China, Sri Lanka CERT sign cyber security MoU

China's National Computer network Emergency Response Technical Team Coordination Centre (CNCERT-CC) and Sri Lanka's Computer Emergency Readiness Team - Coordinating Centre (Sri Lanka CERT-CC) entered into an MoU recently to boost cyber security in both countries.

The signing of the MoU took place at the ICT Agency of Sri Lanka (ICTA).

Sri Lanka CERT-CC, Chairman Earle Fernando said, "Through this MoU, CNCERT-CC and Sri Lanka CERT-CC agreed to cooperate in ensuring cyber security in both countries. Information networks have become important infrastructures in China and Sri Lanka."

"In recent years, increasing serious cyber attacks brought severe challenges on information infrastructures of both countries. As cyber attacks are generally cross-border and cross-network events, it is necessary for information network protectors to join to face the challenges of network security," he said.

Sri Lanka CERT-CC, CEO Lal Dias said, "Cyber crime affects the very base of social well-being of the public. These realities not only affect the citizens but the very functioning of national economies. Each State's contribution to fighting cybercrime becomes important. MoUs such as this go a long way in achieving the goal of fighting cybercrime."

Co-signatory, CNCERT-CC Director General Huang Chengqing said, "Sri Lanka and China have a long history of co-operation and friendship.

Through this MoU we strengthen that friendship in a specific way. CNCERT-CC and Sri Lanka CERT-CC should further reinforce the cooperation on network security and emergency response."

Sri Lanka CERT-CC, Principal Information Security Engineer Rohana Palliyaguru said that both parties have agreed to:

* Maintain communications on a daily basis to exchange information of cyber threats and attacks and experiences of incident handling. * Establish regular data exchange mechanism according to both parties' specific needs. (Optional data included but not limited to malcode sample, malicious C and C server list, infected host list, malicious domain name (URL) list).

* Provide updates on situation and data on time when large-scale or serious incidents occur.

* Take opportunities of bilateral meetings and other events for face-to-face communication and exchange.

With regard to incident response both parties agree to further strengthen the response capacities to network security threats and attacks.

If one party detects the malicious activity affecting network information system of the other party, they will alert the other party.