The Indispensable Component of Cyber Security

The Indispensable
Component of Cyber
Security: The Dynamics of an
Effective Cyber Cooperation
Prof. Nazife Baykal
Director of METU Informatics Institute
[email protected]
S
Cooperation
S What is ‘cooperation’?
S ‘Togetherness’
S ‘for their mutual benefit’
S Cooperation in cyber security
S The magical concept of ‘trust’
Cooperation: Why so important?
S Cyberspace: Extremely connected
S Security & Safety: Impossible to provide alone
S Maintained & developed by private sector, regulated by
governments, research & development by the academia.
Cooperation: Emphasized
S US President Obama’s Executive
Order: Improving Critical
Infrastructure Cybersecurity
emphasized cooperation
S Initiatives by NATO, EU and other
international organizations.
An Irony: Cooperation Exists
But Always Talked About
S Cooperation examples everywhere yet we still talk about the
‘need’ for cooperation.
S The need for cooperation repeated – Only minor examples
are shown
S Many cooperation efforts are piecemeal & target specific
issues, not the ‘big picture’
S Mostly born out of necessities – Quick and small
consequences
Problematic Aspects Preventing
An ‘Ideal’ Cooperation
Reluctance for
Information Sharing
& Lack of Trust
A Lack of Full Trust
Focusing on short-term economic gains
Required for Cooperation:
Sacrifice
S Sacrifice: A radical yet proper concept
S Not focusing on short term results and interests
S Cooperation needs compromises
S A compromise where everyone wins
Dimensions of an Ideal
Effective Cooperation
Dimension I: Trust
S Basic dimension
S The foundation and starting point of effective cyber
cooperation
S Can be built upon the existing experiences of having
securely and effectively worked with each other.
Dimension II: Risk-Sharing
S Every step brings about risks
S All the parties should be ready and willing to face and share
risks
S Examples: investments might fail in the short run or
violations of data privacy might occur
S Even the success itself might be a risk
Dimension III: Cost-Sharing
S Cost-sharing: third major dimension of the ideal cooperation
S Necessary steps of the cooperation in the cyber domain involves
costs
S All the actors should be ready to take on economic responsibilities
on their part.
S Example: The industry should be willing to work with research
and development projects
Dimension IV: Commitment
S Commitment of the actors: the last dimension of the ideal
cooperation
S The commitment to the responsibilities till the end is a
major component of the process
S Commitment helps the other dimensions be carried out into
real life and gain their full meaning.
Four Major Dimensions:
Cooperation Process
Results of Effective Cooperation
S Such a cooperation is full of promises
S A better capacity building to combat the threats we face on
cyber arena
S A strong cooperation vision
S Better awareness
S Sharing lessons learned
S Increased research and development
Thank you.