Izinsongo ze-Cybersecurity zochwepheshe be-IT: umhlahlandlela ophelele

Informatec Digital » Izinsiza » Izinsongo ze-Cybersecurity zochwepheshe be-IT: umhlahlandlela ophelele

Ukuphepha kwe-inthanethi sekuyinkinga yansuku zonke kunoma yimuphi uchwepheshe we-IT. Ukuphepha kwamafu , umsebenzi osebenza kude, amadivayisi eselula ezinkampani, kanye nobuhlakani bokwenziwa kuye kwandisa kakhulu indawo yokuhlasela, futhi izigebengu ze-inthanethi azichithi sikhathi: zenza ngokuzenzakalelayo ukuhlasela, zithuthukisa amasu obunjiniyela bezenhlalo, futhi zisebenzisa noma yikuphi ukungalungiseki kahle noma ukuqondiswa kwabantu ukuze zingene ezinhlanganweni.

Kumaqembu e-IT, ukufaka nje isofthiwe ye-antivirus kanye ne- firewall eqinile akusanele . Ukuqonda kahle izinsongo eziyinhloko zokuphepha kwe-inthanethi kochwepheshe be-IT , umthelela wazo wangempela ebhizinisini, kanye nemikhuba emihle yokunciphisa lokhu kubalulekile ekugcineni ukuqhubeka kwebhizinisi, ukugwema izinhlawulo zomthetho, kanye nokuvikela idatha ebalulekile. Kuyo yonke le ndatshana, uzobona, ngokuningiliziwe nangendlela ewusizo kakhulu, ukuthi yiziphi izingozi ezibusa isimo samanje nokuthi yini ongayenza ukuze kube nzima kakhulu kubahlaseli.

Okubhekwa njengosongo lwe-cybersecurity namuhla

Uma sikhuluma ngezinsongo zokuphepha kwe-inthanethi, sibhekisela kunoma yisiphi isenzakalo, ubuthakathaka, noma umsebenzi ononya ongafaka engcupheni ubumfihlo, ubuqotho, noma ukutholakala kwezinhlelo nedatha. Lokhu kufaka phakathi konke kusukela ku-malware "yakudala" (amagciwane, izikelemu, ama-Trojans, i-ransomware, i-spyware) kuya kubuthakathaka obungalungiswanga, imikhuba emibi yabasebenzisi, ukungalungiselelwa kahle kwamafu, kanye nokuhlaselwa okuqondiwe okuxhaswe nguhulumeni.

Lezi zinsongo zisebenzisa ubuthakathaka bobuchwepheshe kanye namaphutha abantu : isofthiwe esiphelelwe yisikhathi, amaphasiwedi abuthakathaka, izimvume eziningi, ama-imeyili e-phishing akhohlisa abasebenzi, isitoreji samafu esingavikelekile kahle, ukuphepha komuntu wesithathu, njll. Umphumela ungasukela ekuphulweni kwedatha kanye kuphela kuya ekuvalweni okuphelele kwenkampani izinsuku eziningi.

Ngesikhathi esifanayo, ukuhlanganiswa kobuhlakani bokwenziwa kanye nokwenza izinto ngokuzenzakalela ekuhlaselweni kwe-cyber kuvumela imikhankaso ngesikhathi esisodwa ngokumelene nezinkulungwane zezinkampani, ukudalwa kwama-deepfake akholisayo kakhulu, kanye nokudalwa kwe-malware ye-polymorphic eshintsha njalo ikhodi yayo ukuze igweme amathuluzi okuzivikela endabuko. Ngakho-ke inselele yochwepheshe be-IT ikabili: ukuvikela ingqalasizinda eyinkimbinkimbi ngokwengeziwe nokwenza kanjalo ngokumelene nabahlaseli abasheshayo nabanolwazi oluningi.

