{"id":52619,"date":"2019-11-13T00:00:00","date_gmt":"2019-11-12T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/informatsionnaya-bezopasnost-tsod"},"modified":"2020-02-18T14:00:24","modified_gmt":"2020-02-18T11:00:24","slug":"informatsionnaya-bezopasnost-tsod","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/informatsionnaya-bezopasnost-tsod","title":{"rendered":"Informa\u010dn\u00ed bezpe\u010dnost datov\u00fdch center","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Informa\u010dn\u00ed bezpe\u010dnost datov\u00fdch center\" src=\"\/wp-content\/uploads\/2019\/11\/07652cf8ae6be66324feae34f87ec975.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Takhle vypad\u00e1 monitorovac\u00ed centrum um\u00edst\u011bn\u00e9 v Moskv\u011b, datov\u00e9 centrum NORD-2<\/i><\/p>\n<p><i>O opat\u0159en\u00edch p\u0159ijat\u00fdch k zaji\u0161t\u011bn\u00ed informa\u010dn\u00ed bezpe\u010dnosti (IB) jste u\u017e mnohokr\u00e1t \u010detli. Ka\u017ed\u00fd sebeposuzuj\u00edc\u00ed IT specialista snadno vyjmenuje 5-10 pravidel IB. Cloud4Y v\u0161ak navrhuje mluvit o informa\u010dn\u00ed bezpe\u010dnosti datov\u00fdch center.<\/i><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>P\u0159i zaji\u0161\u0165ov\u00e1n\u00ed informa\u010dn\u00ed bezpe\u010dnosti datov\u00e9ho centra jsou nejv\u00edce \"chr\u00e1n\u011bn\u00fdmi\" objekty: <\/p>\n<ul>\n<li>informa\u010dn\u00ed zdroje (data); <\/li>\n<li>procesy shroma\u017e\u010fov\u00e1n\u00ed, zpracov\u00e1n\u00ed, uchov\u00e1v\u00e1n\u00ed a p\u0159enosu informac\u00ed; <\/li>\n<li>u\u017eivatel\u00e9 syst\u00e9mu a obslu\u017en\u00fd person\u00e1l; <\/li>\n<li>informa\u010dn\u00ed infrastruktura, zahrnuj\u00edc\u00ed technick\u00e9 a softwarov\u00e9 prost\u0159edky pro zpracov\u00e1n\u00ed, p\u0159enos a zobrazen\u00ed informac\u00ed, v\u010detn\u011b informa\u010dn\u00edch v\u00fdm\u011bnn\u00fdch kan\u00e1l\u016f, syst\u00e9m\u016f ochrany informac\u00ed a prostor. <\/li>\n<\/ul>\n<p>\nZ\u00f3na odpov\u011bdnosti datov\u00e9ho centra z\u00e1vis\u00ed na modelu poskytovan\u00fdch slu\u017eeb (IaaS\/PaaS\/SaaS). Jak to vypad\u00e1, pod\u00edvejte se na obr\u00e1zek n\u00ed\u017ee:<\/p>\n<p><img decoding=\"async\" alt=\"Informa\u010dn\u00ed bezpe\u010dnost datov\u00fdch center\" src=\"\/wp-content\/uploads\/2019\/11\/39d75d16b5ce9c9d1c3f723c1d6138bb.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Oblast p\u016fsobnosti bezpe\u010dnostn\u00ed politiky datov\u00e9ho centra v z\u00e1vislosti na modelu poskytovan\u00fdch slu\u017eeb<\/i><\/p>\n<p>Nejd\u016fle\u017eit\u011bj\u0161\u00ed \u010d\u00e1st\u00ed v\u00fdvoje politiky informa\u010dn\u00ed bezpe\u010dnosti je vybudov\u00e1n\u00ed modelu hrozeb a pachatel\u016f. Co m\u016f\u017ee p\u0159edstavovat hrozbu pro datov\u00e9 centrum?<\/p>\n<ol>\n<li>Nep\u0159\u00edzniv\u00e9 ud\u00e1losti p\u0159\u00edrodn\u00edho, technogenn\u00edho a soci\u00e1ln\u00edho charakteru<\/li>\n<li>Terorist\u00e9, krimin\u00e1ln\u00edci a dal\u0161\u00ed.<\/li>\n<li>Z\u00e1vislost na dodavatel\u00edch, poskytovatel\u00edch, partnerech, klientech<\/li>\n<li>Poruchy, z\u00e1vady, destrukce, po\u0161kozen\u00ed programov\u00fdch a technick\u00fdch prost\u0159edk\u016f<\/li>\n<li>Zam\u011bstnanci datov\u00e9ho centra, kte\u0159\u00ed realizuj\u00ed hrozby IB vyu\u017eit\u00edm pr\u00e1v a pravomoc\u00ed, kter\u00e9 jim byly leg\u00e1ln\u011b p\u0159id\u011bleny (vnit\u0159n\u00ed poru\u0161ovatel\u00e9 IB)<\/li>\n<li>Zam\u011bstnanci datov\u00e9ho centra, kte\u0159\u00ed realizuj\u00ed hrozby IB mimo leg\u00e1ln\u011b p\u0159id\u011blen\u00e9 