{"id":35582,"date":"2019-10-31T22:05:11","date_gmt":"2019-10-31T19:05:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya\/"},"modified":"2019-10-31T22:05:11","modified_gmt":"2019-10-31T19:05:11","slug":"periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","title":{"rendered":"Perioodiline paroolide vahetus on vananenud praktika, aeg on sellest loobuda","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Paljuski IT-s\u00fcsteemides on kehtinud n\u00f5ue perioodiliselt salas\u00f5nu vahetada. See on v\u00f5ib-olla k\u00f5ige vihatud ja k\u00f5ige m\u00f5ttetum n\u00f5ue s\u00fcsteemide turvalisuses. M\u00f5ned kasutajad muudavad l\u00f5pus lihtsalt arvu, et selles olukorras hakkama saada.<\/p>\n

Seda praktikat on saatnud palju ebamugavusi. Siiski pidid inimesed seda taluma, sest see oli turvalisuse t\u00f5ttu.<\/i>N\u00fc\u00fcd on see n\u00f5uanne t\u00e4iesti aegunud. Mai 2019. aastal eemaldas isegi Microsoft l\u00f5puks perioodiliste salas\u00f5nade vahetamise n\u00f5ude Windows 10 isikliku ja serveriversiooni turvan\u00f5uete p\u00f5hin\u00f5uetest: siin on ametlik avaldus blogis<\/a><\/noindex> Windows 10 v 1903 muudatuste nimekirja kohta (kiirelt m\u00e4rgime, et seal on \u00f6eldud Saalas\u00f5na aegumisreeglite eemaldamine, mis n\u00f5uab perioodilisi salas\u00f5nade muutmisi<\/i>). Endised reeglid ja s\u00fcsteemipoliitikad Windows 10 versioon 1903 ja Windows Server 2019 turvapoliitika<\/i> on lisatud komplekti Microsofti turvaseadmete kohandamise komplekt 1.0<\/a><\/noindex>.<\/p>\n

V\u00f5ite need dokumendid oma \u00fclemusele n\u00e4idata ja \u00f6elda: ajad on muutunud. Kohustuslik salas\u00f5na vahetamine on arhailine, peaaegu ametlikult. Isegi turbeauditi k\u00e4igus ei kontrollita enam seda n\u00f5uet (kui see p\u00f5hineb Windowsi arvutite p\u00f5hikaitse ametlikel reeglitel).
\n<\/a><\/noindex>
\n\"Perioodiline
\nFragment nimekirjast, kus on Windows 10 v1809 p\u00f5hipoliitikad ja muudatused 1903, kus vastavad poliitikad salas\u00f5nade aegumise kohta enam ei kehti. Muide, uues versioonis ka t\u00fchistatakse vaikimisi administraatori ja k\u00fclaliskontod.<\/i><\/p>\n

Microsoft selgitab oma blogis lihtsasti, miks ta loobus kohustuslikest salas\u00f5na vahetamise reeglitest: \"Perioodiline salas\u00f5na aegumine kaitseb ainult juhtumite vastu, kui salas\u00f5na (v\u00f5i selle hashing) varastatakse selle kehtivuse perioodil ja seda kasutatakse volitamata isiku poolt. Kui salas\u00f5na ei ole varastatud, pole selle vahetamine m\u00f5ttekas. Ja kui teil on t\u00f5endeid selle kohta, et salas\u00f5na on varastatud, tahate selgelt kohe tegutseda, mitte oodata selle aegumist, et probleemi lahendada.\"<\/p>\n

Edasi Microsoft selgitab, et t\u00e4nap\u00e4eva tingimustes on vale kaitsta end paroolivarguste eest sellise meetodiga: \u201eKui on teada, et parool t\u00f5en\u00e4oliselt varastatakse, kui palju p\u00e4eva on vastuv\u00f5etav ajavahemik, et lubada varas kasutama seda varastatud parooli? Vaikimisi on see 42 p\u00e4eva. Kas see ei tundu naljakalt pikk aeg? Tegelikult on see v\u00e4ga pikk, ja ometi on meie praegune p\u00f5hin\u00e4itaja seadistatud 60 p\u00e4eva peale \u2014 varem oli see 90 p\u00e4eva \u2014 kuna sagedase aegumise sundimine toob kaasa oma probleemid. Ja kui parool ei pea tingimata olema varastatud, siis teil on need probleemid ilma igasuguse kasuta. Lisaks, kui teie kasutajad on valmis vahetama parooli kommi vastu, ei aita \u00fckski paroolide aegumispoliitika.\u201d<\/p>\n

Alternatiiv<\/h1>\n

\nMicrosoft kirjutab, et nende p\u00f5hilised turvapoliitikad on ette n\u00e4htud h\u00e4sti hallatavate, turvalisusest hoolivate ettev\u00f5tete kasutamiseks. Need on samuti m\u00f5eldud olema juhiseks auditeerijatele. Kui selline organisatsioon on rakendanud paroolide loetelu jaotust, mitme teguri autentimist, paroolide bruteforce'i r\u00fcnnakute tuvastamist ja anomaalsete sisselogimiskatsete tuvastamist, kas on siis vajalik perioodiline parooli aegumine? Ja kui nad ei ole rakendanud kaasaegseid kaitsemeetmeid, kas aitab neile parooli aegumine?<\/p>\n

