muc tleu tan cong "hip din" udi tqi pham mang

T

inh hinh an ninh mang dang dien ra ngdy mdt phiic tap, tdi phgm da Igi dung mpi thu doan de danh cap thdng tin, tir viec tmy cap vao website, danh lira ngudi dimg cho din viee cai ma dgc vao chinh nhiing thilt bi eiia ngudi dung... Trong nam 2016, day tiep tue Id vdn de chinh lam dau ddu ede doanh nghiep todn eiu ndi chung va khu vyc Ddng Nam A ndi rieng. Theo hang bdo mdt FireEye, eae

td ehiic, doanh nghiep ttong khu vyc nay dang thu hiit sy quan tam eiia nhieu gidn diep va tdi pham mang, nhirng ke dang tim edeh danh eap thdng tin ciia nhirng nganh cdng nghiep dang phdt trien.

aSEAH - muc tleu tan cong "hip din" udi tqi pham mang

Theo mdt bao cdo mdi nhdt ciia Lien Hiep Qudc, ede mang ludi tdi pham xuyen bien gidi ngay cang duge ket

ndi chat che hon vd hoat ddng manh

@

CflNG NGHtThdng tin vd Truygn thdng i 4/2016 3 5

tss^smsm^

me hon tai khu vyc Ddng Nam A - noi tien ttinh hdi nhap kinh tl khu vyc dang tao dilu kien thuan Igi cho viec gia tang cac vy pham tdi. Mpt bao cao khae tir hang bao mat FireEye va cdng ty viln thdng Singapore Singtel cung chi rd eac doanh nghiep vd chinh phii ttong khu vye Ddng Nam A dang ngay cdng ed khd ndng trd thdnh muc tieu ciia tdi pham mang. Trong niia ddu ndm 2015, cdc td ehiie duge khdo sat ttong khu vyc da ddi mat vdi riii ro la myc tieu cua cac cupc tan cdng mang cao hem 45% so vdi mire trung binh todn eiu. Trong giai doan sdu thdng trudc, eac td chirc nay ehi ddi mat vdi mice nii ro cao ban 7%. Tren todn khu vyc, 29% cac td chiie Id mue tieu eiia ede vu tin cdng mang cd chu dich ttong niia dau nam 2015. Trong dd. Thai Lan vd Phillippines Id hai nude ASEAN chiu thiet hai nang n l nhat, vdi con sd tuong ling 40%i vd 39% td chiic ciia mdi nude bi tdn cdng.

i H l f c i i ^

y V . yy ^ 7 y// ^^

T'f' l§ khach hSng cfla FireEye bi dnh hudng bfit cSc cuOc tin cOng m^ng (1-6/2015)

Bao cao nhan manh cde ngdnh cdng nghiep giai tri, tmyen thdng vd djch vu nha hang - khdeh san dl bi nhim tdi nhit; ehinh phu la muc tieu tilp theo. Hon 1/3 cac phan mem ed ehiia ma dde md cde nhdm tin tde sii dung dupe phat hien ttong cac nganh nhu: gidi tri, truyin thdng hay nhdm dieh vy nhd hdng, khdeh san. Bang each nhdm muc tieu vao ede td chire tmyen thdng, cdc nhdm de dga ed thi dgc duge cac tin tiic trudc khi ehiing dupe cdng bd eung nhu cd kha nang xde dinh eac ngudn khdng duoe tiet Id.

TAN CONG C6 CHU D I C H HAY T X N CONG APT (ADVANCED PERSISTENT THREAT) LA H I N H T H C C M A TIN TAC HAY MOT NH6M TIN TAC C6 T6 CHLfC T X N CONG BEN BI C 6 C H O J DICH NHAM VAO CAC T 6 CHLfC, BE DAT DUOC MUC TIEU CU THE, CHANG HAN D A N H C X P D Q L I E U QUAN TRONG.