pravomoci, a tak\u00e9 subjekty, kter\u00e9 nejsou sou\u010d\u00e1st\u00ed person\u00e1lu datov\u00e9ho centra, ale pokou\u0161ej\u00ed se o neautorizovan\u00fd p\u0159\u00edstup a neleg\u00e1ln\u00ed jedn\u00e1n\u00ed (vn\u011bj\u0161\u00ed poru\u0161ovatel\u00e9 IB)<\/li>\n<li>Nesoulad s po\u017eadavky dozorov\u00fdch a regula\u010dn\u00edch org\u00e1n\u016f a platn\u00fdmi z\u00e1kony<\/li>\n<\/ol>\n<p>\nAnal\u00fdza rizik \u2014 identifikace potenci\u00e1ln\u00edch hrozeb a hodnocen\u00ed rozsahu n\u00e1sledk\u016f jejich realizace \u2014 pom\u016f\u017ee spr\u00e1vn\u011b vybrat prioritn\u00ed \u00fakoly, kter\u00e9 by m\u011bli specialist\u00e9 na informa\u010dn\u00ed bezpe\u010dnost datov\u00e9ho centra \u0159e\u0161it, a napl\u00e1novat rozpo\u010dty na po\u0159\u00edzen\u00ed technick\u00fdch a softwarov\u00fdch prost\u0159edk\u016f.<\/p>\n<p>Zabezpe\u010den\u00ed je kontinu\u00e1ln\u00ed proces, kter\u00fd zahrnuje f\u00e1ze pl\u00e1nov\u00e1n\u00ed, implementace a provozu, monitorov\u00e1n\u00ed, anal\u00fdzy a zlep\u0161ov\u00e1n\u00ed syst\u00e9mu \u0159\u00edzen\u00ed informa\u010dn\u00ed bezpe\u010dnosti. Pro vytv\u00e1\u0159en\u00ed syst\u00e9m\u016f \u0159\u00edzen\u00ed informa\u010dn\u00ed bezpe\u010dnosti se pou\u017e\u00edv\u00e1 takzvan\u00fd \u201e<noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%A6%D0%B8%D0%BA%D0%BB_%D0%94%D0%B5%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0\">Deming\u016fv cyklus<\/a><\/noindex>\u00bb.<\/p>\n<p>D\u016fle\u017eitou sou\u010d\u00e1st\u00ed bezpe\u010dnostn\u00edch politik je rozd\u011blen\u00ed rol\u00ed a odpov\u011bdnosti zam\u011bstnanc\u016f za jejich pln\u011bn\u00ed. Politiky by m\u011bly b\u00fdt pr\u016fb\u011b\u017en\u011b revidov\u00e1ny s ohledem na zm\u011bny legislativy, nov\u00e9 hrozby a emerging ochrann\u00e9 prost\u0159edky. A samoz\u0159ejm\u011b, po\u017eadavky na informa\u010dn\u00ed bezpe\u010dnost by m\u011bly b\u00fdt sd\u011blov\u00e1ny zam\u011bstnanc\u016fm a m\u011bli by b\u00fdt \u0161koleni.<\/p>\n<h2>Organiza\u010dn\u00ed opat\u0159en\u00ed<\/h2>\n<p>\nN\u011bkte\u0159\u00ed odborn\u00edci jsou skepti\u010dt\u00ed k \u201epap\u00edrov\u00e9\u201c bezpe\u010dnosti, pova\u017euj\u00ed za hlavn\u00ed praktick\u00e9 dovednosti \u010delit pokus\u016fm o prolomen\u00ed. Skute\u010dn\u00e9 zku\u0161enosti s informa\u010dn\u00ed bezpe\u010dnost\u00ed v bank\u00e1ch v\u0161ak tvrd\u00ed opak. Odborn\u00edci na informa\u010dn\u00ed bezpe\u010dnost mohou m\u00edt skv\u011blou expert\u00edzu v odhalov\u00e1n\u00ed a sni\u017eov\u00e1n\u00ed rizik, ale pokud zam\u011bstnanci datov\u00e9ho centra nebudou dodr\u017eovat jejich pokyny, v\u0161e bude zbyte\u010dn\u00e9.<\/p>\n<p>Bezpe\u010dnost zpravidla nep\u0159in\u00e1\u0161\u00ed zisk, ale pouze minimalizuje rizika. Proto je k n\u00ed \u010dasto p\u0159istupov\u00e1no jako k n\u011b\u010demu obt\u011b\u017euj\u00edc\u00edmu a druho\u0159ad\u00e9mu. A kdy\u017e se bezpe\u010dnostn\u00ed specialist\u00e9 za\u010dnou roz\u010dilovat (co\u017e maj\u00ed pln\u00e9 pr\u00e1vo), \u010dasto to vy\u00fast\u00ed v konflikty se zam\u011bstnanci a vedouc\u00edmi opera\u010dn\u00edch odd\u011blen\u00ed.<\/p>\n<p>Existence odv\u011btvov\u00fdch standard\u016f a po\u017eadavk\u016f regul\u00e1tor\u016f pom\u00e1h\u00e1 bezpe\u010dnostn\u00edm pracovn\u00edk\u016fm prosazovat sv\u00e9 n\u00e1zory v jedn\u00e1n\u00edch s veden\u00edm, zat\u00edmco schv\u00e1len\u00e9 politiky informa\u010dn\u00ed bezpe\u010dnosti, ustanoven\u00ed a p\u0159edpisy umo\u017e\u0148uj\u00ed vy\u017eadovat od zam\u011bstnanc\u016f dodr\u017eov\u00e1n\u00ed tam uveden\u00fdch po\u017eadavk\u016f, podkl\u00e1daj\u00edc z\u00e1klad pro prov\u00e1d\u011bn\u00ed \u010dasto nepopul\u00e1rn\u00edch rozhodnut\u00ed.