VNISA - Ky yeu ngay ATTT 2009.pdf

Ngy ATTT Vit Nam 2009 TP.HCM 18/11/2009 1

MC LC TH CHO MNG ....................................................................................................................................................... 3 PHN 1: NI DUNG ...................................................................................................................................................... 4

CHNG TRNH HI THO .................................................................................................................................... 4 HIN TRNG V ATTT KHU VC PHA NAM ......................................................................................................... 6 CNG TC M BO AN TON AN NINH THNG TIN CHO CC C QUAN NH NC TRN A BN THNH PH ........................................................................................................................................................... 17 BO CO CA ORACLE ........................................................................................................................................ 21 C S H TNG NNG NG BO V TI SN DOANH NGHIP .................................................................. 35 TNG QUAN CISCO SAFE: KIN TRC AN NINH MNG TH H MI C KIM CHNG TRONG THC T ................................................................................................................................................................ 36 H THNG QUN L ATTT THEO ISO 27001:2005 CCH TIP CN V P DNG THC T ........................ 52

SESSION 1: ATTT MNG V H THNG ................................................................................................................. 65 GII PHP CHNG THT THOT D LIU CHO DOANH NGHIP ................................................................... 66 M BO TNH LIN TC CA DOANH NGHIP V KHI PHC SAU THM HA ........................................ 83

SESSION 2: O TO V CHUN HA TRONG ATTT ......................................................................................... 97 O TO V CHUN HA ATTT .......................................................................................................................... 98 NH GI TI SN H THNG THNG TIN ....................................................................................................... 105 NH GI NGUY C ATTT ................................................................................................................................. 111 CON NG TR THNH CHUYN VIN AN NINH MNG............................................................................. 119

SESSION 3: ATTT TRONG THNG MI IN T ............................................................................................. 125

CNG NGH XC THC HIN I DA TRN SMARTCARD V KT HP VI BIOMETRICS .................. 126 PHNG TRNH R I RO CHO MY CH W EB V I MICROSOFT SYSTEM CENTER ............ 139

PHN 2: THNG TIN NH TI TR ....................................................................................................................... 153 1. Oracle ........................................................................................................................................................... 153 2. IBM Vietnam ................................................................................................................................................. 155

3. HP ................................................................................................................................................................. 157

4. Cisco ............................................................................................................................................................. 159 5. Microsoft ....................................................................................................................................................... 163

6. BUREAU VERITAS....................................................................................................................................... 164 7. TRUSTBank .................................................................................................................................................. 168 8. Secude .......................................................................................................................................................... 171 9. Kaspersky ..................................................................................................................................................... 174

10. Astaro ........................................................................................................................................................... 175

11. Khu CNPM i hc quc gia TP.HCM.......................................................................................................... 176 PHN 3: THNG TIN N V T CHC V HI VIN ......................................................................................... 177

1. S THNG TIN V TRUYN THNG TP. H CH MINH .......................................................................... 177 2. HIP HI ATTT VIT NAM v CHI HI ATTT PHA NAM ........................................................................... 178 3. HPT............................................................................................................................................................... 181

4. Misoft ............................................................................................................................................................ 184

5. Athena .......................................................................................................................................................... 186

6. Mt Bo ........................................................................................................................................................ 188


7. VIETPACE .................................................................................................................................................... 189 8. VIETUNION CORP ....................................................................................................................................... 192 9. NTS Group .................................................................................................................................................... 194

PH LC: BO CO CHUYN CA CHI HI NM 2009


TH CHO MNG (TS. Nguyn Duy Ngc, Ch tch Hip hi VNISA)

Ngy ATTT ln th 2 ti Thnh ph H Ch Minh do s Thng tin Truyn thng Thnh ph phi hp vi Chi hi VNISA pha Nam t chc l mt trong nhng hot ng quan trng trong khun kh s kin thng nin tm quc gia. Ngy ATTT Vit Nam do Hip hi ATTT Vit Nam (VNISA) phi hp vi Trung tm ng cu khn cp my tnh Vit Nam (VNCERT) t chc di s bo tr ca B Thng tin v Truyn thng.

Ngy ATTT Vit Nam ln th nht nm 2008 chuyn n ton x hi v cng ng cng ngh thng tin mt thng ip mang tnh ku gi chung tay xy dng mt th gii s an ton. Nm 2009, mt nm m nn kinh t th gii v khu vc chao o v cn bo suy thoi, kinh t Vit Nam cng v th m chu nh hng khng nh. Cc thng tin v s c mt ATTT ti Vit Nam cng xut hin ngy cng nhiu trn cc phng tin thng tin v truyn thng. Cng chnh v vy m ch ca s kin thng nin Ngy ATTT Vit Nam nm nay l Bo v ti nguyn thng tin hm nay v ngy mai pht trin.

Trung thnh vi mc ch, tn ch cao c ca Hip hi l hng n vic bo v ATTT cho cng ng doanh nghip v x hi. V vy s kin thng nin ngy ATTT Vit Nam nm nay cng s l dp th hin s gn kt gia nh nc, x hi v doanh nghip trong lnh vc ATTT. ng thi cng l c hi cng ng cc doanh nghip, c nhn, t chc tip cn, chia s thng tin, kin thc, kinh nghim; trnh din gii thiu nhng cng c gii php, sn phm mi nht v ATTT.

Ban Chp hnh Hip hi ATTT (VNISA) tin tng rng: Pht huy nhng thng li, k tha nhng kinh nghim qu bu ca ngy ATTT Vit Nam ln th nht, ngy ATTT Vit Nam ln th 2 ti thnh ph H Ch Minh nm nay cng vi chui cc hot ng trong khun kh s kin thng nin ang si ni din ra trong c nc s c t chc long trng, thit thc, thnh cng v thc s tr thnh mt ngy hi ca cng ng cng ngh thng tin ni chung v nhng ngi nghin cu, ng dng, pht trin ATTT ni ring. Thng qua gp phn xy dng Hip hi ATTT Vit Nam ngy cng vng mnh.

T/M Ban Chp hnh

CH TCH HIP HI

TS. NGUYN DUY NGC


PHN 1: NI DUNG

CHNG TRNH HI THO STT Tn ch Din gi Thi gian

n Khch 08h00-08h30

1 Pht biu khai mc ng L Mnh H, Gim c S TT& TT TP. HCM 08h30-08h35

2 Tng quan tnh hnh ATTT khu vc pha nam

ng Ng Vi ng, ch tch chi hi VNISA khu vc pha nam, tng gim c cng ty HPT

08h35-08h45

3 ATTT c s d liu ng Bnh, Technology Senior Solution Consultant, Oracle 08h45-09h15

4 C s h tng nng ng bo v ti sn doanh nghip i din cng ty IBM 09h15-09h35

5 Tng quan Cisco SAFE: Kin trc an ninh mng th h mi c kim chng trong thc t

ng Phan Thanh Sn, Gim c Cng ngh Cng ty Cisco Systems Vit nam 09h35-09h55

6 H thng Qun l ATTT (ISMS) theo ISO 27001:2005 - Cch tip cn & p dng thc t

ng Trnh Tun Dng, Gim c kim nh cng ty BVQI 09h55-10h10

7 Ta m v ATTT Din gi, chuyn gia ATTT 10h10-10h45

Ngh gii lao 10h45-11h00

Session 1: ATTT mng v h thng

Ngi iu phi: ng Phng Hi, trng ban ATTT mng v h thng, chi hi VNISA pha Nam.

11h00-12h30

1 Gii php chng tht thot d liu cho doanh nghip

ng Nguyn Thnh Nam, chuyn gia bo mt cng ty HPT

2 m bo tnh lin tc ca doanh ngip v khi phc sau thm ha

ng Ngc Huy, chuyn gia bo mt cng ty FPT

3 Tho lun + Bc thm trng thng

Session 2: o to v Chun ha trong ATTT

Ngi iu phi: TS. Trnh Ngc Minh, Khu CNPM HQG-HCM 11h00-12h30

1 nh gi ti sn h thng thng tin ng Dng Ngc Thi, CSO Trng phng ATTT - Ngn hng ng


2 nh gi nguy c ATTT ng ng Hong Minh, Senior IT Manager - GLOBAL CYBERSOFT (VN) JSC.

3 Con ng tr thnh chuyn vin an ninh mng. Th.S S Tam Nguyn, Ging vin h thng Cisco (CCSI) Saigon CTT.


Session 3: ATTT trong Thng Mi in T

Ngi iu phi: TS. V Vn Khang, Ph Tng Gim c Ngn Hng Vit 11h00-12h30

1 Cng ngh xc thc hin i ng Nguyn Hu Dng, gim c cng ty Secude Vit Nam

2 Phng trnh ri ro cho my ch web vi Microsoft system center.

ng. V Sn, chuyn gia k thut Microsoft



HIN TRNG V ATTT KHU VC PHA NAM (ng Ng Vi ng, Ch tch Chi hi VNISA khu vc pha Nam, Tng Gim c cng ty HPT)

Tip ni s kin ngy ATTT c t chc thnh cng vo ngy 18/11/2008, Chi hi ATTT khu vc pha Nam t chc ngy ATTT ln th 2 vo ngy 18/11/2009. Nh thng l, trc ngy ATTT, Chi hi ATTT tin hnh kho st thc trng ng dng trin khai ATTT ti cc c quan doanh nghip trn a bn TP. HCM v cc tnh thnh thuc khu vc pha Nam. Bn bo co ny im qua mt s s kin ni bt v tnh hnh ATTT trn th gii ni chung v phn tch tnh hnh thc hin ATTT ti Vit Nam ni ring, ng thi xut mt s kin ngh v ATTT i vi cc doanh nghip v c quan qun l nh nc.

Bo co bao gm cc phn chnh:

1. Xu hng v ATTT trn th gii v Vit Nam nm 2009 2. ATTT ti Vit Nam, nhng cuc tn cng v thit hi trong nm 2009 3. Kt qu kho st tnh trng ATTT ti Tp. HCM v khu vc pha Nam nm 2009 v mt s nhn

nh nh gi 4. Cc gii php, cng ngh v ng dng ATTT hin c ti Vit Nam 5. Ngun nhn lc v o to ATTT ti khu vc pha Nam 6. Cng tc truyn thng, tuyn truyn v ATTT 7. Cc quy nh, lut l v ATTT 8. Cc c quan qun l nh nc v bo v php lut trong cng tc phng chng ti phm cng

ngh cao 9. Chi hi ATTT pha Nam v cc doanh nghip cung cp gii php, dch v ATTT 10. Kt lun, kin ngh

1. Xu hng v ATTT trn th gii v Vit Nam nm 2009

Nm 2009 gn i qua vi du n ca s nh hng t cuc khng hong suy thoi ton cu, tc ng trc din n hu nh tt c cc hot ng kinh t x hi. Tuy nhin, ngnh ATTT c nh gi l ngnh min nhim yu t suy thoi. Thm ch theo nh gi t mt s t chc, chi ph u t v mi quan tm n ATTT ca mt s cng ty i ngc chiu suy thoi v c gia tng. S d c s li ngc dng ny l do i vi nhiu cng ty trn th gii, ATTT l mt thnh phn ct li cht ch khng th thiu c cho tt c nhng hot ng kinh doanh hin ti, cng nh cho nhng hot ng ci thin hiu qu kinh doanh, cn thit cho s sng cn ca cng ty trong thi k khng hong.

Mc d u t v chi ph cho ngnh ATTT tip tc gia tng, cc cuc tn cng ATTT vn lin tc xy ra v ngy cng phc tp tinh xo hn. in hnh l s kin hacker n cp hng triu th tn dng t cc cng ty ti chnh, thanh ton in t vo thng 1 nm 2009. V pha ngi dng, trong nm 2009 xut hin lin tc cc m c malware mi li dng cc l hng ca h iu hnh v ng dng tn cng n cp d liu, gi spam... Tip phi k n s c tn cng t chi dch v vo cc trang Web chnh ph ca M v Hn Quc vo thng 7/2009. iu ny cho thy vn ATTT tr thnh mi nguy c e da an ninh ca mi quc gia.

