Incident handling reports Abuse statistics

151 • Assisted in the APCERT Drill 2014 as OC, Player, Observer and EXCON • Article publications in a local magazine called “Macau-ICT” magazine

2.1. Incident handling reports

Incident reports are increasing rapidly as there is an increase in the natural reports being submitted, but also the increase is due to the addition of a service that proactively warns website owners of security issues. Reluctance from reporting issues provides a challenge in addressing the cyber security of Macau. Sources of incidents are from three distinct channels. 1. Reported by Web 2. Reported by Phone message 3. MOCERT initiated from incident discovery activity. 152 Early Warning Notices - A website collects notifications related to computer security, where all notifications are reviewed by staff to determine the impact to Macao constituency. The notifications are then classified to Issues and Advisories and then posted. The following diagram shows the distribution of the 789 postings in 2014 with 670 postings being Advisories, and 119 Issues.

2.2. Abuse statistics

The following pie graph denotes the abuse distribution as noted for the year 2014. The numbers are drawn from the incidents handled with the removal of the “web notices” as they do not constitute an abuse. 153 154 3. Events organized co-organized 26 th February 2014 - “Vapor Trails of Malware - Volatility” The seminar was presented on the 26th February 2014 where it introduced the memory analysis framework called Volatility. This framework can be used by first line respondents and check of suspicious processes by accessing the information that resides in the memory of the computer 30 th May 2014 - “OWASP Top 10 Mobile Security Risks” The seminar was presented on the 30 th May 2014 where the seminar provides information on the top ten 1 risks as listed by the Open Web Security Project OWASP and details the impact of the risk being realized and discusses about some prevention tips.. 18 th November 2014 - “DDoS Seminar” The seminar was presented on the 18 th November 2014 where the seminar reveals the impact of DDoS attacks temporarily or indefinitely interrupt or suspend services of a host connected to the internet. 20 th November 2014 - “Cracks in the Pillars of IT Security” “Clean PC Day” Titled “Cracks in the Pillars of IT Security” and “Clean PC Day” Co-organized with Public Administration and Civil Service Bureau SAFP a string of seminars and a clean PC workshop to highlight the risks, and counter measures that internet users need to deal when using internet connected computers. This activity was held on the 20 th November 2014, at Macau Science Center 155

3.1. Training