Telecomunicaciones de Ecuador EcuCERT FIRST/TF-CSIRT Technical - - PowerPoint PPT Presentation

▶

Oct 05, 2023 466 likes •764 views

Superintendencia de Telecomunicaciones de Ecuador EcuCERT FIRST/TF-CSIRT Technical Colloquium Zurich 2014 Ecuador LANGUAGE: SPANISH POPULATION: AROUND 16 ITS POSTITION IS 66 IN THE WORLD SIMILAR TO NETHERLANDS 65 IN THE WORLD AREA : 256,370

SLIDE 1

Superintendencia de Telecomunicaciones de Ecuador

EcuCERT

FIRST/TF-CSIRT Technical Colloquium

Zurich 2014

SLIDE 2

Ecuador

LANGUAGE: SPANISH POPULATION: AROUND 16’ ITS POSTITION IS 66 IN THE WORLD SIMILAR TO NETHERLANDS 65 IN THE WORLD AREA: 256,370 KM2 , IT`S POSITION IS AROUND 80 IN THE WORLD SIMILAR TO UNITED KINGDOM SIMILAR TO NEW ZELAND

SLIDE 3

1 2 3 4

SLIDE 4

Galápagos - Islands

SLIDE 5

Coast – Pacific Ocean

SLIDE 6

Los Andes – Highlands

SLIDE 7

Amazon – Rain Forest

SLIDE 8

SLIDE 9

Cities - Quito

SLIDE 10

Cities - Guayaquil

SLIDE 11

Cities - Cuenca

SLIDE 12

People of Ecuador

SLIDE 13

FAIR PLAY

SLIDE 14

SLIDE 15

Superintendencia de Telecomunicaciones

SLIDE 16

EcuCERT’s Team

SLIDE 17

Telecommunication Statistics: 2’ million fixed lines, 6 operators 15’2 million mobile users, 3 operators 10´4 millions internet users, 234 ISP Domains: general use .ec - clubsuizo.ec Government use .gob.ec - supertel.gob.ec Commercial use .com.ec - casadelsuizo.com.ec

Ecuador

SLIDE 18

SLIDE 19

INDIVIDUAL EFFORTS

SLIDE 20

National Coordination
Constituency, mission, services,
Establishing Policies
Appropriated Workplace
Incident handling
Training
Membership to FIRST

In which areas we are working?

SLIDE 21

CYBER SECURITY COMMITTEE
NATIONAL CYBER SECURITY PLAN
PERSONAL DATA PROTECTION LAW
TELECOMMUNICATIONS AND CYBER SECURITY

LAW

COORDINATION

SLIDE 22

Our constituency will be at the

beginning:

– The telecommunication sector – The government

But in the future we will

increase to all the citizens

CONSTITUENCY

SLIDE 23

Installing the ECUCERT's data center
Buying the better tools of hardware and software
Equipping the forensic laboratory
Improving the network infrastructure
Improving the physical and logical security

APPROPRIATED WORKPLACE

SLIDE 24

We are using RTIR

– How to recive an incident – Incident handling process – Reports

INCIDENT HANDLING

SLIDE 25

RECIVED TRAINING

Our personal has been trained in courses that are

aimed to potential CSIRT knowledge, to gain a good grounding in the main aspects of working in an incident handling and response team:

– EC-Council: 1) Incident Handler, 2) Ethical Hacking, 3) Certified Security Analysis. – TERENA: Transits 1 – LACNIC: Proyecto Amparo – ITU – IMPACT: Workshops, Ciberdrills. – USCERT-ICSCERT: Industrial Control Systems Cybersecurity – USTTI: Cybersecurity and ICT Policy – and a large number of local trainings

SLIDE 26

IP-PBX FRAUD

 232 registred cases  Companies and Institutions (Grupo de abogados, Servicios petroleros, IESS, Cancillería, Uniandes, Banco del Austro, Cabired, Motransa, Servidinámica, LG, Uniplex, Telecuatro, entre

tros)

 Economic damage (over 5´ USD)  Atypical destinations(Guinea, Ghana, Austria, Gambia, Iridium, Cuba)

CSIRT Nacional

Ecucert - Supertel

January 2012 – December 2013

Registered cyber crimes

SLIDE 27

CSIRT Nacional

Ecucert - Supertel

January 2013 – December 2013

“Defacement”

 943 registered cases  Government and private domains  Attacked domains (Registro Civil, Bomberos, Registro de la Propiedad, Puerto de Esmeraldas, Movistar, Armada, Universidad Israel, CCI, ESPOL, Yamaha, aesoft, entre

tros).

Registered cyber crimes

SLIDE 28

41,23% 37,21% 9,67% 4,75% 4,32% 1,80% 0,40% 0,37% 0,25%

Defacements

.com.ec .gob.ec / .gov.ec .ec .edu.ec .org.ec .mil.ec .fin.ec .net.ec .med.ec

Registered cyber crimes

SLIDE 29