The European Union has a long way to go in safeguarding Internet businesses, according to the European Network and Information Security Agency. ENISA cited the possibility of a “digital 9/11.”
Specifically, ENISA underlined the importance of network and information security, especially in regard to i2010, the EU’s umbrella strategy for developing technology. ENISA looked at social networking, spam and online fraud, among other identified threats.
“Europe must take security threats more seriously and invest more resources in network and information security,” said Andrea Pirotti, executive director of ENISA. He urged the EU to require “reporting on security breaches and incidents for business, just as the U.S. has already done.”
A Growing Problem
ENISA said 30 percent of global trade is “digitally dependent” and cited estimates that spam cost businesses about EU64.5 billion (US$101.43 billion) in 2007, double the 2005 figure. With only 6 percent of spam reaching mailboxes, ENISA said, the problem is perceived to be under control. However, it is growing in quantity, size and bandwidth and remains a costly problem.
According to ENISA, computer emergency response teams (CERTs) are key components in combating cyber attacks and spam. ENISA estimated there are six million hijacked computers, or botnets, used worldwide by organized criminals to send spam and commit online fraud. In 2005, only eight EU member states had CERTs, but today there are 14, with 10 more planned.
However, Pirotti said, “The member states should undertake concerted efforts to reduce the imbalances in security levels, with more cross-border cooperation.”
Assessing the Risks
ENISA stressed the risks of social-networking sites and recommended a review of the regulatory framework of Directive 2002/58 on privacy and electronic communications. ENISA has also produced a feasibility study on a European information sharing and alert system for citizens and small and midsize businesses, which make up two-thirds of the…