cyber security initiatives in brazil third wsis … · cyber security initiatives in brazil cgi.br...
TRANSCRIPT
![Page 1: CYBER SECURITY INITIATIVES IN BRAZIL Third WSIS … · CYBER SECURITY INITIATIVES IN BRAZIL CGI.br – Brazilian Internet Steering Committee CERT.br – Computer Emergency Response](https://reader034.vdocument.in/reader034/viewer/2022051509/5afbe7017f8b9a446590eeb2/html5/thumbnails/1.jpg)
www.nic.brwww.nic.br
CYBER SECURITY CYBER SECURITY INITIATIVES IN BRAZILINITIATIVES IN BRAZIL
CGI.br – Brazilian Internet Steering CommitteeCERT.br – Computer Emergency Response Team Brazil
Third WSIS Action Line C5 Facilitation Meeting
Henrique Faulhaber
ITU - Geneva, May 23, 2008
![Page 2: CYBER SECURITY INITIATIVES IN BRAZIL Third WSIS … · CYBER SECURITY INITIATIVES IN BRAZIL CGI.br – Brazilian Internet Steering Committee CERT.br – Computer Emergency Response](https://reader034.vdocument.in/reader034/viewer/2022051509/5afbe7017f8b9a446590eeb2/html5/thumbnails/2.jpg)
www.nic.brwww.nic.br
• Brazilian Internet Steering Committe
• Brazilian Cybersecurity overview
• Increasing Brazilian Internet Security and Incident Handling
Capacity
– Helping to Create new CSIRTs
– Training Security Professionals
– Promoting Cooperation and Best Practices
• Education Initiatives for End Users
AgendaAgenda
![Page 3: CYBER SECURITY INITIATIVES IN BRAZIL Third WSIS … · CYBER SECURITY INITIATIVES IN BRAZIL CGI.br – Brazilian Internet Steering Committee CERT.br – Computer Emergency Response](https://reader034.vdocument.in/reader034/viewer/2022051509/5afbe7017f8b9a446590eeb2/html5/thumbnails/3.jpg)
www.nic.brwww.nic.br
created under the Interministerial Ordinance Nº 147, May 31st 1995
altered by under Presidential Decree Nº 4,829, September 3rd 2003
CGI.br mission is to establish strategic directions related to security of networks and internet services
Setup as a multistakeholder including Government, NGO’s, Third Sector and Academic Community
Brazilian Internet Steering Committe
![Page 4: CYBER SECURITY INITIATIVES IN BRAZIL Third WSIS … · CYBER SECURITY INITIATIVES IN BRAZIL CGI.br – Brazilian Internet Steering Committee CERT.br – Computer Emergency Response](https://reader034.vdocument.in/reader034/viewer/2022051509/5afbe7017f8b9a446590eeb2/html5/thumbnails/4.jpg)
www.nic.brwww.nic.br
1 – Ministry of Science and Technology;2 – Ministry of Communications3 – Presidential Cabinet4 – Ministry of Planning, Budget and Management5 – Ministry of Development, Industry and Foreign Trade6 – Ministry of Defense7 – National Telecommunications Agency8 – National Council of Scientific and Technological Development9 – National Forum of Estate Science and Technology Secretaries10 – Internet expert
11 – Internet services providers12 – Telecommunications infrastructure providers 13 – Hardware and software industries14 – General bussiness sector users
15 – NGO16 – NGO17 – NGO18 – NGO19 – Academic Community
20 – Academic Community
21 – Academic Community
![Page 5: CYBER SECURITY INITIATIVES IN BRAZIL Third WSIS … · CYBER SECURITY INITIATIVES IN BRAZIL CGI.br – Brazilian Internet Steering Committee CERT.br – Computer Emergency Response](https://reader034.vdocument.in/reader034/viewer/2022051509/5afbe7017f8b9a446590eeb2/html5/thumbnails/5.jpg)
www.nic.brwww.nic.br
Increasing Brazilian Internet Security and Increasing Brazilian Internet Security and Incident Handling Capacity.Incident Handling Capacity.
