • Defence Research and Development Canada (DRDC; DDR&E in US) • Communications Security Establishment Canada (CSEC: NSA in US) • Assistant Deputy Minister (Information Management)

11. Consolidate S&T Goals & Efforts Provide S&T support to federal & national efforts in cyber security capability development, generation and employment, specifically to : Identify and understand evolving cyber threats; Improve existing cyber security capabilities, based on gaps; Lead the development of future national cyber security capabilities using new, enhanced or emerging technologies and supporting processes to prepare, prevent, respond and recover from cyber attacks including advancedforensics to enable effective threat identification, source and indication of malicious intent to aid in successful prosecutions. Facilitate the rapid transfer of new technologies and supporting processes into the national digital infrastructure.

12. Summary of National Element To address threats, vulnerabilities, risks and gaps in national capabilities, Canada is building a Whole of Government Strategy for Cyber Security. To enable its implementation and to facilitate the linkage of Objectives to Outcomes, a Whole of Government S&T program is being initiated leveraging Govt, Industry, Academia and Allied S&T as a potent Lead Investment. The value proposition of such a S&T program includes the: Delivery of trusted advice Risk identification and mitigation Integration of knowledge Open innovation Trusted Risk advisor mitigator Knowledge Open integrator innovator

13. International Space Public Security Technical Program (Can-US) NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE); NATO RTO IST panel, The Technical Cooperation Panel (5 eyes); TTCP C3I panel Strategic Alliance Cyber Crime Working Group (5 eyes - Lead Law Enforcement Agencies) Europa 7th Framework Program (EU R&D on ICT)