{"id":52599,"date":"2019-11-12T00:00:00","date_gmt":"2019-11-11T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam"},"modified":"2021-02-01T11:40:25","modified_gmt":"2021-02-01T09:40:25","slug":"privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","title":{"rendered":"Privileged Access Management som en prioritet i informationssikkerhed (ved eksemplet Fudo PAM)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Privileged Access Management som en prioritet i informationssikkerhed (ved eksemplet Fudo PAM)\" src=\"\/wp-content\/uploads\/2019\/11\/fe518ef5e33b7ebcaa08e5e5459d31b6.jpg\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Der er et ret interessant dokument <noindex><a rel=\"nofollow\" href=\"https:\/\/drive.google.com\/file\/d\/1qOT0XDf71JJ1lBZUZQSbpC4cJKwGqVzM\/view?usp=sharing\">CIS Controls<\/a><\/noindex>, som omhandler informationssikkerhed ved hj\u00e6lp af Pareto-princippet (80\/20). Dette princip siger, at 20% af sikkerhedsforanstaltningerne giver 80% af resultatet med hensyn til virksomhedens beskyttelse. Mange 'sikkerhedseksperter', der gennemg\u00e5r dette dokument, opdager, at n\u00e5r de v\u00e6lger sikkerhedsforanstaltninger, starter de ikke med de mest effektive tiltag. Dokumentet fremh\u00e6ver fem n\u00f8glebeskyttelsesforanstaltninger, der har den st\u00f8rste indvirkning p\u00e5 informationssikkerheden:<\/p>\n<ol>\n<li><b>Inventarisering af alle enheder i netv\u00e6rket<\/b>. Det er sv\u00e6rt at beskytte et netv\u00e6rk, n\u00e5r man ikke ved, hvad der er i det.<\/li>\n<li><b>Inventarisering af al software<\/b>. Software med s\u00e5rbarheder bliver ofte indgangspunktet for en hacker.<\/li>\n<li><b>Sikker konfiguration<\/b> \u2014 eller obligatorisk brug af indbyggede sikkerhedsfunktioner i software eller enheder. Kort sagt \u2014 \u00e6ndre standardadgangskoder og begr\u00e6nse adgangen.<\/li>\n<li><b>Identifikation og udbedring af s\u00e5rbarheder<\/b>. De fleste angreb starter netop med en kendt s\u00e5rbarhed.<\/li>\n<li><b>H\u00e5ndtering af privilegeret adgang<\/b>. Dine brugere skal kun have de rettigheder, de reelt har brug for, og udf\u00f8re kun de handlinger, der er n\u00f8dvendige.<\/li>\n<\/ol>\n<p>I denne artikel vil vi fokusere p\u00e5 den femte punkt ved at bruge <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/katalog\/fudo_security\">Fudo PAM<\/a><\/noindex>. Mere pr\u00e6cist vil vi se p\u00e5 typiske cases og problemer, der kan opdages efter implementeringen eller i forbindelse med gratis test af Fudo PAM.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Fudo PAM<\/h3>\n<p>Bare et par ord om l\u00f8sningen. Fudo PAM er en relativt ny l\u00f8sning til h\u00e5ndtering af privilegeret adgang. Nogle af n\u00f8glefunktionerne inkluderer:<\/p>\n<ul>\n<li><b>Sessionoptagelse<\/b>. Visning af sessionen i realtid. Tilslutning til sessionen. Skabelse af bevismateriale til retssagen.<\/li>\n<li><b>Proaktiv overv\u00e5gning<\/b>. Fleksible politikker. S\u00f8gning efter m\u00f8nstre. Automatisering af handlinger.<\/li>\n<li><b>Trusselvarsling<\/b>. Uretm\u00e6ssig brug af konti. Vurdering af trusselsniveau. Opdagelse af anomali.<\/li>\n<li><b>Identifikation af ansvarlige<\/b>. I tilf\u00e6lde af, at flere brugere anvender den samme konto til login.<\/li>\n<li><b>Effektivitetsanalyse<\/b>. Af enkeltpersoner, afdelinger eller hele organisationer.<\/li>\n<li><b>Pr\u00e6cis adgangskontrol<\/b>. Begr\u00e6nsning af trafik og adgang for brugere i bestemte tidsrum.<\/li>\n<\/ul>\n<p>Og den st\u00f8rste fordel \u2014 det kan implementeres bogstaveligt talt inden for et par timer, hvorefter systemet er klar til brug.<\/p>\n<p>For those interested in the product, there will be a webinar with a detailed overview and demonstration of the functionality. We will address the real problems found in pilot projects for privileged access management systems.<\/p>\n<h3>1. Network administrators regularly gain access to prohibited resources<\/h3>\n<p>Strangely enough, the first incidents that are detected are violations by administrators. Most often, this involves unauthorized changes to access lists on network equipment. For example, to gain access to a forbidden website or a prohibited application. It's worth noting that such changes can remain in the equipment configuration for years.<\/p>\n<h3>2. One account is used by multiple administrators<\/h3>\n<p>Another common issue related to administrators. Sharing a single account among colleagues is a frequent practice. It's convenient, but afterward, it's quite difficult to determine who is responsible for a particular action.