In order to further promote the "Smart Empowering Ten Thousand Enterprises" digital security barrier project, under the guidance of the Network Security Administration of the Ministry of Industry and Information Technology, the Hunan Provincial Department of Industry and Information Technology and the Hunan Provincial Communications Management Bureau sponsored the "Casting Network-2023" Hunan Industrial The actual attack and defense drill of Internet enterprise network security has come to a successful conclusion recently. Based on the digital twin shooting range, Saining Network Security has built a professional offensive and defensive drill platform to provide comprehensive technical support for this drill.
The 7-day exercise is aimed at verifying and evaluating the major network and data security risks of industrial Internet companies in actual combat, formulating rectification plans, and effectively improving the company's network security situation awareness, threat discovery, emergency command, coordinated processing, and attack traceability capabilities. Accelerate the promotion of classified and hierarchical management and data security management.
1. Verify the security capabilities of the real network The Saining digital twin shooting range provides professional real network attack and defense drill guarantee
The "Casting Network - 2023" exercise is based on the form of real network attack and defense, based on the digital twin series of shooting range platforms provided by Saining Network Security, organized 15 professional network attack teams, and adopted loophole exploitation, lateral penetration, supply chain attacks, etc. More than 290 industrial Internet companies in the province launched remote network attack tests.
During the offensive and defensive period, a total of 62 defensive units were captured, and a total of 154 loopholes were found. After the attack and defense are over, the organizers put forward targeted safety precautions and rectification plans for the enterprises, thereby promoting each unit to speed up the improvement of the emergency response management mechanism and the network security guarantee system.
In this drill, Saining Network Security provided all-round support services in terms of equipment deployment, resource assessment, and situation display. Through the means of real network attack and defense, it verified and evaluated the security system and protection capabilities of industrial Internet companies in Hunan Province, and Won the "Excellent Technical Support Unit" and "Excellent Attack Team Third Prize".
After the drill, Hunan Provincial Department of Industry and Information Technology and Hunan Provincial Traffic Management Bureau sent letters of thanks, fully affirming the safety work done by Saining in the event, and expressing their high recognition and appreciation for the professionalism and professional ability of Saining's security team. Big praise.
2. Guarding cyberspace security Saining Network Security escorts the improvement of enterprise security defense capabilities
As the organizer of this drill, Saining Network Security has more than 13 years of experience in red team assessment, penetration testing, offensive and defensive drill services, etc., and has self-developed digital twin shooting range, vulnerability scanning platform, vulnerability utilization platform, BAS, etc. Offensive and defensive platforms and tools. During the exercise, Saining Network Security was mainly responsible for the deployment of the shooting range platform, attack support, supervision and evaluation, and emergency support, and assisted the organizers to promote the defensive units to improve the capabilities of vulnerability discovery, risk prevention, and emergency response through the "preparation for war" approach. ability.
Over the years, Saining Network Security has continuously supported heavyweight competitions such as the Qiangwang Cup National Network Security Challenge, the "Qiangwang" Mimic Defense International Elite Challenge, and the National College Student Information Security Competition by virtue of its professional technical capabilities. The second XCTF international network attack and defense league. Saining's technical expert team has successfully won several national and industry-level security competition awards, and won the first prize in the Qiangwang Cup Security Challenge for its leading vulnerability mining, actual combat cracking, and offensive and defensive confrontation capabilities.
At present, based on digital twin shooting range technology innovation, Saining Network Security has developed core products such as Saining wind tunnel, active defense system, red square control platform, and automated penetration platform. Allow more security companies to continuously strengthen risk management and control, vulnerability monitoring, and system defense capabilities in the actual combat process.
Use practice instead of war, and build defense with war . In the future, Saining Network Security will assist regulatory agencies to fight the cyber security assault of industrial Internet companies, provide strong network security guarantees for promoting the city's "intelligence, digitalization, and modernization", build a security barrier for the digital transformation of enterprises, and provide a solid foundation for digital cities. , Digital China, and the digital economy continue to escort.