Microsofti loogika on \u00fcllatavalt veenev. Meil on kaks valikut:<\/p>\n

    \n
  1. Ettev\u00f5te on rakendanud kaasaegsed kaitsemeetmed.\n<\/li>\n
  2. Ettev\u00f5te ei<\/i> rakendas kaasaegseid kaitsemeetmeid.<\/li>\n<\/ol>\n

    \nEsimesel juhul ei too parooli perioodiline vahetus t\u00e4iendavaid eeliseid.<\/p>\n

    Teisel juhul on parooli perioodiline vahetus kasutuks.<\/p>\n

    Seega tuleks parooli aegumise asemel eelistada ennek\u00f5ike mitme teguri autentimist<\/b>. Lisakaitsemeetmed on loetletud \u00fclal: paroolide loetelu jaotused, bruteforce'i tuvastamine ja muud anomaalsed sisselogimiskatsed.<\/p>\n

    \u00abParooli perioodiline aegumine on ammu ja aegunud kaitsemeetod.<\/i>, \u2014 toob kokku Microsoft, \u2014 ja me ei arva, et meie baaskaitse taseme jaoks on m\u00f5istlik rakendada mingit konkreetset v\u00e4\u00e4rtust. Selle eemaldamisel meie baastasemest saavad organisatsioonid valida, mis k\u00f5ige paremini vastab nende eeldatavatele vajadustele, j\u00e4\u00e4des samas meie soovitustega koosk\u00f5lla.<\/p>\n

    Kokkuv\u00f5te<\/h1>\n

    \nKui ettev\u00f5te sunnib t\u00e4na kasutajaid aeg-ajalt paroole vahetama, mida v\u00f5iks m\u00f5elda v\u00e4ljaspoolt vaatleja?<\/p>\n

      \n
    1. Antud:<\/b> ettev\u00f5te kasutab aegunud kaitsemehhanismi.\n<\/li>\n
    2. Eeldus:<\/b> ettev\u00f5te ei ole rakendanud kaasaegseid kaitsemehhanisme.\n<\/li>\n
    3. Kokkuv\u00f5te:<\/b> need paroolid on lihtsamini k\u00e4tte saadavad ja kasutatavad.<\/li>\n<\/ol>\n

      \nSelgub, et perioodiline paroolivahetus teeb ettev\u00f5tte r\u00fcnnakute sihtm\u00e4rgiks atraktiivsemaks.<\/p>\n

      \n\"Perioodiline
      \n<\/a><\/noindex>
      \n
      Allikas:       habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

      \u0412\u043e \u043c\u043d\u043e\u0433\u0438\u0445 IT-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u0435\u0439. \u042d\u0442\u043e, \u043f\u043e\u0436\u0430\u043b\u0443\u0439, \u0441\u0430\u043c\u043e\u0435 \u043d\u0435\u043d\u0430\u0432\u0438\u0441\u0442\u043d\u043e\u0435 \u0438 \u0441\u0430\u043c\u043e\u0435 \u0431\u0435\u0441\u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043b\u0430\u0439\u0444\u0445\u0430\u043a\u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u043c\u0435\u043d\u044f\u044e\u0442 \u0446\u0438\u0444\u0440\u0443 \u0432 \u043a\u043e\u043d\u0446\u0435. \u0422\u0430\u043a\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u0432\u044b\u0437\u044b\u0432\u0430\u043b\u0430 \u043c\u0430\u0441\u0441\u0443 \u043d\u0435\u0443\u0434\u043e\u0431\u0441\u0442\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u043b\u044e\u0434\u044f\u043c \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0442\u0435\u0440\u043f\u0435\u0442\u044c, \u0432\u0435\u0434\u044c \u044d\u0442\u043e \u0440\u0430\u0434\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0422\u0435\u043f\u0435\u0440\u044c \u044d\u0442\u043e\u0442 \u0441\u043e\u0432\u0435\u0442 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u043d\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u0435\u043d. \u0412 \u043c\u0430\u0435 2019 \u0433\u043e\u0434\u0430 \u0434\u0430\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35582","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Perioodiline paroolivahetus on vananenud praktika, on aeg sellest loobuda | ProHoster","description":"Paljudes IT-s\u00fcsteemides kehtib kohustuslik perioodilise paroolivahetuse reegel. See on ilmselt k\u00f5ige vihatud ja kasutu n\u00f5ue turvas\u00fcsteemides.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u043c\u0435\u043d\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u2014 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430, \u043f\u0440\u0438\u0448\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u0442 \u043d\u0435\u0451 \u043e\u0442\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f | ProHoster","og:description":"\u0412\u043e \u043c\u043d\u043e\u0433\u0438\u0445 IT-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u0435\u0439. \u042d\u0442\u043e, \u043f\u043e\u0436\u0430\u043b\u0443\u0439, \u0441\u0430\u043c\u043e\u0435 \u043d\u0435\u043d\u0430\u0432\u0438\u0441\u0442\u043d\u043e\u0435 \u0438 \u0441\u0430\u043c\u043e\u0435 \u0431\u0435\u0441\u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:05:11+00:00","article:modified_time":"2019-10-31T19:05:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35582","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 23:52:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:11:37","updated":"2026-01-21 23:52:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35582","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=35582"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35582\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=35582"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=35582"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=35582"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}