Cyber Security: Policy of the Internet Infrastructure Dr. Basuki Yusuf Iskandar Acting Director General of Post and Telecommunications/ Secretary General of MCIT Republic of Indonesia 2009 ITU Regional Cybersecurity Forum for Asia-Pacific Hyderabad-India, 23- 25 September 2009 ICT Roles Reduce Transaction & Production Time & Cost Productivity: Economic & socio culture Collect, Organize, Distribute Information Creativity & Innovation Create Network of Online Users Collaboration C O M P E T I T I V E N E S S P R O S P E R I T Y 2 POLICY DIRECTIONS Strategic Goal • Affordability - Affordable Tariff - Equal distribution • Quality and Security - Services - Network infrastructure • Utility and Productivity Productive in using Telco resources economically and socially Policies • Infrastructure providing sufficient in term quantity and quality • Regulation healthy industries environment 3 Competition in Indonesian Mobile Business Competition in the Indonesian mobile business has driven down prices considerably in past 24 months impact RPM Comparison in 2005 This has also impacted the tariff of Fixed Telephony to lower down!! This has resulted in tariffs moving from being one of the most expensive in the region to one of the cheapest RPM Comparison Today 4 Growth of Internet & Broadband Internet Customers Internet Users Broadband 35.000.000 30.000.000 Num ber of Subscribers 25.000.000 20.000.000 15.000.000 10.000.000 5.000.000 0 1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 Comparison Tariffs of Internet 2004: 2009: IDR 9000/hour : IDR 15000/week 5 Strategic Roles of Internet Security • Promoting and maintaining public trust to the value of internet • Public distrust will backfire to the development and utilization of internet for the benefit of human live 6 Ingredients of Cyber Security Building Cyber Security Institution Technology Regulation Society 7 Requirements for cyber security Requires Readiness instead of Response-ness: • Technology and Infrastructure Readiness • Socio Readiness • Institutional Readiness • Regulation Readiness 8 Technology and Infrastructure Readiness z z Telco infrastructure need to be upgrade to introduce convergence application to expand capacity of access and backbone in several cities: Palapa Ring Project, USO Project. Applications Project for cybersecurity: - Internet Sehat and Aman project (content filtering, anti phising, anti malware, anti virus, spam blocker, content filtering for home/family/personal users, school etc. - Research on honeypets and the development of national honeynet system - Malware analysis laboratory development -Internet data mining and web forensics 9 Socio Readiness • Communicate the roles and responsibilities of society in a simple way to make other stakeholders understand the importance of cyber security • Published the CERT/CSIRT (ID-SIRTII) profile to all constituents by using different media channels that reach as many communities as possible within the large archipelago of Indonesia • Build intensive communication with respected stakeholders and constituents 10 Regulations Readiness • Telecommunication Law • Electronics Information and Transaction Law (EIT) • Ministerial Decree on IP infrastructure security (establishing CSIRT/CC):IDI-SIRTII • Preparation of Cyber Crime Bill • Preparation of Government Degrees related to Electronics Information and Transactions 11 Electronics Information and Transaction Law • Provides the legal basis for information and electronic transaction in Indonesia, consist of: digital signature, digital certification, electronic transaction, protection of digital Intellectual Property Right, list of act against the law, and dispute resolution • Provides the tools for Indonesia law enforcer to conduct legal enforcement specifically in the field of information and electronic transaction • Proof to the world community, that Indonesia is serious against cyber crime 12 Institution Readiness ID-SIRTII: Indonesia Security Incidence Response Team on Internet Infrastructure Bu ild ing P u Aw bl are ic ne ss International Cooperation g n i t a l u ats m Si hre T Assisting Critical Institution ID-SIRTII Training g n i r o t i ic n Mo Traff International Cooperation Ma Lo nagi g F ng ile s 13 Global and Regional Collaboration • • • • • Sharing policies and laws Global awareness Standard and guidance Capacity building Cooperation and coordination in preventing and overcoming global cybercrime 14 Terima Kasih THANK YOU