Slide 1

Cybercrime and Legal Issues

Slide 2

Content
1. Cyber security laws in some countries
2. Some serious cyber attacks

In today lecture, we shall learn about the law on cyber security of some countries in the
world.

Main content consists of 2 parts:

Part 1: Law on cyber security of some countries in the world
Part 2: Some serious cyber attacks
Slide 3

Cyber security laws in some countries

 Overview:
- Cyber security laws are necessary in
modern context
- No nations has got complete cyber
security laws

Tr 3

General:
Currently, no country in the world has developed a complete law on cyber security. This may be
the premise for cyberspace attacks which happen more frequently and dangerously. The
importance now is that the countries develop complete systems of law on cyber security, and
strengthen mutual cooperation.

In recent years, cyber security issue has got concerns by countries in the world, especially the
high-tech countries like Germany, France, USA, etc. However, their laws on cyber security are
still incomplete. After many serious attacks, they supplement new proposed law.
Slide 4

Cyber security laws in some countries

 Completing cyber security laws
 Upon serious attacks targeting Sony Pictures, Anthem
and Target Corp, White House has released 24-page
“Discussion Draft” to protect consumer data privacy
 December 17th, 2014, German government approved
the Law on network security
 April 13th, 2015, France's new anti-terrorist laws was
approved

Tr 4

• United States

After a lot of serious cyber attacks towards Sony Pictures, Anthem and Target Corp, the White
House has released 24-page “Discussion Draft” to protect consumer data privacy.
The draft gives consumers more control over the way their Internet data is used, stored or sold.
Trước đây, trong một báo cáo của mình, Lầu Năm Góc cho biết Mỹ duy trì quyền trả đũa quân
sự trong trường hợp xảy ra một cuộc tấn công thù địch trong không gian mạng và đang tăng
cường khả năng theo dõi thông tin về bất cứ một cuộc tấn công nào.
In a report released a few years ago, the White House announced that US should maintain the
right of military response on hostile cyperspace attacks. The White House was also
strengthening the capacity of updating information about any cyber attacks.
The reports also showed that US should use all necessary facilities, including diplomacy, media,
military and economy in order to protect the nation, allies and partners as well as their benefits.

2. Germany
According to annual IT security report in 2014, the situation of network security, information
safety of Germany was very complicated. Cyber attacks happened daily and more professionally,
intentionally.
The report also analyzed the motivation of such cyber attacks and methods as well as attack
tools which were used by attackers and then raised some detailed solutions for enhancing
network security.
On the same day, December 17th, 2014, German government approved the Law on network
security in order to protect their people and businesses better in the digital era.
The new law targets on improving information security situation of businesses and competent
units as well as protecting people on Internet environment better.

3. France
The proposed law, promulgated on the April 13th 2015, would allow the government to monitor
emails and phone calls of suspected terrorists and their contacts, without seeking authorization
from a judge. Telecommunications and internet companies would be forced to automatically
filter vast amounts of metadata to flag suspicious patterns, and would have to make that data
freely available to intelligence services. Agents would also be able to plant cameras and bugs in
the homes of suspected terrorists, as well as keyloggers to track their online behavior.
Slide 5

Content
1. Cyber security laws in some countries
2. Some serious cyber attacks
Slide 6

Some serious cyber attacks

Vulnerabilities in cyber security laws
somehow have facilitated recent serious
cyber attacks

Tr 6

It can be said that such vulnerabilities somehow have facilitated recent serious cyber attacks.
Here are some examples for noticeable cyber attacks happening in 2014-2015.
Slide 7

Some serious cyber attacks

 Attack targeting Sony Pictures

 Attack targeting steel factory in Germany
 Over 1,000 French sites hacked since Charlie Hebdo
attack

Tr 7

1. In United States
Attack targeting Sony Pictures
Following attacks towards Target, Anthem, Home Depot, JPMorgan, on November 24th 2014,
studio of Sony Pictures was hacked by a group self-proclaimed "#GOP", or Guardians of Peace.
Hackers (supposed to be from North Korea) distributed some unissued films, disclosed sensitive
data (password or payroll of Sony Pictures’ CEO). They even threatened Sony’s employees and
their relatives.

Consequence
The attack made Sony land in an impasse without escape. Unissued films, unexploited scenario,
payroll of employees, company and sensitive credentials and other information were obtained
by the hackers.

2. In Germany
Attack targeting steel factory
The annual IT security report issued by the German BSI reported a sophisticated cyber attack on
a steel factory caused severe damage. According to the German Government, unknown hackers
have infiltrated the production networks gaining the control of a blast furnace, as reported in
the annual IT security report.
The attack started with a spear phishing email that was sent by attackers to the factory’s office
networks, the threat actor once obtained the access to internal system moved its activity to
production networks that were compromised too.
Consequence: The steel factory was exploded.

3. In France
Over 1,000 French sites hacked since Charlie Hebdo attack
According to French security researchers, over 1,000 French sites were attacked by IS hackers
since Charlie Hebdo attack in Paris happened on January 7th, killed 12 people.

Consequence
Hacked sites are mainly small sites of local authorities, universities and businesses. The hackers
not only attacked sites but also displayed a text line which honoured IS and threatened France.
 Slide 8

Vietnamese Law on cyber security

Vietnam is in the process of developing a system of law on

network security

Tr 8

Vietnamese Law on cyber security

Vietnam is in the process of developing a system of law on network security. It is necessary and
Vietnam could reference the law of high-tech countries for completion.