{"id":30167,"date":"2019-10-31T21:33:58","date_gmt":"2019-10-31T18:33:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform\/"},"modified":"2019-10-31T21:33:58","modified_gmt":"2019-10-31T18:33:58","slug":"razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","title":{"rendered":"KIB SEARCHINFORM'i kr\u00fcptimisalgoritmi kriitilisest veast \u00fclevaade","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Organisatsioonis ringlusse mineva toda informatsiooni kontroll on \u00fcks peamisi \u00fclesandeid organisatsiooniliste ja korraldavate dokumentide (nt infojulgeolekupoliitika ja muud madalama taseme sisemised dokumendid) praktilisel elluviimisel.
\nInformatsioonis\u00fcsteemidest konfidentsiaalse informatsiooni leke v\u00e4ltimise s\u00fcsteemid (Data Leak Prevention, DLP) suudavad suurel m\u00e4\u00e4ral selle probleemi lahendada.
\n<\/a><\/noindex>
\nT\u00e4nap\u00e4eva turul on mitmeid selliseid s\u00fcsteemide variatsioone, n\u00e4iteks: SearchInform DLP, Infowatch Traffic Monitor DLP, Zecurion DLP, Symantec DLP ja teised. Kuid t\u00e4na k\u00e4sitleb see artikkel ettev\u00f5tte O\u00dc \u00abS\u00f6rchinform\u00bb toodet.<\/p>\n

SearchInform'i infojulgeolekukontuur (KIB S\u00f6rchinform) on t\u00f5sine ja paindlikult kohandatav tarkvarakompleks, mis oma funktsionaalsuse ja ulatuslike anal\u00fc\u00fcsit\u00f6\u00f6riistadega loob t\u00f5sise konkurentsi teistele ettev\u00f5tetele antud valdkonnas. Kuid nagu k\u00f5igil toodetel, on ka KIB S\u00f6rchinform'il \u00fcks puudus, millest jutt k\u00e4ib.<\/p>\n

\"KIB
\n
\nJoonis 1 \u2013 KIB S\u00f6rchinform logo<\/i><\/p>\n

KIB S\u00f6rchinformis on \u00fcks teabe kogumise allikaid agent (Windows\/Linux). Windowsi ja Linuxi operatsioonis\u00fcsteemide jaoks m\u00f5eldud agentidel on moodulip\u00f5hine teabe kogumise s\u00fcsteem, mille osasid saab vajadusel sisse ja v\u00e4lja l\u00fclitada. Vaatame seadet (Device) - v\u00e4lisseadmete, v\u00f5rguseadmete, protsesside jms j\u00e4lgimist. Toote demoversiooni v\u00f5ib ametlikult saada arendaja veebisaidilt (t\u00e4ie funktsionaalsusega). Edasi liikuda saab saadud litsentsiv\u00f5tmega \u2014 EndPointController 5.51.0.9 programmiversioon (agendi versioon 5.51.0.9).<\/p>\n

Selle mooduli t\u00f6\u00f6 p\u00f5hiprobleem on teabe kr\u00fcpteerimise algoritm v\u00e4listel eemaldatavates seadmetes. Uurime KIB S\u00f6rchinformis kr\u00fcpteerimisalgoritmi t\u00f6\u00f6p\u00f5him\u00f5tet.<\/p>\n

Installime agendi t\u00f6\u00f6kohale ja seadistame kohaliku v\u00e4lisseadmete kontrolli (Device moodul) jaotises \u201eV\u00f5rgukeskkond\u201d EndPointController 5.51.0.9.<\/p>\n

\"KIB
\nJoonis 2 \u2013 Mooduli installimine ja aktiveerimine<\/i><\/p>\n

Seome seadistuse \u0161ifreerimine seadmete mooduli vahekaardil \u201e\u0160ifreerimine\u201d: genereerime v\u00f5tme ja aktiveerime \u0161ifreerimise k\u00f5ikidele andmekandjatele (v\u00f5imalik on \u0161ifreerimine ainult teatud teabe kandjate jaoks).<\/p>\n

