Network security report of Internet finance industry in the first quarter of 2016
mob604757044d68 2021-07-20 04:48:46

Report overview


The safety value industry report is based on Threat Intelligence Data , Use the big data analysis method to evaluate and analyze the overall security status of the industry , This report focuses on 336 Internet finance companies conduct security evaluation and quantitative risk analysis .


This report is aimed at data collection of Internet financial companies , total 336 Analyze the safety value of each company , Including third party payments 44 home 、P2P company 150 home 、 Crowd-funding 110 home 、 Consumer finance 32 home , And from business security 、 Privacy security 、 Application security 、 Host security 、 Network security 、 environmental safety 6 Quantitative analysis of risk from three dimensions .


Through the safety value of the industry in the first quarter of the data analysis found that :


according to 2016-5-4 Safety value data , The security value of Internet finance industry is 857, The overall evaluation is  “ commonly ”. common 336 A company , among 182 home (54%) Evaluated as “ good ”;99 home (30%) Evaluated as “ commonly ”;55 home (16%) Evaluated as “ Poor ”.


Privacy security issues are common ,336 Home organization 288 There's a risk at home , about 86%, The main problem is that the domain name is not privacy protected , It's a big influence , But the impact is general ,336 There are 288 home (86%) My domain name is not privacy protected , There is a risk of disclosure of domain name information , It constitutes the main issue of privacy security .1097 No domain name privacy protection , adopt Whois You can query the domain name registration information .


The second is application security and network security , stay 336 There is 140 There are application security risks at home , About occupy 42%, The main problem is that third-party vulnerabilities are released on the platform and are often exposed to Web attack , among Yes 134 Home organization (40%) It's been exposed to the public , Constitute the main problem of application security threats . near 90 It was found that 208 A record of security vulnerabilities in the third party security community , The average company 30 It was revealed within days 1.5 A loophole .


336 There are 111 home (33%) There is a botnet risk in the company ,90 There is a total of 55 individual IP The Internet is affected , Co discovery 2381 This is an illegal attack request .


Risk index description

Security values are mined based on external big data and threat intelligence data , Establish and continuously update the index system , At present by 12 Three safety risk indicators support safety evaluation and analysis .


  • Domain name hijacking : Domain name resolution exception , Some user data may be hijacked illegally .

  • Domain name is sealed : The domain name is determined to be untrusted , Some users may not be able to access

  • The mailbox is sealed : Email addresses are considered spam domains , Messages sent may be considered spam

  • IP Be sealed up :IP Determined to be a malicious address , It may affect the normal communication of the network

  • Disclosure of loopholes : In the Internet Security Community revealed the system security vulnerabilities

  • Web attack : On-line Web The system has been attacked by hackers Web Attack or scan

  • Disclosure of domain name information : The domain name is not privacy protected , Domain name administrators may suffer phishing attacks

  • Account information disclosure : The employee account number of the enterprise is leaked in the third party database , May include sensitive information such as passwords

  • Malicious code : Back door found on the information system 、 Viruses 、 Trojans and other malicious code

  • Botnet : The host in the network may have been invaded , And planted a Trojan horse 、 Backdoor program

  • Abnormal flow : Online systems or networks suffer from DDOS Denial of service attacks

  • Public cloud risk : You are sharing the same cloud service resource with a malicious website


1. General situation of the industry


 picture


according to 2016-5-4 Safety value data , The security value of Internet finance industry is 857, The overall evaluation is  “ commonly ”. common 336 A company , among 182 home (54%) Evaluated as “ good ”;99 home (30%) Evaluated as “ commonly ”;55 home (16%) Evaluated as “ Poor ”.


evaluation

Score range

Number of units

Proportion

good

901-1000

182

54%

commonly

601-900

99

30%

Poor

400-600

55

16%


1.1 The overall safety value distribution

 

 picture


From the distribution of security values , among 211 home Institutions score higher than or equal to Average 857,125 home Institutions score below average , Security values are distributed, and most of them are in good condition , The average score line is mainly affected by companies with low scores , The minimum score is 339 branch .


1.2 According to the business classification statistics


 picture



Average

Number of institutions

good

commonly

Poor

Third party payment

780

44

16

15

13

P2P

853

150

72

59

19

Crowd-funding

902

110

78

19

13

eliminate fee Finance

829

32

16

6

10


By business type ,P2P The largest number of companies ,150 Home organization “ commonly ” and “ Poor ” The horizontal ones are 78 home , Zhancheng commercial bank's 52%, The average safety value is 853 branch ;


Crowdfunding companies have the highest average security 902 branch ,110 Home organization “ commonly ” and “ Poor ” The horizontal ones are 32 home , Only a fraction of crowdfunding companies 29%.


