Runet on the way to independence

[root]

What is being done to ensure the integrity, security and autonomy of the Russian segment of the global network

In the framework of the law "on sustainable Runet", a replacement infrastructure has been created in the Russian Federation to reduce the influence of foreign critical elements of the Internet on its Russian segment. This allows citizens, companies, and the state to retain access to online services if, for some reason, traffic routing is disrupted from the outside. Testing of scenarios for responding to cyber threats takes place within the framework of exercises conducted by Roskomnadzor (RKN).


ANOMALY MONITORING CENTER


A package of amendments to the laws "On Communications" and "On Information, Information Technologies and Information Protection", the so-called "Law on a Sustainable Runet" ( No. 90-FZ ), entered into force on November 1, 2019.

Its main goal is the availability of the Internet for Russian citizens, regardless of external or internal conditions.

The law provides for the creation in the Russian Federation of an independent infrastructure that provides routing in the Network when it is impossible to connect to foreign root servers. In addition, the document creates an opportunity to minimize the transfer abroad of data exchanged between Russian users.


In cases of threats to the functioning of the Internet on the territory of the Russian Federation, Roskomnadzor through the Center for Monitoring and Control of the Public Communication Network (CMU SSOP) can carry out centralized traffic control. The center was created on the basis of the Main Radio Frequency Center (GRCHTs) subordinate to the ILV.


As Sergei Khutortsev, director of the MSSO SSOP, emphasized, speaking at the SPEKTR-2021 * forum, before the Center appeared, the state did not have complete data either on communication networks or on the routing of Internet traffic that goes through them.

One of the functions of the MSC MSS is to identify and prevent threats to the infrastructure of Russian telecom operators and other owners of autonomous systems.​

At present, 93% of such companies are connected to the information system of the Center, Khutortsev said. “Information has already been received from them, it is being processed, analyzed, validated,” he said.

According to S. Khutortsev, CMU SSOP every hour records more than 5 thousand anomalies in the traffic of Russian operators. Among them, about 2.6 thousand are interception of BGP ** routes and redirecting the flow of information data, about 2 thousand are anomalies in the form of a "loop" of traffic abroad.

Sergey Khutortsev, CMU SSOP:

- This is a situation when Russian traffic from one domestic operator to another, for some reason, does not remain inside Russia, but passes through foreign communication networks. This allows our foreign partners to carry out some kind of traffic analysis and potentially creates conditions for interference in it. We also monitor such situations and work with telecom operators to eliminate network anomalies and stop incorrect routing.

In addition, the CMU detects almost 800 anomalies per hour in the form of BGP route leaks (transit redirection of Internet traffic through third-party autonomous systems). This, according to S. Khutortsev, affects the efficiency of information transmission and also creates conditions for the interception and analysis of traffic by operators for whom it is not intended.

Problems cannot be solved without the help of telecom companies, says S. Khutortsev. “It is necessary to establish closer working contacts not only with large telecom operators, but also with medium and small ones, and jointly solve the problem of the sustainability of communication networks,” he stressed.

BARRIER AGAINST CYBER ATTACKS

S. Khutortsev also said that

From next year, CMU MSSP will be used to prevent cyberattacks​

“We intend to develop the system in the direction of countering a wide range of global threats that affect the entire Russian segment of the Internet,” Khutortsev said. He recalled that the power of DDoS attacks can exceed 2 Tbit / s: “Such traffic volumes are extremely difficult for any single operator to handle. In order to effectively counter these threats, it is necessary to apply new technologically advanced methods. "

By 2022, the CMU SSOP will be engaged in countering DDoS and other computer attacks, IP spoofing (using someone else's IP address to deceive the security system).

S. Khutortsev said that in order to reduce the influence of foreign critical elements of the Network on its Russian segment, a replacement infrastructure has been created. In particular, to perform the functions of Internet registries (Regional Internet Registries, RIRs), the Register of Address and Number Resources (RANR) has been launched. To replace the dependence on the global DNS (Domain Name System - a computer distributed system for obtaining information about domains), the National Domain Name System (NDNS) was created.

Sergey Khutortsev, CMU SSOP:

- One of the main activities of the Center is to effectively use the mechanisms, the tools that we have, the information that we have collected. Including to provide assistance and support to the telecom community to improve the reliability of their networks.

TEACHINGS GO

The Law on Sustainable Runet also obliged telecom operators to ensure the installation of technical means of countering threats (TSPU) on their networks.

