67 2008 was 8.1, which is decreased to 1.0 in 2009
2
. The graph of the domestic bot infection rate in 2009, shown below, is very steady, and average is much
lower than that of the year 2008.
Monthly domestic bot infection rate in 2009
3. Events organized co-organized
2008 APISC Security Training Course KrCERTCC hosted the 2009 APISC Security Training Course to support
strengthening the response capabilities of the developing economies. The objective of this training course is to assist developing economies to establish
Internet incident response capabilities while providing a training opportunity for establishing and managing CSIRT in their own economy. This event was
held on 11-15 May in Ibis Myeong-dong Hotel, Seoul, Korea, with 21 trainees participated from 17 economies, 5 trainers from 3 economies, throughout the
Asia and Pacific region. The content of 5 days course includes general overview of the information
security and Korea Information Security Agency, and TRANSITS Training of Network Security Incident Teams Staff course. Active participation from the
trainees benefited all participants while active discussion and interaction of the trainees and trainers had been allocated for most of the time. The course was
successful and fruitful as well as attendees have satisfied with the overall course.
2
This statistics is analyzed from KrCERTCC’s honeynet system located in Seoul, Korea. KrCERTCC is operating Bot Detection System on real-time basis.
68 APCERT Incident Handling Drill
Internet is in the nature of borderless and seamless network, so as Internet incident. It is characteristically not limited to one economy or region. This
reality put more meaning on the importance of having an incident handling drill among many economies, cooperation between CSIRTs for various sectors.
KrCERTCC has participated in the APCERT incident handling drill in 2009 which has ended with successful result.
The drill was again to verify the coordination capabilities among CSIRTs on incident handling framework, deliver actions to improve incident response
system in each CSIRT, and give participants an experience of a coordination system. 247 POCs were shared for preparation and an IRC channel was used
for real-time communication. 16 APCERT member teams from 14 economies have joined the drill, as the scenario was not distributed before the actual drill
commenced. Some economies had their own drill with local ISPs involved and played with their own coordination system with the given version of scenario.
HKCERT has successfully completed to coordinate the drill, as whole other participated teams have successfully done their tasks. Yet another good drill
was performed in 2009 by the APCERT members.
4. International Activities
