Publications Other Media Certification Membership MOUs

197 - Technical workshop on “IT Fraud-Discovery and Mitigation - Technical workshop on “Mobile Application Security” - Technical workshop on “ Network security” - Hacking challenge: Hacking Challenge is a contest for IT Professionals to attack and defend an actual network within a given timeframe. The invited participants are Technical Security Professionals, Network Administrators, System Administrators and students following information security post-graduate courses. - Information Security Quiz: This competition is open only to students of Sri Lankan Universities and other tertiary education institutions. The objective of the quiz is to assess the knowledge and to identify and reward the aspiring young information security professionals. - Contributed to organizing of the Council of Europe GLACY Mission conference on Cyber Crime and Cybercrime Legislation, including technical assistance for the adaption of the Budapest Convention. Consequently, Sri Lanka has become a priority country to benefit from the Capacity Building Programme of the Council of Europe project titled “Global Action on Cyber Crimes” GLACY. Under this project the Judiciary, Prosecution and Law Enforcement authorities would benefit from training and capacity building to better deal with Cyber Crime enforcement issues. • CIO Forum in collaboration with ISC2 Sri Lanka Chapter. • Carrying out training sessions and presentations on Information security for SLAS Sri Lanka Administrative Services officers at SLIDA 5. Achievements

5.1. Publications Other Media

 Website The Sri Lanka CERT|CC website publishes security related awareness bulletins for the public via News Alerts and a Knowledge Base. Glossaries, case studies and 198 FAQs are among some of the other published items.  E-mails Disseminating security related information via e-mail alerts to Sri Lanka CERT website subscribers. The Cyber Guardian e-newsletter was initiated in mid-2010 and is distributed to a large number of students by the Ministry of Education, through the SchoolNet - the network connecting secondary schools in Sri Lanka.  Newspapersmedia Sri Lanka CERT|CC continues to educate the general public through the electronic and print media about emerging cyber security threats and vulnerabilities with recommendations on how to safeguard themselves against these attacks.

5.2. Certification Membership

Sri Lanka CERT continues to enjoy the benefits of membership to the following professional security organizations; a Microsoft SCP Security Cooperation Program b Collaborative agreement with ITU Subsidiary “IMPACT”, where Sri Lanka CERT will benefit from receiving threat intelligence from the region and also becoming part of the global incident response teams. c International Information Systems Security Certification Consortium, Inc.,ISC² d Thread Intelligence from ShadowServer 6. International Collaboration

6.1. MOUs

In addition to being members of FIRST and APCERT, Sri Lanka CERT has signed Memoranda of Understanding MoU with Microsoft, to be a member of Microsoft Security Cooperation Program SCP and with IMPACT, the security arm of ITU. Sri Lanka CERT has also signed MoUs with Team Cymru, Tsubame, JPCERTCC Japan, and ShadowServer; as a result of the above MoUs Sri Lanka CERT gets daily statistics for its “Threat Visualization System” which is used for alerting ISPs about possible suspicious network traffic. 199 In October 2014, Sri Lanka CERT|CC entered into an MOU with CNCERT|CC to further enhance collaborative activities with China.

6.2. Event Participation