- Ukuphepha kwamafu kusekelwe kumodeli yomthwalo wemfanelo ohlanganyelwe phakathi komhlinzeki nekhasimende, ohlukahluka kuye ngohlobo lwesevisi (i-IaaS, i-PaaS, i-SaaS).
- Ukuvikela ifu kudinga ukuhlanganisa ukubethela, i-granular IAM, ukuhlukaniswa kwenethiwekhi, ukuqapha okuqhubekayo, kanye nokusekela okuvivinyiwe.
- Izindawo zomphakathi, ezizimele, ezihlanganisiwe, kanye namafu amaningi zidinga amasu athile asekelwa yi-Zero Trust kanye namathuluzi afana ne-CSPM, i-CIEM, noma i-CDR.
- Ukuthobela ubumfihlo kanye nokulawula (GDPR, HIPAA, njll.) kudinga ukusetshenziswa kwezilawuli zobuchwepheshe nezinhlangano eziqinile phezu kwedatha kanye nokufinyelela.
Ukuphepha kwamafu sekuyinto ebalulekile kunoma iyiphi inkampani noma inhlangano esebenzisa izinsizakalo zamafu nsuku zonke. Asisakhulumi nje ngezinkampani ezinkulu: ama-SME, abasebenza ngokuzimela, ngisho nabasebenzisi ngabanye bathembele kuzinhlelo zokusebenza kanye nedatha ephethwe ngaphandle kwamaseva abo.
Kulo mongo, ukuqonda kahle ukuthi kusho ukuthini ukuvikela idatha, izinhlelo zokusebenza, kanye nengqalasizinda kwisitoreji samafu , ukuthi iyiphi ingxenye ewela kumhlinzeki kanye nokuthi iyiphi ingxenye kuklayenti, nokuthi yiziphi izingozi ezithile ezikhona, kwenza umehluko phakathi kokusebenza ngokuthula kwengqondo noma ukuba kude ngokuchofoza okukodwa nesigameko esingathi sína sokuphepha kwe-cyber.
Incazelo kanye nezisekelo zokuphepha kwamafu
Uma sikhuluma ngokuphepha kwamafu, sibhekisela kusethi yobuchwepheshe, izinqubo, izinqubomgomo, kanye nemikhuba emihle eyenzelwe ukuvikela konke okuhlala endaweni yamafu: idatha, izinhlelo zokusebenza, izinhlelo zokusebenza, amanethiwekhi abonakalayo, kanye nengqalasizinda eyisisekelo ngokwayo.
Lo mkhakha uyingxenye yokuphepha kwe-cyber, kodwa unezici zawo. Efwini, ukuvikelwa kwabelwana ngakho phakathi komhlinzeki wesevisi kanye neklayenti . Umhlinzeki uvikela izingxenye zomzimba kanye nengxenye yesendlalelo esinengqondo, kuyilapho iklayenti linesibopho sokucushwa, ukuvikelwa kwedatha, ukuphepha komsebenzisi, kanye nendlela izinsizakalo ezisetshenziswa ngayo.
Empeleni, ukuphepha kwamafu kuhlelwe ezindaweni eziningana ezibalulekile: ukuvikelwa kwedatha, ubunikazi kanye nokuphathwa kokufinyelela (i-IAM), ukubusa kanye nokuthobela imithetho, ukuqhubeka kwebhizinisi kanye nokubuyiselwa kwenhlekelele , kanye nokuhambisana nemithetho yokuvikelwa kwedatha kanye nemithethonqubo yemboni.
Ububanzi bokuphepha kwamafu busukela ezintweni ezibonakalayo njengezikhungo zedatha, ama-router noma izinhlelo zamandla , kuya ezingqimbeni ezinengqondo ezifana namapulatifomu e-virtualization, izinhlelo zokusebenza, i-middleware, ama-API, izindawo zokusebenza, izinhlelo zokusebenza zabasebenzisi kanye, vele, ungqimba lwedatha namadivayisi okugcina (amakhompyutha, amaselula, i-IoT, njll.).
Ngenxa yokuthi ubunikazi nokuphathwa kwalezi zingxenye efwini kusatshalaliswa ngendlela ehlukile kuye ngesevisi, kubalulekile ukuchaza ngokucacile imingcele yesibopho . Yilapho imodeli yesibopho esabiwe eyaziwayo iqala khona ukusebenza.
