Day Three: At-Large Capacity Building Session: Current issues in Cybersecurity

Listen to this post
Voiced by Amazon Polly

Patrick Jones, Senior Director, Global Stakeholder Engagement, ICANN  

At-Large Capacity Building Session: Current issues in Cybersecurity

Guests: Patrick Jones, Senior Director, Global Stakeholder Engagement, ICANN  

This session was aimed to enhance the knowledge of the participants about Cybersecurity.

Agenda: 

  1. Welcome and Aim of Meeting – Joanna Kulesza, ALAC Member from EURALO and Co-Chair of At-Large Capacity Building Working Group
  2. Presentation on Cybersecurity – Patrick Jones, Senior Director, Global Stakeholder Engagement, ICANN
  3. Discussion – Joanna Kulesza/All
  4. Next Steps – Joanna Kulesza

Presentation

https://community.icann.org/display/atlarge/At-Large+Meetings+-+Wednesday%2C+26+June+2019?preview=/109482989/111387373/ALAC-ICANN65-plj.pptx.pdf

Report

Some new threats in the security arena.

Patrick present some examples.

SSAC document about IOT, DATA and DNS.

Under attack:
identity
Routing infra
Gov
System ing

Some definitions
Phishing
Malware
Botnets

What is DNS abuse?
Cyber crim
Hacking
Malicious conduct

DNS abuses or attacks vs Maluse

ICANN role
Connexion Point

Recent Domain Registration Hijacking
DNSpionage
Sea Turtle

ICANN bylaws

StrategyPlan
1) Strengthen security of the Domain Name System and the DNS root server system
3) Evolve the unique identifier systems in coordination and collaboration with relevant parties to continue to serve the needs of the global Internet user base

Groups working on those issues
PSWG
SSAC
RSSAC

Role of ICANN during a Cyberattack
Coordination with other actors

ICANN is doing in various places and opportunities capacity building (including webinars) at different levels of complexity (technically).

Post-mortem exercices.

Takeaway: the DNS Really Matters

◉ The DNS is no longer just a technical function of the network run by system administrators

◉ The DNS is now a critical infrastructure used in every day communications (e-mail, web browsing, mobile applications) and is a gateway to all your internal systems

◉ It is critical that policy makers and organization decision makers pay attention to their DNS infrastructure

If your DNS is compromised, all of your systems and networks are at serious risk

Questions

DOH?
SSAC is working (starting) on that issue

DNSSEC
Criptech (?)

Reported by Sébastien Bachollet

EBOOK  Version of  Slideshow
http://online.fliphtml5.com/gnel/txic/