Theo cc chuyn gia, xu hng ATTT nm 2009 c th k n:

ATTT cho my trm (end point security) tip tc l im nng. Vi s a dng ha ca cc thit b u cui (my tnh bn, in thoi thng minh, laptop, netbook...) dn n nguy c hacker tn cng trc tip vo my ngi dng n cp d liu bng cc phn mm m c malware. mt trn phng th, cc gii php chng virus truyn thng dn tin ha kt hp nhiu chc nng nh chng virus, spyware, spam, malware, tng la, m ha cng, chng tht thot d liu.


ATTT cho cc lnh vc mi nh in ton m my, o ha. y l nhng xu hng mi ca ngnh CNTT v ATTT tip tc l mi quan tm hng u ca cc cng ty khi trin khai cc dch v trn.

Vi s gia tng cp s nhn v s lng ngi s dng, mng x hi tip tc tr thnh tiu im ca cc cuc tn cng ATTT. in hnh l cc cuc tn cng vo cc trang mng x hi ph bin nh twitter, myspace, facebook gn y.

ATTT trong cc thit b di ng. L h qu tt yu ca s bng n cc thit b di ng thng minh c chc nng nh mt my tnh c lp. Cc tn cng vo thit b di ng ang c chiu hng ngy cng gia tng.

Xu hng tn cng Web li dng cc l hng Web truyn thng, cng nh cc l hng Web 2.0. xut hin nhng cuc tn cng Web nghim trng li dng nhng l hng Web tng chng nh li thi nh tn cng SQL injection gy hu qu mt cp hng triu th tn dng ti mt cng ty ti chnh.

Tn cng ni mng xut pht t cc nhn vin ni b vn tip tc gia tng v l mt trong nhng mng cn s quan tm c bit trong chin lc xy dng ATTT tng th.

S gia tng cc n lc phi hp a quc gia trong mt trn phng chng ti phm an ninh mng. ATTT ngy nay tr thnh vn ton cu v cn s cng tc phi hp gia cc t chc c thm quyn t mi quc gia c th gii quyt trit .

Bo v thng tin ngy nay chnh l bo v ti sn c nhn, ti sn doanh nghip, ti sn quc gia v cao hn c l bo v ti sn ca nhn loi.

2. ATTT ti Vit Nam, nhng cuc tn cng v thit hi trong nm 2009

Vit Nam, s kin Vit Nam ng u danh sch cc nc gi mo click do t chc Anchor Intelligence cng b ging ln hi chung cnh bo. iu ny cho thy tnh hnh ATTT ti Vit Nam vn cn yu km v nh hng rt ln n nn kinh t, cng nh hnh nh v uy tn ca Quc gia trong lnh vc thng mi in t. ATTT tr thnh yu t sng cn bo v s pht trin bn vng ngy mai ca nn kinh t ngy cng ph thuc vo thng tin. y cng l thng ip m ngy hi ATTT nm 2009 vi ch Bo v ti nguyn thng tin hm nay v ngy mai pht trin mun gi gm.

Tnh hnh ng dng ATTT ti Vit Nam vn cha thc s mnh c th ngn nga v chng li cc cuc tn cng. c nhiu Website ca t chc, doanh nghip v thm ch ca cc c quan qun l nh nc b xm nhp hacker ci t m c v nm trong danh sch en cnh bo truy cp ca Google, Websense.

Trong nm 2009, xut hin nhiu s c ATTT lin quan n mi trng in thoi di ng. Vi s lng hn 100 triu thu bao v s tng trng mnh m v s lng cc in thoi thng minh, bo mt trn in thoi di ng tr thnh ch nng ti Vit Nam. xut hin cc cuc tn cng gi mo tin nhn SMS, ci m c, phn mm gin ip trn my in thoi di ng.

Vi s pht trin mnh m ca dch v giao dch trc tuyn, c bit l trong mng chng khon, ngn hng, chng ta ang ng trc nguy c tn cng t cc tin tc c mc tiu trc li r rng. Trong nm 2009 xut hin mt s s kin hacker tn cng trc li vo dch v trc tuyn b pht hin v x l bi c quan qun l php lut. iu ny cho thy s gia tng v mc tinh vi v phc tp ca cc cuc tn cng. Hacker hin nay khng n thun ch tn cng nhm mc ch ni ting c nhn m c mc tiu trc li r rng.

3. Kt qu kho st tnh trng ATTT v mt s nhn nh nh gi

Phng php kho st

Theo thng l hng nm, trc ngy ATTT, Hip hi ATTT VNISA tin hnh kho st tnh trng ATTT da trn mt bn cu hi thm d v ATTT gi cho cc doanh nghip, c quan c trin khai ng dng CNTT. Bn cu hi c xy dng trn nhng yu cu v chun ha v ATTT, c tham kho cch thc iu tra thm d ca cc t chc chuyn nghip v ATTT quc t.


Mc ch ca cuc iu tra thm d l hng n kt qu phn nh nhn thc ca ngi s dng CTTT v ATTT. Chng ti khng t mc tiu a ra nhng con s tuyt i song nhng d liu thu thp c phn no ni ln bc tranh v mc trin khai cc ng dng ATTT v nhn thc v ATTT ca cc n v tham gia kho st. Trong qu trnh i kho st, cc chuyn gia ATTT ca cc thnh vin chi hi ATTT pha Nam tch cc tip cn v trao i trc tip vi nhiu doanh nghip hot ng ti TP. HCM v mt s tnh pha Nam. Trong s gn 1000 phiu iu tra pht ra ch c hn 200 doanh nghip tham gia tr li cc cu hi iu tra.

Sau y l kt qu iu tra:

i tng kho st:

i tng kho st ch yu l cc doanh nghip ti khu vc pha Nam, ang ng dng CNTT vo cc hot ng sn xut kinh doanh. i tng c phng vn l cc Gim c CNTT (CIO), cn b qun l h thng ATTT, chuyn gia qun tr mng.

Phn loi cc t chc doanh nghip c kho st:

Loi doanh nghip

T l

T chc Hnh chnh s nghip trc thuc Trung ng 8.2 %

T chc Hnh chnh s nghip trc thuc a phng 11.6%

Doanh nghip nh nc 9.5%

Doanh nghip ngoi quc doanh 22.4%

Doanh nghip nc ngoi, lin doanh, c vn nc ngoi 14.7%

T chc phi chnh ph 1.7%

Khc 31.9%

Hin trng kt ni mng:

- 42% doanh nghip c kho st c h thng mng tng th, bao gm kt ni LAN, WAN, v ng truyn Internet. Con s ny tng ng vi kt qu kho st nm 2008.

- 72% doanh nghip c mng khng dy ( so vi 57% nm 2008), trong c 48% doanh nghip ch s dng mng khng dy cho nhn vin ni b v c 24% doanh nghip dng chung mng khng dy cho nhn vin v khch. T l ny nm 2008 l 45% - 12%.

- 87% doanh nghip s dng my ch Windows Server, ch c 8.2% doanh nghip c kho st s dng my ch Linux. Cc con s thng k nm 2008 l 83% - 10%.

Mc sn sng:

- 47% doanh nghip gn trch nhim ATTT n nhn vin chuyn trch (58% - 2008) - 100% doanh nghip c s dng phn mm Anti-Virus (20% - 2008) - Ch c 10% doanh nghip c kho st khng s dng tng la firewall (40% - 2008) - 50% doanh nghip hin khng c quy trnh x l s c ATTT (70% - 2008) - 74% doanh nghip c hi hin khng c chnh sch ATTT (85% - 2008) - 59% doanh nghip d tnh s tng ngn sch u t ATTT (74% - 2008) - 35% doanh nghip a ra mc t l u t an ninh mng trong tng ngn sch CNTT l 5%, 26%

doanh nghip a ra mc 5%-10% (36% - 32% nm 2008) - 50% danh nghip hin khng c qu d phng cho cc ri ro an ninh mng


Pht hin v x l tn cng an ninh mng

Tnh t thng 1/2009:

- 34% doanh nghip tha nhn pht hin s c tn cng an ninh mng (28% nm 2008) - 38% doanh nghip khng h bit r h thng mng ca mnh c b tn cng hay khng (26%

nm 2008) - Trong cc tn cng an ninh mng pht hin c: 43% cc tn cng do Virus, 65% l do m c

hi v su Internet (40%, 60% - 2008). - 25% doanh nghip c hi phn hi l khng hiu r c ng c ng sau cc cuc tn

cng an ninh mng. (25% - 2008). - 45% doanh nghip khng c h thng an ninh mng c kh nng ghi nhn c cc tn cng

(55% - 2008). - 68% doanh ngip khng th c lng c mc thit hi ca cc tn cng an ninh mng.

(67% - 2008) - 53% doanh nghip c tnh mc thit hi ln nht ca cc s c an ninh mng l do Virus

(80% - 2008) X l v tng thut s c

- Ch c 10% doanh nghip sn sng bo cho c quan php lut khi c s c an ninh mng (5% - 2008)

- 60% doanh nghip tr li l do chnh ca vic e ngi lin lc vi c quan php lut l do tm l s nh hng n hnh nh doanh nghip (50% - 2008)

Nhn xt

Qua kt qu thu c t cuc kho st, chng ti nhn thy:

Vn nhn thc v ATTT cha c quan tm ng mc. Kt qu thng k cho thy 80% cc s c v ATTT do yu t con ngi nhng tht ng tic khng c thng k no cho thy vic u t nng cao nhn thc cho nhn vin v ATTT trong doanh nghip c ch trng thc hin.

Tnh trng ATTT ti cc doanh nghip pha Nam hin ang mc di trung bnh do thc trng u t vo h thng phng th an ninh mng cn rt yu. Tuy nhin c du hiu kh quan cho thy mc nhn thc ATTT ti cc doanh nghip ang tng dn i i vi vic d bo tng ngn sch cho cc d n ATTT.

T l doanh nghip xy dng chnh sch ATTT mc thp, iu ny th hin s thiu kin thc ca doanh nghip v vic xy dng h thng ATTT tng th. i i vi s thiu vng ca vic cam kt xy dng h thng ATTT t cc cp lnh o.

Cc doanh nghip hin ch ch trng u t vo thit b v phn mm bo mt, rt t doanh nghip hiu c tm quan trng ca vic xy dng qui trnh ATTT, h thng qun l ATTT tng th theo chun ISO-17799.

T l doanh nghip c h thng anti-virus c bn quyn cn thp mc d theo thng k th gn 100% doanh nghip dng phn mm anti-virus. a s cc doanh nghip vn s dng h thng anti-virus khng c bn quyn hp php.

Phn ln cc s c an ninh mng pht hin c u lin quan n cc s c anti-virus v web. L nhng s c c th c pht hin d dng. C th cn tim n nhng tn cng ni mng m doanh nghip hin cha quan tm ng mc. V l do nhy cm, rt kh thng k c s lng thc t cc tn cng ni mng ny. y l mi nguy c tim n rt ng quan tm.

Doanh nghip ang gp nhiu kh khn trong vn pht hin v x l s c ATTT. Nguyn nhn chnh l vic thiu u t cc thit b c kh nng pht hin, ghi nhn s c ATTT. i i vi s thiu vng ca cc quy trnh th tc x l s c, v tm l e ngi lin h vi c quan lut php.


Thiu trm trng ngun nhn lc bo mt cho t chc v doanh nghip. Rt t t chc c nhn vin qun tr bo mt thng tin chuyn trch hay gim c, trng phng bo mt (Security manager).

Cng tc o to ngun nhn lc ATTT cha c cc t chc, doanh nghip nh gi ng mc.

4. Cc gii php, cng ngh v ng dng ATTT hin c ti Vit Nam

Hin nay trn th trng Vit Nam ng dng nhiu gii php ATTT t nhiu hng bo mt quc t c tn tui ln cc nh cung cp ni a. Di y l mt s gii php v cng ngh ni bt:

Phn Loi Chc Nng Nh sn xut v cng ty phn phi ti Vit Nam

End Point Security (anti-virus) Phng chng Virus

Trend Micro(Misoft). Kaspersky (NTS), Mcafee (Mi2), Symantec (FPT, Ingram Micro), BKAV, Bitdefender (VIAMI), Kingsoft Anti-Virus (Quang Minh DEC), Sophos (MTech)

End Point Security multi-vector: anti-virus, anti-malware, anti-spam, url-filtering)

Phng chng cc tn cng do m c

Trend Micro(Misoft). Kaspersky (NTS), Mcafee (Mi2), Symantec (FPT, Ingram Micro).

