{"id":19187,"date":"2018-10-23T10:57:18","date_gmt":"2018-10-23T08:57:18","guid":{"rendered":"https:\/\/www.redanalysis.org\/?p=19187"},"modified":"2021-10-07T19:06:29","modified_gmt":"2021-10-07T17:06:29","slug":"shaping-security-cyber-future-agora-41-agence-fran%c3%a7aise-de-cybers%c3%a9curit%c3%a9","status":"publish","type":"post","link":"https:\/\/redanalysis.org\/fr\/2018\/10\/23\/shaping-security-cyber-future-agora-41-french-national-cybersecurity-agency\/","title":{"rendered":"Fa\u00e7onner la s\u00e9curit\u00e9 de l'avenir du cybern\u00e9tique - Agora 41, programme de sensibilisation strat\u00e9gique de l'Agence nationale de la cybers\u00e9curit\u00e9"},"content":{"rendered":"\n

Acc\u00e8s \u00e0 la version fran\u00e7aise<\/a><\/p><\/blockquote>\n\n\n\n

As we enter the “fourth industrial revolution”, the age of the digital transformation, a new emerging “AI-world”, and the “second quantum revolution”, national and international security must adapt. It must do so by anticipating this future world, avoiding surprises related to new – but also old – threats and dangers, while seizing the immense opportunities offered by what is no less than a change of paradigm (For the labels, respectively, Klaus Schwab, World Economic Forum<\/a>, Helene Lavoix, The Future Artificial Intelligence \u2013 Powered World series<\/a>, The Red (Team) Analysis Society<\/em>, Jonathan P. Dowling, Gerard J. Milburn, “Quantum Technology: The Second Quantum Revolution”, 13 Jun 2002, arXiv:quant-ph\/0206091v1<\/a>).<\/p>\n\n\n\n

The strategy related to cyber space and cyber security varies according to countries – and actors. It is handled in various ways by different types of agencies. After having briefly presented the main French, British and American state actors for cyber security, we shall focus on the French outlook and present the ANSSI, its goals and finally new outreach initiative, Agora 41.<\/p>\n\n\n\n

France, the UK and the U.S. – a brief overview<\/h2>\n\n\n\n

In France, the Agence Nationale de la S\u00e9curit\u00e9 des Syst\u00e8mes d’Information (ANSSI<\/a>) – National Agency for Cyber Security, created on 7 July 2009,  deals with the security of the cyber world. It is the national authority for all matters related to the defence and security of information systems and, as a result, leads the French National Strategy for Digital Security<\/a> (2015). Nonetheless, other cyber dimensions remain under other types of state authorities, notably the ministry of Interior and the ministry of Defence, which plans a \u20ac1.6 billion budget for 2019-2025 for cyber security, while its cyber defence command, created in 2016, will see an increase in personal (Benjamin Hue, “La France va renforcer son arsenal contre la cybercriminalit\u00e9<\/a>“, RTL<\/em>, 24 January 2018). A new national cyber strategy over five years with a clear overall budget is necessary and could be forthcoming (Ibid.).*<\/p>\n\n\n\n

The ANSSI more or less corresponds to the more recent British National Cyber Security Center (NCSC), a part of the GCHQ, opened in October 2016 and officially launched on 14 February 2017, fully participating to the 2017 CyberUK strategy <\/a>(launch of the NCSC, video<\/a> and documents<\/a>; Reuters, “Britain to spend 1.9 billion pounds on boosting cyber defenses<\/a>“). The overall UK budget for cybersecurity across all ministries (but not including potential budget for cyber-retaliations and attacks) reaches \u00a31.9 billion for 2017-2022 (“Chancellor’s speech at the National Cyber Security Centre opening<\/a>“, 14 February 2017; Reuters<\/em>, Ibid.).<\/p>\n\n\n\n

Both the ANSSI and the NCSC are heir to the past cryptographic mission of states’ institutions. The ANSSI is the latest child of the Direction Technique des Chiffres (DTC) created in 1943 in Alger (ANSSI History<\/a>). For its part, the NCSC, through the GCHQ, is indeed grounded  in the most famous Bletchley Park<\/a>, which, notably thanks to Turing, the team of codebreakers and the Bombes machine<\/em><\/a> they created, defeated the German Enigma Machine and thus contributed to the Allies victory during World War 2 . Before that, its ancestry can be traced to the codebreaking efforts at the Admiralty and War Office during World War 1 (e.g. GCHQ, “The story of Signals Intelligence 1914-2014″<\/a>).<\/p>\n\n\n\n

Cybersecurity in the U.S. benefits from a $15 billion federal budget for FY 2019 dwarfing European efforts, but to share among all agencies with a cyber element, from the NASA to the Small Business Administration (John Slye, “The Fy 2019 Budget Increases Cybersecurity Funding By Nearly $600 Million<\/a>“, Deltek<\/em>, 28 February 2018).<\/p>\n\n\n\n

