{"id":30167,"date":"2019-10-31T21:33:58","date_gmt":"2019-10-31T18:33:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform\/"},"modified":"2019-10-31T21:33:58","modified_gmt":"2019-10-31T18:33:58","slug":"razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","title":{"rendered":"Anal\u00fdza kritick\u00e9 chyby v algoritmu \u0161ifrovac\u00edho syst\u00e9mu KIB SEARCHINFORM","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kontrola ve\u0161ker\u00fdch informac\u00ed cirkuluj\u00edc\u00edch v organizaci je jedn\u00edm z hlavn\u00edch \u00fakol\u016f p\u0159i praktick\u00e9 realizaci organiza\u010dn\u011b-rozvrhov\u00fdch dokument\u016f (politika informa\u010dn\u00ed bezpe\u010dnosti a dal\u0161\u00ed intern\u00ed dokumenty ni\u017e\u0161\u00edch \u00farovn\u00ed) organizace.
\nSyst\u00e9my prevence \u00fanik\u016f citliv\u00fdch informac\u00ed z informa\u010dn\u00edho syst\u00e9mu (Data Leak Prevention, DLP) jsou v\u011bt\u0161inou schopny tuto problematiku vy\u0159e\u0161it.
\n<\/a><\/noindex>
\nNa sou\u010dasn\u00e9m trhu existuje dostatek variant t\u011bchto syst\u00e9m\u016f, jako nap\u0159\u00edklad: SearchInform DLP, Infowatch Traffic Monitor DLP, Zecurion DLP, Symantec DLP a dal\u0161\u00ed. Dne\u0161n\u00ed \u010dl\u00e1nek v\u0161ak bude o produktu firmy LLC \u00ab\u0421\u0451\u0440\u0447\u0418\u043d\u0444\u043e\u0440\u043c\u00bb.<\/p>\n

Kontur informa\u010dn\u00ed bezpe\u010dnosti SearchInform (KIB S\u0451\u0440\u0447\u0438\u043d\u0444\u043e\u0440\u043c) \u2013 je to v\u00e1\u017en\u00fd a flexibiln\u011b nastaviteln\u00fd programov\u00fd komplex, kter\u00fd sv\u00fdm funk\u010dn\u00edm rozsahem a rozs\u00e1hl\u00fdmi analytick\u00fdmi n\u00e1stroji vytv\u00e1\u0159\u00ed silnou konkurenci ostatn\u00edm spole\u010dnostem v t\u00e9to oblasti. Stejn\u011b jako v\u0161echny produkty m\u00e1 v\u0161ak KIB S\u0451\u0440\u0447\u0438\u043d\u0444\u043e\u0440\u043c sv\u00e9 nev\u00fdhody, o nich\u017e nyn\u00ed bude \u0159e\u010d.<\/p>\n

\"Anal\u00fdza
\n
\nObr\u00e1zek 1 \u2013 Logo KIB S\u0451\u0440\u0447\u0438\u043d\u0444\u043e\u0440\u043c<\/i><\/p>\n

V KIB S\u0451\u0440\u0447\u0438\u043d\u0444\u043e\u0440\u043c je jedn\u00edm ze zdroj\u016f sb\u011bru informac\u00ed agent (Windows\/Linux). Agent pro OS Windows, stejn\u011b jako pro OS Linux, m\u00e1 modul\u00e1rn\u00ed syst\u00e9m sb\u011bru informac\u00ed, kdy se moduly podle pot\u0159eby zap\u00ednaj\u00ed nebo vyp\u00ednaj\u00ed. Prozkoum\u00e1me modul Device (kontrola extern\u00edch za\u0159\u00edzen\u00ed, s\u00ed\u0165ov\u00fdch za\u0159\u00edzen\u00ed, proces\u016f atd.). Demosyst\u00e9m tohoto produktu lze ofici\u00e1ln\u011b z\u00edskat prost\u0159ednictv\u00edm webu v\u00fdrobce (s pln\u011b funk\u010dn\u00edm rozsahem). Dal\u0161\u00ed kroky budou provedeny pomoc\u00ed z\u00edskan\u00e9ho licen\u010dn\u00edho kl\u00ed\u010de \u2014 verze programu EndPointController 5.51.0.9 (verze agenta 5.51.0.9).<\/p>\n

