4
4.5
Internet economy.
With encryption comes security of user data, authentication,
confidentiality and consumer trust in services. People undertake an increasing amount of
legitimate activities over the Internet that involve personal information, such as banking,
buying and selling goods, filing tax returns, and so on. Without encryption, e-commerce
would never have taken off and cannot survive.
Table 39: Definitions of Cybersecurity
Definitions of cybersecurity differ slightly according to international and regional
bodies, but the common theme to describe cybersecurity is protecting:
The availability of services
The integrity (security) of network infrastructure
The protection of private information
Cyber security is defined by:
the International Telecommunications Union (ITU) (and cited by ASEAN) 410
as: …the collection of tools, policies, security concepts, security safeguards,
guidelines, risk management approaches, actions, training, best practices,
assurance and technologies that can be used to protect the cyber environment
and organisation and user's assets..” 411
the European Union as: “…the safeguards and actions that can be used to
protect the cyber domain, both in the civilian and military fields, from those threats
that are associated with or that may harm its interdependent networks and
information infrastructure. Cyber-security strives to preserve the availability and
integrity of the networks and infrastructure and the confidentiality of the
information contained therein.” 412
the Freedom Online Coalition as: “… the preservation – through policy,
technology, and education – of the availability*, confidentiality* and integrity* of
information and its underlying infrastructure so as to preserve the security of
persons both online and offline.” *as defined by ISO 27000 standard. 413
Concerns about Cybersecurity, Human Rights and the ICT Sector
Recent research by Citizen Lab has shown that CSOs around the world face the same
threats of attack as governments and business, but have fewer resources to fend off a
cyberattack. 414 The attacks on CSOs are intended to undermine communications, by
taking websites offline or disrupting other communications.
Encryption is not just important for safe transactions, it is also important for human rights
defenders 415 and people at risk, so that they are able to communicate without the fear of
their confidential communications being intercepted arbitrarily by intelligence agencies. 416
410
ASEAN, “Joint Ministerial Statement on ASEAN Cybersecurity Cooperation” (2013).
ITU, “Overview of Cybersecurity“ (2008).
412 European Commission, “Cybersecurity Strategy of the European Union: An Open, Safe and Secure
Cyberspace (2013), footnote 4.
413 Freedom Online Coalition, “WG 1 – An Internet Free and Secure” (last accessed August 2015).
414 Citizen Lab, ”Targeted Threats Against Civil Society“ (2015).
415 New technology is emerging to support field data collection by civil society organizations working in
sensitive communities. See Martus.
416 Various tools are available to provide human rights defenders and people at risk with higher levels of
encryption. The Tor Browser is a web browser that allows users to browse the internet anonymously.
Additionally, Pretty Good Privacy (PGP) can be used for encrypting email messages.
411
182
PAGE
CHAPTER 4.5: CYBER-SECURITY