{"id":97902,"date":"2020-10-23T08:42:25","date_gmt":"2020-10-23T06:42:25","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/2-obuchenie-polzovatelej-osnovam-ib-phishman"},"modified":"2020-10-23T08:42:25","modified_gmt":"2020-10-23T06:42:25","slug":"2-obuchenie-polzovatelej-osnovam-ib-phishman","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/2-obuchenie-polzovatelej-osnovam-ib-phishman","title":{"rendered":"2. Obuka korisnika o osnovama IB. Phishman","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/d5d23cc92b0051bfe9faa34acd8bbed1.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Nastavljamo vas upoznavati s svijetom koji se bori protiv phishinga, istra\u017euje osnove socijalnog in\u017eenjeringa i ne zaboravlja educirati svoj osoblje. Danas imamo u gostima proizvod Phishman. To je jedan od partnera TS Solution, koji pru\u017ea automatizirani sustav testiranja i obuke zaposlenika. Ukratko o njegovoj koncepciji:<\/p>\n<ul>\n<li>\n<p>Identifikacija obrazovnih potreba specifi\u010dnih zaposlenika.<\/p>\n<\/li>\n<li>\n<p>Prakti\u010dni i teorijski te\u010dajevi za zaposlenike putem portala za obuku.<\/p>\n<\/li>\n<li>\n<p>Fleksibilan sustav automatizacije rada sustava.<\/p>\n<\/li>\n<\/ul>\n<h2>Uvod u proizvod<\/h2>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/65b6882bc232c27b07a04b24abae5db3.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Tvrtka <noindex><a rel=\"nofollow\" href=\"https:\/\/phishman.ru\/\"><u>Phishman<\/u><\/a><\/noindex> Od 2016. godine se bavi razvojem softvera vezanog uz sustav testiranja i obuke zaposlenika velikih kompanija u oblasti kiberneti\u010dke sigurnosti. Me\u0111u klijentima su razni predstavnici industrije: financijske, osiguravaju\u0107e, trgova\u010dke, sirovinske i industrijske divove - od M.Video do Rosatoma.<\/p>\n<h2>Predlo\u017eena rje\u0161enja<\/h2>\n<p>Phishman sura\u0111uje s raznim kompanijama (od malog poslovanja do velikih korporacija), dovoljno je imati 10 zaposlenika. Razmotrit \u0107emo politiku formiranja cijena i licenciranja:<\/p>\n<ol>\n<li>\n<p>Za mala poduze\u0107a:<\/p>\n<p>A) <noindex><a rel=\"nofollow\" href=\"https:\/\/phishman.ru\/products\/phishman-lite\"><strong><u>Phishman Lite<\/u><\/strong><\/a><\/noindex> - verzija proizvoda za 10 do 249 zaposlenika s po\u010detnom cijenom licence od 875 kuna. Sadr\u017ei osnovne module: prikupljanje informacija (testna distribucija phishing e-mailova), obuka (3 osnovna te\u010daja o kiberneti\u010dkoj sigurnosti), automatizacija (postavljanje op\u0107eg na\u010dina testiranja).<\/p>\n<p>B) <noindex><a rel=\"nofollow\" href=\"https:\/\/phishman.ru\/products\/phishman\"><strong><u>Phishman Standard<\/u><\/strong><\/a><\/noindex><strong><u> <\/u><\/strong>- verzija proizvoda za 10 do 999 zaposlenika s po\u010detnom cijenom licence od 1120 kuna. Za razliku od Lite verzije, ima mogu\u0107nost sinkronizacije s va\u0161im korporativnim AD-serverom, modul obuke sadr\u017ei 5 te\u010dajeva.