iJViaijGigffi
•RfrdHBTGHOniG
•KHOHBIGiaHiMAliiBP
IMPACT
Cudc chidn xda bd vide lam dung Cdng nghd thdng tin va Truydn thdng (ICT) cua cae tdi pham mang hoac cho cac muc dich xdu khac hidn vin dang la thach thiie Idn tren khdng gian mang nhu: t ^ cdng tir chdi dich vu (DoS), trdm du heu va danh tinh ca nhan, cae phan mdm dde hai (malware) dang didn bidn ngay cang tinh vi, phite tap.
Vdi vide tridn khai Chuong trinh nghi su An toan khdng gian mang toan c^u GCA (Global Cybersecunty Agenda), ITU da cung cd lien minh tren toan cau bao gdm cac chinh phu, co quan nghien ciiu va chuydn gia trong eac nganh cdng nghidp. nham nang cao nhan thire ve van hda an toan khdng gian mang va ed su tidp can tdng the dd ddi phd vdi su lam dyng mang true tuydn. Hidn da cd tdng cdng 149 nude thanh vidn ITU tham gia lidn minh phdi hpp vdi nhau va vdi ITU 6 mite dp toan cau.
Phdi hpp vdi cae ea quan eua Lien Hpp Qudc (UN), Uy ban chdu Au (EC) va cac td chiic qudc te khac va
vdi IMPACT (International Multilateral Partnership a g a u ^ Cyber Threats - Td ehiic hap tac qudc te da phuong chdng lai eac mdi de doa an toan khdng gian mang), ITU dang guip dd cac nude trdn thd gidi phdng chdng cac thach thiie ve an toan khdng gian mang. Kd tir Hdi nghi phat tndn vien thdng thd gidi nam 2010 (WTDC-10), khoang 50 qudc gia da duoe nhan tra giiip de danh gia miie dd chuan bi san sang va nang lue phan ling trudc eac mdi de doa an toan khdng gian mang qudc gia. Nam nude gdm Burkma Faso, Kenya, Montenegro. Uganda va Zambia da duoe nhan ho trp de thanh lap Ddi img cim khan cdp may tinh qudc gia (CERT) va 8 nude khac (Barbados, Burundi, Bd Bidn Nga, dao Sip, Ghana, Jamaica, Tanzarua, Trinidad va Tobago) cQng dang dupe nhan brp giiip tuong tu.
Nhu cau ve an toan khdng gian mang tap trung vao mot sd chu de dae thii thude du an cua ITU:
"Tang cUdng an toan khdng gian mang cho cac nude kern phat trien nhat". Cac nude thanh vien ed thd truy cap vao kho tai lieu nghidn eim, phan tich va dao tao vd an toan khdng gian m^ng ciia ITU. ITU ciing thidt lap co ehd phdi hop chinh thire vdi cac hang ve an toan khdng gian mang nhu Symantec va Trend Micro cflng nhu vdi cac Van phdng eua Lien Hpp Qudc ve ma tiiy va tdi pham
I 1 4 I TAP CHI CNTT&TT KY 1 (5.2015)
66 xay dung co ehd phdng chdng tdi pham mang.
cae hang nay ddng y chia se thdng tm vd xu hudng cac mdi de doa an toan khdng gian mang. Ngoai ra, ITU phdi hpp vdi Didn dan toan cau cua cac ddi ling eiiu kh£n cdp may tinh (FIRST) - hipp hdi Idn nhdt thd 0di eua cac ddi img cim khan edp may tinh - de chia se nhung tiiuc tidn tdt nhat (best practices) vd each phat tridn nang luc img ciiu khan cdp may tirih qudc gia va thdng qua IMPACT, eo quan canh sat qudc td INTERPOL de hop luc vdi cdng ddng thuc thi luat phap.
Mot thanh phdn quan trong trong GCA cua ITU la sang kidn bao vd tre em tren mdi trudng mang (Child Onlme Protection) dupe thanh lap trong su phdi hpp vdi cae td ehiic UN va ddi tac khac dd hinh thanh mang phdi hop qudc td hanh ddng thiie day hanh vi su dung mang an toan, qua do phat tndn tidp cac hudng dan dae thu ndng cho tre em, bd me, ngudi giam hd. nha giao, doanh nhdn va ngudi lam chinh sach.
