Quang Ngai "builds firewall" against malware, protects network information security

Faced with attacks by bad guys using malware to infect devices and take control of network information security, the Department of Information and Communications of Quang Ngai has deployed many solutions to protect network systems in state agencies.

Prevent multiple files from containing malicious code

Many solutions to prevent, prevent and promptly fix network security incidents against attacks by bad guys to ensure safety and protect data systems of agencies and units in the province have been implemented by the Department of Information and Communications of Quang Ngai recently.

Quảng Ngãi — Training for staff of departments and branches on malware defense when computer systems are infected with viruses.

According to the Department of Information and Communications of Quang Ngai, the centralized firewall monitoring system at the Provincial Data Center is connecting and sharing data from 39 information systems of units in the province and sharing data with the National Cyber Security Monitoring Center (NCSC) under the Department of Information Security, Ministry of Information and Communications .

To ensure network security at State agencies, the Department of Information and Communications recommends coordination, connection, and sharing according to regulations. The province's centralized monitoring system can now connect to information systems with firewall devices such as: sophos, fortigate, pfsense... and other firewall devices.

Up to now, in the province, there are about more than 4,500 workstations of 43 agencies and units in the province installed with centralized anti-malware software and automatically updated to the latest version. In the past time, the system has detected and processed 162,720 files containing malware on 3,306 workstations, with a suspected infection rate of about 80.95%.

In October alone, the Center promptly detected and handled a workstation connected to an IP with malicious code. Specifically, after the attack, the bad guys connected to malicious IPs and servers, taking control. Immediately after the detection, the Provincial Digital Transformation Center coordinated with the unit to isolate and handle the malicious code on the attacked computers.

Create a "playground" for staff to improve their anti-malware skills

To continue to maintain information security for information systems of State agencies in the province, the Department of Information and Communications of Quang Ngai continues to deploy and install anti-malware solutions in 2024 at agencies, units and localities in the province.

The province-wide centralized anti-malware platform was deployed from November 2023. After one year of implementation, it has been highly effective in ensuring information security for provincial state agencies. Contributing to improving the DTI ranking index of the province's information security category.

It is known that in order to improve the "defense" capability to protect workstations and servers from attacks by bad guys, the Department of Information and Communications has deployed the installation of anti-malware solutions in 2024 at 42 departments, branches, units and localities of the province.

Accordingly, 100% of workstations participate in exploiting and using the Provincial Administrative Procedure Information System at units and localities; Maintain continuous connection of the number of workstations installed to the Centralized Monitoring System at the Provincial Data Center to connect to the National Cyber Security Monitoring Center (NCSC).

In addition, to improve the capacity to prevent and combat malware, the Department of Information and Communications also organizes many playgrounds for officers and employees to practice real-life cyber security drills. In particular, there will be a cyber attack and defense team to respond to cyber security incidents practicing on 3 information systems of the province: System for managing cadres, civil servants, and public employees; System for managing and handling administrative violations; System for livestock and veterinary database.

Through the drills, the IT security teams of agencies and units are trained in advance with possible cyber attack scenarios to control risks, respond to incidents to ensure the information system operates stably, and recovers as quickly as possible when an incident occurs; thereby drawing experiences, lessons, and improving knowledge and skills to better serve the work of ensuring the security of information systems of agencies and units.

Deputy Director of the Department of Information and Communications Nguyen Quoc Huy Hoang said that currently, the network information security situation is becoming more and more complicated and difficult to control, with the number of attacks increasing, and the forms becoming more sophisticated and unpredictable, while the on-site human resources to respond when incidents occur are limited.

"As a State management agency in this field, I request that agencies and units pay attention to training and improving the professional skills of officers assigned to be in charge of information security of the unit, especially members of the unit's Incident Response Team to enhance the capacity of on-site forces," said Mr. Hoang.

Also according to Mr. Hoang, to ensure safety in cyberspace, units and localities need to continue to deploy the installation of the province's shared anti-malware software, Bkav Endpoint AI, or some other anti-malware software (prioritizing copyrighted software) to eliminate hidden malware in the system and connect to the centralized monitoring system at the provincial data center to connect to the National Cyber Security Monitoring Center.

Check the number of unconnected machines to reconnect and update the software. Upgrade to Windows 10 or later to receive operating system updates and the latest Microsoft security software updates.

Source: https://www.baogiaothong.vn/quang-ngai-xay-tuong-lua-chong-ma-doc-bao-ve-an-toan-thong-tin-mang-192241126181817521.htm