ICT Policy Africa

Kenya Cyber Security Report
2015
<ZfefdpGfc`k`Zj
<

Jk
JkXk\kfifccflkZ_\Xg\i
f]
f]]$g\Xbgfn\i
GX^\GX^

:flekp9lj`e\jj

C`]\

GX^\()

GX^\).

G`cfkYi\Xk_\jc`]\`ekf
jc\\gpEXeplb`X`ijki`g

EF%(0/'

DFE;8P#;<:<D9<I(#)'(+

:Xi\]lcjk\gj]fi
df[\iXk`e^XgXe\c

NNN%9;8=I@:8%:FDBJ?-'sKQJ?(#.''sL>J?)#.''sI=i0''

A[doW<WY[Xeeaki[hibei[
c_bb_edi_d^WYa_d]iYWc

CfZXc`ek\ie\k
j\Zli`kpÓid
jXpjdfi\k_Xe
,#'''XZZflekj
fek_\jfZ`Xc
d\[`XgcXk]fid
n\i\Yi\XZ_\[
+

9PDL>8D9@DLK<>@

Fhk^maZg.%)))D^grZg?Z\^[hhdnl^kl
aZo^ehlmfbeebhglh_labeebg`lbgZaZ\dbg`
l\ZfmaZmeZlm^]_hkZr^Zk%Zeh\Ze\r[^k
l^\nkbmrÖkfaZlk^o^Ze^]'
Ma^ Ökf% L^kbZgn% lZrl bm aZl ng&
fZld^] Z D^grZg aZ\d^k pah [khd^
bgmhi^klhgZeZ\\hngmlh_?Z\^[hhdnl&
^klbgGZbkh[b%Fhf[ZlZZg]>e]hk^mZg]
nl^]ma^Z\\^llmhlheb\bm_ng]l_khfmahn&
lZg]lh_i^hie^ebgd^]mhma^[k^Z\a^]
Z\\hngml'
ÊMa^aZ\d^k\k^Zm^]Zp^[lbm^maZm

ehhd^]Z^lma^mb\ZeerlbfbeZkmh?Z\^[hhd
Zg]ihlm^]bmhgkZg]hfnl^klÍiZ`^l%
bgobmbg`ma^fmhob^pma^bk_kb^g]lÍeZm&
^lmiahmhl%ËlZb]PbeebZfFZdZmbZgb%ma^
fZgZ`bg`]bk^\mhk'
ÊNl^klpah\eb\d^]hgma^ebgdp^k^
Zld^]mhikhob]^ma^bkeh`&bg]^mZbelZ_k^la
bghk]^kmhikh\^^]'Hg\^ma^r]b]mabl%
ma^bknl^kgZf^lZg]iZllphk]lp^k^\he&
e^\m^]bgmhZ]ZmZ[Zl^maZm\nkk^gmeraZl
.%))/^gmkb^l'Ë
Ma^\r[^k\kbfbgZelma^gnl^]ma^
\Zimnk^]eh`&bg\k^]^gmbZelmhmZd^ho^k
Znl^kÍllh\bZef^]bZiZ`^Zg]p^gmhg

mhlheb\bmfhg^r_khfma^Z\\hngmhpg&
^kÍl_kb^g]lpabe^fZljn^kZ]bg`Zlma^
k^Zenl^k'
Hpg^klh_ma^\hfikhfbl^]?Z\^&
[hhdZ\\hngmlp^k^Zelh\hgmZ\m^]Zg]
bg_hkf^]maZmma^bkZ\\hngmlphne][^]^&
e^m^]b_ma^r]^\ebg^]mhiZrfhg^r&&kZg`&
bg`[^mp^^gLa.%)))Zg]La*))%)))&&
bgmh]b¥^k^gmfh[be^fhg^rZ\\hngml'
Mhgn]`^ob\mbflbgmhiZrbg`ni%ma^
_kZn]lm^klihlm^]fZeb\bhnlZg]ZeZkfbg`
f^llZ`^lhg[k^Z\a^]?Z\^[hhdiZ`^l'
L^kbZgn^lmbfZm^lmaZmob\mbflh_ma^Zm&
mZ\dlfZraZo^ehlmni?8:B@E>#GX^\+¾

9I@<=@E>
JX]Xi`Zfdi\m\Xcj`ek\i\jk
`eZXj_c\jj]Xi\ZfdgXep
JX]Xi`Zfd_Xji\m\Xc\[k_Xk`k_XjX
Zfdd\iZ`Xc`ek\i\jk`ek_\ZXj_c\jj
]Xi\gXpd\ekZXi[[lYY\[Dp(0-*#
n_`Z_glkjk_\k\cZfXdfe^k_\Y`^^\jk
Y\e\ÓZ`Xi`\jf]k_\e\njpjk\d%
GX^\/¾

E<NJ@E;<GK?

