An toàn an ninh các hệ thống công nghệ thông tin - truyền thông: Phòng phủ kín các hệ thống

AN TOAN BAO MAT

An toan an ninh cac he thong CNTT-TT

Phong thu kin cac he thong

Nguyen Phu Vinh

Tinh hinh an ninh mang vdn tiep tuc bdt dn vd gia tdng kecd trong nuac

vd qudc te. Nhieu Id hdng nghiem trong duac phdt Men, hinh thirc tdn cdng

ciia Hacker thay ddi lien tuc vd cd rat nhieu thu doan mai. Theo thdng ke

qudc te ndm 2008, nhieu cudc tdn cdng cua chiing dd dat duac muc dich.

Vai cdc he thdng? Dd Id su mdt mdt dit lieu, mdt tdi sdn cua cdc Ngdn hdng

vd ngudi sii dung dich vu tren the giai. O Viet Nam thi sao ? Tinh hinh cung

khd phiic tap, nd lam cho cdc nhd qudn ly lo ngai, nhat Id cdc caquan an

ninh, bdo vephdp ludt, cdc nhd qudn tri cdc he thdng cdng nghe.

Nhung ngd ngach phai dvoc bao ve

Ndi den an ninh- an toin he thdng Cdng nghe

thdng tin & Truyin thdng (CNTT-TT), phii

dugc hieu mdt cich diy du vi trgn ven: (i).

Big ve he thdng phan cung CNTT: bao gdm

may tinh, cic thiit bj ngoai vi, mang miy tinh,

cic thiit bi kit ndi truyin thdng vi ha ting

cdng nghe cdn ggi li ha ting thiit bi mdi

trudng: he thdng lim mit, diiu hda, ngudn

dien va luu dien...(ii). Bio ve he thd'ng phin

mim, bao gdm: He diiu hinh, cic phin mim

nghiep vu vi cic he thdng nhung; (iii). Bio

ve thdng tin, Co sd dtt lieu, luu trtt, sao luu dtt

lieu, phdng chdng thim hga... va (iv). Bag ve

mdi trudng: he thd'ng ngudn dien, he thd'ng

trayin thdng, dien cung ci'p, dudng true

trayin din tin hieu, thdng tin, he thd'ng lam

mit v.v..

Hay khdng che tinh hinh

Chi nhin vio nam 2008 vi nhttng thing dau

nam 2009, Bkis cinh bio cd 30 Website Viet

Nam cd Id hdng (khdng cd nil ro bdi dugc

cinh bio kip thdi vi dugc phdng ngua). Theo

thd'ng ke, 161 sd Website cua Viet Nam da bi

Hacker "viing thim". Trong dd, 52 website

do Hacker "ndi", 109 website do Hacker

ngoai tan cdng. Mdt con so khi "an tugng" li

chi trong nam 2008 thdi. cung da cd 6.269

loai virus mdi xuat hien d Viet Nam. Trong

dd cd 8 viras xui't hien tu Viet Nam vi gay ra

mgt lugng ldn miy tinh "bi benh": 27.046.0(K)

lugt may tinh bi nhiim viras. Diy li con sd

khdng nhd, gay tdn hai nhiiu mat cho cdng

ddng CNTT-TT Viet Nam. Loai Viras liy lan

nhanh va inh hudng nhieu nhat trong nim Ii

Kavo, nd da kjp "viing tham" 1.256.000 may

tinh. Hacker rit say sua tin cdng cic trang

web game online, miy chu ciia cic ngin hing.

d My cd 512 vu trdm cip danh tinh lim inh

hudng tdi hon 30 trieu khich hing. O Viet

Nam, tu thye ti cing ngiy cing nhiiu so hd

trong an ninh, bao mat ben canh tdi pham

ngiy cing dnh vi vi thu doan kin hon, cic

chuyen gia trong linh vuc an ninh bio mat diu

ddng nha't vdi quan diem dinh gii cic he

thdng CNTT cia linh vye kinh te li chua an

toin ki ca phdng vi chdng.

Website- diem den ciia hacker

Cudi 2008, diu 2009 cd rat nhieu cic website

bj Hacker tan cdng, trong dd cd ei cic website

cd uy tin vi bio mat. Chiing Igi dung vi tan

cdng vio diim yiu an ninh cia cic website

niy khi hg chua kip vi ldi. Mdt sd website

ngin hang cung da timg bj Hacker "viing

tham" vi cic nhi an ninh mang vin thudng

xuyen cinh bio cic he thd'ng thanh toin tryc

tuyin nen than trong vi coi chiing Hacker.

Neu nhu nim 2007, chiing tan cdng vio cic

website chiing khoin, vi budc cic website

chung khoan phii chu ddng cap nhat, vi ldi

cic diim yeu an ninh chg cic he thd'ng, din

nay, hacker lai dang "ngd nghieng" eac he

thdng thanh toin tryc tuyin. Ly giii hien

tugng bj tin cdng trong nam 2007, trang tim

An ninh - an toin kiem tra 26 website cua cic

cdng ty chung khoin Viet Nam, kit qui lai cho

thiy ty le mat an ninh, an toin khi cao: 50%

tdn tai Id hdng nghiem trgng. Vdi he thdng an

ninh nhu viy nen Hacker da Igi dung va tin

cdng di chiim quyin kiim soil. Rat may la

khi cd sy cinh bio, cd su kiim tra, tinh hinh da

cii thien ri't nhiiu: 38% website cd ldi tren

tdng sd 72 website cQa cie cdng ty chimg

khoin dang hoat ddng. Ty le niy vin li mdi lo

cho cic nhi quin ly, hg edn liing hing tim kiin

giii phip tdng thi de bio vi he thdng cua

minh. Hg ddi hdi cic nhi cung cap giai phip

cd nhung phan iing tich cue khi ed Id hdng mdi

xuat hien di trinh sy ed xay ra. Hg cdn nghi

ngai tdi hien tugng "bit tay" cia hacker vi cic

"tay choi" chung khoin di kiim ldi.

Tdi pham The vi Lua dio true tuyin gia tang

Thii doan an cip thdng tin di gian lin thi

ATM thudng thdng qua cic thiit bi: quay len

khi chi the dang thao tie nit tien, ghi im bin

phim di "giii" cic ky Ut khi gd mat khau tren

bin phim. Chung dung camera chuyen dung,

be, thiet bj dgc vi luu trtt gin d vj tri vio the

tren ATM, chung cd thi an cip toan bd thdng

tin tii khoin cung nhu password cua khich

hing din giao djch. Nhttng dtt lieu niy se giup

lim ra mdt chiic the gii hoin hio vi nit tiin

cua cic nan nhin.

Theo cic chuyen gia bio ve phip luat, hien

tugng lua dio qudc te dudi dang danh nghia

cdng ty tii chinh nude ngoii cung dang ndi

len. Thi doan lira dio Ii thdng qua cic giao

dich lua dio trin mang, hoie ddi hrgng tryc

tiip din cic NH vi dganh nghiep mdi chao

vay tiin vdi lai suit uu dai. Sau khi ddi tic

Viet Nam cung cap thdng tin cin thiit vi

ddng y thuc hien cic thu tuc phip ly theo yeu

ciu, ddi tirgng lira dio se giii sec du l|ch gii

cho ngudi vay. HoSc chung dung dien thoai di

3 2 TAP CHf TIN HOC NGAN HAN G • s 6 5(105) - 8/2009