Sign In
Information about science based innovations, solid facts to support decision-making, performance and business development for VTT’s partners, customers and anyone interested in high technology and its applications.
A magazine on science, technology and business

​Kimmo Halunen.

Cyber security modelled on the vaccination programme

Text: Nina Garlo-Melkas | Photos: Timo Porthan | 5.3.2019

At present, cyber security tends to be discussed using terms referring to war and crime. Although the threats are real, it is more useful to seek and adopt solutions to combat the problem rather than conjure up alarming scenarios. The national vaccination programme, which has produced public health benefits, could serve as a model.

– We have witnessed enormous improvements in public health – life expectancy has increased and new cures have been found for serious diseases. A similar solution-oriented approach could be applied more often in the cyber security discussion, says Kimmo Halunen, Senior Scientist from VTT's information security team.

According to the Halunen, the implementation of a "vaccination programme" for cyber security first requires the identification of the problem. Who are cyber criminals targeting with their attacks, and which targets are objects of government espionage, for example? Only when we know this can we find solutions to the problems.

We must also insure sufficient coverage by the programme. How can we encourage companies to invest in cyber security and reduce risk behaviour that is a threat to the organisation's cyber security? According to Halunen, risk behaviour can be as simple as leaving the office door unlocked at the end of the working day.

Incentives to curb cyber risks

In the future, companies can be encouraged to invest in cyber security through means such as granting various certificates to organisations whose network security is at the desired level.

This is also the direction being taken in Finland. The Finnish Cyber Security Certificate (FINSC), for example, is a certification system developed together with businesses and the public sector with the aim of increasing cyber security competence and understanding among different players in society, as well as helping organisations control their own security.

The EU also announced last June that it would enhance its resilience against cyber threats by establishing an EU-wide certification framework for ICT products, services and processes. Certificates issued on the basis of these systems will be valid in all EU countries.

Borders in the online world?

If a carrot approach does not help, a stick may be needed. In the future, decision-makers may need to regulate the types of security requirements and implementations organisations should have. A similar model in the current networked IoT-world is also called for by American security specialist Bruce Schneier.

– It isn't easy to determine the right level of regulation, but that's what we have experts for, and there is an ongoing dialogue around this issue. We should consider the kind of regulation possibly needed in order to make sure that everyone is "vaccinated" and that improvement measures are widely adopted.

Mikko Hyppönen.

The basics must be in order

Halunen reminds us that organisations still have a lot to improve in their information security basics. For example, updates, backups and passwords are still not adequately managed.

Organisations should also more carefully control their risks – by ensuring, for example, that persons leaving the organisation do not continue to have access to their user accounts.

As the ongoing IoT revolution is still in its early days, the importance of cyber security will continue to increase in the future. Computers and traditional smart devices, such as smart TVs and phones, are already online, but as the technology evolves, also "dumb" devices will gradually move into the online world. In the future, the security of consumer devices connected to the internet will be increasingly important.

– From the consumer's perspective, it doesn't make sense for a toaster to be online: they don't need a message on their mobile phone that the toast is done. But in the future even the toaster will be online, because the manufacturer wants to collect data, says security expert Mikko Hyppönen from F-Secure.

– Data is money, and even toaster manufacturers know that. If they could already connect their devices to the internet now, they would, but they can't because it's too expensive. In another ten years it will be possible, adds Hyppönen.

Resilience, or resistance to attacks

The ability to prepare for risks will be in an important role in the future battle against cyber threats. Some organisations operate in sectors that are more susceptible to online attacks, and this must be taken into account when building cyber security protection.

– Organisations should prepare against potential attacks already at an early stage. This will ensure that if the organisation is attacked and takes a hit, it is clear how to get the organisation back on its feet as quickly as possible and with minimal damages, emphasises Halunen.

The key issue is to plan how the organisation can detect that a cyber attack has taken place and what to do when this happens. Not many in the security business want to consider this, although they should.

– It can take up to months before anyone in the organisation even notices that it has become the victim of a crime, as network traffic isn't monitored actively enough – often, it isn't even known what normal network traffic looks like, F-Secure's Mikko Hyppönen says in conclusion. 


