{"id":55511,"date":"2020-01-22T00:00:00","date_gmt":"2020-01-21T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/chto-shifrovat-v-korporativnoj-sisteme-i-zachem-eto-delat"},"modified":"2020-02-18T14:03:38","modified_gmt":"2020-02-18T11:03:38","slug":"chto-shifrovat-v-korporativnoj-sisteme-i-zachem-eto-delat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/az\/blog\/administrirovanie\/chto-shifrovat-v-korporativnoj-sisteme-i-zachem-eto-delat","title":{"rendered":"Korporativ sistemd\u0259 n\u0259yi \u015fifr\u0259l\u0259m\u0259k laz\u0131md\u0131r? V\u0259 bunu niy\u0259 etm\u0259k laz\u0131md\u0131r?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GlobalSign \u015eirk\u0259ti sor\u011fu ke\u00e7irdi<\/a><\/noindex>, \u015firk\u0259tl\u0259rin a\u00e7\u0131q a\u00e7ar infrastrukturundan (PKI) nec\u0259 v\u0259 niy\u0259 istifad\u0259 etdikl\u0259ri bar\u0259d\u0259. Sor\u011fuda 750-d\u0259n \u00e7ox insan i\u015ftirak etdi: onlara h\u0259m\u00e7inin r\u0259q\u0259msal imzalar v\u0259 DevOps haqq\u0131nda suallar verildi.<\/p>\n

Terminl\u0259 tan\u0131\u015f deyilsinizs\u0259, PKI sisteml\u0259rin m\u0259lumatlar\u0131 t\u0259hl\u00fck\u0259siz \u015f\u0259kild\u0259 m\u00fcbadil\u0259 etm\u0259y\u0259 v\u0259 sertifikat sahibl\u0259rini t\u0259sdiql\u0259m\u0259y\u0259 imkan tan\u0131y\u0131r. PKI H\u0259ll\u0259ri<\/a><\/noindex> r\u0259q\u0259msal sertifikatlar\u0131n autentifikasiyas\u0131 v\u0259 m\u0259lumatlar\u0131n \u015fifr\u0259l\u0259nm\u0259si v\u0259 kriptografik autentifikasiyas\u0131n\u0131n yoxlan\u0131lmas\u0131 \u00fc\u00e7\u00fcn a\u00e7\u0131q a\u00e7arlar\u0131 \u0259hat\u0259 edir. H\u0259r hans\u0131 bir gizli m\u0259lumat PKI sistemin\u0259 etibar edilir v\u0259 GlobalSign bu c\u00fcr sisteml\u0259rin \u0259n \u00f6nc\u00fcll\u0259rind\u0259n biri hesab olunur.<\/p>\n

Bel\u0259likl\u0259, ara\u015fd\u0131rman\u0131n bir ne\u00e7\u0259 \u0259sas n\u0259tic\u0259l\u0259rini n\u0259z\u0259rd\u0259n ke\u00e7ir\u0259k.
\n<\/a><\/noindex><\/p>\n

N\u0259 \u015fifr\u0259l\u0259nir?<\/h2>\n

\n\u00dcmumiyy\u0259tl\u0259, PKI-nin bir formas\u0131 61.76% \u015firk\u0259tl\u0259r t\u0259r\u0259find\u0259n istifad\u0259 olunur.<\/p>\n

\"Korporativ
\n
\nT\u0259dqiqat\u00e7\u0131lar \u00fc\u00e7\u00fcn \u0259n \u0259sas suallardan biri - respondentl\u0259rin nec\u0259 spesifik \u015fifrl\u0259m\u0259 sisteml\u0259ri v\u0259 r\u0259q\u0259msal sertifikatlar istifad\u0259 etdikl\u0259ridir. T\u0259\u0259cc\u00fcbl\u00fc deyil ki, respondentl\u0259rin t\u0259xmin\u0259n 75%-i publika sertifikatlar\u0131, SSL v\u0259 ya TLS<\/a><\/noindex>, t\u0259xmin\u0259n 50%-i is\u0259 \u00f6z\u0259l SSL v\u0259 TLS-y\u0259 etibar edir. Bu, m\u00fcasir kriptologiyan\u0131n \u0259n populyar t\u0259tbiqidir - \u015f\u0259b\u0259k\u0259 trafikin \u015fifr\u0259l\u0259nm\u0259si.<\/p>\n

\"Korporativ
\nBu sual PKI sisteml\u0259rind\u0259n istifad\u0259 etdiyini m\u00fcsb\u0259t cavab ver\u0259n \u015firk\u0259tl\u0259r\u0259 verildi v\u0259 bir ne\u00e7\u0259 cavab variant\u0131 il\u0259 idar\u0259 olundu.<\/i><\/p>\n