Imodeli yomthwalo wemfanelo owabiwe efwini
Imodeli yomthwalo wemfanelo ohlanganyelwe isetshenziswa cishe yibo bonke abahlinzeki (i-AWS, i-Azure, i-Google Cloud, nabanye) . Lokhu kusho ukuthi bobabili umhlinzeki kanye nekhasimende banemisebenzi ethile yokuqinisekisa ukuphepha kwemvelo.
Umhlinzeki ngokuvamile unesibopho sokuphepha kwefu ngokwalo : izikhungo zedatha, inethiwekhi ebonakalayo, ihadiwe, ama-hypervisor, ama-host angokoqobo, kanye nengxenye yesendlalelo se-virtualization. Lokhu kufaka phakathi ukupesha, ukucushwa, kanye nokulawula ukufinyelela ezinsizeni ezibonakalayo lapho imishini ebonakalayo kanye nezinsizakalo eziphethwe zisebenza khona.
Ikhasimende, ngokwalo, lihlala linesibopho sokuphepha "efwini" . Lokhu kuhilela ukuphatha abasebenzisi, izindima, kanye nezimvume (i-IAM), ukuvikela ama-akhawunti ekufinyeleleni okungagunyaziwe, ukubethela nokulawula idatha yawo, ukuvikela izinhlelo zokusebenza abazisebenzisayo, kanye nokugcina isimo sokuthobela imithetho esifanele.
Phakathi kwalezi zindlela ezimbili eziqine kakhulu, kunemithwalo yemfanelo ehlukahluka kuye ngemodeli yesevisi :
-
Isofthiwe njengesevisi (SaaS) : Umhlinzeki uphatha ingqalasizinda, uhlelo lokusebenza, i-middleware, kanye nohlelo lokusebenza ngokwalo. Iklayenti linesibopho sabasebenzisi, amaphasiwedi, izimvume, ukucushwa okusebenzayo, kanye nokuvikela idatha abayifakayo noma abayikhiqizayo.
-
Ipulatifomu njengesevisi (i-PaaS) : Umhlinzeki uphatha ingqalasizinda, uhlelo lokusebenza, isikhathi sokusebenza, kanye namanye amathuluzi epulatifomu. Ikhasimende liphatha ikhodi yalo yohlelo lokusebenza, idatha, ukufinyelela komsebenzisi, kanye nokuphepha kokuhlanganiswa.
-
Ingqalasizinda njengesevisi (IaaS) : Umhlinzeki uvikela ihadiwe ebonakalayo kanye nokwenza izinto zibe ngokoqobo, kodwa ikhasimende kumele livikele uhlelo lokusebenza lwemishini yalo ebonakalayo, i-middleware, idatha, izinhlelo zokusebenza, inethiwekhi enengqondo, kanye namadivayisi namanethiwekhi lapho kufinyelelwa khona.
Uma isevisi iphathwa kahle (isib. i-SaaS), umhlinzeki uthatha imisebenzi eminingi yokuphepha . Njengoba sisondela kumodeli ye-IaaS, ukulawula kuyanda, kodwa nomthwalo wemfanelo wekhasimende uyakhula.
Izindawo zokufakwa kwamafu namamodeli
Indlela ifu elisetshenziswa ngayo nayo ithonya indlela ukuphepha okuphathwa ngayo. Kunezinhlobo ezahlukene zemvelo yamafu ezibhekana nezidingo nezingozi ezahlukene.
Efwini lomphakathi , izinsiza zingezomhlinzeki wesithathu futhi zabelwana phakathi kwamakhasimende amaningi (abaqashi abaningi). Lena imodeli evamile ye-AWS, i-Azure, noma i-Google Cloud. Inikeza ukukhuliswa okuphezulu, amanani okukhokha njengoba uqhubeka, kanye nokuphathwa kwengqalasizinda encane yikhasimende, kodwa idinga ukuhlukaniswa kwedatha okuqinile kanye nokucushwa ukuze kuvinjelwe ukuvuza phakathi kwabaqashi kanye namaphutha okuvezwa komphakathi.
