Estonia after the 2007 cyber attacks: Legal, strategic and organisational changes in cyber security

10th European Conference on Information Warfare and Security 2011, ECIW 2011

Volumn , Issue , 2011, Pages 57-64

  Czosseck, Christian ^a   Ottis, Rain ^a   Talihärm, Anna Maria ^a  

^a Naval Criminal Investigative Service   (Estonia)

Author keywords

Cyber attacks; Estonia; Legal framework; Lessons learned; Organisational changes; Strategy

Indexed keywords

CYBER-ATTACKS; ESTONIA; LEGAL FRAMEWORKS; LESSONS LEARNED; ORGANISATIONAL CHANGE; STRATEGY;

CRIME; INFORMATION TECHNOLOGY; LAWS AND LEGISLATION; MANAGEMENT; SECURITY SYSTEMS; STRATEGIC PLANNING;

SECURITY OF DATA;

EID: 84872945708     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (42)

1. Blomfield, A. (2007). Estonia calls for Nato cyber-terrorism strategy. Retrieved from http://www.telegraph.co.uk/news/worldnews/1551963/Estonia-calls- for-Nato-cyber-terrorism-strategy.html.
2. Brown, D. (2006) "A Proposal for an International Convention to Regulate the Use of Information Systems in Armed Conflict", Harvard International Law Journal, 47 (1), 179-221.
3. CDL. (n.d.). Cyber Defence League. Retrieved from http://www.kaitseliit. ee/index.php?op=body&cat-id=395.
4. Council of Europe. (2001). Convention on Cybercrime. Retrieved from http://conventions.coe.int/treaty/en/treaties/html/185.htm.
5. Council of Europe. (2005). Council Framework Decision 2005/222/JHA of 24 February 2005 on attacks against information systems. Official Journal L 69, 67-71.
6. Denning, D. E. (2001). Activism, hacktivism, and cyberterrorism: the internet as a tool for influencing foreign policy. Networks and netwars: The future of terror, crime, and militancy, 239-288.
7. Ellis, B. (2001) "The International Legal Implications and Limitations of Information Warfare: What Are Our Options?". Retrieved Mar. 2, 2011 from http://www.iwar.org.uk/law/resources/iwlaw/Ellis-B-W-01.pdf.
8. ENISA. (2010). EU Cyber Security Exercise 'Cyber Europe 2010'. Retrieved January 31, 2011, from http://www.enisa.europa.eu/media/press-releases/cyber- europe-20102019-cyber-security-exercise-with-320-2018incidents2019-successfully- concluded.
9. Estonian Government. (2007a). Programme of the Coalition for 2007-2011.
10. Estonian Government. (2007b). Explanatory Memorandum to the Draft Act on the Amendment of the Penal Code (116 SE) (In Estonian). Retrieved from http://www.riigikogu.ee/?page=pub-file&op=emsplain&content-type= application/msword&u=20090902161440&file-id=198499&file-name=KarS seletuskiri(167).doc&file-sise=66048&mnsensk=166+SE&etapp=03.12. 2007&fd=29.10.2008.
11. Estonian Government. (2009). Valitsus kiitis heaks küberjulgeoleku strateegia rakendusplaani aastateks 2009-2011. Retrieved from http://uudisvoog.postimees.ee/?DATE=20090514&ID=204872.
12. Estonian Government. (2010). Explanatory Memorandum to the Act amending the Electronic Communications Act (424 SE) (In Estonian). Retrieved from http://www.riigikogu.ee/?page=pub-file&op=emsplain&content-type= application/msword&file-id=535868&file-name= elektroonilisesidemuutmineseletuskiri(424).doc&file-size=31650&mnsensk= 424+SE&fd=.
13. Evron, G. (2008). Battling botnets and online mobs: Estonia's defense efforts during the internet war. Georgetown Journal of International Affairs, 9(1), 121-126.
14. Farivar, C. (2009). A Brief Examination of Media Coverage of Cyberattacks (2007 - Present). In C. Czosseck & K. Geers (Eds.), The Virtual Battlefield: Perspectives on Cyber warfare (pp. 182-188). IOS Press.
15. Geers, K. (2010). Live Fire Exercise: Preparing for Cyber War. Journal of Homeland Security and Emergency Management, 7(1).
16. Hyacinthe, B. (2009). Cyber Warriors at War. Xlibris, pp. 82-85.
17. rd International Conference on Information Warfare and Security (pp. 206-207). Academic Conferences Limited.
18. Kash, W. (2008). Lessons from the cyberattacks on Estonia. Retrieved from http://gcn.com/articles/2008/06/13/lauri-almann-lessons-from-the-cyberattacks- on-estonia.aspx.
