{"id":52599,"date":"2019-11-12T00:00:00","date_gmt":"2019-11-11T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam"},"modified":"2021-02-01T11:40:25","modified_gmt":"2021-02-01T09:40:25","slug":"privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","title":{"rendered":"Privileegide haldamine kui peamine \u00fclesanne teabe turbe vallas (n\u00e4ide Fudo PAM-ist)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Privileegide haldamine kui peamine \u00fclesanne teabe turbe vallas (n\u00e4ide Fudo PAM-ist)\" src=\"\/wp-content\/uploads\/2019\/11\/fe518ef5e33b7ebcaa08e5e5459d31b6.jpg\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>On \u00fcsna huvitav dokument <noindex><a rel=\"nofollow\" href=\"https:\/\/drive.google.com\/file\/d\/1qOT0XDf71JJ1lBZUZQSbpC4cJKwGqVzM\/view?usp=sharing\">CIS Controls<\/a><\/noindex>, mis k\u00e4sitleb infotehnoloogia turvalisust kasutades Pareto p\u00f5him\u00f5tet (80\/20). See p\u00f5him\u00f5te \u00fctleb, et 20% turvameetmetest toob 80% tulemusi ettev\u00f5tte kaitsetaseme osas. Selles dokumendis tutvuvad paljud 'turvaspetsialistid' sellega, et turvameetmete valimisel ei alusta nad k\u00f5ige efektiivsematest meetmetest. Dokumendis tuuakse v\u00e4lja 5 peamist kaitsemeetmeid, mis avaldavad suurimat m\u00f5ju infotehnoloogia turvalisusele:<\/p>\n<ol>\n<li><b>K\u00f5iki seadmeid v\u00f5rkus inventeerimine<\/b>. Raskused v\u00f5rgu kaitsmisel, kui ei teata, mis seal on.<\/li>\n<li><b>K\u00f5ikide tarkvarade inventeerimine<\/b>. Haavatavustega tarkvara on sageli r\u00fcndaja sissep\u00e4\u00e4supunkt.<\/li>\n<li><b>Turvaline konfiguratsioon<\/b> \u2014 v\u00f5i sisseehitatud turvafunktsioonide kohustuslik kasutamine tarkvaras v\u00f5i seadmetes. \u00dcldiselt \u2014 muutke vaikimisi paroole ja piirake ligip\u00e4\u00e4su.<\/li>\n<li><b>Haavatavuste otsimine ja k\u00f5rvaldamine<\/b>. Enamik r\u00fcnnakutest algab tuntud haavatavusest.<\/li>\n<li><b>Privileegitud ligip\u00e4\u00e4su haldamine<\/b>. Teie kasutajatel peaksid olema vaid t\u00f5eliselt vajalikud \u00f5igused ja nad peaksid sooritama ainult t\u00f5eliselt vajalikke toiminguid.<\/li>\n<\/ol>\n<p>Selle artikli raames vaatame just 5. punkti Fudo PAM kasutamise n\u00e4itel. <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/katalog\/fudo_security\">. T\u00e4psemalt anal\u00fc\u00fcsime t\u00fc\u00fcpilisi juhtumeid ja probleeme, mida suudame avastada p\u00e4rast Fudo PAM rakendamist v\u00f5i tasuta testimise k\u00e4igus.<\/a><\/noindex>Natuke s\u00f5nu lahenduse kohta. Fudo PAM on suhteliselt uus lahendus privileegitud ligip\u00e4\u00e4su haldamiseks. Peamised omadused:<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>. T\u00e4psemalt anal\u00fc\u00fcsime t\u00fc\u00fcpilisi juhtumeid ja probleeme, mida suudame avastada p\u00e4rast Fudo PAM rakendamist v\u00f5i tasuta testimise k\u00e4igus.<\/h3>\n<p>Seansside salvestamine<\/p>\n<ul>\n<li><b>. Seansside reaalajas vaatamine. \u00dchendamine seansiga. T\u00f5endusmaterjali loomine kohtumenetluse jaoks.<\/b>Proaktiivne j\u00e4lgimine<\/li>\n<li><b>. Paindlikud poliitikad. Otsing mallide j\u00e4rgi. Tegevuste automatiseerimine.<\/b>Ohteennustamine<\/li>\n<li><b>. Vale kasutamine kontode osas. Ohtude taseme hindamine. Ebanormaalsuste tuvastamine.<\/b>Vastutuse m\u00e4\u00e4ramine<\/li>\n<li><b>. Kui \u00fcks kasutajakonto on mitme kasutaja sisenemiseks.<\/b>T\u00f5hususe anal\u00fc\u00fcs<\/li>\n<li><b>. Erakasutajate, osakondade v\u00f5i tervete organisatsioonide kaupa.<\/b>T\u00e4pne ligip\u00e4\u00e4su kontroll<\/li>\n<li><b>. Liikluse piiramise ja ligip\u00e4\u00e4su seadistamine kasutajatele teatud ajavahemike jooksul.<\/b>Ja k\u00f5ige olulisem pluss \u2014 rakendatakse vaid paaritunnise jooksul, p\u00e4rast mida on s\u00fcsteem kasutamiseks valmis.<\/li>\n<\/ul>\n<p>Ja k\u00f5ige olulisem eelis on see, et see saab k\u00e4ivituda vaid m\u00f5ne tunni jooksul, mille j\u00e4rel on s\u00fcsteem kasutamiseks valmis.<\/p>\n<p>Need for those interested in the product, a webinar will take place with a detailed overview and demonstration of functionality. We will move on to the real issues that can be detected in pilot projects of privileged access management systems.<\/p>\n<h3>1. Network administrators regularly gain access to prohibited resources.<\/h3>\n<p>Strangely enough, the first incidents that are detected are violations from the administrators' side. Most often, it is the unauthorized alteration of access lists on network equipment. For example, to gain access to a prohibited website or application. It should be noted that such changes may remain in the equipment's configuration for years.<\/p>\n<h3>2. One account is used by multiple administrators.<\/h3>\n<p>Another common issue related to administrators. 