Ifu eliyimfihlo liyindawo enikezelwe enhlanganweni eyodwa, ephethwe endaweni yayo noma kusayithi lomuntu wesithathu, kodwa ehlukanisiwe. Linikeza ukulawula okukhulu, ukuphepha okungenziwa ngokwezifiso, kanye nokuhlukaniswa kwezinsiza , futhi liqondiswe emikhakheni enezidingo eziqinile zomthetho ezifana nokunakekelwa kwempilo, ezezimali, noma umkhakha womphakathi.
Imodeli yefu ehlanganisiwe ihlanganisa amafu omphakathi nawangasese, okuvumela idatha kanye nemithwalo yemisebenzi ukuthi ihanjiswe phakathi kwawo. Lokhu kunikeza ukuguquguquka: singabamba idatha ebalulekile efwini eliyimfihlo futhi sisebenzise ukuguquguquka kwefu lomphakathi ukuze kutholakale isidingo esiphezulu. Kodwa-ke, kwandisa nobunzima bokuvikela ukuxhumana kanye nokuphoqelela izinqubomgomo ezihambisanayo kuzo zombili izinhlangothi.
Ngendlela yokusebenzisa amafu amaningi , inhlangano isebenzisa izinsizakalo ezivela kubahlinzeki abaningi (isibonelo, i-AWS kanye ne-Azure kanye ne-SaaS ethile embonini). Lokhu kunciphisa ukuvalelwa kwabathengisi futhi kuthuthukisa ukuqina, kodwa kwenza ukuphathwa kwenqubomgomo okuhlangene, ukubonakala, kanye nokuthobela kube nzima kakhulu ngenxa yesidingo sokuhlela amapulatifomu namathuluzi ahlukene.
Kuwo wonke lawa mamodeli, izinyathelo ezifana nokubethela okuqinile, i-granular IAM, ukuhlolwa okwenziwa ngezikhathi ezithile kanye namathuluzi akhethekile (i-CASB, i-CIEM, i-CSPM) ziyanconywa ukuze kugcinwe umbono ohlanganisiwe wesimo sokuphepha.
Indlela ukuphepha kwamafu okusebenza ngayo ngempela
Ukuphepha kwamafu kuncike kusethi yezindlela zobuchwepheshe ezihlanganisiwe nezokuhlela , uma zisetshenziswa kahle, zinciphisa kakhulu ingozi yezehlakalo.
Enye yezinsika ezibalulekile ukubethela idatha ngesikhathi sokuthutha kanye nalapho iphumule . Amaphrothokholi avikelekile (i-TLS) asetshenziswa lapho idatha ihamba phakathi kwabasebenzisi, izinhlelo zokusebenza, kanye namaseva, futhi izindlela zokubethela zezinga lezempi zisetshenziswa kudatha egcinwe kumadiski, kudathabheyisi, noma kwezinye izinto. Ngale ndlela, noma ngabe othile weba ulwazi, ngeke akwazi ukuluqonda ngaphandle kwesihluthulelo.
Okubaluleke njengokubethela nokuphathwa kwezihluthulelo okufanele : zigcine ngokuphephile usebenzisa amathuluzi okubethela amafayela asekelwe efwini (ikakhulukazi kumamojula noma kumasevisi okuphatha izihluthulelo), zijikeleze njalo, bese ulawula ukuthi ubani ongawasebenzisa. Ukuphathwa kwezihluthulelo okungekuhle kungalimaza ngisho nokubethela okunamandla kakhulu.
Esinye isici esibalulekile ukuphathwa kobunikazi nokufinyelela (i-IAM) . Lokhu kuhlanganisa ukuchaza abasebenzisi, amaqembu, kanye nezindima, ukunikeza izimvume ezidingekayo ezincane (isimiso selungelo elincane), ukusebenzisa ukuqinisekiswa kwezinto eziningi (i-MFA), kanye nokubuyekeza njalo ama-akhawunti aphelelwe yisikhathi noma anelungelo elikhulu.
Ezingeni lenethiwekhi, ukuphepha kwamafu kusebenzisa ama-firewall abonakalayo, ukuhlukaniswa okunengqondo, amanethiwekhi ayimfihlo abonakalayo (ama-VPN), kanye nokuhlukaniswa okuncane . Umqondo uwukuthi akuzona zonke izinto ezingaxhumana nakho konke okunye; kufanele kube khona ithrafikhi edingekayo kuphela phakathi kwezinsizakalo, izindawo, kanye nezindawo.