\"\"<\/a>
U.S. Federal Cybersecurity Funding FY 2017-2019 by John Slye, “The Fy 2019 Budget Increases Cybersecurity Funding By Nearly $600 Million<\/a>“, Deltek<\/em>, 28 February 2018<\/figcaption><\/figure><\/div>\n\n\n\n

Nonetheless, and despite the famous National Security Agency\/Central Security Service (NSA\/CSS), no new agency nor overarching centre handles the new cyber world and its security in the leading way developed in both France and the UK (David H. Petraeus, “The Case for a National Cybersecurity Agency<\/a>“, Belfer Center<\/em>, 5 September 2018).  The Office of Cybersecurity and Communications<\/a> of the National Protection and Program Directorate (NPPD)<\/a>  within the Department of Homeland Security (DHS) could be seen as an effort approaching the British and French approach. However, being an Office, it does not have the autonomy, weight and leadership that may be found in Europe. Furthermore, by its very location and by the number of other agencies involved, the OCC\/NPPD is very likely to have to devote time, resources and energy to administrative skirmishes and quarrels.<\/p>\n\n\n\n

That said, the American cybersecurity budget remains very large indeed. Meanwhile, the U.S. benefits of a “cyber ecosystem”, which is a formidable assets. This ecosystem is created by the Federal cyber budget and the benefiting agencies and offices, the GAFA – and other companies such as Intel, NVIDIA and IBM to quote only a few – the Silicon Valley, patriot and concerned billionaires and world-class universities, as shown by the $ 1 billion MIT initiative “to address the global opportunities and challenges presented by the prevalence of computing and the rise of artificial intelligence (AI),” including a $350 million gift by Stephen A. Schwarzman, CEO of Blackstone (MIT Review<\/em>, “MIT reshapes itself to shape the future<\/a>“).<\/p>\n\n\n\n

If Eisenhower pointed out the importance of the military\u2013industrial complex to understand American national security (Military-Industrial Complex Speech<\/a>, Dwight D. Eisenhower, 1961), it could well be that we now must also count with a similar but larger and deeper cyber-IT-whole of government complex.  The about to be born “Joint Enterprise Defense Infrastructure (JEDI) program for the Department of Defense could only reinforce this trend (Helene Lavoix, “Artificial Intelligence, Computing Power and Geopolitics (2)<\/a>“, The Red (Team) Analysis Society<\/em>, 25 June 2018; Shaun Nichols, “US JEDI military cloud network is so high-tech, bidders will have to submit their proposals by hand, on DVD<\/a>“, The Register<\/em>, 27 Sep 2018).<\/p>\n\n\n\n

For its part, NATO is working upon getting a new cyber military command center, which should be ready for 2023 (Robin Emmott, “NATO cyber command to be fully operational in 2023<\/a>“, Reuters<\/em>, 16 October 2018).<\/p>\n\n\n\n

A complete and more detailed outlook would notably need to include China, should we want to provide a better global picture.<\/p>\n\n\n\n

The ANSSI, from Strategy to Anticipation and Outreach<\/h2>\n\n\n\n
\"\"<\/a><\/figure><\/div>\n\n\n\n

As the leader of the French cybersecurity strategy, the ANSSI aims at achieving five main goals (website<\/a>):<\/p>\n\n\n\n

  1. Defence of the fundamental national interest in cyberspace.<\/li>
  2. Promoting cyperspace usage and protect citizens, with a strong response against any type of cybercrime.<\/li>
  3. Raising digital security awareness.<\/li>
  4. Transforming digital security into a competitive advantage for French economic actors.<\/li>
  5. Strengthening international influence [shaping norms, promoting cyber global stability, promoting European autonomy – my summary].<\/li><\/ol>\n\n\n\n

    Furthermore, the ANSSI must have a strong strategic foresight and anticipatory activity across all timeframes to be able to provide for the security of the new emerging world, while also dealing with the very concrete threats and risks of the present. Indeed, for example, among many other impacts, quantum computing will completely unsettle the safe transmission of data, while cities and companies abundantly using artificial intelligence in its deep learning component will need to be secured. Quantum communication work, for example, at creating quantum networks, upon which could be built in the future a quantum internet (Edd Gent, “From Quantum Computing to a Quantum Internet\u2014A Roadmap<\/a>“, SingularityHub<\/em>, 22 October 2018). Quantum computing, or more largely quantum technologies, and AI, both accelerating and disrupting each other, as we saw (“The Coming Quantum Computing Disruption, Artificial Intelligence and Geopolitics (1)”,<\/a> 15 October 2018), will create completely new cyber challenges that need to be envisioned and for which states’ agencies, companies, and citizens must be prepared.<\/p>\n\n\n\n

    The videos below, notably when seen together, may help us imagine what the future and its security could look like (trailer of Person of Interest<\/a> Season 4 by J.J. Abrahams; NVIDIA GTC China 2017 Keynote Recap, notably the part on smart cities).<\/p>\n\n\n\n

    \n