4.2
Building up “fundamentals” for dynamic responses
It is critical that each country has “fundamentals,” that is, sufficient basic capacity and
response mechanisms to respond dynamically to cyber incidents through international
cooperation and mutual assistance. Moreover, considering the global nature of
cyberspace, raising the cybersecurity standard at the global level and reducing the
number of vulnerable nodes in the realm of cyberspace are essential.
Such efforts should also have a consequential deterrent effect on malicious activities
carried out in cyberspace.
4.2.1
Support for building a global framework for cyber hygiene
At the basis of international cooperation for dynamic responses to cyber incident is
each country’s national mechanism to detect, analyze and respond to cyber incidents. In
addressing the globalization of cyber incidents, such mechanism needs to be developed
also at a global level.
Drawing on our own experience, Japan will provide support for establishing CSIRTs and
developing their operational capacity. Japan will also share information on measures for
cleaning bots, detecting malicious sites, dealing with malware, and on information-sharing
mechanism for cybersecurity of critical infrastructure.
Japan has experience in establishing CSIRTs in a wide range of regions, such as in the
Asia Pacific and in Africa. Japan also have experience in establishing CSIRTs for control
systems, which have become increasingly important in recent years, Japan will build upon
these experiences and expand support.
Since 2006, ahead of the rest of the world, Japan has been implementing
network-based measures to counter bot virus infections in cooperation with internet
service providers (ISPs). Bot infection rates decreased dramatically as a result, and
Japanese measures are now recognized as a model among developed countries. Going
forward, in cooperation with ISPs, Japan plans to commence a new initiative of building a
database which stores information on malicious sites and alerts users attempting to
access those sites. Japan will actively share the knowledge obtained through this initiative.
Furthermore, Japan will promote measures for bot extermination through multilateral
cooperation among CSIRTs.
Critical infrastructure systems lie at the basis of our social and economic activities and
therefore require a high level of security. In Japan, these systems are built with high
security including solid resilience to cyber attacks. Japan will also share these outstanding
cybersecurity measures when providing support for building of critical infrastructure
systems.
When building a framework for cyber hygiene activities, it is important to have indicators
by which actual cyber attacks and cybersecurity initiatives in each country can be
quantitatively assessed. Japan will actively cooperate and contribute to initiatives by the
Organization for Economic Cooperation and Development (OECD) and other
organizations for the formulation and measurement of such indicators.
6