NATO Cooperative Cyber Defence
Centre of Excellence Tallinn, Estonia

08 June 2012

CyCon brought together 400 experts of law, IT and policy

CyCon 2012, a cyber conflict conference organised by the NATO Cooperative Cyber Defence Centre of Excellence brought together 400 participants from 39 countries. The event stretched over 4 days with the workshops on the conference pre-day and the main event taking place from 6-8 June.

Opening speeches on the first day by MG Jaap Willemse from NATO ACT and Dr Rain Ottis from NATO CCD COE raised questions about offensive capabilities in cyberspace and the future of cyber conflict. Both speakers agreed that nations need red team capability to test the resiliency of their networks and organisations in a non-conventional situation. Later talks by Frédéric Dreier and Kenneth Geers confirmed the necessity since technical exercises need strong red teams to do feasible attacks against the blue teams.

Forrest Hare took a novel approach to attribution and deterrence in his speech. He suggested that in the end, attribution is a political decision not a legal concept and moreover, attribution is not always required to coerce the adversary. Technical Track also devoted fair amount of time to the attribution issue. Attribution is hard because of the nature of attacks, which tend to have several stages and the whole attack is spread over a long period of time. It is of no help either that the Internet is governed by multiple jurisdictions so international cooperation is necessary but often lacking.

Another key issue in the realm of cyber security is the transition to IPv6 which was extensively covered by Dr Latif Ladid. More and more technology gets connected to the Internet and new addressing system has to be used. This, on the other hand, brings about many new vulnerabilities and the need for increased competence in device and network designers and managers.

Technical Track also bounced news and ideas on case studies on botnets and a cyber attack case study by Symantec. Mario Golling from the Munich University summarised key trends in computer network attacks based on regular research. He emphasised that while sophistication of malware is rising, attackers need less skills to perform malicious activities. New developments that pose risks to computer security include the rise of number of smartphones, cloud computing and encryption tools used by the attackers.

Law and Policy Track covered a wide array of questions, discussing the threshold and intensity of a cyber conflict, if and when is it appropriate to exercise the Law of Armed Conflict, what is an armed attack in cyberspace, under which circumstances can a cyber attack trigger lawful self-defence measures. Professor Michael N. Schmitt introduced the work done by a group of experts with a goal to develop authoritative reference on the international law applicable to cyber conflict. The Tallinn Manual or Manual on International Law Applicable to Cyber Warfare will be published in 2013.

Professor Schmitt also gave his overview of the notion of an attack. Some of the key points he stressed was the idea that even an attack that includes delayed effects is an attack and that severity of consequences is always the key. At the same time, the notion of status of the target as the key is slowly fading away.

Popular talks in the Strategy Breakout Session discussed cyber defence through a conventional military prism, raising questions on the effects, persistence and target attributes of cyber attacks. An informative talk on cyber capabilities in Iran by Jeff Bardin packed the room full of conference participants to receive an introduction to different groups in Iran involved in hacking activities, training and education and covert operations. Keir Giles' great talk on Russia's stance on information warfare was another highlight of the session. One of his main conclusions was that the ideas floated by Russia in international information sphere are essentially not new but are increasingly being followed by a significant number of like-minded nations.

Last day in the Strategy Breakout Session a tabletop exercise, orchestrated by Colonel Timothy Evans from the Maryland National Guard, took place. The exercise featured a number of distinguished experts and practitioners on cyber security, (inter)national security and law. The fictitious scenario included cooperation between intelligence agencies and law enforcement agencies, international cooperation among like-minded and not so like-minded countries, attribution, internal and international crisis communication and public-private partnership.

In one of the final talks of the conference, President of Estonia Toomas Hendrik Ilves expressed his pleasure over the fact that Estonia is no longer a lone voice in discussing cyber security at the international level as there are capitals stressing the importance of the issue all over the world. However, there seems to be a lack of strategic awareness in Brussels - NATO and EU seem to be lagging behind their member states

CyCon 2012 was supported by IEEE, Cisco, Gamma International and Microsoft.

CyCon 2013 will concentrate on automated decision making systems. The call for papers will be announced in autumn 2012.

