In December 2017, the report of the law enforcement inspection team of the Standing Committee of the National People's Congress on inspecting the implementation of the network security law and the decision on strengthening the protection of network information was submitted to the 31st meeting of the Standing Committee of the Twelfth National People's Congress for deliberation. In order to understand the network operation, the law enforcement inspection team entrusted China Information Security Evaluation Center to conduct remote penetration test and vulnerability scanning on 120 randomly selected key information infrastructures (60 portals and 60 business systems).
The report shows that among the 120 key information infrastructures in the remote test, there are 30 security vulnerabilities, including 13 high-risk vulnerabilities. Among them, there are three high-risk vulnerabilities in the Internet supervision comprehensive platform of a provincial department, such as ultra vires uploading, ultra vires downloading and ultra vires deleting files, which seriously threaten the security of the system and server, and there is also a serious risk of user information disclosure. Remote detection also found that there was a risk that the pages of several municipal government portals divided into districts were tampered with.
Article 7 of Decree No. 82 of the Ministry of public security expressly stipulates that Internet service providers and Internet users shall implement the following technical measures for Internet Security Protection:
1. Technical measures to prevent computer viruses, network intrusion, attack damage and other matters or behaviors endangering network security;
2. Redundant disaster backup measures for important databases and main equipment of the system;
3. Record and keep the technical measures of user login and exit time, calling number, account number, Internet address or domain name and system maintenance log;
4. Other safety protection technical measures that should be implemented according to laws, regulations and rules.
According to IDC's statistics, 75% of the attacks on the current network are aimed at web applications. With the increasing number of web applications, security problems such as web abuse, virus flooding and hacker attacks occur frequently, resulting in web applications being tampered with and data being stolen or lost.
The web security attacks faced by government agencies and units mainly include the following:
one SQL injection;
two Cross Station XSS;
three Directory traversal;
four Web page tampering;
five Sensitive data disclosure.