<\/p>\n<h2>Ochrana prostor<\/h2>\n<p>\nP\u0159i poskytov\u00e1n\u00ed slu\u017eeb datov\u00fdm centrem na z\u00e1klad\u011b modelu colocation, vyvst\u00e1v\u00e1 jako prioritn\u00ed zaji\u0161t\u011bn\u00ed fyzick\u00e9 bezpe\u010dnosti a kontroly p\u0159\u00edstupu k za\u0159\u00edzen\u00ed klienta. K tomu se pou\u017e\u00edvaj\u00ed vymezen\u00e9 prostory (ohrani\u010den\u00e9 \u010d\u00e1sti haly), kter\u00e9 jsou pod videonadzoem klienta a k nim\u017e je omezen p\u0159\u00edstup zam\u011bstnanc\u016f datov\u00e9ho centra.<\/p>\n<p>Ve st\u00e1tn\u00edch v\u00fdpo\u010detn\u00edch centrech s fyzickou bezpe\u010dnost\u00ed na konci minul\u00e9ho stolet\u00ed byly pom\u011bry docela dobr\u00e9. Byl zaveden p\u0159\u00edstupov\u00fd re\u017eim, kontrola p\u0159\u00edstupu do prostor, i kdy\u017e bez po\u010d\u00edta\u010d\u016f a kamer, po\u017e\u00e1rn\u00ed syst\u00e9my \u2014 v p\u0159\u00edpad\u011b po\u017e\u00e1ru se do strojovny automaticky spou\u0161t\u011bl freon.<\/p>\n<p>V sou\u010dasnosti je fyzick\u00e1 bezpe\u010dnost zaji\u0161t\u011bna je\u0161t\u011b l\u00e9pe. Syst\u00e9my kontroly a \u0159\u00edzen\u00ed p\u0159\u00edstupu (SKUP) se staly inteligentn\u00edmi a zav\u00e1d\u011bj\u00ed se biometrick\u00e9 metody omezen\u00ed p\u0159\u00edstupu.<\/p>\n<p>Syst\u00e9my po\u017e\u00e1rn\u00ed ochrany se staly bezpe\u010dn\u011bj\u0161\u00edmi pro person\u00e1l a za\u0159\u00edzen\u00ed, mezi nimi\u017e se vyzna\u010duj\u00ed syst\u00e9my pro inhibici, izolaci, chlazen\u00ed a hypoxick\u00e9 p\u016fsoben\u00ed na m\u00edsto po\u017e\u00e1ru. Vedle povinn\u00fdch syst\u00e9m\u016f protipo\u017e\u00e1rn\u00ed ochrany se v datov\u00fdch centrech \u010dasto pou\u017e\u00edv\u00e1 syst\u00e9m v\u010dasn\u00e9ho detekov\u00e1n\u00ed po\u017e\u00e1ru typu aspirace.<\/p>\n<p>Pro ochranu datov\u00fdch center p\u0159ed vn\u011bj\u0161\u00edmi hrozbami \u2014 po\u017e\u00e1ry, v\u00fdbuchy, zhroucen\u00edm konstrukc\u00ed budovy, zaplaven\u00edm, korozn\u00edmi plyny \u2014 se za\u010daly pou\u017e\u00edvat bezpe\u010dnostn\u00ed kabiny a trezory, ve kter\u00fdch je serverov\u00e9 za\u0159\u00edzen\u00ed chr\u00e1n\u011bno prakticky proti v\u0161em vn\u011bj\u0161\u00edm po\u0161kozuj\u00edc\u00edm faktor\u016fm.<\/p>\n<h2>Slab\u00fdm \u010dl\u00e1nkem je \u010dlov\u011bk.<\/h2>\n<p>\n\u201eInteligentn\u00ed\u201c syst\u00e9my videon\u76e3izaci\u00f3n, objemov\u00e9 sledovac\u00ed senzory (akustick\u00e9, infra\u010derven\u00e9, ultrazvukov\u00e9, mikrovlnn\u00e9) a SKUP sn\u00ed\u017eily rizika, ale nevy\u0159e\u0161ily v\u0161echny probl\u00e9my. Tyto prost\u0159edky nepomohou, nap\u0159\u00edklad kdy\u017e spr\u00e1vn\u011b povolen\u00e9 osoby v datov\u00e9m centru se spr\u00e1vn\u011b p\u0159en\u00e1\u0161en\u00fdmi n\u00e1stroji n\u011bco \u201enecht\u011bn\u011b\u201c zas\u00e1hnou. A jak to \u010dasto b\u00fdv\u00e1, n\u00e1hodn\u00e9 \u201ezasa\u017een\u00ed\u201c p\u0159inese maximum probl\u00e9m\u016f.<\/p>\n<p>Na pr\u00e1ci datov\u00e9ho centra m\u016f\u017ee m\u00edt dopad nespr\u00e1vn\u00e9 vyu\u017e\u00edv\u00e1n\u00ed jeho zdroj\u016f zam\u011bstnanci, nap\u0159\u00edklad ileg\u00e1ln\u00ed t\u011b\u017eba. V t\u011bchto p\u0159\u00edpadech mohou pomoci syst\u00e9my spr\u00e1vy infrastruktury datov\u00e9ho centra (DCIM).