\"KIB
\nJoonis 3 \u2013 Valge nimekirja seadistamine<\/i><\/p>\n

\"KIB
\nJoonis 4 \u2013 \u0160ifreerimise konfiguratsioon<\/i><\/p>\n

N\u00fc\u00fcd l\u00e4heme edasi failide \u0161ifreerimise algoritmi tutvustamise juurde k\u00e4esolevas tootes. Kopeerime failid \u201eInstall.exe\u201d ja \u201eP\u00f5hik\u00fcsimused.rtf\u201d kontrollitavast t\u00f6\u00f6jaamast \u201eWINOC\u201d v\u00e4lisele eemaldatavale andmekandjale \u201eEemaldatav ketas (E:)\u201d. Nagu on n\u00e4ha jooniselt 5, on varjatud kaustas \u201eSystem Volume Information\u201d loodud objektid \u201eInstall.exe\u201d ja \u201eP\u00f5hik\u00fcsimused.rtf\u201d. Seega v\u00f5ib j\u00e4reldada, et kaust \u201eSystem Volume Information\u201d sisaldab loetelu \u0161ifreeritud objektidest eemaldataval andmekandjal.<\/p>\n

\"KIB
\nJoonis 5 \u2013 kaust \u201eSystem Volume Information\u201d<\/i><\/p>\n

\"KIB
\nJoonis 6 \u2013 Eemaldatava andmekandja juurkaust<\/i><\/p>\n

On teada, et informatsiooni turvalisus p\u00f5hineb kolmel aspektist: terviklikkus, k\u00e4ttesaadavus ja konfidentsiaalsus. Need aspektid on selle kr\u00fcpteerimismeetodi kasutamisel ohustatud, kuna s\u00fcsteemi teave selle kohta, kas objekt on kr\u00fcpteeritud v\u00f5i mitte, peab olema objekti p\u00e4ises. <\/p>\n

Algos\u00fcsteemi praeguse \u00fclesehituse korral v\u00f5ivad juhtuda juhuslikud modifikatsioonid\/edasised kustutamised objektide kaustas 'System Volume Information' eemaldataval meedial, sealhulgas l\u00e4hteandmete kr\u00fcpteeritud objektide kaotamine ning objektide muutmine kontrollimatutes jaamades (n\u00e4iteks: objekti 'Install.exe' nimetamine \u00fcmber v\u00f5rgu teel 'E:Install.exe' arvutis, kus ei ole agenti, samas kui KIB S\u00f6rchinformi tarkvaratooted ocasiifail kaustas 'System Volume Information' 'Install.exe' v\u00f5rgu teel 'E:System Volume InformationInstall.exe' j\u00e4\u00e4b muutumatuks, kuna puudub agent, mis muudaks teenuse teavet, ja selle faili avamine muutub juba v\u00f5imatuks).<\/p>\n

Loodame, et arendaja v\u00f5tab arvesse selle funktsiooni kr\u00fcptimise puuduseid KIB SEARCHINFORMis ja muudab selle algoritmi.
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0441\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0446\u0438\u0440\u043a\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0437\u0430\u0434\u0430\u0447 \u043f\u0440\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u043e-\u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 (\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u044b\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u043d\u0438\u0436\u043d\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u0435\u0439) \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (Data Leak Prevention, DLP) \u0432 \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041d\u0430 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u043c \u0440\u044b\u043d\u043a\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a: […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30167","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kritilise vea anal\u00fc\u00fcs KIB SEARCHINFORM kr\u00fcptimisalgoritmis | ProHoster","description":"Informatsiooni kontrollimine, mis ringleb organisatsioonis, on \u00fcks peamisi \u00fclesandeid organisatsiooniliste ja korralduslike dokumentide praktilisel rakendamisel (informatsiooniturtree poliitika ja muud madalamate tasandite sisepinged). Saladuste, mis voolavad infotehnoloogilisest s\u00fcsteemist (Data Leak Prevention, DLP), s\u00fcsteemid suudavad suurem osa neist probleemidest lahendada. Praegusel turul on piisavalt erinevaid selliseid s\u00fcsteeme, n\u00e4iteks selliseid nagu:","canonical_url":"https:\/\/prohoster.info\/et\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0437\u0431\u043e\u0440 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u041a\u0418\u0411 SEARCHINFORM | ProHoster","og:description":"\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0441\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0446\u0438\u0440\u043a\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0437\u0430\u0434\u0430\u0447 \u043f\u0440\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u043e-\u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 (\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u044b\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u043d\u0438\u0436\u043d\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u0435\u0439) \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (Data Leak Prevention, DLP) \u0432 \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041d\u0430 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u043c \u0440\u044b\u043d\u043a\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a:","og:url":"https:\/\/prohoster.info\/et\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:33:58+00:00","article:modified_time":"2019-10-31T18:33:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30167","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-20 23:59:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:40:41","updated":"2026-01-20 23:59:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=30167"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30167\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=30167"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=30167"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=30167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}