ICT Usage & Cyber Security Issues in Myanmar AESEN-Japan International Symposium on Cyber Security Khin Swe Htay Deputy Chief Engineer Myanma Posts and Telecommunications Tokyo, Japan October 25, 2013 International Symposium 1
Table of Contents Country Profile ICT Policy and Strategy ICT Infrastructure & Resources ICT Usage Cyber Security Issues National Cyber Security Initiative Conclusion International Symposium 2
The Republic of the Union of Myanmar President Land Area Population Capital : U Thein Sein : 676,553 Sq.Km : 61 Millions : Nay Pyi Taw States : 15 Ethnic Groups : 135 Office language: Myanmar Currency : Kyat Neighboring Countries : India, China, Thailand, Laos and Bangladesh International Symposium 3
National ICT Policy Redrafting of existing laws and regulations relating to Radio, Wireless, Communications, Voice and Data services in accordance with current situation and getting approval. Allowing and promoting of more investment from domestic and foreign companies in communication services for Telephone, Mobile, Broadband Internet, Network Facilities and Data Services with the Public, Private Partnership (PPP) model. Searching for means and ways of attracting international investment in order to provide mobile telephone and data services for rural citizens. The new Telecommunications Law (No.31/2013) was signed into effect by President U Thein Sein and released by Pyidaungsu Hluttaw on 8 October, 2013. Assignment of International Gateway, Telecommunications Service Licensing, Telecommunications Equipment License, General License Conditions, Technical Standards, Installation, Maintenance and Repair of Network Facilities and etc. International Investment License Winners Two winner telecom operators are Telenor Co., and Ooredoo Co.,. International Symposium 4
National ICT Strategy MOST MCIT PTD M T P Telenor Myanmar Ooredoo Myanmar Myanmar Computer Science Development Council (1996) Myanmar Computer Federation (1998) MCPA MCIA MCEA IT Industries States & Regions IT Training Centers IT Solution IT Products International Symposium 5
ICT Infrastructure & Resources Indicator vs Statistic Voice Exchange International Exchange 3 Local Exchange 917 Transit Exchange 13 Mobile MSC Exchange 13 Satellite Station As of 30/9/2013 International Earth Station 1 Domestic Earth Station (Hub) 2 MPT Satellite Terminal 2363 VSAT Station 11 Microwave Station Digital Microwave Station 337 IP Microwave Station 48 Cable Landing Station International Submarine Cable Landing Point 1 Internet International Internet Bandwidth (Gbps) 14.26 International Internet Gateway 1 Internet Service Provider 2 MM Domain 1950 International Channel International Channels (Voice) (SEA ME WE3 + Cross-border + Satellite) 10,128 Software Park 2 Cyber city 1 International Symposium 6
ICT Usage As of 30/9/2013 Telephone Internet Fixed Line - 619,665 Mobile Phone - 7782,500 Tele Density - 13.8% Mobile Data - 1392,706 Broadband - 376,000 Data Density - 2.8% Indicators for Target 2013-14 to 2015-16 Indicator 2013-14 2014-15 2015-16 Telephone lines per 100 population Cellular subscribers per 100 population Internet users per 100 population 1.04 1.07 1.11 22.8 50.0 75.0 9.0 20.0 30.0 Phone Density vs Internet Density Nay Pyi Taw 46% 7.8% Yangon Mandalay 36% 18% 6.12% 3.06% International Symposium 7
Computer to Student/ Teacher Ratio Level Computer Student Computer & Student Ratio Teacher Computer & Teacher Ratio High School 1,1430 685,091 1:60 28,107 1:3 Middle School Primary School 7,360 2,418,577 1:329 69,649 1:10 1,630 5,313,720 1:3260 185,834 1:114 Total 2,0420 8,417,388 1:421 283,590 1:14 Source : Department of Educational Planning and Training International Symposium 8
University Teaching Material One PC assigns for one student in LAB. Wi-Fi service is available only in few campus. Online teaching ipstar International Symposium 9
e-government Development Index of Selected Countries e-govrnemnt index 2003 2004 2005 2008 2010 2012 Myanmar 0.28 0.3031 0.2959 0.2922 0.2818 0.2703 India 0.373 0.3879 0.4001 0.3814 0.3567 0.3829 Bangladesh 0.165 0.1788 0.176 0.2936 0.3028 0.2991 China 0.416 0.4356 0.5078 0.5017 0.47 0.5359 Thailand 0.446 0.5096 0.5518 0.5031 0.4653 0.5093 Laos 0.192 0.2329 0.2421 0.2383 0.2637 0.2935 Cambodia 0.264 0.2859 0.2989 0.2989 0.2878 0.2902 Vietnam 0.357 0.3378 0.364 0.4558 0.4454 0.5217 0.6 0.5 0.4 0.3 0.2 0.1 0 2003 2004 2005 2008 2010 2012 Country International Symposium 10
International Symposium 11 e-government Development Status Ministries Level 3 Online Application e-payment, e-banking, e-visa, e-ticketing, e-reservation, etc. Level 2 - e-office Video Conferencing, e-cabinet, GOS, Data Server, Language Lab Level 1 - Basic Electronic Document Management System EDMS, GPMS 14 34% 12 29% 15 37%
