Is it the most dangerous .vn domain in the world?

McAfee has just published the survey results that startled the security community in Vietnam, saying that .vn websites are the most dangerous addresses in the world. Is the domain name of .vn website really dangerous?

Survey results are not accurate

According to a new survey published by McAfee, .vn domain names become the most dangerous web addresses in the world.McAfee researchers found that 58% of the .vn websites surveyed contained malicious code that posed a risk to visitors . This is a very shocking figure with the 2009 survey of this company (only 0.9% of the .vn domain name website contains malicious code and ranks 39th in the world in terms of danger level). This figure is also very high compared to the world average of 6.2% this year, a slight increase compared to last year (5.9%).

Is it the most dangerous .vn domain in the world? Picture 1

Talking to reporters from Vietnam Post Newspaper, Mr. Hoang Minh Cuong, Deputy Director of Vietnam Internet Network Information Center (VNNIC) said that McAfee's results have many ' suspicious ' points. Last year, McAfee ranked Vietnam 39th, but this year it ranked first, while the number of its surveyed websites was nearly the same for two years.

' It will be very unlikely that from last year to this year with the same number of surveyed websites that the number of dangerous websites will increase so quickly, ' Cuong said skeptically.

With the same view, Mr. Nguyen Minh Duc, Director of BKIS Security also said that: Although often working with malicious websites containing exploit codes in Vietnam, BKIS was completely surprised with the results that McAfee gave. out . After thorough research, BKIS said that McAfee's results are not really accurate because according to them among nearly 25,000 surveyed domains (Vietnam currently has more than 170,000 websites .vn domain names) there are more than half of them. The website contains malicious code. That means that any user who has access to two .vn domain names, one of them is malicious.

' This is in my opinion not really reasonable because the probability of accessing the .vn website contains malicious code is too high while the average user itself has a low chance of accessing these websites ', Mr. Duc emphasize.

Before this information, Mr. Vu Quoc Khanh, Director of the Vietnam Computer Emergency Response Center (VNCERT), confirmed that he will contact McAfee again to find out and discuss how to measure and calculate They are like they did with Kaspersky survey results.

Mr. Khanh said that before, after VNCERT sent feedback, Kaspersky had to review and acknowledge that their calculation method was wrong and when making preliminary calculations, Vietnam was below the 10th and not ranked 5th. as Kaspersky announced. Therefore, although it is not possible to confirm the results of McAfee, it is possible that their measurement is similar to the way Kaspersky did.

However, although McAfee's results are not really accurate and mostly for reference purposes, it is also a warning to users, administrators of .vn websites about system risks. The system is infected with malicious code when Vietnam is also a country that has been attacked by hackers relatively much.

According to BKIS data, in 2009 there were more than 1,000 attacks on websites in Vietnam and in 2010 there were about 700-800 cases. These attacks are primarily aimed at government websites (with the .gov.vn extension). Cause according to Mr. Duc: ' It is because we are not aware of security issues, which leads to the loose management of websites to exist on the system of vulnerabilities due to not regularly updating the versions. patching, not decentralizing careful management, poor password setting . so hackers can take advantage to exploit and appropriate '.

Mr. Nguyen Tien Anh Tuan, representative of FPT International Telecommunication Company Limited (FTI) said that among the company's customers, the number of attacks on .vn websites is not much and often falls into pages. Web of small and medium companies. Because small and medium enterprises have not given adequate attention to security issues because the website budget is not much. Another reason is because the websites themselves are built with source code that does not guarantee to lower the price, so in the process of uploading, it can cause errors or create security holes.

Need proper attention

According to Mr. Tuan, in order to ensure the safety of information for websites, it is necessary to have the proper attention to the use of security tools and tools. Next, companies and individuals must choose reputable and experienced website design, programming, and building units. In terms of system, it is necessary to select reliable hosting and data service providers such as FPT Telecom, VDC . to get necessary support when having problems.

Web systems are always the target of hackers because when they control the website, they will install malicious code on the visitor's computer. Therefore, Mr. Duc advised the administrators to be careful and pay more attention to the security of the system of those websites.

Like Mr. Duc, according to Mr. Khanh, webmasters should use wide-spread anti-infection tools such as firewalls or antivirus software, attack detection devices . and regularly update databases. New material for these tools.

' As in Australia, the government has mandated that any computer or website system that is not equipped with a firewall and not use anti-virus software turn off the Internet connection. As a result, Australia is at the bottom of the list of countries affected by the attack , 'Khanh said.

There will be a separate survey

In order to properly assess the information insecurity situation of websites in Vietnam, VNCERT and BKIS said that in the coming time, many units will be mobilized to participate in a nationwide survey on the state of security. security of .vn websites. In the immediate future, in mid-November, in the framework of Information Safety, VNCERT will announce the results of the survey on information security measures of electronic portals.