{"id":224248,"date":"2024-02-17T16:27:26","date_gmt":"2024-02-17T16:27:26","guid":{"rendered":"https:\/\/bm.dev.synology.me\/?p=224248"},"modified":"2024-02-17T16:27:26","modified_gmt":"2024-02-17T16:27:26","slug":"dan-cimpean-seful-directoratului-national-de-securitate-cibernetica-mesaj-despre-atacul-in-care-s-au-furat-datele-personale-ale-premierului-si-cel-care-a-provoicat-haos-in-zeci-de-spitale-un-test-s","status":"publish","type":"post","link":"https:\/\/bm.dev.synology.me\/?p=224248","title":{"rendered":"Dan C\u00eempean, \u015feful Directoratului Na\u0163ional de Securitate Cibernetic\u0103, mesaj despre atacul \u00een care s-au furat datele personale ale premierului \u015fi cel care a provoicat haos \u00een zeci de spitale: un test solid pentru rezisten\u0163a noastr\u0103; arat\u0103 c\u0103 putem rezista cu succes la (cel pu\u0163in) un atac cibernetic major pe s\u0103pt\u0103m\u00e2n\u0103"},"content":{"rendered":"<p>\nAtacurile cibernetice care au avut ca \u0163int\u0103 Camera Deputa\u0163ilor &#8211; de unde s-au furat date personale ale mai multor parlamentari, inclusiv ale premierului Marcel Ciolacu, \u015fi cel care a vizat sistemul de s\u0103n\u0103tate \u015fi care a dat peste cap activitatea din zeci de spitale &#8211; au demonstrat \u201ecapacit\u0103\u0163ile \u015fi rezisten\u0163a\u201d capabilit\u0103\u0163ilor de securitate cibernetic\u0103 ale Rom\u00e2niei, care a gestionat singur\u0103 aceste dou\u0103 incidente, potrivit unui articol publicat \u00een limba englez\u0103, pe re\u0163eaua social\u0103 de business LinkedIN, de Dan C\u00eempean, directorul Directoratului Na\u0163ional de Securitate Cibernetic\u0103 (DNSC) &#8211; autoritatea competent\u0103 la nivel na\u0163ional ce are ca principale responsabilit\u0103\u0163i asigurarea securit\u0103\u0163ii cibernetice a spa\u0163iului cibernetic na\u0163ional civil, precum \u015fi gestionarea riscurilor \u015fi a incidentelor de securitate cibernetic\u0103.<\/p>\n<p>\nArticolul scris de Dan C\u00eempean se concentreaz\u0103 pe modul \u00een care DNSC \u015fi alte structuri publice \u015fi private au gestionat incidentele, f\u0103r\u0103 a intra \u00een detalii despre modul \u00een care au avut loc atacurile \u015fi ce verific\u0103ri ar fi trebuit s\u0103 fi fost f\u0103cute \u015fi de c\u0103tre cine pentru ca atacurile s\u0103 nu ating\u0103 aceast\u0103 dimensiune (s\u0103 fir accesate date personale ale unor parlamentari \u015fi s\u0103 fie dat\u0103 peste cap activitatea din zeci de spitale). Pe de alt\u0103 parte, nu sunt cunoscute nici date despre ce amploare ar fi avut incidentele f\u0103r\u0103 interven\u0163ia echipelor DNSC \u015fi ale celorlalte structuri implicate \u00een condi\u0163iile \u00een care DNSC nu a organizat p\u00e2n\u0103 \u00een prezent o conferin\u0163\u0103 de pres\u0103 \u00een care s\u0103 ofere date \u015fi s\u0103 r\u0103spund\u0103 \u00eentreb\u0103rilor publicului despre cele dou\u0103 atacuri.