{"id":35582,"date":"2019-10-31T22:05:11","date_gmt":"2019-10-31T19:05:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya\/"},"modified":"2019-10-31T22:05:11","modified_gmt":"2019-10-31T19:05:11","slug":"periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","title":{"rendered":"Perioodiline paroolide vahetus on aegunud praktika, on aeg sellest loobuda","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Paljude IT-s\u00fcsteemide puhul kehtib kohustuslik reegel, et paroole tuleb perioodiliselt vahetada. See on t\u00f5en\u00e4oliselt k\u00f5ige vihatud ja k\u00f5ige m\u00f5ttetum julgeolekureegel. M\u00f5ned kasutajad muudavad lihtsalt l\u00f5pus numbrit, et asja lihtsustada.<\/p>\n

Selline praktika tekitas palju ebamugavusi. Siiski pidid inimesed taluma, sest see oli turvalisuse nimel<\/i>. N\u00fc\u00fcd on see n\u00f5uanne t\u00e4iesti aegunud. 2019. aasta mai seisuga t\u00fchistas isegi Microsoft l\u00f5puks perioodilise paroolivahetuse n\u00f5ude Windows 10 isiklikke ja serveriversioone puudutavast p\u00f5hin\u00f5uetest: siin on ametlik avaldus blogis<\/a><\/noindex> Windows 10 v 1903 muudatuste loetelu (pange t\u00e4hele fraasi T\u00fchistamine parooli kehtivusaja reeglitest, mis n\u00f5uavad perioodilisi paroolivahetusi<\/i>). Ise reeglid ja s\u00fcsteemipoliitikad Windows 10 versioon 1903 ja Windows Server 2019 turvabaaseline<\/i> on kaasatud komplekti Microsoft Security Compliance Toolkit 1.0<\/a><\/noindex>.<\/p>\n

V\u00f5ite need dokumendid \u00fclemusele n\u00e4idata ja \u00f6elda: ajad on muutunud. Kohustuslik paroolide muutmine on ajalooline arhaism, n\u00fc\u00fcd peaaegu ametlikult. Isegi turvaaruanded ei kontrolli enam seda n\u00f5uet (kui nad tuginevad ametlikele reeglitele Windowsi arvutite p\u00f5hikaitse osas).
\n<\/a><\/noindex>
\n\"Perioodiline
\nLoetelu fragment Windows 10 v1809 p\u00f5hipoliitikatest ja muudatustest versioonis 1903, kus vastavad paroolide kehtivuse poliitikad enam ei kehti. \u00dche t\u00e4helepanekuna kaotatakse uues versioonis vaikimisi ka administraatori ja k\u00fclaliskontod.<\/i><\/p>\n

Microsoft selgitab oma blogis populaarse keelekasutusega, miks nad loobusid kohustuslikest parooli muutmise reeglitest: \u201eParooli regulaarne aegumine kaitseb vaid t\u00f5en\u00e4osuse eest, et parool (v\u00f5i selle rike) varastatakse selle kehtivuse ajal ja seda kasutatakse volitamata isiku poolt. Kui parooli ei ole varastatud, pole m\u00f5tet seda vahetada. Kui teil on t\u00f5endeid selle kohta, et parool on varastatud, soovite t\u00f5en\u00e4oliselt kohe tegutseda, mitte oodata selle kehtivuse l\u00f5ppemist, et probleemi lahendada.\u201c<\/p>\n

Edasi Microsoft selgitab, et t\u00e4nap\u00e4eval on vale kaitsta end paroolivarguse eest sellise meetodiga: \"Kui on teada, et parool on t\u00f5en\u00e4oliselt varastatud, kui kaua on vastuv\u00f5etav aeg, et lubada varas kasutama seda varastatud parooli? Vaikimisi on see 42 p\u00e4eva. Kas see ei tundu ikkagi naeruv\u00e4\u00e4rselt pikana? T\u00f5esti, see on v\u00e4ga pikk, ja siiski on meie praegune p\u00f5hin\u00e4itaja seatud 60 p\u00e4evaks \u2014 varem oli see 90 p\u00e4eva \u2014 sest sagedase kehtivuse l\u00f5pu sunnid toovad kaasa oma probleemid. Ja kui parool ei pruugi tingimata olla varastatud, siis omandate need probleemid ilma kasu saamata. Lisaks, kui teie kasutajad on valmis oma parooli maiuse nimel vahetama, ei aita \u00fckski paroolide aegumise poliitika.\"<\/p>\n

