{"id":29861,"date":"2019-10-31T21:32:23","date_gmt":"2019-10-31T18:32:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/dlp-sistema-devicelock-8-2-dyryavyj-shtaketnik-na-strazhe-vashej-bezopasnosti\/"},"modified":"2019-10-31T21:32:23","modified_gmt":"2019-10-31T18:32:23","slug":"dlp-sistema-devicelock-8-2-dyryavyj-shtaketnik-na-strazhe-vashej-bezopasnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/dlp-sistema-devicelock-8-2-dyryavyj-shtaketnik-na-strazhe-vashej-bezopasnosti","title":{"rendered":"DLP-s\u00fcsteem DeviceLock 8.2 \u2014 auklik aiapost teie turvalisuse kaitseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Oktoobris 2017 osalesin DLP-s\u00fcsteemi DeviceLock reklaamseminaril, kus lisaks peamisele funktsionaalsusele, mis kaitseb lekete eest, n\u00e4iteks USB-portide sulgemine, e-kirjade ja l\u00f5ikepasta kontekstianal\u00fc\u00fcs, reklaamiti ka kaitset administraatori eest. Mudel on lihtne ja kaunis \u2014 v\u00e4ikesele ettev\u00f5ttele tuleb paigaldaja, kes installib tarkvarapaki, seadistab BIOSi parooli, loob DeviceLocki administraatori konto ning j\u00e4tab kohaliku adminni vaid \u00f5igused Windowsi ja muu tarkvara haldamiseks. Isegi tahtliku k\u00e4itumise korral ei saa see admin midagi varastada. Kuid see j\u00e4\u00e4b k\u00f5ik teooriaks\u2026
\n<\/a><\/noindex>
\n Kuna \u00fcle 20 aasta kestnud t\u00f6\u00f6 kogemuses infokaitses olen selgelt veendunud, et administraator v\u00f5ib teha k\u00f5ike, eriti kui tal on f\u00fc\u00fcsiline juurdep\u00e4\u00e4s arvutile, siis v\u00f5ib peamine kaitse tema eest olla ainult organisatsioonilised meetmed, nagu rangem aruandlus ja arvutite f\u00fc\u00fcsiline kaitse, mis sisaldavad olulist teavet. Seet\u00f5ttu tekkis kohe m\u00f5te kontrollida pakutud toote vastupidavust.<\/p>\n

Seminari l\u00f5pus proovitud lahendused ei toimunud, kaitse DlService.exe peamise teenuse kustutamise vastu oli loodud, samuti ei unustatud \u00f5iguste ja viimase edukalt konfigureeritud versiooni valikut, mist\u00f5ttu ei \u00f5nnestunud seda nagu enamik viiruseid kraaniga alla suruda ja keelata s\u00fcsteemil lugemis- ja t\u00e4itmis\u00f5igust. <\/p>\n

Firma-arendaja Smarts Line esindaja kinnitas kindlalt, et tasuta toote draiverite kaitse on kindlasti sama tasemega.<\/p>\n

P\u00e4ev hiljem otsustasin j\u00e4tkata uurimist\u00f6\u00f6d, laadisin alla prooviversiooni. Esimene asi, mis \u00fcllatas, oli paketi suurus \u2013 peaaegu 2 GB! Olen harjunud, et s\u00fcsteemitarkvara, mida m\u00f5istetakse andmekaitse vahendite alla, on tavaliselt palju kompaktsem.<\/p>\n

P\u00e4rast installimist \u00fcllatusin teist korda \u2014 mainitud exe-faili suurus on samuti arvestatav \u2014 13 MB. Tekkis m\u00f5te, et sellise mahuga on millegi k\u00fclge kinni hoida. Proovisin moodulit vahetada edasi l\u00fckatud kirjutamise abil \u2014 suletud. Uurisin programmi kataloogis, ja seal oli lausa 11 draiverit! P\u00f5hjusin \u00f5igusi \u2014 need ei olnud muudatuste jaoks suletud! Noh, peame k\u00f5igile keelu peale panema, taask\u00e4ivitame!<\/p>\n

M\u00f5ju on lihtsalt maagiline \u2014 k\u00f5ik funktsioonid sulgesid end, teenus ei k\u00e4ivitunud. Mis seal isekaitse, kopeeri ja jaota, mida soovid, kas USB-le v\u00f5i v\u00f5rku. Ilmus v\u00e4lja esimene t\u00f5sine puudus s\u00fcsteemis \u2014 komponentide vahel on liiga tugev seos. Jah, teenus peab draiveritega suhtlema, aga miks see kokku kukkuda, kui keegi ei vasta? L\u00f5ppkokkuv\u00f5ttes on \u00fcks meetod kaitse m\u00f6\u00f6da minekuks olemas.<\/p>\n

Selgitasin v\u00e4lja, et see imeteenus on nii \u00f5rn ja tundlik, otsustasin kontrollida, kui palju see s\u00f5ltub kolmandate osapoolte teekidest. Siin on veel lihtsam, nimekiri on pikk, kustutame lihtsalt juhuslikult WinSock_II teegi ja j\u00e4lgime sarnast pilti \u2014 teenus ei k\u00e4ivitunud, s\u00fcsteem on avatud.<\/p>\n

