Presentation by Adli Wahid at APRICOT 2019 on Tuesday, 26 February 2019.

1. #apricot2019 2019 47
Building Cyber Security
Capacity
Adli Wahid
APNIC

2. #apricot2019 2019 47
Agenda
• APNIC Security Outreach & Engagement
• Stories
– Security Track @ APRICOT
– Desktop Exercise - Multi-Stakeholder Engagement
– Community Honeynet Project & DASH
• Reflections
2

3. #apricot2019 2019 47
Security Engagement
• The Plan
– Engage with different communities
– Increase awareness, capabilities
– Link the communities
• Multiple Activities
– Training, Speaking, Blogging
– Participating in meetings/forums
– Support for events – sponsorship
– Security Track @ APRICOT & APNIC Conferences
3

4. #apricot2019 2019 47
Executing the Plan
• Considerations
– Wide region
– Diverse audience
– Context
– Impact
– Continuity
• Collaboration is not an option
– Shared goals
– Clear Outcomes
4
Information Security Training in Myanmar

5. #apricot2019 2019 47
Stories
5
2nd
Regional CSIRT Training in Noumea

6. #apricot2019 2019 47
6
Security Track @ APRICOT
• Context
– Regional gathering of Internet Operators
– Sharing of experience, lessons learned
– Connecting communities
– Creating opportunities to share
– Call for partnerships
• Key Partners
– Forum of Incident Response and Security Teams (FIRST)
– Asia Pacific Computer Emergency Response Teams
(APCERT)
• Outcomes
– FIRST-TC at APRICOT & APNIC Conferences since 2016

7. #apricot2019 2019 47
Multi Stakeholder Engagement
• Context
– How different stakeholders can work together to address
security
– Create opportunity to have conversation on different issues
– Plan next course of action (what’s next)
– Tool: Table-top Exercise on a data breach incident
• Collaboration
– Members or Partners in the respective economies
– Training content originally developed with Access Media in
2015
• Outcomes
– More than 15* sessions since 2015
7
Seminar in Bhutan

8. #apricot2019 2019 47
APNIC Community Honeynet Project
• Context
– Part of network security training – using honeypots for visualizing
network security attacks / threats
– Lots of interests to deploy and ‘learn more’ after the training
– Opportunity to learn, share data and more!
• Collaboration
– Partners deploy honeypots, APNIC runs the backend
– Information collected among partners
– Explore opportunities to learn more & connect with HP communities
• Outcomes
– 15-ish honeypots in AP region (more to come) since 2017
– Shout-outs: GEMNET (MN), TCC (Tonga), MoH (WS), MYREN (MY)
– DASH, collaboration with our Product Team
8

9. #apricot2019 2019 47
DASH
https://www.youtube.com/watch?v=foeuyVoqLQo&feature=youtu.be
Talk to Sofia!
9

10. #apricot2019 2019 47
Reflections
• Expanding the collaboration (naturally)
– CSIRT Development in the Pacific
– Collaboration with GEANT, INTERPOL &
others
• Keeping things simple (Does it spark
joy?)
– Continuous improvements
• Trust & Human Connection
(Community)
10

11. 201947
#apricot2019
18 – 28 February 2019
DAEJEON
SOUTHKOREA