Umthelela wangempela wezinsongo ze-cybersecurity ezinhlanganweni

Imiphumela yesigameko sokuphepha idlulela ngale kokushaqeka kokuqala. Ukwephulwa ngakunye kungabangela uchungechunge lwemiphumela emikhakheni eyahlukene: ezezimali, idumela, ezomthetho, kanye nokusebenza. Ukuqonda lokhu kusiza ukuthethelela ukutshalwa kwezimali kanye nokubeka phambili amaphrojekthi okuphepha ekuphathweni.

Ngokwezezimali, ukulahlekelwa okuqondile nokungaqondile kungaba kukhulu kakhulu . Ngaphezu kokudluliselwa okukhohlisayo, ukuhlengwa kwe-ransomware, kanye nokwebiwa kolwazi lwezezimali, kunezindleko ezihambisana nesikhathi sokungasebenzi, isikhathi esengeziwe sethimba lokuphendula, izinsizakalo zangaphandle zokuhlola, ukwazisa abantu abathintekile, kanye nemikhankaso yokubuyisela ukwethembana. Izifundo eziningi zibeka isilinganiso sezindleko zokwephulwa kwamalungelo ezinkampani ezincane kanye nezigidi zezinkampani ezinkulu.

Umonakalo wodumo ubaluleke kakhulu, uma kungenjalo kakhulu: lapho iklayenti libona ulwazi lwalo ludalulwa, lilahlekelwa ukwethenjwa ngokushesha . Lokhu kulahlekelwa ukwethenjwa kuveza izinkontileka ezikhanseliwe, ukwehla kokuthengisa, kanye nobunzima bokuvala izivumelwano nabalingani abasha noma ukufinyelela amathenda athile omphakathi. Ukubuyisela izinga lokuthembana langaphambilini kungathatha iminyaka, uma kwenzeka kufezwa nhlobo.

Ezingeni lokusebenza, ukuhlaselwa kungazikhubaza ngokuphelele izinqubo ezibalulekile : izinhlelo zokukhokhisa zivaliwe, izimboni zokukhiqiza zivaliwe, izinsizakalo eziku-inthanethi azikho, izintambo zokuhlinzeka ziphazamisekile… Noma yimuphi uchwepheshe we-IT oye wabhekana nokubethelwa okukhulu kwe-ransomware uyazi ukuthi ingcindezi ebhizinisini inzima uma ungakwazi ukuthengisa, ukukhiqiza noma ukukhonza amakhasimende.

Okokugcina, akumelwe sikhohlwe imiphumela yezomthetho neyokulawula . Imithethonqubo efana ne-GDPR eYurophu kanye neminye imithetho ethile yomkhakha idinga ukuvikelwa okwanele kwedatha yomuntu siqu kanye nokwaziswa kokwephulwa kwemithetho ngaphakathi kwezikhathi ezithile. Ukwehluleka kungaholela ezijezisweni ezinkulu zezimali kanye nokumangalelwa namakhasimende, abaphakeli, noma ngisho nabasebenzi. Ngaphezu kwalokho, ukwebiwa kwempahla yobuhlakani (amapulani, ama-algorithms, amafomula, ikhodi yomthombo) kungachitha iminyaka yokutshalwa kwezimali kwe-R&D futhi kunikeze izimbangi ithuba lokuncintisana.

Izinhlobo eziyinhloko zezinsongo zobuchwepheshe kochwepheshe be-IT

Ngokombono wobuchwepheshe kuphela, izinkampani zibhekene nezingozi eziningi ezithinta ingqalasizinda, izinhlelo zokusebenza, kanye nabasebenzisi. Ukuqonda imindeni yokuhlasela evame kakhulu kuyisinyathelo sokuqala ekuchazeni izilawuli zokuphepha ezifanele kanye nezakhiwo.

