Cyber Attack Analysis Council to be Held

1.Point and purpose

  At the 29th Information Security Policy Conference held on April 26, 2012, the Minister for Internal Affairs and Communications and the Minister for Economy, Trade and Industry announced that the two ministries would work together to development of a framework for advanced analyses on cyber attacks, which have become increasingly complex and sophisticated in recent years. In addition, at the 30th Information Security Policy Conference held on July 4, 2012, the two ministers announced that the “Cyber Attack Analysis Council,” consisting of four organizations (NICT, IPA, Telecom-ISAC Japan, and JPCERTCoordination Center) in addition to the MIC and the METI , would be founded in order to make advanced analyses required for protection from cyber attacks.
  In response to this announcement, the MIC and the METI founded the “Cyber Attack Analysis Council. The Council will implement activities to grasp the actual state of cyber attacks and provide related ministries and agencies, and important infrastructure business operators with the results.
 

2.Structure and observer

  This Council consists of the MIC, the METI and four organizations (NICT, IPA, Telecom-ISAC Japan, and JPCERT Coordination Center), and the National Information Security Center participates as an observer. The structure may be subject to change in accordance with the Conference’s activities.
 

3.Activities and schedule

  This Council intends to grasp the characteristics of cross-industrial cyber attacks and/or long-term and persistent cyber attacks, as well as their techniques and their status by collecting the results of analyses on malware* conducted by each organization, information on sources of attacks, and network-related information that indicates possible attacks. It will also and make advanced analyses. A working group consisting of related organizations will be established under the Council this summer in order to smoothly implement those activities. The working group will deliberate on and sort out the requirements for collected information, provided information and sources of information.
  *Malware: Collective term of harmful software, e.g. a computer virus