European Electronic Crime Task Force

Last updated
European
Electronic Crime Task Force
FoundedJune 30, 2009 (2009-06-30)
Founder
Type Information Sharing Working Group
FocusElectronic Crimes in Europe
Location
Members
  • 3 Founder Members
  • 19 Permanent Members
  • Community of Experts (more than 400 professionals)
Key people
Vanes Montanari, VP Security and Safety Poste Italiane - EECTF Chairman

The European Electronic Crime Task Force (EECTF) is an information sharing initiative, [1] [2] [3] [4] created in 2009 by an agreement [5] [6] [7] between the United States Secret Service, the Italian Ministry of Internal Affairs and Poste Italiane. The EECTF's mission is "to support the analysis and the development of best practices against cybercrime in European countries, through the creation of a strategic alliance between public and private sectors, including Law Enforcement, [4] the financial sector, [8] [9] academia, [1] [10] [11] international institutions, [12] [13] [14] and ICT security vendors". [15]

Contents

Accordingly, the EECTF aims to help the cyber security community by:

History

The EECTF was established on June 30, 2009, by an agreement between the United States Secret Service, the Italian Ministry of Internal Affairs and Poste Italiane, on the basis of the successful experiences of analogous ECTFs founded in the US by the Secret Service.

The United States Secret Service participates through its Rome office, the Italian Ministry of Interior participates through the Service of Postal and Telecommunications Police and Poste Italiane participates through the Information Security Department.

Initially restricted only to the only Founder Members, the EECTF was opened up thereafter to the main stakeholders in cybercrime, who expressed the will to contribute to a proactive sharing of relevant information. A Permanent Members Group has been started, which gathers to analyze emerging trends in cyber-crime and to discuss methodologies and techniques to combat them. [20] [21] [22] [23]

Governance

The EECTF is not a legal entity, it is a working group created on a voluntary basis, which has been governed since its creation by the EECTF Board made up of the three Founder Members: the United States Secret Service, represented by the special agent in charge of the Rome office, the Polizia Postale e delle Comunicazioni, represented by the head of service and Poste Italiane, represented by the CEO. Poste Italiane has chaired the EECTF Board since its inception. The chairman of the EECTF is Mr. Vanes Montanari, VP Security and Safety at Poste Italiane.

Administrative and operational activities are accomplished by the EECTF Technical Secretariat, held by Poste Italiane.

Modus operandi

The EECTF is run via monthly meetings of a select group of permanent members, quarterly open events extended to a wide community of selected experts and continuous sharing of information relevant to cybercrime and through dedicated specific tools.

Permanent members include internationally acknowledged organizations, both private and public, with a broad view on prevention, analysis and contrast of electronic crimes at European level, whose competencies might represent instances coming from whole domains of interest.

Permanent Members formally commit to proactively share information with other members of the group in a non-competitive environment, according to a non-disclosure agreement, and to actively contribute to the EECTF's activities, taking part to meetings and supporting the EECTF's development.

Additionally, in order to make the most out of the competencies of the whole EECTF community, an Expert Group has been started, which gathers on a periodic basis and is restricted to Permanent Members. It focuses on technical information sharing about new threats and possible countermeasures.

Constituency

The EECTF is made up of the following organizations:

MemberSectorCountryStatusSince
ABI Lab [9] [24] Research and InnovationItalyPermanent Member2013
American Express [8] Payment Systems and Financial Services ItalyPermanent Member2010
Bulgarian Police Law Enforcement Agencies Bulgaria Permanent Member2011
CA Technologies ICT Private Sector ItalyPermanent Member2012
Consip Public Administration ItalyPermanent Member2013
Citibank Payment Systems and Financial Services United StatesPermanent Member2011
Global Cyber Security Center [25] Research and InnovationItalyPermanent Member2010
Italian Ministry of Economy and Finance Public Administration ItalyPermanent Member2011
Kaspersky Great ICT Private Sector Romania / ItalyPermanent Member2011
MasterCard Payment Systems and Financial Services ItalyPermanent Member2012
NTT Data ICT Private Sector ItalyPermanent Member2013
Polizia Postale e delle Comunicazioni - Polizia di Stato Law Enforcement Agencies ItalyFounder Member2009
Poste Italiane Payment Systems and Financial Services ItalyFounder Member and Chairman2009
Romanian Police Law Enforcement Agencies Romania Permanent Member2011
RSA - EMC2 [15] ICT Private Sector United States / ItalyPermanent Member2010
Selex ES ICT Private Sector ItalyPermanent Member2013
Symantec ICT Private Sector ItalyPermanent Member2011
UniCredit Payment Systems and Financial Services ItalyPermanent Member2012
UNICRI - United Nations Interregional Crime and Justice Research Institute Research and InnovationGlobalPermanent Member2011
United States Secret Service Law Enforcement Agencies United StatesFounder Member2009
Verizon ICT Private Sector United StatesPermanent member2010
Visa Europe Payment Systems and Financial Services UKPermanent Member2011

