No previous threat landscape document published by ENISA has shown such a wide range of change as the one of the year 2014. We were able to see impressive changes in top threats, increased complexity of attacks, successful internationally coordinated operations of law enforcement and security...

The Internet infrastructure supports the global exchange of information through physical and logical assets, such as cables, servers, protocols, services... These assets suffer from various threats that can hamper network connectivity and disrupt the Internet. As a threat landscape, this study...

This document has been created as part of an ENISA-funded study of the state of security information sharing and is intended to supplement the main report, "Actionable Information for Security Incident Response." The purpose of this document is to give the target audience of this study -...

Europe, like the rest of the world, is witnessing an unprecedented expansion in the cyber-security domain and an ever-growing community of CSIRTs (Computer Security Incident Response Team). In parallel, an evolving cyber threat landscape shows a sharp increase and levels of sophistication of...

ENISA is one of the key stakeholders in Europe in the area of Network and Information Security (NIS). Given its positioning, ENISA is active in the area of education and awareness, using its knowledge to promote NIS skills and supporting the Commission in enhancing the skills and competence of...

The goal of this study is to provide an analysis of cyber crisis management by identifying relations between this emerging field and the better established subject of general crisis management. This includes terminology and key concepts in these fields. This study further seeks to gain knowledge...

Training is everything. The peach was once a bitter almond; cauliflower is nothing, but cabbage with a college education. [Mark Twain, 1835-1910] Why write a guide about training methodologies when there are so many resources and theories on "trainings" and "trainers" already? There are two...

This report focuses on analysing the current situation concerning cybersecurity challenge competitions in Europe. The experience gathered will be the basis to develop a pan-European competition on cybersecurity. The European Cyber Security Challenge Competition 2015 is set to be the result of a...

During 2013, ENISA prepared and published its first reports with cryptographic guidelines supporting the security measures required to protect personal data in online systems. Recently published EC Regulations on the measures applicable to the notification of personal data breaches [118] make...

Cryptographic algorithms, when used in networks, are used within a cryptographic protocol. In the ENISA algorithms report of 2013 [113], several protocols were discussed. In this document (which is the sister document of the 2014 report [115]) we extend the work in the 2013 report to cover more...