<\/p>\n<\/li>\n<li>\n<p>Za velike tvrtke:<\/p>\n<p>A) <noindex><a rel=\"nofollow\" href=\"https:\/\/phishman.ru\/products\/phishman-enterprise\"><strong><u>Phishman Enterprise<\/u><\/strong><\/a><\/noindex><strong> <\/strong>- u ovom rje\u0161enju nema ograni\u010denja broja zaposlenika, osigurava se sveobuhvatan proces podizanja svijesti osoblja o kiberneti\u010dkoj sigurnosti za kompanije svih veli\u010dina uz mogu\u0107nost prilagodbe te\u010dajeva potrebama klijenta i poslovanja. Dostupna je sinkronizacija s AD, SIEM, DLP sustavima za prikupljanje informacija o zaposlenicima i identifikaciju korisnika kojima je potrebna obuka. Podr\u017eava se integracija s postoje\u0107im sustavom putem udaljenog u\u010denja (LMS), sama pretplata uklju\u010duje 7 osnovnih te\u010dajeva kiberneti\u010dke sigurnosti, 4 napredna i 3 igriva. Tako\u0111er je dostupna zanimljiva opcija obuke putem napada kori\u0161tenjem USB ure\u0111aja (fle\u0161 kartica).<\/p>\n<p>B) <noindex><a rel=\"nofollow\" href=\"https:\/\/phishman.ru\/products\/phishman-enterprise-plus\"><strong><u>Phishman Enterprise+<\/u><\/strong><\/a><\/noindex> - pobolj\u0161ana verzija uklju\u010duje sve opcije Enterprise, pojavljuje se mogu\u0107nost razvoja vlastitih konektora i izvje\u0161taja (uz pomo\u0107 in\u017eenjera Phishman-a).<\/p>\n<p>Tako se proizvod mo\u017ee fleksibilno prilagoditi potrebama konkretnog poslovanja i integrirati u ve\u0107 postoje\u0107e sustave obrazovanja o IB-u.<\/p>\n<\/li>\n<\/ol>\n<h2>Upoznavanje sa sustavom<\/h2>\n<p>Za pisanje \u010dlanka pokrenuli smo model s sljede\u0107im karakteristikama:<\/p>\n<ol>\n<li>\n<p>Ubuntu Server od verzije 16.04.<\/p>\n<\/li>\n<li>\n<p>4 GB RAM-a, 50 GB prostora na disku, procesor s taktom od 1 GHz i vi\u0161e.<\/p>\n<\/li>\n<li>\n<p>Windows server s DNS, AD, MAIL ulogama.<\/p>\n<\/li>\n<\/ol>\n<p>U cjelini, paket je standardan i ne zahtijeva velika ulaganja resursa, pogotovo uzimaju\u0107i u obzir da obi\u010dno ve\u0107 imate AD-server. Pri implementaciji \u0107e se instalirati Docker kontejner, koji \u0107e automatski postaviti pristup portalu upravljanja i obuke. <\/p>\n<p>U okviru prikaza tipi\u010dna shema mre\u017ee s Fishman<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/902ae709b5ce809b65975919b45e932e.png\" style=\"display:block;margin: 0 auto;\" \/>Tipi\u010dna shema mre\u017ee <\/p>\n<p>Nakon toga upoznat \u0107emo se s su\u010deljem sustava, mogu\u0107nostima za administraciju i svakako funkcijama.<\/p>\n<p>Prijava na portal za upravljanje<\/p>\n<p>Admin portal Phishman slu\u017ei za upravljanje popisom odjela i zaposlenika tvrtke. Ondje se pokre\u0107u napadi slanjem phishing poruka (u okviru obrazovanja), a rezultati se oblikuju u izvje\u0161taje. Mo\u017eete mu pristupiti putem IP adrese ili domena koju ste postavili tijekom implementacije sustava.