KINHNGHlSM-THifCTliN ///
BAO DAM AN NINH MANG DOI VOfI HE THONG THONG TIN
TRONG CO QUAN NHA NLfOC
Nguyen Thi Ihiiy Hoa *
Tdm tdt: Trong thdi dqi cdch mqng cdng nghiep 4.0. sUphdt triin mqnh me cda khoa hoc • cdng nghe dd tqo ra thdi cd mdi di nUdc ta day nhanh tien trinh cdng nghiip hda, hiin dqi hoa ddt nude. Tuy nhiin. viic Ung dung cdng nghe thdng tin cdng tUm dn rdt nhiiu nguy cd ddi vdi an todn. an ninh thdng tin. Vi the. ndng cao nhdn thUc vd ndng lUc bdo ddm an todn. an ninh mang cho cdc hi thong thdng tin trong cd quan nhd nUdc Id mdt trong nhUng nhiim vu quan trgng, cdp thiit hien nay.
TUkhda: an ninh mqng; hi thdng thdng tin; cd quan nhd nUdc
Abstract:IntheeraoftheIndustrialRevolution4.0,thestrongdevelopmentofscience-technology has created new opportunities for our country to accelerate the process of industrialization and modernization of the country. However, the application of information technology is also a lot of potential risks to the safety and security of information. Therefore, awareness-raising and capacity to ensure the safety, security for information systems in state agencies is one of the important and urgent tasks today.
Keywords: network security; information system; State agencies
Ngdy nhdn bdi: 20/12/2017 NgdysUa bdi: 30/12/2017 Ngdy duyit ddng: 15/01/2018 1. Khdi qudt ve he thong thdng tin vd an ludn dflpc hilu la ndi den h i thdng thdng tin ninh mang cd sfl dyng may tinh. Dfldi ddy Id md hinh cO
HI thdng thdng tin ndi chung hay h i thdng ban vl he thdng thdng tin (cd sfl dung may thdng tin trong cd quan nhd nfldc ndi rilng tinh);
la he thdng tilp nhdn cac ngudn dfl lieu nhfl An ninh mang la sfl bdo ddm boat dpng cac yen td vao va xfl If chflng thanh edc san tren khdng gian mang khdng gay phflOng phdm thdng tin la cac yen td ra [2]. Hoat ddng hai den an nuib qudc gia, trait tfl, an toan M cfla cac h? thdng thdng tin nhfl sau: Nhdp dfl hdi, quyln va Ipi ich hpp phap cfla td chflc, ca lilu vao, tilp theo xfl ly dfl lilu thanh thdng nhdn [1].
tin, cudi eung dfla tiidng tin ra vd Iflu ti^ cdc Bfldc sang thi ky XXI, till gidi chuyen sang ngudn dfl li|u. cudc each mang cdng nghiep mdi - each mang Ngay nay, may tinh ddng vai trd rat quan cdng nghilp 4.0. Day la cudc cdch m ^ g gan trpng trong vile xay dflng cde he thdng thdng liln vdi sfl phat triln cfla khdng gian mang.
tin, cho nIn khi ndi den h? thdng thdng tin Sfl kit ndi va tflOng tac thdng qua Internet da
* TS, TrUdng Dai hgc Noi vu Hd Noi.
Hinh 1. Md hinh ccr ban c&a he thong thong tin co ijfng dung cong nghe thdng tin Nguon nhin hic: Npioi dnng trnc tiep va cic chuyen gia CNTT
Ngnon Tft lien:
phan cvngva
bao dnvrng
Diln liUai thfc hifn hf thong Nhap d v
Xttij
Thong tinra
m t
L m tea dn Ben
NgDon phan mem:
cac chmnig tiinhva tiintqc Ngnon d v Ken: Cac cor stf dv ti^n, mo hinh, tri tiiDc
thflc day tien trinh phat trien xa hdi. Khdng gian mang da trd thanh mdt bd phan can thdnh vd ddng vai trd quan trpng trong viec xay dflng 3:a hdi thdng tin vd kinh te tri thflc.