<\/p>\n<h3>3. Remote employees work less than 2 hours a day<\/h3>\n<p>Many companies have remote employees or partners who need access to internal resources (most often remote desktop). Fudo PAM allows monitoring real activity during such sessions. It is often discovered that remote employees work much less than claimed.<\/p>\n<h3>4. The same password is used for multiple systems<\/h3>\n<p>This is quite a serious issue. Remembering multiple passwords is always difficult, so users often rely on a single password for all systems. If such a password is leaked, a potential violator can gain access to almost the entire IT infrastructure.<\/p>\n<h3>5. Users have greater privileges than expected<\/h3>\n<p>It is often found that users who seem to have limited rights actually possess more privileges than allowed. For example, they may restart a controlled device. Typically, this is either an error in the rights allocation or simply shortcomings in the built-in rights management system.<\/p>\n<h3>Webinar<\/h3>\n<p>If you are interested in the topic of PAM, we invite you to the <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/events\/fudo_vebinar\"><b>upcoming webinar on Fudo PAM<\/b><\/a><\/noindex>, which will take place on November 21.<\/p>\n<p>Dette er ikke vores sidste webinar i \u00e5r, som vi planl\u00e6gger at holde, s\u00e5 hold \u00f8je med opdateringerne (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">TS Solution Blog<\/a><\/noindex>)!<\/p>\n<p>Kilde: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/471750\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 CIS Controls, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0430 \u041f\u0430\u0440\u0435\u0442\u043e (80\/20). \u042d\u0442\u043e\u0442 \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u0433\u043b\u0430\u0441\u0438\u0442, \u0447\u0442\u043e 20% \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0440 \u0434\u0430\u044e\u0442 80% \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430 \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u041e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0432\u0448\u0438\u0441\u044c \u0441 \u044d\u0442\u0438\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u043c\u043d\u043e\u0433\u0438\u0435 \u201c\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0438\u201d \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0438 \u0432\u044b\u0431\u043e\u0440\u0435 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0440 \u043e\u043d\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u043d\u0435 \u0441 \u0441\u0430\u043c\u044b\u0445 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043c\u0435\u0440. \u0412 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0432\u044b\u0434\u0435\u043b\u044f\u044e\u0442 5 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043c\u0435\u0440 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":52600,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-52599","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"da_DK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Privileged Access Management \u043a\u0430\u043a \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u0432 \u0418\u0411 (\u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 Fudo PAM) | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-11T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-02-01T09:40:25+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Privileged Access Management som en prioriteret opgave inden for informationssikkerhed (taget fra Fudo PAM) | ProHoster","description":"Der er en del.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Privileged Access Management \u043a\u0430\u043a \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u0432 \u0418\u0411 (\u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 Fudo PAM) | ProHoster","og:description":"\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e.","og:url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-11T21:00:00+00:00","article:modified_time":"2021-02-01T09:40:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52599","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 04:11:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:40:27","updated":"2026-01-24 04:11:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/52599","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=52599"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/52599\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/52600"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=52599"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=52599"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=52599"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}