International Symposium 12 Level of Government Websites Ministries Level 5 Integration - - Level 4 Transactional - - Level 3 Interactive 3 9% Level 2 Enhanced 13 39% Level 1 Emerging 17 52% Development of e-government Master Plan On going <Planning Stage>
Local Bank used ICT Sr. Bank Qty. Service 1. Asia Green Development Bank 29 Decentralized Core banking 2. Asia Yangon Bank 7 In-house Decentralized Core banking 3. Ayeyarwaddy Bank 43 Vietnam Centralized Core banking 4. Co-operative Bank 51 Centralized Core banking 5. First Private Bank 21 In-house Decentralized 6. Innwa Bank 33 In-house Decentralized Core banking 7. Kanbawza Bank 123 Centralized Core banking 8. Myanma Agrilcultural Development Bank 206 In-house Decentralized Core banking 9. Myanma Apex Bank 28 Centralized Core banking 10. Myanma Economic Bank 296 11. Myanma Foreign Trade Bank 1 ATM Switch + Core Banking International Symposium 13
Local Bank used ICT Sr. Bank Qty. Service 12. Myanma Investment and Commercial Bank 2 13. Myanmar Citizens Bank 10 ATM Switch + Core Banking 14. Myanma Livestock and Fisheries Development Bank 15. Myanmar Orintal Bank 21 ATM Switch + Core Banking 16. Myawaddy Bank 28 Decentralized Core banking 17. Naypyitaw Si Pin Bank 1 Decentralized Core banking 18. Rural Development Bank 2 Decentralized Core banking 19. Small and Medium Industrial Development Bank 20. Tun Foundation Bank 14 21. United Amara Bank 19 ATM Switch + Core Banking 22. Yadarnarpone Bank 2 23. Yangon City Bank 2 24. Yoma Bank 53 In-house Decentralized 68 11 International Symposium 14
Banking Service Central Banking Automatic Clearing House (ACH) Credit Bureau Commercial Banking Core Banking Systems, xrm, SWITF Integration Payment Network, EFT Inter-banking Capital Market and Stock Exchange (Coming 2014!) Myanmar Stock Exchange E-Brokerage Solutions Myanmar Payment Union (MPU) Card (2012) EASI Travel Master Card (2013) International Symposium
Mobile Banking Unbanked Population...A Challenge Myanmar: 99% Unbanked Unbanked Customers with a Mobile Phone in 2013 International Symposium 16
Online Services Root Certification Authority Yatanarpon Web Portal - 17/10/2010 Services under Yatanarpon 1) Social Network & Forum 2) Yellow pages 3) Job Vacancy 4) Advertising Cloud Service Bill Payment SSL Certificate SSL VPN Yatanarpon Call Center (Yangon) Yatanarpon Call Center (Mandalay/ NayPyiTaw) Soon!! International Symposium 17
Online Entertainment Live Stream/ Radio/ Forum Online Booking & Ticketing Popular website Facebook Google Play G.Mail Skype DoTA International Symposium 18
Cyber Security Issue Cyber Incident 2000 2010 No Record 2010 2011 DDoS Attack in ISP/ IXP 2012 2013 Targeted DDoS/ DoS Attack Targeted E.Mail Attack Web Defacement SPAM E.Mail Phishing Violation of Privacy in SNS Scanning Source : mmcert/cc International Symposium 19
Incident Report 60% 2012 Cyber Incidents Incident Cases 50% 40% 30% 20% Encryption Information Stealing Website Defacement DDoS Web Vulnerability Malware 10% 0% Encryption Information Stealing Website Defacement DDoS Web Vulnerability Malware Source : mmcert/cc International Symposium 20
Incident Report 2013 Cyber Incidents As of September/2013 Type of Incident No. of Incident 38% 2% 4% 4% 0% 29% Scanning 2 DoS 14 DDoS 4 Malware 8 17% 6% Exploiting Known Vulnerability 18 Login Account 1 Unauthorized Use 2 Source : mmcert/cc International Symposium 21
Renesys Report SEVERE RISK Could It happen In Myanmar? Under those circumstance, it can be an issue that would take down the Internet in the whole of the country. What is the main reason? The reason is all ISPs in Myanmar connect to single international gateway towards global internet. What is countermeasure? According the Telecommunica tion Law, lately released by the State, international internet gateway might be more than one with the approval of the Union Government. International Symposium 22
Milestone Cyber Security Measures 2004 mmcert Establishment 2006 Cyber Drill Exercise - ACID Initiative 2010 Opening of mmcert/cc 2010 2011 Joining mmcert Tsubame Coordination Project Center mmcert/cc 2011 HRD Expert service program Initiative 2011 Joining ITU IMPACT 2011 Joining APCERT 2012 ASEAN-Japan Joint Awareness Activities Initiative 2012 Cyber Drill Exercise of APCERT members Initiative 2013 Cyber Crime Unit Establishment 2013 The 1 st meeting of National Cyber Security Steering Committee in Nay Pyi Taw International Symposium 23
Contribution to GDP, Export A Secure and resilient information and communication Network A Secure and resilient information and communication Network INCLUSIVE SOCIO-ECONOMIC DEVELOPMENT Fundamentals Clean Government Good Governance Fair Competition Transparency Sectorial Development ICT Industry Development Agriculture Service Industry Trade ICT for Enabling Environment Infrastructure Education Legal HR International Symposium 24
Thank you for your attention. www.mcit.gov.mm kshtay@mpt.net.mm +95 9 5100050 International Symposium 25