B\epXj_`]kj]fZljkf
_`^_$i`jb^iflgj`e
Ó^_kX^X`ejk?@M&8`[j
GX^\j(-$(.¾

;NLBG>LL=:BERuFhg]Zr=^\^f[^k*%+)*-

FIZ[d_[ihkb[im[h[
X[dj\eh9[djkc
A[doW<WY[Xeea
_dYeWbfbWdjj[dZ[h

ABLMHKB<MKBI

KFGE<NJ

ki[hibei[c_bb_edi
_d^WYa_d]iYWc
9P9I@8EN8JLE8

Ma^Fbgblmkrh_>g^k`raZl]^gb^]
maZmbm[^gmm^g]^kbg`kne^lbg_Zohnk
h_hg^[b]]^kbgma^fnemb&[beebhglabe&
ebg`\hZeihp^kieZgm\hgmkZ\m'
>g^k`rikbg\biZel^\k^mZkr!IL"
Chl^iaGchkh`^lZrlbgZk^ierbg`Z_&
¾=ifdGX^\(
mhLa.)fbeebhgbgma^ ^lbgD^grZ'Ma^D^grZIheb\^Zg]ma^
Ö]Zobmmhhg^h_ma^ehlbg`[b]]^klÍ
l\Zf'Ma^aZ\d^klnl^] <^gmkZe;Zgdh_D^grZmhima^eblmh_*),
i^mbmbhgmaZmma^m^g]^k\hffbmm^^]^&
_Zd^p^[lbm^lmhk^mkb^o^nl^kgZf^lZg]
\kn\bZe`ho^kgf^gmp^[lbm^lmaZmaZo^
\b]^]mhk^&^oZenZm^ma^l^o^g[b]]^kl
iZllphk]lh_?Z\^[hhdnl^kl%ZikZ\&
_Zee^gik^rmhma^aZ\d^kl'
pahaZ][^^gdgh\d^]hnmh_ma^kZ\^%
mb\^k^_^kk^]mhbgm^\agheh`rcZk`hg
Ma^;Zgdbg`?kZn]Bgo^lmb`Zmbhgl
bg\en]bg`<^gmnf%Z_m^kbm_hng]maZm
ÆJ^[C_d_ij[h_Wb
Zliablabg`'
=^iZkmf^gm
eZlm r^Zk k^ihkm^] maZm
lhf^]h\nf^gmlp^k^ghmZoZbeZ[e^Zm
Ma^;nlbg^ll=Zber\Zgghmk^o^Zema^ aZ\dbg`h_\nlmhf^k[ZgdZ\\hngml&
J[dZ[h9ecc_jj[[Wj_ji
ma^\ehl^h_ma^[b]]bg`i^kbh]'
aZ\d^kÍlb]^gmbmrhkma^p^[lbm^nl^]bg
&fZbger[r[Zgd^fiehr^^l&&[^mp^^g
c[[j_d]ed:[Y[cX[h
ÊMa^ Fbgblm^kbZe M^g]^k <hf&
ma^l\Zf[^\Znl^ma^fZmm^kaZllbg\^
:ikbe+)*+Zg]+)*,e^]mhehll^lh_
fbmm^^Zmbmlf^^mbg`hg=^\^f[^k.%
+"(&')Wffhel[Zj^[
[^^gk^ihkm^]mhma^<r[^k<kbf^Ngbm
La*'-2[beebhg'
+)*,Ziikho^]ma^k^&^oZenZmbhgh_
h_ma^=bk^\mhkZm^h_<kbfbgZeBgo^lmb`Z&
GZbkh[bL^gZmhkFbd^LhgdhÍlMpbmm^k
h[#[lWbkWj_ede\i[l[d
l^o^gngln\\^ll_ne[b]]^kl'Ma^k^&
mbhgl!=<B"%pahZk^bgo^lmb`Zmbg`'
Z\\hngmpZlk^ihkm^]er\hfikhfbl^]