Hlavn\u00edm probl\u00e9mem v pr\u00e1ci tohoto modulu je algoritmus \u0161ifrov\u00e1n\u00ed informac\u00ed na extern\u00edch p\u0159enosn\u00fdch za\u0159\u00edzen\u00edch. Prozkoum\u00e1me princip pr\u00e1ce algoritmu \u0161ifrov\u00e1n\u00ed v KIB S\u0451\u0440\u0447\u0438\u043d\u0444\u043e\u0440\u043c.<\/p>\n

Nainstalujeme agenta na pracovn\u00ed stanici a nastav\u00edme pro pracovn\u00ed kontrolu extern\u00edch za\u0159\u00edzen\u00ed (modul Device) v sekci \u201eS\u00ed\u0165ov\u00e9 prost\u0159ed\u00ed\u201c EndPointController 5.51.0.9<\/p>\n

\"Anal\u00fdza
\nObr\u00e1zek 2 \u2013 Instalace a zapnut\u00ed modulu<\/i><\/p>\n

Provedeme konfiguraci \u0161ifrov\u00e1n\u00ed v nastaven\u00ed modulu Device v z\u00e1lo\u017ece \u201e\u0160ifrov\u00e1n\u00ed\u201c: generujeme kl\u00ed\u010d a zap\u00edn\u00e1me \u0161ifrov\u00e1n\u00ed pro v\u0161echna m\u00e9dia (mo\u017en\u00e9 zapnut\u00ed \u0161ifrov\u00e1n\u00ed pouze pro ur\u010dit\u00e9 nosi\u010de informac\u00ed).<\/p>\n

\"Anal\u00fdza
\nObr\u00e1zek 3 \u2013 Nastaven\u00ed b\u00edl\u00e9ho seznamu<\/i><\/p>\n

\"Anal\u00fdza
\nObr\u00e1zek 4 \u2013 Konfigurace \u0161ifrov\u00e1n\u00ed<\/i><\/p>\n

Nyn\u00ed se pust\u00edme do anal\u00fdzy algoritmu \u0161ifrov\u00e1n\u00ed soubor\u016f t\u00edmto produktem. Zkop\u00edrujeme soubory \"Install.exe\" a \"Z\u00e1klady pr\u00e1va.rtf\" z \u0159\u00edzen\u00e9 pracovn\u00ed stanice \"WINOC\" na extern\u00ed p\u0159enosn\u00e9 medium \"P\u0159enosn\u00fd disk (E:)\". Jak je vid\u011bt na obr\u00e1zku 5, v skryt\u00e9 slo\u017ece \"System Volume Information\" byly vytvo\u0159eny objekty \"Install.exe\" a \"Z\u00e1klady pr\u00e1va.rtf\". T\u00edmto m\u016f\u017eeme usoudit, \u017ee slo\u017eka \"System Volume Information\" obsahuje seznam za\u0161ifrovan\u00fdch objekt\u016f na p\u0159enosn\u00e9m media.<\/p>\n

\"Anal\u00fdza
\nObr\u00e1zek 5 \u2013 slo\u017eka \"System Volume Information\"<\/i><\/p>\n

\"Anal\u00fdza
\nObr\u00e1zek 6 \u2013 Hlavn\u00ed slo\u017eka p\u0159enosn\u00e9ho media<\/i><\/p>\n

