1
Security @ APNIC
Pablo Hinojosa
30 November 2017
IGCJ22, Tokyo, Japan
APNIC
2
A global, open,
stable and secure
Internet that serves
the entire Asia
Pacific community
2016 APNIC survey results
3
Does APNIC have a role to play?
✓
✓
✓
✓
✓
✓
Security @ APNIC
4
tech policy
LEA’sCSIRTs
Scope of activities
5
• Security training and capacity building
• Awareness raising and deployment of best
practices
• Development of the AP security community
• Bridges between security community and
network operators
• Follow cyberpolicy discussions
Community approach
6
APNIC COMMUNITY
LEAsNOGs
MEMBERS
Policy
SIG
CERTs
CSIRTs
7
• Collaboration with First.org and APCERT
• Technical colloquia at NOGs
• Training and participation at 20 NOG
and CERT events
• CERT-Australia / DFAT
• Building cyber capacity in the Pacific
• CERT.to: Hosted and trained two team
members
• FIRST workshops and conference at
APRICOT 2017 and APNIC 44
• Collaboration with JICA
• APNIC Academy, self-paced e-
learning course on cybersecurity
• Adli Wahid re-elected to FIRST Board
• 34 security-tagged blog posts
apnic.net/security
Adli Wahid
Public safety and LEAs
8
2017 highlights:
• LEA training and engagement with
INTERPOL Singapore, Global
Cybercrime Expert Group
• Europol-INTERPOL Cybercrime
Conference, The Hague, Netherlands
• APNIC’s contribution to the Third
Country Training Program on
Cybersecurity for ASEAN countries
hosted by Singapore.
• In partnership with INTERPOL, APNIC
contributed to a cybercrime training
course for LEA’s from across the Pacific
Cyberpolicy
9
2017 highlights:
• GCCS 2017
• CSCAP Workshop on Cybersecurity, Semarang,
Indonesia
• IGF
• Best Practices Forum on Cybersecurity
• Workshop on International Cooperation
between CERTs
• Cyberdrills in APrIGF and INSIG
Conclusion
10
• Much demand from APNIC Members
on security-related matters
• Response: Training and technical
assistance
• Technical capabilities:
• Whois accuracy
• RPKI
• DNSSEC
• KSK rollover
• In addition: Engagement and
awareness raising
• Three important communities:
• Network operators
• LEAs
• CERTs
• Policy SIG at APNIC
Next conference
11
https://2018.apricot.net
Later…
12
APRICOT 2019
Daejeon, Republic of Korea
19 Feb – 1 March 2019 (TBC)
APNIC 46
Noumea, New Caledonia
6 to 13 September 2018
Stay in touch!
13
blog.apnic.net
apnic.net/social
14
Thanks!

Internet Week Japan 2017: Security@APNIC

  • 1.
    1 Security @ APNIC PabloHinojosa 30 November 2017 IGCJ22, Tokyo, Japan
  • 2.
    APNIC 2 A global, open, stableand secure Internet that serves the entire Asia Pacific community
  • 3.
    2016 APNIC surveyresults 3 Does APNIC have a role to play? ✓ ✓ ✓ ✓ ✓ ✓
  • 4.
    Security @ APNIC 4 techpolicy LEA’sCSIRTs
  • 5.
    Scope of activities 5 •Security training and capacity building • Awareness raising and deployment of best practices • Development of the AP security community • Bridges between security community and network operators • Follow cyberpolicy discussions
  • 6.
  • 7.
    CSIRTs 7 • Collaboration withFirst.org and APCERT • Technical colloquia at NOGs • Training and participation at 20 NOG and CERT events • CERT-Australia / DFAT • Building cyber capacity in the Pacific • CERT.to: Hosted and trained two team members • FIRST workshops and conference at APRICOT 2017 and APNIC 44 • Collaboration with JICA • APNIC Academy, self-paced e- learning course on cybersecurity • Adli Wahid re-elected to FIRST Board • 34 security-tagged blog posts apnic.net/security Adli Wahid
  • 8.
    Public safety andLEAs 8 2017 highlights: • LEA training and engagement with INTERPOL Singapore, Global Cybercrime Expert Group • Europol-INTERPOL Cybercrime Conference, The Hague, Netherlands • APNIC’s contribution to the Third Country Training Program on Cybersecurity for ASEAN countries hosted by Singapore. • In partnership with INTERPOL, APNIC contributed to a cybercrime training course for LEA’s from across the Pacific
  • 9.
    Cyberpolicy 9 2017 highlights: • GCCS2017 • CSCAP Workshop on Cybersecurity, Semarang, Indonesia • IGF • Best Practices Forum on Cybersecurity • Workshop on International Cooperation between CERTs • Cyberdrills in APrIGF and INSIG
  • 10.
    Conclusion 10 • Much demandfrom APNIC Members on security-related matters • Response: Training and technical assistance • Technical capabilities: • Whois accuracy • RPKI • DNSSEC • KSK rollover • In addition: Engagement and awareness raising • Three important communities: • Network operators • LEAs • CERTs • Policy SIG at APNIC
  • 11.
  • 12.
    Later… 12 APRICOT 2019 Daejeon, Republicof Korea 19 Feb – 1 March 2019 (TBC) APNIC 46 Noumea, New Caledonia 6 to 13 September 2018
  • 13.
  • 14.

Editor's Notes

  • #8 The successful establishment of Tonga’s CERT.to has sparked interest from other Pacific Island states on developing their own security response capabilities. We are now working with other Pacific economies to help them develop CERTs, funded by a grant to the APNIC Foundation by the Australian Government. We also signed an MoU with FIRST to formalise the relationship there – bringing the security community into the APNIC community at conferences and events around the region, sharing security training curriculum Jamie Gillespie joins us from Google and AusCERT
  • #12 Workshops: 19-23 Feb Conference: 25-28 Feb
  • #14 Hopefully this report has given you a good snapshot of the year that was, but to stay in touch with what’s happening at APNIC and within the community, visit the blog or any one of APNIC’s social media accounts to learn more
  • #15 Thanks very much for your time and attention!