Russia Will Create Its Own Internet

Freedom on the Internet has diminished over the years in Russia: people go to jail for posts on social media, there's a ban on VPN services and expanded data storage is hard to come by. Recent moves by the Russian government indicate that further developments are yet to come.

According to a report by the domestic RBK web portal, Russian President Vladimir Putin in 2017 ordered his government to negotiate independent root name servers for the so-called domain name system (DNS). 

This would include the BRICS states, which apart from Russia include Brazil, India, China and South Africa, by August 2018. These servers contain global databases of public IP addresses and their host names. If Russia had its own root servers, it could create a kind of Internet of its own, experts say.

The reason given is the "dominance of the US and a few EU states concerning Internet regulation" which Russia sees as a "serious danger" to its safety, RBK quotes from minutes taken at a meeting of the Russian Security Council. Having its own root servers would make Russia independent of monitors like the International Corporation for Assigned Names and Numbers (ICANN) and protect the country in the event of "outages or deliberate interference." Putin sees Internet as CIA tool

From Moscow's point of view, it would seem the threat of a confrontation with the West in Cyberspace has increased since Russia annexed Crimea. Russia took a closer look at its Internet, and found flaws.

The country and the economy are too big to live with that threat, Putin advisor Igor Shchegolev said in an interview with RBK. He pointed out North Korea and Syria experienced Internet outages for a few days. The US was believed to be behind the December 2015 outage in North Korea; Washington remained silent, however. Moscow doesn't plan to seal itself off completely, Shchegolev said, only to keep the internet working in the country should there be an "external influence." 

President Putin once commented that the Internet was developed as a CIA project and continues to move in that direction. Internet technology was in fact developed by order of the US Department of Defense and by that department's employees.

Preparing for Cyber Warfare

The Russian government can't abide the system because it's set up in a way that governments only have an advisory role with ICANN, said former ICANN board member Wolfgang Kleinwächter. "Unlike the UN Security Council, no one has a permanent seat with veto rights." Moscow, he added, is preparing for a kind of Cyber War. Moscow blogger Alexander Pluschtschev has another explanation: "For somebody, building an 'Internet for BRICS' is a very lucrative state job," he said, adding that it has little practical use.

An Eye on the Root

Russia's plans go right to the root of the Internet. The world's entire communication between computers uses all of 13 DNS root servers. The computers store the so-called zone files of top level domains (TLD) like .com (worldwide), .de for Germany or .ru for Russia. Ten root servers are located in the US, one each in The Netherlands, Sweden and Japan. In addition, there are hundreds of any cast-server networks worldwide, ten of them in Russia alone.

All root servers are independent. Until September 2016, the US government had oversight over the A root server, which stores the DNS master copy. Now an ICANN subsidiary is responsible for that server. ICANN's contract with the US Department of Commerce ended in 2016, and today, the corporation is a private non-profit company based in California headed by a 20-member board that includes experts from all over the world.

Politically Counter-Productive

A Russian root server doesn't make much sense, said cyber-security expert and ICAAN BoardMemeber  Wolfgang Kleinwächter. They always claim the US government can shut off a country from the Internet, he said. "That's utter nonsense."

"Even if the US president has control of the A root server, and he doesn't, deleting the zone files ending on .ru would make no sense at all because this zone file still exists on all the other root and any-cast servers," Kleinwächter argued, adding that sending emails might be a few milliseconds slower. "How would the Americans enforce deleting country zone files for political reasons from the any-cast servers in Moscow?" he said. "Such an order from the White House would not be politically counterproductive, it wouldn't work and it would be a joke for the global Internet community."

"There’s no off-switch," said ICANN Chief Technology Officer David Conrad. In theory, he explained, the US government could force ICANN, a US-based firm, to influence the top level domain concerning Russia, for instance to take the .ru from the root server, adding that connections would become more difficult but overall, it would have a limited effect.

The DNS, Conrad said, is based on trust. "If the US government were to do anything as crazy" as meddling with the root server, he explained, that trust would be gone, and alternative root servers would crop up. The damage to the Internet as a global market place and means of communication would surpass the benefit, he concluded.

Technically, Russia is in the position to set up its own root servers, but it would be difficult to get people to use them, said Kleinwächter. "China, for one, is not likely to follow suit."

Ein News

You Might Also Read: 

Russia Will Build A Separate Internet Directory:

China's Great Wall Into Russian Cybersecurity:

GCHQ To Create A UK National Firewall:

 

« Cyber Insurance: Good News & Bad News
Get Serious About Hardware Cybersecurity »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

Watch this webinar to hear security experts from Amazon Web Services (AWS) and SANS break down the myths and realities of what an NGFW is, how to use one, and what it can do for your security posture.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

Security Audit Systems

Security Audit Systems

Security Audit Systems is a website security specialist providing website security audits and managed web security services.

Clearswift

Clearswift

Clearswift is trusted by businesses, governments and defense organizations globally for its Adaptive Cyber Security and Data Loss Prevention solutions.

Wüpper Management Consulting (WMC)

Wüpper Management Consulting (WMC)

Specialized in compliance, risk management and holistic information security WMC GmbH has longtime implementation experience in global projects.

Sopher Networks

Sopher Networks

Sopher is a secure communication and collaboration platform for business and personal use.

Heidrick & Struggles International

Heidrick & Struggles International

Heidrick & Struggles is a premier provider of leadership consulting and senior-level executive search services for roles including Information & Technology Officers and Cybersecurity.

Cylera

Cylera

Cylera is a Healthcare IoT cybersecurity and intelligence company built in close partnership with healthcare providers.

US Fleet Cyber Command (FLTCYBER)

US Fleet Cyber Command (FLTCYBER)

US Fleet Cyber Command is responsible for Navy information network operations, offensive and defensive cyberspace operations, space operations and signals intelligence.

ShieldApps

ShieldApps

ShieldApps comprehensive suite of products is designed to protect your personal devices from privacy threats, including hacking attempts, online tracking, fingerprinting, phishing, malware, and more.

BreachQuest

BreachQuest

BreachQuest brings together cybersecurity experts with decades of experience identifying security flaws, penetrating networks, and responding to incidents.

BT Security

BT Security

BT provides telecommunications and network infrastructure services to keep businesses around the world connected and secure.

NASK SA

NASK SA

NASK SA is an integrator of telecommunications services. We provide advanced ICT security services, collocation and hosting, data centre services, and build corporate networks.

Blacksands

Blacksands

Blacksands is a leader in network architecture, identity & services management, threat analysis, industrial IoT architecture, and invisible dynamic networks.

FCI

FCI

FCI is a NIST-Based Managed Security Service Provider (MSSP) offering Cybersecurity Compliance Enablement Technologies & Services to Financial Services organizations.

Myota

Myota

Myota intelligently equips each file to be resilient and achieve Zero Trust-grade protection. Withstand ransomware and data breach attacks. Reduce data restoration time and effort.

Exium

Exium

At Exium we’ve integrated networking and security in a cloud-delivered Zero Trust platform powered by 5G and open source.

Secure Enterprise Engineering (SEE)

Secure Enterprise Engineering (SEE)

SEE provides disruptive cybersecurity system engineering, architecture, and operational capabilities to make our customer’s missions execute faster, smarter, and more securely.