Review of Previous ETAP Forums

22 June 2016 – Tel Aviv, IsraelDeepak Maheshwari

1

IEEE Internet Initiative (3I):Connecting the Global Technology & Policy Making Communities on Internet Governance, Cybersecurity, and Privacy

The IEEE Internet Initiative connects the technology and policy making communities, both at a global and local level, in order to:– Inform debate and decisions– Ensure trustworthy technology solutions and best practices

The IEEE Internet Initiative facilitates the engagement of technology, industry and policy experts in a neutral environment for the collective benefit of all stakeholders

Technology Experts

Policy Makers

IEEE Interne

t Initiati

ve

2

IEEE Experts in Technology and Policy (ETAP) Forums

The ETAP Forums are a series of events that bring together technology developers and policy makers to debate current and future Internet technology policy issues that impact everyone on a global, national, and local level

“Local conversations on a global scale”Five previous ETAP Forums:– San Jose, USA, May 2015– Tel Aviv, Israel, August 2015– Washington DC, USA, February 2016– Delhi, India, March 2016– Beijing, China, May 2016

3

General ETAP Agenda Structure

Introduction Keynote presentationsRapid-fire round for everyone to introduce their most important issuePanel discussionRanking and selection of top rapid-fire issues for breakout discussionsBreakout sessionsBreakout summariesActions and wrap up

4

ETAP Forum San Jose, USAMay 2015

Inaugural ETAP ForumGoal: Identify key issues to be addressed, and build kernel of expert community for follow-on work40 participants from 5 regions: China, India, Africa, Europe, North America

5

San Jose: Top 6 of 20 Identified Issues

1. Threats and opportunities in data analytics2. Multi‐stakeholder Internet governance3. Protecting Internet traffic, managing meta‐data analysis,

and how to implement both security and privacy at scale4. Fragmentation of the Internet due to local policies and how

to avoid it5. Algorithmic decision making that exacerbates existing

power balances and ethical concerns6. How to best engage IEEE as a platform for contributing to

the resolution of these and related issues

6

San Jose: Proposed Actions

Conduct additional ETAP Forums around the world, to collate diversity of regional viewsFuture ETAP Forums should focus on and refine the six top issues identified, with the goal of moving several to a format for actionOpen nature of ETAP Forums should allow regional participants to introduce priority issues of their own

7

ETAP Forum Tel Aviv, IsraelAugust 2015

30 participants from 4 regions: Middle East, India, Europe, North AmericaMany participants were local, but included representation from government, industry, law, academia

8

Tel Aviv 2015: Top 3 of 13 Identified Issues

1.User assessment of trustworthiness of devices, enterprises and governments

2.Educating users about characteristics of information society

3.Machine-readable privacy agreements and who enforces them

9

Tel Aviv 2015: Proposed Actions

Prepare a draft proposal for a standard for machine-readable privacy agreementsDevelop educational material such as games and icons that encourage safe and ethical online behaviorConsider certification of developers for privacy and security best practices and certification of websites and applications for privacy and securityPlan future ETAP Forums in Israel and India in 2016

10

ETAP Forum Washington DC, USAFebruary 2016

50 participants from 4 regions: Russia, Japan, India, North AmericaMany participants were local, including representation from government, industry, law, academia

11

Washington DC: Top 4 of 39 Identified Issues

1.Data localization2.Education and ethics3.End-to-end security/privacy by design4.Technology-policy development process

12

Washington DC: Proposed Actions

Create tips and tools and/or host events to alleviate tension across technical and regulatory communities and policy makers of different jurisdictionsIdentify fundamental policy principles that are being called into question by the proliferation of the IoT (e.g., right to opt in/out)Strive to create a layered model (similar to OSI network model) to guide policy for end-to-end security and privacy by designFor data localization, develop case studies (e.g., house monitoring, medical devices that travel with users, efficient routing, etc.), gather economic analyses, perform technical analyses, and explore certification for data practicesDevelop content and programs for education and ethics around IoT, identify partner channels for creation and distribution of the content, and determine performance indicatorsContinue the conversation on-line, to elaborate on the issues voiced during the rapid-fire brainstorming, and to develop and execute action plans for the above identified opportunities