<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/7293315d19008d3eedf68021394f2bc1.png\" style=\"display:block;margin: 0 auto;\" \/>Autentifikacija na portalu Phishman<\/p>\n<p>Na glavnoj stranici bit \u0107e vam dostupni prikladni widgeti sa statistikama o va\u0161im zaposlenicima:<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/b41d6ef61271f0738d62db62ca7c9dd7.png\" style=\"display:block;margin: 0 auto;\" \/>Glavna stranica portala Phishman<\/p>\n<p>Dodavanje zaposlenika za interakcije<\/p>\n<p>Iz glavnog izbornika mo\u017eete prije\u0107i u odjeljak <u>\u201eZaposlenici\u201c<\/u>, gdje se nalazi popis cijelog osoblja tvrtke s pregledom po odjelima (ru\u010dno ili putem AD-a). Sadr\u017ei alate za upravljanje njihovim podacima i mogu\u0107nost organiziranja strukture u skladu s izvje\u0161tajem.<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/51a06463ac89d9a511bc38b4be886718.png\" style=\"display:block;margin: 0 auto;\" \/>Kontrolna plo\u010da korisnika<img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/3712ff00f84705014b744ebcf163b9ab.png\" style=\"display:block;margin: 0 auto;\" \/>Kartica za kreiranje zaposlenika<\/p>\n<p><strong>Opcionalno:<\/strong> dostupna je integracija s AD-om, \u0161to omogu\u0107uje jednostavnu automatizaciju procesa obuke novih zaposlenika i vo\u0111enje op\u0107e statistike. <\/p>\n<p>Pokretanje obuke za zaposlenike<\/p>\n<p>Nakon \u0161to su uneseni podaci o zaposlenicima tvrtke, postoji mogu\u0107nost slanja na obu\u010dne te\u010dajeve. Kada to mo\u017ee biti korisno:<\/p>\n<ul>\n<li>\n<p>novi zaposlenik;<\/p>\n<\/li>\n<li>\n<p>planirana obuka;<\/p>\n<\/li>\n<li>\n<p>hitni te\u010daj (ima povod, potrebno je upozoriti).<\/p>\n<\/li>\n<\/ul>\n<p>Zapisivanje je dostupno i za pojedinog zaposlenika i za cijeli odjel.<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/3f394fa4975c4fcde84dcce9d1ecd0b9.png\" style=\"display:block;margin: 0 auto;\" \/>Formiranje obu\u010dnog te\u010daja<\/p>\n<p>Gdje su opcije:<\/p>\n<ul>\n<li>\n<p>formirati u\u010dnu grupu (udru\u017eiti korisnike);<\/p>\n<\/li>\n<li>\n<p>odabir obu\u010dnog te\u010daja (broj ovisno o licenci);<\/p>\n<\/li>\n<li>\n<p>pristup (trajni ili privremeni s navo\u0111enjem datuma).<\/p>\n<\/li>\n<\/ul>\n<p><strong>Va\u017eno!<\/strong> <\/p>\n<p>Prilikom prve prijave na te\u010dajeve, zaposlenik \u0107e primiti e-poruku s podacima za prijavu na Portal za u\u010denje. Su\u010delje pozivnice \u2014 predlo\u017eak, dostupno za izmjene prema vlastitom izboru Naru\u010ditelja.<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/0ddbb6d212f79c5f5bd29e2aa4ca48c3.png\" style=\"display:block;margin: 0 auto;\" \/>Primjer e-maila za poziv na obuku<\/p>\n<p>Ako se klikne na poveznicu, zaposlenik \u0107e do\u0107i na obu\u010dni portal gdje \u0107e se automatski pratiti njegov napredak i prikazivati u statistici administratora Phishman.<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/22523ee5edb64f46bafbd56730a3468d.png\" style=\"display:block;margin: 0 auto;\" \/>Primjer te\u010daja pokrenutog od strane korisnika<\/p>\n<p>Rad s predlo\u0161cima napada<\/p>\n<p>Predlo\u0161ke omogu\u0107uju slanje ciljanih obu\u010dnih biltena phishing e-po\u0161te s naglaskom na socijalni in\u017eenjering.