{"id":30167,"date":"2019-10-31T21:33:58","date_gmt":"2019-10-31T18:33:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform\/"},"modified":"2019-10-31T21:33:58","modified_gmt":"2019-10-31T18:33:58","slug":"razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","title":{"rendered":"Kriitilise vea anal\u00fc\u00fcs KIB SEARCHINFORM'i kr\u00fcptimisalgoritmides","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Organisatsiooni sees ringluses oleva kogu teabe kontrollimine on \u00fcks peamisi \u00fclesandeid organisatsioonilise ja juhtimisdokumendi (info kaitse poliitika ja muud madalama taseme sisemised dokumendid) praktilisel rakendamisel.
\nSalajase teabe lekkimise ennetamise s\u00fcsteemid (Data Leak Prevention, DLP) suudavad suurel m\u00e4\u00e4ral lahendada seda probleemi.
\n<\/a><\/noindex>
\nT\u00e4nap\u00e4eva turul on piisavalt erinevaid selliseid s\u00fcsteeme, n\u00e4iteks: SearchInform DLP, Infowatch Traffic Monitor DLP, Zecurion DLP, Symantec DLP ja teised. Kuid t\u00e4nases artiklis keskendume O\u00dc \u201e\u0421\u0451\u0440\u0447\u0418\u043d\u0444\u043e\u0440\u043c\u201c tootele.<\/p>\n

SearchInformi info kaitse kontuur (\u041a\u0418\u0411 \u0421\u0451\u0440\u0447\u0438\u043d\u0444\u043e\u0440\u043c) on t\u00f5sine ja paindlik programmikompleks, mis oma funktsionaalsuse ja ulatuslike anal\u00fc\u00fctiliste t\u00f6\u00f6riistadega loob t\u00f5sise konkurentsi teistele ettev\u00f5tetele selles valdkonnas. Kuid nagu k\u00f5ikidel toodetel, on ka \u041a\u0418\u0411 \u0421\u0451\u0440\u0447\u0438\u043d\u0444\u043e\u0440\u043cil m\u00f5ned puudused, millest n\u00fc\u00fcd juttu tuleb.<\/p>\n

\"Kriitilise
\n
\nJoonis 1 \u2013 \u041a\u0418\u0411 \u0421\u0451\u0440\u0447\u0438\u043d\u0444\u043e\u0440\u043c logo<\/i><\/p>\n

\u041a\u0418\u0411 \u0421\u0451\u0440\u0447\u0438\u043dformis on \u00fcheks teabe kogumise allikaks agent (Windows\/Linux). Windowsi ja Linuxi OS-i agent has modulaarse teabe kogumise s\u00fcsteemi, mida saab vajadusel sisse ja v\u00e4lja l\u00fclitada. K\u00e4sitleme seadmoodulit (kontroll v\u00e4lisseadmete, v\u00f5rgu seadmete, protsesside jne). Toote demo versiooni saab ametlikult v\u00e4lja j\u00e4tta arendaja veebisaidilt (t\u00e4ie toimimisega). Edasised toimingud viiakse l\u00e4bi saadud litsentsiv\u00f5ti abil \u2014 programmiversiooni EndPointController 5.51.0.9 (agendi versioon 5.51.0.9).<\/p>\n

K\u00e4esoleva mooduli peamine probleem on teabe kr\u00fcpteerimise algoritm v\u00e4listes eemaldatavatest seadmetest. Vaatleme kr\u00fcpteerimise algoritmi toimimise p\u00f5him\u00f5tteid \u041a\u0418\u0411 \u0421\u0451\u0440\u0447\u0438\u043d\u0444\u043e\u0440\u043cis.<\/p>\n

Paigaldame agendi t\u00f6\u00f6jaama ja seadistame t\u00f6\u00f6ks v\u00e4lisseadmete kontrolli (seadmoodul) EndPointController 5.51.0.9 jaotises \u201eV\u00f5rgukeskkond\u201d.<\/p>\n

\"Kriitilise
\nJoonis 2 \u2013 Mooduli paigaldamine ja lubamine<\/i><\/p>\n

Teeme seadistusi kr\u00fcpteerimise osas seadmooduli seadetes vahekaart 'Kr\u00fcpteerimine': genereerime v\u00f5tme ja lubame kr\u00fcpteerimise k\u00f5igi andmekandjate jaoks (v\u00f5imalik on lubada kr\u00fcpteerimine ainult teatud teabeside kandjatele).<\/p>\n