 

 

VTT Impulsehttps://www.vttresearch.com/ImpulseVTT Impulse
Business for transportationhttps://www.vttresearch.com/Impulse/Pages/Business-for-transportation.aspxBusiness for transportation
Clearing the way for new materials with ChemSheet technologyhttps://www.vttresearch.com/Impulse/Pages/Clearing-the-way-for-new-materials-with-ChemSheet-technology.aspxClearing the way for new materials with ChemSheet technology
Better beer based on long-term researchhttps://www.vttresearch.com/Impulse/Pages/Better-beer-based-on-long-term-research.aspxBetter beer based on long-term research
Business angel speaks out: Growth from the international arenahttps://www.vttresearch.com/Impulse/Pages/Business-angel-speaks-out-Growth-from-the-international-arena.aspxBusiness angel speaks out: Growth from the international arena
All sights on generationhttps://www.vttresearch.com/Impulse/Pages/All-sights-on-generation.aspxAll sights on generation
A man driven by optimism and curiosityhttps://www.vttresearch.com/Impulse/Pages/A-man-driven-by-optimism-and-curiosity.aspxA man driven by optimism and curiosity
Finland is good investmenthttps://www.vttresearch.com/Impulse/Pages/Finland-is-good-investment.aspxFinland is good investment
More speed to network services with 5Ghttps://www.vttresearch.com/Impulse/Pages/More-speed-to-network-services-with-5G.aspxMore speed to network services with 5G
Impulse 2/2014https://www.vttresearch.com/Impulse/Pages/Impulse-2-2014.aspxImpulse 2/2014
Towards bioeconomy with the power of woodhttps://www.vttresearch.com/Impulse/Pages/Towards-bioeconomy-with-the-power-of-wood.aspxTowards bioeconomy with the power of wood
Digital societyhttps://www.vttresearch.com/Impulse/Pages/Digital-society.aspxDigital society
Business developmenthttps://www.vttresearch.com/Impulse/Pages/Business-development.aspxBusiness development
Smart Citieshttps://www.vttresearch.com/Impulse/Pages/Smart-Cities.aspxSmart Cities
Finland provides community housing solutions for Namibiahttps://www.vttresearch.com/Impulse/Pages/Finland-provides-community-housing-solutions-for-Namibia.aspxFinland provides community housing solutions for Namibia
Impulse 1/2017https://www.vttresearch.com/Impulse/Pages/Impulse-1-2017.aspxImpulse 1/2017
The FinnCERES competence centre will take the materials bioeconomy to a new levelhttps://www.vttresearch.com/Impulse/Pages/The-FinnCERES-competence-centre-will-take-the-materials-bioeconomy-to-a-new-level.aspxThe FinnCERES competence centre will take the materials bioeconomy to a new level
Bioeconomy and circular economyhttps://www.vttresearch.com/Impulse/Pages/Bioeconomy-and-circular-economy.aspxBioeconomy and circular economy
Impulse 1/2015https://www.vttresearch.com/Impulse/Pages/Impulse-1-2015.aspxImpulse 1/2015
The new agenda enhances the use of research infrastructurehttps://www.vttresearch.com/Impulse/Pages/The-new-agenda-enhances-the-use-of-research-infrastructure.aspxThe new agenda enhances the use of research infrastructure
Turbine blades bring millions in savingshttps://www.vttresearch.com/Impulse/Pages/Turbine-blades-bring-millions-in-savings.aspxTurbine blades bring millions in savings
Impulse 1/2014https://www.vttresearch.com/Impulse/Pages/Impulse-1-2014.aspxImpulse 1/2014
Smart industryhttps://www.vttresearch.com/Impulse/Pages/Smart-industry.aspxSmart industry
Low carbon energyhttps://www.vttresearch.com/Impulse/Pages/Low-carbon-energy.aspxLow carbon energy
Health and wellbeinghttps://www.vttresearch.com/Impulse/Pages/Health-and-wellbeing.aspxHealth and wellbeing
Raw material for fuels, chemicals and food from atmospheric carbon dioxidehttps://www.vttresearch.com/Impulse/Pages/Raw-material-for-fuels-chemicals-and-food-from-atmospheric-carbon-dioxide.aspxRaw material for fuels, chemicals and food from atmospheric carbon dioxide
Global demand for oats is increasing stronglyhttps://www.vttresearch.com/Impulse/Pages/Global-demand-for-oats-is-increasing-strongly.aspxGlobal demand for oats is increasing strongly
Minister of Economic Affairs Olli Rehn: Renewal of economy will bring new growthhttps://www.vttresearch.com/Impulse/Pages/Renewal-of-economy-will-bring-new-growth.aspxMinister of Economic Affairs Olli Rehn: Renewal of economy will bring new growth
