Summary

  • One APNIC 62 attendee said many subsidiary companies could not afford commercial security solutions and valued the workshop's open-source tools.
  • APNIC's security support also includes Academy training, free technical assistance for Members, and DASH monitoring for Members.

A security tool can lose its first contest before it sees a packet: the budget meeting. In APNIC's account of the Network Security Workshop at APNIC 62, one participant said many subsidiary companies in their organization could not afford commercial security solutions. The tools covered in the workshop were valuable because they offered a way to build security capability within those limits.

That is a practical argument for open-source security. It moves the first question from “Which product can we buy?” to “Which skills and tools can we put to work?” A license invoice can stop the conversation at the door. A lab gives an engineer something more useful than a brochure: a chance to inspect traffic, test a control and learn what an alert asks the operator to do next.

APNIC's October report lists a broad syllabus: cryptography, infrastructure protection, DDoS mitigation, packet analysis, intrusion detection, BGP operational security, DNS, RPKI and IPsec. The Network Security Workshop was led by Sheryl Hermoso and local certified trainer Sourav Satpathy. APNIC's pre-event course outline named Suricata for intrusion detection; the post-event report refers to open-source tools but does not name them. That missing list is small enough to fix and useful enough to publish.

The distinction matters because open source changes one line of the security budget, not the entire ledger. A tool may be free to use and still demand engineers who can deploy it, tune it, read its output, maintain it and respond when it finds trouble. The product is only one part of the bill. The harder recurring cost is skilled attention—the very thing a good workshop can help create.

APNIC's public support map extends beyond the classroom. APNIC Academy offers courses and workshops, online learning and virtual labs. APNIC also offers one-to-one technical assistance to Members, free of charge, on subjects that include infrastructure security, routing security, RPKI and DNSSEC. Its DASH service gives Members views of routing status, suspicious traffic, potential vulnerabilities, bogons and MANRS readiness.

Those are three different levers: learn a method, ask an expert, and watch a network. They do not have the same access rule. APNIC explicitly makes technical assistance and DASH Member services. An operator deciding how to build a security plan needs to know whether its organization can use each one; being in the Asia Pacific region is not the same thing as holding an APNIC membership.

The post-event report says the two APNIC Academy workshops drew 55 participants in total. It quotes one attendee on the affordability of open-source tools and another on plans to encourage government operators and hold national workshops. Those are useful signals about why the training matters and where participants hope to take it. The 55 is a count across two workshops, not a security-only tally. APNIC does not publish a named-tool list or a deployment count in this recap.

For operators, the immediate move is to treat the course as a route into a working support stack, not as a substitute for one. Check which tools the lab actually used, identify the staff who will keep them running, and verify whether APNIC Member assistance or DASH is available to the relevant organization. Open-source software lowers the license wall. People still have to walk through the door.

APNIC can make that route easier to evaluate by publishing the tool list, the lab materials and the right contact path for follow-up. A regional security program becomes more useful when an engineer can leave the classroom knowing what to install, where to get help and which service can watch the network afterwards. Procurement may still say no. At least the answer will have somewhere to go.

Sources: APNIC’s APNIC 62 workshop report, official Academy training page, July workshop outline, Security at APNIC, About APNIC Academy, and the Open Information Security Foundation’s Suricata open-source page.