2 Priority Research Topics in Cyber and Information Security The limited resources available for the support of R&D&I pertaining to cyber and information security must be focused on several key research areas. Therefore, in cooperation with NCISA experts and other professionals from the academic and business sectors, priority research topics whose stable support is a key requisite for the performance of the NCISA’s tasks in view of the current and future needs of the state have been identified, specifically pertaining to the protection of elements of critical information infrastructure (hereinafter “CII”), significant information systems (“SIS”), basic service operators’ systems, critical information infrastructure communications systems11, and systems handling classified information and cryptography12. Initial Situation: The methods of attack, including their sophistication and force, are also changing as technology develops. According to the Report on Cyber Security in the Czech Republic for 2018, the Czech Republic is facing a significant increase in the numbers of spear-phishing attacks, which attackers utilize to acquire access to a target network. According to the Classification of Incidents Handled in 201813, the number of fraudulent incidents utilizing phishing and spear-phishing methods doubled compared to 201614. Another challenge in regard to cyber security is the ability to withstand the exponential increase in the strength of DDoS (distributed denial of service) attacks, the goal of which is to restrict the availability of services. An example is the DDoS attacks on the election process in 2017 and 2018. In 2018, attacks aiming to disrupt the availability of services constituted a total of 33% of all incidents reported to GovCERT. The increasing numbers of attacks involving advanced social engineering imposes significant demands on the ability of the state to protect its networks and other elements of CII and SIS. The increasing digitalization of industrial networks and SCADA systems means we can anticipate increased pressure for research and development into tools that will be able to better protect communications and information networks. Examples of such tools are the automation of penetration testing and advanced network operations monitoring, including data collection for forensic analysis. In connection with the increasing numbers of IoT devices, the growth in technologies improving connectivity (5G networks), and the continuously growing utilization of cloud 11 Act No 181/2014, on cyber security. Act No 412/2005, on the protection of classified information and on security clearance. 13 Report on Cyber Security in the Czech Republic for 2018. 14 Report on Cyber Security in the Czech Republic for 2016. 12 6