Data security, cyber security: Moving from defense to proactive response

(Chinhphu.vn) - Faced with increasingly complex risks in cyberspace, Vietnam needs to shift from a passive defensive mindset to proactive early identification and timely response in planning cyber security and data security policies.

Comrade Pham Dai Duong, member of the Party Central Committee, Deputy Head of the Central Policy and Strategy Commission, spoke at the seminar - Photo: VGP

On the afternoon of September 25, in Hanoi, Nhan Dan Newspaper coordinated with the National Cyber ​​Security Association (NCA), the Central Policy and Strategy Committee and the Vietnam Academy of Science and Technology to organize a seminar on "Data security and network security in the era of national development" .

Data is a national asset, security is linked to digital sovereignty

Speaking at the seminar, Mr. Phan Van Hung, Deputy Editor-in-Chief of Nhan Dan Newspaper, emphasized that in the digital age, data has become a new resource. Data protection and network security are not only the responsibility of each country but also a common global challenge.

In the near future, Vietnam will host the signing ceremony of the Convention against Cybercrime, called the " Hanoi Convention", marking the adoption of the first legal document of the United Nations on criminal justice after 20 years, while affirming Vietnam's proactive role in the international arena.

From a policy-making perspective, Comrade Pham Dai Duong, member of the Party Central Committee and Deputy Head of the Central Policy and Strategy Committee, affirmed that data should be considered as “national assets”. Data security has the same meaning as protecting territorial sovereignty at sea and on land.

“Digital transformation is closely linked to many areas such as digital government, digital economy, etc. In which, data is a very important factor. The Central Government always attaches importance to protecting sovereignty in cyberspace, considering this a continuous and inseparable task in ensuring national security,” said Mr. Pham Dai Duong.

The Deputy Head of the Central Policy and Strategy Committee also emphasized that to ensure network security, it is necessary to shift from passive defensive thinking to proactive, positive thinking - early identification of risks, solution orientation, and at the same time combining technology, infrastructure, technical processes with a complete legal framework. In addition to current laws such as the Law on Cyber ​​Security and the Law on Personal Data Protection, in the coming time, the National Assembly will continue to perfect and supplement related laws to meet practical requirements.

Seminar "Data security and cyber security in the era of national growth" - Photo: VGP

From a professional perspective, Mr. Ngo Tuan Anh, Head of Data Security Department, National Data Association, warned that many data leaks and breaches come from basic errors such as weak passwords, default configurations or widespread storage.

“We imagine the data is in a 'house' but it is not locked carefully. With just a small loophole, the system can be accessed illegally just a few minutes after the service is put on the Internet,” said Mr. Ngo Tuan Anh.

According to him, three groups of solutions that need to be focused on are: Tightening security configuration before putting services on the Internet; managing, classifying and limiting unnecessary data storage; building a process for early detection, isolation and timely recovery when incidents occur. Safe backup is also a vital factor to minimize damage from ransomware attacks.

Lieutenant General Nguyen Minh Chinh, Permanent Vice President of the National Cyber ​​Security Association, pointed out many challenges. On the one hand, Vietnam is one of the countries suffering many cyber attacks, with the goal of stealing state secrets, destroying information systems, and extorting data. On the other hand, fake and toxic information also spreads rapidly thanks to new technology, disturbing public opinion and directly attacking ideological foundations.

Lieutenant General Nguyen Minh Chinh said that it is difficult to point out a single risk, because "any loophole in cyber security is dangerous, with unpredictable consequences". Besides external factors, our own internal factors also reveal many limitations such as an incomplete legal framework for new technologies such as artificial intelligence (AI), a fragmented investment technology system, lack of compatibility, thin human resources, fragmented coordination and especially a large dependence on foreign technology.

Prof. Dr. Tran Tuan Anh, Vice President of Vietnam Academy of Science and Technology

Towards a safe and resilient digital environment

From a research perspective, Prof. Dr. Tran Tuan Anh, Vice President of the Vietnam Academy of Science and Technology, proposed a data protection model based on domestic technology with the main pillars. First, building a domestic legal and normative foundation.

Second, ensure focus on developing local infrastructure and technology. Domestic cloud computing infrastructure, placing servers in Vietnam (encouraging the use of cloud services from domestic companies such as Viettel, VNPT, CMC, FPT instead of depending on AWS/Azure, ensuring citizen data is stored in Vietnam); end-to-end encryption standards and algorithms using cryptographic solutions researched and developed by the Cipher Committee/Institute of Information Technology; enhancing the ability to authenticate subjects through multi-factor authentication systems integrated with VNeID, citizen digital signatures...

From the perspective of a technology business, Mr. Nguyen Le Thanh, Founder and Executive Chairman of Verichains Company, shared his experience in handling many security incidents in Vietnam and internationally. He noted that attacks come not only from technical vulnerabilities but also from human factors and third parties.

“Users and administrators are increasingly becoming the targets of attackers. There are many cases of fraud in the form of recruitment, collaborators, etc. to install malware. In addition, many systems are infiltrated through service providers, which are difficult to fully control,” Mr. Thanh shared.

According to Mr. Thanh, in the context of increasingly professional cybercrime, instead of expecting the system to be absolutely safe, it is necessary to determine which are the most important "assets" to focus on protecting, minimizing damage if an incident occurs.

Thu Giang

Source: https://baochinhphu.vn/bao-mat-du-lieu-an-ninh-mang-chuyen-tu-phong-thu-sang-chu-dong-ung-pho-10225092518332063.htm