Alternatiiv<\/h1>\n

\nMicrosoft \u00fctleb, et nende p\u00f5hilised turvapoliitikad on m\u00f5eldud h\u00e4sti hallatavatele, turvalisust hindavatele ettev\u00f5tetele. Need on samuti m\u00f5eldud juhistena audiitoritele. Kui selline organisatsioon on rakendanud keelatud paroolide loendit, mitmeastmelist autentimist, paroolide brute-force r\u00fcnnakute tuvastamise ja anomaalsete sisselogimiskatsete tuvastamise, kas on vajalik parooli aegumine? Ja kui nad ei ole rakendanud kaasaegseid kaitsemeetmeid, kas aitab neil parooli aegumine?<\/p>\n

Microsofti loogika on \u00fcllatavalt veenev. Meil on kaks varianti:<\/p>\n

    \n
  1. Organisatsioon on rakendanud kaasaegseid kaitsemeetmeid.\n<\/li>\n
  2. Ettev\u00f5te ei<\/i> rakendanud kaasaegseid kaitsemeetmeid.<\/li>\n<\/ol>\n

    \nEsimesel juhul ei too parooli regulaarne vahetamine kaasa t\u00e4iendavaid eeliseid.<\/p>\n

    Teisel juhul on parooli regulaarne vahetamine kasutu.<\/p>\n

    Seega tuleks parooli aegumise asemel kasutada peamiselt mitmeastmelist autentimist<\/b>. T\u00e4iendavad kaitsemeetmed on loetletud eespool: keelatud paroolide loendid, brute-force tuvastamine ja muud anomaalsed sisselogimiskatsed.<\/p>\n

    \u00abAeg-ajalt paroolide kehtivuse l\u00f5ppemine on vana ja aegunud kaitsemeede<\/i>, \u2014 v\u00f5tab Microsoft kokku, \u2014 ja me ei pea vajalikuks rakendada mingit kindlat v\u00e4\u00e4rtust meie p\u00f5hikaitse tasemel. Eemaldades selle oma p\u00f5hitasemelt, saavad organisatsioonid valida, mis k\u00f5ige paremini vastab nende eeldatavatele vajadustele, j\u00e4rgides samas meie soovitusi.<\/p>\n

    Kokkuv\u00f5te<\/h1>\n

    \nMida v\u00f5iks kolmas osaline m\u00f5elda, kui ettev\u00f5te sunnib kasutajaid t\u00e4na regulaarselt paroole vahetama?<\/p>\n

      \n
    1. Antud:<\/b> ettev\u00f5te kasutab arhailist kaitsemehhanismi.\n<\/li>\n
    2. Oletus:<\/b> ettev\u00f5te ei ole rakendanud kaasaegseid kaitsemehhanisme.\n<\/li>\n
    3. V\u00e4ljund:<\/b> need paroolid on lihtsamad haarata ja kasutada.<\/li>\n<\/ol>\n

      \nSeega muudab paroolide regulaarne vahetamine ettev\u00f5tte r\u00fcndamiseks atraktiivsemaks sihtm\u00e4rgiks.<\/p>\n

      \n\"Perioodiline
      \n<\/a><\/noindex>
      \n
      Allikas:       habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

