earlier this month with the aim of showing that the sites could be
exploited, officials said this week.
Security experts in Kenya alerted the Computer Incident Response
Team (CIRT) to the attacks after the hacker, known as "Direxer,"
compromised the sites on Jan. 17.
When CIRT was alerted that the government websites were compromised,
Wangusi said that CCK alerted the directorate of e-government, the
entity responsible for government e-infrastructure and services.
"The intended role of any CIRT is to complement whatever
intelligence the government gathers from a cybersecurity point of
view. In countries where it is well-established, they have a very
clear and non-ambiguous mandate," added Kamau. "That is not the case
in Kenya, the CIRT is yet to be felt as a recognized point of
convergence."
Kenya is considered more technologically developed in the Eastern
Africa region, with more affordable bandwidth compared to other
countries, but failure to comprehensively address cybersecurity has
exposed gaps in its policies. Kenya has no cybersecurity law, with
cybercrime dealt with under the Kenya Communications Act of 2007......'
Author: Rebecca Wanjiku
Source: CSO
Date Published: 27th January 2012
exploited, officials said this week.
Security experts in Kenya alerted the Computer Incident Response
Team (CIRT) to the attacks after the hacker, known as "Direxer,"
compromised the sites on Jan. 17.
When CIRT was alerted that the government websites were compromised,
Wangusi said that CCK alerted the directorate of e-government, the
entity responsible for government e-infrastructure and services.
"The intended role of any CIRT is to complement whatever
intelligence the government gathers from a cybersecurity point of
view. In countries where it is well-established, they have a very
clear and non-ambiguous mandate," added Kamau. "That is not the case
in Kenya, the CIRT is yet to be felt as a recognized point of
convergence."
Kenya is considered more technologically developed in the Eastern
Africa region, with more affordable bandwidth compared to other
countries, but failure to comprehensively address cybersecurity has
exposed gaps in its policies. Kenya has no cybersecurity law, with
cybercrime dealt with under the Kenya Communications Act of 2007......'
Author: Rebecca Wanjiku
Source: CSO
Date Published: 27th January 2012