Bin cginh nhflng Ipi fch md cdng nghe thdng tin dem lai cung xuat hien nhieu nguy ca tilm dn de dpa an toan, an ninh mang ddi vdi he thdng thdng tin trong edc cd quan td chflc, trong dd ed khdi ca quan nhd nfldc. Hiln nay, xu hudng, tdc dp phat triln, flng dung cdng ngb$ thdng tin diln ra nhanh chdng lam cho tinh hinh an ninh mang d nfldc ta ngdy cang dien bien phflc tap. Nhieu be thdng thdng tin ciia eac ca quan nha nfldc da trd thdnh muc tilu tan cdng thfldng xuyIn cfla tin tdc.
2, ThUc trang an ninh m^ng ddi VGS he thong thdng tin troi^ cac co quan nhd nfldc hiln nay Md hinh cO ban v l be thdng thdng tin d Hinh 1 cho chung ta hinh dung rd mdi quan he gifla cae thanh phdn vd cac boat ddng efla he thdng thdng tin, dd la: tai nguyin, can true va boat ddng. Khai thac cdc ylu td nay, nhiing
cudc tan cdng gan day da Ipi dung Id hdng bdo mat d l thay ddi giao diln; chen liln kit gia mao giao dien nham myc dich Ifla dao; dung phdn mIm gian dilp tan cdng ddnh cap thdng tin, tdi Ulu vd tan cdng tfl chdi dich vu,...
Hinh thflc tan cdng cd chu dich, nham vao cdc ddi tflpng cu tbI ngdy cdng phd biln, da dang vd tinh vi thflc sfl la thach thflc ddi vdi cdng tac dam bao an todn thdng tin. PhflOng thflc, thfl doan tdn cdng cfla tin tae chfl ylu van tdp trung nham vdo he thdng mang thdng tin, cde website, cdng thdng tin dien tfl,...
Trong dd, xu hfldng sfl dyng ma ddc ma hda dfl heu, yen cau ngfldi sfl dung phdi tra tiln mdi gd bd dflpc. Dae bilt, xudt hien lo^i virus gian dilp xdm nhdp, tdn cdng de lai cac dau hilu trln h i thdng mdy tinh cfla mdt sd cd quan nhfl: Viln nghiln cflu; cae cdng ty lam an vdi nfldc ngoai,... cd dau hieu gia tang vd xuat hiln vdi tan xuat thfldng xuyIn hdn. Mdt sd thfl doan tan cdng phd bien Id:
ThU nhdt, tan cdng vdo dfl lieu, chiem
57 I Tap chf Khoa hpc Npi vu
KINHNGHliM-THI/CTliN Mf
quyln qudn tri website; tan cdng chin cac doan ma script nguy hilm cd tbI gay nguy hai cho ngfldi truy cap; tdn cdng gdy treo h i thdng trong thdi gian ngan,... ddn den Hacker cd the chilm quyln Idem sodt mdy chu, lay toan bd thdng tin bi mdt trong tai khoan sau dd thay ddi ndi dung website d l thflc hien Ifla ddo va tiln hanh cdc hanh vi pham tdi. Dd la vy tan cdng he thdng thdng tin cua cym Cang hang khdng Qude t l Ndi Bdi, Tan San Nhat va h i thdng may chfl cua Vietnam Airlines gay hdu qua nghilm trpng, lam tre hang chye chuyen bay, thdng tin cua hdn 400.000 khdch hdng cfla Vietnam Airlines bi mat va phat tan lln mdi trfldng mang,...[3].
ThU hai, Ipi dung nhflng diem ylu cua cae website thudc eac co quan nhd nfldc cd tin miln.vn hoac .gov,... Hacker chilm quyln dieu khien website, chen link gia mao lam ebo ngfldi sfl dyng lam tfldng ddy Id cac trang website chinh thdng d l khai bao cac thdng tin, mat khau OTP. Dien hinh Id vu tan cdng cfla tin tdc gia mao Ilnh chuyin tiln ddi vdi Ngdn hdng thfldng mai Cd phan Tien phong [3].