<\/p>\n<p>Ochrany vy\u017eaduje i person\u00e1l, nebo\u0165 \u010dlov\u011bk b\u00fdv\u00e1 \u010dasto ozna\u010dov\u00e1n za nejzraniteln\u011bj\u0161\u00ed \u010dl\u00e1nek v ochran\u011b syst\u00e9mu. C\u00edlen\u00e9 \u00fatoky profesion\u00e1ln\u00edch zlo\u010dinc\u016f obvykle za\u010d\u00ednaj\u00ed pou\u017e\u00edv\u00e1n\u00edm metod soci\u00e1ln\u00edho in\u017een\u00fdrstv\u00ed. \u010casto se nejl\u00e9pe chr\u00e1n\u011bn\u00e9 syst\u00e9my zhrout\u00ed nebo jsou kompromitov\u00e1ny pot\u00e9, co n\u011bkdo n\u011bkde klikl\/st\u00e1hl\/provedl akci. Takov\u00e1 rizika lze minimalizovat vzd\u011bl\u00e1v\u00e1n\u00edm zam\u011bstnanc\u016f a zav\u00e1d\u011bn\u00edm nejlep\u0161\u00edch sv\u011btov\u00fdch praktik v oblasti informa\u010dn\u00ed bezpe\u010dnosti.<\/p>\n<h2>Ochrana in\u017een\u00fdrsk\u00e9 infrastruktury<\/h2>\n<p>\nTradi\u010dn\u00edmi hrozbami pro fungov\u00e1n\u00ed datov\u00e9ho centra jsou v\u00fdpadky elektrick\u00e9ho nap\u00e1jen\u00ed a poruchy chladic\u00edch syst\u00e9m\u016f. Na tyto hrozby si u\u017e podniky zvykly a nau\u010dily se s nimi bojovat.<\/p>\n<p>Nov\u00fdm trendem se stalo roz\u0161\u00ed\u0159en\u00e9 zav\u00e1d\u011bn\u00ed \u201einteligentn\u00edho\u201c za\u0159\u00edzen\u00ed propojen\u00e9ho do s\u00edt\u011b: spravovan\u00e9 UPS, inteligentn\u00ed chladic\u00ed a v\u011btrac\u00ed syst\u00e9my, r\u016fzn\u00e9 \u0159\u00eddic\u00ed jednotky a senzory p\u0159ipojen\u00e9 k monitorovac\u00edm syst\u00e9m\u016fm. P\u0159i budov\u00e1n\u00ed modelu hrozeb datov\u00e9ho centra bychom nem\u011bli zapom\u00ednat na pravd\u011bpodobnost \u00fatoku na s\u00ed\u0165 infrastruktury (a mo\u017en\u00e1 i na souvisej\u00edc\u00ed IT s\u00ed\u0165 datov\u00e9ho centra). Situaci komplikuje skute\u010dnost, \u017ee \u010d\u00e1st za\u0159\u00edzen\u00ed (nap\u0159\u00edklad chladi\u010de) m\u016f\u017ee b\u00fdt um\u00edst\u011bna mimo datov\u00e9 centrum, nap\u0159\u00edklad na st\u0159e\u0161e pronajat\u00e9 budovy.<\/p>\n<h2>Ochrana komunika\u010dn\u00edch kan\u00e1l\u016f<\/h2>\n<p>\nPokud datov\u00e9 centrum poskytuje slu\u017eby nejen podle modelu colocation, bude nutn\u00e9 se zab\u00fdvat ochranou cloudov\u00fdch slu\u017eeb. Podle \u00fadaj\u016f Check Point se pouze v minul\u00e9m roce 51 % organizac\u00ed po cel\u00e9m sv\u011bt\u011b setkalo s \u00fatoky na cloudov\u00e9 struktury. DDoS \u00fatoky zastavuj\u00ed podnik\u00e1n\u00ed, ransomware po\u017eaduje v\u00fdkupn\u00e9 a c\u00edlen\u00e9 \u00fatoky na bankovn\u00ed syst\u00e9my vedou k kr\u00e1de\u017ei prost\u0159edk\u016f z \u00fa\u010detn\u00edch syst\u00e9m\u016f. <\/p>\n<p>Hrozby ze strany extern\u00edch intruz\u00ed znepokojuj\u00ed i specialisty na informa\u010dn\u00ed bezpe\u010dnost datov\u00fdch center. Pro datov\u00e1 centra jsou nejv\u00edce aktu\u00e1ln\u00ed distribuovan\u00e9 \u00fatoky zam\u011b\u0159en\u00e9 na zastaven\u00ed poskytov\u00e1n\u00ed slu\u017eeb a tak\u00e9 hrozby hacking, kr\u00e1de\u017ee nebo zm\u011bny dat obsa\u017een\u00fdch ve virtu\u00e1ln\u00ed infrastruktu\u0159e nebo v \u00falo\u017ei\u0161t\u00edch.<\/p>\n<p>Pro ochranu extern\u00edho perimetru datov\u00e9ho centra slou\u017e\u00ed modern\u00ed syst\u00e9my s funkcemi zji\u0161\u0165ov\u00e1n\u00ed a neutralizace \u0161kodliv\u00e9ho k\u00f3du, \u0159\u00edzen\u00ed aplikac\u00ed a mo\u017enost\u00ed importu technologi\u00ed pro proaktivn\u00ed ochranu Threat Intelligence. V n\u011bkter\u00fdch p\u0159\u00edpadech se nasazuj\u00ed syst\u00e9my s funkcionalitou IPS (prevence intruz\u00ed) s automatizovan\u00fdm p\u0159izp\u016fsoben\u00edm sady podpis\u016f parametr\u016fm chr\u00e1n\u011bn\u00e9ho prost\u0159ed\u00ed.