Uhlelo olungayilungele ikhompuyutha kuzo zonke izinhlobo zalo

I-Malware isalokhu iyisikhali esithandwayo sabahlaseli. Ngaphansi kwaleli gama elihlanganisa konke, sithola isofthiwe enonya eyenzelwe ukungena, ukulimaza, noma ukulawula izinhlelo ngaphandle kolwazi lomsebenzisi noma umphathi. Izinhlobo zayo ezivame kakhulu zifaka:

• I-Rhlengware: Ibethela amafayela namasistimu ngokhiye abalawulwa umhlaseli kuphela, futhi ifuna inkokhelo (ngokuvamile nge-cryptocurrency) ukuze kubuyiselwe ukufinyelela. Amaqembu athuthuke kakhulu ahlanganisa ukubethela nokwebiwa kwedatha, asongela ukushicilela ulwazi uma inkokhelo ingenziwa, ngisho noma kukhona izipele.
• Trojan Horses: Zethula njengezinhlelo ezisemthethweni (isofthiwe yamahhala, okucatshangwa ukuthi imifantu, izinsiza "eziyisimangaliso") kodwa, lapho zibulawa, zisebenzisa izinto ezinonya ezifihliwe ezingasukela ekuvuleni izicabha ziye ekulandeni uhlelo olungayilungele ikhompuyutha.
• I-RAT (iThrojani yokufinyelela kude): Ama-Trojan aklanyelwe ngokukhethekile ukunikeza umhlaseli isilawuli kude esiphelele somshini. Bavumela ukuhlola kanye nokukhishwa kolwazi olubucayi., faka izingxenye ezintsha noma i-pivot kwamanye amasistimu angaphakathi.
• I-spyware: ikhodi eklanyelwe ukurekhoda umsebenzi womsebenzisi, ukuthwebula imininingwane, imininingwane yasebhange, imikhuba yokuphequlula, noma ulwazi lwebhizinisi olubalulekile, olube seluthunyelwa kumaseva alawulwa umhlaseli.
• I-Cryptojacking: Uhlelo olungayilungele ikhompuyutha olugebenga amandla ekhompuyutha eziphakeli, izindawo zokusebenza, noma ngisho namadivayisi e-IoT ukuze imayini ama-cryptocurrencies ngaphandle kolwazi lomnikazi, ukusebenza okwehlisa isithunzi nokwenyusa izindleko zamandla.

Ukuhlaselwa kobunjiniyela bezenhlalakahle

Ubuchwepheshe buyahluleka, kodwa nabantu bayahluleka. Ubunjiniyela bezenhlalo busebenzisa ubuthakathaka bengqondo babasebenzisi kanye nemikhuba yabo ukuze benze lokho kanye umhlaseli akudingayo: chofoza isixhumanisi, khubaza ukuvikelwa, unikeze iziqinisekiso, noma unikeze idatha ebucayi.

Phakathi kwala maqhinga, i-phishing isalokhu iyinto evelele kakhulu . Kuthunyelwa ama-imeyili alingisa ukuxhumana okuvela emabhange, abaphakeli, izinhlangano zikahulumeni, noma ngisho nenkampani uqobo, ukuze kunxenxwe abasebenzisi kumawebhusayithi angamanga noma kubaphoqe ukuthi balande okunamathiselwe okunonya. Ngendlela yayo eqondiswe kakhulu, i-spear phishing igxila kumaphrofayili athile (ezezimali, abaphathi, abaphathi be-IT) besebenzisa idatha yomphakathi noma yangaphakathi ukuze banikeze ukwethembeka ekukhohlisweni.

Umqondo ofanayo usebenza nakwezinye iziteshi: ukushaqeka lapho isilingo sifika nge-SMS efonini ephathekayo, ukusebenzisa iqiniso lokuthi kule miyalezo kunzima kakhulu ukuqinisekisa i-URL; kanye nokushaqeka lapho ukuhlaselwa kwenziwa ngocingo, ukuzenza umuntu osekela ubuchwepheshe, ibhange noma umhlinzeki odinga ulwazi "lokuqinisekisa".

Ngokukhula kobuhlakani bokwenziwa obukhiqizayo, ama-deepfake ezwi namavidiyo athole ukuthandwa , akwazi ukuzenza abaphathi noma izinhloko zeminyango ukuze ba-ode ukudluliselwa okusheshayo noma babelane ngolwazi oluyimfihlo. Lawa mathuluzi anciphisa izindleko futhi enze lula imikhankaso eyayidinga umzamo omkhulu wesandla ngaphambilini.