1.3 Internet asset Statistics


Security value is used to analyze and count Internet assets , Including domain names registered by various institutions 、 Host services open to the Internet ( Not limited to Web Service website ) And the public network IP Address .



 picture


 picture


44 Third party payment companies have a large number of assets , At the same time, the biggest risk , According to the domain name open to the Internet 、 The host and IP Address Statistics , The domain name of the third party payment company is shared by
346 individual , Public network host 2377 individual , Public network IP Address 1752 individual , On average, every institution has 102 Internet assets , Average safety score 780.


2. Risk distribution and quantitative assessment


According to information security risk management best practices in the industry , Combined with the risk level 、 scope 、 frequency 、 Number 、 Time is the key factor to establish the calculation model of quantitative risk , On the overall situation 6 Two risk areas ( Business security 、 Application security 、 Privacy security 、 Host security 、 Network security and environmental security ) Quantitative evaluation , On the whole, privacy security is a common problem , The second is application security and network security .


 picture


 picture

 picture

Through the analysis of the first quarter data of the Internet financial industry by the security value, it is found that :


1. Privacy security issues are common ,336 Home organization 288 There's a risk at home , about 86%, The main problem is that the domain name is not privacy protected , The risk has a large impact , But the impact is average , For detailed risk analysis, see 3.3 Chapter ;


2. The second is application security and host security , stay 336 There is 140 There are application security risks at home , About occupy 42%, The main problem is that third-party vulnerabilities are released on the platform ,336 There are 111 home (33%) There is a botnet risk in the company , For details of the risks, see 3.1 Chapter and 3.2 Chapter .


3. Detailed analysis of major risks


The safety value is based on 12 Three risk indicators support 6 Security evaluation in three dimensions , Statistics on the number of institutions affected by various risk indicators are carried out to find out more concentrated problems .


 picture


 picture


3.1 Vulnerability disclosure risk analysis


Public security vulnerabilities in the Internet security community should be given priority , Avoid vulnerabilities being exposed before they are fixed , Attract malicious attacks and influence image , The root cause of the problem should be analyzed with the help of the safety consultant , Avoid similar vulnerabilities .


 picture


336 There is 134 Home organization (40%) It's been exposed to the public , Constitute the main problem of application security threats .


near 90 It was found that 208 A record of security vulnerabilities in the third party security community , The average company 30 It was revealed within days 1.5 A loophole . 


 picture


The disposal of advice :


1. Get in touch with the third party vulnerability platform in time , Claim security holes , And fix the bug ;


2. Verify the effect of vulnerability repair ;


3. Conduct comprehensive security vulnerability inspection and penetration testing for all systems , Classified management of vulnerabilities , Track the process and results of vulnerability disposal , Improve the online security testing work , To ensure that the information system has no high 、 Medium risk vulnerabilities .


3.2 Botnet risk analysis


The server or terminal in the network has been implanted with Trojan horse 、 back door , Illegally controlled into “ chicken ”, The act of scanning or attacking others .


 picture


336 There are 111 home (33%) There is a botnet risk in the company .


90 There is a total of 55 individual IP The Internet is affected , Co discovery 2381 This is an illegal attack request .


 picture


The disposal of advice :


1. Analyze the botnet address corresponding to the network , If it is a server network, we need to conduct a comprehensive risk assessment of the system ;


2. If the botnet address corresponds to the office network , It is necessary to locate the terminal host through the exit router log , And check the Trojan 、 back door , Strengthen terminal security protection ;


3. Strengthen the safety management of terminal use , Online behavior management .


3.3 Domain name information disclosure risk analysis


After the successful registration of the domain name by the registrant , Your name 、 Contact address 、 Telephone 、Email Registration information will be stored in the domain name whois In the information database , Anyone can access this information publicly , Privacy is not guaranteed .


 picture


336 There are 288 home (86%) My domain name is not privacy protected , There is a risk of disclosure of domain name information , It constitutes the main issue of privacy security .


1097 No domain name privacy protection , adopt Whois You can query the domain name registration information . 


 picture


The disposal of advice :


Contact your domain name service provider , Apply for domain name privacy protection .( Domain name privacy protection : It means that the domain name holder can protect the domain name registrant through independent settings 、 Telephone 、 Email and other information are not made public , Reduce spam 、 SMS and preventing personal real information from being stolen, etc .)