<\/p>\n<p>\nRed\u0103m \u00een cele ce urmeaz\u0103 principalele mesaje din <a href=\"https:\/\/www.linkedin.com\/pulse\/two-cyber-weeks-romania-dan-cimpean-wyile%3FtrackingId=7vKy5Ya%252BTc6ro0xHPGUKeg%253D%253D\/?trackingId=7vKy5Ya%2BTc6ro0xHPGUKeg%3D%3D\">articolul scris de Dan C\u00eempean<\/a>, traduse din limba englez\u0103:<\/p>\n<p>\n\u201eUltimele dou\u0103 s\u0103pt\u0103m\u00e2ni au fost un test solid pentru capacit\u0103\u0163ile \u015fi rezisten\u0163a noastr\u0103 \u00een materie de securitate cibernetic\u0103 la nivel na\u0163ional:<\/p>\n<p>\nUn atac cibernetic \u00eempotriva Camerei Deputa\u0163ilor (Parlamentul Rom\u00e2niei)<\/p>\n<p>\nUnul \u00eempotriva sectorului nostru na\u0163ional de s\u0103n\u0103tate \u015fi a lan\u0163ului de aprovizionare IT&#038;C al acestuia<\/p>\n<p>\nEste un fapt c\u0103 putem rezista cu succes la (cel pu\u0163in) un atac cibernetic major pe s\u0103pt\u0103m\u00e2n\u0103 \u015fi c\u0103 ecosistemul public-privat na\u0163ional cibernetic poate da rezultate, chiar \u015fi \u00eentr-o situa\u0163ie de criz\u0103 cibernetic\u0103 apropiat\u0103.<\/p>\n<p>\nPentru oricine lucreaz\u0103 \u00een aceast\u0103 profesie, este suficient s\u0103 spunem c\u0103 DNSC a decis s\u0103 nu escaladeze, nici s\u0103 activeze mecanismul EU-CyCLONe. Pentru c\u0103 am gestionat situa\u0163ia &#8230;<br \/>\nDin partea Direc\u0163iei, eu \u015fi membrii de baz\u0103 ai echipelor mele tehnice \u015fi de comunicare am fost \u00eentr-o situa\u0163ie real\u0103, din lumea real\u0103, f\u0103r\u0103 erori permise. S\u0103 tr\u0103ie\u015fti aproximativ dou\u0103 s\u0103pt\u0103m\u00e2ni cu cafea \u015fi b\u0103uturi energizante \u00een camerele de r\u0103zboi virtuale \u015fi la fa\u0163a locului ale DNSC este o experien\u0163\u0103 de c\u0103lire pentru orice profesionist \u00een domeniul cibernetic.<\/p>\n<p>\nSunt, de asemenea, deosebit de \u00eenc\u00e2ntat de faptul c\u0103 acum s-a dovedit c\u0103 se pot gestiona incidente cibernetice majore cu echipe care lucreaz\u0103 la distan\u0163\u0103 \u015fi folosesc tehnologia pentru a \u0163ine leg\u0103tura, a comunica \u015fi a r\u0103spunde. Prezen\u0163a fizic\u0103 a tuturor \u00eentr-o singur\u0103 \u00eenc\u0103pere este pur \u015fi simplu dep\u0103\u015fit\u0103, o g\u00e2ndire retrograd\u0103 \u015fi nu mai este cel mai bun mod de a lucra \u015fi de a livra pentru profesioni\u015ftii din domeniul cibernetic.<\/p>\n<p>\n\u00cen timpul unei crize cibernetice, o echip\u0103 de profesioni\u015fti nu folose\u015fte dosare de h\u00e2rtie \u015fi \u015ftampile de cauciuc, ci laptopuri \u015fi criptare, fluxuri de date de informa\u0163ii despre amenin\u0163\u0103ri \u015fi leg\u0103turi video \u00een \u00eentreaga \u0163ar\u0103 \u015fi \u00een \u00eentreaga lume, \u015fi transmite scenarii, instruc\u0163iuni, dovezi ale compromiterii unor sisteme (IOC) \u015fi reguli Yara. Tr\u0103im \u00een secolul XXI, nu \u00een XIX, v\u0103 rog&#8230;<\/p>\n<p>\nConcluzionez c\u0103 DNSC a reu\u015fit s\u0103 \u00ee\u015fi demonstreze capacitatea de a activa, coordona \u015fi colabora at\u00e2t cu victimele atacurilor cibernetice, c\u00e2t \u015fi cu principalii actori guvernamentali \u015fi priva\u0163i implica\u0163i \u00een solu\u0163ionarea acestora.<\/p>\n<p>\n\u00cen ceea ce prive\u015fte consecin\u0163ele celor dou\u0103 atacuri cibernetice, mai avem \u00eenc\u0103 (\u00een mod colectiv) mult de lucru pentru a efectua o analiz\u0103 post-mortem am\u0103nun\u0163it\u0103 a incidentului, pentru a lucra la ancheta criminalistica digital\u0103, pentru a trage \u00eenv\u0103\u0163\u0103minte \u015fi pentru a activa contram\u0103suri suplimentare adecvate care s\u0103 protejeze mai bine victimele.