Ukuhlaselwa kwezinhlelo zokusebenza zewebhu nama-API

Ezinkampanini eziningi, izinhlelo zokusebenza zewebhu nama-API yingxenye evezwe kakhulu ebusweni bazo bokuhlasela . Iphutha ekuphathweni kwedatha yokufaka, izilawuli zokufinyelela, noma ukuqinisekiswa kwamapharamitha kungavula umnyango wokuhlaselwa okulimaza kakhulu.

• Umjovo we-SQL (SQLi): Ukukhohlisa imibuzo yesizindalwazi ngokujova ikhodi enonya ezinkambini zokufaka. Uma uhlelo lokusebenza lungayihlanzi kahle le datha, umhlaseli angakwazi ukufunda, ukuguqula, noma ukususa imininingwane, futhi alawule iseva yesizindalwazi.
• Ukwenziwa Kwekhodi Ekude (RCE): Ubungozi obuvumela umhlaseli ukuthi akhiphe imiyalo kuseva lapho uhlelo lokusebenza lusebenza khona, ngokuvamile ngokusebenzisa ukuchichima kwebhafa noma amanye amaphutha anengqondo. Lolu hlobo lokwehluleka ngokuvamile lubucayi ngoba ihumusha cishe ekulawuleni okuphelele kwesistimu ethintekile.
• I-XSS (I-Cross-Site Scripting): Ijova imibhalo engalungile emakhasini abe esethulwa kwabanye abasebenzisi. Le mibhalo ingantshontsha amakhukhi esikhathi, iguqule okuqukethwe kwesiphequluli, noma iqondise kabusha emakhasini anomgunyathi ngaphandle kolwazi lomsebenzisi.

Ukuhlaselwa kwe-Supply chain

Sekuvamile kakhulu ukuthi ukuhlaselwa kungaqondisi inkampani ngokwayo, kodwa abalingani bayo. Ukuhlaselwa kwe-supply chain kusebenzisa ubudlelwano bokwethembana nabahlinzeki besofthiwe, abahlanganisi, abahlinzeki bezinsizakalo zamafu, noma izinkampani zokubonisana.

Isimo esivamile sihilela umhlinzeki wesevisi onokufinyelela okude ezinhlelweni zangaphakathi: uma umhlaseli efaka engcupheni inethiwekhi yakhe, angasebenzisa lezo ziqinisekiso ezisemthethweni ukuze afinyelele enhlanganweni yeklayenti ngokusola okuncane. Esinye isivikelo ukuphathwa kabi kwesofthiwe noma izibuyekezo zenkampani yangaphandle: ukufaka ikhodi enonya kumaphakheji wokubuyekeza afakwa yiklayenti, ethemba umthombo wawo ngokuphelele.

Ngaphezu kwalokho, cishe zonke izinhlelo zokusebenza zesimanje zihlanganisa imitapo yolwazi evulekile noma amamojula ezinkampani zangaphandle . Ubuthakathaka obukhulu njengobuthakathaka be-Log4j bubonise izinga lapho ingxenye ebonakala "incane" ingaba yingozi enkulu emhlabeni wonke uma isatshalaliswa kabanzi. Kumaqembu e-IT, ukuqoqwa kwempahla nokuphatha ingozi yezingxenye zangaphandle manje sekungenakugwenywa.

Ukunqatshelwa kokuhlaselwa kwesevisi (i-DoS ne-DDoS)

Ukuhlaselwa kokutholakala kuhlose ukususa izinsizakalo nezinhlelo zokusebenza ngaphandle kwe-inthanethi, okuvimbela abasebenzisi abasemthethweni ukuthi bangazifinyeleli. Efomini yabo yokunqatshelwa kwenkonzo (i-DDoS), izinkulungwane zamadivayisi asengozini zihlasela izinhlelo zesisulu ngethrafikhi, i-bandwidth egcwele, i-CPU, noma izinsiza zohlelo lokusebenza.

