Rwanda GovNet Xuan Pan Nkusi Issa Claude Hakizimana Joakim Slettengren Innocent Nkurunziza Xuan Pan Nkusi Issa Claude Hakizimana Joakim Slettengren Innocent Nkurunziza Team 2 -

Rwanda GovNet2 Agenda  Overview  Project background  Project goals  Current status  Questions  Overview  Project background  Project goals  Current status  Questions

Rwanda GovNet3 Overview Project background Project goals Current status Questions Overview Project background Project goals Current status Questions

Rwanda GovNet4 Overview  Following project plan  Small deviations due to new input  We are on our way to realize all our main goals  Removed optional goals due to time constraints  Following project plan  Small deviations due to new input  We are on our way to realize all our main goals  Removed optional goals due to time constraints

Rwanda GovNet5 Overview Project background Project goals Current status Questions Overview Project background Project goals Current status Questions

Rwanda GovNet6 Rwanda  Located in central east Africa  Economy based on subsistence agriculture  Limited natural resources  Low skilled man power  65% of Rwandans below poverty line  There is no choice other than using ICT  Located in central east Africa  Economy based on subsistence agriculture  Limited natural resources  Low skilled man power  65% of Rwandans below poverty line  There is no choice other than using ICT Source: CIA World Factbook

Rwanda GovNet7 NICI Plan and GovNet  National Information and Communication Infrastructure policy and Plan (NICI) in 20 years (1 st, 2 nd, 3 rd and 4 th phase)  RITA coordinating body to support the implementation of the NICI plan  GovNet broadband was implemented to allow deployment of e-government applications and facilitate information interchange and exchange  National Information and Communication Infrastructure policy and Plan (NICI) in 20 years (1 st, 2 nd, 3 rd and 4 th phase)  RITA coordinating body to support the implementation of the NICI plan  GovNet broadband was implemented to allow deployment of e-government applications and facilitate information interchange and exchange

Rwanda GovNet8 Challenges and Needs Challenges after the first GovNet implementation  Network instability due to viruses, DoS etc.  Difficult to detect or prevent the user causing the problems  Difficult to monitor who is using the network Needs of the GovNet pilot project  Establishment of network security  Need to prevent unauthorized users to access the network resources  Bandwidth monitoring, network management Challenges after the first GovNet implementation  Network instability due to viruses, DoS etc.  Difficult to detect or prevent the user causing the problems  Difficult to monitor who is using the network Needs of the GovNet pilot project  Establishment of network security  Need to prevent unauthorized users to access the network resources  Bandwidth monitoring, network management

Rwanda GovNet9 Overview Project background Project goals Current status Questions Overview Project background Project goals Current status Questions

Rwanda GovNet10 Project goals 1/2  Upgrade selected sites to industry standard equipment  Increase network security  Develop an Acceptable Use Policy  Select and implement managing and monitoring tools  Select and implement bandwidth monitoring tools  Upgrade selected sites to industry standard equipment  Increase network security  Develop an Acceptable Use Policy  Select and implement managing and monitoring tools  Select and implement bandwidth monitoring tools

Rwanda GovNet11 Project goals 2/2  Conduct a training session for the network administrators  Demonstration of VoIP solution  VoIP study for long term solution  Conduct a training session for the network administrators  Demonstration of VoIP solution  VoIP study for long term solution

Rwanda GovNet12 Overview Project background Project goals Current status Questions Overview Project background Project goals Current status Questions

Rwanda GovNet13 Upgrade sites to industry standard equipment  Budget  Equipment procurement process  Routers, switches, servers, racks  Collecting quotations from Rwandese and Swedish equipment suppliers  Will be installed in Rwanda  Budget  Equipment procurement process  Routers, switches, servers, racks  Collecting quotations from Rwandese and Swedish equipment suppliers  Will be installed in Rwanda

Rwanda GovNet14 Training session  Conduct training session for network administrators  Training location-KIST  Training focus (Radius,ntop,snort)  Prepared training plan  Material still under development  Conduct training session for network administrators  Training location-KIST  Training focus (Radius,ntop,snort)  Prepared training plan  Material still under development

Rwanda GovNet15 Present a security solution for GovNet 1. Cost-efficient 2. Centralized 3. Scalable 1. Cost-efficient 2. Centralized 3. Scalable

Rwanda GovNet16 Methodology Attack Impact Create Exploited Result in Reduce Decrease Discover Protect Deterrent Control Detective Control Preventative Control Trigger Corrective Control Vulnerability Risk analysis Acceptable User Policy System Weakness analysis-Nessus Intrusion DetectionSystem Emergency Response Plan 802.1x+Radius EAP-TLS Cisco VPN solution Threat

Rwanda GovNet17 IPsec VPN Home Agent Post Office Ministry of Infrastructure RITA Ministry of Finance Remote organizations from other provinces Internet Authentication Traffic VOIP Traffic Confidential Document Transmission Traffic Backup Traffic

Rwanda GovNet18 Authentication Certification Authority And Authentication Server … … Ministry A … Ministry B ISP x x Client side certificate Certificate of CA Server side certificate

Rwanda GovNet19 Intrusion Detection System … Ministry A Sensor SQL … Ministry B Sensor SQL … Snort Center ACID ISP Sensor SQL

Rwanda GovNet20 Implement NW managing and monitoring tools  Network monitoring system, Nagios  Final implementation will be carried out in Rwanda, since it depends on the equipment  Important to involve LAN managers in Rwanda  Network monitoring system, Nagios  Final implementation will be carried out in Rwanda, since it depends on the equipment  Important to involve LAN managers in Rwanda

Rwanda GovNet21 Implement bandwidth monitoring tools  Several options depending on the equipment  Ntop, Cacti and MRTG  Measure traffic  Find bottlenecks  Measure outbound traffic  Several options depending on the equipment  Ntop, Cacti and MRTG  Measure traffic  Find bottlenecks  Measure outbound traffic

Rwanda GovNet22 VoIP  Conduct a first study  Demonstrate open source VoIP solution  Conduct a first study  Demonstrate open source VoIP solution

Rwanda GovNet23 ”Doing the best at this moment puts you in the best place for the next moment” Oprah Winfrey ”Doing the best at this moment puts you in the best place for the next moment” Oprah Winfrey

Rwanda GovNet24 Overview Project background Project goals Current status Questions? Overview Project background Project goals Current status Questions?

Rwanda GovNet25 Thanks for listening Rwanda GovNet team