韩国科技部启动大规模网络安全紧急检查：年底前查111个机构的172处关键信息通信设施
韩国科学技术信息通信部10月28日在首尔宣布，按总统指示，将于今年年底前对民间领域111个机构管理的172处关键信息通信基础设施实施紧急安全检查，涵盖通信、平台与金融等行业，重点检查对外开放资产的安全状态；此举源于今年10月初以来金融公司接连发生疑似个人信息泄露事件。
韩国媒体引述科技部表示，检查将分析金融领域已发生的攻击手法，并评估 PHP 漏洞的影响范围与修补情况。监管机构怀疑攻击者利用了超级智能（SI）等工具放大攻击规模，检查因此同时覆盖外部暴露面与已知漏洞的修补进度。
政府官员10月28日表示，此次检查由总统直接指示，目的是在年底前摸清民间关键设施的真实安全水位，并要求机构限期整改发现的问题。科技部此前已就金融业的连串事件与相关机构召开对策会议。
科技部表示，检查结果与后续整改要求将按机构个别通报；是否追加行业层面的统一安全标准，将视检查结果决定。
South Korea Orders Emergency Cybersecurity Inspections of 172 Key ICT Facilities Run by 111 Organisations
South Korea's Ministry of Science and ICT (MSIT) announced in Seoul on October 28 that, on a presidential directive, it will carry out emergency security inspections by the end of the year of 172 major private-sector ICT infrastructure facilities managed by 111 organisations, spanning telecommunications, platforms and finance, with a focus on external-facing assets. The move follows a series of suspected personal-information breaches at financial firms since early October.
Korean media quoted the ministry as saying the inspections will analyse the attack methods used in the financial-sector incidents and assess the impact and patching status of PHP vulnerabilities. Regulators suspect attackers have used tools such as super intelligence (SI) to scale up attacks, so the checks cover both external exposure and the remediation of known vulnerabilities.
Government officials said on October 28 that the inspection programme was ordered directly by the President to establish the real security posture of major private facilities before year-end, with organisations required to fix problems found within set deadlines. The ministry has previously held countermeasure meetings with institutions over the financial-sector incidents.
MSIT said inspection results and follow-up requirements will be notified to each organisation individually, and that whether to add uniform industry-wide security standards will be decided based on the findings.
来源：GSM·美国（原文链接）
图片来源：数据中心机房内部（资料图）。BalticServers.com 摄，CC BY-SA 3.0，经 Wikimedia Commons。 / Inside a data centre (file photo). Photo by BalticServers.com, CC BY-SA 3.0, via Wikimedia Commons.