ThU ba, Ipi dung cP chi md cfla Facebook va Google, cac ddi tfldng lap cde trang thdng tin diln tfl tdng hpp, trang mang xa hpi nhfl Facebook, Zalo,... an cac thdng tin ed nhan d l dang tdi cae thdng tin khdng dung trln cac trang mang nham danh Ifla ngfldi sfl dung, Idm ngfldi sfl dung lam tfldng edc trang thdng tin chinh thong d l dang nhap, chia se, binh ludn gdy hieu flng tam ly xa hdi trfldc nhflng vdn d l ed tinh thdi sfl eua ddt nfldc.
Nam 2016, Bd Cdng an da phat hiln hon 120 website, blog cfla cae ddi tflpng trong vd ngodi
nfldc thfldng xuyIn dang tdi cac bai viet pMn ddng khdng dting sfl that [3].
Thii tu, triet d l khai thac cdc Id hdng bao mdt cua he thdng, he dilu hdnh, he quan tri co sd dfl lieu, phan mem flng dyng, chinh sach bdo mat d l chilm quyen dieu khiln trang thdng tin diln tfl, tao ra sfl ngflng tre eua dich vy,... Bang chflng la trong hai ngay ngay 08 - 09/3/2017, sfl cd cac website cfla mdt sd Cdng hdng khdng: Tan Sdn Nhdt, Rach Gia, Tuy Hda,... bi Hacker tdn cdng thay ddi giao dien vd khdng truy cap dflpc thdng tin [3].
Cac tan cdng ndy da dan tdi nguy cd gay rdi loan, mdt kilm sodt he thdng thdng tin phuc vy qudc phdng, an ninh; nguy cd bi tan cdng, chilm doat, ddnh cap tai lieu, bi mdt nha nfldc tfl he thdng cd sd dfl lilu, he thdng mang ndi bd; nguy ca bi fflnh tre, te lilt ho^t ddng efla h i thdng cdng thdng tin diln tfl, trang thdng tin diln tfl eua cac cd quan Dang, Nhd nfldc; nguy cd gay rdi loan edc giao dich tai chinh, hogt ddng vdn hanh, dieu khiln hang khdng, diln Ifldi qudc gia, he thdng giao thdng dfldng bp, xfl ly hoa chat phyc vu cung cap nfldc sinh boat, y tl,...; nguy cd he thdng thdng tin phuc vu phat thanh, truyen hinh, bdo chi, xuat ban cfla Nha nfldc bi kiem sodt, vd hieu hoa;
nguy ca bi kiem sodt, chiem doat, phd huy he thdng thdng tin phuc vy Iflu trfl ca sd dfl lieu qudc gia ve thu tue hdnh ehinh, dan cif, xuat nhap cdnh,...
Tinh hinb an ninh m ^ g t ^ mdt sd nOi diln ra phflc tap, nguyin nhan chu yeu Id do:
Mdt Id, cdng tac tuyen truyen, giao due, phd biln kiln thflc ve dam bdo an ninh, an toan thdng tin trln mdi trfldng mang cho can
hd, dang vien, cdng chflc, dac biet la phdt huy vai trd lanh dao cua eac cap uy, ehinh quyen cdn ban e h i va chfla tfldng xflng vdi tinh hinh, dien bien thfle te.
Hai Id. cdng tac qudn ly nhd nfldc v l an todn, an ninh thdng tin trln mdi trfldng mang cdn nhilu bdt cap, ban ebl, xudt phat tfl hanh lang phdp ly chfla day dfl, chfla chat che, ch^m dieu chinh trfldc nhflng van de mdi nay sioh. Vile Idp thdi phdt hiln, ngan chan, xfl ly nhflng td chflc va ca nhan cd hanh vi Idm mat an ninh, an todn thdng tin; Id, Igt bi mdt nhd nfldc, thdng tin ndi bp phfloi^ hai d i n an ninh qude gia, Ipi ich cd quan, td chflc va ca nhdn trln mdi trfldng mang it dflpc phdt hiln va chfla dflpc xfl ly nghiem minh. Mat khac, cdn thilu cac quy dinh quan ly, phan cap, phdn quyln trong sfl dyng, quan ly dilu hanh he thdng mang d l quy dinh rd trach nhilm.
