TRUST 2010

Workshop on Emerging and Future Risks:
Assessing risks for new applications and technologies

Looking into the crystal ball: identifying emerging and future risks

A workshop on the work conducted within the European Network and Information Security Agency

In order to be proactive and prepared for the challenges and risks posed my emerging and future technologies and applications, it is imperative to identify and assess those risks in advance in a comprehensive manner. Given the social impact of emerging applications and technologies, identification of risks at early stages contributes towards citizen's trust in the Information Society. To this effect, ENISA has developed an emerging and future risks framework. In this workshop, we are going to present the results of three risk assessments on emerging and future scenarios of the following technologies / applications:

• Cloud computing: ENISA, supported by a group of subject matter experts including representatives from Industry, Academia and Governmental Organizations, has conducted a risks assessment with regard to cloud computing. The assessment considers both possible business model for service provision and used technology. The result is an in-depth and independent analysis that outlines information security benefits and key security risks of cloud computing. The report provides also a set of practical recommendations. In this presentation, the results from this effort will be presented and follow up activities are going to be discussed.
  
  Speaker: Daniele Catteddu, CISA, CISM, ENISA


• Internet of Things / RFID: ENISA undertook the task to identify and assess emerging and future risks of a particular IoT/RFID scenario, also in the context of ENISA's role in this specified in EC Communication "Internet of Things - An Action Plan for Europe. Within this work a risk assessment on a complex scenario involving Internet of Things (IoT) / Radio Frequency IDentification (RFID) technologies in future air travel has been carried out. Amongst the technologies, applications and devices considered in this scenario, in addition to RFID, are smart phones, netbooks and location-based services (LBS). The power of these technologies is greatly leveraged by their convergence and interoperability. This presentation refers to the result of this work and in particular to the identified risk and issued recommendations.
  
  Speaker: Barbara Daskala, CISSP, CISA, ENISA
  


• Risk assessment of a cyber bullying and grooming scenario: ENISA is currently assessing risks related to the internet use of teenagers and focuses on cyber bullying and cyber grooming. Data mining, together with identity issues are encountered fore within a scenario that demonstrates the use of online services by a teenager. Within this presentation, identified risks will be discussed, together with relevant threats and recommendations for mitigation of these risks.
  
  Speaker: Dr. Louis Marinos, Risk Management, ENISA


• Vision on Emerging and Future Risks: Future projections based on current ENISA work such as vision statements, possible next steps and activity areas in identification and managing of emerging and future risks are going to be presented and discussed. A representative from ENISA's "Emerging and Future Risks Stakeholder Forum" (EFR SF) is going to elaborate on these possibilities as these have been formulated by the Forum at the beginning of 2010. The presented positions are an important view to issues of emerging risks that can be taken up by different stakeholders in the area of Information Security.
  
  Speakers: Clair Vishik, Intel

Workshop Overview

Wednesday:
10:00 - 10:15	Louis Marinos, ENISA: Welcome address
10:15 - 10:45	Daniele Catteddu, ENISA: Cloud Computing
10:45 - 11:15	Barbara Daskala, ENISA: Internet of Things / RFID
11:15 - 11:30	Break
11:30- 12:00	Louis Marinos, ENISA: Cyber bullying and grooming scenario
12:00-12:30	Claire Vishik, Intel: Vision paper EFR Stakeholder Forum

Overal Organizer

Dr. Louis Marinos, Senior Risk Management, Enisa

Invited speaker

Daniele Catteddu, CISA, CISM, Enisa
Barbara Daskala, CISSP, CISA, Enisa
Dr. Louis Marinos, Senior Risk Management, Enisa
Claire Vishik, Intel