{"id":30167,"date":"2019-10-31T21:33:58","date_gmt":"2019-10-31T18:33:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform\/"},"modified":"2019-10-31T21:33:58","modified_gmt":"2019-10-31T18:33:58","slug":"razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","title":{"rendered":"Analiza kriti\u010dne gre\u0161ke u algoritmu rada enkripcije KIB SEARCHINFORM","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kontrola svih informacija koje cirkuliraju unutar organizacije jedan je od glavnih zadataka prilikom prakti\u010dne implementacije organizacijsko-pravnih dokumenata (politika sigurnosti informacija i drugi unutarnji dokumenti ni\u017eih razina) organizacije.
\nSistemi za sprje\u010davanje curenja povjerljivih informacija iz informati\u010dkog sustava (Data Leak Prevention, DLP) u ve\u0107ini slu\u010dajeva sposobni su rije\u0161iti ovaj problem.
\n<\/a><\/noindex>
\nNa suvremenom tr\u017ei\u0161tu postoji dovoljno raznovrsnosti tih sustava, poput: SearchInform DLP, Infowatch Traffic Monitor DLP, Zecurion DLP, Symantec DLP i drugih. No, danas \u0107e ovaj \u010dlanak govoriti o proizvodu tvrtke LLC \"SearchInform\".<\/p>\n

Informacijska sigurnost SearchInform (KIB S\u00ebrchinform) je ozbiljan i fleksibilno prilagodljiv softverski sustav koji po svom funkcionalnosti i \u0161irokoj analiti\u010dkoj opremi stvara ozbiljnu konkurenciju drugim kompanijama u ovom podru\u010dju. No, kao i kod svih proizvoda, KIB S\u00ebrchinform ima jedan od nedostataka, o kojem \u0107e se sada govoriti.<\/p>\n

\"Analiza
\n
\nSlika 1 \u2013 Logo KIB S\u00ebrchinform<\/i><\/p>\n

U KIB S\u00ebrchinform jedan od izvora prikupljanja informacija je agent (Windows\/Linux). Agent za operacijski sustav Windows, kao i za operacijski sustav Linux, ima modularni sustav prikupljanja informacija, koji se prema potrebi uklju\u010duje ili isklju\u010duje. Razmotrit \u0107emo modul Device (kontrola vanjskih ure\u0111aja, mre\u017enih ure\u0111aja, procesa itd.). Demo verziju ovog proizvoda mo\u017ee se dobiti slu\u017ebeno preko web stranice razvija\u010da (s punom funkcionalno\u0161\u0107u). Daljnje radnje bit \u0107e realizirane putem dobivenog klju\u010da licencije \u2014 verzija programa EndPointController 5.51.0.9 (verzija agenta 5.51.0.9).<\/p>\n

Glavni problem u radu ovog modula je algoritam enkripcije informacija na vanjskim prenosnim ure\u0111ajima. Razmotrit \u0107emo princip rada algoritma enkripcije u KIB S\u00ebrchinform.<\/p>\n

Instaliramo agenta na radnu stanicu i postavljamo za radnu kontrolu vanjskih ure\u0111aja (modul Device) u odjeljku 'Mre\u017eno okru\u017eenje' EndPointController 5.51.0.9<\/p>\n

\"Analiza
\nSlika 2 \u2013 Instalacija i aktiviranje modula<\/i><\/p>\n

Vr\u0161i se konfiguracija enkripcije u postavkama modula Device na kartici 'Enkripcija': generiramo klju\u010d i uklju\u010dujemo enkripciju za sve medije (mogu\u0107e je uklju\u010diti enkripciju samo za odre\u0111ene medije informacija).<\/p>\n