Ukuqapha okuqhubekayo kanye nokutholwa kwezinsongo kuqedela isithombe. Amathuluzi Okuthola Nokuphendula Okusekelwe Efwini (CDR), izixazululo ze-SIEM, ubuhlakani bezinsongo, kanye nezinhlelo zokuthola izinsongo ezisebenzisa i-AI zivumela ukuhlonza ukuziphatha okusolisayo, ukufinyelela okungajwayelekile, noma ukucushwa okuyingozi cishe ngesikhathi sangempela.
Konke lokhu kusekelwa izinhlelo zokusekela, izinhlelo zokulungisa izinhlekelele (DR), kanye nokuqhubeka kwebhizinisi (BC) , okuqinisekisa ukuthi uma kukhona okuphukayo noma okusengozini, inhlangano ingalulama ngaphandle komthelela omubi kakhulu.
Yini eyenza ukuphepha kwamafu kuhluke ekuphepheni kwendabuko?
Umehluko omkhulu ukuthi, efwini, umngcele wendabuko uyanyamalala cishe . Ngaphambilini, kwakwanele ukuvikela inethiwekhi yangaphakathi yenkampani ngemuva kodonga lomlilo oluzungezile; manje, idatha nezinhlelo zokusebenza zisatshalaliswa kuzo zonke izikhungo zedatha zangaphakathi kanye nabahlinzeki bangaphandle, kufinyeleleka noma kuphi.
Ngaphezu kwalokho, ingqalasizinda yamafu ibonakala ngokukhula kwayo okusheshayo kanye nesimo sayo sesikhashana . Imishini ebonakalayo, izitsha, kanye nemisebenzi engenaseva iyavela futhi inyamalale ngokuzenzakalelayo, okwenza kube nzima kakhulu umsebenzi wamathuluzi okuphepha endabuko, aklanyelwe izindawo ezingashintshi.
Ukuhlanganiswa nezinsizakalo eziningi zezinkampani zangaphandle, ama-API, namadivayisi okugcina kukhulisa kakhulu indawo yokuhlasela . Noma yikuphi ukungalungiselelwa kahle noma ukuziphatha okungavikelekile (njengokushiya ibhakede livuliwe noma ukwabelana ngezihluthulelo nge-imeyili) kungaba nomthelela omkhulu.
Okokugcina, ezindaweni zomphakathi, ezihlanganisiwe, kanye nezamafu amaningi, kunengxenye eyengeziwe: ukusondelana okunengqondo namanye amakhasimende nezinhlelo . Ukwehluleka kokuzihlukanisa noma ukuba sengozini kwesevisi ehlanganyelwe kungakhuphukela kubaqashi abaningi uma umhlinzeki engathathi isinyathelo ngokushesha.
Izingozi ezinkulu kanye nezinsongo ekuphepheni kwamafu
Izindawo zamafu, uma zingaphathwa kahle, zingaveza izinkampani nabasebenzisi ezinsongweni eziningi , zangaphandle nezangaphakathi.
Inkinga ephindaphindayo ukufinyelela okungagunyaziwe , okuvame ukubangelwa ukusetshenziswa kweziqinisekiso ezebiwe, amaphasiwedi abuthakathaka, noma ama-akhawunti omphathi aphethwe kabi. Ezimweni zomsebenzi ezikude, lapho abasebenzi befinyelela uhlelo besuka ezindaweni eziningi namadivayisi, le ngozi iyanda.
Enye ingozi ebalulekile ukulahleka kwedatha noma ukuvuza . Ukungalungiselelwa kahle (isitoreji somphakathi uma kufanele sibe yimfihlo), amaphutha abantu, ukuhlaselwa yi-malware, ubugebengu bokweba imininingwane ebucayi, noma ukuxhashazwa kobuthakathaka bohlelo lokusebenza kungadalula ulwazi olubucayi.
Ukungalandeli imithetho kungenye inkinga enkulu. Imithetho efana ne-GDPR, i-HIPAA, i-PCI DSS, neminye idinga ukulawulwa okuqondile kokuthi idatha igcinwa kanjani, icutshungulwa kanjani, futhi idluliselwa kanjani. Efwini, kulula ukulahlekelwa umkhondo wokuthi idatha ihlala kuphi ngokoqobo noma ukuthi ubani oyifinyelelayo uma ukuphepha kungaklanywanga ngalolu hlaka lokulawula engqondweni.