End Point Security: M ha d liu M ha d liu cng.

Check Point (Misoft) Entrust (Misoft) PGP (MTech)

End Point Security: Chng tht thot d liu

Phng nga cc nguy c tht thot d liu my trm

Check Point (Misoft) Mcafee (Mi2) Trend Micro (Misoft) Patchlink Lumension (MTech)

End Point Security: Kim sot mng NAC

Kim sot truy cp mng bng xc thc lp 2.

Cisco (Cisco Vietnam) Symantec (Symantec Vietnam) Juniper (J-Protect)

Phng chng tht thot d liu (DLP)

Chng tht thot d liu qua cc giao thc mng.

Websense (Misoft) Symantec (Symantec Vietnam)

Tng la/ mng ring o Enterprise

Phng chng cc tn cng mng v h thng cho mi trng Enterprise

Check Point (Misoft) Cisco (Cisco Vietnam) Juniper (J-Protect)

Tng la mng UTM Phng chng cc ri ro dnh cho doanh nghip SMB

Check Point (Misoft) Cisco (Cisco Vietnam) Juniper (J-Protect)


Fortinet (M-Tech) Cyberoam (InNet) Astaro (NTS)

H thng phng chng Virus Gateway (Network Virus Wall)

Lc virus, m c v ngn nga ly lan gia cc vng mng.

Trend Micro (Misoft) Mcafee (Mi2)

Tng la chuyn dng Web Phng chng cc tn cng tng Web

Barracuda (Misoft) Imperva (Misoft)

Tng la chuyn dng database

Phng chng cc tn cng c s d liu Imperva (Misoft)

H thng pht hin v phng chng xm nhp IDS/IPS

Pht hin v phng chng cc nguy c xm nhp h thng

IBM ISS (Misoft) Tipping Point (MTech) SourceFire (NTS) Mcafee (Mi2)

H thng pht hin v phng chng xm nhm IPS mng khng dy

Pht hin v phng chng cc tn cng trn mi trng khng

AirDefense (Misoft) AirTight (Misoft)

Lc Web Phng chng truy cp vo cc trang Web c hi

Websense (Misoft) Trend Micro (Misoft) BlueCoat (MTech)

Chng th rc v cc him ha ATTT do email

Lc th rc v cc m c trn mi trng email

Barracuda (ng Qun) Trend Micro (Misoft) PineApp (Misoft)

H thng xc thc mnh a thnh phn

Xc thc mnh dng token

Entrust (Misoft) Vasco (Misoft) Verisign (Blitz) RSA (MTech) Todos (MK Technology)

Chng ch s Cung cp chng ch xc thc SSL cho my ch Web

Verisign (Blitz) Entrust (Misoft)

H thng qun l mt khu nhy cm Enterprise

Qun l cc ti khon xc thc nhy cm trong ng dng v h thng.

Cyber-Ark (Misoft)


nh gi v qun l l hng bo mt D tm l hng bo mt

Mcafee Foundstone (Mi2) IBM ISS (Misoft)

Qun l log h thng ATTT Theo di v phn tch log t cc thit b ATTT ARCSight (Misoft)

Cng c iu tra bo mt

Thu thp bng chng, gim st hot ng mng phc v cho cng vic iu tra bo mt

Encase (Misoft) AccessData (Misoft)

Cng c lm chnh sch ATTT

Gip doanh nghip xy dng chnh sch ATTT Neupart (Misoft)

o to ATTT Cung cp cc kha hc ATTT

VietShield

Misoft

SaigonCTT

Athena

5. Ngun nhn lc v o to ATTT ti khu vc pha Nam

- Ngun nhn lc bo mt thng tin c trnh cao vn trong tnh trng cung khng cu. a s cc nhn s chu trch nhim m bo ATTT trong doanh nghip l qun tr h thng kim nhim, phn ln t o to, tch ly kinh nghim v khng c o to chnh quy v ATTT. Hin vn c rt t cc t chc, doanh nghip ti Vit Nam c v tr Gim c ATTT (CSO).

- V o to ATTT nhn chung cn s khai, t pht. Cc kha hc cha thnh mt chng trnh o to chuyn gia hon thin. Cc c s o to ch yu s dng cc chng trnh sn c ca nc ngoi ging dy, thiu tnh chuyn su v ch yu dy v k nng, s dng cng ngh Hacking. Ti Vit Nam vn cha c mt b gio trnh chun v ATTT.

- Mt s c s o to c chng trnh dy v ATTT song cn t v gio trnh cng cha c chun ha. Nhng nm gn y c nhiu chuyn bin r rt: s lng ngi hc v s lng cc mn hc u tng, cc kha hc nn tng c trin khai: CCSP, SCNP, Security+, ISO 17799, CEH Tuy nhin y mi ch l cc kha hc theo chng ch do cc t chc nc ngoi cp. Mt khc, mt b phn ln hc vin ng k cc kho hc bo mt nhm mc ch b sung nhng chng ch, bng cp quc t c tnh ph dng ch cha c thi hc tp, nghin cu mt cch nghim tc nng cao kin thc.

- H thng o to cn thiu chng trnh cho chuyn gia CISSP, CCIE security; cc kha hc ca InfoSec Institute v xm nhp th nghim, lp trnh an ton.

- Vn o to ngun nhn lc v ATTT cn cha c cc Doanh nghip quan tm ng mc. Kin thc v ATTT trong gii ch doanh nghip cn yu. Theo kho st ca Ban CNTT vi trn 1.200 doanh nghip thuc Cu lc b Doanh nhn Si Gn, th c ti 90% ch doanh nghip cha thc c vic bo v ti sn thng tin qu gi.

- X hi vn cha nh gi nghim tc s hi sinh thm lng ca cc chin s qun tr v an ninh mng. Chnh i ng ny mi m bo c h thng thng tin n nh, gp phn m bo hot ng kinh doanh ca doanh nghip.

6. Cng tc truyn thng, tuyn truyn v ATTT

Cc vn v ATTT c cp n hu ht trong cc n phm lin quan n CNTT-TT nh tp ch Th Gii Vi Tnh PC World VN, Tin Hc v i Sng, Echip, X hi thng tin, c bit l tp ch


ATTT v chuyn mc ATTT trn Th Gii Vi Tnh Series B. Thm vo , cc chng trnh truyn hnh nh Cuc sng s ca VTV, 1001 ca HTV cng cung cp nhiu thng tin v ATTT.

Tuy nhin mc chuyn su hn phi k n cc website, din n ca gii tin hc hay gii ATTT, nht l nhng website c uy tn ca cc cng ty, t chc chuyn v ATTT. Chng hn nh:

Bo in t VietnamNet Bo in t VnExpress Chuyn mc Bo mt ca ICT News Website bo mt thng tin Din n tin hc, mc Bo mt trong Tutorial room Tiu mc Bo mt trong mc Cng ngh trn VnMedia Website VnSecurity Website VietShield Mng ATTT VSEC Din n HVAOnline Blog ThaiDN Website Athena

7. Cc quy nh, lut l v ATTT

Trong nhng nm qua nh nc rt quan tm v vn ATTT. Nhiu quy nh v lut php c ban hnh. Cc c qun qun l nh nc c thnh lp tp trung qun l trong lnh vc ATTT v bc u pht huy c hiu qu. Chng ta c th lit k mt s iu khon trong cc b lut quy nh nhng ch ti i vi cc hnh vi vi phm ATTT nh sau:

Php lnh S 30/2000/PL-UBTVQH10 ngy 28/12/2000 v/v Bo v b mt Nh nc Ngh nh ca Chnh Ph s: 33/2002/N-CP Quy nh chi tit thi hnh Php lnh Bo v b

mt nh nc B lut hnh s nc CHXHCNVN: iu 125, 131, 224, 225 v 226 B lut dn s nc CHXHCNVN: iu 31,38 B lut lao ng nc CHXHCNVN: iu 85, v hnh thc x l k lut, sa thi. Lut s hu tr tu Vit Nam: iu 131. Lut Bo v ring t v thng tin c nhn Danh mc ti liu bo mt theo ngh nh 123 -2002/Q TTg ca Th tng Chnh ph Quyt nh 55/2008/BLTBXH ban hnh chng trnh khung trnh trung cp ngh v

cao ng ngh lp trnh my tnh Ngoi mt s cc iu khon nu trn, nh nc ban hnh mt lot cc ngh nh quy nh nhim v chc nng cng nh phm vi iu chnh ca cc c quan qun l nh nc v ATTT. Theo nh nc s thng nht qun l v ATTT thng qua cc c quan chc nng, c th lit k mt s vn bn v ATTT di y:

Ngh nh 97/2008/N-CP v qun l, cung cp, s dng dch v Internet v thng tin in t. Theo ngh nh, cc hnh vi s dng Internet vo nhng mc ch sau s b cm: Chng li nh nc CHXHCN Vit Nam; gy phng hi n an ninh quc gia, trt t an ton x hi; ph hoi khi on kt ton dn nh cp v s dng tri php mt khu, kho m v thng tin ring ca t chc, c nhn; to ra v ci t cc chng trnh virus my tnh, phn mm gy hi thc hin mt trong nhng hnh vi quy nh ti iu 71, lut CNTT.

Ngh nh 90/2008/N-CP v chng th rc nghim cm vic to iu kin, cho php s dng phng tin in t thuc quyn ca mnh gi, chuyn tip th rc; trao i mua bn hoc pht tn cc phn mm thu thp a ch in t hoc quyn s dng cc phn mm thu thp a ch in t; s dng cc phn mm thu thp a ch in t khi khng c php ca ngi s hu a ch in t ; trao i, mua bn danh sch a ch in t hoc quyn s dng danh sch a ch in t nhm mc ch gi th rc.

Ngh nh 48/2008/N-CP v quy nh chc nng, nhim v, quyn hn v c cu t chc ca B Ni v: Thng nht qun l, bo m k thut v chuyn mn nghip v c yu trong phm vi c


nc; ch tr, phi hp vi cc B, ngnh trong vic thc hin cc ch trng, chnh sch ca ng, Nh nc lin quan n bo m an ton v bo mt thng tin b mt nh nc theo quy nh ca php lut. Gip Chnh ph thng nht qun l nh nc v mt m dn s, cung cp cc thit b v sn phm mt m p ng yu cu pht trin kinh t, x hi cho cc t chc v c nhn c nhu cu s dng.

Ngh nh s 64/2007/N-CP v ng dng cng ngh thng tin trong hot ng ca c quan nh nc, m bo ATTT trn mi trng mng. Ban C yu Chnh ph xy dng v xut ban hnh cc vn bn quy phm php lut, tiu chun v quy chun k thut, trin khai v mt m trong an ton v bo mt thng tin ca c quan Nh nc, t chc kim nh, nh gi v cp chng nhn cc sn phm mt m trong hot ng ca c quan Nh nc. B Cng An chu trch nhim bo m an ninh trong hot ng ng dng cng ngh thng tin; iu tra v x l ti phm trong lnh vc cng ngh thng tin.

Ngh nh ca Chnh ph s 26/2007/N-CP ngy 15 thng 02 nm 2007 quy nh chi tit thi hnh lut giao dch in t v ch k s v dch v chng thc ch k s. Quy nh nguyn tc giao dch in t trong hot ng ti chnh; trch nhim, quyn hn ca t chc, c nhn; trch nhim ca cc B, ngnh, a phng ; gii quyt tranh chp; thanh tra, kim tra; x l vi phm C quan ti chnh v t chc, c nhn c tham gia giao dch in t trong hot ng ti chnh vi c quan ti chnh phi s dng ch k s; giao dch in t trong hot ng ti chnh gia t chc, c nhn vi c quan ti chnh phi s dng ch k s v chng th s do T chc cung cp dch v chng thc ch k s cng cng cung cp. ng thi, quy nh vic thnh lp, t chc, hot ng v qun l T chc cung cp dch v chng thc ch k s chuyn dng phc v cho cc giao dch in t trong hot ng ti chnh ca c quan ti chnh.