\"Kriitilise
\nJoonis 3 \u2013 Valge nimekirja seadistamine<\/i><\/p>\n

\"Kriitilise
\nJoonis 4 \u2013 Kr\u00fcptimise konfiguratsioon<\/i><\/p>\n

J\u00e4tkame selle tootega failide kr\u00fcptimise algoritmi anal\u00fc\u00fcsimisega. Kopeerime failid \u00abInstall.exe\u00bb ja \u00ab\u00d5iguse alused.rtf\u00bb kontrollitud t\u00f6\u00f6kohast \u00abWINOC\u00bb v\u00e4listesse m\u00e4luseadmetesse \u00abRemovable Disk (E:)\u00bb. Nagu on n\u00e4ha jooniselt 5, tekkisid peidetud kaustas \u00abSystem Volume Information\u00bb objektid \u00abInstall.exe\u00bb ja \u00ab\u00d5iguse alused.rtf\u00bb. Seega v\u00f5ib j\u00e4reldada, et kaust \u00abSystem Volume Information\u00bb sisaldab nimekirja m\u00e4luseadmest kr\u00fcptitud objektidest.<\/p>\n

\"Kriitilise
\nJoonis 5 \u2013 kaust \u00abSystem Volume Information\u00bb<\/i><\/p>\n

\"Kriitilise
\nJoonis 6 \u2013 V\u00e4list m\u00e4luseadmest info juurkaust<\/i><\/p>\n

Nagu teada, on informatsiooni turvalisuse kolm aspekti: terviklikkus, k\u00e4ttesaadavus ja konfidentsiaalsus. Need aspektid on antud kr\u00fcptimise l\u00e4henemise t\u00f5ttu ohustatud, kuna s\u00fcsteemi teave, kas objekt on kr\u00fcptitud v\u00f5i mitte, peaks asuma objekti pealkirjas. <\/p>\n

Praeguse algoritmi \u00fclesehituse korral on v\u00f5imalikud juhusliku modifitseerimise\/kaotamise variandid kaustas \u00abSystem Volume Information\u00bb m\u00e4luseadmest koos edasise kr\u00fcptitud objektide kaotamisega, samuti objekti enda modifitseerimine kontrollimatutes t\u00f6\u00f6tasjades (n\u00e4iteks: objekti \u00abInstall.exe\u00bb \u00fcmbernimetamine, mille v\u00f5rgutee on \u00abE:\\Install.exe\u00bb arvutis, kus agent puudub, samas j\u00e4\u00e4b informatsiooniline fail programmtoote KIB SEARCHINFORM kaustas \u00abSystem Volume Information\u00bb \u00abInstall.exe\u00bb v\u00f5rguteega \u00abE:\\System Volume Information\\Install.exe\u00bb muutumatuks, kuna puudub agent, kes muudaks teenuse teavet, ning antud faili avamine muutub v\u00f5imatuks).<\/p>\n

Loodame, et arendaja v\u00f5tab arvesse antud funktsiooni kr\u00fcptimise puuduse m\u00e4luseadmete info t\u00f6\u00f6tlemisel tootest KIB SEARCHINFORM ja muudab selle algoritmi.
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0441\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0446\u0438\u0440\u043a\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0437\u0430\u0434\u0430\u0447 \u043f\u0440\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u043e-\u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 (\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u044b\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u043d\u0438\u0436\u043d\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u0435\u0439) \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (Data Leak Prevention, DLP) \u0432 \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041d\u0430 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u043c \u0440\u044b\u043d\u043a\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a: […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30167","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kriitilise vea anal\u00fc\u00fcs KIB SEARCHINFORM kr\u00fcptimise algoritmis | ProHoster","description":"Kogu organisatsioonis liikuvate andmete kontrollimine on \u00fcks peamisi \u00fclesandeid organisatsiooni dokumendi (info turvalisuse poliitika ja muud sisemised) praktilisel rakendamisel.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0437\u0431\u043e\u0440 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u041a\u0418\u0411 SEARCHINFORM | ProHoster","og:description":"\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0441\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0446\u0438\u0440\u043a\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0437\u0430\u0434\u0430\u0447 \u043f\u0440\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u043e-\u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 (\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u044b\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435.","og:url":"https:\/\/prohoster.info\/et\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:33:58+00:00","article:modified_time":"2019-10-31T18:33:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30167","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-20 23:59:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:40:41","updated":"2026-01-20 23:59:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=30167"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30167\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=30167"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=30167"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=30167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}