… NIMRA Seeks Alternative Private Sector Data Source
BY CHIDIEBERE NWANKWO
Following the recent cyber-attack on the National Bureau of Statistics (NBS) website, experts have stated that one key option to safeguarding against further attacks on the Bureau’s network is for it to immediately migrate to the Internet Protocol version 6 (IPv6). Internet Protocol version 6 (IPv6), which succeeded IPv4, is the latest version of the Internet Protocol (IP) and is designed to support the growth of connected devices.
The attack, which occurred on December 18, 2024, disrupted public access to critical national data and sparked concerns about the safety of sensitive information. The Bureau is yet to come back online.
The National Bureau of Statistics (NBS) is a Nigerian government agency that collects, analyses, and publishes statistical information about the country. The NBS provides information on a variety of topics, including social, economic, demographic, and environmental activities.
The NBS was created by merging the Federal Office of Statistics (FOS) and the National Data Bank (NDB) as part of the Statistical Master Plan (SMP).
In a social commentary on the hack, the Chairman of Mobile Software Solutions Limited and former President of both the IT Association of Nigeria (ITAN), and the Institute of Software Practitioners of Nigeria (ISPON), Dr. Chris Uwaje, who wondered why a legacy Network infrastructure should be built on Internet Protocol version four (IPv4) noted: “(It is) time to migrate the National Information Technology Network Ecosystem to IPv6-Only digital presence. And build massive IPv6-Only capacity skills. Time is running out.”
In his response, two-time President of Nigeria Computer Society (NCS), founding member of the Nigeria Internet Registration Association (NiRA) and CEO at Condata Systems Limited, Dr. Chris Nwannenna noted that IPv4 was designed without built-in security features making it vulnerable to network attacks.
While observing that no IT network infrastructure is today immune to attacks by paid dedicated hackers, Nwannenna noted: “In the case of the NBS, it is believed that the reason for the attacks is to destroy information that is not favorable to some people and so the attackers would most likely have hit the system whether it’s IPv4 or IPv6. On the other hand newer IPv6 includes Internet Protocol Security which provides encryption and authentication.”
The most significant difference between IPv4 and IPv6 security is the address space. IPv4 uses 32-bit addresses, allowing for approximately 4.3 billion unique addresses. In contrast, IPv6 uses 128-bit addresses, which can support approximately 340 undecillion unique addresses. This vast address space of IPv6 makes it virtually impossible to scan the entire address range, which can make it more challenging for hackers to target specific devices.
Also, the IPv6 has been designed with security in mind, and it includes several features that improve network security. One of the most significant security features of IPv6 is IPsec, which provides end-to-end encryption, integrity, and authentication of IP packets. Additionally, IPv6 supports secure neighbor discovery, which prevents neighbor spoofing attacks.
Following the NBS website hack, the Nigerian Marketing Research Association (NMRA) has said it will provide a private sector alternative to economic data.
NIMRA President, Seyi Adeoye, said the inability of Nigerians to access the NBS network shows the need for private sector participation in providing economic data alongside the NBS to aid business and government decision-making.
Adeoye said: “(The NBS) website hack just shows that it is important for private practitioners within the data analytics space to do a lot more and also collaborate more closely with NBS and with all the global organisations also interested in having data about Nigeria and the economy, like the World Bank.”
Meanwhile the NBS in a public notice announced January 15, 2024 as date for service resumption, while urging the public to disregard any updates from its platforms, emphasising the need to ensure data integrity before restoration.