Amanye amaqembu asebenzisa ukuhlaselwa kokunqatshelwa kwenkonzo (DoS) njengethuluzi lokuphanga , esongela ukuhlaselwa okukhulu uma isihlengo singakhokhwa, noma ekuhlanganisa nemikhankaso ye-ransomware ukuze kwandiswe ingcindezi. Kwezinye izimo, ukuhlaselwa kwe-DoS kwenziwa ngokusebenzisa ubuthakathaka obuthile obubangela ukuphahlazeka kwesistimu noma ukusetshenziswa kwezinsiza ngokweqile lapho kutholwa okufakwayo okungasebenzi kahle.

Ukuhlasela kwe-Man-in-the-Middle (MitM ne-MitB)

Ekuhlaselweni kwe-Man-in-the-Middle, umgomo uwukuvimba futhi, uma kungenzeka, ushintshe ithrafikhi phakathi kwamaqembu amabili akholelwa ukuthi axhumana ngokuqondile nangokuphephile. Uma ukuxhumana kungabhalwanga ngendlela efanele, umhlaseli angafunda iziqinisekiso, idatha yasebhange, noma ulwazi lwebhizinisi ngombhalo ocacile.

Uhlobo oluyingozi kakhulu yi -Man-in-the-Browser (MitB) , lapho umhlaseli efaka khona engcupheni isiphequluli somsebenzisi esebenzisa ama-plugin noma i-malware enonya futhi ashintshe idatha ngaphambi nje kokuba iboniswe noma ithunyelwe kuseva. Lokhu kubavumela ukuthi bashintshe amanani okudlulisa, bashintshe amafomu, noma babambe konke okufakiwe ngaphandle kokuphakamisa noma yikuphi ukusola okubonakalayo.

Izinsongo ezithuthukile namathrendi abalulekile ochwepheshe be-IT

Ngaphezu "kwekhathalogi yangemuva" yakudala yokuhlaselwa, isimo samanje siletha izitayela ezicacile amaqembu e-IT angenakuzishaya indiva : isisindo esikhulu se-AI ebugebengwini be-inthanethi, izingozi ze-DNS, amaphutha okucushwa kwamafu, izinsongo zangaphakathi, kanye nemisebenzi exhaswe nguhulumeni.

Izinsongo ezisekelwe kubuhlakani bokwenziwa

Ubuhlakani bokwenziwa abuyona eyabavikeli kuphela. Ngokwandayo, izigebengu ze-inthanethi zithembele ku-AI kanye nokufunda komshini ukuze zikhulise, zithuthukise, futhi zenze ukuhlasela kwazo kube ngokwakho. Ezinye izibonelo:

• Ukukhiqizwa ngobuningi kwama-imeyili obugebengu bokweba imininingwane ebucayi nemilayezo enemibhalo yemvelo nengenaphutha, eguqulelwe ukuze ivumelane nolimi nomongo womuntu ohlukunyeziwe.
• Ukuzenzakalela kokusesha nokuxhashazwa kobungozi ezinhlelweni eziveziwe, ukubeka phambili okuqondiwe ngamathuba aphezulu okuphumelela.
• Ukuthuthukiswa kohlelo olungayilungele ikhompuyutha okukwazi ukufunda endaweni futhi kuguqule ukuziphatha kwayo ukuze kugweme ukutholwa ngokusekelwe kumasiginesha namaphethini amile.
• Ukudalwa kwama-deepfakes ezwi nevidiyo ukuze kuqiniswe imikhankaso yobunjiniyela bezenhlalo eqondiswe kumaphrofayili enani eliphezulu.

Ngesikhathi esifanayo, izinkampani ziqala ukuhlanganisa i-GenAI ngobuhlakani ekuzivikeleni kwazo ukuze kusheshiswe uphenyo, kuthuthukiswe ukutholakala kwezinkinga, futhi kulungiswe igebe lamakhono okuphepha kwe-inthanethi, abaholi abaningi abalibona njengenye yezinselelo ezinkulu zanamuhla.

