Li Yanhong: Chinese geek to T-junction

First, the research and formulation and implementation of China's policies and regulations are facing great challenges.

Mobile Internet has the characteristics of larger users, relatively concentrated personal privacy information, wider sources of data information, and rapid dissemination, and its information security issues are different from those of the Internet. In response to this, the government of our country not only relied on policies and regulations such as the "Public Internet Cyber ​​Security Emergency Plan" but also issued the "Mechanism for Detection and Disposal of Malicious Programs on the Mobile Internet". However, there are still many key issues in the current policies and regulations that have not been solved, such as measures to punish the source of malicious mobile phone programs, the use of mobile Internet crimes, and methods of handling security issues originating from overseas. These problems have already emerged one after another. It is imminent to perfect the policies and regulations of mobile Internet security.

Second, China's safety supervision capabilities need to be improved.

The number of APPs is large and growing rapidly, and downloading does not require certification and licensing, raising new issues for supervision. At present, a large number of mobile phone viruses, Trojans and malicious programs are hidden in the APP and can easily enter the mobile phone, causing great security risks. In the first half of 2013, the number of APP security issues in China reached 3.62 million, and mobile phone virus infections exceeded 480 million. However, at present, APPs are developers who provide services and applications to users through platforms provided by third parties (such as APPStore, Android Market, etc.). If the regulatory authorities cannot reach a consensus with the platform providers, it is impossible to fundamentally restrict them. And solve the problem of APP exposure. The complexity of mobile Internet technology also brings many challenges to security supervision. For example, in order to solve the problem of limited IPv4 address resources, the mobile Internet has introduced NAT (Network Address Translation) technology, this technology does not comply with the Internet's "end-to-end transparency" architecture, coupled with the incomplete mobile network log, making mobile information It is impossible to trace the source accurately and the security supervision becomes more difficult.

Third, China's information security technology needs to be upgraded.

The security of intelligent terminals is more complex than that of PCs. Traditional information security technologies cannot meet the security requirements of mobile Internet. Compared with PCs, there are many types of malicious code spreading paths, more complex business application links, and higher storage and calculation costs. The development of corresponding security protection technologies has great limitations. For example, the storage and updating of terminal virus databases is a difficult problem. In addition, the persistent online features of mobile communications make it easier to eavesdrop and monitor. Compared with PCs, smart terminals are more relevant to users and store sensitive information such as privacy, location, and finance of users. .

Fourth, the responsibilities of the regulatory authorities need to be further clarified.

The scope of the mobile Internet is becoming wider and wider, and the number of participants is increasing. If the responsibilities of the relevant departments are not known, security protection will be used in name only, and security issues will not be discovered and resolved in a timely manner. In the ecosystem of the mobile Internet industry chain, telecom operators, handset manufacturers, Internet companies, and application service providers are at the core. There are numerous equipment manufacturers, network service providers, R&D and design companies in the upstream and downstream of the industrial chain. Software developers, etc. At the same time, companies in the media, finance, e-commerce, education, medical care, transportation, and other industries have also joined, making the number of departments associated with the mobile Internet numerous and the boundaries of responsibilities difficult to clarify. In addition, many mobile Internet companies are foreign companies, which add some difficulties to the management of the regulatory authorities.

At present, there are many hidden dangers in the information security of the mobile Internet. If we do not attach importance to it and resolve it, it will not only bring losses to businesses and individuals, but it may also endanger national security at any time. To this end, China must establish a sound information security policy and regulations system, speed up the construction of safety standards system, strengthen the research and development of key technologies and core products, improve the safety supervision system, overcome the various challenges faced by supervision, and provide a good environment for the development of the mobile Internet industry.