19. Kaska, K., Talihärm, A.-M., & Tikk, E. (2010). Building a Comprehensive Approach to Cyber Security. CCD COE Publications.
20. Landler, M., & Markoff, J. (2007). In Estonia, what may be the first war in cyberspace. The New York Times. Retrieved from http://www.nytimes.com/ 2007/05/28/business/worldbusiness/28iht-cyberwar.4.5901141.html.
21. Lemay, A., Fernandeza, J. M., & Knight, S. (2010). Pinprick attacks, a lesser included case? In C. Czosseck & K. Podins (Eds.), Conference on Cyber Conflict Proceedings (pp. 183-194). Tallinn: CCD COE Publications.
22. Liles, S. (2010). Cyber Warfare: As a form of low-intensity conflict and insurgency. In C. Czosseck & K. Podins (Eds.), Conference on Cyber Conflict Proceedings (pp. 47-57). Tallinn: CCD COE Publications.
23. MoD. (2004). National Security Concept of the Republic of Estonia.
24. MoD. (2008). Cyber Security Strategy. Retrieved from http://www.mod.gov. ee/files/kmin/img/files/Kuberjulgeoleku-strateegia-2008-2013-ENG.pdf.
25. MoD. (2010). NATIONAL SECURITY CONCEPT. Retrieved from http://www.kmin.ee/files/kmin/nodes/9470-National-Security-Concept-of-Estonia. pdf.
26. MoEAC. (2006). Estonian Information Society Strategy 2013. Retrieved from http://www.riso.ee/en/system/files/EstonianInformationSocietyStrategy2013.pdf.
27. MoEAC. (2007). Implementation Plan 2007-2008 of the Estonian Information Society Strategy.
28. MoEAC. (2009). Statute for the Development of National Information System (in Estonian). Retrieved from https://www.riigiteataja.ee/akt/13219897.
29. MoFA. (2010a). Estonia Supports Council of Europe in Fight Against Cyber Crime. Retrieved from http://www.vm.ee/?q=en/node/9315.
30. MoFA. (2010b). Foreign Minister Paet Invited EU and Southeast Asian Nations to Co-operate in Backing Cyber Defence. Retrieved from http://www.vm.ee/?q=en/node/9512.
31. MoFA. (2010c). National Experts Shared Cyber Security Recommendations with UN Secretary General. Retrieved from http://www.vm.ee/?q=en/node/9722.
32. MoI. (2009). Estonian Emergency Act (unofficial translation). Retrieved January 4, 2011, from http://www.legaltext.ee/et/andmebaas/tekst.asp?loc= text&dok=XXXXX26&keel=en&pg=1&ptyyp=RT&tyyp=X&query= h□daolukorra.
33. MoI. (n.d.). Ministry of the Interior, Department of crisis management and rescue policy (in Estonian). Retrieved January 4, 2011, from http://www.siseministeerium.ee/elutahtsad-valdkonnad-ja-teenused-2.
34. MoJ. (2010a). Guidelines for Development of Criminal Policy until 2018. Retrieved from http://www.just.ee/arengusuunad2018.
35. MoJ. (2010b). Estonian Code of Criminal Procedure (unofficial translation). Retrieved from http://www.legaltext.ee/text/en/X60027K6.htm.
36. NATO. (2010). Strategic Concept for the Defence and Security of the Members of the NATO. Retrieved December 30, 2010, from http://www.nato.int/cps/ en/natolive/official-texts-68580.htm.
37. Nazario, J. (2007). Estonian DDoS Attacks - A summary to date. Retrieved from http://asert.arbornetworks.com/2007/05/estonian-ddos-attacks-a-summary-to- date/.
38. Nazario, J. (2009). Politically Motivated Denial of Service Attacks. In C. Czosseck & K. Geers (Eds.), The Virtual Battlefield: Perspectives on Cyber Warfare (pp. 163-181). 163-181: IOS Press.
39. Odrats, I. (Ed.). (2007). Information Technology in the Public Administration of Estonia Yearbook 2007. Ministry of Economic Affairs and Communication.
40. Ottis, R. (2008). Analysis of the 2007 Cyber Attacks Against Estonia from the Information Warfare Perspective. Proceedings of the 7th European Conference on Information Warfare (p. 163). Academic Conferences Limited.
41. Ottis, R. (2009). Theoretical Model for Creating a Nation-State Level Offensive Cyber Capability. 8th European Conference on Information Warfare and Security (pp. 177-182). Academic Publishing Limited.
42. Tikk, E., Kaska, K., & Vihul, L. (2010). International Cyber Incidents: Legal Considerations (p. 130). Tallinn: CCD COE Publications.