In February 2020, the government of the Russian Federation approved types of threats to the stability, security and integrity of the functioning of the Internet in Russia.


The list includes:

• threats to provide access to prohibited information or blocked resources;
• threats of cyberattacks and other information impacts on communications facilities and networks, as a result of which their functioning may be disrupted;
• threats to disrupt the accessibility of information online resources of government bodies to citizens;
• threats of infringement of information security of automated communication network management systems.

According to the CMU SSOP, TSPUs have been installed this year at more than 500 operator nodes, through which 73% of broadband Internet access (BBA) traffic and 100% of mobile traffic go. In 2022, technical means are planned to be installed on more than 1,000 nodes, which will cover 95% of broadband traffic.

Today, with the help of TSPU, access to the following resources is limited: ProtonMail , Twitter (partially), series services to bypass locks and others.

As for the exercises on the safety and stability of the Russian segment of the global network, they are being carried out. Telecom operators and other companies are taking part in them, the head of the RKN Andrey Lipov told reporters on the sidelines of the SPECTR-2021 forum.

He noted that the purpose of the exercise is to check the readiness of communication networks or their sections for certain deviations in operation, as well as how quickly, without consequences, if such occur, they return to a stable state.

Andrey Lipov, Roskomnadzor:

- The law prescribes to conduct exercises annually. We abide by the law. According to Roskomnadzor, all the exercises that were conducted were successful. They showed that we are ready to ensure that communication networks work stably and safely under any external influences.

OFFERS OF MARKET PARTICIPANTS

So, what was required of telecom operators in terms of the implementation of the law "on sustainable Runet":

• install on their communication networks TSPU provided by the state (GRCHTs);
• provide information about the network infrastructure, information about routing of Internet traffic, information about incidents / accidents on the network to the CMU of the SSOP;
• connect to NSDI;
• participate in trainings (carried out by the ILV, provided by the CMU of the SSOP).

Aleksandr Pankov, Vice President for Government Relations of VimpelCom (Beeline brand), said that the operators' biggest fears were related to the installation of the TSPU. “For the first time, alien elements were introduced into the backbone communication networks, moreover, in the“ black box ”format. Naturally, there were many concerns. When the law and the by-laws were adopted, we began to move along this path together with the RKN. All these 2.5 years, the interaction has been carried out quite closely, ”said A. Pankov.

He added that the operator actively participates in measures to implement the requirements of 90-FZ, builds effective interaction with the RKN and the CMU of the SSOP. A committee was created in the Beeline to coordinate this work. It is headed by the president of the company.

At the same time, A. Pankov noted that at the initial stages of the implementation of measures within the framework of the law, market players inevitably face difficulties. From the rostrum of the forum, the vice-president of the beeline made a number of proposals, which, in his opinion, will make the interaction of operators with the ILV and the CMU of the SSOP more effective and efficient.

It was, in particular, that all the requirements were fixed in the normative way, as an option - with the help of the regulations approved by the RKN. This will help, for example, to fix the format and composition of the files transmitted to the CMU of the SSOP or, more precisely, to plan work to increase the capacity of the network and expand the areas for future equipment.

In addition, A. Pankov proposed to organize a technical support service for telecom operators within the framework of the MTSM SSOP. “I speak on behalf of VimpelCom, but since we have implemented all measures within the framework of the law shoulder to shoulder, in general, the problems of all companies, I think, are similar,” A. Pankov said.
_____

* XX Forum "Regulation in the field of infocommunication technologies" (SPECTR-2021) was held from 19 to 20 October 2021 in Sochi, at the resort "Rosa Khutor".

The event is the main platform for an open dialogue between business and the regulator in the field of infocommunication technologies.

Forum participants: representatives of federal executive authorities, Roskomnadzor, HRChTs, companies - users of the radio frequency spectrum, research and design institutes, domestic and foreign equipment manufacturers, international industry organizations.

SPECTRUM-2021 was held with the support of Roskomnadzor, the organizer of the forum is ANO Radio Frequency Spectrum.

** BGP (Border Gateway Protocol) is currently the main dynamic routing protocol on the Internet.


Images: RSpectr, Freepik.com

A source

 

[Матушкин Андрей Николаевич]

What is being done to ensure the integrity, security and autonomy of the Russian segment of the global network

Thanks! Very interesting article!

 

[Детективное агентство Израиль.]

Everything is detailed and on the shelves! Like!