UNCLASSIFIED

UNCLASSIFIED

Elevating the importance of cybercrime in achieving a cyber secure Australia

4th Annual Cyber Security Summit

Assistant Commissioner Tim Morris AM APMNational Manager High Tech Crime OperationsAustralian Federal Police

UNCLASSIFIED

UNCLASSIFIED

Current threat environment

Increasingly sophisticated attacks

Financially motivated organised crime groups

Uptake in malware with mobile device variants

Network intrusions

‘Hacking as a Service’

Hacktivist’s

UNCLASSIFIED

UNCLASSIFIED

Theft of Intellectual Property (IP)

Success in a global economy relies more and more on IP

United States single largest market for protected goods

Significant financial gains for organised crime groups – selling IP which provides a rival company with the competitive edge

Risk to health and safety in counterfeit pharmaceuticals etc.

Theft of IP in Australia can lead to a loss of confidence

UNCLASSIFIED

UNCLASSIFIED

• Complementary role

• Responsible for detecting, investigating and prosecuting criminal elements behind some of these attacks

• AFP utilises extensive overseas liaison network for police to police engagement

Role of law enforcement in cyber security

UNCLASSIFIED

UNCLASSIFIED

Source: Measuring the cost of cybercrime, Professor Ross Anderson, 2012 Cambridge University

Cost of cybercrime and international response

UNCLASSIFIED

UNCLASSIFIED

Suspected unauthorised accesses (5 stores only)

Operation Lino

UNCLASSIFIED

UNCLASSIFIED

Role of law enforcement and industry

Tackling cybercrime is a shared responsibility between individuals, industry and government (National Plan to Combat Cybercrime)

Engagement with ISP’s, software and hardware companies

AFP actively engaged with banking and financial sector

UNCLASSIFIED

UNCLASSIFIED

Russia and West Africa

Majority of high-level criminals involved in the authoring of malware from the former Soviet Union nations

Expansion of high speed internet connectivity in West Africa

Lack of governance and poor cybercrime legislation = safe havens

UNCLASSIFIED

UNCLASSIFIED

Dark Markets

UNCLASSIFIED

UNCLASSIFIED

• More awareness by criminal elements of intelligence and policing collection capabilities

• Law enforcement collection of data has always been via lawful means and subject to Ombudsman review

• Right to privacy vs right to anonymity

Impact of Snowden

UNCLASSIFIED

UNCLASSIFIED

Questions & comments