\u0130\u015ftirak\u00e7\u0131lar\u0131n \u00fc\u00e7d\u0259 biri (30%) sertifikatlar\u0131 r\u0259q\u0259msal imzalar \u00fc\u00e7\u00fcn istifad\u0259 etdikl\u0259rini s\u00f6yl\u0259dil\u0259r, bir q\u0259d\u0259r az\u0131 elektron po\u00e7tu qorumaq \u00fc\u00e7\u00fcn PKI-y\u0259 etibar edir (S\/MIME<\/a><\/noindex>). S\/MIME - r\u0259q\u0259msal imza il\u0259 \u015fifr\u0259l\u0259nmi\u015f mesajlar g\u00f6nd\u0259rm\u0259k \u00fc\u00e7\u00fcn geni\u015f yay\u0131lan protokoldur v\u0259 istifad\u0259\u00e7il\u0259ri fi\u015finq h\u00fccumlar\u0131ndan qorumaq \u00fc\u00e7\u00fcn bir yol t\u0259qdim edir. Fi\u015finq h\u00fccumlar\u0131n\u0131n artmas\u0131 n\u0259z\u0259r\u0259 al\u0131nd\u0131\u011f\u0131nda, m\u00fc\u0259ssis\u0259l\u0259rin t\u0259hl\u00fck\u0259sizliyini t\u0259min etm\u0259k \u00fc\u00e7\u00fcn niy\u0259 bu h\u0259llin daha \u00e7ox populyarla\u015fd\u0131\u011f\u0131 ba\u015fa d\u00fc\u015f\u00fcl\u0259ndir.<\/p>\n

H\u0259m\u00e7inin \u015firk\u0259tl\u0259rin \u0259vv\u0259lc\u0259 PKI \u0259sasl\u0131 texnologiyalar\u0131 se\u00e7m\u0259l\u0259rinin s\u0259b\u0259bl\u0259rini ara\u015fd\u0131rd\u0131q. 30%-d\u0259n \u00e7oxu internetin \u015feyl\u0259rin geni\u015fl\u0259nm\u0259sini g\u00f6st\u0259rdi,IoT<\/a><\/noindex>26%-i is\u0259 PKI-nin m\u00fcxt\u0259lif sah\u0259l\u0259rd\u0259 t\u0259tbiq oluna bil\u0259c\u0259yini d\u00fc\u015f\u00fcn\u00fcr. Respondentl\u0259rin 35%-i PKI-nin m\u0259lumatlar\u0131n b\u00fct\u00f6vl\u00fcy\u00fcn\u00fc t\u0259min etm\u0259sini qiym\u0259tl\u0259ndirir.<\/p>\n

T\u0259tbiqd\u0259 \u00fcmumi probleml\u0259r<\/h2>\n

\nPKI-nin t\u0259\u015fkilat \u00fc\u00e7\u00fcn b\u00f6y\u00fck d\u0259y\u0259ri oldu\u011funu bils\u0259k d\u0259, kriptologiya olduqca m\u00fcr\u0259kk\u0259b bir texnologiyad\u0131r. Bu s\u0259b\u0259bd\u0259n t\u0259tbiqd\u0259 probleml\u0259r ortaya \u00e7\u0131x\u0131r. Respondentl\u0259rd\u0259n t\u0259tbiqd\u0259ki \u0259sas probleml\u0259rl\u0259 ba\u011fl\u0131 n\u0259 d\u00fc\u015f\u00fcnd\u00fckl\u0259rini soru\u015fduq. M\u0259lum oldu ki, \u0259n b\u00f6y\u00fck probleml\u0259rd\u0259n biri daxili IT resurslar\u0131n\u0131n olmamas\u0131d\u0131r. Sad\u0259c\u0259 kriptologiya sah\u0259sind\u0259 bilikli i\u015f\u00e7i q\u00fcvv\u0259si \u00e7at\u0131\u015fm\u0131r. Bundan \u0259lav\u0259, respondentl\u0259rin 17%-i layih\u0259l\u0259rin uzun m\u00fcdd\u0259t t\u0259tbiqi bar\u0259d\u0259 m\u0259lumat verib, dem\u0259k olar ki, 40%-i is\u0259 h\u0259yat d\u00f6vr\u00fcn\u00fcn idar\u0259 olunmas\u0131n\u0131n bir \u00e7ox vaxt ald\u0131\u011f\u0131n\u0131 qeyd edib. Bir \u00e7oxlar\u0131 \u00fc\u00e7\u00fcn PKI-nin x\u00fcsusi h\u0259ll\u0259rinin y\u00fcks\u0259k costu bir mane\u0259dir.<\/p>\n