![Page 6: CYBER SECURITY INITIATIVES IN BRAZIL Third WSIS … · CYBER SECURITY INITIATIVES IN BRAZIL CGI.br – Brazilian Internet Steering Committee CERT.br – Computer Emergency Response](https://reader034.vdocument.in/reader034/viewer/2022051509/5afbe7017f8b9a446590eeb2/html5/thumbnails/6.jpg)
www.nic.brwww.nic.br
• Legal: – Cybercrime law– Antispam law– Both discussed in the Senate
• Organizational:- Brazilian Internet Steering Comitee- President’s Military Cabinet- Justice Ministery- Communications Ministery
Cybersecurity issues in BrazilCybersecurity issues in Brazil
![Page 7: CYBER SECURITY INITIATIVES IN BRAZIL Third WSIS … · CYBER SECURITY INITIATIVES IN BRAZIL CGI.br – Brazilian Internet Steering Committee CERT.br – Computer Emergency Response](https://reader034.vdocument.in/reader034/viewer/2022051509/5afbe7017f8b9a446590eeb2/html5/thumbnails/7.jpg)
www.nic.brwww.nic.brDevelopment of Brazilian Computer SecurityDevelopment of Brazilian Computer Security
Incident Response TeamsIncident Response Teams
• June/1997: CGI.br created CERT.br as the National CSIRT.
• August/1997: the Brazilian Research Network (RNP) followed by the Rio Grande do Sul Academic Network created their own CSIRT (CAIS),
• 1999: other institutions, such as Universities and TelecommunicationCompanies started forming their CSIRTs
• 2004: CTIR Gov was created, with the Brazilian Federal Government Administration
![Page 8: CYBER SECURITY INITIATIVES IN BRAZIL Third WSIS … · CYBER SECURITY INITIATIVES IN BRAZIL CGI.br – Brazilian Internet Steering Committee CERT.br – Computer Emergency Response](https://reader034.vdocument.in/reader034/viewer/2022051509/5afbe7017f8b9a446590eeb2/html5/thumbnails/8.jpg)
www.nic.brwww.nic.brComputer Security Incident Response TeamsComputer Security Incident Response Teams
(CSIRTs/CERTs) in Brazil(CSIRTs/CERTs) in Brazil
Sector CSIRTs
National CERT.br
Government CTIR Gov, GATI,GRA/SERPRO
Financial CSIRT BB, CSIRT CAIXA,CSIRT Banco Real,CSIRT Santander Banespa,Visanet CSIRT
Telecom/ISP Brasil Telecom,CTBC Telecom, EMBRATEL, StarOne, CSIRT Telefonica, CSIRT TIM, CSIRT UOL Academic GSR/INPE, CAIS/RNP, CSIRT Unicamp, CERT-RS, NARIS, CSIRT POP-MG, CENATIS, CEO/RedeRio, CSIRT USP, GRC.UNESP
Outsourcing CSIRT TIVIT
http://www.cert.br/contact-br.html
![Page 9: CYBER SECURITY INITIATIVES IN BRAZIL Third WSIS … · CYBER SECURITY INITIATIVES IN BRAZIL CGI.br – Brazilian Internet Steering Committee CERT.br – Computer Emergency Response](https://reader034.vdocument.in/reader034/viewer/2022051509/5afbe7017f8b9a446590eeb2/html5/thumbnails/9.jpg)
www.nic.brwww.nic.br
• Help new CSIRTs to elaborate their activities– Meetings, presentations to C-level managers, etc…
• Training– SEISM/CMU Partner, licensed to deliver CERT® Program courses in Brazil:
• Overview of Creating and Managing Computer Security Incident Response Teams (CSIRTs)
• Fundamentals of Incident Handling• Advanced Incident Handling for Technical Staff• Information Security for Technical Staff
– Training adapted to Brazilian reality– 240+ professionals trained– Fees only to recover costs
Training and Support for New CSIRTsTraining and Support for New CSIRTs
http://www.cert.br/cursos/
![Page 10: CYBER SECURITY INITIATIVES IN BRAZIL Third WSIS … · CYBER SECURITY INITIATIVES IN BRAZIL CGI.br – Brazilian Internet Steering Committee CERT.br – Computer Emergency Response](https://reader034.vdocument.in/reader034/viewer/2022051509/5afbe7017f8b9a446590eeb2/html5/thumbnails/10.jpg)
www.nic.brwww.nic.br
• Promote meetings among CERT.br and other sectors– Partnerships and best practices as results
• Technical symposiums promoted by CGI.br twice a year – Attendance is free and transmitted via webcast
• Network Engineering and Operators (GTER)• Computer Security Community (GTS)