Ngh nh s 73/2007/N-CP v hot ng nghin cu, sn xut, kinh doanh v s dng mt m bo v thng tin khng thuc phm vi b mt nh nc. Danh mc sn phm mt m dn s (MMDS) phi p dng Quy chun k thut quc gia trong tng thi k do Ban C yu Chnh ph ch tr, phi hp vi B Khoa hc v Cng ngh xy dng, trnh c quan c thm quyn ban hnh. Danh mc ny c r sot hng nm b sung cc sn phm mt m dn s bt buc phi p dng Quy chun k thut quc gia theo quy nh hin hnh.

8. Cc c quan qun l nh nc v bo v php lut trong cng tc phng chng ti phm cng ngh cao

Hin nay v mt nh nc c ba c quan thc hin chc nng qun l nh nc v ATTT:

Ban C yu Chnh Ph chu trch nhim qun l v An ton mt m B Cng An qun l v u tranh chng ti phm cng ngh cao B Thng tin v Truyn thng chu trch nhim qun l thng tin truyn thng trong c c

lnh vc xc thc v ch k in t. Trung tm ng cu khn cp my tnh Vit nam (VNCERT) trc thuc B TT&TT l n v trc tip tham gia cng tc ATTT.

9. Chi hi ATTT pha Nam v cc doanh nghip cung cp gii php, dch v ATTT

Cng vi s bng n ca ngnh cng ngh thng tin, vn bo mt v ATTT (ATTT) tr thnh yu t ht sc quan trng v cp thit. Nhn thy thc t , Hip hi ATTT Vit Nam (vit tt l VNISA) ra i theo Quyt nh s 1078/Q-BNV ca B Ni V nc CHXHCN Vit Nam ngy 14/08/2007, l t chc x hi ngh nghip phi li nhun u tin hot ng trong lnh vc bo mt thng tin c nh nc Vit Nam cng nhn. VNISA tp hp cc c nhn, t chc lm cng tc nghin cu ging dy, ng dng v pht trin ATTT nhm hng dn thc hin cc ch trng ng li ca nh nc trong vic ng dng v pht trin k thut, cng ngh, ATTT, a ra xut, khuyn ngh vi c quan qun l nh nc trong vic xy dng c ch chnh sch pht trin ngnh.

Hip hi ATTT Vit Nam hot ng trong cc lnh vc:

T chc cc s kin, hi tho, ta m, bo co cc chuyn v lnh vc ATTT. Tin hnh iu tra v ATTT trn phm vi vng min v ton quc. T chc t vn v o to chuyn su cho cc t chc, c nhn v gii php v ng dng trong

lnh vc ATTT.


Dch v t vn v phn bin v ATTT. Dch v nh gi v an ninh v bo mt thng tin. T chc cc cuc thi, trnh din quc gia v ATTT. Ch tr hp tc vi cc hi, cc doanh nghip trong v ngoi nc c lin quan trao i, hc

hi, chia s kinh nghim, cng gip nhau khng ngng y mnh ng dng v pht trin lnh vc ATTT.

Chi hi ATTT pha Nam l cnh tay ni di ca VNISA, ni tp hp cc hi vin n v v c nhn sinh hot ti khu vc pha Nam. Chi hi c chnh thc thnh lp t ngy 15/09/2008, hot ng tun th theo iu l v ch o thng nht ca hip hi. C cu t chc ca chi hi bao gm Ban Chp hnh (BCH), Vn phng, cc ban cng tc, v cc ban chuyn mn. Mt trong cc s kin c ngha ln nht m VNISA t chc thng nin l Ngy ATTT Vit Nam. Ngy ATTT Vit Nam nm trong khun kh cc s kin thng nin quy m quc gia ca VNISA, da trn nhng tiu ch chung ca Hip hi v th hin s gn kt gia Nh nc X hi Doanh nghip trong lnh vc ATTT. y cng l c hi tip cn, chia s nhng kin thc, cng ngh bo mt tin tin nht gia cc n v tham gia.

Vi tiu ch hng n doanh nghip, hng n cng ng, ngy ATTT Vit Nam lun v mc tiu nng cao nhn thc ca cng ng v tm quan trng ca ATTT trong mi trng kinh doanh mi da trn nn tng ca cc h thng cng ngh thng tin v truyn thng; ng thi cng cp n nhng gii php, h tng k thut cn thit nhm m bo cc yu cu c bn v ATTT i vi cc t chc, doanh nghip. Trong nm 2009, Chi hi thng xuyn t chc cc bui sinh hot chuyn mn theo cc mng ch c th nh k hng thng, l ni cc n v v c nhn l cc chuyn gia trong lnh vc ATTT cng chia s v trao i cc vn hc thut, cng nh trin khai v ng dng ATTT, nht l khu vc pha Nam. Trong nm 2010, Chi hi s tip tc cc chng trnh sinh hot nh k, i km vi vic thnh lp cu lc b an ninh mng nhm p ng nhu cu chia s kin thc ATTT trong cng ng chuyn gia. Hin nay chi hi nhn c s quan tm tham gia ca nhiu hi vin, trong c nhng n v c uy tn trong lnh vc ATTT, c kh nng cung cp cc dch v t vn, o to, phn phi cc sn phm an ton an ninh mng, trin khai v bo tr, h tr k thut cc h thng ATTT. 10. Kt lun, kin ngh

Nhm nng cao nhn thc v thc thi cng tc m bo ATTT i vi cc c quan, doanh nghip v ngi s dng CNTT, chng ti xut mt s kin ngh sau: i vi cc c quan nh nc:

1. Hon thin h thng php lut. 2. Thnh lp u mi thng nht c th di dng mt Trung tm ng cu s c my tnh l im

ta cho cc c quan, doanh nghip v cng dn trn a bn Tp.HCM v khu vc lin h. 3. Nghim khc x l v thi hnh php lut i vi cc ti phm cng ngh cao nhm rn e v

phng nga ti phm. 4. Nh nc cn c u t thch ng cho cng tc ATTT nh: u t cho cng tc nghin cu v

ATTT, u t cho o to ngun nhn lc ATTT, u t xy dng h tng m bo ATTT. 5. Khuyn khch s dng cc sn phm, cng ngh ni a v tnh cht c th ca lnh vc an ninh

thng tin. i vi doanh nghip:

1. Tip tc y mnh ng dng CNTT nhm to sc cnh tranh cho doanh nghip, ng thi nng cao nhn thc ATTT l ti sn ca doanh nghip cho tt c cn b nhn vin.

2. Phi c chin lc u t di hn v cng ngh, trang thit b v o to nhn lc m bo ATTT.

3. Xy dng qui trnh ATTT, p dng h thng qun l ATTT theo tiu chun (ISO 27001, ISO 17799).

4. C nhn nh v nh gi ng n vai tr ca chuyn vin m bo ATTT trong doanh nghip. i vi truyn thng, bo ch:

1. Nhn thc vai tr quan trng trong tuyn truyn phng chng ti phm cng ngh cao, gp phn mnh m vo cng tc phng nga ti phm.


2. Tuyn truyn php lut v ATTT nhm nng cao nhn thc v ATTT i vi tng ngi dn.

Cui cng l s cn thit phi phi hp cht ch gia cc cc c quan qun l Nh nc, cc doanh nghip cung cp gii php, dch v ATTT, cc c quan doanh nghip ng dng CNTT v Hip hi ATTT VNISA cng nh cc hi ngnh ngh khc trong lnh vc CNTT nhm chia s v sn sng h tr khi cn thit thc thi cng tc ATTT

Chi hi ATTT pha Nam mong mun c ng gp mt phn cng sc vo s nghip chung nhm nng cao nhn thc v ATTT v m bo ATTT cho cc c quan, doanh nghip v cc c nhn v s bnh an ca x hi v v s pht trin an ton bn vng ca cc c quan doanh nghip.


CNG TC M BO AN TON AN NINH THNG TIN CHO CC C QUAN NH NC TRN A BN THNH PH

(ng Nguyn Anh Tun, Ph Gim c S TT-TT TP.HCM)

I. HIN TRNG CNG TC TRIN KHAI AN TON BO MT 1. Kt qu xy dng h thng thng tin tc nghip ca thnh ph Tnh n thng 11/2009, thnh ph t nhiu kt qu to ln trong vic xy dng h thng thng tin tc nghip phc v chnh ph in t: a. H thng h tng cng ngh thng tin Hin ti c 34 s ngnh v 22 qun huyn c u t xy dng h tng CNTT m bo vn hnh h thng ang trin khai ti cc n v, bao gm my trm 5.200 b; my ch 280 b, Switch cc loi 380 b, My in: 1.922 b, Kiosk tra cu thng tin 12 b v h thng m vch 19 b; H thng Mng MetroNet tc cao kt ni ton b 90 S/Ngnh, Qun/Huyn v hn 100 Phng/X, ng thi a vo vn hnh h thng iu khin mng MetroNet (NOC) v h thng gim st t ti S Thng tin v Truyn thng (TT - TT).

b. Cc h thng dng chung ca thnh ph: Trong nm 2009, nhiu h thng dng chung ca thnh ph i vo hot ng, cung cp nhiu

tin ch phc v cng tc ca cn b cng chc thnh ph: H thng th in t ca thnh ph: chnh thc vn hnh t thng 1/2009, vi nng lc cung cp

ln n 10.000 hp th, phc v nhu cu trao i thng tin gia khi ng v khi chnh quyn cc cp ca thnh ph vi hn 9000 ngi dng.

Cng thng tin thnh ph - HCM CityWeb (http://www.hochiminhcity.gov.vn): L cng thng tin chnh thc ca chnh quyn v nhn dn thnh ph. H thng c 77 trang Web thnh vin thuc cc S/Ngnh, Qun/Huyn ca thnh ph vi rt nhiu thng tin phong ph: Tnh hnh kinh t - x hi, vn ha trn a bn thnh ph, Quy trnh qun l Nh nc: ng thu, hon thu, ng k thnh lp doanh nghip, xin cp php xy dng,..T ngy 20/5/2009, Gim c S TT TT c y ban nhn dn thnh ph giao trc tip qun l, iu hnh ton b hot ng h thng.

c. Phn mm tc nghip: trin khai h thng cc phn mm tc nghip phc v hu ht cc lnh vc qun l: Ti cc qun - huyn: Phn mm xy dng mi trng lm vic in t (G2E): 4 phn mm; Phn mm dch v cng (G2C v G2B): 5 phn mm; Phn mm v qun l t ai - xy dng (ng dng GIS): 8 phn mm; Phn mm qun l h tch trin khai n cp phng x. Ti cc s - ngnh: Hin c 5 n v, gm S K hoch v u t, S Thng mi, S Vn ha Thng tin, S T

Php, S Khoa hc v Cng ngh trin khai 23 phn mm qun l v 10 dch v cng phc v cho cng tc qun l chuyn mn. Hin thnh ph cng ang nghin cu 17 phn mm ng dng m ngun m v s dng 6 phn mm phc v cho cng tc qun l hnh chnh v tch hp thng tin.

d. C s d liu: xy dng c c s d liu v: dn c, kinh t, vn ha, lao ng, t ai, xy dngv s trin khai, vn hnh cc phn mm ti cc Qun/Huyn, S/Ngnh. 2. Cng tc m bo an ton, an ninh thng tin cho cc h thng thng tin tc nghip ca thnh ph:

Bn cnh xy dng h thng thng tin tc nghip, thnh ph rt ch trng n cng tc m bo an ton bo mt cho cc h thng ny v t c nhiu kt qu:

a. Trin khai h thng bo v ATTT cho cc S/Ngnh, Qun/Huyn theo m hnh chung: Nhm thng nht v to thun tin cho cng tc m bo an ton bo mt ti cc n v, ngay t nm


2005, S TT - TT nh hng vic trin khai cc h thng bo v ATTT theo m hnh chung. M hnh ny c xy dng qua nhiu bc, t th im, tng kt hon chnh ri mi nhn rng:

Giai on 1 (2005-2007): Xy dng m hnh mc c bn, tp trung vo h thng chng st, tng la, sao lu d liu v th im trin khai chnh sch ATTT. Kt qu trin khai cho 34 S/Ngnh v 22 Qun/Huyn.

