{"id":52599,"date":"2019-11-12T00:00:00","date_gmt":"2019-11-11T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam"},"modified":"2021-02-01T11:40:25","modified_gmt":"2021-02-01T09:40:25","slug":"privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","title":{"rendered":"Upravljanje privilegiranim pristupom kao prioritetni zadatak u informati\u010dkoj sigurnosti (na primjeru Fudo PAM)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Upravljanje privilegiranim pristupom kao prioritetni zadatak u informati\u010dkoj sigurnosti (na primjeru Fudo PAM)\" src=\"\/wp-content\/uploads\/2019\/11\/fe518ef5e33b7ebcaa08e5e5459d31b6.jpg\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Postoji prili\u010dno zanimljiv dokument <noindex><a rel=\"nofollow\" href=\"https:\/\/drive.google.com\/file\/d\/1qOT0XDf71JJ1lBZUZQSbpC4cJKwGqVzM\/view?usp=sharing\">CIS Kontrole<\/a><\/noindex>, koji razmatra Informacijsku sigurnost primjenom Pareto principa (80\/20). Ovaj princip govori da 20% za\u0161titnih mjera daje 80% rezultata u pogledu sigurnosti kompanije. Upoznavanjem s ovim dokumentom mnogi 'bezbjednjaci' otkrivaju da pri izboru za\u0161titnih mjera \u010desto ne zapo\u010dinju s najefikasnijim mjerama. Dokument isti\u010de 5 klju\u010dnih mjera za\u0161tite koje imaju najve\u0107i u\u010dinak na IS:<\/p>\n<ol>\n<li><b>Inventarizacija svih ure\u0111aja u mre\u017ei<\/b>. Te\u0161ko je za\u0161tititi mre\u017eu kada ne znate \u0161to se u njoj nalazi.<\/li>\n<li><b>Inventarizacija softvera<\/b>. Softver s ranjivostima \u010desto postaje ulazna ta\u010dka za hakere.<\/li>\n<li><b>Sigurna konfiguracija<\/b> \u2014 ili obavezna upotreba ugra\u0111enih funkcija za\u0161tite softvera ili ure\u0111aja. Ukratko \u2014 promijenite zadane lozinke i ograni\u010dite pristup.<\/li>\n<li><b>Otkrivanje i uklanjanje ranjivosti<\/b>. Ve\u0107ina napada po\u010dinje upravo s poznatom ranjivo\u0161\u0107u.<\/li>\n<li><b>Upravljanje privilegiranim pristupom<\/b>. Va\u0161i korisnici trebaju imati samo stvarno potrebna prava i obavljati samo stvarno neophodne radnje.<\/li>\n<\/ol>\n<p>U okviru ovog \u010dlanka razmotrit \u0107emo upravo 5. ta\u010dku na primjeru kori\u0161tenja <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/katalog\/fudo_security\">Fudo PAM<\/a><\/noindex>. Ta\u010dnije, razmotrit \u0107emo tipi\u010dne slu\u010dajeve i probleme koje se uspijeva otkriti nakon implementacije ili u okviru besplatnog testiranja Fudo PAM-a.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Fudo PAM<\/h3>\n<p>Malo rije\u010di o rje\u0161enju. Fudo PAM je relativno novo rje\u0161enje za upravljanje privilegiranim pristupom. Od klju\u010dnih karakteristika:<\/p>\n<ul>\n<li><b>Snima sesija<\/b>. Pregled sesije u stvarnom vremenu. Povezivanje na sesiju. Izrada dokaza za pravne postupke.<\/li>\n<li><b>Proaktivno pra\u0107enje<\/b>. Fleksibilne politike. Pretra\u017eivanje prema obrascima. Automatizacija radnji.<\/li>\n<li><b>Upozorenje na prijetnje<\/b>. Nepravilna upotreba korisni\u010dkih ra\u010duna. Procjena nivoa prijetnje. Otkrivanje anomalija.<\/li>\n<li><b>Pronalazak odgovornih<\/b>. U slu\u010daju upotrebe jednog korisni\u010dkog ra\u010duna za prijavu vi\u0161e korisnika.<\/li>\n<li><b>Analiza u\u010dinkovitosti<\/b>. Pojedina\u010dnih korisnika, odjela ili cijelih organizacija.<\/li>\n<li><b>Precizna kontrola pristupa<\/b>. Ograni\u010denje prometa i pristupa korisnicima u odre\u0111enim vremenskim intervalima.<\/li>\n<\/ul>\n<p>I najva\u017enija prednost \u2014 implementira se doslovno u roku od nekoliko sati, nakon \u010dega je sustav spreman za kori\u0161tenje.<\/p>\n<p>Za one koji su zainteresirani za proizvod, u \u2026. odr\u017eat \u0107e se webinar s detaljnim pregledom i demonstracijom funkcionalnosti. Mi \u0107emo se, me\u0111utim, prebaciti na stvarne probleme koji se uspijevaju otkriti u okviru pilot projekata sustava za upravljanje privilegiranim pristupom.<\/p>\n<h3>1. Mre\u017eni administratori redovito sebi otvaraju pristup zabranjenim resursima<\/h3>\n<p>Iako zvu\u010di iznena\u0111uju\u0107e, prvi incidenti koji se uspijevaju otkriti su prekr\u0161aji s strane administratora. Naj\u010de\u0161\u0107e se radi o nezakonitom mijenjanju popisa pristupa na mre\u017enoj opremi. Na primjer, kako bi se otvorio pristup zabranjenoj web stranici ili zabranjenoj aplikaciji. Treba napomenuti da takve izmjene mogu ostati u konfiguraciji opreme \u010dak i godinama.<\/p>\n<h3>2. Kori\u0161tenje jednog ra\u010duna od strane vi\u0161e administratora<\/h3>\n<p>Jo\u0161 jedan \u010dest problem povezan s administratorima. \"Dijeljenje\" jednog ra\u010duna me\u0111u kolegama vrlo je \u010desta praksa. Udobno je, ali nakon toga relativno je te\u0161ko razumjeti tko je to\u010dno odgovoran za odre\u0111enu radnju.