\"Korporativ
\n
\nSor\u011fudan \u00f6yr\u0259ndik ki, bir \u00e7ox \u015firk\u0259t h\u0259l\u0259 d\u0259 daxili sertifikat m\u0259nb\u0259yi istifad\u0259 edir, baxmayaraq ki, bu, \u015firk\u0259tin IT resurslar\u0131na b\u00f6y\u00fck y\u00fck yarad\u0131r.<\/p>\n

T\u0259dqiqat h\u0259m\u00e7inin r\u0259q\u0259msal imzalar\u0131n istifad\u0259 olunmas\u0131nda art\u0131m\u0131 qeyd etdi. Sor\u011fuda i\u015ftirak ed\u0259nl\u0259rin 50%-d\u0259n \u00e7oxu, m\u0259zmunun b\u00fct\u00f6vl\u00fcy\u00fc v\u0259 h\u0259qiqiliyini t\u0259min etm\u0259k \u00fc\u00e7\u00fcn r\u0259q\u0259msal imzalardan aktiv \u015f\u0259kild\u0259 istifad\u0259 etdikl\u0259rini bildirib.<\/p>\n

\"Korporativ
\n
\nR\u0259q\u0259msal imzalar\u0131 niy\u0259 se\u00e7dikl\u0259ri haqq\u0131nda soru\u015fanda, respondentl\u0259rin 53%-i \u0259sas s\u0259b\u0259bin t\u0259nziml\u0259m\u0259l\u0259r\u0259 riay\u0259t etm\u0259k oldu\u011funu, 60%-i is\u0259 ka\u011f\u0131zs\u0131z texnologiyalar\u0131n t\u0259tbiqini qeyd etdi. R\u0259q\u0259msal imzalara ke\u00e7idin \u0259sas s\u0259b\u0259bl\u0259rind\u0259n biri vaxt q\u0259na\u0259tidir. H\u0259m\u00e7inin, s\u0259n\u0259dl\u0259rin i\u015fl\u0259nm\u0259 m\u00fcdd\u0259tini q\u0131saltma imkan\u0131 da PKI texnologiyas\u0131n\u0131n istifad\u0259sind\u0259ki \u0259sas \u00fcst\u00fcnl\u00fckl\u0259rd\u0259n biridir.<\/p>\n

DevOps-da \u015fifr\u0259l\u0259m\u0259<\/h2>\n

\nT\u0259dqiqat tamamlanmam\u0131\u015f olard\u0131, \u0259g\u0259r respondentl\u0259rd\u0259n DevOps-da \u015fifr\u0259l\u0259m\u0259 sisteml\u0259rinin istifad\u0259si haqq\u0131nda soru\u015fulmasayd\u0131 \u2014 bu, 2025-ci il\u0259 q\u0259d\u0259r 13 milyard dollar d\u0259y\u0259rind\u0259 olmas\u0131 proqnozla\u015fd\u0131r\u0131lan s\u00fcr\u0259tl\u0259 b\u00f6y\u00fcy\u0259n bir bazard\u0131r. IT bazar\u0131 DevOps metodologiyas\u0131na (inki\u015faf + \u0259m\u0259liyyatlar) \u00e7ox s\u00fcr\u0259tl\u0259 ke\u00e7s\u0259 d\u0259, onun avtomatla\u015fd\u0131r\u0131lm\u0131\u015f i\u015f prosesl\u0259ri, \u00e7eviklik v\u0259 Agile yana\u015fmalar\u0131 il\u0259 birlikd\u0259 bu yana\u015fmalar t\u0259hl\u00fck\u0259sizlik \u00fc\u00e7\u00fcn yeni riskl\u0259r a\u00e7\u0131r. Hal-haz\u0131rda DevOps m\u00fchitind\u0259 sertifikat alma prosesi m\u00fcr\u0259kk\u0259b, z\u0259hm\u0259t t\u0259l\u0259b ed\u0259n v\u0259 s\u0259hvl\u0259r\u0259 meyllidir. T\u0259rtibat\u00e7\u0131lar v\u0259 \u015firk\u0259tl\u0259rin \u00fczl\u0259\u015fm\u0259si laz\u0131m olan m\u0259s\u0259l\u0259l\u0259r bunlard\u0131r:<\/p>\n