HAI HOA HOA CAC KHUNG PHAP LY BAO DAM AN TOAN KHONG GIAN MANG
Tu trudc ddn nay, mdi quan tam eiia epng ddng qude td la su thidu hai hda khung phap ly lidn quan ddn an toan khdng gian mang nen gay kho khan cho dieu tra va truy td tdi pham mang ndu vide phan loai tdi pham mang va nhiing hanh vl lam diing khdng gian mang la khac nhau giiia eae nude. Dd khae phuc khd khan nay, ITU lua chon mdt sd nude tuong ddi gidng nhau vd mdi trudng phap ly lien quan den an toan khdng gian mang va hd tro cac nude nay hai hda hda he thdng phap ly vdi nhau hudng tdi vide ap dung lidn thdng trdn toan cdu.
Mdt vl du vd ngudn van b ^ phap ly lidn quan den an toan khdng gian mang la dn pham "Tim hidu vd tdi pham mang: Hudng ddn cho cac nude dang phat tridn va bd cdng cu xay dung phap luat vd tdi pham mang".
PHAN U N G VOI CAC TAN CONG TREN KHONG GIAN MANG
Trung tdm IMPACT tai Malaysia ddng vai trd chu chdt trong vide hd trp nhfing quy dinh bat bude cua ITU ve an toan khdng gian mang bang cac giai phap ky thuat ddi phd vdi eac mdi de doa an toan mdi va dang ed xu hudng phat tndn. Dupe thidt ke de trd thanh ngudn thdng tin ve nhiing mdi de doa an toan khdng gian mang xuat hien trudc tidn, trung tam da dupe thidt l§p de tnen khai hd thdng canh bao sdm va cung cdp hudng dSn kip thdi cho cae qudc gia bi tdn cdng mang. Tnmg tam cdn lap ke hoach thidt lap mdi hdn ket vdi cac chuydn gia ICT d cac nude thanh vidn ITU thanh mang thdng tin ndng se cho phep ho phdi hpp phan img voi cac tinh hudng khan cdp ve an toan khdng gian mang bang cac thdng bao ngan.
TAM QUAN TRONG CUA DAO TAO AN TOAN KHONG GIAN MANG
ICT ngay cang ddng vai trd quan trpng trong vide cung cap dich vu cho cae linh vuc nhu y td, giao due, tai chinh, thuong mai... Bdi vay edn nang cao nhan thire ca vd nhiing eo hdi do ICT mang lai cung nhu cac thach thiic vd phdng chdng eac mdi de dpa de bao dam mdi trudng mang an toan. Tuy nhien, hien nay sd luong chuydn gia an toan mang d tat ca eac nude cdn rat thieu, tham chi ngay d nhiing qude gia cd cdng nghe tidn tidn nhat.
Dd bii dap su thieu hut nay, ITU da td chirc eac khoa dao tao an toan khdng gian mang cho hon 2.700 nhan vidn, nha quan ly cua chinh phu va eac chuyen gia ICT trong khu vuc cdng va tu trdn toan thd gidi. Ndi dung cac khoa hpe bao gdm moi khia canh phap ly va ky thuat ve an toan khdng gian mang, kd ca viec phan tich va didu tra ma ddc...
Mdt sd khoa hoc tien hanh thu nghidm va kidm tra Men thire hoc vien vd vide ap dung khxmg phap ly
TAP CHI CNTTarr KY 1 (5.2015)
I l 5 l
cua nude minh cho cae tinh hudng t & cdng mang.
Ngoai ra, mot sd ddi img ciru khan cap may tinh qude gia eiia cac nude duoc tham gia cac tinh hudng tdn cdng khdng gian mgng do ITU-IMPACT td chuc theo cac kich ban md phdng dd kiem tra kha nang phan ling va giao tiep eua ho trong rihung trudng hop khan e^p.