\"Analiza
\nSlika 3 \u2013 Postavljanje bijelog popisa<\/i><\/p>\n

\"Analiza
\nSlika 4 \u2013 Konfiguracija \u0161ifriranja<\/i><\/p>\n

Sada se bavimo analizom algoritma za \u0161ifriranje datoteka ovim proizvodom. Kopiramo datoteke \u00abInstall.exe\u00bb i \u00abOsnove prava.rtf\u00bb s kontrolirane radne stanice \u00abWINOC\u00bb na vanjski prenosni ure\u0111aj \u00abPrijenosni disk (E:)\u00bb. Kako se mo\u017ee vidjeti na slici 5, u skrivenoj mapi \u00abSystem Volume Information\u00bb stvoreni su objekti \u00abInstall.exe\u00bb i \u00abOsnove prava.rtf\u00bb. Tako se mo\u017ee zaklju\u010diti da mapa \u00abSystem Volume Information\u00bb sadr\u017ei popis \u0161ifriranih objekata na prenosnom ure\u0111aju.<\/p>\n

\"Analiza
\nSlika 5 \u2013 mapa \u00abSystem Volume Information\u00bb<\/i><\/p>\n

\"Analiza
\nSlika 6 \u2013 Korijenska mapa prenosnog ure\u0111aja informacija<\/i><\/p>\n

Kako je poznato, postoje tri aspekta na kojima se temelji informati\u010dka sigurnost \u2013 to su cjelovitost, dostupnost i povjerljivost. Ovi aspekti se kr\u0161e kori\u0161tenjem ovog pristupa \u0161ifriranju, jer informacija da li je objekt \u0161ifriran ili nije mora biti u samom zaglavlju objekta. <\/p>\n

Pri trenutnoj izgradnji algoritma mogu\u0107e su opcije slu\u010dajne modifikacije\/brisanja objekata mape \u00abSystem Volume Information\u00bb na prenosnom ure\u0111aju s daljnjim gubitkom izvornih \u0161ifriranih objekata, kao i modifikacija samih objekata na nekontroliranim stanicama (na primjer: preimenovanje objekta \u00abInstall.exe\u00bb s mre\u017enom putanjom \u00abE:Install.exe\u00bb na ra\u010dunalu bez agenta, pri \u010demu informacijska datoteka programa KIB Searchinform u mapi \u00abSystem Volume Information\u00bb \u00abInstall.exe\u00bb s mre\u017enom putanjom \u00abE:System Volume InformationInstall.exe\u00bb ostaje neizmijenjena, jer agenta koji bi promijenio servisne informacije nema, a otvaranje ove datoteke ve\u0107 postaje nemogu\u0107e).<\/p>\n

Nadamo se da \u0107e razvojnica uzeti u obzir ovaj nedostatak u radu funkcije \u0161ifriranja prenosnih ure\u0111aja informacija u proizvodu KIB Searchinform i promijeniti njegov algoritam.
\n
Izvor: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0441\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0446\u0438\u0440\u043a\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0437\u0430\u0434\u0430\u0447 \u043f\u0440\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u043e-\u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 (\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u044b\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u043d\u0438\u0436\u043d\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u0435\u0439) \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (Data Leak Prevention, DLP) \u0432 \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041d\u0430 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u043c \u0440\u044b\u043d\u043a\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a: […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30167","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Analiza kriti\u010dne pogre\u0161ke u algoritmu \u0161ifriranja KIB SEARCHINFORM | ProHoster","description":"Kontrola svih informacija koje cirkuliraju u organizaciji jedna je od glavnih zada\u0107a pri prakti\u010dnoj realizaciji organizacijsko-upravnih dokumenata (politika informacijske sigurnosti i drugi unutarnji).","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0437\u0431\u043e\u0440 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u041a\u0418\u0411 SEARCHINFORM | ProHoster","og:description":"\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0441\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0446\u0438\u0440\u043a\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0437\u0430\u0434\u0430\u0447 \u043f\u0440\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u043e-\u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 (\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u044b\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435.","og:url":"https:\/\/prohoster.info\/hr\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:33:58+00:00","article:modified_time":"2019-10-31T18:33:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30167","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-20 23:59:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:40:41","updated":"2026-01-20 23:59:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/30167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=30167"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/30167\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=30167"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=30167"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=30167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}