EECTF Community and Plenary Meetings

With the aim of aggregating all the potentially valuable stakeholders, an invitation-only Community of Experts has been set up as a public interface of the Permanent Members Group. It is made up of acknowledged professionals and organizations who are distinguished as active contributors in the field of prevention and contrast of electronic crime. The EECTF gathers in periodic plenary meetings, organized to focus on general trends in cybercrime and security issues of current interest. More than 10 Plenary Meetings have been organized so far, as listed below.

Plenary Meetings
IJune 30, 2009The European Electronic Crime Task Force
II [26] March 16, 2010Successful Cybercrime Investigations
IIIJune 24, 2010International Funds Transfer and cooperation with LEAs
IV [27] February 10, 2011Trends in Cybercrime and Cyberthreats: Europe and the United States
V [28] May 18, 2011 Identity theft: Malware, Botnet & Social Networking
VINovember 15, 2011 Cybercrime Underground Economy
VIIMarch 6, 2012 Advanced Persistent Threats: Attacks to Corporate Information Systems
VIIIJuly 18, 2012Secure Identities in Cyberspace
IX [11] November 29, 2012Security of Innovative Payment Systems
X [29] [30] April 23, 2013 CERTs and International Cooperation Networks
XINovember 5, 2013Security of Internet Payments and Online Services
XIIMarch 31, 2015New Trends in Cyber Crime

Past speakers include:

Additionally, a monthly newsletter, CyberNews, is published within the community, to point out the most relevant events and trends in the cybercrime scenario.

See also

Related Research Articles

<span class="mw-page-title-main">United States Secret Service</span> U.S. federal law enforcement agency

The United States Secret Service is a federal law enforcement agency under the Department of Homeland Security tasked with conducting criminal investigations and providing protection to U.S. political leaders, their families, and visiting heads of state or government. The Secret Service was, until 2003, part of the Department of the Treasury, due to their initial mandate of combating counterfeiting of U.S. currency. The agency has protected U.S. presidents and presidential candidates since 1901.

<span class="mw-page-title-main">Cybercrime</span> Type of crime based in computer networks

Cybercrime encompasses a wide range of criminal activities that are carried out using digital devices and/or networks. These crimes involve the use of technology to commit fraud, identity theft, data breaches, computer viruses, scams, and expanded upon in other malicious acts. Cybercriminals exploit vulnerabilities in computer systems and networks to gain unauthorized access, steal sensitive information, disrupt services, and cause financial or reputational harm to individuals, organizations, and governments.

<span class="mw-page-title-main">Europol</span> European Union law enforcement agency

Europol, officially the European Union Agency for Law Enforcement Cooperation, is the law enforcement agency of the European Union (EU). Established in 1998, it is based in The Hague, Netherlands, and serves as the central hub for coordinating criminal intelligence and supporting the EU's Member States in their efforts to combat various forms of serious and organized crime, as well as terrorism.

<span class="mw-page-title-main">Communications & Information Services Corps</span> Military unit

The Communications and Information Services Corps (CIS) – formerly the Army Corps of Signals – is one of the combat support corps of the Irish Defence Forces, the military of Ireland. It is responsible for the installation, maintenance and operation of communications and information systems for the command, control and administration of the Defence Forces, and the facilitation of accurate, real-time sharing of intelligence between the Army, Naval Service and Air Corps branches at home and overseas.

<span class="mw-page-title-main">Convention on Cybercrime</span> 2001 international treaty on cybercrime

The Convention on Cybercrime, also known as the Budapest Convention on Cybercrime or the Budapest Convention, is the first international treaty seeking to address Internet and computer crime (cybercrime) harmonizing national laws, improving investigative techniques, and increasing cooperation among nations. It was drawn up by the Council of Europe in Strasbourg, France, with the active participation of the Council of Europe's observer states Canada, Japan, the Philippines, South Africa and the United States.

Internet safety, also known as online safety, cyber safety and electronic safety (e-safety), refers to the policies, practices and processes that reduce the harms to people that are enabled by the (mis)use of information technology.

<span class="mw-page-title-main">Internet police</span> Term describing governmental and official involvement in cyber policing

Internet police is a generic term for police and government agencies, departments and other organizations in charge of policing the Internet in a number of countries. The major purposes of Internet police, depending on the state, are fighting cybercrime, as well as censorship and propaganda.