Akufanele futhi sikhohlwe ukuhlaselwa okubhekiswe ekutholakaleni , njengemikhankaso yokunqatshelwa kwenkonzo (i-DDoS) ezama ukuqeda izinsizakalo zamafu futhi izisuse ku-inthanethi. Nakuba abahlinzeki abakhulu benokuzivikela okuqinile, ayikho indawo evikelekile.
Okokugcina, amaphutha okulungiselelwa kabi kanye nezinsongo zangaphakathi ziyagqama . Ukushiya amachweba angadingekile evulekile, ukwehluleka ukushintsha amanani azenzakalelayo, noma ukunikeza abasebenzisi noma izinhlelo zokusebenza izimvume eziningi kunalokho okudingekayo kuvula umnyango wokuhlukunyezwa, kokubili ngabantu besithathu kanye nabasebenzi bangaphakathi abanenhloso embi noma ukuqeqeshwa okunganele.
Ubumfihlo, imithethonqubo kanye nemithetho ehlobene nefu
Ukuvikelwa kwedatha yomuntu siqu efwini kuthonywa kakhulu yizinhlaka zomthetho nezokulawula . EYurophu, i-General Data Protection Regulation (GDPR) ibeka imithetho yokuthi idatha yezakhamizi zaseYurophu ingagcinwa, icutshungulwe futhi idluliselwe kanjani.
Emikhakheni efana nokunakekelwa kwempilo, imithethonqubo efana ne -HIPAA yengeza izidingo ezengeziwe mayelana nobumfihlo, ubuqotho, kanye nokutholakala kolwazi lwezokwelapha. Ngaphezu kwalokho, emkhakheni wabahlinzeki bamafu abakhona e-US, imithetho efana ne- Cloud Act ivumela iziphathimandla ezithile ukuthi zicele ukufinyelela kudatha egcinwe kumaseva azo, noma ngabe lawo maseva atholakala kwamanye amazwe.
Ukuze kuhlangatshezwane nalezi zidingo, izinhlangano eziningi zisebenzisa amasu anjengokufihla idatha noma ukuqamba igama eliyimfihlo , okuhlukanisa idatha yokuhlonza kolunye ulwazi, kanye nokubethela okuqinile kanye nokulawula ukufinyelela nokubhalisa okuqinile.
Kunoma ikuphi, noma ngabe umhlinzeki wefu unikeza amathuluzi nezitifiketi, umthwalo wemfanelo wokugcina wokuthobela imithetho ulele nakumakhasimende , okumele aqinisekise ukuthi alungiselela futhi asebenzise izinsizakalo ngokuhambisana nomthetho osebenzayo.
Izinhlobo nezixazululo ezithile zokuphepha kwamafu
Eminyakeni yamuva nje, kuye kwavela izixazululo ezikhethekile zokubhekana nezinselele ezithile zokuphepha kwamafu nokuhambisana nemisebenzi yabahlinzeki.
Amapulatifomu Okuphathwa Kwesimo Sokuphepha Kwamafu (CSPM) abuyekeza njalo ukucushwa kwezinsizakusebenza zamafu ukuthola amaphutha, ukuphambuka emikhubeni emihle, kanye nezinkinga zokuthobela imithetho, ephakamisa noma esebenzisa ukulungiswa okuzenzakalelayo.
Amathuluzi okuphathwa kwe-Cloud Infrastructure Entitlement Management (CIEM) agxila ezimvumeni kanye nobunikazi ezingqalasizinda zefu eziyinkimbinkimbi, esiza ekunciphiseni amalungelo amaningi futhi anikeze ukubonakala okunembile kokuthi ubani ongenza ini kumthombo ngamunye.
Izinhlelo Zokuthola Nokuphendula Ngefu (CDR) kanye nama-SIEM anamuhla ahlinzeka ngokutholwa nokuphendula kwezinsongo okuthuthukisiwe, okuhlanganisa izingodo ezivela emithonjeni ehlukene, okunezela ubuhlakani bezinsongo, kanye nokuxwayisa ngesikhathi sangempela ngokuziphatha okungajwayelekile.