<\/p>\n<p>Pro ochranu proti DDoS \u00fatok\u016fm rusk\u00e9 spole\u010dnosti obvykle vyu\u017e\u00edvaj\u00ed extern\u00ed specializovan\u00e9 slu\u017eby, kter\u00e9 odklon\u00ed provoz na jin\u00e9 uzly a filtruj\u00ed ho v cloudu. Ochrana na stran\u011b oper\u00e1tora je mnohem efektivn\u011bj\u0161\u00ed ne\u017e na stran\u011b klienta, a datov\u00e1 centra funguj\u00ed jako zprost\u0159edkovatel\u00e9 poskytuj\u00edc\u00edch slu\u017eeb.<\/p>\n<p>V datov\u00fdch centrech mohou doch\u00e1zet i k vnit\u0159n\u00edm DDoS \u00fatok\u016fm: \u00fato\u010dn\u00edk pronik\u00e1 na \u0161patn\u011b zabezpe\u010den\u00e9 servery jedn\u00e9 spole\u010dnosti, kter\u00e1 umis\u0165uje sv\u00e9 vybaven\u00ed pomoc\u00ed modelu colocation, a z nich prov\u00e1d\u00ed \u00fatok \u201eodm\u00edtnut\u00ed slu\u017eby\u201c na dal\u0161\u00ed klienty tohoto datov\u00e9ho centra prost\u0159ednictv\u00edm vnit\u0159n\u00ed s\u00edt\u011b.<\/p>\n<h2>Pozor na virtu\u00e1ln\u00ed prost\u0159ed\u00ed<\/h2>\n<p>\nJe t\u0159eba br\u00e1t v \u00favahu specifika chr\u00e1n\u011bn\u00e9ho objektu \u2013 pou\u017e\u00edv\u00e1n\u00ed virtualiza\u010dn\u00edch prost\u0159edk\u016f, dynamiku zm\u011bn IT infrastruktur, prov\u00e1zanost slu\u017eeb, kdy \u00fasp\u011b\u0161n\u00fd \u00fatok na jednoho klienta m\u016f\u017ee ohrozit bezpe\u010dnost ostatn\u00edch. Nap\u0159\u00edklad, pokud \u00fato\u010dn\u00edk pronikne do frontendov\u00e9ho kontejneru p\u0159i pr\u00e1ci v PaaS na z\u00e1klad\u011b Kubernetes, m\u016f\u017ee okam\u017eit\u011b z\u00edskat ve\u0161ker\u00e9 heslov\u00e9 informace a dokonce i p\u0159\u00edstup k orchestraci syst\u00e9mu.<\/p>\n<p>Produkty poskytovan\u00e9 na z\u00e1klad\u011b servisn\u00edho modelu maj\u00ed vysokou m\u00edru automatizace. Aby nedoch\u00e1zelo k naru\u0161en\u00ed podnik\u00e1n\u00ed, mus\u00ed m\u00edt ochrann\u00e9 prost\u0159edky tak\u00e9 p\u0159im\u011b\u0159enou \u00farove\u0148 automatizace a horizont\u00e1ln\u00ed \u0161k\u00e1lovatelnosti. \u0160k\u00e1lov\u00e1n\u00ed by m\u011blo b\u00fdt zaji\u0161t\u011bno na v\u0161ech \u00farovn\u00edch informa\u010dn\u00ed bezpe\u010dnosti, v\u010detn\u011b automatizace kontroly p\u0159\u00edstupu a rotace p\u0159\u00edstupov\u00fdch kl\u00ed\u010d\u016f. Samostatnou v\u00fdzvou je \u00fakol \u0161k\u00e1lov\u00e1n\u00ed funk\u010dn\u00edch modul\u016f, kter\u00e9 prov\u00e1d\u011bj\u00ed inspekci s\u00ed\u0165ov\u00e9ho provozu. <\/p>\n<p>Nap\u0159\u00edklad, filtrov\u00e1n\u00ed s\u00ed\u0165ov\u00e9ho provozu na aplika\u010dn\u00ed, s\u00ed\u0165ov\u00e9 a rela\u010dn\u00ed \u00farovni v datov\u00fdch centrech s vysokou m\u00edrou virtualizace by m\u011blo b\u00fdt prov\u00e1d\u011bno na \u00farovni s\u00ed\u0165ov\u00fdch modul\u016f hypervizoru (nap\u0159\u00edklad Distributed Firewall od spole\u010dnosti VMware) nebo prost\u0159ednictv\u00edm vytv\u00e1\u0159en\u00ed \u0159et\u011bzc\u016f slu\u017eeb (virtu\u00e1ln\u00ed firewally od Palo Alto Networks).<\/p>\n<p>V p\u0159\u00edpad\u011b slab\u00fdch m\u00edst na \u00farovni virtualizace v\u00fdpo\u010detn\u00edch prost\u0159edk\u016f budou snahy o vytvo\u0159en\u00ed komplexn\u00edho syst\u00e9mu informa\u010dn\u00ed bezpe\u010dnosti na \u00farovni platformy neefektivn\u00ed.