• Situational Awareness and Early Warning– Brazilian Honeypots Alliance – http://www.honeypots-alliance.org.br
• In cooperation with government, academic, military, telecom, ISPs and financial institutions
– SpamPots Project – http://www.cert.br/docs/whitepapers/spampots/
Promoting Cooperation and Best PracticesPromoting Cooperation and Best Practices
![Page 11: CYBER SECURITY INITIATIVES IN BRAZIL Third WSIS … · CYBER SECURITY INITIATIVES IN BRAZIL CGI.br – Brazilian Internet Steering Committee CERT.br – Computer Emergency Response](https://reader034.vdocument.in/reader034/viewer/2022051509/5afbe7017f8b9a446590eeb2/html5/thumbnails/11.jpg)
www.nic.brwww.nic.br
Education Initiatives for End Users Education Initiatives for End Users
![Page 12: CYBER SECURITY INITIATIVES IN BRAZIL Third WSIS … · CYBER SECURITY INITIATIVES IN BRAZIL CGI.br – Brazilian Internet Steering Committee CERT.br – Computer Emergency Response](https://reader034.vdocument.in/reader034/viewer/2022051509/5afbe7017f8b9a446590eeb2/html5/thumbnails/12.jpg)
www.nic.brwww.nic.brEnd User Security GuideEnd User Security Guide
Sumary
Security FundamentalsInternet SecuriyIInternet FraudSpamMalwareSecurity tips
![Page 13: CYBER SECURITY INITIATIVES IN BRAZIL Third WSIS … · CYBER SECURITY INITIATIVES IN BRAZIL CGI.br – Brazilian Internet Steering Committee CERT.br – Computer Emergency Response](https://reader034.vdocument.in/reader034/viewer/2022051509/5afbe7017f8b9a446590eeb2/html5/thumbnails/13.jpg)
www.nic.brwww.nic.brAntispam.br WebsiteAntispam.br Website
![Page 14: CYBER SECURITY INITIATIVES IN BRAZIL Third WSIS … · CYBER SECURITY INITIATIVES IN BRAZIL CGI.br – Brazilian Internet Steering Committee CERT.br – Computer Emergency Response](https://reader034.vdocument.in/reader034/viewer/2022051509/5afbe7017f8b9a446590eeb2/html5/thumbnails/14.jpg)
www.nic.brwww.nic.br
Anti Spam VideosAnti Spam Videos
![Page 15: CYBER SECURITY INITIATIVES IN BRAZIL Third WSIS … · CYBER SECURITY INITIATIVES IN BRAZIL CGI.br – Brazilian Internet Steering Committee CERT.br – Computer Emergency Response](https://reader034.vdocument.in/reader034/viewer/2022051509/5afbe7017f8b9a446590eeb2/html5/thumbnails/15.jpg)
www.nic.brwww.nic.br
Stickers Stickers –– The CharactersThe Characters
![Page 16: CYBER SECURITY INITIATIVES IN BRAZIL Third WSIS … · CYBER SECURITY INITIATIVES IN BRAZIL CGI.br – Brazilian Internet Steering Committee CERT.br – Computer Emergency Response](https://reader034.vdocument.in/reader034/viewer/2022051509/5afbe7017f8b9a446590eeb2/html5/thumbnails/16.jpg)
www.nic.brwww.nic.br
• Overview of Brazilian Cyber security
• What we are doing about Brazilian Internet Security and Incident Handling Capacity
• Examples of Education Initiatives for End Users
SummarySummary
![Page 17: CYBER SECURITY INITIATIVES IN BRAZIL Third WSIS … · CYBER SECURITY INITIATIVES IN BRAZIL CGI.br – Brazilian Internet Steering Committee CERT.br – Computer Emergency Response](https://reader034.vdocument.in/reader034/viewer/2022051509/5afbe7017f8b9a446590eeb2/html5/thumbnails/17.jpg)
www.nic.brwww.nic.brAdditional InformationAdditional Information
– CGI.br – Brazilian Internet Steering Committeehttp://www.cgi.br/
– Antispam.br Videoshttp://www.antispam.br/videos/
– CERT.brhttp://www.cert.br/
![Page 18: CYBER SECURITY INITIATIVES IN BRAZIL Third WSIS … · CYBER SECURITY INITIATIVES IN BRAZIL CGI.br – Brazilian Internet Steering Committee CERT.br – Computer Emergency Response](https://reader034.vdocument.in/reader034/viewer/2022051509/5afbe7017f8b9a446590eeb2/html5/thumbnails/18.jpg)
www.nic.brwww.nic.br
• Henrique Faulhaber
• Board Member CGI.br
• Private Sector Representative (IT industry)
• Email : [email protected]
Thank youThank you