In The Media

Time to get serious about cyber security

by Nestor Arellano (feat. John Adams)

Vanguard Magazine
August 22, 2016

The upcoming Defence Policy Review is an excellent opportunity for Canada to address cybersecurity gaps that pose serious risks to our country’s military and government computer networks and infrastructure.

While the incidence of state-backed cyber attacks on national and commercial computer systems of our allies has increased in recent years, it is frightening to realize that Canada’s cyber defences appear to have been largely neglected, according to two former high-ranking officials of the Canadian Security Intelligence Services (CSIS) who spoke with Vanguard recently.

Duct tape approach

“I don’t see Canada spending enough on cyber defence…it’s still a hodge-podge, duct tape approach. There’s a definite need for a cyber-strategy review,” says Ray Boisvert, who built a 30-year career in both operational and executive roles with CSIS before retiring as its assistant director if intelligence in 2012. Since then, Boisvert has become the president and CEO of security firm I-Sec Integrated Strategies and more recently a senior associate at Hill and Knowlton Strategies Canada.

“The country’s cyber defence budget is very, very small compared to that of conventional warfare,” he laments.

Boisvert also says there’s a glaring lack of strategy and clarity of who is responsible for what when it comes to preventing and dealing with cyber attacks leading to the impressions that Canada has been “a little complacent” and adopting a “stand by and watch other” posture on cyber.

There has never been a time in history as today, possession of information is so critical to the defence and survival of a nation and yet Canada’s ability to gather and analyze data which could help identify potential cyber threats remain in the “rudimentary stages” at best, warns Boisvert. “Right now, one gap is that many agencies still rely on fairly traditional resources (for gathering data).”

This is something that Sheldon Shaw agrees with. Shaw is currently a public safety and defence specialist with software company SAS Canada. Before that, Shaw held an executive position at the Communications Security Establishment of Canada and was also formerly an assistant director of intelligence at CSIS where he specialized in computer and weapons of mass destructions issues.

“I think there is a technological gap and a lack of awareness, not necessarily lack of understanding,” he says.

Cyber attacks not on the table back in 2010

Beyond “keeping the lights on,” the defence establishment needs a strategic re-think and a realization of what are the tools it needs to address cyber threats it will face for 2020 and beyond, he adds.

In his recent essay on cyber security for the Canadian Global Affairs Institute, Major-General John Adams (Ret’d) traces Canada’s cyber security gaps to the fact that “cyber attacks were not on the table” when the existing cyber strategy was being mapped out.

“The government of Canada has responded to cyber exploitations with its Cyber Security Strategy.11 Published in 2010, the strategy is noteworthy for the fact that it limits itself to strengthening the government’s capability to detect, deter and defend against cyber attacks while deploying cyber technology to advance Canada’s economic and national security interests.” He wrote. “It did not militarize cyber security, it was limited to specifying that the Canadian Armed Forces were to strengthen their capacity to defend their own networks, work with other government departments to identify threats to their networks and possible responses, and continue to exchange information about cyber best practices with allied militaries.”

Adams also noted that a more aggressive approach “would have been ill-advised in 2010” because the concept of cyber war had not yet sufficiently matured:

However, he says, a lot has changed since 2010 and cyberspace have “become the centre of gravity for the globalize world” embracing economic, financial, diplomatic and military operations.

Today, he says, cyber war means disrupting or destroying information and communications systems in order to threaten a state’s sovereignty as well as gathering as much information about an adversary while keeping that adversary oblivious to the data gathering.

This appears to have been the case with the recent controversy over the hacking by threat actors believed to be based in Russia of the Democratic National Convention computer systems in the U.S., according to Boisvert.

“They (hackers) were on the network for years and the investigators couldn’t find a trace of the APT (advanced persistent threat), he says. He says the latest trends in cyber security indicate that traditional cyber security tools such as firewalls are no longer enough.

Analytics

This is where automation and advanced data analytics can help boost cybersecurity capabilities, according to Shaw.

“Analytics has been around for so long, but has not yet been extensively applied to security,” he says. “Now we have the data analytics tools that can help defence agencies crunch through the tons of data coming from various sources.”


Be the first to comment

Please check your e-mail for a link to activate your account.
Donate to Canadian Global Affairs Institute Subscribe
 

SEARCH


 

IN THE MEDIA


Trudeau heads to NATO and G7 summits, where Trump will be top of mind
by Joanna Smith (feat. Dave Perry), CTV News, May 22, 2017

Harsh sentences for IS sympathizers in Brazil test new law
by Lucas Iberico Lozada, Mauricio Savarese & Peter Prengaman (feat. Robert Muggah), Washington Post, May 20, 2017

F-35 jets waiting in wings as Liberals' 'interim' Super Hornet purchase in limbo
by Marie-Danielle Smith (feat. Dave Perry), National Post, May 19, 2017

AUDIO: NAFTA renegotiation and a Prairie showdown: Maclean's on the Hill
by Paul Wells (feat. John Weekes), Maclean's, May 19, 2017

 

LATEST TWEETS


Donate | Submit | Media Inquiries
Making sense of our complex world. | Déchiffrer la complexité de notre monde.
 
HEAD OFFICE
Canadian Global Affairs Institute

Suite 1600, 530 8th Avenue SW
Calgary, Alberta, Canada  T2P 3S8
 
OTTAWA OFFICE
Canadian Global Affairs Institute

8 York Street, 2nd Floor
Ottawa, Ontario, Canada  K1N 5S6

Phone: (613) 288-2529 
Email: contact@cgai.ca 
Web: cgai.ca
 
2002-2015 Canadian Global Affairs Institute

Charitable Registration No.  87982 7913 RR0001