<\/p>\n<h3>3. Udaljeni zaposlenici rade manje od 2 sata dnevno<\/h3>\n<p>U mnogim tvrtkama postoje udaljeni zaposlenici ili partneri kojima je potreban pristup internim resursima (naj\u010de\u0161\u0107e udaljena radna povr\u0161ina). Fudo PAM omogu\u0107ava pra\u0107enje stvarne aktivnosti u okviru takvih sesija. \u010cesto se otkriva da udaljeni zaposlenici rade znatno manje nego \u0161to je navedeno.<\/p>\n<h3>4. Koristi se ista lozinka za vi\u0161e sustava<\/h3>\n<p>Prili\u010dno ozbiljan problem. Zapamtiti nekoliko lozinki uvijek je te\u0161ko, stoga korisnici \u010desto koriste jednu lozinku za apsolutno sve sustave. Ako ta lozinka \"iscuri\", potencijalni prekr\u0161itelj mo\u017ee dobiti pristup prakti\u010dki cijeloj IT infrastrukturi.<\/p>\n<h3>5. Korisnici imaju ve\u0107a prava nego \u0161to je predvi\u0111eno<\/h3>\n<p>\u010cesto se otkriva da korisnici, koji imaju naizgled ograni\u010dena prava, zapravo posjeduju ve\u0107e privilegije nego \u0161to bi trebali. Na primjer, mogu ponovno pokrenuti ure\u0111aj koji se kontrolira. U pravilu se radi o pogre\u0161ci u dodijeljenju prava ili jednostavno o nedostacima ugra\u0111enog sustava za ograni\u010davanje prava.<\/p>\n<h3>Webinar<\/h3>\n<p>Ako vas zanima tema PAM, pozivamo vas na <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/events\/fudo_vebinar\"><b>predstoje\u0107i webinar o Fudo PAM-u<\/b><\/a><\/noindex>, koji \u0107e se odr\u017eati 21. studenog.<\/p>\n<p>Ovo nije na\u0161 posljednji webinar ove godine, koji planiramo odr\u017eati, stoga pratite novosti (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">TS Solution Blog<\/a><\/noindex>)!<\/p>\n<p>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/471750\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 CIS Controls, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0430 \u041f\u0430\u0440\u0435\u0442\u043e (80\/20). \u042d\u0442\u043e\u0442 \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u0433\u043b\u0430\u0441\u0438\u0442, \u0447\u0442\u043e 20% \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0440 \u0434\u0430\u044e\u0442 80% \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430 \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u041e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0432\u0448\u0438\u0441\u044c \u0441 \u044d\u0442\u0438\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u043c\u043d\u043e\u0433\u0438\u0435 \u201c\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0438\u201d \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0438 \u0432\u044b\u0431\u043e\u0440\u0435 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0440 \u043e\u043d\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u043d\u0435 \u0441 \u0441\u0430\u043c\u044b\u0445 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043c\u0435\u0440. \u0412 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0432\u044b\u0434\u0435\u043b\u044f\u044e\u0442 5 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043c\u0435\u0440 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":52600,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-52599","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"hr_HR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Privileged Access Management \u043a\u0430\u043a \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u0432 \u0418\u0411 (\u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 Fudo PAM) | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-11T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-02-01T09:40:25+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Upravljanje privilegiranim pristupom kao prioritetni zadatak u informati\u010dkoj sigurnosti (na primjeru Fudo PAM) | ProHoster","description":"Ima prili\u010dno.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Privileged Access Management \u043a\u0430\u043a \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u0432 \u0418\u0411 (\u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 Fudo PAM) | ProHoster","og:description":"\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e.","og:url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-11T21:00:00+00:00","article:modified_time":"2021-02-01T09:40:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52599","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 04:11:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:40:27","updated":"2026-01-24 04:11:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/52599","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=52599"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/52599\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/52600"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=52599"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=52599"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=52599"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}