NATIONAL CYBER SECURITY STRATEGY GREEN PAPER – SUPPORTING DOCUMENT 5 Insights on Cyber Security 5.1 CYBER SECURITY IS A CONTINUOUS PROCESS The Cyber security scenario is a highly dynamic and complex one. Sophistication of cyber threats continues increasing. Trust infrastructures face massive stress as their basic security constituents have been challenged. Other emerging technologies such as big data, social media, mobile computing and interconnected devices if not properly applied and/or protected constitute a perfect knowledge base for cyber criminals, allowing for covert, well planned, human and/or technical means of targeted attacks. Additionally, related standards and technology applied may still be in the very early stages of adoption and maturity , hence increasing the vulnerability risks. Furthermore, the unknown number of breaches and security incidents is a major concern for cyber security experts and law enforcement officials, calling for the need of breach notification at various business areas/sectors, possibly through regulation. Governments are challenged to follow up on related developments with regulation and legislation; seeking to establish a balance between what is technically possible and what is legally transparent in the process. New, sophisticated attacks call for development of new defences, such as through new detection techniques and new security controls. In effect, such requirements for innovation call for research and development efforts and investments involving Government, business as well as the academia. 5.2 CYBER CRIMINALITY IS EXTENSIVE, COMPLEX AND ADVANCED Cyber criminals are increasingly more effective in targeting their attacks. They are being more successful in exploitation of vulnerabilities (human and technical) through effective application of malicious tools and attack methods. Breached or leaked data is considered as one of the key means to achieve this goal. New attack techniques and practices also allow for lack of detection and traceability of the perpetrator. The nature and efficacy of the cyber crime market does not exclude having specialised roles such as administrators, specialists in varous areas of cyber crime, intermediaries, brokers and vendors. Interactions of cyber criminals with cyber terrorists is not excluded either. 21 Malta | National Cyber Security Strategy Green Paper – Supporting Document