Digitalisation of the shipping industry requires cutting-edge researchhttps://www.vttresearch.com/Impulse/Pages/Digitalisation-of-the-shipping-industry-requires-cutting-edge-research.aspxDigitalisation of the shipping industry requires cutting-edge research
New materials developed from plantshttps://www.vttresearch.com/Impulse/Pages/New-materials-developed-from-plants.aspxNew materials developed from plants
Biobased aromatics essential to the fine chemical industryhttps://www.vttresearch.com/Impulse/Pages/Biobased-aromatics-essential-to-the-fine-chemical-industry.aspxBiobased aromatics essential to the fine chemical industry
An export product tougher than nailshttps://www.vttresearch.com/Impulse/Pages/An-export-product-tougher-than-nails.aspxAn export product tougher than nails
Robotics – technology with multi-faceted potentialhttps://www.vttresearch.com/Impulse/Pages/Robotics-technology-with-multi-faceted-potential.aspxRobotics – technology with multi-faceted potential
Taking the bioeconomy to a new level through digitalisationhttps://www.vttresearch.com/Impulse/Pages/Taking-the-bioeconomy-to-a-new-level-through-digitalisation.aspxTaking the bioeconomy to a new level through digitalisation
Passion spurs researchhttps://www.vttresearch.com/Impulse/Pages/passion-spurs-research.aspxPassion spurs research
The autonomous world is already herehttps://www.vttresearch.com/Impulse/Pages/The-autonomous-world-is-already-here.aspxThe autonomous world is already here
Digitalization in RTOs: Speeding up the development of bio-based technologies with digitalizationhttps://www.vttresearch.com/Impulse/Pages/Digitalisation-in-RTOs-Speeding-up-the-development-of-bio-based-technologies-with-digitalization.aspxDigitalization in RTOs: Speeding up the development of bio-based technologies with digitalization
Autonomous systems are proliferating rapidly in industryhttps://www.vttresearch.com/Impulse/Pages/Autonomous-systems-are-proliferating-rapidly-in-industry.aspxAutonomous systems are proliferating rapidly in industry
The story of Finlandhttps://www.vttresearch.com/Impulse/Pages/The-story-of-Finland.aspxThe story of Finland
Finnish wheels will keep on turninghttps://www.vttresearch.com/Impulse/Pages/Finnish-wheels-will-keep-on-turning.aspxFinnish wheels will keep on turning
International entrepreneurship does not happen overnight it needs to be nurturedhttps://www.vttresearch.com/Impulse/Pages/International-entrepreneurship-does-not-happen-overnight-it-needs-to-be-nurtured.aspxInternational entrepreneurship does not happen overnight it needs to be nurtured
Simon Kos, Microsoft: AI is forcing its way into patient carehttps://www.vttresearch.com/Impulse/Pages/Simon-Kos-Microsoft-AI-is-forcing-its-way-into-patient-care.aspxSimon Kos, Microsoft: AI is forcing its way into patient care
Solar Foods Oy: Tailored nutrition for a space exploration modelhttps://www.vttresearch.com/Impulse/Pages/Solar-Foods-Oy-Tailored-nutrition-for-a-space-exploration-model.aspxSolar Foods Oy: Tailored nutrition for a space exploration model
Impulse 1/2016https://www.vttresearch.com/Impulse/Pages/Impulse-1-2016.aspxImpulse 1/2016
Why do so many women feel chilly indoorshttps://www.vttresearch.com/Impulse/Pages/Why-do-so-many-women-feel-chilly-indoors.aspxWhy do so many women feel chilly indoors
Optical isotope spectroscopy – More and more detailed informationhttps://www.vttresearch.com/Impulse/Pages/Optical-isotope-spectroscopy-more-and-more-detailed-information.aspxOptical isotope spectroscopy – More and more detailed information
Matti Apunen: A problem called excellencehttps://www.vttresearch.com/Impulse/Pages/Matti-Apunen-A-problem-called-excellence.aspxMatti Apunen: A problem called excellence
Artificial intelligence is being taught to identify who will benefit from chemotherapyhttps://www.vttresearch.com/Impulse/Pages/Artificial-intelligence-is-being-taught-to-identify-who-will-benefit-from-chemotherapy.aspxArtificial intelligence is being taught to identify who will benefit from chemotherapy
Could smartglasses replace smartphones? VTT spin-off Dispelix to commercialise a virtual display for glasseshttps://www.vttresearch.com/Impulse/Pages/Could-smartglasses-replace-smartphones-VTT-spin-off-Dispelix-to-commercialise-a-virtual-display-for-glasses.aspxCould smartglasses replace smartphones? VTT spin-off Dispelix to commercialise a virtual display for glasses
Tracking peoplehttps://www.vttresearch.com/Impulse/Pages/Tracking-people.aspxTracking people