Ba Id, trfldc nhflng ylu eau ngay cang eao ve an toan, bdo mgit he thdng thdng tin trong cac cd quan, td chflc nha nfldc, thflc trang ddi ngfl can bd lam cdng tae xfl ly, flng cflu sfl ed v l an ninh thdng tin trln mdi trfldng mang cdn thilu v l sd Ifldng; trinh dp nang lflc chuyen mdn nghilp vy chuyin nganh cdn chfla theo kip sfl phdt trien ddn d i n nguy ca bi tan cdng mang ngdy cdng Idn. Bin canh dd, vile triln khai cdc biln phdp bao dam an toan, an ninh mang cdn ban che. Nhilu eO quan nhd nfldc chfla xdy dflng giai phdp tdng the ve bao mat, bao dam an ninh thdng tin ma chi quan tam din khac phyc sfl c6. Nguy cO rd ri thdng tin tfl nhdn td ben trong ngay cang tang.
Bdn Id, sfl thieu ddng bd khi dau tfl, nang cap cac he thdng cdng nghe thdng tin, kinh phi dau tfl, ndng cdp h i thdng va trien khai
eac giai phap bao dam an ninh mgmg cdn ban chi, tinh da dang cua cde giai phap cdng nghi gay khd khan trong cdng tdc quan ly, trien khai cac gidi phdp bao dam an todn, an ninh mang ddi vdi edc h i thdng thdng tin trong cac Cd quan.
3. Mdt so giai phap phdng ngfla, phat hien va khac phuc sfl co an ninh mang trong cae cP quan nha nUdc
Trong bdi cdnh tren, d l bdo vl be thdng thdng tin chdng cde mdi de dpa tan cdng, cde CO quan va td chflc can tdp trung nang lflc an todn thdng tin d ba yeu td ed ban: eon ngfldi, quy trinh va giai phdp cdng nghi. Cy tbI:
Mot Id, nang cao nhan thflc cfla ngfldi sfl dung vl mflc dd quan trpng cua vile ddm bao an ninh thdng tin. Thfldng xuyIn td chflc dao tao, tap hudn, tuyIn truyin vl cdng tdc dam bdo an ninh thdng tin trong ho?t ddng efla ca quan nha nfldc; td chflc diln tap, ddo tao chuyin sdu an ninh thdng tin de nang eao trinh do, chuyen mdn nghiep vy can bd ebuyen trach cdng nghe thdng tin eua cac ed quan, ddn vi.
Hai Id, bd tri can bd, bd phdn chuyin trdeh cdng nghe thdng tin cua cd quan hoac ddn vi tfl van thfldng xuyIn kilm tra, ra soat, danh gia mflc dp ddm bao an toan, an ninh thdng tin cho he thdng mang ndi bd (LAN) gdm: mdy chu, may tram, thilt bi mang, phdn cflng, phdn mem he thdng vd cdc he thdng thdng tin, phan mem flng dung nhdm danh gid tdng the mflc dp an todn, an ninh thdng tin maing, kip thdi phat biln vd xfl ly sfl ed, lo hdng, ngan chan, bde gd md ddc tdn cdng vao he thdng mang.
Ba Id, phdng chdng ma ddc, virus, phan
59 1 Tap chf Khoa hpc Npi vu
KINHNGHliM-THI/CTliN Mf
mIm gidn dilp: Cdch hieu qua nhat d l ed the ngan chan, phdng ngfla cac phdn mem dpc hai ehuyin Idy nhiem trln h i thdng mang may tinh cfla ca quan, ddn vi do la phdi trien khai cai dat phdn mIm cbong virus eho tat cd cdc may chu, may tram va thilt bi di dpng trong he thdng mang. Sfl dyng ed che phdng chdng tan cdng, truy nhdp trai phep vdo be thong mang, tfl ddng phat hiln vd loai trfl ma ddc dflpc truyen tai tfl thfl diln tfl, tip (file) dinh kem, tfl cdc trang web dpc bai tren mang Internet.
