law enforcement engagement capacity building
Post on 08-May-2015
343 Views
Preview:
DESCRIPTION
TRANSCRIPT
Capacity building for the LEA community in the Eurasian region
Craig Ng General Counsel – APNIC
“A global, open, stable, and secure Internet that serves
the entire Asia Pacific Internet community”
APNIC Vision
Agenda
• Introducing APNIC – About APNIC – APNIC’s role and services
• Working with the law enforcement community
• Capacity building in the Eurasian region – by APNIC (Asia Pacific) – by RIPE NCC (Europe)
Introducing APNIC
Regional Internet Registries
5
What is APNIC?
• Regional Internet Registry (RIR) for the Asia Pacific region – Comprises 56 economies
• Secretariat located in Brisbane, Australia – Currently employs around 70 staff
• Not-for-profit, membership-based organization
• Governed by the Executive Council (EC), who are elected by the Members
6
IP Address Delegation
7
APNIC Delegates
to APNIC Member
Member (ISP)
Customer / End User
Delegates to customers
ISP customer
/8 APNIC Allocation
/22 Member Allocation
Sub- Allocation /24
/26 /27 /25
Customer Assignments
/26 /27
Reg
istry
Rea
lm
Ope
rato
rs R
ealm
• Delegates and manages Internet resources – IPv4 and IPv6 addresses – AS Numbers
• Maintains the APNIC Whois Database • Manages Reverse DNS delegations
– But is NOT a domain name registry • Facilitates IP address policy
development • Provides training and outreach on
resource management, in particular IPv6 deployment
• Provides Conference events • Is an authoritative source of
information – LABs
• Supports Internet development – Root server deployment, ISIF
APNIC’s role and services
8
Working with the law enforcement community
Law enforcement agencies are important members of the APNIC community
APNIC collaborates, cooperates and work together with law enforcement agencies, to ensure that the Internet remains an open, secure and stable platform
Law enforcement agencies engagement plan • Transparency of APNIC
procedures
• APNIC’s policies on handling of personal information
• Training and capacity building activities for LEAs in APNIC service region
Transparency
Capacity building in the Eurasian region
• APNIC provides training and capacity building to law enforcement agencies
• Help you explore the data on the public WHOIS database
Training and capacity building
Training and capacity building
APNIC Training
Network operators; engineers
Law enforcement investigators
LEA: Justice sector
Training syllabus
• Internet governance – who runs the Internet?
• Managing Internet resources
• Internet resources registration
• Reverse DNS
• APNIC WHOIS database – How to use APNIC WHOIS?
• Internet Routing Registry (IRR)
Authorisation Mechanism
inetnum: 202.137.181.0 – 202.137.196.255 netname: SPARKYNET-TC descr: SparkyNet Service Provider … mnt-by: APNIC-HM mnt-lower: MAINT-SPARKYNET1-TC mnt-routes: MAINT-SPARKYNET2-TC
This object can only be modified by APNIC
Creation of more specific objects (assignments) within this range has to pass the authentication of MAINT-SPARKYNET
Creation of route objects matching/within this range has to pass the authentication of MAINT-SPARKYNET-WF
inetnum:
Allocation (Created by APNIC)
3
Using the Whois – step by step
Customer Assignments (Created by Member)
person: nic-hdl:
KX17-AP
Contact info
1
Data Protection
mntner: 2
inetnum: ... KX17-AP
... mnt-by: ...
4 inetnum: ... KX17-AP
... mnt-by: ...
5 inetnum: ... KX17-AP
... mnt-by: ...
6
Whois Database Queries
– Flags used for inetnum queries
None find exact match - l find one level less specific matches - L find all less specific matches - m find first level more specific matches - M find all More specific matches - x find exact match (if no match, nothing) - d enables use of flags for reverse domains - r turn off recursive lookups
inetnum: 202.64.0.0 – 202.64.15.255
202.64.0.0/20
inetnum: 202.0.0.0 – 202.255.255.255
202.0.0.0/8
Whois Database Query - inetnum
202.64.12.128/25
inetnum:
whois -L 202.64.0.0 /20
whois 202.64.0.0 /20
whois –m 202.64.0.0 /20 inetnum: 202.64.15.192/26
inetnum: 202.64.10.0/24 More specific à
(= smaller blocks)
Less specific à (= bigger block)
What needs to be visible?
IANA range
Non-APNIC range APNIC range
NIR range APNIC allocations & assignments
NIR allocations & assignments
Customer assignments Infrastructure Sub-allocations
must be visible
visibility optional
LIR/ISP
PORTABLE addresses
NON-PORTABLE addresses
LEA engagement
ISCR 2013 (International Symposium on Cybercrime Response) – Seoul, South Korea
LEA capacity building in 2013 Wellington, New Zealand (May 2013) • Law enforcement agencies
workshop • Held in conjunction with
InternetNZ (.nz registry) • Attendees:
– NZ Police - E-Crime/ Cyber Crime group and Online Child Exploitation (OCEANZ)
– Department of Internal Affairs - Censorship and Compliance (Anti-Spam team)
– National Cyber Security Centre (NCSC)
LEA capacity building in 2013
• Colombo, Sri Lanka (October 2013)
• Manila, Philippines (December 2013)
Training and capacity building
• Training delivered in 2013 – Wellington, New Zealand – May 2013 – Colombo, Sri Lanka – October 2013 – Manila, Philippines – December 2013
• Training planned for 2014 – more regionally focused – Pacific regional training – New Zealand (May-June 2014) – “Justice Sector Workshop”, in conjunction with APTLD, during
APrIGF – Delhi, India (August 2014)
APNIC welcomes your participation in our policy development processes
Questions
top related