The outline of the legal amendments to be submitted by the Ministry of Internal Affairs and Communications (MIC) to the Diet to improve countermeasures against cyberattacks on IoT devices was revealed on March 3.
The Telecommunications Business Law will be amended to promote sharing of urgent information relating to cyberattacks, such as malicious devices issuing cyberattack commands, among Internet providers. The National Institute of Information and Communications Technology (NICT) Law will also be revised to enable the NICT, a research arm of the MIC, to investigate vulnerable devices prone to become cyberattack targets.
MIC’s proposed legal amendments
|
Amendments to Telecommunications Business Law |
Sharing high-risk information, such as servers issuing cyberattack commands, with private third party organizations |
|
Sharing information collected by third party organizations with providers in order to block cyberattacks and warn users |
|
|
Amendments to NICT Law |
NICT to investigate vulnerable IoT devices, such as those using default passwords |
|
NICT to provide information to third party organizations so providers can warn users |
(Abridged)
