Download - Vncert
-
Thng tin v thng
Trung tm VNCERT
TON, AN NINH
Security World - H , 03/2012
Trnh by: TS. Khnh
-
dung
I. MI CNTT - CNTT-TT
- Chnh
-
- Pht v thch
II. MI PHP L -
- pht
III. TNH HNH AN TON THNG TIN - l ATTT
- l ATTT
- gi nguy ATTT
- php
2
-
-TT (2/2012)
,
thu bao
(x )
/ so
cng
Thu bao 15,3 -1,4 %
119 +4,3 %
32,6 +18,4 %
4,3 +18,2 %
: k 3
-
PHT CHNH (12/2010)
100% 100%
21/22 62/63
88,50% 63,19%
88,37% 85,53%
4.841 88.387
-4 28 751
95% 75%
90% 93%
87% (20%)
4
-
5
PHT (12/2010)
100%
98%
Internet 89%
trong SX-KD
+ Doanh
+ Doanh v
96%
80%
53%
52%
21%
15%
C website ring 38%
14%
gia TP (H ...)
+ Dng internet cho
+ C thanh ton
49%
18%
4%
-
6
PHT V THCH
bo ( n VN thnh CNTT-TT)
+ 2015: 50% dn , 20%-30% Internet
, 85% sng di , cng 2,3
+ 2020: 70% dn , 50%-60% GD Internet
, 95% sng di , cng 4.
Thch :
+ Ti chnh-Ngn hng, , , trn
+ my+3 x = CNTT
+ khng an ton, , l
+ hacker > < ATTT
+ ,
ATTT ngy cng quan
-
Giai 2005-2011
+ lin quan: 5
+ : 7
+ Thng : 9
+ hnh, : 9
+ Tiu Nam: 2
7
-
chung
+ Cc quy kh phong ph trung xc
tin ra cc quy
Ch cc ti l
+ :
c tnh cao,
g b, khi qun
Cc QPPL pht
+ thi v tun :
quan tm
cc , ti
cc tiu , quy
8
-
PHT MI PHP L
trong xy
+ : 2
+ : 4 v cc thng
+ Tiu Nam thch : 31
Nhm tiu l an ton thng tin: 6
Nhm tiu gi ATTT: 8
Nhm tiu AT v : 9
Nhm tiu ATTT: 3
Nhm tiu m v : 5
9
-
II. TNH HNH AN TON TT
- khai Quy pht ATTT 2010
- khai 897/CT-TTg ngy 10/6/2011
CP khai cc
an ton thng tin
- Theo bo co cc CQNN thng 11/2011,
cc , ngnh v xy
v ph an ton thng tin .
- Trn 30% cc chuyn trch CNTT cc
, ngnh v ban hnh quy
an ton thng tin .
10
-
10
61.2
69.8
24.4
36
12
59
33
69
27
35
0 10 20 30 40 50 60 70 80
p hnh mua phng do
cng
c ATTT
c xy HT l ATTT theo TCVN-ISO/IEC 27001:2009
c cn chuyn trch bn chuyn trch ATTT
c ban hnh quy trnh thao tc l
my tnh
c ban hnh quy ATTT lnh ph v p 2011
2010
69% c cn chuyn trch ATTT v 59% c
an ton, an ninh thng tin.
L ATTT
11 : st VNISA+VNCERT
-
-
TT Nhm doanh
st
quan tm ( 1-10)
cng tc ATTT
1 Cng 15 5/10
2 Ngn hng Ti chnh 10 10/10
3 khon 08 10/10
4 Hng khng 03 10/10
5 thng 04 8/10
6 TMDT v CNTT 15 7/10
12
-
P PHP ATTT (%)
16.4
14.1
16.6
42
18
24.5
0 20 40 60
Nhm php l log-file,php l v ATTT
Nhm cng d qutl v ATTT
Nhm php sot truyp cng sinh
Nhm php
Nhm phpv m
trung bnh p ccphp cng ATT
13
-
rc (Spam) VN thng 6/2011
k
VNCERT +
VINASIS trong
2010:
rc
tnh
sau ba
.
-
thng tin VN
cc
cc ngnh trung
ccdoanh nh
Theo gi VNCERT 2010
-
CNG (%)
17
9
6
35
46
18
8
10
10
27
0 20 40 60
: st VNISA+VNCERT 2010 16
-
Tnh hnh l VNCERT
2009 2010 2012
Phishing 136 66.0% 233 86.0% 385 50.9%
Malware 10 4.9% 8 3.0% 13 1.7%
DoS/DDoS 6 2.9% 1 0.4% 3 0.4%
SMS Spams 19 9.2% 10 3.7% 14 1.8%
Deface 35 17.0% 19 7.0%
340 44.9%
Khc 2 0.3%
(= so
) 206 =261% 271 =132% 757 =279%
17
-
Xu thay cc CERT QG l
Phishing Malware Deface Spam Botnet
Indonexia
Malaysia
Philippin
Singapore
Thi Lan
-
GI NGUY ATTT
- cng ti chnh, ngn hng
- chnh , thng tin QG
- Nguy cng nay
- Nguy
- Nguy cng
- Nguy an ton thng tin trong thng
- Nguy tranh v
- Nguy , khng sot ATTT
19
-
GI NGUY ATTT
20
c
ng
do
th
m
B
,
Xm
,
ph
, D
Do
S
uy tn
-
GI NGUY ATTT
21
1
Khai thc
2
dung
m
3
cng x
-
pht m Q1-2011
Theo k Microsoft 22
-
pht m Q2-2011
Theo k Microsoft 23
-
My pht tn m Q2 - 2011
Theo k Microsoft 24
-
k cc Q3-2010 Q2-2011
Theo k Microsoft 25
Sophos: During the first half of 2011, we saw a new malicious URL every 4 .5 seconds
-
k social engineering
Theo k Microsoft 26
-
27
- Botnet ri v tm cch pht
tn.
- Cc m c theo di, thng tin
cng vo quan, ,
doanh .
- Cc virus ly file l nguy , ly lan trn hng
my Nam, l dng virus ly file
Sality.
- cc m trn cc hnh di
Android, v c xu .
Tnh hnh ly lan m nay
-
28
- Ly lan qua cc USB
- Pht tn qua cc trnh chat Yahoo v
ch Facebook.
- Ly lan thng qua trnh Web.
- Pht tn qua Email cch cc file km
, hay cc link .
- Ly lan qua cc tin thi, v nhng m
vo cc crack.
- ly lan, v cc trnh
virus.
- Khai thc trong , hnh ly
lan, l cc Microsoft
Word.
-
29
HNH
co m
- trn my tnh
- hnh xuyn
- trnh m c
lin v .
- cc c r rng,
l trang cc .
- Khi file km trn
xem xt khi ra l cc file
. Khng cc file nghi .
-
3
0
CNTT&TT
an ton cho
CNTT
Pht nhn
v nng cao
Hon mi
php l
Nng cao , thng tin,
tuyn ATTT
Hon cc v chnh
sch nh ATTT
Pht ATTT: Huy
, nhn
Xy cc v
cc ATTT
tc trong v ngoi