@techreport{JRC121051, number = {KJ-NA-30276-EN-N (online),KJ-NA-30276-EN-C (print)}, address = {Luxembourg (Luxembourg)}, issn = {1831-9424 (online),1018-5593 (print)}, year = {2020}, author = {Nai Fovino I and Barry G and Chaudron S and Coisel I and Dewar M and Junklewitz H and Kampourakis G and Kounelis I and Mortara B and Nordvik JP and Sanchez Martin JI and Baldini G and Barrero J and Chaudron S and Coisel I and Draper Gil G and Duch Brown N and Eulaerts O and Geneiatakis D and Hernandez Ramos JL and Joanny G and Junklewitz H and Kampourakis G and Kerckhof S and Kounelis I and Lewis A and Martin T and Nai Fovino I and Nativi S and Neisse R and Nordvik JP and Papameletiou D and Reina V and Ruzzante G and Sanchez Martin JI and Sportiello L and Steri G and Tirendi S}, isbn = {978-92-76-19957-1 (online),978-92-76-19958-8 (print)}, publisher = {Publications Office of the European Union}, abstract = {The Report ‘Cybersecurity – Our Digital Anchor’ brings together research from different disciplinary fields of the Joint Research Centre (JRC), the European Commission's science and knowledge service. It provides multidimensional insights into the growth of cybersecurity over the last 40 years, identifying weaknesses in the current digital evolution and their impacts on European citizens and industry. The report also sets out the elements that potentially could be used to shape a brighter and more secure future for Europe’s digital society, taking into account the new cybersecurity challenges triggered by the COVID-19 crisis. According to some projections, cybercrime will cost the world EUR 5.5 trillion by the end of 2020, up from EUR 2.7 trillion in 2015, due in part to the exploitation of the COVID-19 pandemic by cyber criminals. This figure represents the largest transfer of economic wealth in history, more profitable than the global trade in all major illegal drugs combined, putting at risk incentives for innovation and investment. Furthermore, cyber threats have moved beyond cybercrime and have become a matter of national security. The report addresses relevant issues, including: - Critical infrastructures: today, digital technologies are at the heart of all our critical infrastructures. Hence, their cybersecurity is already – and will become increasingly – a matter of critical infrastructure protection (see the cases of Estonia and Ukraine). - Magnitude of impact: the number of citizens, organisations and businesses impacted simultaneously by a single attack can be huge. - Complexity and duration of attacks: attacks are becoming more and more complex, demonstrating attackers’ enhanced planning capabilities. Moreover, attacks are often only detected post-mortem . - Computational power: the spread of malware also able to infect mobile and Internet of Things (IoT) devices (as in the case of Mirai botnet), hugely increases the distributed computational power of the attacks (especially in the case of denial of services (DoS)). The same phenomenon makes the eradication of an attack much more difficult. - Societal aspects: cyber threats can have a potentially massive impact on society, up to the point of undermining the trust citizens have in digital services. As such services are intertwined with our daily life, any successful cybersecurity strategy must take into consideration the human and, more generally, societal aspects. This report shows how the evolution of cybersecurity has always been determined by a type of cause-and-effect trend: the rise in new digital technologies followed by the discovery of new vulnerabilities, for which new cybersecurity measures must be identified. However, the magnitude and impacts of today's cyber attacks are now so critical that the digital society must prepare itself before attacks happen. Cybersecurity resilience along with measures to deter attacks and new ways to avoid software vulnerabilities should be enhanced, developed and su