FIGURE 28. CRITICAL INFRASTRUCTURE SECTORS

GUÍA DE
CIBERDEFENSA
ORIENTACIONES PARA EL DISEÑO, PLANEAMIENTO, IMPLANTACIÓN Y DESARROLLO DE UNA CIBERDEFENSA MILITAR
67
Cyber threat landscape and trends
455.
Every year, studies and reports are published, analyzing the cyber threat global landscape
and trends (CCN/CERT
40
, ENISA
41
, Gartner
42
, CheckPoint
43
, FireEye
44
, Kaspersky
45
, among many others. These studies mix cyber threat sources (States, terrorists, hacktivists, etc) with cyber attack types (phishing, DNS attack, etc) and targets (mobile devices, supply chain, fake information, credentials theft, etc) and the information is examined from different points of view.
456.
According to the 2019 “cyber threats and trends report of the Spanish national CERT (CCN-
CERT), the most significant cyber threats on the international context are the States and the groups sponsored by them. Other relevant cyber threats are attacks on the supply chain, actions in cyberspace by terrorist groups, jihadists and hacktivists, fake news, as well as attacks on personal data (with the ultimate aim of committing certain crimes, stealing credentials, phishing or espionage).
457.
The Check Point report (Cyber attack Trends 2019 Mid-Year Report) reflects a different picture, with another point of view, emphasizing the increase of four types of attacks compared to the previous year (software supply chain attacks on the rise, email scams gearing up, attacks against cloud environments, and evolving mobile landscape) and the persistence of three other types of attacks (ransomware, cryptomining
46
and DNS attacks
47
).
458.
All reports are useful but need to be analyzed in a proper perspective. Consequently, it is recommended that each pillar of national cybersecurity (cyber force, police and CSIRTS) prepare its own report on cyber threat landscape and trends based on its own intelligence, potential objectives and analysis of reports from reputable sources of diverse origin and geostrategic positioning.
459.
In any case, it can be confirmed that, currently, the State cyber threat, through special offensive cyber defense units (APTs), is the main threat to contemplate at the national level, as has been publicly recognized by NATO and NATO nations.

Download 2.54 Mb.

Share with your friends: