Cảnh giác phần mềm bảo mật giả mạo

<span class='text_page_counter'>(1)</span><div class='page_container' data-page=1>

<b>/\N TOAN BAO MAT </b>

<b>CANH GIAC PHAN MEM BAO MAT GIA MAO </b>

<b>Nguyin Cirdng </b>

Trong Bao cao ve Phan mem bao mat gia mao dua tren so lieu thu thap

du'dc trong 12 thang giai doan tii 7/2008 den 6/2009, Symantec da dua ra ket

loan: toi pham mang dang ngay cang sit dung nhting thir doan hii doa an ninh

tnic tuyin nham thuyet phiic ngUcJi diing mua phan mem bao mat gia mao

(rogue security software). V6i ten goi khac "scareware" (phan mem sd hai),

day la phan mem gia mao cua phan mem bao mat chinh thong. Nhiing ufng

dung gia mao nay chi mang lai rat it hoac v6 gia tri, va tham chi c6 the cai

dat ma doc hoac khien giam hieu nang bao mat tong the ctia may tinh.

D

e moi chai nhttng ngffdi dung

ngay thd ciii dat phan mem gia
mao cua chung, tdi pham mang
dat nhttng mau quang cao tren trang web
Je mdi chai nhflng nan nhan lo liing ve
cac mdi de dpa bao mat. Nhflng kieu
quang cao nay dac biet cdn dfla ra nhflng
canh bao gia mao nbu "Neu quang cao
nay nhap nbiiy. tbi may tinh cua ban cd
the dang gap rui ro hoac da bi lay nhiem",
dieu niiy thdi thuc ngfldi dung theo mgt
lien kel trong quang ciio Je quel miiy linh
ciia bg hoac tai phan mem ve Jc loai bo
mdi de dga dd. Theo ket qua nghien cuXi,
cd ldi 93% s5 ciii dat phan mem thugc lop
50 ciic vu Ifla phinh phan mem bao mat
gia mao lai lii do cbil y tai ve cua ngttdi

dung; den thang 6-2009, da phiil bien bdn
250 chfldng trinh phan mem bao mat gia
mao khac nhau.

Tdn ihal bfldc diiu lien quan Jen tien bac
ddi vdi nhttng ngfldi lai ciic san pham giii
mao niiy ve se viio khoang tfl 30 USD
den 100 USD. Tuy nhien. cac chi phi
lien quan tdi viec gianh lai thdng tin dinh
danh cua ai do cd the tdn kem hdn rat
nhieu. Khong chi nhflng chfldng trinh
bao mat gia mao niiy ltta lien cua ngfldi
dung, mil nhflng thong tin cii nhiin bay
vc the lin dung dfla ra trong qua trinh
mua phim mem cung co the Jfldc dung
de lien himh ltta dao liep theo. hoac bi
<i>ban iron ciic diin dim thi trffdng den. </i>
Viin de trd nen tdi le hdn. khi phiin mem

bao mat gia mao cdn cai Jat ma Joe khien
ngfldi dung gap rui ro bi cac moi Je dga
khac tan cdng. Ket qua lii. cai Jat cac
phan mem kieu niiy khien kha nang bao
mat cua he thdng kem Ji chfl khdng nhfl
ldi quang cad lii manh len. Vi du nhfl.
phan mem gia mao cd the httdng ngttdi
dung tat nhflng thiet lap bao mat bien c6,
Jong thdi Jiing ky phan mem "ma", hoac
ngiin chan ngfldi dung khong truy cap
Jifdc nhflng trang web bao mat cbinh

Ihdng sau khi cai Jat chung vao may.
Dieu niiy cung ddng nghia vdi viec khien
ngtfdi dung de dang bi tan cdng bdi cac
moi Je dga mil chinh cac phan mem gia
mao reu rao la se bao ve Jffdc.

<b>Nhung mau quang cao lira bjp </b>

Dii cd nhieu ciicb Je Ifla ngfldi dung tien
hanh lai phan mem bao mat gia mao ve,
vii nhieu trong so J6 dffa vao manh ldi
dung tiim ly lo ngai, hoac dufa vao kieu
ltta ky thuat lien quan tdi mang xa hgi.
Phan mem bao mat gia mao Jttdc quang
cao vdi nhieu binh thttc, gom ca tren trang
web chinh thong hoac co chtta ma Jgc
nhtt blogs, dien Jan, mang xa hgi, vii cac
trang khieu dam. Trong khi nhflng trang
web chinh thong khong thugc phe vdi
nhflng kieu ltta dao nay, thi hg lai co the
bi qua mat khi Jang quang cao ve nhflng
ttng dung gia mao nay. Nhflng trang web
c6 chtta phan mem bao mat gia mao cdn
CO the xuit hien d danh sach Jau lien
trong ciic bp tim kiem neu nhttng ke xau

tie dgng len ket qua tim kiem.

De tang tinb thuyet phuc khi ltta phinh
ngtfdi dung, nhuTig ke viet ra phan mem

bao mat gia mao da thiet ke chfldng trinh
cua chung sao cho khi xuat hien cimg tao
ciim giac tin tfldng cang tdt, biit cbtfdc y
bet kieu diing. hinh thflc cua nhttng
chfldng trinh bao mat chinh tbdng. Hdn
nfla, nhflng chfldng trinh niiy cdn Jtfdc
phat tan tren nhttng trang web cd ve nhtf
Jang tin cang khien ngfldi dung miic bay
de dimg Je tai chung ve. Thflc te mgt vai
trang web co ma dgc cdn dung cac djch
vu thanh loan Inrc tuyen de tien hanh giao
dich the tin dung, cdn nhflng trang khac
lai gtti thfl tra ldi tdi nan nhiin de xiic nhiin
viec mua ban da hoan thanh vdi ma so
pban mem vii ma sd dich vu khach hang.

<b>Nhirng trung gian phat tan phan mem </b>

<b>gia mao </b>

Toi pham mang dang kiem ldi kha tot ttt
md hinh kinh doanh tra tien-theo-cdng
viec (pay-for-performance) Jttdc to chttc
tinh vi, theo J6 chung trii cdng cho nhttng
ke ltta phinh dttdc ngttdi dung ciii dat
chttdng trinh bao mat ma. Trong ban
nghien cttu niiy, trang web phat tan phan
mem bao mat Jttng top 10 ve ban hang
TrafficConverter.biz Ja kiem Jttdc
khoang 23,000 USD mdi tuan trong sudt
1 nam giai Joan nghien cttu.

Nhttng kieu md hinh nay cung gidng nhtt
ciic chttdng trinh marketing dai ly Jang
kha pho bien cila nhieu nha ban le trttc
tuyen. Chttdng trinh marketing Jai ly lang
thttdng cho nhttng Jai ly hay thiinh vien
mdi khi cd mgt khach hoac trflc liep viio
trang web ciia nhii ban le trtfc tuyen do
nhttng nd Iflc marketing cua dai ly Jo
mang lai. Tbdng qua md hinh niiy, cac Jai
ly cila nhflng ke Ifla Jao phin mdm gia
mao cd the kiem Jffdc tfl 0.01 USD J6n
0.55 USD cbo mdi ciii dat thiinb cdng.

</div>
<span class='text_page_counter'>(2)</span><div class='page_container' data-page=2>

AN TOAN BAO MAT

Gia cao nhit Jfldc tra cho viec ngfldi dung cai
Jat phin mem ma nay la d cac qudc gia My,
thtt J6n la vfldng qudc Anh, Canada va Uc.
Mdt vai trang web phan phdi con cd chttdng
trinh khuySn khich cac Jai ly theo hinh thttc
thttdng them cho mpt sd Ittdng cai dat nhat
Jinh, cung nhtt cho diSm VIP va phan thttdng
nhtt cac tbiSt bi dien ttt, 5 to sang trpng.
D& ngan chan nhttng phan mem bao mat gia
mao kieu niiy, ngttdi dung ca nhan lan doanh
nghiep nen trien khai nhttng he thdng bao ve
mdi nhit trttdc nhttng rui ro bao mat. Dac biet,
ngttdi dung nen dau ttt vao trien khai chi mpt
phan mem bao mat tin cay, dttdc kiem chttng

cua nhttng nha cung cap giai phap bao mat
danh tiSng. Nhttng phfldng thttc hieu qua Je
bao ve va giam thieu rui ro dttdc de cap den
irong ban bao cao nay gdm c6:

- Khdng theo nhttng lien ket trong nhttng
email, bdi chung c6 the lien ket tdi nhttng trang
web ifla phinh hay cd mii Jgc. Thay vao dd,
hiiy go tay Jia chi URL cda mpt trang web
danh lieng Jttdc nhieu ngttdi biet Jen.
- Khdng bao gid xem, md hay chay nhttng tap
lin Jinh kem cua email trtt khi ban dang ddi tap
lin Jinh kem Jo va dttdc gtti ttt mpt nguon tin
cay, dii biet. Hay canh giac trffdc mpi email ma
khdng gtti trflc tiep vao bom thfl cila ban.
- Hay can trpng trfldc nhttng ctta sd pop-up vii
nhflng quang cao bat cbffdc nhflng kieu chinh
ihong. Ludn canh giac trfldc nhflng thdng bao
ldi bien ra trong trinh duyet web bdi do lii
nhttng ciich thttc mil nhttng ke cd phan mem
bao mat gia mao stt dung de Ifla phinh ngtfdi
diing liii ve vii ciii dat san pham gia mao cua
chung.