kdikYY[ii\kbX_ZZ[hi$Ç
^oZenZmbhg
\hffbmm^^
k^\h`gbl^]
Ma^p^[lbm^%pab\aaZllbg\^[^^g mablp^^d%^q^fieb_rbg`ma^n[bjnbmhnl
ma^ngZoZbeZ[bebmrh_]h\nf^gml[r
AFJ<G?EAFIF><#
mZd^g]hpg%pZlk^`blm^k^][rZD^grZg%
gZmnk^h_ma^\kbf^bgma^\hngmkr'
<E<I>PGI@E:@G8CJ<:I<K8IP
\hglb]^kbg`[hmama^aZk]Zg]lh_m
ahlm^]eh\ZeerZg]pbmaZLZ_Z&
Ma^ ?Z\^[hhd aZ\d&
\hib^lmaZmaZ][^^gln[fbmm^]%ËFk
kb\hffh[be^iahg^gnf[^k
^kÍlhi^kZmbhgaZllbg\^
Gchkh`^lZrl'
Zlma^\hgmZ\mebg^'
[^^g lanm ]hpg pbma
M[Wh[mW_j_d]
Ma^ILpZlk^lihg]bg`mh\eZbfl
Ökf<^gmnfmh[Z`ma^La*0-[be&
Bgm^kg^ml^\nkbmr[k^Z\a
ma^a^eih_IablaMZgd%Z
[rZ<abg^l^ÖkfmaZmehlmma^\hZe
ebhgch['
\ehj^[l_Yj_cije
aZl[^\hf^Zl^kbhnlikh[&
NL&[Zl^] Zgmb&iablabg`
ihp^kieZgmch[%A<B@%maZmma^Fbg&
A<B@aZ]\eZbf^]bgZi^mbmbhgbm
e^f
lbg\^ D^grZ bglmZee^] Yec[\ehmWhZWdZ
lbm^ nl^] [r e^Z]bg` BM
blm^kbZeM^g]^k<hffbmm^^k^eZq^]ma^
Öe^]bgma^Ab`a<hnkmmaZmma^>g&
[khZ][Zg]
Bgm^kg^m pbma
Ökflebd^@hh`e^%RZahh
cWa[W\ehcWb
K<E;<I#GX^\+¾
[b]]bg`kne^lmh^gZ[e^bgo^lmf^gm
^k`rfbgblmkr%
ma^eZg]bg`h_ng]^kl^ZÖ&
Zg]FhsbeeZmho^kb_rma^

YecfbW_dj
[k^himb\\Z[e^lbgFhf[ZlZ
lZ_^mrh_p^[lbm^l'
:=<Bh¨\^kZmma^<r&
Öo^r^ZklZ`h'
;:@F==@:<I
[^k<kbf^Ngbmbg\aZk`^
<kbfbgZel aZo^ nl^]
h_ ma^ ?Z\^[hhd l\Zf
ab`a&li^^] Bgm^kg^m mh be&
e^`Zeerh[mZbgZg]laZk^\kn\bZenl^k bgo^lmb`Zmbhg\hgÖkf^]maZmL^kbZgn
bg_hkfZmbhgmaZmaZl\hlmfbeebhglh_ aZ]Öe^]Zk^ihkm]^mZbebg`ma^aZ\d&
\hfiZgb^lZg]bg]bob]nZel[beebhglh_ bg`bg\b]^gm'
ÊL^kbZgnZiikhZ\a^]nlk^\^gmerZg]
labeebg`lZggnZeer'
ND [khZ]\Zlm^k% ;;<% eZlm p^^d ikhob]^]bg_hkfZmbhgZ[hnmma^Zee^`^]
k^ihkm^]maZmZ]fbgblmkZmhklh_ZKnl& \kbf^%bg\en]bg`]^mZbelh_hg^h_ma^
lbZg&[Zl^]lbm^bgÖemkZm^]mahnlZg]lh_ bg]bob]nZelpahpZlZ¥^\m^]%ËlZb]ma^
bgl^\nk^[Z[rfhgbmhkl%p^[\ZflZg] h¨\^kpah]^\ebg^]mh[^jnhm^]Zla^
<<MO\Zf^kZlbgho^k+.)\hngmkb^l% blghmZnmahkbl^]mhli^Zdhghg`hbg`
bg\en]bg`D^grZ%ND%IZdblmZgZg]Sbf& bgo^lmb`Zmbhgl'ÊP^Zk^pZbmbg`_hkma^
[Z[p^%Zg]fhgbmhk^]ebo^_^^]l'
ob\mbflmh\hf^_hkpZk]Zg]fZd^Z
Bgma^iZlm*+fhgmal%ma^k^aZl[^^g _hkfZe\hfieZbgm%ËlZb]ma^h¨\^k'
Z[nbe]&nih_Bgm^kg^ml^\nkbmr[k^Z\a&
Ma^;nlbg^ll=ZberaZl^lmZ[ebla^]