Ekuthuthukisweni kwesofthiwe, imikhuba efana ne -SAST (Static Application Security Testing) kanye ne-DAST (Dynamic Application Security Testing) isiza ukuthola ubuthakathaka ezindaweni zekhodi kanye nesikhathi sokusebenza ngaphambi kokuba zifinyelele ekukhiqizweni.
Ezakhiweni zesimanje, kukhona futhi inkulumo ye- Secure Infrastructure as Code (IaC) , ehilela ukuqinisekisa amathempulethi nezincazelo zengqalasizinda (Terraform, CloudFformation, njll.) ukuqinisekisa ukuthi izinsiza zizalwa nokucushwa okuphephile.
Amapulatifomu okuvikela umsebenzi wefu (ama-CWPP) agxila ekuvikeleni amaseva abonakalayo, izitsha, kanye nemisebenzi engenamaseva, kuyilapho ubuchwepheshe obufana ne-SOAR buzenzakalela ukuhlela, ukuphendula, kanye nokuhlanganiswa kuwo wonke amathuluzi okuphepha amaningi.
Ezindaweni zokuhlelwa kweziqukathi, izixazululo ze- Kubernetes Security Posture Management (KSPM) zisiza ukuvikela amaqoqo, izinqubomgomo zenethiwekhi, izindima, kanye nokucushwa okuqondene nale ndawo.
I-Zero Trust: Indlela Eyinhloko Yokuphepha Kwamafu
Imodeli ye -Zero Trust iphakamisa ukulahla umqondo wokuthi okungaphakathi kwenethiwekhi kuthembekile kanti okungaphandle akuthembekile. Esikhundleni salokho, konke ukufinyelela kufanele kuqinisekiswe njalo, kungakhathaliseki ukuthi umsebenzisi noma umthombo utholakala kuphi.
Empeleni, i-Zero Trust ikhuthaza umgomo welungelo elincane kakhulu : umsebenzisi ngamunye, isevisi, noma uhlelo lokusebenza lungafinyelela kuphela lokho olukudingayo ngomsebenzi walo, akukho okunye. Ngale ndlela, uma i-akhawunti isengozini, umthelela uba mkhulu kakhulu.
Le ndlela idinga futhi ukuvikela izinhlelo zokusebenza zewebhu nama-API kusukela esigabeni sokuklama, ukubuyekeza ama-port avulekile, izimvume zedathabheyisi, ukuhlanganiswa kwezinkampani zangaphandle, kanye nezinqubomgomo zokuqinisekisa nokugunyaza, ukuvimbela umhlaseli ukuthi ahambe ngokukhululeka uma ebeka engcupheni ingxenye.
Esinye isici esibalulekile se-Zero Trust ukuhlukaniswa kwezingxenye ezincane . Esikhundleni senethiwekhi eyisicaba, kwakhiwa izindawo zokuphepha ezincane ngaphakathi kwesikhungo sedatha noma endaweni yamafu, kusetshenziswa izinqubomgomo eziqinile zethrafikhi phakathi kwezindawo naphakathi kwemithwalo yemisebenzi. Ngale ndlela, noma ngabe ingxenye eyodwa isengozini, okusele kuhlala kuvikelwe.
Imikhuba emihle kakhulu kanye nezinyathelo eziqondile zokuvikela ifu
Ukuze usebenzise ifu ngokuphephile, kubalulekile ukuhlanganisa izindlela zobuchwepheshe, zokulungiselela, kanye nezokwazisa . Ezinye zezindlela ezifanele kakhulu yilezi:
Okokuqala, kuyalulekwa ukubhala ngemfihlo konke ukuxhumana nefu kanye nedatha ebucayi ikakhulukazi , njengeziqinisekiso, ulwazi lwezezimali, noma idatha yomuntu siqu. Noma nini lapho kungenzeka, ukubethela kusukela ekuqaleni kuya ekugcineni kunikeza izinga eliphezulu lokuvikela.
Okubaluleke ngokulinganayo ukucushwa ngokucophelela kwazo zonke izinsizakalo zamafu . Ungalokothi ushiye amanani azenzakalelayo, futhi ungalokothi uveze ngephutha amabhakede, izizindalwazi, noma imishini ku-inthanethi ngaphandle uma kudingeka ngempela. Ukubukeza amathempulethi e-IaC nokusebenzisa amathuluzi e-CSPM kusiza ukunciphisa lawa maphutha.
