ISPA to launch cyber security code in South Africa
SECURITY| May 4, 2012, 8:13 a.m.
South Africa's Internet Service Providers' Association (ISPA) has announced it will lead the development of a new voluntary code of practice to improve cyber security for end-users.
Known as the icode, and developed in conjunction with Australia's Internet Industry Association, which pioneered the approach in 2010, the code will provide a consistent approach for South African ISPs to help inform, educate and protect their customers in relation to cyber security. South Africa would become the second country in the world to implement network level protection of vulnerable end users under the icode banner.
By following the code, ISPs will contribute to reducing the number of compromised computers in South Africa and enhance the overall security of the South African and international Internet.
"The increasing threat of zombied computers - computers which have been essentially hijacked and are under the control of criminals or other third parties - presents a real risk to users. Identity theft, fraud, and increases in spam are all possible consequences of compromised computers."
"The problem we now face as an industry," said ISPA spokesperson Ant Brooks, "is the sophistication of attacks on end-user computers. Scanning at the network level by ISPs can provide an early warning to users when the user may be completely unaware there's a problem with their computer."
"An infected computer is not only bad for the end-user, it's also a problem for the integrity of networks themselves because it increases the amount of spam and other "bad traffic". This is why ISPs are telling us they will support the scheme."
Australia's Internet Industry Association chairman Bruce Linn welcomed the announcement. "The Australian experience has shown that end-users appreciate knowing that their ISP is watching for signs of infection on the network.
Most users are initially very surprised to find out that their machine may be infected by 'malware' such as viruses. But they are relieved when they are given the information and tools to restore their computer's security."
The initiative was also welcomed by the banking sector. "South Africa's banks are committed to educating consumers about online security, and constantly review security measures to offer South African Internet users as safe an online banking experience as possible," says Mrs Kalyani Pillay, CEO of the South African Banking Risk Information Centre (SABRIC).
"SABRIC welcomes the launch of the icode project, and is encouraged by the commitment of ISPs towards assisting their customers with the security of their computers and their personal information."
ISPA spokesperson Ant Brooks emphasised that the new code was designed to protect the privacy of end-users.
"The network level scanning that allows ISPs to detect signs of infected machines does not in any way involve looking at what users are themselves doing online. On the contrary, the scheme is designed to reduce the incidence of the single biggest threat to end-user privacy -- the presence of malware which can steal personal information and relay it to criminals overseas."
The code is designed to respond to this challenge by providing a consistent approach for South African ISPs to help inform, educate and protect their customers in relation to cyber security. ISPA believes a uniform national (and international) approach is warranted. The code will deliver a standard set of best practices for ISPs to follow to preserve the integrity of their networks.
The icode is expected to contain four main elements:
- A notification/management system for compromised computers
- A standardised information resource for end users
- A comprehensive resource for ISPs to access the latest threat information
- A reporting mechanism in cases of extreme threat back to national security agencies to facilitate a national high level view of attack
MORE SECURITY NEWS
Unpacking penetration testing for SMEsMWR Infosecurity outlines penetration testing best practice for SMEs. Read More
Separating the attack that matters from the noiseIt has almost become the norm for a business to be compromised by a security attack. The emphasis today is thus more on how a business responds to the attack, that is how have they prepared for the breach and how do they communicate it? Read More
Enhancing your security posture to fight new ransomware threatsPetya ransomware is proving to be one of the top cybersecurity stories of 2016. Read More
Arbor stops malware in its tracksThere is always a substantial amount of banking trojan activity taking place, however, recent developments have intensified the threat landscape. Read More
Networks Unlimited certifies Fortinet partners in East AfricaValue-added distributor, Networks Unlimited is intensifying its footprint in East Africa, training its partners and customers in the region to become certified. Read More
Understanding the risk and cost of a DDoS attackThw Arbor Networks white paper, The business value of DDoS protections, says a continuing and growing threat to service availability is distributed denial of service (DDoS) attacks. Read More
Addressing the threat of cyber-crime in the digital eraGlobally-connected cyber-attacks require globally connected and seamlessly integrated cyber defences. Read More
DDoS attacks: An operational risk that should be included in enterprise risk assessmentsToday’s enterprises are increasingly motivated to formalise their IT security and place it firmly within the context of their enterprise risk management and business continuity planning. Read More
Arbor Networks report finds relentless threat environmentArbor Networks Inc., the security division of NETSCOUT (NASDAQ: NTCT), has released its 11th Annual Worldwide Infrastructure Security Report (WISR) offering direct insights from the global operational security community on a comprehensive range of issues. Read More
No More Excuses – Time to Get a Grip on Your Cloud SecurityNewfound optimism for the cloud inevitably means more critical and sensitive data is put into cloud services. And that means security is going to become a massive issue, says Intel. Read More
FEATURED STORYGovernment should encourage youths in ICT early
Youths should be given more encouragement to develop their ICT skills, an 11-year-old app developer told Kokumo Goodie.
BEST READ NEWS
IN DEPTHIBM Opens First Cloud Data Centre in South Africa
IBM is opening a new IBM Cloud Data Centre in Johannesburg, South Africa. The new cloud center is the result of a close collaboration with Gijima and Vodacom and is designed to support cloud adoption and customer demand across the continent.
COMPANY NEWSNetworks Unlimited officially launches Mellanox Technologies Open Ethernet Solutions
Networks Unlimited, a value-adding distributor of converged technology, data centre, networking, and security technology throughout Africa, has hosted the official Johannesburg launch of Mellanox Technologies,