Ma^D^grZ<r[^kL^\nkbmrk^ihkmk^&
e^Zl^]bgCng^[rM^e^\hffngb\Zmbhg
L^kob\^lIkhob]^klh_D^grZ!M^lihd"
lahp^]maZm\r[^k&ZmmZ\dlfhk^maZg
]hn[e^]bgma^iZlmr^Zkmh.'-fbeebhg'
Pabe^ik^obhnlerfZgrh_ma^ZmmZ\dl
\Zf^_khfZ[khZ]È^li^\bZeer<abgZÈ
ma^fZchkbmrh_ma^*'1fbeebhg\hfinm^kl
nl^]p^k^lmZmbhg^]eh\Zeer%bg]b\Zmbg`
maZmma^ZmmZ\dlp^k^_khfpbmabg'
Bglb]^kmak^Zm[r^fiehr^^lp^k^
^Zkeb^kmablr^ZkkZgd^]mhibgma^eblm
h_\r[^kl^\nkbmrkbldl_Z\^][rÖgZg\bZe
bglmbmnmbhgl%^li^\bZeermahl^maZmaZo^
^f[kZ\^]fh[be^Zg]hgebg^[Zgdbg`'
FkGchkh`^\bm^]Zghg`hbg`bgo^l&
mb`Zmbhgpa^k^Öo^^fiehr^^lh_Zeh\Ze
fb]&mb^k[ZgdZk^[^bg`bgo^lmb`Zm^]_hk
lm^Zebg`La+1)fbeebhg_khfma^bk^f&
iehr^k'Ma^\Zl^bl^qi^\m^]mhfho^mh
\hnkmmablfhgma'
Ma^Z\\nl^]Zee^`^]ermbgd^k^]pbma
ma^\hk^[Zgdbg`lrlm^fZnmahkblZmbhg
ikhmh\helZg]fho^]ma^fhg^rhnmmh
l^o^kZeZ\\hngmlmakhn`afh[be^fhg^r
Zg]Bgm^kg^m[Zgdbg`mkZglZ\mbhgl'
NL bg_hkfZmbhg m^\agheh`r `bZgm
B;Fbg:n`nlmlb`g^]Z]^Zepbmama^
`ho^kgf^gmmaZmpbeel^^bm]^o^ehi\r&
?\X[f]k_\:Xk_fc`Z:_liZ_Gfg\=iXeZ`jjg\Xbjn`k_<Zld\e`ZXcGXki`XiZ_9Xik_fcfd\n@X]k\ik_\p
[^kl^\nkbmrlreeZ[nl_hkg^pk^\knbml
@JK8E9LC j`^e\[Xaf`ekjkXk\d\ekXkJk>\fi^\:_liZ_#k_\gi`eZ`gXc>i\\bFik_f[foZXk_\[iXc#p\jk\i[Xp[li`e^
chbgbg`ma^iheb\^l^kob\^'
_`jk_i\\$[XpKlib\pkfli%Gfg\=iXeZ`jXcjf_\c[Xe\Zld\e`ZXcgiXp\i`ek_\Fik_f[fo:_liZ_f]Jk%>\fi^\Xe[Xgi`mXk\
<nkk^gmer%fhlm\r[^k\kbf^fZmm^kl
8=G
d\\k`e^n`k_GXki`XiZ_9Xik_fcfd\n@#c\X[\if]k_\nfic[Êj*''d`cc`feFik_f[foY\c`\m\ij%
Zk^aZg]e^][rlfZeeZm^Zfh_BM^q&
i^kmlÈma^D^grZ<hfinm^kBg\b]^gm
8_XZb\iXknfib%B\epXe=XZ\Yffblj\ij_Xm\cfjkd`cc`fejf]j_`cc`e^jkf_XZb\ij%=@C< K^lihgl^M^ZfÈ[Zl^]Zmma^<hffn&
