Bahasa | English CyberSecurity Malaysia –“CyberNEWS”
  Issue 7 | Quarter 4 - 2014
   
 
DECEMBER 2014
"CYBER CRIME ARTS" SEMINAR AND COMPETITION
  1 DECEMBER 2014
 

The Seminar and Competition on "Cyber Crime Arts" was organized by the Faculty of Computer Science and Information Technology, University of Malaya on 1 December 2014. With the theme "Cyber Crime", the seminar aims to foster an awareness of information security amongst the participants.

Lt. Col. Sazali Sukardi (Retired), Vice President of Strategic Research, CyberSecurity Malaysia was invited as a speaker on "Trends and Emerging Threat Landscape". He explained about the present situation of cyber security, the issues and challenges faced in Malaysia. He also listed the types of cybercrime and cyber-attacks, the modus operandi involved and also measures to tackle cyber threats. Lt. Col. Sazali Sukardi was also a jury in the poster and video competition on cybercrime.

The involvement by CyberSecurity Malaysia in this event is recognition by the academic community on the commitment and contribution of CyberSecurity Malaysia towards a secure cyber environment. The program is an opportunity for CyberSecurity Malaysia to strengthen relationships with other global players in the arena of cyber security.

 
THE PREPARATORY MEETING OF THE ASEAN REGIONAL FORUM INTER-SESSIONAL SUPPORT GROUP ON CONFIDENCE BUILDING MEASURES AND PREVENTIVE DIPLOMACY (ARF ISG ON CBMS AND PD)
  1 – 4 DECEMBER 2014
 

The Preparatory Meeting of the ASEAN Regional Forum Inter-Sessional Support Group on Confidence Building Measures and Preventive Diplomacy (ARF ISG on CBMs and PD) was jointly organized by the Ministry of Foreign Affairs of Malaysia and the Ministry of Foreign Affairs of Japan from 1 to 4 December 2014 in Melaka. Malaysia and Japan have been appointed as Co-Chair for the ARF ISG on CBMs and PD for the years between the sessions (August 2014 to July 2015). The theme for this year's meeting was "Confidence Building Measures and Preventive Diplomacy".

The ARF ISG meeting was focused on four main areas, namely, Counter Terrorism and Transnational Crimes, Disaster Relief, Non-Proliferation and Disarmament, and Maritime Security. The purpose of this meeting was to obtain feedback on the current status of initiatives and activities that are being planned or implemented under the ARF programme. In addition, this meeting was to also seek the views and comments of members of the meeting to decide on follow-up actions for the initiatives and activities planned or currently implemented.

CyberSecurity Malaysia had the opportunity to discuss input related to cyber security field so that the outcome of the planning will benefit Malaysia. The Working Plan on the safety and use of ICT will hopefully increase the confidence and trust amongst the ARF members by creating a safe and open cyberspace and reduce conflicts between countries. Capacity building programmes will help enhance understanding and awareness and strengthen the expertise and cooperation in the field of cyber security.

 
THE 10TH ASEAN CIO | CSO SUMMIT AND AWARDS 2014
  2 DECEMBER 2014
 

The 10th ASEAN CIO / CSO Summit and Awards 2014 was organized by the International Data Group (IDG) in collaboration with and certified by the Vietnam Government Information Security Committee, Ministry of National Defense, Ministry of Information and Communications (MIC), Ministry of Public Security, Ministry of Science and Technology, and the People's Committee of Ho Chi Minh City. The event was also supported by the Vietnam Computer Emergency Response Team (VNCERT), (ISC)2 (International Information Systems Security Certification Consortium), ISPA.my (Information Security Professional Association of Malaysia) and Hack in the Box (HITB) Malaysia.

It is an annual event held in Ho Chi Minh City, Vietnam at the end of each year. This year, the panel of judges has agreed to bestow the award Outstanding Chief Information / Security Officer Award ("CSO Award") for 2014 to Dr. Amirudin Abdul Wahab, Chief Executive Officer, CyberSecurity Malaysia.