Schedule : Sample list of Internet finance companies

( Alphabetical order , Regardless of priority )


Beijing lakala net Collateral Technology Technique Co., LTD.

Third party payment

Beijing Digital Wangfujing Technology Co., Ltd

Third party payment

Beijing Tongrong Information Technology Co., Ltd Technique Co., LTD.

Third party payment

Beijing UnionPay merchant service Co., LTD.

Third party payment

The Bohai Sea is prone to business service clothing service Co., LTD.

Third party payment

Dongfang Electronic Payment Co., Ltd department

Third party payment

Guangzhou UnionPay network Collateral Payment Ltd

Third party payment

Hainan sea island All in one card payment network Collateral Co., LTD.

Third party payment

Hainan new information technology Technique Co., LTD.

Third party payment

Hebei all in one card electric Sub payment service service Co., LTD.

Third party payment

jiang Sue Ruixiang business service Co., LTD.

Third party payment

Jiefu Ruitong Co., Ltd

Third party payment

open United The Internet Collateral Technology Technique clothing service Co., LTD.

Third party payment

fast money Payment clearing information Co., Ltd

Third party payment

Linkage advantage e-commerce Co., Ltd department

Third party payment

China Unicom payment Co., Ltd department

Third party payment

Purse net ( Beijing ) Information Technology Co., Ltd department

Third party payment

mountain Donglu Business card payment Co., Ltd

Third party payment

Shande electric Zishang service clothing service Co., LTD.

Third party payment

Shanghai Changgou Enterprise trade clothing service Co., LTD.

Third party payment

Shanghai is an official enterprise trade clothing service Co., LTD.

Third party payment

Shanghai pay fee Information service service Co., LTD.

Third party payment

Shanghai Fuyou financial network Collateral Technology Technique Co., LTD.

Third party payment

Shanghai Remit Pay for data service service Co., LTD.

Third party payment

Shanghai Jie silver Information technology Technique Co., LTD.

Third party payment

Shanghai shengfutong electric Sub payment service service Co., LTD.

Third party payment

Shanghai UnionPay Sub payment service service Co., LTD.

Third party payment

shenzhen goods Futong Technology Co., Ltd

Third party payment

Shenzhen fast pay financial network Collateral Technology clothes service Co., LTD.

Third party payment

Shenzhen taihai.com Collateral Technology clothes service Co., LTD.

Third party payment

Shenzhen one card technology service Co., Ltd service Co., LTD.

Third party payment

Shenzhen silver Sheng electric Sub Payment Technology Co., Ltd

Third party payment

Tianjin City Card Co., Ltd

Third party payment

Skywing electric Zishang service Co., LTD.

Third party payment

through United Payment network Collateral clothing service limited company

Third party payment

network silver stay Line ( Beijing ) Technology Co., Ltd

Third party payment

Martial han City Jinyuan information enterprise trade clothing service Information Department system Co., LTD.

Third party payment

Fast pay information technology Co., Ltd

Third party payment

Yitong payment Co., Ltd

Third party payment

UnionPay commerce Co., Ltd department

Third party payment

Yufu net Collateral Technology Co., Ltd

Third party payment

Zheng Lian Rong Tong Electronics Co., Ltd department

Third party payment

Alipay ( China ) network Collateral Technology Technique Co., LTD.