Tulemuseks on see, mida seminaril r\u00e4\u00e4giti, nimelt j\u00f5uline aed, mis ei piira kogu kaitstud ala rahapuuduse t\u00f5ttu, ja katmata alal on lihtsalt okkaline piibeleht. Antud juhul, arvestades tarkvaratoote arhitektuuri, mis ei ole vaikeseisundis suletud keskkond, vaid sisaldab mitmeid erinevaid pistikuid, interceptor'eid ja liiklusanal\u00fcsaatoreid, on see pigem aedik, kus paljud lauad on v\u00e4ljastpoolt kruvidega kinni ja neid on v\u00e4ga lihtne lahti keerata. Enamiku selliste lahenduste probleem on see, et tohutu hulga potentsiaalsete aukude olemasolu korral on alati v\u00f5imalus midagi unustada, seoseid t\u00e4hele panemata j\u00e4tta v\u00f5i stabiilsust m\u00f5jutada, kui m\u00f5ni intercepter on halvasti ellu viidud. Judging by the vulnerabilities mentioned in this article are simply lying on the surface, the product contains many more that will take a couple of hours to find.<\/p>\n

Turul on turul palju n\u00e4iteid t\u00f5husast kaitse teostamisest k\u00fctusekatkestuste vastu, n\u00e4iteks kodumaised viiruset\u00f5rje lahendused, kus enesekaitset ei saa lihtsalt m\u00f6\u00f6da minna. Mida ma tean, ei oldud laisk ja l\u00e4biti FSTEK-i sertifitseerimine.<\/p>\n

P\u00e4rast mitmeid vestlusi SmarLine'i t\u00f6\u00f6tajatega leiti mitmeid sarnaseid kohti, millest nad isegi ei teadnud. \u00dcks n\u00e4ide on mehhanism ArrInitDll.<\/p>\n

Kuigi see ei ole k\u00f5ige s\u00fcgavam, v\u00f5imaldab see paljude juhtumite korral v\u00e4ltida s\u00fcvitsi minekut OS-i tuuma ja mitte m\u00f5jutada selle stabiilsust. nVidia draiverid kasutavad seda mehhanismi t\u00e4ielikult graafikakaardi kohandamiseks konkreetse m\u00e4ngu jaoks. <\/p>\n

Tehes k\u00fcsimusi, tekitab t\u00e4ielik puuduolu kompleksse l\u00e4henemisviisi loomisel automatiseeritud s\u00fcsteemi alusel DL 8.2. Soovitame tellijale toote eeliseid illustreerida, kontrollida olemasolevate arvutite arvutusv\u00f5imet ja serverite<\/a> (kontekstsede anal\u00fcsaatorid on v\u00e4ga ressursimahukad ja moes olevad kontorikomplektid ning nettopid Atomil p\u00f5hinevatesse s\u00fcsteemidesse ei sobi) ja lihtsalt uue toote peale peale panna. Samuti ei mainitud seminari k\u00e4igus selliseid termineid nagu \"ligip\u00e4\u00e4su piiramine\", \"sulgunud tarkvarakeskkond\". Kr\u00fcpteerimise osas \u00f6eldi vaid, et lisaks keerukusele tekib see reguleerivate asutuste seas k\u00fcsimusi, kuigi reaalsuses pole sellega mingeid probleeme. K\u00fcsimused sertifitseerimise kohta l\u00fckatakse isegi FSTEK-is tagasi nende v\u00e4idetava keerukuse ja venimise t\u00f5ttu. Kogemustega IB spetsialisti, kes on korduvalt osalenud sarnastes protsessides, \u00fctlen, et nende protseduuride k\u00e4igus ilmnevad mitmed haavatavused, nagu on kirjeldatud selles materjalis, kuna sertifitseerimise laborite spetsialistidel on t\u00f5sine erialane ettevalmistus.<\/p>\n

Kokkuv\u00f5ttes suudab esitatud DLP-s\u00fcsteem t\u00e4ita v\u00e4ga piiratud hulga funktsioone, mis tegelikult tagavad teabe turvalisuse, genereerides samal ajal t\u00f5sise arvutuskoormuse ja luues kogenematu ettev\u00f5tte juhtkonna seas tunde ettev\u00f5tte andmete kaitstusest.<\/p>\n

Tegelikult suudab see kaitsta ainult suuri andmeid tavakasutaja eest, kuna administraator suudab kaitse t\u00e4ielikult deaktiveerida. Isegi v\u00e4hem t\u00e4htsate saladuste puhul suudab koristust\u00f6\u00f6taja m\u00e4rkamatult ekraani fotografeerida v\u00f5i meelde j\u00e4tta aadressi v\u00f5i krediitkaardi numbri, piiludes kaask t\u00f6\u00f6taja \u00f5last.
\nK\u00f5ik see kehtib aga ainult juhul, kui t\u00f6\u00f6tajatel ei ole f\u00fc\u00fcsilist juurdep\u00e4\u00e4su arvuti sisemustele v\u00f5i v\u00e4hemalt BIOS-ile, et aktiveerida k\u00e4ivitamine v\u00e4lisest kandjast. Siis ei pruugi aidata isegi BitLocker, mida t\u00f5en\u00e4oliselt ei kasutata ettev\u00f5tetes, mis alles m\u00f5tlevad info kaitsmisele.<\/p>\n

