Address to AusCERT 2009
Monday, 18 May 2009
Good morning everyone.
It is a pleasure to be here for AusCERT 2009.
This is an important gathering of information security professionals and experts from across the AsiaPacific.
AusCERT should be congratulated for bringing together such an esteemed group for this, its seventh annual conference.
The theme of this conference is 'The Security Evolution'.
For the next five days AusCERT has put together a great program to dissect the changing information security environment and how stakeholders are addressing emerging challenges and opportunities.
This is a great opportunity for security practitioners and decision makers to engage directly on how to handle computer and network security problems.
These issues are of growing importance as our society and economy become more connected and reliant on digital technologies.
In the past decade, connected computers have revolutionised the way we do business and go about our day-to-day lives.
Already countries like Australia are reaping efficiency and productivity gains from applications as diverse as online banking, email and video conferencing.
Research suggests that with the increasing availability of affordable, high-speed broadband, additional productivity gains and other benefits will flow in the future.
With high-speed broadband we have the potential to revolutionise education and health, drive energy efficiency gains, secure infrastructure investments and invigorate regional economies.
The Rudd Government has recognised these opportunities and is acting now to ensure that Australia is in the best position to capitalise.
This includes our investments with the private sector in the National Broadband Network.
The National Broadband Network will be the single largest nation-building infrastructure project in Australian history.
It will drive competition by providing Australia's first truly national wholesale-only network.
It will provide opportunities for innovators to create new applications and services to meet emerging demands.
It will provide opportunities for businesses to improve they way they deliver their products.
It will provide opportunities for Australians to access information and vital social services from their homes.
It will provide opportunities for greater returns on investment through the rollout of smart infrastructure.
Indeed, the National Broadband Network will change the way we address the delivery of vital services and utilities.
In the health and aged-care sector, in-home care promises considerable economic and social benefits.
Studies have shown that remote patient monitoring could reduce emergency room visits by up to 40 per cent.
It could also reduce the length of hospital stays by up to 60 per cent.
Studies also suggest that 20% of the population over 75 years old would benefit from in-home assistance supported by broadband.
These are considerable opportunities that depend on the installation of new technologies such as monitors and imaging systems.
They also depend on the reliability of the broadband network these technologies connect with.
In the energy sector, power companies will increasingly use broadband to support smart grids, allowing them to improve the efficiency of distribution.
The Government announced at Budget last week an investment of up to $100 million in partnership with the energy sector to examine how Australia could effectively roll out a national smart grid.
A number of companies are already experimenting in this area and I welcome a positive reaction to last weeks announcement, from industry.
In this area, again, the reliability of the supporting broadband infrastructure will be paramount to the success of smart grid innovations.
The same will be true for smart infrastructure and a whole range of industrial applications that rely on the constant connection of monitors and controls.
Bridges with sensors to monitor load conditions and degradation, buildings equipped with remote lighting controls, mining machinery operated from distant control centres…
All of these will require secure and reliable broadband.
Those SCADA practitioners and vendors here today will be well aware of the types of opportunities available in this environment as well as the challenges we all face to ensure they are realised.
The reliance of critical infrastructure such as aviation, electricity and water supply, banking and finance on connected digital technologies makes Australia vulnerable to e-security threats.
The Department of Broadband, Communications and the Digital Economy provides secretariat support to the SCADA Community of Interest.
This support helps the community to improve the skills and knowledge of security issues among SCADA practitioners through training, workshops, information papers and seminars.
These are important activities as we work to develop the connected digital economy.
As more vital services such as health care and electricity come to rely on broadband, the security of our networks must be of the highest priority.
This will not only underpin the successful operation of these services but also the general confidence of businesses and citizens in the online environment.
Confidence is a key factor in the take-up of new services and will be essential to ensure that Australia reaps the full benefits of the digital economy.
For these reasons, consideration of critical infrastructure protection, e-security and law enforcement objectives is high on the Government's agenda as we prepare for our digital future.
These considerations will form a key part of planning, design and implementation for the National Broadband Network.
Implementation planning for the National Broadband Network will be multi-disciplinary, including technical, commercial and legal advisers.
They will work with Government to establish the operating arrangements and detailed network design including national and identity security arrangements.
Planning will also consider matters such as private sector investment and ways to provide procurement opportunities for local businesses.
The Government recently published a tender for a lead advisor to the Implementation Planning, which is due to begin in mid 2009 and be completed in early 2010.
The National Broadband Network is a key priority for the Rudd Government and a vital foundation for our future national economy.
For all the opportunity, it is important that we plan in full recognition of associated security risks.