Imigudu ye-DNS nokuhlukunyezwa kwesistimu yegama lesizinda

I-DNS iyisici esiyisisekelo se-inthanethi futhi, ngenxa yaleso sizathu, isiteshi esifanele sokufihla ithrafikhi enonya . Ukuthungelwa kwe-DNS kuhilela ukufaka idatha ngaphakathi kwemibuzo nezimpendulo ze-DNS ezibonakala zivamile, ngaleyo ndlela kudlule izilawuli eziningi ze-perimeter eziskena le thrafikhi ngaphandle kolwazi.

Le ndlela ivumela ulwazi olubucayi ukuthi lukhishwe kancane kancane noma iziteshi zokulawula nokulawula zigcinwe nge-malware efakiwe ngaphandle kokuphakamisa izinsolo. Ukuthola lolu hlobo lomsebenzi kudinga ukuqapha amaphethini angajwayelekile emibuzweni, osayizi, izizinda ezingavamile, noma ukuziphatha okungajwayelekile kwezibalo kuthrafikhi ye-DNS.

Amaphutha okumisa nokungahlanzeki ku-inthanethi

Inani elikhulu lezehlakalo livela ekumisweni okungalungile kanye nemikhuba engaphephile . Izibonelo ezivamile:

• Ama-firewall avumela ngokweqile noma amaqembu okuvikela amafu, anezimbobo ezivulekele umhlaba okungafanele.
• Izitolo zedatha kumasevisi wamafu alungiselelwe “njengasesidlangalaleni” ngephutha, okuveza ulwazi olubucayi ngaphandle kokuqinisekisa.
• Ukusetshenziswa kwemininingwane ezenzakalelayo noma amaphasiwedi abuthakathaka futhi asetshenziswe kabusha kuwo wonke amasevisi amaningi.
• Ukwehluleka ukusebenzisa iziqephu zokuphepha nezibuyekezo ze-firmware, okushiya ubungozi obaziwayo buvuleleke izinyanga.
• Ukushoda kwezipele ezithembekile, zakamuva, nezihloliwe, ezivimbela ukululama okusheshayo ekuhlaselweni kwe-ransomware.

Konke lokhu kuwela ngaphansi kwalokho esingakubiza ngokuthi ukuhlanzeka kwe-cyber okungekuhle : ukwehluleka ukulandela imikhuba emihle eyisisekelo kunciphisa noma yimuphi omunye umzamo wokuphepha. Ukuhlola okuzenzakalelayo kokucushwa, ukusebenzisa izimiso zamalungelo aphansi, kanye nokuqeqesha abasebenzisi kuyimisebenzi ebalulekile yokuvala lobu buthakathaka obusobala.

Izinsongo zangaphakathi namaphutha omuntu

Abantu abanokufinyelela okusemthethweni ezinhlelweni kanye nedatha babeka ingozi evame ukunganakwa. Izinsongo zangaphakathi zingaba yingozi noma zibe ngengozi.

• Abasebenzi abangeneme abantshontsha imininingwane ukuze bayidayise, bayiputshuze, noma bayiyise emqhudelwaneni.
• Osonkontileka noma ozakwethu abanamalungelo amaningi kunalokho okudingekile abanquma ukubahlukumeza.
• Amalungu eqembu okuthi, ngaphandle kwenhloso embi, abelane ngedatha ngamashaneli angavikelekile, athumele ama-imeyili kubamukeli abangalungile, noma alayishe amafayela abucayi kumasevisi amafu omuntu siqu.

Ukunciphisa le ngozi kudinga ukulawulwa kokufinyelela okuyinkimbinkimbi, ukubuyekezwa njalo kwezimvume , ukuqapha imisebenzi esolisayo (i-UEBA, i-DLP), kanye nesiko eliqinile lokuphepha ngaphakathi kwenhlangano. Uma othile eshiya inkampani, ukuhoxiswa ngokushesha kweziqinisekiso kanye nokufinyelela kumele kube inqubo ezenzakalelayo futhi engaxoxiswani.