OPT: MOI Quan tam ngau cang tang trong HhU Uirc ASEAN

FireEye da theo doi it nhat 13 nhdm APT nham muc tieu vao cdc td ehiie chinh phii vd it nhat bon nhdm APT nham mue tieu vdo eae ehi'nh phu ttong khu vye vd tten toan the gidi. Theo dd, cac cu^c t ^ cdng trong khdng gian m^ng thudng dupe thuc day bdi nhung ddng ea ehinh tri hay tdi ehinh, ehiing co the duge gdn chat vdi cae sy kien Idn nao do, chdng ban nhu cdc cudc bau cu, eac hdi nghi vd the thao Idn trong nude dd.

Ong Erie Hob, Chu tieh ciia FireEye tai chau A - Thdi Binh Duang va Nhat Ban phat bilu: "Hoat ddng gidn diep khdng h i mdi nhung duge tiSn hanh tryc tuyen ngay cang tdng Idn vd Ddng Nam A dang la mgt diem ndng". Ong eho biet them "Cac yeu to ve dia ly vd chinh tri cd the la tde nhdn ciia eac vu tin edng mang. Ddng Nam A ttd thanh chii the kinh te Idn hem tren vii ddi thi gidi vd nhirng edng thang dang diln ra tai biln Ddng, eac td ehiie cdn phSi ehudn bi sdn sdng trudc nhung vy tdn cdng m^ng".

Cde CO quan da lien tyc phdt hien cdc vu tan c6ng, xam nhdp vdo he thdng mang mdy tinh cua cac co quan chinh phii, td ehiie chinh tri, cdc ngdnh eong nghiep, kinh t l miii nhpn, cde hang hang khong Idn... ciia nhilu qudc gia. Muc dich eac cudc tin cdng ndy nhdm phd ho^i, danh cdp dii li?u, thu thap

3 g CONG NGHETlrang tin vi Truydn thdng 14/2016

thdng tin tinh bao lien quan din cde chinh sdch ve kinh tl, chinh tri, an ninh, qudc phong va ddi ngoai. Bdo edo cua cac cdng ty bao mat da chi ra vin d l nay. Thang 4/2015, FireEye da cdng bd mdt bdo cdo trang cd ten APT30. Bdo eao nay da tiet Id cae thdng tin vd boat dpng tinh bdo m ^ g ciia nhdm tin tae APT30, nham vdo cdc doanh nghidp, chinh phii vd ede nha bao d Ddng Nam A ttong sudt 10 nam. Phdn mlm xdm nhap cua nhdm nay cd ten Id Lecna, duge phat hien ttong 7% tdt cd cdc khdeh hang cua FireEye d Ddng Nam A vao nira dau nam 2015. Ngodi ra, FueEye da vd dang theo ddi hoat dpng eiia nhdm tin tae APT.NineBlog, dupe phdt hien Idn ddu vao ndm 2013. Nhdm ndy boat ddng tuong ddi lang le vd sir dung eac ki thuat xam nhap tinh vi. Dya tten ehiing eii thu thap duge d mdt sd cac tai lieu thi mdt trong nhiing mue tieu tin cdng cua nhdm nay la khdi chinh phu Ddng Nam A.

Chung da su dung giao thiic duge ma hod SSL de trdnh bi cde thilt bi bdo mat phat hien.

Them vdo dd, cae ma ddc dupe ttang bi ede ki thuat de rd tim sy hien dien cua cdc ling dung phan tich ma ddc, vd se thoat ra neu chiing bi phdt hien.

"APT khdng phdi la van de mdi nhung nd dang ngdy eang ] ttd thanh mdi quan tam Idn

ddi vdi cdc qude gia ASEAN", Kathy Zhou, Chuyen gia ICT - mang, thdng tin vd an ninh mang, tai Frost & Sullivan khu vyc chau A - Thai Binh Duong eho bilt. "Nhdm hacker khu ' vyc nhu APT 30 vd Hellsing ' dang y d nen tich eye ban trong

viec sir dung APT de khdi ddng ede cuOc tdn edng vdo chinh phii, ede nhdm ngoai giao vd cac td chire truyen thdng tai cdc qudc gia ASEAN. Ly do ehinh khien chiing thyc hien dieu nay Id de dat dupe quyen truy cap vao dir lieu bi mat".