Thfldng xuyIn cap nhdt philn ban mdi, ban vd loi cfla be dieu hanh, phan mem chdng virus.
Kiem soat eh^t che cai dat phan mIm trln may ehii, may tram, khdng cai dat phan mem khdng rd ngudn gdc hoac khdng cd ban quyln;
cfl can bd thfldng xuyIn theo ddi boat ddng efla edng/trang thdng tin dien tfl cua ddn vi nham tranh cae cudc tan cdng gdy anh hfldng din viec cung cap thdng tin phyc vu ngfldi dan va doanh nghilp. Thilt lap cd che bdo mdt cho m^ing khdng ddy nhfl thay ddi cde tham sd mac dinh ciia thiet H, ma hda dfl Heu, dat mait khdu truy edp d mflc an todn cao nhat.
Bdn Id, xdy dflng va ban hdnh quy chi vl dam bao an toan, an ninh thdng tin trln mdi trfldng mang trong boat ddng ndi bd cfla eP quan, ddn vi. Bo tri kinh phi thfldng xuyIn cho viec triln khai cdc biln phap ddm bao an toan, an ninh thdng tin trong ndi bd cO quan, mua sam trang thilt bi cdng nghi thdng tin chuyen dyng nhfl thiet bj tfldng Ifla (Firewall), thilt bi Iflu trfl dfl lilu, phan mem phdng ehdng virus, xay dflng dflpc b l thdng mang an todn, dau tfl cde cdng cy ky thudt can thilt nhfl cdng ey kilm tra, ddnh gia, gidm sat an todn thdng tin m ^ g ; rd sodt 16 hdng website, Id hdng hi dilu hanh, Id hdng ca sd dfl h$u (database); sao Iflu
va khdi phyc dfl lilu, h i thdng phdng ching tdn cdng mang DDOS, he thdng giam sat an toan thdng tin SIEM,...
Ndm la, khi he thdng hi tdn cdng, xay ra si(
cd hoac nguy ca mat an toan, an ninh thong tin can nhanh chdng each ly be thdng vdi moi trfldng mang, dp dung mpi biln phdp dl khac phuc vd b ^ c h i thilt hai d mflc thap nhdt.
Sdu Id, trien khai Quyet duib sd 898 cua Thfl tfldng Chinh phu v l bao dam an toan thdng tin mang giai doan 2016 - 2020 vdi 3 nhdm nhiem vy: bao dam an toan, an ninh thdng tin mang quy md qudc gia, bao dam an todn, an ninh thdng tin m?ung trong boat dpng cfla cd quan, td chflc, trpng tam Id dam bao an ninh mang cho 5 he thdng thdng tin quan trpng ve an ninh qude gia (he thdng may chii ten miln qudc gia Viet Nam "vn"; he thong quan ly, dilu khiln, khai thac, vdn hanh mang dfldng true bang rdng; He thdng qudn ly chuyin mach qudc tl; he thdng truyin dan vd cdp quang bien qudc tl, cdp quang dat lien qudc tl). Hai he thdng thdng tin quan trpng v l an ninh quoc gia thudc linh vflc chi dao, dilu hanh cfla Chinh phfl Id Mang truyen s6 lieu chuyen dflng phyc vu eac ed quan Dang, Nha nfldc vd HI thdng quan ly van ban 4 cap chinh quyln.
T A I L I E U THAM K H A O 1. Dfl thao Ludt An ninh mang trmh xin f kien tai philn hpp thfl 20 cua Uy ban ThUdng vu Quoc hpi khda XIV.
2. Bp Npi vy, Tdi lieu boi dUdng ngqch chuyen viln, nam 2013.
3. Ky yeu Hpi thdo "Bdo vi an ninh mang dSi vdi hi thdng thdng tin quan trgng vi an ninh qu6c gia" cua Bp Cdng an, thang 8 nam 2017.
