79 issues are sometimes referred to government investigative agencies who have
the legal mandate to launch investigations.
2.3. Memorandum of Understanding
In order to improve collaborative work on the resolution of issues, a Memorandum of Understanding, which establishes a framework for reporting
and feedback mechanism, is currently being negotiated with service providers such as telecommunications companies, internet service providers, and data
centers and hosting companies.
3. Events 3.1. Membership and Constituency Information Sharing
PHCERT organizes regular membership meetings and constituency information sharing on information security practice.
3.2. Constituency Training
Active and encouraging support has been provided by JPCERT. As such, JPCERT and PHCERT teamed up to organize a training activity in 2009
covering subject matters as latest trends in information security, incident handling and management, overview of incident analysis, and a briefing on
the Tsubame project.
3.3. JPCERTAOTS Training
Selected members of PHCERT have been attending training programs organized by JPCERT conducted through the Association of Oversees
Technical Scholarship AOTS for which PHCERT is grateful. The training programs cover establishment and operations of CSIRT and technical subject
matters such as incident handling and malware analysis.
3.4. Seminars and Conferences
PHCERT is actively involved in locally organized seminars and conferences as a technical resource organization, providing speakers and facilitators.
4. RegionalInternational Collaboration
80 As a member of the APCERT, PHCERT serves as a point of contact in the
Philippines and helps resolve internet security incidents and issues, especially those emanating from Philippine sources.
It collaborates directly with other country CERTs in resolving internet security incidents.
5. Contact Information
PHCERT may be reached at: PHPEP Law Offices
26th Floor, Orient Square Building F. Ortigas Jr. Avenue, Ortigas Center
Pasig City 1605, Philippines Telephone: 632687-5362
Fax: 632687-4745 Email:
infophcert.org
81
11. SingCERT Activity Report
Singapore Computer Emergency Response Team - Singapore
1. About SingCERT
1.1 Introduction The Singapore Computer Emergency Response Team SingCERT is a
one-stop centre for security incident response in Singapore. Besides providing assistance to its constituency in incident resolution and co-ordination,
SingCERT also broadcasts security alerts, advisories and security patches. To promote security awareness and to educate the general public, SingCERT
organises frequent seminars, workshops and sharing sessions covering a wide range of security topics.
1.1.1 Establishment SingCERT was set up in 1997 to facilitate the detection, resolution and
prevention of security related incidents on the Internet. SingCERT is a government funded national initiative and is managed and driven by the
Infocomm Development Authority of Singapore. 1.1.2 Constituency
SingCERT provides services primarily to the Singapore local constituency comprising of companies and end users.
2. Activities Operations
2.1 Incident Trend There is an increase in the total number of incidents reported to SingCERT in
the year 2009 as compared to the year 2008. Phishing and the widespread of malwares were the major concerns in 2009. Besides that, there was high
number of attempts and probes targeting at hosting environment and the ISPs in the early part of the year. SingCERT continues to work with other CERTs
and our Internet Service Providers ISPs to track down affected users and keep them informed on how to secure their systems. On the regional and
international fronts, collaboration and cooperation among CERTs have proved effective in the resolution of many of our cross-border incidents.
82
3. Events organised co-organised
