Information technology (IT) based services of the Vietnamese bankingsystem were operating normally and still secure, the State Bank ofVietnam (SBV) stated in a recent press release.
TheApril 10 announcement was made after Vietnamese security platform HVAOnline earlier called on e-banking and payment portal users totemporarily avoid making online transactions because of a bug calledOpenSSL Heartbleed. Platform experts warned that some 15 paymentwebsites in the country had been attacked.
The bug,detected by Google researchers and security firm, Codenomicon, isbelieved to create a serious vulnerability in the popular OpenSSLcryptographic software library, thereby allowing hackers to stealinformation protected by SSL/TLS encryption, which is used to secureInternet traffic.
The SBV noted that it immediatelyasked credit institutions nationwide to check their IT systems andreceived confirmation on their safety. Banks have also completedupdating a patched version of OpenSSL.
Besides theSSL encryption, banks also protect transactions by deploying many othersolutions, such as public-key infrastructure (PKI) and one-time password(OTP), according to the central bank.
"Hackers mayexploit the OpenSSL Heartbleed bug, but they won't be able to infiltratethe banks' IT security systems," it claimed.-VNA
TheApril 10 announcement was made after Vietnamese security platform HVAOnline earlier called on e-banking and payment portal users totemporarily avoid making online transactions because of a bug calledOpenSSL Heartbleed. Platform experts warned that some 15 paymentwebsites in the country had been attacked.
The bug,detected by Google researchers and security firm, Codenomicon, isbelieved to create a serious vulnerability in the popular OpenSSLcryptographic software library, thereby allowing hackers to stealinformation protected by SSL/TLS encryption, which is used to secureInternet traffic.
The SBV noted that it immediatelyasked credit institutions nationwide to check their IT systems andreceived confirmation on their safety. Banks have also completedupdating a patched version of OpenSSL.
Besides theSSL encryption, banks also protect transactions by deploying many othersolutions, such as public-key infrastructure (PKI) and one-time password(OTP), according to the central bank.
"Hackers mayexploit the OpenSSL Heartbleed bug, but they won't be able to infiltratethe banks' IT security systems," it claimed.-VNA