Additional information:
Kristiina Pennar
Public Relations
+372 7176 811

04 April 2014 CyCon Student Call for Papers Deadline Extended
25 March 2014 JFC Brunssum Commander Visited the Centre
24 March 2014 CyCon 2014 Registration is Now Open
14 March 2014 CyCon 2014 Agenda Revealed
11 March 2014 Update to the National Cyber Strategies List
25 February 2014 New Publications
21 February 2014 Call for Student Papers Announced for CyCon
20 February 2014 Course Guide for 2014 Published
19 February 2014 The Centre Has Launched a New Article Series
17 February 2014 Workshop on Low Intensity Cyber Operations
27 January 2014 Supreme Commander of the Swedish Armed Forces Visited the Centre
23 January 2014 The Centre Signs a Cooperation Agreement with the Estonian Defence League
13 January 2014 Peacetime Regime Book Out in Print
09 January 2014 CyCon 2013 and Ethics Workshop Videos Available
20 December 2013 New Book: Peacetime Regime for State Activities in Cyberspace
12 December 2013 Chief of Finnish Defence Forces Visited the Centre
09 December 2013 Holiday Greeting
27 November 2013 High Level NATO Officials Visited the Centre
19 November 2013 Analysis on the Cyber Defence Unit of the Estonian Defence League Published
11 November 2013 New Cyber Security Status Watch Report Published
11 November 2013 Ethics Workshop Agenda Published
04 November 2013 Warning: Spoofed e-mail Circulating
31 October 2013 Registration Deadline for the Ethics Seminar Extended
21 October 2013 The Centre Signed a Cooperation Agreement with CODE
17 October 2013 Registration Deadline Approaching for the Workshop on Ethics
14 October 2013 Chief of British Armed Forces Visited the Centre
11 October 2013 Finland Aims to Become Centre’s Contributing Participant
11 October 2013 Locked Shields After Action Report Published
09 October 2013 Internship Opportunities in the R&D Branch
30 September 2013 New Version of the Awareness e-course Now Available
06 August 2013 Registration is Open for the Workshop on Ethics
06 August 2013 New Cyber Security Status Watch Report Available
15 July 2013 Paper on Confidence Building Measures for Cyberspace Published
12 June 2013 New Cyber Security Status Watch Report Published
10 June 2013 CyCon 2014 Call for Papers
04 June 2013 International Conference on Cyber Conflict Starts Tomorrow
22 May 2013 CyCon Registration Closed
09 May 2013 Four Legal Experts Appointed as Centre’s Senior Fellows
26 April 2013 NATO Team Wins the Locked Shields Cyber Defence Exercise
24 April 2013 International Cyber Defence Exercise Begins Today
22 April 2013 Public Lecture on the Tallinn Manual
08 April 2013 CyCon 2013 Agenda Published
01 April 2013 Liaison Established with the European Defence Agency
13 March 2013 Registration Opens for the International Law of Cyber Operations Seminar
07 March 2013 USCYBERCOM Commander to Deliver a Keynote at CyCon
05 March 2013 Tallinn Manual Book Presentations
28 February 2013 National Cyber Security Framework Manual Book Launch
25 February 2013 New Cyber Security Status Watch Report Published
06 February 2013 Registration is now open for CyCon 2013
22 January 2013 David Cameron Announced UK’s Plans to Join the Centre
11 January 2013 France Will Join the Centre in 2013
08 January 2013 Comparative Analysis of Open-Source Log Management Solutions Published
03 January 2013 CyCon 2012 Proceedings Available for Download
18 December 2012 Christmas Greeting
07 December 2012 National Cyber Security Framework Manual Published
06 December 2012 Conficker Study Published
21 November 2012 Article Style Guide Published for CyCon 2013
06 November 2012 DSACEUR Visits the Centre
05 November 2012 Botnet Study Published
27 September 2012 Call for Papers Announced for CyCon 2013
03 September 2012 Draft of the Tallinn Manual Published Online
13 August 2012 Workshop on National Cyber Security Framework
16 July 2012 Change of Command
26 June 2012 Cyber Defence Awareness e-course now available
08 June 2012 CyCon brought together 400 experts of law, IT and policy
05 June 2012 Experts gather in Tallinn for the conference on cyber conflict
23 May 2012 Locked Shields video published
16 May 2012 CyCon 2012 is fully booked
05 April 2012 The Netherlands joins the Centre