H 6 TRO CUA ITU VE AN TOAN KHONG GIAN MANG KE TLf SAU WTDC-10
Chau Phi
Chau Phi duoe hd trp du an lien kdt giira ITU va Cdng ddng chau Au |ITU-EC) nham hai hda hda cae ehinh sach ICT va mdi trudng quan ly hieu qua d cac nude chau Phi, vimg Caribe va Thai Binh Duong.
Hpe vien tham gia bidt each xay dung nhiing ehinh sach mau vd tdi pham mang. giao dich dien tii va bao ve du hdu va chuyen hda vao khung phap ly qudc gia. Trong du an HIPSSA (Hd trp hai hda hda eac chinh sach ICT vimg chau Phi can Sahara), lidn minh chau Phi (AU) duae hd tro de phat trien Cdng udc ciia chau l\ie vd An toan khdng gian mang.
Nhidu nude chau Phi (Botswana, Burkina Faso, Burundi, Cameroon, Chad. Bd Bidn Nga, Cong hda dan chu nhan dan Congo, Ethiopia, Gabon, Gambia, Ghana, Lesotho, Mali, Niger, Nigeria, Kenya, Senegal, Sierra Leone, Swaziland, Tanzania, Togo, Uganda, Zambia va Zimbabwe) dupe hudng Ipi tir kdt qua danh gia ciia ITU-IMPACT vd miic dp san
sang va kha nang phan img vdi cae mdi de dpa an toan khdng gian mang. Kd tii 2010, bdn nude trong sd dd gdm Burkina Faso, Kenya, Uganda va Zambia da thidt lap dupe ddi ling ciru khan cap may tinh qudc gia va bdn nude khac gdm Burundi, Ghana, Bd Bien Nga va Tanzania dang trong qua trinh thidt lap ddi CIRT vdi su hd tip cua ITU-IMPACT.
Thang 7/2013, Uy ban truyen thdng Nigena da ky Bien ban ghi nhd (MOU) vdi ITU dd thidt lap Trung tam An toan khdng gian mang 6 Nigeria. Trung tam cap khu vuc nay se hd trp vide dieu phdi hoat ddng phdng chdng cae mdi de dpa an toan khdng gian mang d edp qude gia va cap khu vuc. Mdt loat eac hdi nghi c^p cao vd bao ve tre em tren mdi trudng mang do ITU chii tri cd ndi dung chi ra cae nguy eo va didm yeu an toan mang cho tre em, phat tndn cae cdng cu thuc td de giam thidu eac nguy co, chia se kidn thire, kmh nghiem.
Chau A - Thai Binh DiTdng
GiQa ITU va cae nude ASEAN da tang eudng hoat ddng phdi hpp cdp khu vue dd ddi phd vdi eac thach thiie bao dam an toan khdng gian mang. Ket qua da nang eao kha nSng ciia mdt sd nude kdm phat tiidn nhdt hoac cac nude dang phat trien tirong cudc chidn vdi nhung mdi de dpa an toan khdng 0 a n mang va quan ly eac tinh hudng khan cap Iidn quan. Campuehia, Lao, Myanmar va Vidt Nam nam trong sd eac nude duoc hd trp true tidp trong nhiing nam gan day. Su phdi hop trong cac van dd
16 I TAP CHi CNTTSiTT KY 1 (5.2015)
an toan khdng gian mang giUa cac nude nay duae tang eudng sau khi tham gia hdi nghi tieu khu vue ciia ITU/ASEAN td chuc d Myanmar nam 2011. Hdi nghi da tg.p trung vao phat tndn eac ehinh sach cho ddi ung eiiu khan cdp may tinh, eac quy trinh. thuc tidn tdt nhdt, eo hdi va thach thiic. Phdi hop giiia cae nude chau A - Thai Binh Duong trong cudc chidn vdi tOi pham mang dupe cung ed thdm tai hdi thao khu vuc do rru va van phdng UN vd ma tiiy va tdi ph^m (UNODC) td chirc tai Xaun (Han Qudc) nam 2011. Vdi ddi tac IMPACT, ITU tidp tuc danh gia nang lue eiia cae ddi img eim khan edp may tinh hidn tai eiia mdt sd nude chau A - Thai Binh Duong khi quan ly cae tinh hudng kh£n cdp vd an toan khdng gian mang, hd trp thidt lap cae ddi nay tai nhiing nude chua cd va eung edp tai lidu, ho tip dao tao. Afghanistan.