'Sharing' a single account among colleagues is a frequent practice. Convenient, but it becomes rather difficult to determine who is responsible for a particular action afterward.<\/p>\n<h3>3. Remote employees work less than 2 hours a day.<\/h3>\n<p>Many companies have remote employees or partners who need access to internal resources (most often a remote desktop). Fudo PAM allows monitoring actual activity during such sessions. It is often discovered that remote employees work significantly less than stated.<\/p>\n<h3>4. The same password is used for multiple systems.<\/h3>\n<p>A rather serious problem. Remembering several passwords is always difficult, so users often use a single password for all systems. If such a password 'leaks', a potential attacker could gain access to almost the entire IT infrastructure.<\/p>\n<h3>5. Users have greater rights than expected.<\/h3>\n<p>It is often found that users with seemingly limited rights actually possess greater privileges than they should. For example, they can reboot the controlled device. Usually, this is either a mistake made while granting rights or simply shortcomings in the built-in rights management system.<\/p>\n<h3>Webinar<\/h3>\n<p>If you are interested in the topic of PAM, we invite you to the <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/events\/fudo_vebinar\"><b>upcoming webinar on Fudo PAM<\/b><\/a><\/noindex>, which will take place on November 21.<\/p>\n<p>See ei ole meie aastas viimane veebiseminar, mida me kavatseme korraldada, nii et j\u00e4lgige v\u00e4rskendusi (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">TS Solution Blog<\/a><\/noindex>)!<\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/471750\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 CIS Controls, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0430 \u041f\u0430\u0440\u0435\u0442\u043e (80\/20). \u042d\u0442\u043e\u0442 \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u0433\u043b\u0430\u0441\u0438\u0442, \u0447\u0442\u043e 20% \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0440 \u0434\u0430\u044e\u0442 80% \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430 \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u041e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0432\u0448\u0438\u0441\u044c \u0441 \u044d\u0442\u0438\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u043c\u043d\u043e\u0433\u0438\u0435 \u201c\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0438\u201d \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0438 \u0432\u044b\u0431\u043e\u0440\u0435 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0440 \u043e\u043d\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u043d\u0435 \u0441 \u0441\u0430\u043c\u044b\u0445 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043c\u0435\u0440. \u0412 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0432\u044b\u0434\u0435\u043b\u044f\u044e\u0442 5 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043c\u0435\u0440 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":52600,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-52599","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Privileged Access Management \u043a\u0430\u043a \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u0432 \u0418\u0411 (\u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 Fudo PAM) | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-11T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-02-01T09:40:25+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Eelis\u00f5igustega juurdep\u00e4\u00e4su haldamine kui prioriteetne \u00fclesanne infotehnoloogias (Fudo PAM n\u00e4itel) | ProHoster","description":"On p\u00e4ris palju.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Privileged Access Management \u043a\u0430\u043a \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u0432 \u0418\u0411 (\u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 Fudo PAM) | ProHoster","og:description":"\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-11T21:00:00+00:00","article:modified_time":"2021-02-01T09:40:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52599","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 04:11:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:40:27","updated":"2026-01-24 04:11:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/52599","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=52599"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/52599\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/52600"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=52599"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=52599"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=52599"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}