Giai on 2 (2007-2008): Hon chnh m hnh, tp trung vo chnh sch ATTT v qun l ti nguyn h thng thng tin: Qun l ngi dng, Qun l truy cp mng, Qun l d liu...v th im chnh sch ATTT ti 4 n v: Q.5, Q.11, Ph Nhun v S TT-TT Nm 2009: tin hnh trin khai nhn rng trn c s m hnh c th im v hon chnh. n nay c 18 n v c ghi vn vi tng vn u t: 9,36 t, trong 11 n v c ph duyt v trin khai d n vi tng kinh ph ph duyt: 4,12 t.

b. ng dng ch k s trong m bo an ton an ninh thng tin: S TT-TT TP.HCM l n v u tin trong cc S TT-TT tin hnh xy dng h thng chng thc chuyn dng t nm 2006 vi kh nng cp pht 10.000 ch k s v bt u th im ng dng ch k s ti c quan t 5/2006. n nay, t nhiu kt qu ng khch l: Gn 100 cn b S c cp ch k s v trang b mi cn b mt th v u c.

Thng 10/2007, B Thng tin v Truyn thng chnh thc cng nhn hot ng Trung tm chng thc s chuyn dng. Ch k s c tch hp vo nhiu ng dng thc t nh: phn mm qun l cng vn, Tt c vn bn ca S TT-TT pht hnh u c ch k s trn file in t. c bit tch hp ch k s vo kin trc phn mm li (2008).

Nm 2009: Bt u th im trin khai ch k s ti 4 S/Ngnh. c. Nng cp h thng Cng thng tin thnh ph (HCM CityWeb): Ngay sau khi c thnh ph giao nhim v qun l h thng HCM CityWeb, S TT - TT

khn trng kho st, nh gi tnh hnh hot ng ca h thng. Trn c s , S TT - TT trin khai k hoch nng cp din h thng nhm m bo h thng c th vn hnh mc cao nht v an ton nht, c th:

xy dng k hoch nng cp ton din t h tng, ng truyn, cc gii php an ton bo mt n vic nng cp cc ng dng Web hin c.

n nay, h thng h tng mi cho HCM CityWeb c trin khai hon chnh t ti cng ty Pht trin cng vin phn mm Quang Trung v ang khn trng chuyn i cc trang Web thnh vin ln h thng ny.

Tin hnh kim nh an ton bo mt cc trang Web thnh vin. Bc u kim nh v khc phc l hng bo mt cc trang Web ca cc n v tng b hacker tn cng: BQL Cc Khu Ch xut - Khu Cng nghip (Hepza), Hi nng dn thnh ph. Tip n s m rng kim nh cc trang Web ca cc S/Ngnh, Qun/Huyn.

d. Cng tc o to v bo mt: Cng tc o to c xy dng da trn nhu cu nhn lc phc v trin khai cc h thng thng tin ca thnh ph v S/Ngnh, Qun/Huyn. n nay, trin khai cc lp o to tp trung v an ton bo mt cho cn b qun tr cc S/Ngnh, Qun/Huyn ti thnh ph v cc tnh vi kt qu o to khong 300 cn b qun tr mng (thnh ph: 150, cc tnh: 150). 3. Cc tn ti trong cng tc m bo an ton, an ninh thng tin hin nay: Bn cnh cc kt qu t c, hin nay cng tc m bo an ton an ninh thng tin ca thnh ph cn nhiu tn ti nh:

a. K thut, cng ngh lc hu: Cc h thng sau thi gian di trin khai tr nn lc hu v cng ngh, k thut ng thi xut

hin nhiu l hng bo mt. c bit phi k n H thng Cng thng tin thnh ph (HCM CityWeb) xy dng t 2004, phn ln cc trang Web s dng cc cng ngh c khng m bo tnh bo mt, H thng my ch xung cp, thng gp li trong qu trnh vn hnh, ng thi cha c gii php ton din v an ton, an ninh ca h thng CityWeb (phn cng, chnh sch, c ch qun l, ng dng,...) c gii php x l trit .

Cc n v phn ln cha c chnh sch ATTT: Mi ch c 4/89 n v ban hnh qui nh ATTT hon chnh. Cc n v cn li ang trong qu trnh trin khai.

Khng thng xuyn kim tra, pht hin cc l hng bo mt, nht l l hng bo mt ca ng dng. Trong phn ln trng hp, l hng bo mt ch pht hin sau khi gy ra s c nghim trng.


Vi mt s lng ln cc ng dng v ang trin khai, cng tc nh gi bo mt v khc phc ang t ra nhim v to ln cho thnh ph.

b. Ngun nhn lc trong lnh vc ATTT cn hn ch v nhiu mt: Lc lng cn b qun tr mng cc n v S/Ngnh, Qun/Huyn: Thiu v s lng (Ch c 1, 2 ngi cho h thng mng c n 100 200 my tnh, cha c cn b chuyn trch v bo mt h thng) cng nh hn ch v chuyn mn (Phn ln cn b qun tr khng phi chuyn ngnh an ton bo mt).

Cc cng ty, doanh nghip chuyn ngnh an ton bo mt: thnh ph c t nht hn 20 doanh nghip c cung cp cc dch v an ton bo mt thng tin. Tuy nhin cha c n v no c i ng chuyn nghip sc m nhn trch nhim ng cu s c cho ton b h thng chnh quyn in t ca thnh ph.

c. Nhn thc v ATTT ca ngi dng cn thp dn n nhiu ni dung trong chnh sch ATTT d n gin ha nhng ngi dng vn khng thc hin y . Nhiu sai st c bn vn kh ph bin:

Khng thng xuyn i mt khu my tnh c nhn hoc dng mt khu n gin. Khi kt ni cc thit b ngoi vi (USB, SmartPhone) vo mng my tnh khng tin hnh qut virus nh qui nh. Cha lp h s y , chi tit v mng my tnh hay khng lu tr d liu ca c quan ng ni qui nh. d. H thng b tn cng: Do tn ti nhiu l hng bo mt trong khi cng tc khc phc gp nhiu kh khn, xy ra nhiu cuc tn cng vo h thng thng tin ca thnh ph thi gian qua. Trong , nghim trng nht v nh hng su rng nht l v tn cng vo H thng Cng thng tin ca thnh ph (HCM CityWeb) b hacker tn cng ci virus v cc phn mm gin ip trong sut thi gian t 16-23/6/2009. Hu qu: Hng chc dch v cng trc tuyn ca chnh quyn in t thnh ph b nh hng nghim trng. Ch trong vng 3 ngy, c 27/77 trang Website thnh vin b nh hng, trong c nhng trang ca S/Ngnh c nhiu dch v cng trc tuyn hay c s lng truy cp ln: S K hoch v u t, Hi quan thnh ph.. Mt khi lng ln my trm ca doanh nghip, ngi dn b ly nhim virus khi truy cp s dng dch v.

S TT-TT phi huy ng nhiu lc lng ca thnh ph v c nc, n 23/6/2009 mi tm thi khc phc c. Tuy nhin vn cha tm ra ht l hng khc phc trit . n nay, hacker vn nhiu ln tm cch xm nhp.

II- CNG VIC SP TI 1. Trng tm cng vic: Trong thi gian ti, S Thng tin v Truyn thng tip tc cng tc m bo ATTT cho thnh ph, xem y l lnh vc cn u tin tp trung, c bit l cc ni dung sau:

Cc h thng dng chung ca thnh ph: H thng th in t; Trung tm d liu (DataCenter); Mng MetroNet v h thng iu khin mng MetroNet (NOC); Cng thng tin thnh ph (CityWeb);

Cc ng dng tc nghip v ang trin khai; Mng my tnh ti cc Qun/Huyn, S/Ngnh; o to chuyn su cn b qun tr v an ton bo mt.

2. Cc gii php thc hin: Kt hp nhiu gii php v ngun lc nhm thc hin nhim v m bo an ton bo mt cho thnh ph

a. An ninh h tng h thng mng cc S/Ngnh, Qun/Huyn: Tip tc nhn rng m hnh an tan bo mt cho cc n v S/Ngnh, Qun/Huyn. Cc n v

s trin khai hon chnh cc gii php an ton bo mt v mi mt: H thng chng st, H thng Tng la, IPS/IDS, H thng sao lu d liu,...;

D kin c 30 S/Ngnh, Qun/Huyn c a vo k hoch trin khai d n H thng bo v ATTT trong nm 2010.

b. An ninh ng dng: Tin hnh nh gi v khc phc l hng bo mt h thng cc ng dng trin khai nh:

ng dng Web/Portal: 77 thnh vin thuc Cng thng tin thnh ph (HCM CityWeb);


ng dng tc nghip ti cc Qun/Huyn: 26 phn mm tc nghip; ng dng tc nghip ti cc S/Ngnh: Phn mm li, phn mm Qun l h tch, cc phn

mm cp php, ; c. Xy dng qui trnh x l s c trn mng my tnh, trong xc nh r vai tr, trch

nhim ca cc n v lin quan nh: n v ch tr: S TT TT; Cc n v th hng: Qun/Huyn, S/Ngnh; Cc n v cung cp dch v ng cu: doanh nghip chuyn ngnh an ton bo mt.

d. T chc lc lng ng cu mng my tnh ca thnh ph nhm: Xy dng bng c i ng v lc lng chuyn v an ton v an ninh thng tin tng xng

vi vic ng dng cng ngh thng tin ca thnh ph. Thng trc x l khi c s c v phn cng, phn mm, kt ni mng, s c virus, Trojan,

hacker,.. m bo ng cu 24/7/365. m bo ng cu cho tt c cc c quan S/Ngnh, Qun/Huyn trn a bn thnh ph. Thng xuyn kim tra v cnh bo thnh ph v cc l hng bo mt pht sinh trn h thng

mng. M hnh trin khai: p dng nhiu hnh thc nhm huy ng cao nht lc lng chuyn mn v

an ton bo mt tham gia: i) i vi mng my tnh cc S/Ngnh, Qun/Huyn (90 n v v hng trm n v cp 2): S TT - TT s xy dng ni dung, nh mc kinh ph cho cng tc duy tr, bo dng, khc phc

s c... v phn cng v h tng mng v hng dn cc n v thc hin. S TT - TT ch tr mua v trin khai tp trung bn quyn phn mm chng virus cho cc c quan

qun l Nh nc ti thnh ph nhm chn c sn phm v dch v x l s c ln quan n virus, Trojan, spyware,... tt nht. S lng bn quyn d kin hn 10.000. ii) i vi cc h thng dng chung ca thnh ph (MetroNet, HCM CityWeb, DataCenter):

Trin khai trn h thng h tng hin i t ti Cng ty pht trin cng vin phn mm Quang Trung, p dng nhiu cng ngh tin tin Cloud Computing, ng truyn MetroNet tc cao, ton b h thng h tng c thit k c tnh d phng cao m bo vn hot ng thng sut trong trng hp xy ra s c;

S TT - TT s tin hnh chn la cc n v chuyn ngnh an ton bo mt c nng lc tt nht thc hin cng tc ng cu cho cc h thng ny.

e. An ninh d liu: Bn cnh vic trang b cc cng c, phng tin lu tr d liu chuyn nghip ti cc n v Qun/Huyn, S/Ngnh, thnh ph ang trin khai xy dng Trung tm d liu dng chung cho ton thnh ph. D kin Trung tm d liu s i vo hot ng t Qu II/2010. Vi kin trc hin i, vn hnh trn nn h thng mng tc cao MetroNet, y s l ni lu tr d phng d liu ca cc n v phng cho trng hp c s c. ng thi, Trung tm d liu cng l ni tp hp thng tin cho cng tc khai thc (DataMining) phc v cho yu cu qun l ca thnh ph sau ny.

f. o to nhn lc: Kt hp vi cc Trng, Vin, cc n v o to t chc cc lp o to chuyn su v an ton bo mt cho cn b qun tr, cn b ph trch ATTT ti cc S/Ngnh, Qun/Huyn, trong s tp trung vo: Bo mt h thng, bo mt ng dng; X l s c h thng mng; nh gi bo mt mng; Chnh sch ATTT....D kin trong nm 2010 s o to 200 - 300 lt cn b qun tr cho cc n v S/Ngnh, Qun/Huyn.


