Proactive cyber defense'' to be introduced to critical infrastructure

The government is considering introducing a system of "active cyber defense" that detects signs of attacks and identifies their sources to strengthen defense against cyberattacks on critical infrastructure such as telecommunications and electric power. went inside. Coordination will proceed with the direction of including the policy in the National Security Strategy to be revised by the end of the year.

 This was confirmed by several government officials. Proactive cyber defense constantly patrols cyberspace to quickly identify and respond to suspicious communications or behavior that could pose a threat to security. It is said that the United States and the United Kingdom have already adopted it.


 Specifically, the pillar is to grant the government authority to intrude into systems and networks and to analyze suspicious communications during normal times. Another option is to make it possible to take countermeasures to neutralize the data, files, etc. of the attack source. If realized, vulnerableluxury It will lead to a drastic strengthening of Japan's cyber defense, which has been pointed out as a problem.

Prime Minister's official residence
 Cyberattacks can cause enormous damage to infrastructure in a short period of time, leading to social chaos. In the current situation, there is no choice but to take action such as collecting information after the occurrence of damage.

 Under the current Unauthorized Computer Access Law, intrusion into a third party's system or network is illegal, except for criminal investigations, even for the purpose of detecting and identifying the source of cyberattacks. Criminal law prohibits the creation of malware (malicious programs) as a means of neutralizing the source of an attack.

 It is interpreted that the "confidentiality of communications" guaranteed by the Constitution also applies to the Internet. The government intends to carefully develop the legal system from next year onwards, while giving due consideration to the rights of the people.

 Proactive cyber defense is expected to be handled jointly by the Cabinet Cyber ​​Security Center (NISC) and the Self-Defense Forces Cyber ​​Defense Corps. The government is also planning to strengthen the NISC and the 500-strong defense force.

 In recent years, cyberattacks are often carried out in the early stages of military conflicts, and countries are working on countermeasures. Prior to Russia's invasion of Ukraine in February this year, cyberattacks were carried out on government agencies and telecommunications companies.