Imikhuba eyisisekelo yokuphepha kwe-inthanethi isabalulekile: amaphasiwedi aqinile , abaphathi bamaphasiwedi, i-MFA, i-antivirus, i-antimalware, kanye nokugwema amanethiwekhi e-Wi-Fi omphakathi angavikelekile . Idivayisi eyodwa ethelelekile noma ukhiye owodwa ovuzayo kungafaka engcupheni yonke indawo yakho yamafu.
Kubalulekile futhi ukwenza ama-backup njalo nokuhlola ukuthi angabuyiselwa. Lawa ma-backup angagcinwa endaweni, kwelinye ifu, noma nomhlinzeki ohlukile, ukuqinisekisa ukuthi awabelani ngengqalasizinda efanayo ukuze kugwenywe amaphuzu awodwa okwehluleka.
Okokugcina, izinhlangano kufanele zikhawulele futhi zibuyekeze njalo izimvume kanye nokufinyelela kokubili izinhlelo zokusebenza namadivayisi e-IoT, zidale amanethiwekhi ezivakashi, zihlukanise izindawo zokukhiqiza kanye nokuhlola, futhi zigcine i-akhawunti enhle kanye nenhlanzeko yesevisi (ukususa lokho okungasasetshenziswa).
Izinselele ezithuthukisiwe zokuphepha kwe-cloud-native
Ezindaweni ezigxile kakhulu efwini, ikakhulukazi nge-CI/CD, ama-microservices, ama-container, kanye nemisebenzi engenamaseva, kuvela izinselele zokuphepha ezengeziwe.
Indawo yokuhlasela inkulu, inezindawo eziningi zokungena ezingaba khona: ama-port avulekile, ama-API avele, iziqinisekiso ezifakwe kukhodi , noma ukucushwa kwenethiwekhi okuvunyelwe ngokweqile. I-Malware, ukuhlaselwa kwe-zero-day, kanye nokuthathwa kwama-akhawunti manje sekuyinto evamile.
Ngaphezu kwalokho, ukuntuleka kokubonakala okuphelele kuzo zonke izindawo ze-IaaS, PaaS, kanye ne-SaaS kwenza kube nzima ezinkampanini eziningi ukwazi kahle ukuthi yiziphi izimpahla abanazo efwini ngalinye nokuthi zihlelwe kanjani, okwenza kube nzima ukuqoqwa kwempahla kanye nokuphathwa kwezingozi.
Imithwalo yemisebenzi ishintsha njalo: izinsiza zisetshenziswa ngokuguquguqukayo futhi zibhujiswa ngezinga elikhulu, okwenza kube nzima ngamathuluzi endabuko ukuhambisana nokuphoqelela izinqubomgomo ezihambisanayo . Yingakho ukuhlanganisa izilawuli zokuphepha kusukela ezigabeni zokuqala zomjikelezo wokuthuthukiswa (i-DevSecOps) kubaluleke kakhulu.
Okungeziwe kulokhu ubunzima bokuphatha amalungelo agcwele kakhulu kanye nezinkinobho zokufinyelela . Indima engachazwanga kahle noma iphasiwedi ekhohliwe enezimvume eziningi ingadala ubuthakathaka obukhulu. Futhi ezindaweni ezihlanganisiwe nezinamafu amaningi, ukuhlela izinqubomgomo zokuthobela imithetho kanye nokuphatha ezihambisanayo ngaphandle kwamathuluzi afanele kuba cishe akunakwenzeka.
Ekugcineni, izinhlangano zidinga ukuphepha okuklanyelwe ngqo izindawo ezihlala emafwini , ngokubonakala okuphakathi, ukuzenzekela okuqinile, kanye nekhono lokuzivumelanisa nezimo ezisakazeke kakhulu.
Lonke lolu hlelo lwemiqondo, ubuchwepheshe, kanye nemikhuba emihle kakhulu kwenza ukuphepha kwamafu kube okungaphezu "kokufaka isofthiwe ye-antivirus kuseva ekude": kuyinqubo eqhubekayo yokuklama, ukucushwa, ukuqapha, kanye nokuthuthukiswa, lapho umhlinzeki kanye neklayenti kumele basebenzisane ukuze bagcine idatha, izinhlelo zokusebenza, kanye nabasebenzisi bevikelekile ngempela.
