ABS received assurances about attacks

The Australian Bureau of Statistics says it was IBM's responsibility to mitigate the risk of DDoS attacks, which brought down the Census online system.

An error message is seen on the ABS Census website

An error message is seen on the Australian Bureau of Statistics (ABS) Census of Population and Housing website. Source: AAP

The Australian Bureau of Statistics insists it received "various assurances" from the computer company running the online Census about the system's resilience to denial of service attacks.

But despite the risk management plan listing DDoS attacks as a potential disruption, the online system crashed on Census night after a fourth attack - preventing millions of Australians filling out the form.

In a submission to a parliamentary inquiry into the 2016 Census, the ABS maintains it was part of IBM's contract to mitigate that risk.

"During 2016, the ABS had sought and received various assurances from IBM about operational preparedness and resilience to DDoS attacks," the submission says.
It says investigations subsequently identified IBM had failed to properly implement geoblocking under a protection dubbed 'Island Australia'.

The ABS said it did not independently test the protections because it considered "it had received reasonable assurances from IBM".

"At no time was the ABS offered or advised of additional DDoS protections that could be put into place," it said.

The risk management plan was updated over an 18 month period including nine risk workshops with both ABS and IBM staff, the submission said.

The ABS details the four overseas DDoS attacks, with the final one interrupting the website about 7.30pm on August 9.

About 2.2 million households had completed the form before it went down.

The ABS kept the system offline for about 40 hours to ensure Census data was protected from overseas attackers.

The government-funded body's submission also addressed the change of protocol to retain names and addresses for four years, instead of 18 months.

The change prompted several Australians, including some federal politicians, to threaten a boycott of the Census amid privacy concerns.

However, despite the online disruption and those privacy concerns, the ABS says as of Tuesday 94.4 per cent of households had filled out the form.

That's compared to 96.5 per cent in 2011 and 95.8 per cent in 2006.

Australians have until Sunday to fill out the form.

Frustrated Australians also complained about not being able to get through to call centres to order paper forms or enquire about Census data.

Concerns about fines - which the ABS says was prompted by the media - were part of the reason call centres could not manage the volume.

One month after Census night there had been 3.2 million call attempts, almost triple the 1.3 million forecast.

Almost 2 million of those calls went unanswered.


Share

3 min read

Published

Updated

Source: AAP


Share this with family and friends


Get SBS News daily and direct to your Inbox

Sign up now for the latest news from Australia and around the world direct to your inbox.

By subscribing, you agree to SBS’s terms of service and privacy policy including receiving email updates from SBS.

Download our apps
SBS News
SBS Audio
SBS On Demand

Listen to our podcasts
An overview of the day's top stories from SBS News
Interviews and feature reports from SBS News
Your daily ten minute finance and business news wrap with SBS Finance Editor Ricardo Gonçalves.
A daily five minute news wrap for English learners and people with disability
Get the latest with our News podcasts on your favourite podcast apps.

Watch on SBS
SBS World News

SBS World News

Take a global view with Australia's most comprehensive world news service
Watch the latest news videos from Australia and across the world