<\/p>\n<h2>\u00darovn\u011b ochrany informac\u00ed v datov\u00fdch centrech<\/h2>\n<p>\nObecn\u00fd p\u0159\u00edstup k ochran\u011b \u2013 vyu\u017e\u00edv\u00e1n\u00ed integrovan\u00fdch, v\u00edce\u00farov\u0148ov\u00fdch syst\u00e9m\u016f zaji\u0161t\u011bn\u00ed informa\u010dn\u00ed bezpe\u010dnosti, kter\u00e9 zahrnuj\u00ed makrosegmentaci na \u00farovni firewallu (vymezen\u00ed segment\u016f pro r\u016fzn\u00e9 funk\u010dn\u00ed oblasti podnik\u00e1n\u00ed), mikrosegmentaci na z\u00e1klad\u011b virtu\u00e1ln\u00edch firewall\u016f nebo ozna\u010dov\u00e1n\u00ed zna\u010dkami provozu skupin (u\u017eivatelsk\u00fdch rol\u00ed nebo slu\u017eeb), definovan\u00fdch politikami p\u0159\u00edstupu.<\/p>\n<p>Dal\u0161\u00ed \u00farove\u0148 zahrnuje detekci anom\u00e1li\u00ed uvnit\u0159 segment\u016f a mezi nimi. Analyzuje se dynamika provozu, kter\u00e1 m\u016f\u017ee signalizovat p\u0159\u00edtomnost \u0161kodliv\u00fdch aktivit, jako je skenov\u00e1n\u00ed s\u00edt\u011b, pokusy o DDoS \u00fatoky, stahov\u00e1n\u00ed dat, nap\u0159\u00edklad prost\u0159ednictv\u00edm segmentace datab\u00e1zov\u00fdch soubor\u016f a jejich periodick\u00e9ho vyvst\u00e1v\u00e1n\u00ed v relac\u00edch s dlouh\u00fdmi intervaly. V datov\u00e9m centru prob\u00edh\u00e1 obrovsk\u00e9 mno\u017estv\u00ed provozu, tak\u017ee pro odhalen\u00ed anom\u00e1li\u00ed je nutn\u00e9 pou\u017e\u00edvat pokro\u010dil\u00e9 algoritmy vyhled\u00e1v\u00e1n\u00ed, a to bez anal\u00fdzy paket\u016f. D\u016fle\u017eit\u00e9 je, aby se rozpozn\u00e1valy nejen zn\u00e1mky \u0161kodliv\u00e9 a anom\u00e1ln\u00ed aktivity, ale tak\u00e9 \u010dinnost \u0161kodliv\u00e9ho softwaru i v \u0161ifrovan\u00e9m provozu bez jeho de\u0161ifrov\u00e1n\u00ed, jak je to navr\u017eeno v \u0159e\u0161en\u00edch Cisco (Stealthwatch).<\/p>\n<p>Posledn\u00ed obrana - ochrana koncov\u00fdch za\u0159\u00edzen\u00ed lok\u00e1ln\u00ed s\u00edt\u011b: server\u016f a virtu\u00e1ln\u00edch stroj\u016f, nap\u0159\u00edklad pomoc\u00ed agent\u016f instalovan\u00fdch na koncov\u00fdch za\u0159\u00edzen\u00edch (virtu\u00e1ln\u00edch stroj\u00edch), kter\u00e9 analyzuj\u00ed vstupn\u011b-v\u00fdstupn\u00ed operace, maz\u00e1n\u00ed, kop\u00edrov\u00e1n\u00ed a s\u00ed\u0165ov\u00e9 aktivity a p\u0159ed\u00e1vaj\u00ed data do <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloud4y.ru\/cloud-hosting\/?utm_source=habr&amp;utm_medium=referral&amp;utm_campaign=article\">cloudu<\/a><\/noindex>, kde prob\u00edhaj\u00ed v\u00fdpo\u010dty vy\u017eaduj\u00edc\u00ed vysok\u00fd v\u00fdkon. Tam se prov\u00e1d\u00ed anal\u00fdza pomoc\u00ed algoritm\u016f Big Data, vytv\u00e1\u0159ej\u00ed se stromy strojov\u00e9ho u\u010den\u00ed a odhaluj\u00ed se anom\u00e1lie. Algoritmy se samy u\u010d\u00ed na z\u00e1klad\u011b obrovsk\u00e9ho mno\u017estv\u00ed dat dod\u00e1van\u00fdch glob\u00e1ln\u00ed s\u00edt\u00ed senzor\u016f.<\/p>\n<p>Lze se obej\u00edt i bez instalace agent\u016f. Modern\u00ed prost\u0159edky ochrany informac\u00ed by m\u011bly b\u00fdt bezagentn\u00ed a integrovat se do opera\u010dn\u00edch syst\u00e9m\u016f na \u00farovni hypervisoru.<br \/>\nUveden\u00e1 opat\u0159en\u00ed v\u00fdrazn\u011b sni\u017euj\u00ed rizika informa\u010dn\u00ed bezpe\u010dnosti, ale to m\u016f\u017ee b\u00fdt nedostate\u010dn\u00e9 pro datov\u00e1 centra, kter\u00e1 zaji\u0161\u0165uj\u00ed automatizaci vysoce rizikov\u00fdch v\u00fdrobn\u00edch proces\u016f, jako jsou jadern\u00e9 elektr\u00e1rny.<\/p>\n<h2>Po\u017eadavky regul\u00e1tor\u016f<\/h2>\n<p>\nV z\u00e1vislosti na zpracov\u00e1van\u00fdch informac\u00edch mus\u00ed fyzick\u00e9 a virtualizovan\u00e9 infrastruktury datov\u00e9ho centra vyhovovat r\u016fzn\u00fdm po\u017eadavk\u016fm na bezpe\u010dnost stanoven\u00fdm z\u00e1kony a pr\u016fmyslov\u00fdmi standardy.