The United Nations Interregional Crime and Justice Research Institute (UNICRI) is one of the five United Nations Research and Training Institutes. The institute was founded in 1968 to assist the international community in formulating and implementing improved policies in the field of crime prevention and criminal justice. Its work currently focuses on Goal 16 of the 2030 Agenda for Sustainable Development, that is centred on promoting peaceful, just and inclusive societies, free from crime and violence.

<span class="mw-page-title-main">Jart Armin</span> Cybercrime and computer security investigator and analyst

Jart Armin is an investigator, analyst and writer on cybercrime and computer security, and researcher of cybercrime mechanisms and assessment.

There is no commonly agreed single definition of “cybercrime”. It refers to illegal internet-mediated activities that often take place in global electronic networks. Cybercrime is "international" or "transnational" – there are ‘no cyber-borders between countries'. International cybercrimes often challenge the effectiveness of domestic and international law, and law enforcement. Because existing laws in many countries are not tailored to deal with cybercrime, criminals increasingly conduct crimes on the Internet in order to take advantages of the less severe punishments or difficulties of being traced.

<span class="mw-page-title-main">European Cybercrime Centre</span>

The European Cybercrime Centre is the body of the Police Office (Europol) of the European Union (EU), headquartered in The Hague, that coordinates cross-border law enforcement activities against computer crime and acts as a centre of technical expertise on the matter.

The Cyber Crime Unit of the Hellenic Police, for which legislative responsibility remains with the Ministry of Citizen Protection, was officially founded in 2004 with Greek Presidential Decree 100/2004 Government Gazette 69/Α/3-3-2004. In 2011 with Presidential Decree 9/2011 Government Gazette 24/Α/21-2-2011 was the establishment of the Authority of Financial Police and Cyber Crime Subdivision, of Police Directorate level, commenced operation in August 2011 comprises the Financial Police Subdivision and the Cyber Crime Subdivision. It was reformed in 2014 with Article 17 of Section 2 of Law 4249/2014 Government Gazette 73/Α/24-3-2014 in which renamed Cyber Crime Division, including the foundation and structure of Cyber Crime Subdivision of Northern Greece in Thessaloniki. Although it is still continues to be commonly known to as Cyber Crime Unit or Cyber Crime Center. The legislation for the Cyber Crime Division has amended with the Article 31 of the Presidential Decree 82/2020 Government Gazette 183/A/23-9-2020.

The dark web is the World Wide Web content that exists on darknets that use the Internet but require specific software, configurations, or authorization to access. Through the dark web, private computer networks can communicate and conduct business anonymously without divulging identifying information, such as a user's location. The dark web forms a small part of the deep web, the part of the web not indexed by web search engines, although sometimes the term deep web is mistakenly used to refer specifically to the dark web.

<span class="mw-page-title-main">Microsoft Digital Crimes Unit</span> Internet security organization

The Microsoft Digital Crimes Unit (DCU) is a Microsoft sponsored team of international legal and internet security experts employing the latest tools and technologies to stop or interfere with cybercrime and cyber threats. The Microsoft Digital Crimes Unit was assembled in 2008. In 2013, a Cybercrime center for the DCU was opened in Redmond, Washington. There are about 100 members of the DCU stationed just in Redmond, Washington at the original Cybercrime Center. Members of the DCU include lawyers, data scientists, investigators, forensic analysts, and engineers. The DCU has international offices located in major cities such as: Beijing, Berlin, Bogota, Delhi, Dublin, Hong Kong, Sydney, and Washington, D.C. The DCU's main focuses are child protection, copyright infringement and malware crimes. The DCU must work closely with law enforcement to ensure the perpetrators are punished to the full extent of the law. The DCU has taken down many major botnets such as the Citadel, Rustock, and Zeus. Around the world malware has cost users about $113 billion and the DCU's jobs is to shut them down in accordance with the law.

The Polizia Postale e delle Comunicazioni is one of the units of the Polizia di Stato, the State Police of Italy. Its functions include the investigation of cybercrime.

<span class="mw-page-title-main">National Cyber Security Centre (Ireland)</span>

The National Cyber Security Centre (NCSC) is a government computer security organisation in Ireland, an operational arm of the Department of the Environment, Climate and Communications. The NCSC was developed in 2013 and formally established by the Irish government in July 2015. It is responsible for Ireland's cyber security, with a primary focus on securing government networks, protecting critical national infrastructure, and assisting businesses and citizens in protecting their own systems. The NCSC incorporates the Computer Security Incident Response Team (CSIRT-IE).

