Internet Site Security

Main article: Internet security

2023: The most unsafe sites of government agencies have been identified

The public movement "Information for All" in October published a report "Information Security of the Sites of State Bodies of the Constituent Entities of the Federation - 2023," prepared as part of the project "Monitor of State Sites." As noted in the report, 3 government agencies of the entities do not have official sites, 2 do not have sites at all, however, we are talking mainly about new regions. At the same time, the original regions had all the necessary sites last year, although 10% of the investigated resources do not support a secure connection with their visitors, and more than 70% support it only formally, using fairly old encryption algorithms .

In the process of the study, which was carried out in August-September 2023, only two aspects were studied: the use of the secure HTTPS protocol on government sites (information integrity) and testing for automatic download from uncontrolled sites (reliability of information). In the latter case, the most dangerous trackers are embedded from foreign sites from unfriendly countries, such as Google Analytics, which can at the most unexpected moment show their content on the site, which is not controlled in any way by the relevant government agency.

The integrity of the information provided is controlled by the HTTPS protocol, which checks both site certificates and blocks the introduction of extraneous content. If this protocol is not used, then it is impossible to guarantee the user that he actually works with a state-owned site, and not with some phishing resource. For supporting each security mechanism, researchers award the site a certain number of points, the amount of which determines the position in the index. The value of this index for 2023 and 2022 are indicated in the tables below. The leaders in terms of integrity were as follows:

At the same time, the following sites this year have not been assigned the HTTPS security index at all, since they do not have support for this protocol at all:

In terms of reliability, the situation has improved at the federal level, but the regional one still leaves much to be desired. This year, federal sites completely got rid of downloading the Google Analytics "visitor counter," but regional ones began to use it 40% more often. Moreover, the website of the Karelia parliament continues to download the code of the extremist social network Facebook announced in Russia.

97% of the sites examined still download extraneous code, thereby allowing third parties to control their content and collect information about their visitors, and it is especially dangerous that 53% of state sites download resources controlled by residents of unfriendly countries.

According to the reliability of the information provided, the following sites turned out to be the best:

At the same time, the following sites this year did not have a reliability rating for one reason or another at all:

I would not want to think that the people who are responsible for state sites in the regions, through one, are pests, - commented on the publication of the rating of Russian state sites Anton Gorelkin, deputy, deputy chairman of the State Duma committee on information policy, information technology and communications. Rather, we are dealing with cybersecurity and a lack of understanding of the elementary risks facing us in an information war. It is obvious that mass retraining of the administrators of the websites of the authorities is necessary, their training is improved in accordance with the current challenges of the time.[1]

2018:62% of all sites risk being hacked due to PHP updates being discontinued

In October 2018, it became known that a large number of sites on the Internet are at risk due to the upcoming termination of updates for outdated versions. PHP More. here

See also

• Web Application Security
• Social Media Security and Challenges
• Social media security

Notes