Information security in Vietnamese enterprises: Many vulnerabilities are easily compromised

Mr. Nguyen The Dong - Director of Athena Center for Rapid Response to Computer Problems in Ho Chi Minh City - said: Not long ago, a group of Northern Europeans investing in the South East region had to stop production machinery throughout 2 days. The day went on because the computer system was infected with trojans - a virus that stole information and could cripple the computer system.

Loose network system

The above-mentioned Nordic enterprises, although the computer system has been invested in a methodical manner, have encountered significant damage. For many small and medium enterprises in the country, the consequences will certainly be more unpredictable once the network is not well cared for. According to a survey of more than 415 enterprises in Ho Chi Minh City, Dong Nai and Binh Duong, conducted by Athens and Saigon Computer Times, many of these enterprises still use the common database and scattered information easily. lost and not updated synchronously. Many enterprises still do not have a system and policies to copy data (backup) in case of incidents. Although 87% of businesses surveyed have assigned people to manage the network system, of which only 36% of IT professionals. The number of people with international qualifications in network administration is less - only 18%. It is because of human resources on network governance that are thin and lack of expertise, so in many enterprises, security policies and regulations are also lacking. Specifically, there is little clear regulation for Internet users and IT equipment in the unit, or fake but not strictly implemented.

Survey results also showed that only 25% of businesses have decentralized, grouped users, created folders and shared network drives. But the number of enterprises with equipment to store information on the server and periodically implement the risk prevention is very small, only 15%. Although the computer system of 100% of enterprises has anti-virus software installed, only 19% of enterprises use automatic mode to check anti-virus software version when users log on to the network. The situation of using old anti-virus software, not updated, lack of basic solutions on anti-virus, computer worms, spyware, spam, web filtering . are quite popular in enterprises. The current. 8% of enterprises use firewall systems, 14% of enterprises use network monitoring tools but most of them use irregular and ineffective, have said lack of understanding and little interest from enterprises.

Exploding virus penetration

Mr. Pham Trong Diem - security expert of Nam Truong Son Company - said that the attack of the virus in the world today. Statistics from January 10, 2005, globally appeared nearly 2.6 million "children" of viruses, calculated every day with 11,500 "children", and every 7 seconds the computer systems worldwide have to deal with face with the entry of a virus "child". Spam and email attack methods are also popular. In 2005, the density of virus messages increased to a scale of 1/75. Hackers' attacks have increased 10 times compared to 10 years ago. Therefore, according to Mr. Diem, businesses need to chart the virus outbreak to build prevention plans for their computer system.

In Vietnam, in the framework of the above survey, up to 91% of enterprises are infected with viruses, trojans infecting computer systems, the form of virus attacks via email is even more serious - taking place for the computer system of 97% of businesses. In addition, businesses often encounter problems of hardware, software, databases, web and Internet, etc. According to Mr. Nguyen The Dong, the situation through the survey shows that enterprises still invest less. , or perfunctorily for computer system security, because of the risks and consequences of the incident. Mr. Pham Trong Diem said that the forms of virus attacks are increasingly diverse and sophisticated, so if the security of computer network information at enterprises is not professionalized and often upgraded, it will be difficult. avoid damaging attacks.