Dr. Amirudin was selected for his contribution, commitment and determination in strengthening the infrastructure for the cyber security industry in Malaysia. Since his appointment as CEO, CyberSecurity Malaysia in early 2013 he has embarked on various initiatives and programmes for the industry.

Meanwhile, CyberSecurity Malaysia's involvement and presence at this summit shows the continued support and branding of CyberSecurity Malaysia in the field of cyber security in the international arena, taking part in publicity activities for the segment award, while enhancing good relations and strengthening existing relationships with various parties in the cyber security industry.

 
EXCHANGE OF MEMORANDUM OF UNDERSTANDING (MOU) BETWEEN UNIVERSITY TECHNICAL OF MELAKA MALAYSIA (UTEM) AND CYBERSECURITY MALAYSIA (CSM)
  8 DECEMBER 2014
 

The Exchange of Memorandum of Understanding (MoU) between University Technical of Melaka Malaysia (UTeM) and CyberSecurity Malaysia (CSM) took place on December 8, 2014 at Hotel Equatorial Melaka. The purpose of this new MoU is to promote cooperation through research and education in the field of cyber security to meet the needs of the industry.

The MoU Exchange ceremony was witnessed by YB Datuk Dr. Abu Bakar Mohamad Diah, Deputy Minister of Science, Technology and Innovation after launching the World Congress on Information and Communication Technologies (WICT) 2014. UTeM was represented by Hon. Prof. Datuk Dr. Shahrin bin Sahib, Vice Chancellor UTeM while CyberSecurity Malaysia was represented by Lt. Col. Sazali bin Sukardi, Vice President of Strategic Research.

Under the MoU, cooperation within the field of research and education of cyber security among UTeM and CSM will be enhanced through the development of human resource and career advancement by conducting joint academic programmes through post-graduate studies at masters and doctorate level and sabbatical programme and industrial placement. In addition, this understanding allows for the sharing of data, information, knowledge, expertise and products through training, seminars, workshops and colloquia as well as collaborative research for the production of publications such as journals, books, monographs, reports and articles in the field of cyber security.

 
PENETRATION TEST TRAINING FOR HARDWARE SECURITY MODULE (HSM) PRODUCT
  22 – 26 DECEMBER 2014
 

CyberSecurity Malaysia staff attended the Penetration Testing Training for Hardware Security Module Products (HSM), which was held from 22 to 26 December 2014 at Tubitak Bilgem, Gebze, Turkey. This five days training included the scope of learning and hands-on tutorial on hardware penetration tests.

The training taught participants the most commonly used cryptographic algorithms, systems and protocols in HSM products. Explanation of test methods during susceptibility testing specifically towards algorithms and cryptographic modules, were included in the training module. In this context, problem analysis, side channel analysis, physical attack test were presented by trainers as part of the training module. At the end of the exercise, the logical test methods of attack used by the PKCS#11 were explained and demonstrated by the trainers.

The experience gained from attending the training and observing HSM AVA evaluation were technology transfer initiatives which will fill the gap for CyberSecurity Malaysia in achieving the Centre of Excellence (COE) for the smart card technology. In addition, CyberSecurity Malaysia staff will be equipped with the knowledge and efficiency in performing penetration tests on HSM products for future projects.

 
MOU SIGNING CEREMONY BETWEEN MAMPU AND CYBERSECURITY MALAYSIA
  30 DECEMBER 2014
 

The signing of Memorandum of Understanding between the Malaysian Administrative Modernisation and Management Planning Unit (MAMPU) and CyberSecurity Malaysia was held on 30 December 2014. This Memorandum of Understanding (MoU) is to strengthen cooperation in the field of cyber security between Malaysian Administrative Modernisation and Management Planning Malaysia (MAMPU) Unit and CyberSecurity Malaysia.

Generally, the MoU strengthen good working relationship in the field of cyber security and development expertise for the benefit of national development. Furthermore, this MoU aims to establish a smart and strategic partnership that strengthens the capacity of the government's cyber security capacity. As a partner of strategic operations, the area of cooperation are cyber security incident management; digital forensics; capacity building programmes; awareness programmes; governance, risk and compliance in information security; and cyber security product certification.