GS.TS David Wall, Trung tam nghien cttu toi
pham hgc. trffdng Jai hpc Leeds: "Nhflng ke
\ iel scareware cd the ltta dao hiing nghin ngfldi
dimg bd ra mot sd lien rat nhd cung mpt luc
nhffng tao ra mpt so tdng ldi nhuan khdng Id.
Kieu Ifla Jilo nay van rat hieu qua bdi pban

mem bao mat gia mao van Ifla Jfldc ngffdi dung
lin rang hp Jang gap phai mdi Je dpa tttc thi.
mil chi cd phiin mem cua chung mdi xtt ly
Jifde. Nhtfng cudi cung thi dd lai la trd bip
bdm. Tdi khuyen ngffdi dung Internet nen can
irgng khi trffc tuyen vii chi tai ve nhflng gi cd
nsiudn diina lin cav "•

<b>Ngay An toan thong tin tai Ha Noi </b>

Ngiiy 24/11/2009 tai Ha Npi Ja diin
ra "Ngay an toiin thong tin Viet nam
2009". Day la boat dpng thfldng nien
do Hiep hpi An loan thong tin Viet
Nam (VNISA) va Trung tam flng cttu
khan cap may tinh Viet Nam
(VNCERT) ddng td chttc, dfldi stt bao
trd cua Bp Thong tin - Truyen thong.
Stt kien Ja thu hut gin 1.000 Ittdt
ngttdi tham dtt.

Tai Jay. ciic van Je ve an loan thong
tin vii nhttng stt kien thdi gian qua Ja
dttdc cac chuyen gia Je cap Jen. Mdi
Jay. chung ta Ja chung kien hang loat
cac stt kien ndng lien quan Jen an toim
thong tin (ATTT) nhff: Hacker tan
cdng he thong website, lam te liet
mang thdng lin cua Chinh phu My vii
Chinh phil Him Quoc. Himg loat ngiin

hang ldn tren the gidi bi mat cap tien
qua mang, hay viec phat hien 16 hdng
ldn tren he thong DNS... Dieu niiy cho
thay. stt bung no cda Intemet, cila
thffdng mai Jien tff ben canh viec tao ra
nhifng cd hpi ldn la nhttng nguy cd, rui
ro cho nen kinh te vii xa hpi hien Jai.
Cac van de ve tmy cap bat hdp phap.
virus, ro ri thdng tin, 16 h6ng tren he
th6ng... Ja trd tbiinh mdi lo ngai cho
cac nha quan ly Jieu hanh d bat ky
qu6c gia nao tfl cac cd quan, bp, nganh
Jen tUTig doanh nghiep, ddn vi va cac
cii nhan. Vi vay, van de bao mat va
ATTT trd thimh nhu cau cap thiet cua
mpi tang ldp trong xa hpi. Viec cung
nhau ngdi lai biin bac, dfla ra cac
khuyen nghi Jdi vdi chinb sach quan
ly \T mo. cac giai phap cu the lii Jdi hdi
cap thiet cua xahpi.

Vdi chu Je "Bao ve tiii nguyen th6ng
tin hom nay vi ngiiy mai phat trien" vdi
muc tieu tad ra m6t dien dim chung

cho cac 15 chttc. doanh nghiep, cac
chuyen gia trong linh vflc ATTT cila
Viet Nam va quoc te. Tai day, cac ben
tham gia c6 dip trao ddi vdi lanh dao
cac Bp. nganh Hen quan Je chia se

nhan thttc. trach nhiem, ttt duy trong
viec hoach Jinh chinb sach tam vT mo,
cac giai phap cu the nham lao Jieu kien
thuan ldi cbo viec phat trien ttng dung
ATTT, thuc Jay viec phat trien san
pham. cdng nghe mdi. Thdng qua ciic
boat dpng cua Ngay ATTT, ngtfdi
dung CO the tiep nhan nhttng kinh
nghiem quy bau cua cac to chttc, doanh
nghiep ntfdc ngoai. Vdi be day kinh
nghiem trong linh vflc ATTT, cac td
chttc niiy se chia se cac biii hpc thiinh
cdng cung nhtf that bai, giup chung ta
cd dtfdc cai nhin dung dan hdn ve
ATTT tren thS gidi.

Npi dung cua hpi thao xoay quanh hai
npi dung chinh: 1- An toiin thong tin
trong cac he thong lai chinh ngan
himg; 2-An toan thong tin cho mang
vien thong va thao luan phong chong
vims tin hpc. Tai day cung co cac bai
tham luan quan trpng cila cac hang
chuyen ve ATTT trong nfldc vii qudc
te nhfl Symantec, Checkpoint,
Mobi-Fone. Song song vdi buoi hpi thao lii
gidi thieu, trinh dien cac san phiim,
cdng nghe bao mat tien tien nhat thong
qua cac gian bang trien lam cila cac
hang bao mat hang Jau the gidi nhfl:

cac giai phap ve tfldng Ifla, chdng
vims, xac thflc. the thong minh...
Diem khac biet cua hgi thao nam nay
la CO them pban thao luan ky thuat gifla
cac nhii cung cap phan mem phdng
chdng vims, nham giup ngfldi dung c6
Jfldc stf Iffa chgn dung Jan dffa tren cac
tieu chi Janh gia do cac chuyen gia co
uy tin Jtfa ra. Ngoiii ra, cung trong
khudn kho sff kien. ban to chttc cdn
trien khai nhieu boat Jong khac nhiim
nang cao nhan thttc ve ATTT trong xii
hgi.

</div>

<!--links-->