13

First ETAP in a developing country

Overarching theme "Universal Access for Social and Economic Inclusion - Technology and Policy Considerations" with specific emphasis on:– Security and Privacy in

Biometrics– Emerging Technologies for

the Last Mile Access

40 participants from India, North America, Middle East, and beyond

Many participants were local, including representation from government, industry, law, academia

ETAP Forum Delhi, IndiaMarch 2016

Drag picture to placeholder or click icon to add

14

Delhi: Top 2 Issues

1.Protecting Internet traffic, managing meta-data analysis, and how to implement both security and privacy at scale

2.Options and challenges in providing universal access for social and economic inclusion

15

Delhi: Proposed Actions

Development of a white paper on the policy and technology implications of protecting Internet traffic Clarify and refine the scope of a white paper to be written on the options and challenges in providing universal access

16

Technical Co-Sponsor: China Internet Network Information Center (CNNIC)

Topic: Closing the Cyberspace Policy-Technology Divide to Drive the Future of the Internet

Focus Areas: – Assessing technology and policy

factors and actors that affect the development and management of the Internet

– Global acceptance of technology protocols and standards versus policy localization

– Building an environment that enables the interaction of technologists and policy makers

60 participants, including representation from government, industry, law, academia

ETAP Forum Beijing, ChinaMay 2016

17

Beijing: Top 3 of 18 Identified Issues

Cyber-threats to critical infrastructure, including eGovernment/eCommerceBiodiversity in the Internet ecosystemTransparency as a source for obtaining data for evidence-based decision making

18

Beijing: Proposed Actions

Create threat intelligence standards that define threat terminology, categorize the various types of threats, and create methodologies for sharing information about threats Create a platform to allow researchers, industry, and authorities to carry out a range of important tasks in combating cyber-threats to critical infrastructure Create a standardized benchmark for transparency that could address questions such as how to measure and track transparency over time Policymakers and technologists can play a role as conscientious “gardeners” to ensure diversity, resilience, and sustainability of the Internet ecology

19

Summary of Top Identified Issues in Internet Technology Policy

Threats and opportunities in data analyticsAlgorithmic decision making that exacerbates existing power balances and ethical concerns Multi-stakeholder Internet governanceTechnology-policy development processProtecting Internet traffic, managing meta-data analysis, and how to implement both security and privacy at scaleEnd-to-end security and privacy by designFragmentation of the Internet, and data localization due to local policiesUser assessment of trustworthiness of devices, enterprises and governments Machine-readable privacy agreements, and who enforces themEducating users about characteristics of information society and ethicsOptions and challenges in providing universal access for social and economic inclusion

20

Internet Technology Policy Community

21

Whitepapers and Research

Standard for Machine readable privacy agreements, lead by Ori Freiman, Jonathan Klinger

Protecting Internet traffic (encrypted by default), led by Prasad Mantri, Dr Dattareya Kulkarni and Rahul Sharma.

Options and challenges in providing universal access, lead by Prasad Mantri, Subrat Kumar Prusty

End to end trust and security in IoT, lead by Peter Fonash, Brian Done (DHS), Chris Hrivnak and Alan Chachich

Algorithmic decision making

Threats and opportunities in data analytics (Standard to anonymize data).

22

Get Involved: ITP Community

23

Start new discussions in the Collabratec™ ITP community by posting relevant issues and asking questions

Open your own private group in Collabratec™ then invite others to research and co-author with you around specific topics

Participate in and help organize regional Experts in Technology and Policy (ETAP) events; then lead follow-up activities around the resulting outputs and takeaways

Participate in IEEE Internet Initiative webinars and other online panel discussions

http://internetinitiative.ieee.org