      \u0412\u043e \u043c\u043d\u043e\u0433\u0438\u0445 IT-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u0435\u0439. \u042d\u0442\u043e, \u043f\u043e\u0436\u0430\u043b\u0443\u0439, \u0441\u0430\u043c\u043e\u0435 \u043d\u0435\u043d\u0430\u0432\u0438\u0441\u0442\u043d\u043e\u0435 \u0438 \u0441\u0430\u043c\u043e\u0435 \u0431\u0435\u0441\u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043b\u0430\u0439\u0444\u0445\u0430\u043a\u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u043c\u0435\u043d\u044f\u044e\u0442 \u0446\u0438\u0444\u0440\u0443 \u0432 \u043a\u043e\u043d\u0446\u0435. \u0422\u0430\u043a\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u0432\u044b\u0437\u044b\u0432\u0430\u043b\u0430 \u043c\u0430\u0441\u0441\u0443 \u043d\u0435\u0443\u0434\u043e\u0431\u0441\u0442\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u043b\u044e\u0434\u044f\u043c \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0442\u0435\u0440\u043f\u0435\u0442\u044c, \u0432\u0435\u0434\u044c \u044d\u0442\u043e \u0440\u0430\u0434\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0422\u0435\u043f\u0435\u0440\u044c \u044d\u0442\u043e\u0442 \u0441\u043e\u0432\u0435\u0442 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u043d\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u0435\u043d. \u0412 \u043c\u0430\u0435 2019 \u0433\u043e\u0434\u0430 \u0434\u0430\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35582","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Salas\u00f5nade regulaarne vahetamine on aegunud praktika, aeg on sellest loobuda | ProHoster","description":"Paljuski IT-s\u00fcsteemides on kohustuslik regulaarselt salas\u00f5nu vahetada. See on ilmselt k\u00f5ige vihatud ja kasutu turvavaade. M\u00f5ned kasutajad muudavad lihtsalt l\u00f5pus oleva numbri, et elu lihtsamaks teha. Selline praktika on p\u00f5hjustanud palju ebamugavusi. Siiski pidid inimesed selle \u00fcle elama, kuna see oli seotud turvalisusega. N\u00fc\u00fcd on see soovitus t\u00e4iesti aegunud. 2019. aasta mais esitles isegi Microsoft","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u043c\u0435\u043d\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u2014 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430, \u043f\u0440\u0438\u0448\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u0442 \u043d\u0435\u0451 \u043e\u0442\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f | ProHoster","og:description":"\u0412\u043e \u043c\u043d\u043e\u0433\u0438\u0445 IT-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u0435\u0439. \u042d\u0442\u043e, \u043f\u043e\u0436\u0430\u043b\u0443\u0439, \u0441\u0430\u043c\u043e\u0435 \u043d\u0435\u043d\u0430\u0432\u0438\u0441\u0442\u043d\u043e\u0435 \u0438 \u0441\u0430\u043c\u043e\u0435 \u0431\u0435\u0441\u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043b\u0430\u0439\u0444\u0445\u0430\u043a\u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u043c\u0435\u043d\u044f\u044e\u0442 \u0446\u0438\u0444\u0440\u0443 \u0432 \u043a\u043e\u043d\u0446\u0435. \u0422\u0430\u043a\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u0432\u044b\u0437\u044b\u0432\u0430\u043b\u0430 \u043c\u0430\u0441\u0441\u0443 \u043d\u0435\u0443\u0434\u043e\u0431\u0441\u0442\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u043b\u044e\u0434\u044f\u043c \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0442\u0435\u0440\u043f\u0435\u0442\u044c, \u0432\u0435\u0434\u044c \u044d\u0442\u043e \u0440\u0430\u0434\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0422\u0435\u043f\u0435\u0440\u044c \u044d\u0442\u043e\u0442 \u0441\u043e\u0432\u0435\u0442 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u043d\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u0435\u043d. \u0412 \u043c\u0430\u0435 2019 \u0433\u043e\u0434\u0430 \u0434\u0430\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:05:11+00:00","article:modified_time":"2019-10-31T19:05:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35582","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 23:52:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:11:37","updated":"2026-01-21 23:52:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35582","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=35582"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35582\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=35582"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=35582"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=35582"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}