2. Analysis of Internet Infrastructure Security 2.1 Panel Discussion and Interview Results On 10 June 2016, as part of the AIS in Gaborone, ISOC and the AUC held a discussion panel on “Internet Infrastructure Security in Africa”. Interviews were also conducted with selected experts. The panel discussion and the interviews focused on the following five major topics: • What Constitutes Internet Infrastructure and What are Critical Assets Internet connectivity is identified as the most important function of Internet infrastructure. The physical assets that make Internet connectivity possible include network devices such as routers, switches, firewalls, Intrusion Detection Systems, proxy servers, and IXPs. Various virtual, intangible or abstract components are also needed for the Internet to function, such as addressing, routing, application protocols and services, security protocols, and the Domain Name System (DNS). • The Security Threat Landscape in Africa At a fundamental level, the nature of cyber threats in Africa is largely similar to elsewhere in the world. However, intermittent connectivity is a serious problem, which distinguishes Africa from much of the rest of the world. Intermittent connectivity is a result of a number of factors such as insufficient resources in terms of bandwidth, the cost of Internet connectivity, frequent power outages and blackouts, a lack of effective maintenance and scheduled patching, a lack of trained workers, natural factors (such as inclement weather), and human factors (fraud, sabotage, theft, fuel shortage, etc.). Intermittent connectivity limits the capability of stakeholders to collaborate to prepare for, or to respond to, an attack. • Components of Internet Infrastructure that are Easy Targets of Cyberattacks Many commercial and industrial systems have embedded software that is out-of-date and/ or unpatched, and are, therefore, especially vulnerable. For example, many financial systems and public sector networks are dependent on machines running software which is no longer supported by its developers, and for which security upgrades are no longer available. The mobile industry also raises similar concerns. In some instances, mobile devices are being sold with out-of-date or unpatched software. Alongside out-of-date or unsupported software, an inability or unwillingness to upgrade or patch servers and applications on a regular basis makes systems vulnerable to attack. Physical attacks on the infrastructure also pose a threat. The attacks could be intentional and motivated by financial reasons, political activism, or even terrorism. Physical damage to infrastructure may also be unintentional, due to factors such as a lack of proper and regular maintenance on the part of the operators, or negligence due to poor operational and management practices. Fiber cuts were cited as an example of physical attacks. It may be difficult to totally avoid this problem, but solutions to identify and locate cuts would help mitigate the impact. Information sharing among operators is critical in this regard. 10 Internet Infrastructure Security Guidelines for Africa internetsociety.org