BO CO CA ORACLE (ng Thanh Bnh, Technology Senior Solution Consultant, Oracle)


Tm tt s lc tiu s ng Thanh Bnh:


C S H TNG NNG NG BO V TI SN DOANH NGHIP

(i din cng ty IBM)

Topic: A Dynamic Infrastructure that puts your business assets first

IBM introduces solutions that help enterprises to build dynamic infrastructures which then allow your business to utilize the most of the business information and assets. Doing so by not only allow:

Easily manage to systems or applications with less resource, power consumption Scalability up to the business needs Advanced technology and features that help secure your business information and

assets are well kept from threats.

C s h tng nng ng bo v ti nguyn kinh doanh v bo mt thng tin

IBM gii thiu cc gii php kt hp cc ng dng cng ngh mi nht nhm gip doanh nghip, t chc xy dng mt h tng CNTT nng ng. t gip khai thc mt cch tt nht hiu qu nht cc ti sn quan trng ca doanh nghip: thng tin v cc ngun lc kinh doanh. Cc gii php ny gip doanh nghip:

D dng hn trong vic qun l h thng v cc ng dng vi t ngun lc v tit kim in nng hn.

C kh nng m rng ty theo nhu cu ca s pht trin Cc cng ngh v chc nng tin tin nht nhm m bo an ton cc thng tin v ti

sn kinh doanh trnh khi cc ri ro, s nhm ng t bn ngoi.


TNG QUAN CISCO SAFE: KIN TRC AN NINH MNG TH H MI C KIM CHNG TRONG THC T

(ng Phan Thanh Sn, Gim c Cng ngh Cng ty Cisco Systems Vit nam)


Tm tt s lc tiu s ng Phan Thanh Sn:

ng Phan Thanh Sn l Gim c Cng ngh (CTO) ca Cng ty Cisco Systems Vit nam. Sn c 17 nm kinh nghim lm vic trong ngnh Cng ngh thng tin Truyn thng (ICT). ng tham gia t vn v thit k gii php v h thng mng cho nhiu nh cung cp dch v (Service Provider), cc doanh nghip ln (Enterprise) v cc doanh nghip nh-v-va (Small - Medium Business) ti Vit nam t nm 1997 khi ng lm vic cho tp on Equant-SITA (nay l Orange Business Solution thuc tp on France Telecom). ng Sn gia nhp Cisco u nm 2000 vi vai tr k s t vn h thng. Nm 2003 ng c b nhim lm Gim c K thut - Cng ngh Cng ty Cisco Systems Vit nam. T nm 2007, ng m nhim

vi tr Gim c Cng ngh (CTO) v iu hnh (COO) ca Cisco Vit nam. Vi gn 10 nm lm vic ti Cisco, trch nhim chnh hin nay ca ng l nh hng chin lc kinh doanh v pht trin ngun lc cng ngh cho Cisco Vit nam v i tc; pht trin th trng v xc tin cc gii php v cng ngh mng th h mi ca Cisco ti Vit nam bao gm: Advanced Technologies, Emmerging Technologies, Data Center v Smart+Connected Communities. Trong vai tr COO, ng chu trch nhim h tr CEO ca Cisco Vit nam trong vic trin khai hiu qu cc quy trnh v chng trnh trong kin trc doanh nghip Cisco (Enterprise Architecture) cng nh xy dng chin lc pht trin di hn ca Cisco ti Vit nam. Trong vai tr ny, ng lm vic rt cht ch vi Cisco IT trong vic dng th mnh Cisco IT trin khai cc chin lc kinh doanh, nng cao nng sut lao ng v to tin cho s cch tn (innovation) trong Cisco Vit nam cng nh ph bin kinh nghim trin khai Cisco IT qua chng trnh Cisco IT@Work cho khch hng v i tc ti Vit nam. ng c giao lm i din cho Cisco System Vit nam tham gia vo cc hip hi trong ngnh ICT Vit nam nh Hi Tin hc Vit nam VAIP, Hi Tin hc TP. HCM HCA, ICT Partnership Club, Hip hi An ton Thng tin (VNISA). Trc khi gia nhp Cisco Systems, ng lm Qun l nhm dch v cao cp (Professional Service Manager) ca Equant-SITA Vit nam ni ng tham gia vo cc d n xy dng mng Internet Vit nam (VNN) t nm 1997. Trong 3 nm trc ng l k s ICT ca Lin doanh Du kh Vietsovpetro vi cng vic h tr h thng IT, mng truyn thng v h thng t ng ha. T nm 1992 n 1994 ng l k s h thng chnh ca TRADEVICO-IBC (l Business Partner u tin ca IBM ti Vit nam) ni ng tham gia trin khai v h tr h thng IT cho Tng cc thu, Kho bc v B ti chnh.

ng Sn tt nghip Khoa Cng ngh thng tin ca i hc Bch khoa TP H Ch Minh. Trc ng c hai nm rn luyn trong mi trng Qun i ti khoa Thng tin, Hc vin K thut Qun s.


H THNG QUN L ATTT THEO ISO 27001:2005 CCH TIP CN V P DNG THC T

(ng Trnh Tun Dng, Gim c kim nh cng ty BVQI)


SESSION 1: ATTT MNG V H THNG

Ni dung:

1. Gii php chng tht thot d liu cho doanh nghip

2. m bo tnh lin tc ca doanh ngip v khi phc sau

thm ha

3. Tho lun + Bc thm trng thng

Ngi iu phi:

ng Phng Hi CISSP- Trng ban an ton mng v h thng Chi hi VNISA pha Nam. Gim c pht trin kinh doanh cng ty Misoft HCM.

ng Phng Hi tt nghip c nhn ti c v c trn 10 nm kinh nghim trong lnh vc ATTT


GII PHP CHNG THT THOT D LIU CHO DOANH NGHIP

(ng Nguyn Thnh Nam, chuyn gia bo mt cng ty HPT)


M BO TNH LIN TC CA DOANH NGHIP V KHI PHC SAU THM HA

(ng Ngc Huy, chuyn gia bo mt cng ty FPT)


SESSION 2:

O TO V CHUN HA TRONG ATTT

Ni dung:

1. o to v chun ha ATTT

2. nh gi ti sn h thng thng tin

3. nh gi nguy c ATTT

4. Con ng tr thnh chuyn vin an ninh mng

5. Tho lun

Ngi iu phi:

ng Trnh Ngc Minh, Tin s Ton L 15 nm kinh nghim qun tr mng. 10 nm nghin cu v trin khai ATTT. Ging vin Cisco Systems CCSI #31179,

CCAI. Ging vin Sun Microsystems (Solaris). Ph Gim c Khu Cng ngh Phn mm

i hc Quc gia TpHCM kim Gim c Phng th nghim An ninh thng tin ISeLAB.


O TO V CHUN HA ATTT (TS. Trnh Ngc Minh, ISeLAB, Khu CNPM HQG-HCM)


NH GI TI SN H THNG THNG TIN (ng Dng Ngc Thi, CSO Trng phng ATTT, Ngn hng ng )


NH GI NGUY C ATTT (ng ng Hong Minh, Senior IT Manager - GLOBAL CYBERSOFT (VN) JSC)


CON NG TR THNH CHUYN VIN AN NINH MNG (Th.s S Tm Nguyn, Ging vin h thng Cisco (CCSI) SaigonCTT)


SESSION 3:

ATTT TRONG THNG MI IN T

Ni dung:

1. Cng ngh xc thc hin i da trn Smartcard v kt

hp vi Biometrics

2. Phng trnh ri ro cho my ch web vi Microsoft System

Center

3. Tho lun + Bc thm trng thng

Ngi iu phi:

Tin s V Vn Khang

Trng ban chng thc s v thng mi in t VNISA, Ph Tng Gim c NHTMCP Vit .

ng V Vn Khang l chuyn gia v an ton v bo mt thng tin, tham gia t vn v xy dng cc gii php v ATTT cho nhiu n v v doanh nghip. ng cng tham gia ging dy nhiu nm v ATTT ti HQG TP.HCM


CNG NGH XC THC HIN I DA TRN SMARTCARD V KT HP VI BIOMETRICS

(ng Nguyn Hu Dng, Tng Gim c Secude Vietnam)


Tm tt s luc v ng Nguyn Hu Dng:

Vi hn 10 nm kinh nghim trong ngnh cng ngh phn mm my tnh, ng Nguyn Hu Dng ang l Tng Gim c, chu trch nhim chnh v mng gii php v cng ngh cho tp on Vit Nam. Cng vi cc trung tm gii php khc ca tp on nhiu ni trn th gii, SECUDE Vit Nam ang tng bc gp phn vo vic nng cao cht lng v thng hiu ca SECUDE trn th trng th gii.

Trc khi gia nhp SECUDE vo u nm 2007, ng Nguyn Hu Dng tng m nhn cc v tr qun l k thut quan trng trong cc cng ty gia

cng phn mm nc ngoi Vit Nam nh SDC (Saigon Software Development Company) hay AdnovaTech Solution Corp


PHNG TRNH RI RO CHO MY CH WEB VI MICROSOFT SYSTEM CENTER

(ng V Nguyn Cao Sn, Chuyn gia cng ngh cho mng ti chnh v tng cng ty ca Microsoft pha Nam)


S lc tiu s ng V Nguyn Cao Sn: C nhiu nm cng tc trong lnh vc cng ngh thng tin v t vn h thng. Hin ang ph trch chnh v cng ngh h tng, gii php an ninh cho nhm khch hng ti chnh, tng cng ty ti khu vc pha Nam.


PHN 2: THNG TIN NH TI TR

1. Oracle

Oracle Vietnam Hanoi Office Unit 01 /02, 11th Floor, Prime Centre Building, 53 Quang Trung Street Hanoi, Vietnam Tel : +844 39446888 Fax : +844 39432 592

Ho Chi Minh Office Suite 12 Sun Wah Business Centre 115 Nguyen Hue Boulevard, District 1 Ho Chi Minh City, Vietnam Tel : +848 38219 186 Fax : + 848 38219 181

Oracle has been working in Vietnam since the lifting of the US trade embargo by President Clinton in February 1994. In 1995, Oracle Vietnam Pte Ltd. began operation as a 100% foreign owned subsidiary, and still is today, of Oracle Corporation (NASDAQ ORCL) Oracle was the first US information technology company to be granted such a license in Vietnam by the Government of Vietnam.

With a modern head office located in central Hanoi, Oracle Vietnam has been an instrumental leader in Vietnams Information Technology modernization and a vocal advocate within the Vietnam Software Association of the continued need for software training and education.

To date, Oracle Vietnam has trained in excess of six thousand IT professionals and students in Vietnam and over three hundreds Vietnam IT experts have achieved the Oracle Certified Professional certification program.

As a direct result of these training programs, many of these professionals are now in demand not only in Vietnam but also throughout Asia, Europe and the United States.

Oracle Vietnam is capable of providing all products and services offered by Oracle worldwide including education and technical support for our partners and customers. Our technology products also support the Vietnamese language. Oracle is providing following solutions:

Oracle Database

Oracle Database, the first relational database designed for grid computing, helps ensure that enterprise information is always available and secure. Oracle is the most reliable choice for large enterprises, midsize businesses, and departments alike. Oracle provides the


No. 1 Database

No. 1 Data Warehousing

No. 1 Database on Linux

No. 1 Embedded Database

Oracle Fusion Middleware

Oracle Fusion Middleware consolidates Oracles leading, standards-based software to deliver hot-pluggable middleware with a comprehensive and seamlessly integrated service-oriented architecture software infrastructure. Oracle is the

No. 1 in Middleware

No. 1 in Business Intelligence

No. 1 in Application Platform suites

No. 1 in Enterprise Performance Management

Oracle Applications

Oracle Applicationsincluding Oracle E-Business Suite, PeopleSoft Enterprise, JD Edwards EnterpriseOne, JD Edwards World, Siebel, and Hyperionhelp deliver the complete functionality and business intelligence that companies need to compete and win. In fact, Oracle has the No. 1 customer relationship management and human capital management applications, and benefits customers by enabling customer success, providing a complete offering, and presenting the strongest strategic road map.

