http://igcj.jp/Discussion in Japan about
Cyber Security for Digital Economy by Internet
Hiroshi Esaki, Ph.D.,

Professor, The University of Tokyo
Board of Trustee, ISOC
Director, WIDE ProjectVice President, JPNIC
1

10 Basic Key Idea for Security for the Internet
1. Thinking globally, implementing local measures
http://igcj.jp/
2. Respecting "practice principle", than "fundamentalism “
3. Instead of restriction or enforcement, supporting the improvement ofactivities
4. "overprotection " causes rather the increase of risk
5. Instead of "to be enforced by someone" , aiming "want to do"
6. Security measures is the investment to quality improvement {and forthe future society}
7. Sharing , i.e., open and transparent, of experience and knowledge ofeveryone
8. Protecting and supporting the person, who experiences cyber security
incident, as a "victim " rather than “bad guy”
9. Preservation of "anonymity " and protection of “privacy”
10. Firstly self-help, next mutual assistance, finally public assistance10 Basic Key Idea for Security for the Internet
1. Thinking globally, implementing local measures
http://igcj.jp/
2. Respecting "practice principle", than "fundamentalism “
3. Instead of restriction or enforcement, supporting the improvement ofactivities
4. "overprotection " causes rather the increase of risk
5. Instead of "to be enforced by someone" , aiming "want to do"
6. Security measures is the investment to quality improvement {and forthe future society}
7. Sharing , i.e., open and transparent, of experience and knowledge ofeveryone
8. Protecting and supporting the person, who experiences cyber security
incident, as a "victim " rather than “bad guy”
9. Preservation of "anonymity " and protection of “privacy”
10. Firstly self-help, next mutual assistance, finally public assistance

1. Thinking globally, implementing local
measures2.Respecting "practice principle",than "fundamentalism “

10 Basic Key Idea for Security for the Internet
1. Thinking globally, implementing local measures
http://igcj.jp/
2. Respecting "practice principle", than "fundamentalism “
3. Instead of restriction or enforcement, supporting the improvement ofactivities
4. "overprotection " causes rather the increase of risk
5. Instead of "to be enforced by someone" , aiming "want to do"
6. Security measures is the investment to quality improvement {and forthe future society}
7. Sharing , i.e., open and transparent, of experience and knowledge ofeveryone
8. Protecting and supporting the person, who experiences cyber security
incident, as a "victim " rather than “bad guy”
9. Preservation of "anonymity " and protection of “privacy”
10. Firstly self-help, next mutual assistance, finally public assistance

3. Instead of restriction orenforcement, supporting theimprovement of activities

4. "overprotection " causes ratherthe increase of risk

10 Basic Key Idea for Security for the Internet
Thinking globally, implementing local measures
5.1.2. Insteadof"tobeenforcedby
http://igcj.jp/
Respecting "practice principle", than "fundamentalism “
3. Instead of restriction or enforcement, supporting the improvement ofsomeone",aiming"wanttodo"
activities
4. "overprotection " causes rather the increase of risk
5. Instead of "to be enforced by someone" , aiming "want to do"
6. Security measures is the investment to quality improvement {and forthe future society}
7. Sharing , i.e., open and transparent, of experience and knowledge ofeveryone
8. Protecting and supporting the person, who experiences cyber security
incident, as a "victim " rather than “bad guy”
9. Preservation of "anonymity " and protection of “privacy”
10. Firstly self-help, next mutual assistance, finally public assistance

6. Security measures is theinvestment to quality
improvement {and for the futuresociety}10 Basic Key Idea for Security for the Internet
Thinking globally, implementing local measures
7.1.2. Sharing,i.e.,
openandtransparent,
http://igcj.jp/
Respecting "practice principle", than "fundamentalism “
3. Instead of restriction or enforcement, supporting the improvement ofofexperienceandknowledgeofactivities
4. "overprotection " causes rather the increase of risk
everyone
5. Instead of "to be enforced by someone" , aiming "want to do"
6. Security measures is the investment to quality improvement {and forthe future society}
7. Sharing , i.e., open and transparent, of experience and knowledge ofeveryone
8. Protecting and supporting the person, who experiences cyber security
incident, as a "victim " rather than “bad guy”
9. Preservation of "anonymity " and protection of “privacy”
10. Firstly self-help, next mutual assistance, finally public assistance

8. Protecting and supporting theperson, who experiences cybersecurity incident, as a "victim "rather than “bad guy”

10 Basic Key Idea for Security for the Internet
1. Thinking globally, implementing local measures
http://igcj.jp/
2. Respecting "practice principle", than "fundamentalism “
3. Instead of restriction or enforcement, supporting the improvement ofactivities
4. "overprotection " causes rather the increase of risk
5. Instead of "to be enforced by someone" , aiming "want to do"
6. Security measures is the investment to quality improvement {and forthe future society}
7. Sharing , i.e., open and transparent, of experience and knowledge ofeveryone
8. Protecting and supporting the person, who experiences cyber security
incident, as a "victim " rather than “bad guy”
9. Preservation of "anonymity " and protection of “privacy”
10. Firstly self-help, next mutual assistance, finally public assistance

