助成Institute forInternational Policy Studies・Tokyo・IIPS International Conference“The IT Revolution and Security Challenges”
TokyoDecember 10-11, 2002

THE IT REVOLUTION AND SECURITY CHALLENGES
On 10-11 December 2002, the Institute forInternational Policy Studies (IIPS) hosted aninternational conference and symposium
entitled “The IT Revolution and Security
Challenges” (co-sponsored by the Nippon
Foundation) at the ANA Hotel Tokyo. The
conference followed on from the IIPS
conference entitled “The IT revolution:
Challenges from innovation in information andcommunication technology and the role ofgovernment,” which had been held the previousyear.
As the IT revolution continues to advance and as our societies and economies become
increasingly reliant on information technology, risks to security posed by the use of thistechnology have begun to appear. Numerous issues have arisen in this connection; forexample, there are growing concerns about whether the right balance is being struck between
insuring the security of society and the individual’s right to privacy, and about the danger ofhackers breaching financial IT systems, suchas those used in e-commerce. In addition, forthe sake of national security there is now aclear necessity for a unified response tocyber-terrorism from government and theprivate sector. In recognition of these risks,
and in the knowledge that insuring thesecurity of society is an even greater priority
in a post-9/11 world, this year’s conference
and symposium consisted of comprehensive
discussion from an international perspectiveon the IT revolution and attendant security
issues.
The first session, entitled “IT and Securityof Society” and moderated by Taizo
Yakushiji (research director of IIPS), saw
reports from four panelists. First, Professor
Shigeo Tsujii of the Chuo University Facultyof Science and Engineering, explained therole of encryption in security, in the context
of the growing freedom and convenienceoffered by information technology.
Professor Doug Tygar of the University ofCalifornia, Berkeley, discussed theimportance of an architecture for handlingpersonal information and the best methods
for disclosing information, as well as various other technologies that could resolve theconflict of interests between privacy and national security. Dieter Gollmann of Microsoft1

Research in the UK described problems with end-user systems related to the IT revolution
and the importance of user education and new policies. Finally, Mr Kim Hong-Sun, CEO ofSecureSoft in Korea, examined the evolution of information security technology and theconflict between this technology and national security, as well as the importance of building
an IT culture, citing examples drawn from Korea’s rapid integration of IT into society and theaccompanying business developments.
In the discussions that followed, it was notedthat a distinction needs to be made between
national security and information security. It wasalso suggested that Japan invest more in researchon information ownership and the separation ofsupervisory functions so as to prevent privacy
violations. Further to the issue of privacy, it waspointed out that, if countries are to be able to work
together despite the fact that the culturaldifferences between them suggest radicallydifferent responses to the issue, approaches thattake account of these differences must be formulated.
The second session, “TheTransformation of National Security andCyber Terrorism” (moderated by
Ryukichi Imai, distinguished research
fellow of IIPS), featured presentations
from three panelists. Raisuke Miyawaki,
first cabinet media spokesperson,commented on the quantifiably increased
menace that marks a new phase in cyberterror, and the emergence of virulent
computer viruses. Olivia Bosch, visiting
fellow at the International Institute forStrategic Studies in the UK, noted that
responses to cyber-risk are being
developed around the world, and explained the importance of appropriate government andcorporate responses to potential cyber-war. Finally, James Lewis, director for technology
policy at the Center Strategic andInternational Studies in the US, describedcyber-terrorism as a national security
issue, and explained the differences
between critical infrastructure systems
and computer networks in terms of theirlevels of vulnerability.
The subsequent discussion was lively,
and suggestions included leveraging
experience gained in dealing with theMillennium Bug and the importance ofinternational cooperation, as well as aproposal to establish a cyber-defense2alliance (CDA) of democratic countries, styled along the lines of NATO. Regarding Japan’spreparedness, comments ranged from the importance of a system able to interact with aputative CDA, to a possible change from a perception of cyber-security as a technology issue
to something more akin to the United States’ view of the problem, as one of national security.
Other suggestions included the development of technology to counter cyber-terrorism.
The third and final session (moderated byShinzo Kobori, distinguished research fellow
at IIPS) was entitled “e-Commerce andStability of Financial and EconomicSystems” and saw comment from threepanelists. Mitsuru Iwamura, professor at theGraduate School of Asia-Pacific Studies,
Waseda University, pointed out the risks
inherent in a situation where one operating
system holds a monopoly of the market, andthe difficulties in regulating cross-border ecommerce. Antoin O Lachtnain, founder ofDigital Messenger in Ireland, explained thevarious ways to attack information systems, as well as actions to counter these. While there isno perfect defense, the presenter noted that it was important to develop technologicalresponses that took care to balance privacy,
convenience, and cost concerns. The final
panelist, Michael Yap, CEO of Commerce
Exchange in Singapore, commented on thenew risks to e-commerce systems posed bytechnological innovation and increased
accessibility, and the necessity for
management to take a proactive stance on thisissue and to balance the risk of hacking withthe cost of security. He went on torecommend coordinated action between
government, management, and technicians.
Delegates then discussed, from various
perspectives, their concerns about a single operating system occupying such a large share of
the market. It was also noted that, as risk
grows with the use of new technology, there
are problems with endeavoring to control thisthrough technological and systemic means,
and that there are also trade-offs between
security and convenience, and between
security and privacy.
In the symposium following these
discussions, moderator Yoshio Okawara,
President of IIPS, led Professor Doug Tygar,
Mr Raisuke Miyawaki and Professor Mitsuru
Iwamura in reporting the proceedings of eachof the preceding sessions.

3

The discussion was then opened to the otherpanelists and the floor. In the ensuing
discussion, participants pointed out that adistinction should be made between national
security and computer security, and that a
global network is being laid on top of various
systems, cultures, and histories. As such,government policies should take into
consideration the differences found inapproaches to security and privacy. As key
national infrastructure is increasingly operated
by the private sector, it becomes that much
more necessary to formulate policy aimed at building a system to insure that thisinfrastructure is run effectively. Other views expressed were: that by providing infrastructure
for electronic government, governments strengthen their own role as players; that there is aneed to secure personnel and funding, and to make organizational improvements in order toincrease information security; and that education is important in heightening awareness ofsecurity as a cultural issue.

4