Anti-SPAM activities in Malaysia - Current Situation, Regulatory Environment and Future Developments ITU virtual conference on anti-spam regulation and policy development November 19th, 2004

© 2004 Malaysian Communications and Multimedia Commission 2 Agenda 1.SPAM in Malaysia - The current situation 2.The Malaysian Approach - Regulatory Environment 3.A Call for Action - Future Developments

© 2004 Malaysian Communications and Multimedia Commission 3 SPAM in Malaysia - The current situation As reported by the Malaysias National ICT Security Emergency Response Center (NISER), the top 10 originating countries in the case of SPAM in Malaysia are: USA %, China %, Korea %, Canada -3.33%, Japan %, Taiwan %, UK %, France %, Germany -1.30% Local %

© 2004 Malaysian Communications and Multimedia Commission 4 The Malaysian Approach - The Regulatory Environment Issued a public discussion paper on 7 August 2003 and the results of it on 18 February 2004 Developed multi-prong action-plans to combat SPAM based on the following: a.Self-Regulation b.Management by Service Providers c.International cooperation d.Legislative recourse

© 2004 Malaysian Communications and Multimedia Commission 5 Self-Regulation 1.Awareness/Education: targeting business and consumer end users – nation-wide awareness program 2.Setting up a SPAM portal ( 3.Promotion of technology-based solutions 4.Development of an IASP sub-code benchmark on SPAM for the Consumer Forum (IASP and Mobile)

© 2004 Malaysian Communications and Multimedia Commission 6 Regulator – Industry Cooperation The establishment of an Information Sharing Forum (ISF). ISPs and relevant stakeholders from private and public bodies- working towards guidelines/ best practices, whitelist of IPs and blacklist of known spammers. Technical guidelines. Compendium of best practices. An Anti-SPAM Toolkit (available 1st Quarter 2005)

© 2004 Malaysian Communications and Multimedia Commission 7 Cont; Monitoring of International Blacklist Servers (eg. Spamhaus etc) Alerted IASPs in Malaysia of list of IPs listed by the Anti-SPAM Coordination Team of Internet Society of China as sending SPAM.

© 2004 Malaysian Communications and Multimedia Commission 8 Management by Service Providers 1.Enforcement of subscription contract between Service Providers and customers 2.Service Providers obligations under the Content Code and General Consumer Code Sub-codes: Internet Service Providers on SPAM; and Mobile Operators on SMS SPAM 4. Promotion of technology-based solutions

© 2004 Malaysian Communications and Multimedia Commission 9 International Cooperation Information sharing, technical solutions and study of legal provisions of each country Urgent need for a coordinated approach by the global community - private and public bodies MCMC is leading the Asean Telecommunication Regulator Council (ATRC) initiatives on anti- SPAM

© 2004 Malaysian Communications and Multimedia Commission 10 International Cooperation – Malaysias role in the ASEAN Telecommunications Regulators Council (ATRC) In line with the Singapore Declaration – An Action Agenda - adopted at the 3 rd TELMIN in September 2003, Singapore Ministers called for the acceleration of the development and security of the ASEAN Information Infrastructure

© 2004 Malaysian Communications and Multimedia Commission 11 Cont; 1.During the last ATRC meeting in Laos, member countries agreed for Malaysia to spearhead ATRCs action plan on SPAM; Establishes working level link between members; Encourages exchange of skills and sharing of: a.Policies and strategies; b.Technical expertise; c.Educational strategies and information; and d.Knowledge and information about known sources of SPAM

© 2004 Malaysian Communications and Multimedia Commission 12 Facilitates cooperation between industry and anti-SPAM groups within ATRC economies; Bilateral arrangements to fight SPAM; and Engages with other international fora towards cooperation in fighting SPAM. Cont;

© 2004 Malaysian Communications and Multimedia Commission 13 Legislative Recourse Malaysia do not have a specific anti-SPAM law. Presently relying on Section 233 of the Communications and Multimedia Act 1998 (CMA) but yet to be tested Monitoring developments of anti-SPAM laws in other jurisdiction, examples: United States of America Australia Korea Other countries

© 2004 Malaysian Communications and Multimedia Commission 14 Future Developments The Anti-SPAM Toolkit to be made available in 1st Quarter 2005 Continuing and sustaining Awareness and Educational programs Promotion of Technology solutions and Positive Use of the Internet Bilateral Agreements/MoUs with other countries Enforcement - Section 233 of the CMA Study need for Anti-SPAM legislation

© 2004 Malaysian Communications and Multimedia Commission 15 Call For Action - Future Development Industry - Internet Service Providers Minimize/eradicate spam received through their gateway Offer solutions to users/customers Educate users/customers Ensure that spammers are blocked from using our local network infrastructure to spam Cooperate with Regulators and other ISPs - share information Promote technical approach to counter SPAM

© 2004 Malaysian Communications and Multimedia Commission 16 Call For Action - Future Developments Consumer end users Cultivate responsible use of your address Adopt technology solutions - anti-SPAM, anti-spy ware software Exercise your rights - lodge complaints to the relevant organizations - MCMCs online complaint reporting on SPAM

© 2004 Malaysian Communications and Multimedia Commission 17 Call For Action - Future Developments Companies/Organizations Adopt technology solutions Ensure policy is in place and adhered to Exercise your rights - lodge complaints Educate employees on the usage of corporate/organizational

© 2004 Malaysian Communications and Multimedia Commission 18 Conclusion: The Regulators Role Continue to work together in concert with the industry and other relevant organizations Continue to work with the global community especially with other regulators - Addressing SPAM requires global cooperation Build and sustain awareness/education To act upon complaints received Promote technical solution

© 2004 Malaysian Communications and Multimedia Commission 19 Thank You Information and Network Security Department, Monitoring & Enforcement Division, Malaysian Communications and Multimedia Commission, MALAYSIA