02 April 2012 Last free slots for the training courses
26 March 2012 International Cyber Defence Exercise Locked Shields 2012 Begins Today
27 February 2012 Registration opens for CyCon 2012
23 January 2012 ICCC Proceedings Available for Download
19 January 2012 NATO Secretary General Visits the Centre
20 December 2011 Christmas Greeting
05 December 2011 CyCon Abstract Submission Date Changed
18 November 2011 Flag Ceremony Photos
17 November 2011 Centre Welcomes Two New Members
16 November 2011 Poland and USA join the Centre
10 November 2011 Call for Papers announced for CyCon 2012
23 September 2011 Few Seats Available in the Security Events Managing Course
21 September 2011 Lieutenant General Walter E. Gaskin visits the Centre
14 September 2011 Registration is open for Cyber Defence Monitoring Solutions Course
31 August 2011 Registration is open for the IT Systems Attack and Defence Course
23 August 2011 Registration is open for the Botnet Infiltration Training
07 July 2011 Miller's keynote video available
05 July 2011 New book available for download
01 July 2011 Langner's ICCC video available
13 June 2011 The Third International Conference on Cyber Conflict brought together 380 experts from across the world
01 June 2011 3rd International Conference on Cyber Conflict to Analyse the Nature of Cyber Forces
27 May 2011 President of Croatia visits the Centre
16 May 2011 General Stéphane Abrial visits the Centre
26 April 2011 3rd International Conference on Cyber Conflict Agenda available
18 February 2011 Agenda Available for the Joint Workshop on Countering Botnets
09 February 2011 Registration Opens for Spring Courses
03 February 2011 NATO Assistant Secretary General Gábor Iklódy visits the Centre
25 January 2011 New Publication from the Legal and Policy Branch
04 January 2011 Joint Workshop with ENISA on Countering Botnets
14 December 2010 Sikorski: Poland will join the Centre in 2011
24 November 2010 IEEE to Sponsor CCDCOE’s Conference in 2011
23 November 2010 CCD COE supports NATO's ''Cyber Coalition 2010''
22 October 2010 Call for Papers opens for the 3rd International Conference on Cyber Conflict
19 October 2010 CCD COE and ACT host “NATO in the Cyber Commons” Workshop
24 September 2010 IT systems attacks and defence course held in December
25 August 2010 CCDCOE Organises Two Technical Courses in September
15 July 2010 SACEUR Visits the Centre
23 June 2010 Hungary Joins the Centre
16 June 2010 President Ilves Opens Conference on Cyber Conflict
11 June 2010 Peter Flory to give an Ending Keynote at the Conference
24 May 2010 Melissa Hathaway confirmed as a keynote speaker at the Conference
03 May 2010 Baltic Cyber Shield to train technical skills for countering cyber attacks
16 March 2010 Registration Opens for the 2010 Conference on Cyber Conflict
12 February 2010 Cooperative Cyber Defence Centre of Excellence to hold Conference on Cyber Conflict
11 January 2010 Symantec and Cyber Defence Centre of Excellence Experts to Research Online Threats
05 November 2009 CCDCOE signs agreement with SEB
29 October 2009 Call for Papers for the 2010 Conference is now open
09 September 2009 President of Estonia opened International Cyber Conflict Legal and Policy Conference
24 August 2009 Visit of Austrian Minister of Foreign Affairs
03 August 2009 Registration for Cyber Conflict Policy and Legal Conference open
17 June 2009 Estonian Minister of Defence opened the Conference on Cyber Warfare
09 June 2009 German Minister of Defence visit
28 May 2009 Steering Committee Gathered in Tallinn
05 May 2009 King of Spain Juan Carlos visit
01 April 2009 Cyber Warfare Conference Agenda Published
31 March 2009 Estonian, Latvian and Lithuanian Defence Committees visit
19 March 2009 Deputy Director of NCSA, Major General Nikolaos Ioannou-Sioutas, visit
06 March 2009 UK House of Commons Defence Committee visit
09 January 2009 Call for Papers on Cyber Warfare
06 January 2009 President of Estonia visit
09 December 2008 Estonian-Swedish Cyber Defence exercise was won by students of the Tallinn Technology University
09 December 2008 Estonian National Defence Committee visit
28 October 2008 CCD COE is the first International Military Organization hosted by Estonia