<\/p>\n<p>Mezi takov\u00e9 z\u00e1kony pat\u0159\u00ed z\u00e1kon \u201eO osobn\u00edch \u00fadaj\u00edch\u201c (152-\u0424\u0417) a letos v platnost vstoupil z\u00e1kon \u201eO bezpe\u010dnosti objekt\u016f KII RF\u201c (187-\u0424\u0417) \u2014 prokuratura ji\u017e za\u010dala zkoumat pr\u016fb\u011bh jeho pln\u011bn\u00ed. O p\u0159\u00edslu\u0161nosti datov\u00fdch center k subjekt\u016fm KII se st\u00e1le vedou spory, ale pravd\u011bpodobn\u011b datov\u00e1 centra, kter\u00e1 cht\u011bj\u00ed poskytovat slu\u017eby subjekt\u016fm KII, budou muset splnit po\u017eadavky nov\u00e9ho z\u00e1konod\u00e1rstv\u00ed.<\/p>\n<p>Datov\u00e1 centra, kter\u00e1 hostuj\u00ed vl\u00e1dn\u00ed informa\u010dn\u00ed syst\u00e9my, to nebudou m\u00edt jednoduch\u00e9. Podle Na\u0159\u00edzen\u00ed vl\u00e1dy RF \u010d. 555 z 11.05.2017 je nutn\u00e9 vy\u0159e\u0161it ot\u00e1zky informa\u010dn\u00ed bezpe\u010dnosti p\u0159ed uveden\u00edm GIS do pr\u016fmyslov\u00e9ho provozu. A datov\u00e9 centrum, kter\u00e9 chce hostit GIS, mus\u00ed splnit po\u017eadavky regul\u00e1tor\u016f je\u0161t\u011b p\u0159edem.<\/p>\n<p>Za posledn\u00edch 30 let syst\u00e9my zabezpe\u010den\u00ed datov\u00fdch center urazily obrovsk\u00fd kus cesty: od jednoduch\u00fdch syst\u00e9m\u016f fyzick\u00e9 ochrany a organiza\u010dn\u00edch opat\u0159en\u00ed, kter\u00e1 ov\u0161em ani dnes neztratila svou relevanci, k slo\u017eit\u00fdm inteligentn\u00edm syst\u00e9m\u016fm, v nich\u017e se st\u00e1le \u010dast\u011bji pou\u017e\u00edvaj\u00ed prvky um\u011bl\u00e9 inteligence. Av\u0161ak podstata p\u0159\u00edstupu se v tomto nezm\u011bnila. Nejmodern\u011bj\u0161\u00ed technologie nezachr\u00e1n\u00ed bez organiza\u010dn\u00edch opat\u0159en\u00ed a \u0161kolen\u00ed person\u00e1lu, a pap\u00edry \u2014 bez softwarov\u00fdch a technick\u00fdch \u0159e\u0161en\u00ed. Bezpe\u010dnost datov\u00e9ho centra nelze zajistit jednou prov\u017edy, je to st\u00e1l\u00e1 ka\u017edodenn\u00ed pr\u00e1ce na odhalov\u00e1n\u00ed prioritn\u00edch hrozeb a komplexn\u00edm \u0159e\u0161en\u00ed vznikaj\u00edc\u00edch probl\u00e9m\u016f.<\/p>\n<p><b>Co dal\u0161\u00edho si m\u016f\u017eete p\u0159e\u010d\u00edst v blogu <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloud4y.ru\/?utm_source=habr&amp;utm_medium=referral&amp;utm_campaign=article\">Cloud4Y<\/a><\/noindex><\/b><\/p>\n<p>\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/469487\/\">Nastavujeme top v GNU\/Linux<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/471380\/\">Pentesteri na p\u0159edn\u00ed linii kybernetick\u00e9 bezpe\u010dnosti<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/469447\/\">Cesta um\u011bl\u00e9 inteligence od fantastick\u00e9 my\u0161lenky k v\u011bdeck\u00e9mu odv\u011btv\u00ed<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/461713\/\">4 zp\u016fsoby, jak u\u0161et\u0159it na z\u00e1loh\u00e1ch v cloudu<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/474522\/\">Mu\u017esk\u00e1 historie<\/a><\/noindex><\/p>\n<p>Sledujte n\u00e1\u0161 <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/cloud4y\">Telegram<\/a><\/noindex>-kan\u00e1l, abyste nezme\u0161kali dal\u0161\u00ed \u010dl\u00e1nek! Publikujeme maxim\u00e1ln\u011b dvakr\u00e1t t\u00fddn\u011b a pouze k v\u011bci. Tak\u00e9 p\u0159ipom\u00edn\u00e1me, \u017ee m\u016f\u017eete <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloud4y.ru\/try\/\">bezplatn\u011b vyzkou\u0161et<\/a><\/noindex> cloudov\u00e1 \u0159e\u0161en\u00ed Cloud4Y.