HKISPA spam activities 05

1
HKISPA spam activities 05

• Andy Lake
• Secretary
• HKISPA
• andy.lake_at_hkispa.org.hk

2
Year in Summary

• HKISPA survey has become the benchmark
• 1st Sin Chung Kais - to legislate or not?
• 2nd Damn the spam
• 3rd Govt consultation
• Economic impact analysis heavily quoted in media
  and by Government.

3
Anti SPAM activities cont

• HKISPA continues as Founder member of HK Anti
  Spam Coalition
• Damn the spam event, Chambers HKISPA, OFTA,
  Police, vendors
• York presented 2nd survey results
• Andy technical approaches to anti spam
• Govt UEM consultation submission
• HKISPA influence on govt response
• Resulted in STEPS, ve outcome
• Presented to Govt IT groups

4
We support STEPS

• HKISPA supports the HK Government STEPS program,
  particularly in the areas of
• Legislations important role
• Partnering tangibly supporting a coordinated
  anti spam effort in HK
• Recognising importance of Technology

5
HKISPA suggestions for how govt should combat spam

• Execute STEPS, fully supported by HKISPA
• Launch an Email Abuse Centre which includes
• a common shared technology platform for ISPs eg
  blacklist
• education and best practice advice for public
• access to best of breed resources for people and
  business to use to combat spam and other unwanted
  email
• Complaint handling for public
• Govt to outsource the centre to experts
• HKISPA willing to take the project on

6
Next STEPS for us

• Develop proposal to govt to run a common
  blacklist / email abuse centre we aim to run
  this!
• Pursure alliances with other organisations on
  spam, IIA, FCC, ISC
• Update our spam COP
• Participate in next consultation

7
The end

• Following slides cover survey results and other
  info from our presentation to govt.

8
Spam is the Silent Killer of email

• March, spam 69, virus 7 of email
• 75 of spam is sent from botnets
• Approx 20 now hidden behind ISP MTAs
• Trojans vs Supercomputers?
• Broadband growing 80 year
• 30,000 new zombies appearing each day
• Dictionary attacks for business domains
• Globally China is now highest spam levels at 80,
  HK 57

9
How much spam per country?
10
Origin of spam into HK
11
Is SPAM an issue in HK?HKISPAs survey of ISPs
12
HKISPA Survey

• 3 rounds of surveys over past 12 mths
• Members non Members 11 ISPs
• Covering majority of HK email users
• Covered details of spam received measures taken
  by ISPs
• ISP Recommendations to combat spam
• Potential Economic impact

13
HKISPAs survey of ISPs

• 11 respondents broad representation
• Majority of Internet users in HK gt90
• Focus on impact of SPAM and its origin

14
Background

• Rising number of complaints to OFTA, Consumer
  Council, Media and ISPs
• Increasing commercial impact to online business
  (service providers, legitimate online marketers,
  vendors)
• Overseas trend towards legislation

• Lead to
• OFTA HKISPA meetings
• Forming of HK Anti Spam coalition
• Forming of ASTF under HKISPA
• HKISPA tasked with trying to quantify the issue
  in Hong Kong

15
Survey objectives

• Size the problem in HK
• Identify the key characteristics
• Understand what is being done today and what ISPs
  would be considered most effective means to
  combat spam

16
Is Spam a problem in HK?

• Is SPAM is a major issue YES
• Spam is in the top 3 issues
  for all ISPs but 1
• Lots of spam complaints
• Half the ISPs receive gt 500/mth
• Majority relate to receiving spam gt40
• Less are for unable to send email gt30

17
Spam in HK

• Weighting the responses we can say that HK spam
  is at least
• 60
• of email handled by HK ISPs. This is in line
  with International trends.

18
Spam originating in HK
Weighting the responses we can conclude that HK
originating spam is in the region of
5 of the total spam.
19
Asian Spam ex HK

• Difficult to quantify, however it is clear that
  more Asian spam coming from outside HK than
  inside.
• 20-40
• Mainland is the dominant source.
• Taiwan next most prevalent

20
How often are HK ISPs blocked
ISPs Freq Size 1 weekly L 2 monthly M
5 yearly LMS 2 never M
21
Are ISPs addressing the issue

• All but one have implemented antispam measures.
  These include.
• Self built blacklists 10/11 ISPs
• Commercial blacklists 6/11
• Rate limiting 6/11
• Content analysis 6/11
• Info sharing 1/11
• Other analysis 5/11
• Commercial product 1/11
• No consensus on the most effective

22
Suggestions to address SPAM

• ALL ISPs are willing and think its a good idea
  to work together.
• ALL ISPs think a common blacklist is the most
  powerful means.

23
More suggestions from ISPs

• Sharing info.
• A charging mechanism to send and deliver bulk
  email.
• Legislation.

24
ISPs view on Legislation

• Uncertain will address the core issue by
  materially reducing the amount of spam.
• General feeling it would be a positive step.
• Help 8
• Wont help 2
• Unsure 1

25
Economic impact of SPAM

• International studies put the impact between
  USD10-20 Billion pa
• Losses at USD874 per employee pa
• 6.5minutes absenteeism per/emp/day
• source IDG

26
Potential losses to HK economy

• To the HK economy HKD9.7B
• Due to absenteeism HKD6.8B
• 22M/day
• 13/emp/day
• assuming half HKs 3.5M workforce uses email
  with unemployment at 7.2 and the same cost
  structure to International studies. Average
  salary of email users assumed as 22K.mth.

27
Summary of survey findings

• Spam IS a major problem for ISPs and their
  customers.
• A large proportion (gt60) of email in HK is spam.
• Though most of the spam is not from HK, a
  significant amount (5) is.
• Even more is Asian language (20-40).

28
Summary of survey findings

• All ISPs have procedures in place, but not highly
  effective
• Varying views on most effective
• All think its a good idea to work together
  common blacklist info sharing info most popular
  idea
• Most believe legislation would help

29
Thank you andy.lake_at_hkispa.org.hk