Kokkuv\u00f5te, nagu see ka ei k\u00f5laks, on kompleksselt l\u00e4heneda infoturbele, sealhulgas mitte ainult tark- ja riistvaralistele lahendustele, vaid ka organisatsioonilistele ja tehnilistele meetmetele, et v\u00e4ltida foto-\/videosalvestamist ja v\u00e4listada objektilt 'ebatavalised m\u00e4lukaelad'. Ei tohi kindlasti loota imeprodukti DL 8.2, mida reklaamitakse kui \u00fcheastmelist lahendust enamikele ettev\u00f5tte turvalisuse probleemidele.<\/p>\n

Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2017 \u0433\u043e\u0434\u0430 \u0434\u043e\u0432\u0435\u043b\u043e\u0441\u044c \u043f\u043e\u0431\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u043e\u043c \u0441\u0435\u043c\u0438\u043d\u0430\u0440\u0435 DLP-\u0441\u0438\u0441\u0442\u0435\u043c\u044b DeviceLock, \u0433\u0434\u0435 \u043f\u043e\u043c\u0438\u043c\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0442\u0435\u0447\u0435\u043a \u0442\u0438\u043f\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u0438\u044f USB-\u043f\u043e\u0440\u0442\u043e\u0432, \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u043d\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043f\u043e\u0447\u0442\u044b \u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u043e\u0431\u043c\u0435\u043d\u0430 \u0440\u0435\u043a\u043b\u0430\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u041c\u043e\u0434\u0435\u043b\u044c \u043f\u0440\u043e\u0441\u0442\u0430\u044f \u0438 \u043a\u0440\u0430\u0441\u0438\u0432\u0430\u044f \u2014 \u0432 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0443\u044e \u0444\u0438\u0440\u043c\u0443 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a, \u0441\u0442\u0430\u0432\u0438\u0442 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u043f\u0430\u0440\u043e\u043b\u0438\u0442 \u0411\u0418\u041e\u0421, \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0441\u043a\u0443\u044e \u0443\u0447\u0435\u0442\u043a\u0443 DeviceLock, \u0430 \u043c\u0435\u0441\u0442\u043d\u043e\u043c\u0443 \u0430\u0434\u043c\u0438\u043d\u0443 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"class_list":["post-29861","post","type-post","status-publish","format-standard","hentry","category-blog"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DLP-s\u00fcsteem DeviceLock 8.2 \u2014 auklik aed teie turvalisuse nimel | ProHoster","description":"Oktoobris 2017 osalesin DeviceLock DLP-s\u00fcsteemi reklaamseminaril, kus reklaamiti lisaks peamisele funktsionaalsusele, nagu USB-portide sulgemine, kontekstitundlik e-posti anal\u00fc\u00fcs ja l\u00f5ikelaua kaitse.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/dlp-sistema-devicelock-8-2-dyryavyj-shtaketnik-na-strazhe-vashej-bezopasnosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47DLP-\u0441\u0438\u0441\u0442\u0435\u043c\u0430 DeviceLock 8.2 \u2014 \u0434\u044b\u0440\u044f\u0432\u044b\u0439 \u0448\u0442\u0430\u043a\u0435\u0442\u043d\u0438\u043a \u043d\u0430 \u0441\u0442\u0440\u0430\u0436\u0435 \u0432\u0430\u0448\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2017 \u0433\u043e\u0434\u0430 \u0434\u043e\u0432\u0435\u043b\u043e\u0441\u044c \u043f\u043e\u0431\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u043e\u043c \u0441\u0435\u043c\u0438\u043d\u0430\u0440\u0435 DLP-\u0441\u0438\u0441\u0442\u0435\u043c\u044b DeviceLock, \u0433\u0434\u0435 \u043f\u043e\u043c\u0438\u043c\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0442\u0435\u0447\u0435\u043a \u0442\u0438\u043f\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u0438\u044f USB-\u043f\u043e\u0440\u0442\u043e\u0432, \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u043d\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043f\u043e\u0447\u0442\u044b \u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u043e\u0431\u043c\u0435\u043d\u0430 \u0440\u0435\u043a\u043b\u0430\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c.","og:url":"https:\/\/prohoster.info\/et\/blog\/dlp-sistema-devicelock-8-2-dyryavyj-shtaketnik-na-strazhe-vashej-bezopasnosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:32:23+00:00","article:modified_time":"2019-10-31T18:32:23+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"29861","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 16:53:14","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:47:35","updated":"2026-02-09 16:53:14","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/29861","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=29861"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/29861\/revisions"}],"predecessor-version":[{"id":158524,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/29861\/revisions\/158524"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=29861"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=29861"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=29861"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}