9. Preservation of "anonymity " andprotection of “privacy”

10. Firstly self-help, next mutualassistance, finally public assistance◆ How to make an intension to invest on Cybersecurity ?
✓ Does not improve business profit, and no benefit when there is noincident.
✓ Too strict rule/regulation degrades productivity/efficiency……..
✓ OK, let’s disconnect our system from the Internet !!
Think to find produce profit by {Big} Data and functions
generated by cybersecurity system, as a gift !!!

Economy without Moral/Ethics is Crime,
Moral/Ethics without Economy is Silly Talk
by Mr.Sontoku Ninomiya (二宮尊徳)

OSCON 2002
< Free Culture >by Lawrence Lessig(Stanford Univ.)July 24, 2002

1. Creativity and Innovation always builds on
the past (創造とイノベーションは常に過去の上に築かれる)
2. The past always tries to control thecreativity that builds on it (過去は常にその上に創造されたものと支配しようとする)
3. Free societies enable the future by limiting
the past (自由な社会はこの過去の力を制限することで未来を可能にする)
4. Ours is less and less a free society (我々の社会は、日々自由を失っていく)• 1774 Born the “Free culture”– Donaldson versus Backett trial ➔ stop
copyright“Shakespeare is free”– 1710 Statute of Anne limited term 14years– 1740s Scottish publishers reprint classis➔ London publishers said “copyright isforever”“old patentees and monopolizers in thetrade of bookselling, men who do notlabour in an honest profession to learning
is indetted”.

• 1790 in USA– Unregulated creativity,exception was “printing”, regulated for 14years
著作権法は、印刷物のみに適用され、派生作品には適用されず。 14年間印刷物にのみ適用。

• 1928 Walt Disney……
– Steamboat Willie (Micky Mouse) stole (i.e., rip,mix, burn) Buster Keaton “Steamboat Bill Jr.”
– “Always parroting the feature length
mainstream films”

• ピノキオ• シンデレラ• 不思議の国のアリス• 海底2万マイル• 眠れる森の美女• 海賊船• ジャングルブック• リトルマーメード• 美女と野獣• ノートルダムの鐘

Brothers Brim
(グリム童話)was free code
as commons

••
•
•
•••
•
•
•

1790 : 14 years
1804 : 28 years
1831 : 42 years
1909 : 56 years
1962 : 59 years
1965 : 61 years
1967 : 63 years
1968 : 64 years
1967 : 63 years
1968 : 64 years• 1969 : 65 years• 1970 : 66 years• 1971 : 67 years• 1972 : 68 years• 1973 : 69 years• 1974 : 70 years•••• 1998 : 95 years• No one can do to Disney, Inc. what Walt
Disney did the Brothers Grim…..

2000s……
• Regulations– “publishing” to “copying”– “copies” to “derivative works”– “14 years” to “life + 70 years”– “opaque” creativity…….
== can protect from exposure of proprietary intell’s .

(*) Fair-use vs unregulated (i.e., free)Unregulated…
• Read• Give• Sell• Sleep• Regulation• Only on ”publishing”• Three camps;• Unregulated• Regulated, aka fair use• Copyright, aka protectedProprietaryvsFree/Open

Bill Gates (1)• 今日使われているアイデアを考案した人々が、特許はどのように許可されているかを知り、特許を取得していたとしたら、今頃この業界は、完全に行き詰まっていたに違いない。

Bill Gates (2)• 我々取るべき戦略は、所得できる限りの特許を取得することだ。 独自の特許を持たない将来の新進企業は、先行する巨人たちの課すどんな対価でも払わざるを得ない。 価格は高くなるだろう。
すでに、確立された企業には、未来の競争相手を排除する理由がある。
• 「未来の競争相手を排除する」 (excluding futurecompetitors)

Patents and copyrights<< concerning >>• Excluding the future “competitor”➔ Reducing the possibility of future “innovation”<< object>>encourage of disclosure of proprietary intells.
<< implementation >>protect/regulate for certain period, then go tofree/common pool

P2P discussion• P2P system circulated 5 times (500 %) larger
volumes than CDs.
• Reduce of sales volume was 5 %500% growth vs 5% reduce1. Creativity and Innovation always builds on
the past (創造とイノベーションは常に過去の上に築かれる)
2. The past always tries to control thecreativity that builds on it (過去は常にその上に創造されたものと支配しようとする)
3. Free societies enable the future by limiting
the past (自由な社会はこの過去の力を制限することで未来を可能にする)
4. Ours is less and less a free society (我々の社会は、日々自由を失っていく)