Ukuhlasela okuxhaswe nguhulumeni kanye nemisebenzi eya phambili

Ngakolunye uhlangothi, sithola imisebenzi eyenziwa noma esekelwa yizifundazwe. Lokhu kuhlasela kuvame ukugqugquzelwa kwezepolitiki, kwezempi, noma kwezomnotho futhi kuhlose ingqalasizinda ebalulekile, ukuphathwa komphakathi, izinkampani zamasu (amandla, ezempilo, ezezimali), kanye nabahlinzeki bezobuchwepheshe ababalulekile.

Izinga labo lobuchwepheshe liphezulu: ukuxhashazwa kobuthakathaka obungenalo usuku olulodwa , izintambo zokutheleleka eziyinkimbinkimbi, izinyanga zokuqapha buthule ngaphambi kokuthatha isinyathelo, amathuluzi enziwe ngokwezifiso, kanye nemikhankaso emikhulu ehlanganisiwe. Nakuba ama-SME amaningi engeyona inhloso eqondile, angathinteka njengezixhumanisi ezibuthakathaka ochungechungeni lokuhlinzekwa kwezinhlangano ezidumile.

Amasu okuvikela nokuvikela amaqembu e-IT

Njengoba kunesimo esiyinkimbinkimbi kangaka, okuwukuphela kwendlela enengqondo yokuqhubekela phambili ukusebenzisa indlela yokuthatha isinyathelo, ebanzi, nenezigaba . Akukho mbumbulu enhle, kodwa kunezindlela zokwenza kanye nobuchwepheshe, uma buhlangene, obukhulisa kakhulu izindleko zokuhlasela kwesitha.

Patch futhi Update Management

Umzila wokuqala wokuzivikela uhilela ukugcina izinhlelo, izinhlelo zokusebenza, namadivayisi kusesikhathini . Ukusungula amafasitela okuvuselela njalo, ukusebenzisa isitokwe kanye namathuluzi okulungisa okuzenzakalelayo, kanye nokubeka phambili ubuthakathaka obubalulekile kunciphisa indawo yokuhlasela eyaziwayo.

Akukhona nje ngezinhlelo zokusebenza: i-firmware yama-router, ama-switch, ama-firewall, ama-endpoint, ama-hypervisor, izinhlelo zokusebenza zezinkampani zangaphandle , kanye nezingxenye zomthombo ovulekile konke kudinga ukubuyekezwa. Ukungakunaki lokhu kufana nokunikeza abahlaseli ikhathalogi yezinto ezivele zibhalwe phansi.

Ukuqinisekisa okuqinile nokulawula ukufinyelela

Ukunciphisa umthelela weziqinisekiso ezintshontshiwe kudinga ukusebenzisa ukuqinisekiswa kwezinto eziningi (i-MFA) noma kuphi lapho kungenzeka khona, kanye nezinqubomgomo zephasiwedi eziqinile kanye nokushintshaniswa kwephasiwedi njalo. Ezindaweni eziyinkimbinkimbi zezinkampani, ukwamukela amamodeli e-Zero Trust kusiza ukuqinisekisa ukuthi akukho divayisi noma umsebenzisi othembekile ngokuzenzakalelayo, noma ngabe "ungaphakathi" kwenethiwekhi.

Ukusebenzisa isimiso samalungelo aphansi (ukunikeza izimvume ezidingekayo kuphela endimeni ngayinye) kunciphisa kakhulu lokho umhlaseli angakwenza ngisho noma ekwazile ukufinyelela i-akhawunti yomsebenzisi esemthethweni.

Imfundo eqhubekayo kanye nesiko lokuphepha

Njengoba yonke imibiko ibonisa, isici somuntu sihlala singenye yezixhumanisi ezibuthakathaka kakhulu. Ngakho-ke, ukuqeqeshwa kwezokuphepha kwe-inthanethi akukwazi ukuba yinkambo eyenzeka kanye kuphela ethathwa kanye bese ikhohlakala. Kumelwe kube uhlelo oluqhubekayo, oluvuselelwe futhi oluvumelaniswe nezindima ezahlukene ngaphakathi kwenkampani.

