More than 40 security vulnerabilities discovered in cyber security exercise

According to information from the National Cyber ​​Security Association - NCA, the first practical exercise program of the National Cyber ​​Security Incident Response and Remediation Alliance was successfully held in Hanoi , bringing many impressive results.

According to statistics from the organizing committee, after 1 week of continuous 24/7 attack and defense, more than 40 vulnerability reports were sent to the organizing committee by the participating teams, many of which were considered "very valuable" to improve the defense capabilities of the target system's owner.

In particular, the process of finding errors and fixing vulnerabilities is carried out in real time, to ensure service security and avoid possible risks of exploitation.

Lieutenant Colonel Le Xuan Thuy - Director of National Cyber ​​Security Center.

Lieutenant Colonel Le Xuan Thuy - Director of the National Cyber ​​Security Center, Head of the Exercise Organizing Committee, assessed: “The exercise process shows the readiness of the engineers and experts in the alliance. This is a quality resource, with a high sense of responsibility, ready to contribute efforts, intelligence and experience to the common mission.

If gathered and united, they will form a powerful "army" capable of responding to and protecting the security and safety of key national information systems against cyber attacks, under the coordination of the state management agency, the Department of Cyber ​​Security and Prevention of High-Tech Crime - Ministry of Public Security ", emphasized Lieutenant Colonel Le Xuan Thuy.

Taking place from April 17 to April 23, the first exercise was jointly organized by MISA Company, the National Cyber ​​Security Association and the CYSEEX Information Security Alliance. The teams practiced in a combat format, divided into two groups: attack (Red Team) and defense (Blue Team).

The attackers' mission is to exploit system vulnerabilities without warning, 24 hours a day, while the defenders need to detect and prevent these attacks.

The selected target system is a real system, providing services to the outside.

Building a powerful "army" helps protect the safety of the country's key information systems.

According to the Organizing Committee, the highest goal of the exercise is for members to have the opportunity to improve their knowledge and experience in handling information security and safety incidents, thereby effectively serving their professional work and contributing to the overall development of society and the country.

Specific objectives include: Raising awareness and capacity in ensuring network security, especially in organizing and responding to incidents; Raising the spirit of sharing, ensuring good coordination in performing tasks; Training the ability to think like a hacker to deploy effective network security defense.

Mr. Vu Ngoc Son, Head of Technology Department, National Cyber ​​Security Association said: “The success of the first Exercise will be the premise for the Alliance to continue organizing a series of similar activities in the coming time, with increasingly higher scale and quality.

We expect to create a playground for participating teams to test and improve their defense and response capabilities in today's challenging digital environment," added a representative of the National Cyber ​​Security Association.

In the end, the Organizing Committee awarded 1 First Prize, 2 Second Prizes and 3 Third Prizes, with a total prize value of 100 million VND to the excellent teams.

Specifically, the First Prize went to the team from VietSunshine; the two teams from VNCS and BKAV won the Second Prize; the teams that won the Third Prize included the CYSEEX Information Security Alliance, MobiFone and CMC Cyber ​​Security.

Chi Hieu

Source: https://vtcnews.vn/hon-40-lo-hong-bao-mat-duoc-phat-hien-trong-dien-tap-thuc-chien-an-ninh-mang-ar942818.html