News

At this year's "IT meets industry" (IMI) Congress will focus on cyber security in industry and critical infrastructures. In addition to IEC 62443 and Security for Safety, you can also exchange ideas and information with representatives of CERT@VDE. For appointments, please send an e-mail to: info@cert.vde.com

Dr. Dennis-Kenji Kipker has published a new article on Chinese Cybersecurity Law in the journal Datenschutz und Datensicherheit.

The new "Cyber Security Law" was passed in the People's Republic of China back in November 2016. As a result, it was predicted that VPN connections between Germany and China would be "shut down" across the board and that this would lead to a loss of international competitiveness. However, this article shows that it is by no means the intention of the "Cyber Security Act" to hinder technical development, meaning that the numerous fears expressed are likely to prove unfounded, at least for the time being.

Dear participants in the Chinese Cybersecurity Group in the VDE,

I would like to invite you to the second meeting of our interest group. After we were able to identify various issues relating to the shutdown of VPN tunnels and the certification of foreign products that are to be sold on the Chinese market at our first meeting on May 23, 2018, our second meeting will focus primarily on future legal requirements and their technical implementation through Chinese and international standards. The VDE has not only received various product catalogs, but also drafts of several technical standards that specify the requirements for the Chinese market. We are also planning to conduct a survey on whether and how companies have recently been required by Chinese authorities to use state-licensed VPN connections. As last time, all questions will be discussed openly and jointly by the participants - and of course there will also be plenty of opportunity to share experiences.

Participation fee: As considerable costs have been incurred in the past and will continue to be incurred in the future as a result of necessary research work, we charge a small contribution towards expenses to finance the further work of the Chinese Cybersecurity Group, which is calculated as follows for each session:

CERT@VDE supporters: free of charge
VDE-Members: 120€
Other: 200€

Further information can be found under Dates. I look forward to welcoming you again at the VDE House in Frankfurt.

Dr. Dennis-Kenji Kipker

Advisories are security warnings that draw attention to vulnerabilities and potential attacks in hardware and/or software.These warnings are intended to make users aware of the vulnerability and enable them to take the resulting (counter)measures.
However, there are a number of questions for the authors and recipients of an advisory that cannot be answered without consulting experts.

In the workshop on June 27, 2018, we would like to address a number of key questions to make it easier for participants to deal professionally with advisories.

Development and exchange of best practices on the new Chinese IT legislation

What is it about?

Numerous German companies maintain extensive trade and technology relationships with China.Since 2016, cyber security legislation in China has been tightened considerably, for example with the shutdown of VPN tunnels, national security checks on ICT products exported to China, the obligation to store data domestically and drastic measures for data encryption. A large number of companies in this country are affected by the new regulatory measures, which raises the question of how to deal with the new political, legal and technical framework conditions when data is processed in China and transferred there.

What are the problems?

So far, there has been no approach to bring together German and European companies affected by the new Chinese cybersecurity law to exchange best practices in dealing with the new regulations and jointly develop solution models. In addition, many of the Chinese laws are open to interpretation, which results in legal uncertainty. However, as the regulations from China are already having an impact, there is an acute need for affected companies to take action and therefore also for information.

Dr. Dennis-Kenji Kipker will offer a practical forum on the Chinese Cyber Security Law on May 23, 2018.