FOREWORD The global cyber landscape in 2016 saw new attempts to disrupt critical information infrastructure, rising ransomware incidents and the growing use of Internet of Things (IoT) devices to launch attacks. Singapore similarly faced such threats. Our high level of connectivity comes with a corresponding level of vulnerability. While advances in digital technology have opened up new possibilities to enhance our lives, they have also exposed us to cyber threats that aim to cheat us, steal or alter our data, disrupt our daily business activities, and cripple our critical infrastructure. Cyber-attacks are becoming more frequent and damaging. The impact of a cyber-attack was keenly felt in the United States of America in October 2016, when a major Domain Name System (DNS) faced a Distributed Denial of Service (DDoS) attack. Usually, DDoS attacks target websites, but that attack struck at a core infrastructure of the Internet – essentially the Web’s “telephone directory”. More than 80 organisations that relied on it to connect visitors to their respective websites, could not do so. That incident may have resulted in inconvenience mostly, but it could also be considered a harbinger of things to come. Even as this publication reviews the incidents in 2016, major cyber-attacks in the first half of 2017 continue to put everyone on alert. The “WannaCry” and “NotPetya” cyber-attacks led to disruptions in many services. These incidents will be more fully presented in the Cyber Landscape 2017 report, including how Singapore managed them even though we were relatively unscathed. Such incidents, and their rapid global impact, remind us that we must continue to do our part, to make cyberspace a safer and more trustworthy one. We hope that this first edition of the Singapore Cyber Landscape can point you in the right direction. This review of Singapore’s cyber threat situation provides some understanding of the gravity of what we as individuals, organisations and the nation, are dealing with. Knowing the enemy, their motivations and techniques, will allow us to have a fighting chance of detecting intrusions earlier and dealing with them promptly. In cyber, it is important to aim for resilience. This is because it is impossible to prevent successful attacks 100 per cent of the time. As Singapore pursues its plans to build a Smart Nation, we cannot afford to ignore the threats that come with it. The Cyber Security Agency of Singapore (CSA) will be your partner in making cyberspace a safer space for all. David Koh Chief Executive Cyber Security Agency of Singapore 2 3