Cac cudc tin edng APT tren dien rdng va nhiing hdu qua ciia hanh vi vi pham dii lieu dd dua ra bdo ddng do ddi vdi ede td chiie, doanh nghiep dang nam giii khdi lugng Idn ede thdng tin nhay cam, cd gid tri hay quyIn sd biiu tri me, "Bao cao APT mdi nhat eua chiing tdi ghi nhdn viec chap nhan ede gidi phdp APT ttong ASEAN dd tdng len rit nhilu ttong ndm 2014, vdi mire tang trudng 177,5% so vdi ciing ky nam ngoai". Theo bd Zhou, cdc doanh nghiep d Singapore, Malaysia va Thdi Lan dd di dau trong viec dp dung

8 yv B

8 i o 1 1

7 • •

0.

CONG NGHf Thong tin vS Truydn thong 14/2016 3 7

ede gidi phdp APT ttong nam 2014 do viee ndng cao nh^n thiic ve tdn edng ed ehu dieh APT. Tai Indonesia, Philippines va Viet Nam, vi?c trien khai cdc gidi phap nay vdn edn han che, do hdu het cdc doanh nghiep vdn thuc hien tiep edn thu ddng ddi vdi ede mdi de dpa kieu APT va viee uu tien giai phdp bao mat truyen thdng vdn d miic cao.

Tang cudng an mnh mang tal ASEAN: oa don luc Dh&i hanh ddng

Mit an toan thdng tin se din tdi thiet bi eiing nhu he thdng thdng tin ed the bi khdng che de thyc hien cac cudc tin cdng mang quy md Idn nhdm vdo mue tieu quan ttgng, hoac ddnh cdp ede thdng tin bi mat, nhay cam, hoac bi Igi dung de phat tan thdng tin ddc hai. Vi vdy, viec bdo ddm an todn thdng tin ehinh Id eo sd de thye hien bao ddm an ninh thdng tin, gdp phan bdo ddm qude phdng, an ninh dat nude. Do dd, vipc ban hanh eac quy dinh phdp luat, nham tao co sd d l thyc hien tdt cac hoat ddng bdo dam an toan thdng tin la rdt cdn thidt. Tuy nhien, theo mdt nghien cuu ciia Lien minh phdn mem doanh nghiep (BSA), viee xdy dyng cdc ehien luge an ninh mang qudc gia todn dien eung nhu thyc thi cdc khudn khd phdp

ly can thiet de ddm bdo an ninh vd bao ve co sd ha ting quan ttpng tai cac qudc gia ASEAN cdn eham vd chua diy du. Theo dd, BSA da tiln hdnh khao sat chien luge an ninh mang qude gia ciia 10 nirdc trong khu vye ehdu A - Thai Binh Duong, ttong dd cd bdn nude ASEAN la Singapore, Malaysia, Indonesia vd Viet Nam. Ket qua cho thdy cd nhung Id hdng ttong viee ddm bdo an ninh mang vd nhih^

CO hdi de eai thien ede he thdng nay, nham bdo vS, chdng lai, ngan ngira, giam thieu va ling pho doi vdi eae cudc tdn edng ttong khdng gian mang. Nhftng van de quan ttpng md ede qude gia can xem xet ttong viee phdt ttiln ehiln luge an ninh mang quoc gia todn dien vd ke hoaeh cu the dd Id tinh thuc tfi, sy linh hoat, cac riii ro va tdn ttgng sy rieng tu va ty do dan sy khde.

