HKISPA spam activities 05 Andy Lake Secretary HKISPA

Year in Summary HKISPA survey has become the benchmark –1 st Sin Chung Kai’s - to legislate or not? –2 nd Damn the spam –3 rd Govt consultation Economic impact analysis heavily quoted in media and by Government.

Anti SPAM activities cont HKISPA continues as Founder member of HK Anti Spam Coalition Damn the spam event, Chambers HKISPA, OFTA, Police, vendors –York presented 2 nd survey results –Andy technical approaches to anti spam Govt UEM consultation submission HKISPA influence on govt response Resulted in STEPS, +ve outcome Presented to Govt IT groups

We support STEPS HKISPA supports the HK Government STEPS program, particularly in the areas of; Legislation’s important role Partnering & tangibly supporting a coordinated anti spam effort in HK Recognising importance of Technology

HKISPA suggestions for how govt should combat spam Execute STEPS, fully supported by HKISPA Launch an Abuse Centre which includes… a common shared technology platform for ISPs eg blacklist education and best practice advice for public access to best of breed resources for people and business to use to combat spam and other unwanted Complaint handling for public Govt to “outsource” the centre to experts HKISPA willing to take the project on

Next “STEPS” for us Develop proposal to govt to run a common blacklist / abuse centre – we aim to run this! Pursure alliances with other organisations on spam, IIA, FCC, ISC Update our spam COP Participate in next consultation

The end Following slides cover survey results and other info from our presentation to govt.

Spam is the “Silent Killer” of March, spam 69%, virus 7% of 75% of spam is sent from botnets Approx 20% now hidden behind ISP MTAs Trojans vs Supercomputers? Broadband growing 80% year 30,000 new zombies appearing each day Dictionary attacks for business domains Globally China is now highest spam levels at 80%, HK 57%

How much spam per country?

Origin of spam into HK

Is SPAM an issue in HK? HKISPA’s survey of ISPs

HKISPA Survey 3 rounds of surveys over past ~12 mths Members & non Members – 11 ISPs Covering majority of HK users Covered details of spam received & measures taken by ISPs ISP Recommendations to combat spam Potential Economic impact

HKISPA’s survey of ISP’s 11 respondents – broad representation Majority of Internet users in HK >90% Focus on impact of SPAM and its origin

Background Rising number of complaints to OFTA, Consumer Council, Media and ISPs Increasing commercial impact to online business (service providers, legitimate online marketers, vendors) Overseas trend towards legislation Lead to; OFTA & HKISPA meetings Forming of HK Anti Spam coalition Forming of ASTF under HKISPA HKISPA tasked with trying to quantify the issue in Hong Kong

Survey objectives Size the problem in HK Identify the key characteristics Understand what is being done today and what ISPs would be considered most effective means to combat spam

Is Spam a problem in HK? Is SPAM is a major issue:YES Spam is in the top 3 issues for all ISPs but 1 Lots of spam complaints: Half the ISPs receive > 500/mth Majority relate to receiving spam >40% Less are for unable to send >30%

Spam in HK Weighting the responses we can say that HK spam is at least 60% of handled by HK ISPs. This is in line with International trends.

Spam originating in HK Weighting the responses we can conclude that HK originating spam is in the region of 5% of the total spam.

Asian Spam ex HK Difficult to quantify, however it is clear that more Asian spam coming from outside HK than inside % Mainland is the dominant source. Taiwan next most prevalent

How often are HK ISPs blocked # ISPsFreqSize 1weeklyL 2monthlyM 5yearlyLMS 2neverM

Are ISPs addressing the issue All but one have implemented antispam measures. These include…. Self built blacklists10/11 ISPs Commercial blacklists6/11 Rate limiting6/11 Content analysis6/11 Info sharing1/11 Other analysis5/11 Commercial product1/11 No consensus on the most effective

Suggestions to address SPAM ALL ISPs are willing and think it’s a good idea to work together. ALL ISPs think a common blacklist is the most powerful means.

More suggestions from ISPs Sharing info. A charging mechanism to send and deliver bulk . Legislation.

ISPs view on Legislation Uncertain will address the core issue by materially reducing the amount of spam. General feeling it would be a positive step. Help8 Wont help2 Unsure1

Economic impact of SPAM International studies put the impact between USD10-20 Billion pa Losses at USD874 per employee pa* 6.5minutes “absenteeism” per/emp/day *source IDG

Potential losses to HK economy To the HK economy~HKD9.7B* Due to “absenteeism”HKD6.8B* $22M/day $13/emp/day *assuming half HK’s 3.5M workforce uses with unemployment at 7.2% and the same cost structure to International studies. Average salary of users assumed as 22K.mth.

Summary of survey findings Spam IS a major problem for ISPs and their customers. A large proportion (>60%) of in HK is spam. Though most of the spam is not from HK, a significant amount (5%) is. Even more is Asian language (20-40%).

Summary of survey findings All ISPs have procedures in place, but not highly effective Varying views on most effective All think it’s a good idea to work together – common blacklist & info sharing info most popular idea Most believe legislation would help

Thank you