|
RuNet continues to grow at an enviable pace, but this growth is accompanied by an increase in costs. According to the results of last year, the volume of the Russian Internet economy increased by 29% compared to 2021 and reached 12.2 trillion rubles. This year, we also expect double-digit growth.
At the same time, the number of cybercrimes is growing. Russia entered the top 10 countries in terms of the number of DDoS attacks. The share of attacks on our sites in the global volume has doubled in a year. In the first quarter of 2023, there were one and a half times more of them than in the same period of 2022. In the content writing service second quarter, 325 thousand incidents were recorded. And the number of cyber threats to Russian IT companies has increased fourfold.
At the same time, hacker attacks are becoming more sophisticated. Attackers are starting to look for vulnerabilities through partners, resellers or small players who may be less attentive to security.
Not only the number of attacks is growing, but also the business costs of ensuring security, which the market players who form the RuNet infrastructure are forced to bear. For example, a large registrar receives dozens and hundreds of messages a day about violations in the field of intellectual property, phishing, viruses, coordination of DDoS attacks on domains that it supports.
In the .ru and .рф zones, the number of blocked sites has more than doubled, from 3,210 to 7,121
In total, experts identified more than 20,170 phishing domains in the .ru and .рф zones alone in 2022.
As a result, the registrar is forced to maintain a large staff of qualified specialists who are ready to respond promptly to the ever-increasing number of requests.
RU-CENTER is already taking part in the experiment of the Ministry of Digital Development to identify domain administrators through "Gosuslugi". The main goal is to work out procedures for interaction with federal executive authorities and the FSB of the Russian Federation, as well as to determine technological requirements for secure interaction - this includes special software and hardware systems, the implementation of cryptographic means of information protection approved by the FSB.
The new rules are still being discussed, but in one version or another they may be adopted in the near future. Moreover, if registrars already have at least a minimal understanding of who is a client and is responsible in case of violation, then hosting providers essentially did not have a KYC procedure (Know Your Customer, a set of verification procedures). If it did not bring additional profit, then no one was particularly interested in who they were selling their services to - irresponsible, unfortunately, but such was the general rule, which is now becoming irrelevant.
|
|