Bangladesh, Brunei, Bhutan, Campuehia, Lao, Maldives, Myanmar, Nepal, Sri Lanka va Vidt Nam da duoe n h ^ mpt sd hd tro khac nhau dd tdng eudng nang luc bao dam an toan khdng gian mang eiia minh trong vai nam gan day.
Chau My
Mdt so nude trong khu vuc da hudng loi tir su h6 tro cia chuydn gia ITU vd ddi phd de dpa an toan khdng gian mang. Tir nam 2012, ITU-IMPACT da thuc hidn danh gia dd san sang vdi de doa an toan khdng gian mang cho 15 nude d chdu My gdm cd:
Anguilla, Antigua va Barbuda, Barbados, Costa Rica, Dormnica, Cdng hda Dominica, Grenada, Ecuador, Haiti. Honduras, Panama, Samt Kitts va Nevis, Saint Lucia. Suiiname, Trmidad va Tobago.
Bidn ban ghi nhd (MOU) ky giua Barbados va Jamaica dd thlet lap cae ddi img cim khan cdp may tinh dang duoc thuc thi. Nd lye tuong tu dang dupe thuc hien t ^ Trinidad va Tobago. Ngoai ra, td chirc cac nude vimg Ddng Caribe thidt lap ddi ling eiiu k h ^ edp mdy tinh dp tidu khu vue. ITU-IMPACT hd tia ky thu§t, dao tao dd thiet l^p ddi ling cim vdi muc tidu ndng cao nang lye bao dam an toan khdng gian
mang qudc 0 a vd tang eudng su phdi hop cap qudc td va khu vue tiong linh vuc nay. Thang 8/2013, phdi hpp vdi Co quan dang ky Internet vimg Nam My va Caribe, cac bai dien t^p t£n cdng mang da dupe tidn hanh tai Montevideo (Uruguay), ti:ong dd cd eac chuyen gia ICT va an toan mang cua ITU ddn tir Barbados, Bohvia, Chile, Colombia, Ecuador, Paraguay, Peru, Uruguay, Trimdad va Tobago.
Mdt phdn cua du an phdi hop ITU-EU la tao ra eac chinh sach ICT hai hda va mdi tiudng phap ly hidu qua d cac nude chau Phi, vimg Caribe va Thai Binh Duong. Khung phap ly vd tdi pham mang ciia 8 trong tdng sd 15 nude vimg Caribe da dupe xem xdt lai trong 2 nam 2011 va 2012. Ban khuydn nghi sua ddi cudi cimg dd tu van cap nhat khung phap ly da dupe dd trinh Idn cac nude Barbados, Grenada, Saint Kitts va Nevis, Trinidad va Tobago. Dd xudt van ban phap luat hoge ndi dung siia ddi van ban phap luat hidn hanh cung da duoe chuydn tdi Haiti, Jamaica, Saint Lucia, Saint Vmeent va Grenadmes.
CONG DONG CAC QUOC GIA DOC LAP (CIS)
Hon 90 chuydn gia ICT va an toan khdng gian mang tir chau Au, Cdng ddng cac qudc gia dde lap va chau A - Thai Binh Duong da thao luan cac khia canh chidn luoc vd an toan khdng gian mang va tdi pham mang tiong cae semma lidn khu vuc cua ITU-MPACT phdi hop vol Hoc vien vidn thdng qudc gia Odessa (Ukraina) td chirc vao thang 3/2012. cae khudn khd phap ly va phdi hpp qudc td dd chidn dau chdng lai tdi pham mang, bao ve tie em tien mdi trudng mang va vai ttd cua mdi quan he ddi tac cdng - tu la nhiing chu de chinh duoc quan tdm. cac thanh vien tham gia 66 xuat lap ra kho du lidu tham chidu ve nhiing ngudn Internet cam tre em tidp can.