Last December, the Prime Minister presented Australia's inaugural National Security Statement to Federal Parliament.
He noted at the time that the sophistication of our modern community is a source of vulnerability in itself.
The National Security Statement is the first of its kind, and recognises that the enhancement of Australia's e-security capability is one of our top-10 national security priorities.
It also highlights that in addition to big business and government networks, individuals are also vulnerable to e-security threats.
As you all know… compromised computers in the home, school and small business put personal and financial information at risk.
Furthermore, when these computers are aggregated they can also endanger large corporations and critical infrastructure by enabling malicious spam or denial of service attacks.
The disruption to critical infrastructure systems caused by these attacks has the potential to impact the public and private sectors and Australia as a whole.
The Rudd Government has put in place a range of initiatives to enhance the protection of home and small business users against online threats and fraud.
The initiatives will help ensure that these user groups are not vectors of attack, and can confidently and securely take part in the digital economy.
The Rudd Government understands that improving citizen awareness is a key line of defence in protecting our critical infrastructure and government networks.
It is important that people understand the simple steps they can take to secure their computers and protect their personal information when online.
It is important that they are made aware of online scams such as recent bogus Tax Office and Centrelink emails aimed at stealing the Government's stimulus package payments.
There have also been reports that scammers have used email phishing schemes to capitalise on the recent Victorian bushfires.
These types of scams are not a minor concern.
The Australian Bureau of Statistics reported in 2007 that nearly 6 million Australians were exposed to a range of scams with nearly 1 billion dollars lost as a result of personal fraud.
This included nearly 330,000 people who responded to or engaged with an unsolicited offer, such as phishing and related scams.
The Government has worked in partnership with industry and community groups to raise the level of e-security awareness in Australian homes, schools, and small businesses.
The Stay Smart Online website is a key part of these e-security awareness-raising initiatives.
It provides practical information on the simple steps Australians can take to protect themselves online.
To encourage users to take charge of their online security, it is important that they have up-to-date information on the latest e-security threats and vulnerabilities.
The Stay Smart Online website provides free subscriptions to a plain language alert service.
It provides information, in simple language, to home users and small businesses on the latest e-security threats and vulnerabilities, and possible solutions to address them.
This service is delivered by AusCERT on behalf of the Australian Government.
A current hit-rate of over 86,000 hits per week is indication of the value of Stay Smart Online for the community.
I would like to thank Graham Ingram and his team for their diligent work on this and the support they offer both to my Department, and the Australian public through this important service.
Another element of our e-security awareness program is an education package for Australian school students.
School students are not only heavy users of the internet but are also very comfortable using online technologies.
I witnessed this first hand in Melbourne two weeks ago when I announced a group of 305 young Australians who are advising Government on online issues such as cyber-bullying.
Our education package consists of two interactive learning modules for year 3 and year 9 students.
They will launch on the Stay Smart Online website early next month.
In addition to these ongoing programs, the Government also runs an annual National E-Security Awareness Week in partnership with industry, community groups and government agencies.
The event seeks to educate Australians about e-security risks and how they can protect themselves online.
This year, National E-Security Awareness Week will be held from 5 to 12 June.
Information on events and activities around the country can also be found on the Stay Smart Online website.
The Government plays an important role in protecting Australians online and it welcomes a collaborative approach with industry and community groups.
I would like to thank these groups for their ongoing support and their continued efforts to raise awareness.
Important steps have been taken to secure home and small business users from online threats; however, more needs to be done.
E-security is a dynamic, constantly changing area and raising awareness and protecting users against e-security threats is an ongoing task.
Internet Service Providers play an important role in improving the online security of Australians.
The role of ISPs was raised in the context of the 2008 E-Security Review.
Together with the Attorney-General Robert McClelland I announced the first outcomes from this review in December last year.
The review made a number of recommendations, including the need for improved engagement with ISPs to help create a 'security culture' among Australian internet users.
My Department and the Australian Communications and Media Authority are currently working with ISPs to develop a code of practice for e-security.
This code will provide a consistent approach for Australian ISPs to help inform, educate and protect their clients in relation to e-security issues.
It will contribute to the range of efforts being made by Government and industry to raise awareness of online security and to foster digital confidence.
E-security is an important area of work and I appreciate the support and assistance from industry and community groups in working towards these goals.
These efforts are a valuable contribution to the digital economy and will be increasingly important as the National Broadband Network creates the platform to connect more of our vital services.
I know that discussions here this week will contribute strongly to meeting our goals.
It is my great pleasure to welcome you to the Australian Computer Emergency Response Team AsiaPacific Information Security Conference for 2009.
I hope it will be a rewarding one for you.
Thank you.
