IGF2023
CSIRTs: A Global Dialogue
with Cyber Incident Responders

JPCERT Coordination Center

Agenda1. Introduction⚫ What CERT (CSIRT) is⚫ Myself and JPCERT/CC

2. Our sessions⚫ Workshop #396
⚫ Background, and Speakers⚫ Networking Session #44⚫ Outline, and Organisers

3. Other sessions2© 2023 JPCERT/CCCERT(CSIRT)
Computer Emergency Response Team as fire fighters

3Prevention

AlertOperation

Teach how to prevent a fire

Raise awareness andalerts on fire

Extinguish and rescue

Vulnerability Handling

Analyse/Share

Incident handling

Announce security measures
and workarounds

Publish observation results
and attack analysis

Solve ongoing incidents andliaise with relevant parties© 2023 JPCERT/CC

Who I amMasa Toyama, Liaison officer at JPCERT/CC— Coordinates and supports communication amongst
CERTs/CSIRT communities in the Asia pacific region
Serves as APCERT Secretariat— Introduces the IG discussions to Japanese technicalcommunity
Published blog articles
Participated IGF 2021 and 2022

4

© 2023 JPCERT/CC

JPCERT/CC
Japan Computer Emergency Response Team / Coordination
Center (JPCERT/CC)— Operate as a “Point of Contact” to equivalent organisations(CERT/CSIRT) in many countries— Is a non-profit organisation, funded by METI
— Have partnership with NISC under the cabinet— Target Internet users in Japan, cyber security personnel,software developers etc.
— Work to improve cyber security posture in Japan
Handle computer security incidents
Gather/Analyse cyber security information
Coordinate software / information system vulnerabilities
5© 2023 JPCERT/CC

JPCERT/CC - Incident Handling Flow
•Victim organisations•Security vendors•Foreign counterparts, etc.
14Incident Report
Request for countermeasure
23•Internet/Application ServiceProviders•System administrators•CSIRTs, etc.
6

© 2023 JPCERT/CCFeedback
Countermeasure
Response

JPCERT/CC - Response statistics
Incident Statistics
Number of Incident Reports

Abuse Statistics (2023 Jan-Mar)

58,38943,823 44,242
15,751 18,070
2018

7

2019

© 2023 JPCERT/CC

2020

2021

2022

https://www.jpcert.or.jp/english/doc/IR_Report2022Q4_en.pdf

CSIRT Community

FIRST ― Forum of Incident
Response and Security Teams

APCERT ― Asia Pacific Computer
Emergency Response Team

◼ JPCERT/CC is the first member from ◼ JPCERT/CC is a founding member,Japana Steering Committee member, and◼ 4 JPCERT/CC members have
the Secretariat
served as FIRST board member+ AfricaCERT, OIC-CERT, TF-CSIRT etc.
8

© 2023 JPCERT/CCFIRST Membershiphttps://www.first.org/members/map
9© 2023 JPCERT/CC

APCERT Operational Members
Mongolia
MNCERT/CC, MonCIRT

People's Republic of China
CNCERT/CC, CCERT

Republic of Korea
KrCERT/CC, KN-CERT
Japan
JPCERT/CC

BhutanBtCIRT

Chinese Taipei
TWNCERT, TWCERT/CC

Bangladesh
bdCERT, BGD e-Gov CIRT

Hong Kong, China
HKCERT, GovCERT.HK

MyanmarmmCERT

Macau, China
MOCERTIndia
CERT-In

Philippines
CERT-PH

Lao People's Democratic Republic
LaoCERT
Sri Lanka
Sri Lanka CERT|CC, TechCERTThailand
ThaiCERT
VietnamVNCERT/CC
Malaysia
CyberSecurity Malaysia
Singapore
SingCERT
10

Operational Members© 2023 JPCERT/CC

Brunei Darussalam
BruCERT
Indonesia
ID-SIRTII/CC, ID-CERT
Tonga
CERT Tonga
Vanuatu
CERT VU
Australia
ACSC, AusCERTNew Zealand
CERT NZJPCERT/CC’s sessions
CSIRTs: A Global Dialogue
with Cyber Incident Responders— Workshop, seated— Day 2: Tuesday 10 October— 8:30-9:30 am

Meeting Spot for CSIRT Practitioners— Networking Session, standing— Day 1: Monday 9 October— 8:30-9:30 am

15© 2023 JPCERT/CC

Don’t
miss out!

CSIRTs: A Global Dialogue
with Cyber Incident Responders
Workshop #396 @IGF2023

Background
Background— International CSIRTs collaboration is taking a downturn due to(geo)political issues.
— State-sponsored cyber attacks are on the rise, while governments andmilitary forces cannot provide all cybersecurity measures.
— CSIRT collaboration remains important, especially on ransomware.
— You will have a more realistic understanding of what threats areaffecting cyberspace and what CSIRTs collaboration actually looks like.

17© 2023 JPCERT/CC

Speakers
CSIRT experts to discuss the challenges of collaboration amongst CSIRTs
Organiser: Koichiro Sparky Komiyama— Director of Global Coordination Division, JPCERT/CC
Speaker 1: Masae Toyama— Secretariat of APCERT, JPCERT/CC
Speaker 2: Dr. Serge Droz
— FIRST Board of Directors
Speaker 3: Mr. Jean-Robert Hountomey— Founder of AfricaCERT18© 2023 JPCERT/CC

Meeting Spot for CSIRTPractitioners:
Share Your Experiences
Networking Session #44 @IGF2023

Outline“Speed dating for the cybersecurity professionals”
Target: cybersecurity practitioners and the wider Internet
governance community
3x 10-minute roundAll participants are expected to speak to others in English.
Guiding questions will facilitate the discussion.
Online participants will be in small breakout rooms in Zoom.

20© 2023 JPCERT/CC

Organisers
Facilitators to assist smooth conversations between participants
Organiser: Masa Toyama— Online and onsite moderator, JPCERT/CC
Moderator: Mr. Hiroki Mashiko— NTTDATA-CERT, Private sector
Moderator: Mr. Bernhards Blumbergs— CERT.LV, Government of Latvia
Moderator (online): Mr. Adli Wahid— APNIC, Technical Community

21© 2023 JPCERT/CC

JPCERT/CC’s sessions
CSIRTs: A Global Dialogue
with Cyber Incident Responders— Workshop, seated— Day 2: Tuesday 10 October— 8:30-9:30 am

Meeting Spot for CSIRT Practitioners— Networking Session, standing— Day 1: Monday 9 October— 8:30-9:30 am22

© 2023 JPCERT/CC

Don’t
miss out!

Other sessions
Koichiro Komiyama will join in the following panels as well:
Promoting the Digital Emblem— Open Forum, seated— Organised by ICRC
— Day 2: Tuesday 10 October— 11:00-12:30 am

Building a Global Partnership for Responsible Cyber Behavior— Award, seated— Organised by RUSI in the UK— Day 4: Thursday 12 October— 2:00-3:00 pm23

© 2023 JPCERT/CC