Simon PIFF, Phd chu tjeh phu ttach mdng ha tiif, doanh nghiep ciia IDC chau A - Thdi Binh Duong, cho bilt hien cdn thilu cac quy dinh luat phap vS an' ninh mang tai cac thi trudng ndy. "Khdng ed lu§E quan ly dir lieu thyc sy ed ;^ nghia vd hodn tok khdng ed ludt cdng khai ttong hau het cac thi trudnK yeu cdu ddm bao an todn dii li^u khdng dupe uu ti

3 g CONG NGHtniAng tin va Truydn thfing 14/2016

;ao trong chuong ttinh nghi sy ddi vdi idu h i t cac td chiic ASEAN nhu miie

;an thiet".

De ddi phd vdi tinh trang nay, Malaysia vd Singapore da triln khai cdc sang kiln hpfp tdc cdng - tu d l tan dung kmh nghidm ciia khu vyc tu nhdn ttong viec phdng ngira, phat hien, ung phd va gidm thilu sy cd an ninh mang. Ngugc lai, mdt sd qudc gia khae nhu Indonesia can phdi khai thac va tan dung tdt hon kiln thiic an ninh mang vd thye tiln ciia khu vye tu nhan.

Hien nay, hau het cac qudc gia ASEAN deu da thiet lap ddi phdn ling may tinh khan cap (cert) va trien khai cdc boat ddng lien quan, nham tang cudng khd nang bao mat m^ng.

Singapore da xay dyng quy hogch an ninh mang qudc gia 5 nam. Nam 2015, nude nay da thanh lap Co quan An ninh mang Singapore (CSA), hpp nhdt va phdi hgp nang lye an ninh mang cua nude nay ttong nhilu linh vyc khde nhau. Singapore hien eung la tru sd cho cac chuyen gia an ninh CNTT trong cac ca quan thyc thi phdp ludt vd khu vyc tu, nhiing ngudi ed nhiem vy giam sdt ede mdi de dga tiem dn xam nh^p vao Ddng Nam A.

Mae dii khdng cd mdt ehien lupe an ninh mang ddc lap nhu Singapore, nhimg Malaysia lai cd mdt bd cac ehinh sach va chiln luge ve an ninh mang. Chinh phii nude nay dang Idn k l hoaeh hoan chmh va cung cd bd chinh saeh ndy vao nam 2017. Trong khi dd, Indonesia vd Viet Nam vin trong giai doan diu phdt triln ehien luge an ninh mang qudc gia. Mdi ddy, tai Viet Nam, Luat An todn thdng tin da ehinh thiic duge thdng qua va cd hieu lye thi hanh tir ngdy 1/7/2016. Vi?c ban hdnh Luat

an toan thdng tin se gdp phin hodn thien ca sd phap ly ve an toan thdng tin;

phat huy ede ngudn luc ciia ddt nude de bdo ddm an todn thdng tin, phdt tnen ITnh vyc an toan thdng tin; bdo ve quyln vd lpi ich hgp phdp ciia td chirc, cd nhan tham gia hoat ddng an todn thdng tin;

day manh cdng tde giam sat, phdng, chdng nguy co mdt an todn thdng tin, dam bdo hieu qua edng tdc thye thi qudn ly nha nude; md rdng hpp tde qudc te ve an todn thdng tin.

Thdi gian tdi tinh hinh an ninh mang tai khu vyc ASEAN se phiic tap ban.

Do dd, can ttien khai ddng bd nhieu giai phdp nhu tang cudng truyin thdng ndng eao nhdn thiic eung nhu xay dyng hoan thien cdc quy dinh cua phap ludt, tang cudng hgp tac qudc te... ve an ninh mang. Cd nhu vdy, tinh hinh mit an todn, an ninh thdng tin tai khu vyc mdi ed thi gidm xudng. ©

Tai lieu tham khao LInfosecurity Magazine, 3/2016

2 http://www.vietnamasean.vn, http://

tapchiqptd.vn, httpV/iclnews.vn, http://

•www.sggp.org. vn

CONG NGHE Th6ng tin vd Tmy^nttifing 14/2016 3 9