Issues highlighted by the Dyn incident on cyber attacks and crimes across different things and fields
Abstract:
The Dyn DDos attack in Oct 2016 has initiated discussions on the NANOG mailing list about what operators can do, with some views that it was a retaliation attack to the presentation by Dyn engineer at NANOG68 due to the timing of the attack which immediately followed the presentation. Furthermore, the incident was reported by major media such as BBC and CNN as an example IoT devices such as surveillance cameras were believed to have been used as springboard of the attack. While Mirai Botnet was used for the DDos attack to Dyn, many other Botnets exist used for a variety of attacks and crimes, such as for DDos, spams, frauds on online banking, theft of privacy information, and developing illegal websites.
The IETF responded to the situation by organising a Plenary titled "Attacks Against the Architecture" at its Seoul meeting. The IETF Chair and the IAB Chair as well as IAB member have declared on the blog to have discussions on how to strengthen the Internet's architecture against such large scale of attack and what measures can be taken.
In the operation community, in addition to various technical measures, there are calls for existing security practice implementation and the necessity of a statement for a whole community effort such as MANRS. Recently, general cyber security measures have been discussed at intergovernmental levels and law enforcement agencies, and there are moves such as issuance of security related directives at the European Parliament.
This program touches on the Dyn attack as an introduction and have discussions on what measures are being discussed to address attacks across national boarders, people and things. There will be discussions with participants on how operators can address such challenges and problems.
Presenter:
Izumi Okutani (JPNIC)
Masayuki Okada (JPNIC)
Mitsuru Shimamura (Internet Initiative Japan Inc.)