Oracle Industry Solutions

Oracle industry solutions address the specific challenges and processes unique to your industry. Many of the worlds top retail, manufacturing, life sciences, communications, utilities, and financial services firms are among the many businesses that are poised to profit from Oracles industry focus. Globally, Oracle is a leader in financial services, the public sector, professional services, retail, and communications.


2. IBM Vietnam

IBM Vit Nam

Tr s chnh: Tng 2, Ta nh Pacific Place, 83B L Thng Kit, Qun Hon Kim, H Ni

T: (84-4) 946 0201; Fax: (84-4) 946 0203

IBM Vit Nam

Chi nhnh ti HCMC: Tng 3B, Trung Tm Thng Mi Si Gn, 37 Tn c Thng, Qun 1, Thnh Ph H Ch Minh

T: (84-8) 3824 1474; Fax: (84-8) 3822 5432

Website: www.ibm.com

Thnh lp nm 1911 ti New York, M, IBM l tp on cng ngh thng tin ln nht th gii, cung cp hng lot cc gii php tch hp, cc sn phm dch v cng ngh thng tin cht lng vt tri trn ton cu.

IBM trc y c mt Vit Nam t nm 1938 n nm 1975. Tr li Vit Nam nm 1993, ti nm 1994, IBM thnh lp hai vn phng i din ti H Ni v Thnh ph H Ch Minh. Sau , Cng ty IBM Vit Nam chnh thc c thnh lp v l mt trong nhng doanh nghip 100% vn nc ngoi u tin trong ngnh CNTT ti Vit Nam.

Ti Vit Nam, IBM cung cp cc sn phm v dch v a dng bao gm my ch (System x, System i, System p v System z), h thng lu tr (Storage), phn mm (WebSphere, Information System DB2, Lotus, Tivoli, Rational), cc dch v bo hnh, bo dng, tch hp h thng, gii php e-business, qun l d n, gio dc/o to, v t vn. Khng ngng i mi tt c cc chu trnh v m hnh kinh doanh gip cho IBM t nhng tm cao mi v kh nng tch hp cc chu trnh kinh doanh v cc ng dng cho ni b doanh nghip, cc nh cung cp, cc nh phn phi, khch hng ca doanh nghip v cho i ng nhn vin. Khch hng ca IBM Vit Nam bao gm cc b, ngnh, cc c quan chnh ph, cc ngn hng, cc doanh nghip quc doanh, cc cng ty v t chc a quc gia hot ng ti Vit Nam v cc doanh nghip va v nh.

IBM t ho ng gp vo qu trnh pht trin ca Vit Nam khng ch bng vic mang n nhng gii php kinh doanh v trao i kinh nghim m cn thng qua cc d n h tr gio dc v vn ha.


IBM Vietnam Company 2nd Floor, Pacific Place Building, 83B Ly Thuong Kiet Str., Hoan Kiem Dist., Hanoi, Vietnam Tel: (84-4) 3946 0201 Fax: (84-4) 3946 0203 Website: www.ibm.com

IBM Vietnam Company 3B Floor, Saigon Trade Center, 37 Ton Duc Thang Street, District 1, Ho Chi Minh City, Tel: (84-8) 3824 1474 Fax: (84-8) 3822 5432 Website: www.ibm.com

Established in 1911 in New York, United States, IBM is the world's leading information technology services company, offering a range of integrated solutions, products and services unmatched by any other IT company.

IBM set up its business and operated in Vietnam from 1938 to 1975. In 1993, IBM returned to Vietnam for market evaluation, and in 1994 established Representative Offices in Hanoi and Ho Chi Minh City. After that, IBM Vietnam Company was established and became one of the first 100% foreigned-invested IT companies in Vietnam. IBM provides a complete range of products and services in Vietnam. These include servers (System x, System i, System p v System z), Storage System (TotalStorage), software (WebSphere, Information System DB2, Lotus, Tivoli, Rational), Point-of-Sales systems, warranty/maintenance, system integration, e-business, project management, education/training, and consulting.

IBMs transformation across processes and enterprises, bring new levels of integration among processes and applications inside the business, suppliers and distributors at either end of the business, customers outside the enterprise, and employees inside it. Clients of IBM in Vietnam include government ministries and agencies, banks, state-owned enterprises, small- and medium-size enterprises and multi-national companies and organizations.

IBM is proud to contribute to the development and progress of Vietnam not only by providing unique business solutions, experience exchange but also through philanthropic projects to support the country's education and cultural renovation efforts.


3. HP


4. Cisco

Cisco Systems, Inc. l cng ty hng u th gii v kt ni mng Internet. Hin nay, mng l mt b phn quan trng trong hot ng lin lc ca cc doanh nghip, trng hc, c quan chnh ph v h gia nh, v cc gii php mng da trn giao thc IP (Internet Protocol) ca Cisco li chnh l nn tng ca nhng mng ny.

Cisco c thnh lp nm 1984 bi mt nhm cc nh khoa hc my tnh ti Trng i hc Stanford. K t khi thnh lp, cc k s ca Cisco lun l nhng ngi i tin phong trong vic pht trin cc cng ngh mng da trn giao thc IP. Hin nay, vi hn 54,000 nhn vin trn ton th gii, truyn thng sng to c tip ni vi nhng sn phm v gii php hng u th trng trong cc lnh vc pht trin ct li ca cng ty l nh tuyn v chuyn mch, cng nh l trong cc lnh vc cng ngh tin tin nh:

Truyn thng IP Mng LAN khng dy

Kt ni mng gia nh Cc dch v kt ni ng dng

An ninh mng Kt ni mng lu tr

Cc h thng Video

Cisco nm tm im ca nhiu thay i mang tnh lch s v cng ngh, v iu vn tip tc ng cho n tn thi im hin nay. Gi y, khi m lnh vc cng ngh ang tri qua mt giai on thay i cn bn, Cisco vn l cng ty hng u th trng trong rt nhiu lnh vc nh l nh tuyn v chuyn mch, truyn thng hp nht, truyn thng khng dy v an ninh. Cng ty gip thc y s chuyn dch ca c ngnh cng nghip hng n IP v gi y Cisco cng ang nm tm im ca nhng thay i cn bn trong cch thc truyn thng ca c th gii.

Mng nh l Nn tng

S xut hin ca khi nim Mng nh l Nn tng (the network as a platform) ang lm thay i ton b chui gi tr ca cng ngh v t mng li vo trung tm ca sng to: ti nm 2010, s c n 14 t thit b c kt ni vo mng Internet . S bng n v s lng thit b s cn c tng cng thm na khi ngy cng c nhiu dch v v cng vic c x l trc tuyn, t cc cuc gi in thoi cho n tm kim c nhn hay ti video, game v cc hnh thc gii tr khc na.

Vai tr ca mng li ang pht trin vt qu vic ch n thun l mt c s h tng. N ang ni ln nh l mt nn tng an ton cung cp nhng tri nghim mang tnh ty bin v c nhn ha m nhng ngi dng ca th k 21 k vng, d l cung cp cc dch v mi nh l mt nh khai thc, nng cao nng sut ca doanh nghip mi quy m hoc l ngi tiu dng ang tm kim nhng hot ng gii tr v dch v theo thi gian thc c c nhn ha.

Khi m mt mng li ngy cng thng minh pht trin thnh mt nn tng, ngi dng s c th lin lc t bt k thit b no, theo bt c ch no m h la chn.

Cisco ang lnh o s chuyn i hng n mt mi trng cng ngh ly mng li lm trung tm. Bng cch kt hp th mnh ct li ca mnh (IP) vi tr tu, cng ty ang to ra mt nn tng truyn thng mnh m ng vai tr c s cho s hi t ca d liu, thoi, video v truyn thng di ng vo trong mt kin trc tch hp, an ton.

Nghin cu v Pht trin

bit thm thng tin, vui lng lin h: Cisco Systems Vietnam Level 12A, Vincom City Towers, 191 Ba Trieu, Hanoi.

Tel: 84.4. 39746 227 Fax: 84.4. 39742 790 www.Cisco.com/vn


Cisco sng to theo rt nhiu cch thc: thng qua pht trin cng ngh v m rng cc cng ngh sau khi chng c pht minh ra cng nh thng qua nhng cng ngh tng t v m rng th trng. Chng ti cn sng to thng qua s tch hp ng cp th gii v m rng hot ng mua li cng ty, thng qua trin khai nhng m hnh kinh doanh mi v thng qua cch chng ti hp tc vi cc cng ty khc.

Chng trnh Hc vin Mng ca Cisco

gip nng cao kh nng tip cn n cc c hi o to v ngh nghip trn ton th gii, Cisco xy dng Chng trnh Hc vin Mng ca Cisco (Cisco Networking Academy Program) o to sinh vin trong vic thit k, xy dng v duy tr cc mng my tnh. Bng cch kt hp gia o to v mng Internet, Chng trnh Hc vin Mng ca Cisco gip sinh vin thu nhn nhng k nng cn thit cho cc cng vic trong lnh vc IT v h tr hot ng o to i hc trong lnh vc k thut, khoa hc my tnh v nhng lnh vc khc c lin quan v cui cng l h tr vic pht trin cc quc gia v nn kinh t ca cc quc gia . K t khi ra i vo nm 1997, c hn 1.6 triu sinh vin theo hc ti hn 10,000 Hc vin Mng c t ti cc trng trung hc, cc trng k thut, cao ng, i hc v cc t chc o to cng ng hn 163 quc gia trn th gii.

Cc i tc Knh h tr s Pht trin Mng

Cng ngh mng ang nhanh chng thay i v to ra nhng nhu cu mi cho cc doanh nghip v t chc mi th loi. p ng, Cisco Systems pht trin mt chng trnh i tc knh hng u h tr i ng bn hng l cc i tc knh ht sc quan trng ca cng ty pht trin cc k nng v kin thc chuyn mn m h cn c pht trin.

Cc i tc Knh ca Cisco (Cisco's channel partners), mt lc lng ton cu vi hn 200,000 ngi thuc hn 20,000 nh bn l, nh tch hp h thng v nh t vn mng gia tng gi tr ang chim ti hn 90% doanh thu thng mi v doanh nghip trn ton cu ca Cisco.

bit thm thng tin v Cisco v cc chng trnh cng ngh ca cng ty, vui lng gh thm: www.Cisco.com.


Cisco Systems, Inc. is the worldwide leader in networking for the Internet. Today, networks are an essential part of business, education, government and home communications, and Cisco's Internet Protocol-based (IP) networking solutions are the foundation of these networks.

Cisco was founded in 1984 by a small group of computer scientists from Stanford University. Since the company's inception, Cisco engineers have been leaders in the development of Internet Protocol (IP)-based networking technologies. Today, with more than 54,000 employees worldwide, this tradition of innovation continues with industry-leading products and solutions in the company's core development areas of routing and switching, as well as in advanced technologies such as:

IP Communications Wireless LAN

Home Networking Application Networking Services

Network Security Storage Area Networking

Video Systems

Cisco has been at the heart of many historic changes in technology, and that continues to be true today. Now, at a time when the technology industry is going through a period of dramatic change, Cisco is the market leader in multiple areas, such as routing and switching, unified communications, wireless and security. The company helped catalyze the industry's move toward IP and, now that it is fully underway, the company is at the center of fundamental changes in the way the world communicates.

The Network is the Platform

The emergence of the network as a platform is changing the entire value chain of technology and placing the network squarely at the center of innovation: as many as 14 billion devices will be connected to the Internet by 2010. The explosion of devices will be fueled by more and more services and tasks being handled online, from phone calls to personalized searches to downloading videos, games and other forms of entertainment.