<span class="mw-page-title-main">Carding (fraud)</span> Crime involving the trafficking of credit card data

Carding is a term of the trafficking and unauthorized use of credit cards. The stolen credit cards or credit card numbers are then used to buy prepaid gift cards to cover up the tracks. Activities also encompass exploitation of personal data, and money laundering techniques. Modern carding sites have been described as full-service commercial entities.

<span class="mw-page-title-main">Strengthening State and Local Cyber Crime Fighting Act of 2017</span>

The Strengthening State and Local Cyber Crime Fighting Act of 2017 is a bill introduced in the United States House of Representatives by U.S. Representative John Ratcliffe (R-Texas). The bill would amend the Homeland Security Act of 2002 to authorize the National Computer Forensics Institute, with the intent of providing local and state officials with resources to better handle cybercrime threats. Ratcliffe serves as the current chairman of the House Homeland Security Subcommittee on Cybersecurity and Infrastructure Protection.

Ghana has one of the highest rates of cybercrime in the world, ranking 7th in a 2008 Internet Crime Survey. The most popular form of cybercrime in Ghana is cyberfraud and is typically achieved via credit card fraud. However, recent decreases in universal credit card usage has seen the expansion of other cybercrimes such as blackmail and hacking. This growth in crime has warranted a government response, with policies specifically addressing the cyberspace being developed. This has necessitated various studies including a cyber security maturity study which was inaugurated by the Ministry of Communications and conducted by the Global Cyber Security Capacity Center (GCSCC) of the University of Oxford in collaboration with the World Bank.

<span class="mw-page-title-main">9th Cybernetic Security Regiment "Rombo"</span> Active Italian Army cyberwar unit

The 9th Cybernetic Security Regiment "Rombo" is a cyber warfare unit of the Italian Army based in Cecchignola in Rome. The regiment is part of the Signal Arm and assigned to the Tactical Intelligence Brigade. The regiment is tasked with performing cyber operations related to the defence of the Italian Army's IT networks and Command-and-Control systems, and with the protection of critical infrastructures, platforms and weapon systems.