Nam 2011, su phdi hpp hdn khu vue vd bao ve tre em tren mdi trudng mang da dupe tang eudng
TAP CHI CNTTSiTT KY 1 ( 5 . 2 0 1 5 ) I 1 7 I
LUIML) N b H t V l t N THONG
thdng qua hdi thao dupe ITU td chirc tai Ukraina, cd khoang 55 chuyen gia an toan khdng gian mang tii cac nude CIS va chau Au tham du. Arraema va Kygyzstan duoc hudng Ipi tir nhung hd trp vdi muc tieu phat tnen chidn lupe an toan khdng gian mang qude gia. Ukraina dupe hudng dan thanh lap co quan qudc gia vd dang ky dinh danh ddi tuong (registiation of object identifiers). ITU ciing da hd tip Chinh phii Azeebaijan to chiic hdi nghi qude td vd an toan khdng gian mang vao nam 2013, vdi su phdi hpp eiia Ngan hang The gidi, Didn dan Kinh td The gldl va INTERPOL.
Chau Au
ITU da phdi hap vdi Bd Van tai, Cdng nghd Thdng tm va Truydn thdng Bulgan td chiic "Didn dan khu vuc cua ITU vd An toan khdng gian mang cho cac nude chau Au va CIS" tai Sofia (Bulgari) vao thang 10/2012. Didn dan cd hon 90 dai bidu tham du ddn tii 19 nude. Trong khudn khd didn dan, ITU va IMPACT da td chite didn tap tdn cdng mang vao cac nude chau Au va CIS vdi muc dich kidm tia kha nang img phd an toan khdng gian mang edp qudc gia va cai thidn mire dd sin sang, kha nang phan img khi cd tinh hudng tdn cdng mang.
"Phuong phap hpe ling dung cho Ddi phan ling khan cap" (ALERT) da tan cdng 8 nude tham gia gdm Armema, Bulgana, Moldova, Montenegro, Romania.
Slovakia, Thd Nhi Ky va Ukrame. vdi 11 nude
khac ddng vai trd quan sat vidn gdm: Albama, Azerbaijan, Croatia, Y, Kyrgyzstan, Luxemboi Malta, Ba Lan, Bd Dao Nha va Tajikistan.
Mdt loat kich ban keo ddi 250 phiit dupe 1 hanh trong bai didn tap kidm tra cac thanh vien tham 0 a va quan sat phan ung cua hp. Cac kich ban nay bao gdm: phishing, web deface va khai thac "
16 hdng mang khdng ddy. Bai md phdng dupe ABI Research tai trp, ddng thdi cd su ddng gdp tii cac hang ddi tac eiia ITU-IMPACT nhu Codenomicon, Internet Society Bulgaria, Kaspersky Lab, Lirex.eoni, Microsoft, Symantec va The Cyber Guardian.
Vide danh 0 a miie dd sSn sang an toan khdng 0 a n mang trong tinh hudng khan cdp da dupe tidn hanh d cae nude: Albama, Bosnia va Herzegovina, Montenegro, Serbia, va Cdng hda Yugoslav eiia Macedonia (cu) vdi muc tidu thdnh lap cae ddi ling ciru khan cap may tinh t ^ cae nude nay. Thang 9/2013, Montenegro chii tri hdi nghi Idn thit 11 cua m j ve khudn khd phap ly dd bao vd Ipi ich eiia ngudi dimg thdng tin didn tu d chdu Au. Cae thanh vidn tham 0 a ban bac tim each xac dmh nhiing thach thire ehinh trong viee bao vp ngudi dimg, danh gia khudn khd phap ly hien hanh va trao ddi quan diem vd nhiing thue tien phap ly tdt nhat.
(Ngu6n: nu consolidates global alliance against cyberthreads, https-J/itjnews.ihijnt)
HP
^m *
A L E R T
R S - Z M a y 2015. Kigali, Rwanda
18| TAP CHI CNTTSiTT KY 1 (5.2015)
