Network Security Management and

1
Network Security Management and Positive Use of
Internet
For BHUTAN By Tshering NORBU DrukNet (ISP),
Bhutan Telecom
2
Internet Networks in Bhutan

• DrukNet Only ISP in Bhutan
• Internet Connection to Bhutan June 2, 1999
• Current Status 17 leased lines, 1800 Dial-up
  Customers. 10,000 estimated
• knowledgeable Internet users in Bhutan

3
Internet Security threats in Bhutan

• No major security problem so far.
• Minor problems existent only at user level.
• Misuse of Internet e.g. Email, to send anonymous
  email
• Stolen and passage of Internet Dial-up account
  information
• Misuse of Internet forums to leash out personal
  attacks and grievances.

4
Internet Security Con

• Surfing unwanted websites and downloading
  malicious code and programs, which automatically
  get installed e.g. International phone dialer
• Spam mails and attitude of people to them.
• Easy virus transmission since the users rarely
  update their Antivirus (DAT) files
• Physical threats. Easy accessibility of people
  and their knowledge of the exact presence of
  network
• Attacks like hacking always a possibility with
  advancement of users knowledge

5
Security Measures

• IP Access-list on routers.
• IP Tables - Servers.
• Virus Scanner on Emails.
• Spam / junk Emails protection.
• Installing only the absolutely necessary
  packages.
• Making prompt updates to packages installed in
  system.
• No default settings.

6
Security Measures cont

• User training on the positive use of Internet
  e.g. workshops in schools and districts.
• Authentication of participants in Internet
  forums.
• Tightening Physical accessibility.

7
IP Access-List (Routers)

• Network and IP address-based
• Permit list
• Deny List
• Example of Permit List access-list 130 permit
  tcp X.X.X.X 0.0.0.63 any
• Example of Deny List access-list 131 deny tcp
  any host X.X.X.X eq 2002 log

8
IP Tables (Servers)

• Addition to the existing IP access-list.

9
Email Security solution (Communigate Pro - Mail
Server)

• Virus scanner - RAV Antivirus
• Scans and clean messages and all attachments.
• Warning messages to sender(s) and receiver(s).
• Help avoid Internet malwares (viruses, worms,
  Trojans, hoaxes, etc.)
• AntiSpam.
• Real-time Black Hole list.
• Blacklist and block leased-line mail servers with
  has open relay

10
AntiSpam Real-time Black Hole List (RBL)

• Characteristic of RAV Antivirus program
• Use spam monitoring cops
• RBL DNS server, e.g. relay.ordb.org

11
Promotions and Use of Internet in Bhutan

• Starting in the last quarter of the year 2004.
• Free classes with access to Internet to schools
  and public countrywide.
• Workshops.
• Advertisement on effective use of Internet.
• Reducing Internet services tariffs.