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/474620\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0422\u0430\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0446\u0435\u043d\u0442\u0440 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u041c\u043e\u0441\u043a\u0432\u0435 \u0426\u041e\u0414 NORD-2 \u041e \u0442\u043e\u043c, \u043a\u0430\u043a\u0438\u0435 \u043c\u0435\u0440\u044b \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0418\u0411), \u0432\u044b \u0447\u0438\u0442\u0430\u043b\u0438 \u043d\u0435 \u043e\u0434\u0438\u043d \u0440\u0430\u0437. \u041b\u044e\u0431\u043e\u0439 \u0443\u0432\u0430\u0436\u0430\u044e\u0449\u0438\u0439 \u0441\u0435\u0431\u044f \u0430\u0439\u0442\u0438\u0448\u043d\u0438\u043a \u0441 \u043b\u0451\u0433\u043a\u043e\u0441\u0442\u044c\u044e \u043d\u0430\u0437\u043e\u0432\u0451\u0442 5-10 \u043f\u0440\u0430\u0432\u0438\u043b \u0418\u0411. Cloud4Y \u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u0442\u044c \u043f\u0440\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u043e\u0432. \u041f\u0440\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0426\u041e\u0414\u0430 \u0441\u0430\u043c\u044b\u043c\u0438 \u00ab\u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u044b\u043c\u0438\u00bb \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f: \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b (\u0434\u0430\u043d\u043d\u044b\u0435); \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-52619","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0422\u0430\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0446\u0435\u043d\u0442\u0440 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u041c\u043e\u0441\u043a\u0432\u0435 \u0426\u041e\u0414.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/informatsionnaya-bezopasnost-tsod\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0426\u041e\u0414 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0422\u0430\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0446\u0435\u043d\u0442\u0440 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u041c\u043e\u0441\u043a\u0432\u0435 \u0426\u041e\u0414.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/informatsionnaya-bezopasnost-tsod\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-12T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:00:24+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Informa\u010dn\u00ed bezpe\u010dnost datov\u00fdch center | ProHoster","description":"Takto vypad\u00e1 monitorovac\u00ed centrum datov\u00e9ho centra um\u00edst\u011bn\u00e9ho v Moskv\u011b.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/informatsionnaya-bezopasnost-tsod","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0426\u041e\u0414 | ProHoster","og:description":"\u0422\u0430\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0446\u0435\u043d\u0442\u0440 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u041c\u043e\u0441\u043a\u0432\u0435 \u0426\u041e\u0414.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/informatsionnaya-bezopasnost-tsod","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-12T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52619","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 04:15:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:40:26","updated":"2026-01-24 04:15:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/52619","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=52619"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/52619\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=52619"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=52619"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=52619"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}