Jak je zn\u00e1m\u00e9, existuj\u00ed t\u0159i aspekty, na kter\u00fdch je postavena informa\u010dn\u00ed bezpe\u010dnost \u2013 integrita, dostupnost a d\u016fv\u011brnost. Tyto aspekty jsou poru\u0161ov\u00e1ny pou\u017eit\u00edm tohoto p\u0159\u00edstupu k \u0161ifrov\u00e1n\u00ed, proto\u017ee syst\u00e9mov\u00e1 informace o tom, zda je objekt za\u0161ifrov\u00e1n, by m\u011bla b\u00fdt um\u00edst\u011bna v samotn\u00e9m z\u00e1hlav\u00ed objektu. <\/p>\n

P\u0159i aktu\u00e1ln\u00ed konstrukci algoritmu existuj\u00ed mo\u017enosti n\u00e1hodn\u00e9 modifikace\/odstran\u011bn\u00ed objekt\u016f slo\u017eky \"System Volume Information\" na p\u0159enosn\u00e9m media, co\u017e m\u016f\u017ee v\u00e9st k dal\u0161\u00edmu ztr\u00e1t\u011b p\u016fvodn\u00edch za\u0161ifrovan\u00fdch objekt\u016f, stejn\u011b jako modifikaci samotn\u00fdch objekt\u016f na ne\u0159\u00edzen\u00fdch stanic\u00edch (nap\u0159\u00edklad: p\u0159ejmenov\u00e1n\u00ed objektu \"Install.exe\" ze s\u00ed\u0165ov\u00e9 cesty \"E:Install.exe\" na po\u010d\u00edta\u010di bez agenta, p\u0159i\u010dem\u017e informa\u010dn\u00ed soubor programov\u00e9ho produktu KIB S\u00f6r\u010dinform ve slo\u017ece \"System Volume Information\" \"Install.exe\" po s\u00ed\u0165ov\u00e9 cest\u011b \"E:System Volume InformationInstall.exe\" z\u016fst\u00e1v\u00e1 nezm\u011bn\u011bn, proto\u017ee chyb\u00ed agent, kter\u00fd by zm\u011bnil pomocn\u00e9 informace, a otev\u0159en\u00ed tohoto souboru se ji\u017e st\u00e1v\u00e1 nemo\u017en\u00fdm).<\/p>\n

Budeme doufat, \u017ee v\u00fdvoj\u00e1\u0159 vezme v \u00favahu tuto nedokonalost funkce \u0161ifrov\u00e1n\u00ed p\u0159enosn\u00fdch informac\u00ed v produktu KIB S\u00f6r\u010dinform a zm\u011bn\u00ed jej\u00ed algoritmus.
\n
Zdroj: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0441\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0446\u0438\u0440\u043a\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0437\u0430\u0434\u0430\u0447 \u043f\u0440\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u043e-\u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 (\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u044b\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u043d\u0438\u0436\u043d\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u0435\u0439) \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (Data Leak Prevention, DLP) \u0432 \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041d\u0430 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u043c \u0440\u044b\u043d\u043a\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a: […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30167","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Anal\u00fdza kritick\u00e9 chyby v algoritmu \u0161ifrov\u00e1n\u00ed KIB SEARCHINFORM | ProHoster","description":"Kontrola v\u0161ech informac\u00ed cirkuluj\u00edc\u00edch v organizaci je jedn\u00edm z hlavn\u00edch \u00fakol\u016f p\u0159i praktick\u00e9 realizaci organiza\u010dn\u011b-\u0159\u00edd\u00edc\u00edch dokument\u016f (politika informa\u010dn\u00ed bezpe\u010dnosti a dal\u0161\u00ed intern\u00ed).","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0437\u0431\u043e\u0440 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u041a\u0418\u0411 SEARCHINFORM | ProHoster","og:description":"\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0441\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0446\u0438\u0440\u043a\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0437\u0430\u0434\u0430\u0447 \u043f\u0440\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u043e-\u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 (\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u044b\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435.","og:url":"https:\/\/prohoster.info\/cs\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:33:58+00:00","article:modified_time":"2019-10-31T18:33:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30167","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-20 23:59:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:40:41","updated":"2026-01-20 23:59:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/30167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=30167"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/30167\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=30167"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=30167"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=30167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}