Cyberspace by nature has no borders, which allows those criminals to launch attacks from anywhere in the world, at any time. As legal parameters are proving unable to keep pace with the speed of technological proliferation, the absence of international laws capable of restricting the actions of attackers regardless of their geolocation gives them a sense of absolute impunity. To counter this effectively, there is an urgent need to start learning the basics of working together.
In this spirit, Cyber Polygon debuted in June 2019. It is a large-scale online exercise focusing on joint response to cyberthreats and the improvement of international cooperation to fight cybercrime. The goal of the exercise is to develop the response skills of participating organizations, increase awareness among the spectators and strengthen global collaboration against organized cybercrime.
The Cyber Polygon training is held on an annual basis and, thus far, is unique in its kind as it brings together representatives of public and private organizations from different geographies around the globe. The first training simulated several common types of attacks on the training infrastructures of globally renowned participating companies. A total of three scenarios were selected as relevant for organizations within any sector of the economy: DDoS attack, attack on a web application and ransomware attack.
Each scenario was played out twice - in the first run each team had to respond individually, whereas the teams benefited from data-sharing via a Threat Intelligence Platform in the second. The results of the exercise showed that the response was up to seven times more effective with a collaborative approach to tackling the threats. This is a promising insight to build upon and that can help to train defeating cybercriminals more effectively and collaboratively.
The training is supported by the World Economic Forum and is held with active participation of INTERPOL. Partners of the first event were Fortinet and IBM, among participants were New Development Bank, Department of Information Technology and Communications (Philippines), Transtelecom (Kazakhstan), MTS (Russian Federation). For the next iteration on 8 July 2020 in Moscow we are looking for more partners to join, help develop new scenarios, advance infrastructure development, or else.