Third party payment

Zihexin electronic payment Co., Ltd department

Third party payment

168 Financial management network

P2P

365 Easy loan

P2P

91 Wangcai

P2P

e The road is concentric

P2P

E Quick loan

P2P

PPmoney

P2P

Love money

P2P

Love money

P2P

Love to invest

P2P

Peace of mind de benefit

P2P

I'll take it easy

P2P

Anstar fortune

P2P

Baocai

P2P

Bojin loan

P2P

Fortune China

P2P

Superman loan

P2P

Chenghuitong

P2P

City Finance

P2P

Orange flag loan

P2P

Harvest Finance

P2P

Dezhong Finance

P2P

Landmark Finance

P2P

Dot com

P2P

It's credit

P2P

Short financial network

P2P

Fu Rongbao

P2P

Fuchun loan

P2P

Trust and win

P2P

crown e through

P2P

Guangxin loan

P2P

Han Jin Suo

P2P

Good loan

P2P

Join forces to lend

P2P

Take pictures online

P2P

Joint offer

P2P

In line with the times

P2P

And credit

P2P

Hengxin easy loan

P2P

Hongling venture capital

P2P

Houhe wealth

P2P

Mutual benefit net dragon baby

P2P

Mutual treasure

P2P

Huarong Road

P2P

Huitong easy loan

P2P

Foreign exchange investment

P2P

Huiying Jinfu

P2P

Building block box

P2P

Jili fortune net

P2P

gold e loan

P2P

Jinbaobao

P2P

Jinhai loan

P2P

Financial holding online loan

P2P

The Federal Reserve

P2P

Jinliangbao

P2P

Taurus online

P2P

Jinpiaotong

P2P

Financial workshop

P2P

Jinxin

P2P

Golden Cat

P2P

Shanxi Merchants loan

P2P

Nine bettas

P2P

Jubao basin

P2P

Junrong loan

P2P

Kaixin loan

P2P

Backdating

P2P

Brother Kong Fang

P2P

Kowtow.com

P2P

Lazy investment

P2P

Li De wealth

P2P

Financial management

P2P

Ideal treasure

P2P

Lifan is good at fusion

P2P

Even capital loan

P2P

Two tigers

P2P

Longjinbao

P2P

Lu Jin Su

P2P

Green loans

P2P

Merrill financial

P2P

Mini loan

P2P

People's credit

P2P

I credit you

P2P

Noro pound guest

P2P

Pat loans

P2P

Inclusive Finance

P2P

Putian loan

P2P

Qidao Finance

P2P

Qianyi Finance

P2P

Father Qian

P2P

Money

P2P

A lot of money

P2P

Qian laiwang

P2P

Fun money

P2P

Peer-to-peer lending

P2P

Everyone gathers money

P2P

Humanities loan

P2P

Rongbei net

P2P

A financial institution

P2P

Easy financing

P2P

UBS venture capital

P2P

Third, credit

P2P

Shanyi loan

P2P

Business rich loan

P2P

Lettuce Finance

P2P

Shitou Finance

P2P

The first E home

P2P

Sida investment

P2P

Candy Finance

P2P

Tengbang venture capital

P2P

Throwing rice net

P2P

Which net to cast

P2P

Group loan network

P2P

Tuodaojinfu

P2P

Net treasure

P2P

Micro credit net

P2P

Wenshang loan

P2P

Wenzhou loan

P2P

Woshidai

P2P

Up in gold

P2P

Small and micro finance

P2P

Small win financial management

P2P

Canola

P2P

Xinlian online

P2P

New loans

P2P

Xinhehui

P2P

Xinrong wealth

P2P

Credit treasure

P2P

Snow mountain loan

P2P

Spoda

P2P

A little

P2P

Pleasant loan

P2P

E-Loan

P2P

Yilong loan

P2P

Silver buck

P2P

Silver bean net

P2P

Silver Lake

P2P

Silver customer network

P2P

Silver net

P2P

Yonglibao

P2P

Advantageous net

P2P

There is financial network

P2P

Guangdong business loan

P2P

Long term loan

P2P

China Merchants loan

P2P

Zhejiang businessmen E loan

P2P

CGN Fuying

P2P

Zhongrongbao

P2P

Sino Swiss wealth

P2P

Zhongjin online

P2P

Zhongxin Finance

P2P

Jewelry loan

P2P

28 Crowd-funding

Crowd-funding

36 krypton

Crowd-funding

58 Crowdfunding

Crowd-funding

91 Crowd-funding

Crowd-funding

E Split shots

Crowd-funding

e People raise money

Crowd-funding

V2IPO maker

Crowd-funding

Love entrepreneurship

Crowd-funding

If you love me, just throw it in

Crowd-funding

Aitou

Crowd-funding

Hundred chips

Crowd-funding

Peking University Entrepreneurship crowdfunding

Crowd-funding

Local crowdfunding

Crowd-funding

Bole joint investment

Crowd-funding

Bo Dian

Crowd-funding

Wealth crowdsourcing

Crowd-funding

Car, car, car

Crowd-funding

Raise the road

Crowd-funding

Chiqu.com

Crowd-funding

Contact crowdfunding

Crowd-funding

Venture capital circle

Crowd-funding

Venture capital online

Crowd-funding

Create a micro network  

Crowd-funding

Start a business e home

Crowd-funding

Everybody vote for

Crowd-funding

Let's raise money

Crowd-funding

Everybody vote for

Crowd-funding

Loan group crowdfunding

Crowd-funding

