Key conclusions
The Russian IT Sector Has Great Potential for Development
“In just months, we will go through the cyber-security introduction processes that take years and never come to an end in other companies and countries. And, as a result of this, not only will we end up with the very best software that identifies hacker attacks because it is hammered out in action, we will have the most competitive software and the best people capable of countering attacks”, CEO, Positive Technologies, Denis Baranov.
“Some companies, like Netflix, have simply left, demonstrating their attitude toward users. But for our companies, it is question of opportunities because the Netflix audience has smoothly transferred to our paid services. Our Premier online cinema is obviously benefiting, since we have received a sufficient inflow of paid subscribers and users of our service. Speaking of user content, there are sufficient resources in the country VKontakte and our Rutube, our Yappi, which is growing exponentially. Back in January, Rutube had a monthly audience of 11 million users, while today’s figure is over 25 million”, CEO, Gazprom-Media Holding, Alexander Zharov.
Russia Has a High Level of Cyber-Protection Against Outside Threats
“Relevant facilities of the critical information infrastructure are, in the main, properly protected. […] The last four months have shown that the system works. The information space has stood up and no significance facilities of the critical information infrastructure have been damaged”, Deputy Director, National Computer Incident Response and Coordination Centre, Nikolay Murashov.
“The Kaspersky Lab has an outstanding group of information security specialists. Overall, there are only a couple of hundred such experts in the world. Of these, a large proportion can be found here, in our country. We have unrivalled minds and top mathematicians. […] There is no longer a brain drain of IT specialists from here. In general, people are not leaving and hiring is going up, people are coming to us”, Deputy CEO, Gazprom-Media Holding, General Director, Rutube, Alexander Moiseev.
PROBLEMS
Growth of cyber-attacks on Russia’s online resources
“An unprecedented number of attacks are now being made against Russia. This is the most frequently attacked country and the level of attacks is the highest since the inception of the Internet. And the fact that we are receiving the right experience, even though it might be painful and cause us problems, it discloses absolutely all vulnerable spots. It is understood that due attention must be paid to information security. This emphasises that apparently not enough attention used to be paid to information security”, Chief of the Presidential Directorate for the Development of Information and Communication Technology and Communications Infrastructure, Tatyana Matveeva.
“Media resources are currently a major target for our adversaries. We have certain experts and specialists who help various companies 24/7 to protect themselves against diverse threats, including targeted ones. Our clients are many media resources and companies. Over the last quarter, the number of targeted attacks has quadrupled, specifically against media companies”, Director for Research and Development, Kaspersky Lab, Anton Ivanov.
Negligent Attitude Toward Cyber-Security
“Even on a global scale, only 77% of companies have a basic level of information security. So 23% of companies, almost a quarter, are not protected at all. And this applies to Russian companies, too. […] About 2% of the world’s top-managers use primitive passwords that even an amateur can find with ease”, CEO, Gazprom-Media Holding, Alexander Zharov.
“The media have only come to the front just now. […] This sector was never at the forefront in this respect. Now we are countering adversaries acting as cyber-terrorists. Their aim is not to steal money but cause as much damage as possible everywhere. And Rutube came under attack. <...> A false opinion might emerge that all our facilities are well protected because this infrastructure has never actually been tested”, CEO, Positive Technologies, Denis Baranov.
SOLUTIONS
To Create a Cyber-Security Centre
“It seems to me that creation of a computer attack warning centre would make it possible to exchange specific information securely. To provide details about what happened and how – essentially, to lay one’s cards on the table, so specialists should discuss this and draw common conclusions. And if the specialists assess that we are at a stage of cyber-hooliganism, we need to prepare, the gauntlet has been thrown down and the Rutube incident requires an industry-wide response, which is undoubtedly creation of such a centre. And the state authorities must combine their efforts”, CEO, Gazprom-Media Holding, Alexander Zharov.
“Now it would be just right to create some sort of consolidated information security centre of an industry-wide nature, where it would be really possible to make provision for specifics because any security system is built on a threat model. <...> Creation of such a specialized centre within the media sector would now be justified”, Chief of the Presidential Directorate for the Development of Information and Communication Technology and Communications Infrastructure, Tatyana Matveeva.
Combining the Efforts of Domestic IT Specialists
“Over the last three months, the attacks have been most diverse, DDos-attacks are made virtually every day against all media resources at the federal level. All this is teaching a lesson. Conclusions have been drawn and it seems to me that we need to transfer from a defensive position, waiting for attacks, to being proactive. Specialists need to be engaged. The information sphere today is such that a whole consortium is required of companies specializing in different aspects of information and cyber security combining their efforts”, CEO, Gazprom-Media Holding, Alexander Zharov.
“In order to begin working attentively with this problem, it is not possible now for each to do something individually. The current system is very complex. Each element of the infrastructure is a separate legal entity responsible only to itself. […] Let’s get together and start from scratch: we need a coordination function, a regulatory framework, incentives to owners of media company separate elements in order to build our security properly”, Vice President for Information Security, Rostelecom, Igor Lyapunov.
For more detail, see the ROSCONGRESS.ORG Information and Analytical System.