<\/p>\n<p>\nSunt \u00eenc\u00e2ntat \u015fi m\u00e2ndru c\u0103 Rom\u00e2nia \u00ee\u015fi respect\u0103 (\u00een special \u00een timpul acestor dou\u0103 incidente) angajamentul de a combate \u015fi de a contracara ransomware-ul, \u00eempiedic\u00e2nd accesul atacatorilor la finan\u0163area activit\u0103\u0163ilor lor mali\u0163ioase sau la ob\u0163inerea de faim\u0103 sau credit din activit\u0103\u0163ile lor criminale. Pur \u015fi simplu, nu pl\u0103tim nicio r\u0103scump\u0103rare cibernetic\u0103 \u015fi nu negociem pe aceast\u0103 tem\u0103!<\/p>\n<p>\nS-au f\u0103cut oferte de sprijin din partea alia\u0163ilor \u015fi partenerilor no\u015ftri interna\u0163ionali \u015fi sunt recunosc\u0103tor pentru fiecare dintre acestea. Dar, \u00een primul r\u00e2nd, Rom\u00e2nia a trebuit s\u0103 testeze \u015fi s\u0103 aib\u0103 \u00eencredere \u00een propriile capacit\u0103\u0163i \u015fi \u00een dorin\u0163a de a aborda, limita, descuraja \u015fi r\u0103spunde la astfel de atacuri cibernetice.<\/p>\n<p>\nTrollii \u015fi pseudo-exper\u0163ii cibernetici au fost \u015fi ei acolo, &#8220;ajut\u00e2nd&#8221; ca de obicei, dar au e\u015fuat lamentabil \u00een tot ceea ce au \u00eencercat s\u0103 tulbure, s\u0103 deturneze sau s\u0103 nege. Nimeni nu a pierdut&#8230;<br \/>\nPentru noi ceilal\u0163i, Dumnezeu s\u0103 ne ajute!!!\u201d<br \/>\n&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8220;Este un fapt c\u0103 putem rezista cu succes la (cel pu\u0163in) un atac cibernetic major pe s\u0103pt\u0103m\u00e2n\u0103 \u015fi c\u0103 ecosistemul public-privat na\u0163ional cibernetic poate da rezultate, chiar \u015fi \u00eentr-o situa\u0163ie de criz\u0103 cibernetic\u0103 apropiat\u0103.&#8221;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[510],"tags":[32901,10653,363,8362,307,32507,443,10088,195,18076,23122,17927,10520,22136,433,80,219,4466,9039,10210,6],"class_list":["post-224248","post","type-post","status-publish","format-standard","hentry","category-actualitate","tag-articol","tag-atac","tag-atacuri","tag-bauturi","tag-cafea","tag-cibernetic","tag-echipe","tag-energizante","tag-experienta","tag-gestionare","tag-haos","tag-incidente","tag-mesaj","tag-national","tag-premier","tag-refuz","tag-securitate","tag-sef","tag-spitale","tag-succes","tag-test"],"_links":{"self":[{"href":"https:\/\/bm.dev.synology.me\/index.php?rest_route=\/wp\/v2\/posts\/224248","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bm.dev.synology.me\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bm.dev.synology.me\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bm.dev.synology.me\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bm.dev.synology.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=224248"}],"version-history":[{"count":0,"href":"https:\/\/bm.dev.synology.me\/index.php?rest_route=\/wp\/v2\/posts\/224248\/revisions"}],"wp:attachment":[{"href":"https:\/\/bm.dev.synology.me\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=224248"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bm.dev.synology.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=224248"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bm.dev.synology.me\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=224248"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}