Egg web

Crowd-funding

Fifth, create

Crowd-funding

Dongzhibei

Crowd-funding

Colorful cast

Crowd-funding

Cellular crowdfunding

Crowd-funding

Stock chip network

Crowd-funding

Shareholders will

Crowd-funding

Equity stores

Crowd-funding

Guzhong.com

Crowd-funding

Sea turtle crowdfunding

Crowd-funding

Sea power

Crowd-funding

Partnership circle

Crowd-funding

Partnership China

Crowd-funding

And cloud chips

Crowd-funding

Black Horse Island

Crowd-funding

Huimeng commune

Crowd-funding

Jingbei crowdfunding

Crowd-funding

Jingdong Dongjia

Crowd-funding

99 crowdfunding

Crowd-funding

Aggregate wins

Crowd-funding

Raise funds and raise funds  

Crowd-funding

Gather around the world

Crowd-funding

Happy shot -

Crowd-funding

Tadpole crowdfunding

Crowd-funding

To raise the net

Crowd-funding

Le Geng

Crowd-funding

Yue Zhuge

Crowd-funding

Leading chip network / Crowdfunding

Crowd-funding

Bull investing in crowdfunding

Crowd-funding

Qilu crowdfunding

Crowd-funding

Kylin crowdfunding

Crowd-funding

Auto crowdfunding

Crowd-funding

Lead and throw

Crowd-funding

Green tung tree

Crowd-funding

Public funding

Crowd-funding

Everyone in partnership

Crowd-funding

Everybody vote for

Crowd-funding

Shaanxi crowdfunding

Crowd-funding

The angel will

Crowd-funding

Angel Fund Network

Crowd-funding

Angel Street

Crowd-funding

Angel guest

Crowd-funding

Uncle angel

Crowd-funding

Angel camp

Crowd-funding

Every day

Crowd-funding

The same fund

Crowd-funding

Investment banking circle

Crowd-funding

Throwing pot net

Crowd-funding

Investment and financing sector

Crowd-funding

Micro Investment Network

Crowd-funding

Wenchou. Com

Crowd-funding

Hope to raise

Crowd-funding

Xiangshan crowdfunding

Crowd-funding

Grass crowdfunding

Crowd-funding

Collaborative workshops

Crowd-funding

Xinchou

Crowd-funding

Spark investment

Crowd-funding

Easy chip

Crowd-funding

Yiwang crowdfunding

Crowd-funding

Round table meeting

Crowd-funding

Yuanrong crowdfunding

Crowd-funding

Cloud bank gold clothes

Crowd-funding

Cloud chip

Crowd-funding

Cloud research

Crowd-funding

Zhijinhui

Crowd-funding

Smart creative

Crowd-funding

Zhongzheng Zhongchuang

Crowd-funding

Crowdfunding state

Crowd-funding

Crowdfunding

Crowd-funding

Crowdfunding

Crowd-funding

Crowdsourcing and crowdfunding

Crowd-funding

Many investors

Crowd-funding

The crowd voted for the state

Crowd-funding

Crowd throwers

Crowd-funding

Public investment society

Crowd-funding

Mass investment

Crowd-funding

Crowdsourcing, crowdfunding

Crowd-funding

Crowd vote

Crowd-funding

Intercontinental Alliance

Crowd-funding

Dream net

Crowd-funding

Capital exchange

Crowd-funding

President Hui

Crowd-funding

Ali Hua

eliminate fee Finance

Love learning to lend

eliminate fee Finance

Baidu has money

eliminate fee Finance

North bank consumer finance

eliminate fee Finance

Make great efforts to divide

eliminate fee Finance

In stages

eliminate fee Finance

Installment housekeeper

eliminate fee Finance

Staging music

eliminate fee Finance

Pay one loan

eliminate fee Finance

Melon cattle staging

eliminate fee Finance

Gome consumer finance

eliminate fee Finance

Haier consumer finance

eliminate fee Finance

Hubei consumer finance

eliminate fee Finance

I'm going to

eliminate fee Finance

Home credit consumer finance

eliminate fee Finance

Finance 1 Shop No.

eliminate fee Finance

Financial cat

eliminate fee Finance

Jincheng consumer finance

eliminate fee Finance

Jingdong ious

eliminate fee Finance

Orange stage

eliminate fee Finance

Consumer finance now

eliminate fee Finance

Famous school loans

eliminate fee Finance

Ping An consumer finance

eliminate fee Finance

Everyone is divided into stages

eliminate fee Finance

Suning consumer finance

eliminate fee Finance

By stages every day

eliminate fee Finance

Wanda consumer finance

eliminate fee Finance

Let's start with flowers

eliminate fee Finance

It's a bag

eliminate fee Finance

Industrial consumer finance

eliminate fee Finance

Good staging

eliminate fee Finance

Bank of China Consumer Finance

eliminate fee Finance



Please bring the original link to reprint ,thank
Similar articles

2021-07-20

2021-07-20

2021-07-20