References

  1. 1 2 Baldoni Roberto; Chockler Gregory (2012). Collaborative Financial Infrastructure Protection: Tools, Abstractions, and Middleware. Springer. pp. 33–34. ISBN   978-3-642-20419-7.
  2. "The 21st Century's Lexicon: E-Crime". Treccani Italian Encyclopedia (in Italian). Archived from the original on 2014-05-21. Retrieved 2014-05-20.
  3. European Commission. "Actions under the responsibility of Member States: Action 38 in Italy" (website). Implementation of the Digital Agenda for Europe. Archived from the original on 2014-05-20. Retrieved 2014-05-20.
  4. 1 2 "US Secret Service Establishes Second European Electronic Crimes Task Force". HostExploit . June 2010. Archived from the original (Press Release) on 2014-05-17. Retrieved 2013-10-15.
  5. "United States Secret Service signs partnership agreement with Italian officials establishing the first European Electronic Crimes Task Force" (PDF). USSS website (Press Release). July 2009. Archived from the original (PDF) on 2012-09-15. Retrieved 2013-10-15.
  6. Istituto Affari Internazionali - Osservatorio di Politica Internazionale (May 2011). "Cyber Security: Europa e Italia" (PDF). Italian Parliament's website (in Italian). p. 22.
  7. The European Union Pilot Project on Transatlantic Methods for handling global challenges in the European Union and United States (June 2011). "EU-U.S. Security Strategies: comparative scenarios and recommendations" (PDF). Website of the Center for Strategic and International Studies. p. 65. Archived (PDF) from the original on 2013-05-16. Retrieved 2013-10-15.
  8. 1 2 RAND Corporation (March 2012). "Feasibility Study for a European Cybercrime Center" (PDF). European Commission's website. p. 62. Archived from the original (PDF) on 2014-05-19. Retrieved 2013-10-10.
  9. 1 2 "Banking Research & Innovation Centre" (PDF). ABI Lab's website (brochure) (in Italian and English). 2014. p. 2. Archived from the original on 2014-05-21. Retrieved 2014-05-21.
  10. Maioli Cesare (2010). "Project Card: Cooperation with EECTF". University of Bologna - CIRSFID website (in Italian). Archived from the original on 2014-05-21. Retrieved 2014-05-20.
  11. 1 2 Royal Holloway University of London (December 2012). "Dr. Gerhard Hancke speaks at European Electronic Crime Task Force event". Archived from the original on 2014-05-21. Retrieved 2014-05-20.
  12. 1 2 "Cyber Crime: the risks for the economy and the enterprises" (PDF). UNICRI's website. Round Table Agenda. November 2013. Archived (PDF) from the original on 2014-05-20. Retrieved 2014-05-20.
  13. "ITU Geneva: Poste Italiane signs a new partnership for Cybersecurity" (PDF). Poste Italiane's website (Press Release). October 2009. Archived from the original (PDF) on 2013-10-22. Retrieved 2014-05-19.
  14. "ITU Geneva: Poste Italiane signs a new partnership for Cybersecurity". ITU IMPACT's website. October 2009. Archived from the original (Press Release) on 2014-05-21. Retrieved 2014-05-20.
  15. 1 2 "RSA joins European Electronic Crime Task Force" (Press Release). DataManager's website (in Italian). February 2011. Archived from the original on 2014-05-20. Retrieved 2014-05-20.
  16. "RSA Conference Europe Announces Full Keynote Line-Up for Annual Information Security Event". Reuters . September 2011. Archived from the original on 2014-05-20. Retrieved 2014-05-20.
  17. "RSA Conference Europe Announces Full Keynote Line-Up for Annual Information Security Event". Business Wire . September 2011. Archived from the original on 2014-05-20. Retrieved 2014-05-20.
  18. Banche e Sicurezza 2013 (June 2013). "Le strategie di protezione tra cybercrime e sicurezza fisica nelle banche e nei settori più a rischio" (PDF) (Event Agenda) (in Italian). Archived (PDF) from the original on 2014-05-20. Retrieved 2014-05-20.{{cite web}}: CS1 maint: numeric names: authors list (link)
  19. "IT Security and Frauds Working Group". ABILab's website (in Italian). Archived from the original on 2014-05-20. Retrieved 2014-05-20.
  20. "Camera: commissione Trasporti, oggi dalle 14 audizioni su sicurezza reti" (in Italian). ASCA. December 2012. Archived from the original (Press Release) on 2014-05-20. Retrieved 2014-05-20.
  21. "Public Hearing of the EECTF Chairman at the Chamber of Deputies of Italian Parliament on EECTF activities and trends of cyber security in Italy" (Video Stream). YouTube (in Italian). December 2012. Archived from the original on 2016-08-04. Retrieved 2016-11-29.
  22. "Public Hearing of the EECTF Chairman at the Chamber of Deputies of Italian Parliament on EECTF activities and trends of cyber security in Italy" (Stenographic Report). Italian Chamber of Deputies website (in Italian). December 2012. Archived from the original on 2014-05-21. Retrieved 2014-05-20.
  23. "Public Hearing of the EECTF Chairman at the Chamber of Deputies of Italian Parliament on EECTF activities and trends of cyber security in Italy" (Audio Streaming and Podcast). Italian Parliament Web Radio (in Italian). December 2012. Archived from the original on 2014-05-21. Retrieved 2014-05-20.
  24. "Home - ABI Lab". abilab.it. Archived from the original on 2012-08-14. Retrieved 2014-05-20.
  25. "Events - Global Cyber Security Center - GCSEC". gcsec.org. Archived from the original on 2014-05-21. Retrieved 2014-05-21.
  26. "Poste: contro il crimine informatico oggi a Roma l'EECTF". Quotidiano Finanza (in Italian). March 2010. Archived from the original on 2014-05-20. Retrieved 2014-05-20.
  27. "EECTF work praised by Poste Italiane's Sarmi". Post&Parcel. February 2011. Archived from the original on 2014-05-20. Retrieved 2014-05-20.
  28. "Poste Italiane: summit task-force Italia-Usa contro crimini informatici". Wall Street Italia (in Italian). May 2011. Archived from the original on 2014-05-20. Retrieved 2014-05-20.
  29. "CERT's and International Cooperation Networks". SERIT - Security Research in Italy. April 2013. Archived from the original on 2014-05-19. Retrieved 2014-05-19.
  30. "NESSoS invited presentation at EECTF 2013". NESSoS FP7 Project. April 2013. Archived from the original on 2014-05-20. Retrieved 2014-05-20.
  31. "CERT-EU News Monitor". europa.eu. Archived from the original on 2014-03-31. Retrieved 2014-05-19.
  32. "English section". garanteprivacy.it. Archived from the original on 2014-05-21. Retrieved 2014-05-21.
  33. "US Ambassador to Italy, David Thorne, speaks at European Electronic Crime Task Force summit". US Embassy to Italy's website (in Italian). May 2011. Archived from the original (Press Release) on 2014-05-20. Retrieved 2014-05-19.
  34. "United States Secret Service: Rome Electronic Crimes Task Force". secretservice.gov. Archived from the original on 2015-03-13. Retrieved 2015-03-04.