EU set for new measures to tackle cybercrime

Time to get tough says EC.

The European Commission is seeking to strengthen cooperation between law enforcement and industry worldwide according to a senior EC official. The commission is also looking to increase penalties for cyber-criminals.

Countries such as Estonia and Lithuania have been victimised by cyberattacks, but officials in those countries have complained they didn't get support fast enough from other nations, said Radomir Jansky, one of the top cybercrime officials within the Commission's Directorate-General for Justice, Freedom and Security.

"Large-scale attacks are on the rise, and we need to deal with them," Jansky said at the Messaging Anti-Abuse Working Group meeting in Amsterdam. The conference is attended by ISPs and industry professionals who discuss issues such as spam, email marketing issues and botnets.

In April and May 2007, Estonian websites fell under denial-of-service attacks after a World War II memorial to Russian soldiers was moved from a public square. Georgia experienced cyberattacks in August 2008 as Russia invaded Georgia's South Ossetia and Abkhazia regions.

The Commission is updating the Council Framework Decision on Attacks Against Information Systems, which went into force in 2005, Jansky said. European Union countries are not bound by law to abide by the framework, but it is recommended that they follow it.

The update, which has not been published yet, will likely recommend that countries across Europe increase the sentences for those convicted of cybercrime since there doesn't appear to be much of a deterrent effect now, Jansky said.

Sentences now range from one to three years, but countries such as Estonia, France, Germany and the UK have longer ones, he said.

The updated framework may also recommend that countries respond to a request for help in a cybercrime investigation from other countries faster, such as within eight hours. Now, there is no time limit, Jansky said.

There is also a need for a unified system that enables EU countries to report cyberattacks, prosecutions and other criminal reports. The data would help create a more complete picture on the scope of cybercrime, Jansky said. Countries also need to agree on an acceptable format for reporting that data.

"We need to have more data," Jansky said.

In March, the Commission published a draft of a second framework under revision, the Council Framework Decision on Combating the Sexual Exploitation of Children and Child Pornography.

That framework is seeking to tackle new scenarios of concern regarding Internet-related child abuse. The framework will likely recommend new criminal offences related to grooming, the viewing of child pornography without downloading images and allowing the use of covert tools during investigations, Jansky said.

The framework will likely be published by the end of the year, as the Council of the European Union is still working out the details, Jansky said.


What are your views on this subject? Use the form below to post a comment on this article up to 500 characters.


Characters remaining: 500

Related Security news

Antivirus programs fail to stop new malware

One in three systems infected.

Adobe sorry for 16-month-old Flash bug

Unpatched vulnerability 'slipped through the cracks'

HTML 5 leaves client storage open to web attacks

Security researcher says web apps could be vulnerable

Rugged Manifesto calls on developers for secure code

Security professionals call for better programming practices



Email this article to a friend or colleague:


PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.

Techworld White Papers

Challenges and opportunities of PCI

The Payment Card Industry Data Security Standard provides an enterprise structure for improving operational, security, and audit performance. The benefits of the PCI DSS go beyond audit costs and results.

Download Whitepaper

Database security: Preventing enterprise data leaks at the source

IDC discusses the growing internal threats to business information, the impact of government regulations on the protection of data, and how enterprises must adopt database security best practices...

Download Whitepaper

Six essential steps to successful IT centralisation

This report, based on the real experience of a recent centralisation project, is aimed at those involved in IT strategy within their organisation. It provides some practical insights for CIOs, CTOs, Heads of IT, IT Directors and those involved more closely with the service management function.

Download Whitepaper

Application Grid: The ideal platform for IT consolidation

Evaluating the opportunity for consolidation of middleware — Java application servers and related technologies.

Download Whitepaper

Techworld UK - Technology - Business

COLT White Paper

Are all VoIP services the same?

Questions to ask your service provider to ensure you get the VoIP service you need
With careful choice of partner, your business can have all the advantages of VoIP access - reduced costs, flexibility and simplicity - without the drawbacks.
This white paper is your guide to ensure you get right the VoIP service and details the pitfalls which businesses would do well to avoid.

Download white paper
COLT White Paper

IT Misuse Survey

Complete this survey and you could win a Nexus One

Techworld are running a short survey to discover how UK businesses are managing Internet and email misuse in the Enterprise.

Complete Survey

Webcast: IT Financial Management: Cost Optimisation for Efficiency and Agility.
On Demand Webcast
Join this webcast to learn about the techniques and technologies that can help you prove the value of IT to the business by understanding the true cost of today's IT services and those that will be necessary to deliver future success.

Register Today

Site Map

IDG Network

* *