enterprises had invested in educating their employees on infocomm security7. Another iDA survey in 2014 found that while about 80% of Internet users had previously installed anti-virus software and security updates on their computer at home, only about 30% of smartphone users surveyed had installed anti-virus software on their smartphones8. Individuals and enterprises in Singapore need to adopt better cyber hygiene practices, so as to reduce opportunities for criminals to commit cybercrimes. 10. challenges The threat of cybercrime poses several key challenges for law enforcement: Key in combating cybercrime a. Anonymity afforded by the Internet The Internet allows cybercriminals to hide behind a veil of anonymity, through the use of Virtual Private Network (VPN) services or other anonymous proxy services like The Onion Router (TOR). This impedes detection efforts, and cybercrimes are not easily traced back to perpetrators. b. Transnational nature of cybercrime The Internet is borderless, and cybercrimes are easily perpetrated across geographical borders. This problem is compounded by the fact that some foreign countries do not have cybercrime laws. Where there are cybercrime laws in operation, cybercrime offences in other countries may also not be defined in the same manner as in Singapore. An act which constitutes a cybercrime offence in Singapore may therefore not be an offence in another country. The lack of dual criminality makes it a challenge to prosecute cybercriminals who operate from a different country, as well as to secure the necessary digital evidence required for a successful prosecution. c. Speed and scale of perpetration The Internet also allows for simultaneous and instantaneous communication en masse; criminals can easily make use of the Internet to target large numbers of victims at the same time, and carry out criminal activities rapidly. d. Easy access to sophisticated cybercrime tools and services The rise of the ‘cybercrime-as-a-service’ model in the cybercrime underground market has lowered the entry barriers into the world of cybercrime. Tools such as malicious software, supporting digital infrastructure, stolen personal data, as well as the means to monetise criminal gains, are now available for purchase or hire as a service. This model allows criminals without much technical expertise to carry out cyber-attacks and other cybercrimes, by acquiring the necessary tools and services, which may be easily available in the cybercrime underground market9. The number and sophistication of cyber-attacks and cybercrimes are likely to grow over time. “Annual survey on infocomm usage by enterprises for 2013.” iDA. <https://www.ida.gov.sg/~/media/Files/Infocomm%20Landscape/Facts%20and%20Figures/SurveyReport/2013/InfocommUsage_Survey%202013% 20public%20report.pdf> 8 “Annual survey on infocomm usage in households and by individuals for 2014.” iDA. <https://www.ida.gov.sg/~/media/Files/Infocomm%20Landscape/Facts%20and%20Figures/SurveyReport/2014/2014%20HH%20public%20report% 20final.pdf> 9 “Cybercrime Exposed: Cybercrime-as-a-Service”. McAfee. <http://www.mcafee.com/sg/resources/white-papers/wp-cybercrime-exposed.pdf> 7 National Cybercrime Action Plan 6 OF 17