The role of the network is evolving beyond that of infrastructure. It is emerging as a secure platform for delivering the customized and personalized experience that 21st century users expect - whether that means delivering new services as a carrier, boosting productivity for businesses of any size or consumers looking for real-time, personalized entertainment and services.

As an increasingly intelligent network evolves into a platform, users will be able to communicate from any device and in whatever mode they choose.

Cisco is leading the transition to a network-centric technology environment. By combining its core strength (IP) with intelligence, the company is creating a powerful communications platform that will serve as the basis for the convergence of data, voice, video and mobile communications in a secure, integrated architecture.

Research and Development

Cisco innovates in many different ways: via technology development and the expansion of technologies after their initial invention, and through adjacent technology and market extension. We also innovate through world-class integration and scaling of acquisitions, by starting new business models, and in the way we partner with other companies.

For more information, please contact:

Cisco Systems Vietnam

Level 12A, Vincom City Towers, 191 Ba Trieu,

Hanoi.

Tel: 84.4. 39746 227

Fax: 84.4. 39742 790

www.Cisco.com/vn


Cisco Networking Academy Program

To help foster access to education and professional opportunities worldwide, the company founded the Cisco Networking Academy Program, which trains students to design, build, and maintain computer networks. By combining education and the Internet, Cisco Networking Academies help students acquire the skills needed for IT-related jobs and for higher education in engineering, computer science, and related fieldsand ultimately, aid in the development of their countries and their local economies. Since its creation in 1997, over 1.6 Million students have enrolled at more than 10,000 Academies located in high schools, technical schools, colleges, universities, and community-based organizations in more than 163 countries.

Channel Partners Address Network Evolution

Network technology is rapidly changing and creating new demands by businesses and organizations of all types. In response, Cisco Systems has developed its industry-leading channel partner program to help the company's important sales force, its channel partners, develop the skills and expertise they need to thrive.

Cisco's channel partners, a global force of over 200,000 people in 20,000 independent value-added resellers, systems integrators and network consultancies, account for more than 90 percent of Cisco's commercial and enterprise revenue worldwide.

For more information on Cisco and its technology initiatives, go to www.Cisco.com.


5. Microsoft

Microsoft (i khi vit tt l MS) l mt tp on Cng ngh my tnh a quc gia tm c th gii ca M do Bill Gates lm ch tch, vi s nhn vin l 79.000 ngi ti 102 quc gia v tng doanh thu nm 2007 t 51,12 t USD. Tp on ny pht trin, gia cng, v cp bn quyn cho cc phn mm phc v trong my tnh. Tr s chnh ca Microsoft t ti Redmond, Washington M.

Cc sn phm bn chy nht ca Microsoft bao gm h cc h iu hnh thuc h Microsoft Windows (Windows NT, Windows 95, Windows 98 SE, Windows ME, Windows 2000, Windows XP (SP1, SP2), Windows Server 2003, Windows Vista) v b phn mm vn phng Microsoft Office. l nhng sn phm rt ni ting trong th trng phn mm cho my tnh c nhn, chim th phn ln n 90% hoc hn nh vi Microsoft Office nm 2003, v Microsoft Windows nm 2006.

c thnh lp pht trin phn mm trnh dch BASIC interpreters cho my Altair 8800 , Microsoft vn ln thng tr th trng h iu hnh cho my tnh gia nh vi MS-DOS gia nhng nm 1980. C phiu ca cng ty sau khi c pht hnh ln u ra th trng tng gi nhanh chng v to ra 4 nh t ph v 12000 nh triu ph trong cng ty. Xuyn sut lch s, tp on ny lun l mc tiu ca rt nhiu s ch trch, bao gm cc th on c quyn kinh doanh. Trong c t pha y ban cng l Hoa K (United States Department of Justice), v y ban chu u (European commission), lm Microsoft dnh vo rt nhiu v kin tng v chng c quyn.

Microsoft cng c mt ch ng trong cc th trng khc bn cnh th trng h iu hnh v phn mm vn phng, nh mng truyn hnh cp MSNBC, cng Internet MSN, v b t in bch khoa a phng tin Microsoft Encarta. Cng ty cng kinh doanh hai dng sn phm phn cng my tnh l Microsoft mouse v sn phm gii tr gia nh nh Xbox, Xbox 360, Zune v MSN TV.

Windows Live (Bn Beta) mi c cng b trang http://www.ideas.live.com/ v sp ti l h iu hnh Windows Vista, bn Microsoft Office 2007 d kin ti cui nm 2006, u nm 2007 s pht hnh v cng b rng ri trn ton cu. Sn phm vn phng Microsoft Office (95, 97, 2000, XP, 2003, 2007).

Lch s

- 6/1978: Bill Gates v Paul Allen ng k bn quyn cho sn phm tr tu u tay v thng 11/1978 Microsoft chnh thc c ra i.

Phm vi hot ng

Microsoft c mt ti hu ht cc quc gia v, Microsoft t chi nhnh hn 102 quc gia (2007) v c phn loi thnh 6 khu vc:

1.Bc M.

2.Chu M Latinh.

3.Chu u, Trung ng, Chu Phi.

4.Nht Bn.

5.Chu Thi Bnh Dng.

6.Trung Quc.


6. BUREAU VERITAS GII THIU


7. TRUSTBank Ngn hng thng mi c phn (TMCP) i Tn TRUSTBank chnh thc thnh lp vo nm 1989, vi tn gi l Ngn hng TMCP nng thn Rch Kin - ngn hng c phn u tin ca tnh Long An, v c Ngn

hng Nh nc Vit Nam cp giy php hot ng s 0047/NH-GP ngy 29/12/1993, tr s chnh ti s 1, Th t Long Ha, Huyn Cn c, Tnh Long An.

Ngy 17/08/2007, theo quyt nh s 1931/Q-NHNN, Ngn hng TMCP nng thn Rch Kin c Thng c NHNN Vit Nam chp thun chnh thc chuyn i m hnh hot ng thnh Ngn hng TMCP th v i tn thnh Ngn hng TMCP i Tn, theo quyt nh s 2136/Q-NHNN ngy 17/09/2007 ca NHNN Vit Nam.

Vic chp thun cho TRUSTBank chuyn i m hnh hot ng t Ngn hng TMCP nng thn sang Ngn hng TMCP th to iu kin cho NH nng cao nng lc v ti chnh, m rng mng li hot ng kinh doanh, sc cnh tranh v pht trin mnh m, nh du mt giai on pht trin mi ca TRUSTBank vi mc tiu phn u tr thnh mt ngn hng bn l hin i theo cc chun mc quc t, cung cp sn phm dch v a dng t c bn n cao cp, hon thnh mc tiu a TRUSTBank tr thnh mt trong s cc ngn hng c cht lng phc v tt nht ti Vit Nam.

I - Vn iu l: Tnh n 13/11/2009 vn iu l ca TRUSTBank l 1.500 t ng (Mt nghn nm trm t ng). II - Sn phm dch v chnh: TRUSTBank cung cp a dng cc sn phm, dch v ti chnh ph hp vi nhu cu ca Qu khch hng nh:

Huy ng vn bng ng Vit Nam, ngoi t;

Cung cp tn dng, u t, gp vn lin doanh bng ng Vit Nam, ngoi t;

Cc dch v thanh ton trong nc, dch v ngn qu, chuyn tin kiu hi & chuyn tin nhanh, bo him nhn th qua ngn hng;

Thanh ton quc t &kinh doanh ngoi t.

III - Mng li hot ng: Hin nay, TRUSTBank gm 51 chi nhnh v phng giao dch ti cc tnh thnh thuc vng kinh t trng im trong c nc. D kin n cui nm 2009, mng li hot ng ca TRUSTBank bao gm 60 chi nhnh/ phng giao dch ti khp cc tnh, thnh ph, trung tm kinh t trn c nc.

IV - Nhn s: Tnh n ngy 23/10/2009 tng s nhn vin ca TRUSTBank l 668 ngi. a s cn b nhn vin c trnh i hc v trn i hc, thng xuyn c o to chuyn mn nghip v ti trung tm o to ca TRUSTBank v cc trng i hc, Vin nghin cu trong nc.

V - nh hng & Mc tiu pht trin: TRUSTBank nh hng tr thnh mt trong nhng Ngn hng TMCP th pht trin, c nghip v a dng, cht lng phc v cao, cng ngh ngn hng hin i, mng li knh phn phi rng da trn nn tng m hnh t chc v qun l theo chun mc quc t, cng ngh thng tin hin i, cng ngh ngn hng tin tin, tng bc a TRUSTBank tr thnh mt thng hiu ngn hng bn l c uy tn trn th trng ti chnh trong nc v quc t.


TRUSTBank s tip tc a ra cc gii php mi nhm t c cc mc tiu ra:

1. Tng vn iu l: ln 3.000 t ng (n nm 2010). 2. Pht trin ngun vn huy ng: hin i ha cng ngh ngn hng trc tuyn, cho ra cc sn phm a dng, chng trnh khuyn mi ph hp, p ng nhu cu thit thc v tt nht vi tng i tng khch hng.

3. Xc nh i tng v chnh sch hot ng kinh doanh: xc nh i tng u t tn dng ph hp; nghin cu u t, tham gia lin doanh gp vn i vi mt s d n trng im; c cu li ti sn sinh li nhm m bo hot ng an ton v n nh.

4. Xc nh th trng v lnh vc kinh doanh khc: nhanh chng nm bt cc c hi kinh doanh trn th trng mc tiu, c k hoch thm nhp cc th trng tim nng.

5. Pht trin cc dch v Ngn hng: nng cp cht lng dch v hin c, to iu kin h tr cho cc nghip v khc pht trin, lin kt vi cc Ngn hng bn pht trin cc dch v Ngn hng.

6. Pht trin mng li hot ng nhm gip cho Ngn hng tip cn v mang sn phm n vi khch hng.

7. Pht trin ngun nhn lc.

8. Hin i ha cng ngh Ngn hng.

VI - Cam kt: Vi mc ch mang n li nhun tt nht cho cc c ng, song song vi vic p ng nhu cu khch hng, TRUSTBank cam kt phc v mt cch hiu qu cho ton th khch hng cng nh CB-CNV ca TRUSTBank, bng cch:

y mnh ci cch nhm t ti nhng chun mc, thng l quc t v hot ng tin t, ngn hng, tip tc nng cao nng lc ti chnh, cht lng tn dng tip cn cc tiu chun quc t.

Hng n hin i ha cng ngh ngn hng nhanh chng tip cn v pht trin cc dch v ngn hng thng mi hin i - a nng, tng cng cng tc qun l ri ro nhm p ng cc tiu chun quc t v h s an ton tn dng, nng cao hiu qu kinh doanh cng nh nng lc cnh tranh.

Ch trng y mnh cng tc huy ng vn vi nhiu hnh thc phong ph, p ng kp thi nhu cu vn ca cc thnh phn kinh t trn phm vi c nc.

Nhanh chng m rng mng li hot ng ti cc tnh, thnh vng kinh t trng im trong c nc.

Pht trin sn phm th (ATM, th tn dng) nhm nng cao cht lng phc v khch hng. Tng cng quan h v thu ht cc c ng chin lc l cc Ngn hng hng u trong v

ngoi nc, cc tp on kinh t ln, tim lc ti chnh mnh.


Quan tm nng cao cht lng phc v khch hng, a ra cc gii php chm sc hu hiu, p ng cao nht cc nhu cu hp l ca khch hng.

Nghin cu pht trin a dng ha cc sn phm.


8. Secude


9. Kaspersky

Gii thiu sn phm Kaspersky:

Kaspersky Lab tr thnh thng hiu s 1 v anti-virus ti Vit Nam. Kaspersky Lab mang n cho khch hng s yn tm khch hng kt ni an ton vo khng gian cng ngh y cm hng. Ch trong vng 2 nm xut hin ti Vit Na

VNISA - Ky yeu ngay ATTT 2009.pdf

Documents

Transcript of VNISA - Ky yeu ngay ATTT 2009.pdf