gb\Zmbhgl:nmahkbmrh_D^grZ'
maZmhg^h_ma^ob\mbflblZgnkl^ZmZ h_bfikho^]Bgm^kg^mbg_kZlmkn\mnk^%[nm
Ma^m^ZfÍl\hk^]nmrblmhebZbl^pbma
hma^k `ho^kgf^gm Zg] bgm^kgZmbhgZe
eh\ZeahlibmZe'A^k?Z\^[hhdZ\\hngm% ZelhZjn^lm_hk_Zf^Zg]p^Zema'
pab\abllmbeeng]^kma^aZ\d^kÍl\hgmkhe%
;^lb]^l%D^grZ]h^lghmaZo^^ghn`a [h]b^lmhmZ\de^\r[^k&\kbf^'
pZl\hfikhfbl^]bgeZm^H\mh[^kZg] ikh_^llbhgZelpah\Zg^¥^\mbo^erl^\nk^
a^k_kb^g]laZo^lbg\^pbk^]La*0%))) i^klhgZe]ZmZhkk^[n¥\r[^k&ZmmZ\dl'
ifnm^`b9d^'gZmbhgf^]bZ'\hf
Ê>qi^kmaZ\d^klZkhng]ma^phke]Zk^
mhma^_kZn]lm^kÍl]b¥^k^gmF&I^lZZ\&
\hglb]^k^]a^kh^lZg]k^o^k^]bgfZgr
\hngml'
Lm^ia^gPZgcZeZ%ma^ob\mbfÍlanl& jnZkm^kl%ËlZb]@^hk`^Gchkh`^%<>Hh_
=FIDFI<FE
[Zg]%lZb]ma^raZ]\hgmZ\m^]ma^<B= >Zlm:_kb\Zg=ZmZAZg]e^kl'ÊLhf^eh\Ze
K?@JJKFIP
h¨\^kbg\aZk`^h_ma^bgo^lmb`Zmbhg aZ\d^klZk^Z_m^kZlbfbeZklmZmnlZg]b_
J:8EK?@J
Zg]p^k^ik^iZkbg`mhfZd^Zgh¨\bZe ma^r\ZgfZd^lhf^fhg^rpabe^Zmbm%
:F;<FICF>
lmZm^f^gm'<r[^kl^\nkbmr^qi^kmllZrma^ ma^[^mm^k'B`ghkZg\^hgma^iZkmh_nl&
FEKF
^qihg^gmbZebg\k^Zl^bgma^gnf[^kh_ ^kl%bg\en]bg`\hfiZgb^l%Zg]eZ\dh_
nnn%Ylj`e\jj[X`cpX]i`ZX%Zfd'(())'(+
eh\ZeaZ\d^klblghmhgerZ]bk^\mk^lnem ^qi^kmbl^phkl^gma^lbmnZmbhg'Ë

IL]^gb^lkne^lp^k^[^gm_hk<^gmnfbg\hZeieZgmm^g]^k
¾=ifdGX^\(

ma^ Z`^g\r maZm
ik^lb]^] ho^k ma^

ln[fbmm^][rA<B@]b]ghm\hgmZbgZ
aZk]\hirh_ma^ihp^k`^g^kZmbhgeb&

pahaZo^lm^ii^]]hpg'
Ê;rZe^mm^k]Zm^]?^[knZkr+.%ma^

_^k^]ma^ehp^lm\hlm_hkieZgm\hglmkn\&
mbhgZmLa-,[beebhgi^kr^Zk\hfiZk^]

ln[fbmm^]%ËFkGch`nZ]]l'Ma^Ab`a
<hnkmÍl]^\blbhgeZlmp^^dbl[^bg`l^^g

31