Okuqukethwe kufanele kuhlanganise konke kusukela ekuqapheliseni okuyisisekelo (ukuqaphela ubugebengu bokweba imininingwane ebucayi, ukuvikela amadivayisi, ukuziphatha okuphephile ezinkundleni zokuxhumana kanye nezinsizakalo zamafu) kuya emithethweni, imikhuba emihle kakhulu yendawo ethile, kanye nokukhethekile okuthuthukisiwe kwamaphrofayili obuchwepheshe. Indlela yokufunda ngokwenza, ngokulingisa ukuhlasela okungokoqobo, amalebhu asebenzayo, kanye nezikhathi ezibukhoma nochwepheshe, ngokuvamile kuyindlela ephumelela kakhulu yokuqinisa ulwazi.

Inethiwekhi, indawo yokugcina, nokuvikelwa kwedatha

Ngasohlangothini lobuchwepheshe, kubalulekile ukuhlanganisa izilawuli ezahlukene: izivikelo zomlilo zesizukulwane esilandelayo, izinhlelo zokuthola nokuvimbela ukungena (i-IDS/IPS) , ukuhlunga okuqukethwe, ukuhlukaniswa kwenethiwekhi, izixazululo ze-endpoint ezithuthukisiwe (i-EDR/XDR), ukubethela idatha ngesikhathi sokuthutha kanye nokuphumula, kanye namathuluzi e-DLP ukuvimbela ukuphuma okungagunyaziwe.

Ama-backup adlala indima ebalulekile: ama-backup avamile, anqanyuliwe ngokunengqondo kunethiwekhi eyinhloko futhi ahlolwe njalo ukuqinisekisa ukuthi ukuvuselelwa kuyasebenza, enza umehluko omkhulu esigamekweni se-ransomware noma ekusulweni kwedatha enkulu.

Izinhlelo zokuphendula isigameko kanye nobuhlakani obusongelayo

Ayikho indawo ephephile ngokuphelele, ngakho-ke kubalulekile ukucabanga ukuthi, ngokushesha noma kamuva, kuzokwenzeka izehlakalo. Ukuba nohlelo lokuphendula izehlakalo oluchazwe kahle , oluhlolwe ngokuqeqeshwa futhi olwaziwa yiwo wonke umuntu ohilelekile, kunciphisa kakhulu isiphithiphithi lapho kufika isikhathi seqiniso.

Ngaphezu kwalokho, ukuthembela ekuhlakanipheni kwezinsongo ngesikhathi sangempela , kungaba okuvela emithonjeni yethu noma kubahlinzeki abakhethekile, kusenza sikwazi ukulungisa imithetho yokuthola, ukuvimba ingqalasizinda enobungozi eyaziwayo, futhi silindele imikhankaso emisha ngaphambi kokuba ithinte inhlangano ngqo.

Kulo mongo, izixazululo zokuphepha kwe-inthanethi zesizukulwane esilandelayo ezikwazi ukubona ukuziphatha okungavamile, ukwenza izimpendulo ngokuzenzakalela (ukuhlukanisa amadivayisi, ukubulala izinqubo ezinonya, ukuguqula izinguquko) kanye nokuhlanganisa imicimbi phakathi kwama-endpoints, amanethiwekhi, kanye nefu zingabangane abakhulu bamaqembu okuphepha, ezimweni eziningi, akhungathekile.

Kwabochwepheshe be-IT, inselele ayisekho nje ukulungisa izinto nokucima imililo, kodwa ukuhola isu lokuphepha elihambisanayo elihlanganisa ubuchwepheshe, izinqubo, kanye nabantu. Izinsongo zizoqhubeka nokukhula, i-AI izoqhubeka nokudlala izinhlangothi zombili, futhi igebe lamakhono okuphepha kwe-inthanethi ngeke livaleke ngobusuku obubodwa. Yingakho izinhlangano ezitshala imali kusenesikhathi esikweni lokuphepha eliqinile, ukuzenzekela okuhlakaniphile, kanye nokuqeqeshwa okuqhubekayo zizobekwa endaweni engcono kakhulu yokubhekana nokushaywa okungenakugwenywa okuzofika ngokungenakugwenywa.