Shulou(Shulou.com)06/01 Report--

IDC Review Network (idcps.com) reported on March 10: according to the sampling monitoring results of CNCERT and the data released by the National Information Security vulnerability sharing platform (CNVD), the overall evaluation of China's Internet network security index was good during the fourth week of February (2015-02-23 to 2015-03-01).

Next, please follow the situation of Internet network security in China during the period from February 23 to March 01 with IDC Review Network:

(figure 1) basic situation chart of network security in the fourth week of February

As shown in figure 1, in the fourth week of February, the overall evaluation of China's Internet network security index was good. If you take a closer look at figure 1, we can see that the number of hosts infected with the virus in China is about 616000, an increase of 34.0% over last week. The total number of tampered websites in China decreased by 10.6% to 3355, of which the number of government websites decreased by 8.9% compared with last week.

In addition, the total number of implanted backdoor websites in China rose to 961, an increase of 185.2% from the previous month, of which the number of government websites was 43; the number of counterfeit pages aimed at domestic websites reached 582, an increase of 27.1% compared with last week.

In addition, the number of new information security vulnerabilities is 175, including 33 high-risk vulnerabilities.

I. activities of network viruses

(figure 2) Chart of network virus activity

As can be seen from figure 2, the number of hosts infected with network viruses reached 616000 this week, an increase of 156000 compared with the previous week. Among them, the number of hosts controlled by * or zombie programs in China is about 522000, up 38.1% from last week, and the number of hosts infected with conficker worm also increased to 94000, an increase of 14.8%.

(figure 3) Chart of network virus activity

As can be seen from figure 3, 12 new network virus names were added this week, up 9.1% from last week, and 2 new network virus families were added, with an increase of 1 compared with the previous week.

(figure 4) Distribution of domain name registration at Fangma site at home and abroad

Looking at figure 4, the domestic and foreign distribution of domain name registration at Fangma site this week is as follows: the domestic share is still the largest, at 64.1%, with an increase of 4.7% compared with the previous month; accordingly, the proportion outside the country has shrunk to 35.9%. The two have been in a state of growth and decline.

(figure 5) the top-level domain names of 142 release sites

It can be learned from figure 5 that the top five top-level domain names of the 142 release sites this week have changed compared with last week. Among them, .CN replaced .NET in second place, accounting for 12.7%, while .NET fell to third, but its share also increased to 9.2%. In addition, .ORG and .info accounted for 1.4%, tied for fourth, compared with last week, .info ranked up one place. In addition, .CC and .HK tied for fifth place, with .CC falling 1 place. Finally, com, which has the largest proportion of introduction, accounted for 73.9%, down 11.3% from last week.

II. Website security

(figure 6) Distribution of tampered websites by type in China

Looking at figure 6, in terms of network security, the distribution of tampered websites in China by type is 74.4% .com, 6.5% .NET, 2.4% .gov, 1.9% .ORG, and so on. Among them, the share of .com decreased by 0.2%. What is interesting is that .NET and .ORG accounted for an increase of 0.2%. In addition, the share of .gov is dramatically the same as last week, at 2.4%.

(figure 7) the websites implanted into the backdoor in China are distributed by type.

As shown in figure 7, in the distribution of websites implanted into backdoors in China, .com still accounts for half of the country, accounting for 58.6%, an increase of 4.1% compared with the previous month. It was followed by .NET, which rose to 5.7% and rose 1 place in the ranking. The original second place. ORG fell to fifth place because of its shrinking share. In addition, .gov accounted for 4.5% of the total, and 3.7% of the total.

III. Important loopholes

(figure 8) Information security vulnerability chart

Looking at figure 8, we can see that among the new information security vulnerabilities added this week, the number of medium-risk vulnerabilities is the largest, 126, accounting for 72% of the total. In addition, there are 16 low-risk vulnerabilities and 33 high-risk vulnerabilities.

(figure 9) vulnerabilities included this week are distributed by type of impact object.

According to figure 9, the top five vulnerabilities distributed according to the type of affected objects this week are as follows: application vulnerabilities rank first, accounting for 70.3%, accounting for 70.3%, followed by Web application vulnerabilities, accounting for 19.4%, followed by network device vulnerabilities, operating system vulnerabilities, and security product vulnerabilities. Among them, the proportion of vulnerabilities in security products is the smallest, only 0.6%.

To sum up, during the fourth week of February, the overall evaluation of China's Internet network security index was good. No serious network security incidents have been found.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.