<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/692f142a6cf307dbbdce5142e397ae61.png\" style=\"display:block;margin: 0 auto;\" \/>Odjeljak \u201ePredlo\u0161ci\u201c<\/p>\n<p>Predlozi su kategorizirani, na primjer:<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/92c46c3b8282d902d32d4c6be53aba66.png\" style=\"display:block;margin: 0 auto;\" \/>Kartica pretra\u017eivanja ugra\u0111enih predlo\u017eaka iz razli\u010ditih kategorija<\/p>\n<p>O svakom od gotovih predlo\u017eaka dostupne su informacije, uklju\u010duju\u0107i i onu o u\u010dinkovitosti.<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/db4b8df62d07814b44d8743ba833e590.png\" style=\"display:block;margin: 0 auto;\" \/>Primjer predlo\u0161ka \u201eSlanje putem Twittera\u201c<\/p>\n<p>Tako\u0111er se mo\u017ee spomenuti prakti\u010dna mogu\u0107nost stvaranja vlastitih predlo\u017eaka: dovoljno je kopirati tekst iz e-po\u0161te i automatski \u0107e se pretvoriti u HTML-kod.<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/9cb326744fddf9eaf3c9cbb3cc59f5f9.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><strong>Napomena:<\/strong><\/p>\n<p>ako se vratite na sadr\u017eaj <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/521252\/\"><u>1 \u010dlanka<\/u><\/a><\/noindex>, trebali smo ru\u010dno odabrati \u0161ablon za pripremu phishing napada. U Enterprise rje\u0161enju Phishman postoji mnogo integriranih \u0161ablona, a dostupna su i podr\u017eana prakti\u010dna sredstva za izradu vlastitih. Osim toga, vendor aktivno podr\u017eava klijente i mo\u017ee pomo\u0107i u dodavanju jedinstvenih \u0161ablona, \u0161to smatramo mnogo u\u010dinkovitijim.&nbsp;&nbsp;<\/p>\n<p>Op\u0107a postavka i pomo\u0107<\/p>\n<p>U odjeljku \u201ePostavke\u201c mijenjaju se parametri sustava Phishman ovisno o razini pristupa trenutnog korisnika (zbog ograni\u010denja u predlo\u0161ku, oni nisu u potpunosti dostupni). <\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/293d89bce3fc9872588f5925ae322d13.png\" style=\"display:block;margin: 0 auto;\" \/>Su\u010delje odjeljka \u201ePostavke\u201c<\/p>\n<p>Kratak pregled mogu\u0107nosti za postavke:<\/p>\n<ul>\n<li>\n<p>mre\u017ene postavke (adresa poslu\u017eitelja e-po\u0161te, port, enkripcija, autentifikacija);<\/p>\n<\/li>\n<li>\n<p>izbor sustava u\u010denja (podr\u0161ka za integraciju s drugim LMS-ovima);<\/p>\n<\/li>\n<li>\n<p>ure\u0111ivanje \u0161ablona slanja i obuke;<\/p>\n<\/li>\n<li>\n<p>crna lista adresa e-po\u0161te (va\u017ena mogu\u0107nost za isklju\u010divanje sudjelovanja u phishing kampanjama, primjerice, za rukovoditelje tvrtke);<\/p>\n<\/li>\n<li>\n<p>upravljanje korisnicima (izrada, ure\u0111ivanje pristupnih ra\u010duna);<\/p>\n<\/li>\n<li>\n<p>a\u017euriranje (pregled statusa i planiranje).<\/p>\n<\/li>\n<\/ul>\n<p>Administratori \u0107e imati koristi od odjeljka \u201ePomo\u0107\u201d, gdje imaju pristup korisni\u010dkom priru\u010dniku s detaljnim obja\u0161njenjima rada s Phishman-om, adresom slu\u017ebe podr\u0161ke i informacijama o stanju sustava.<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/81f7eafe833995dc3971e979119453a8.png\" style=\"display:block;margin: 0 auto;\" \/>Su\u010delje odjeljka \u201ePomo\u0107\u201c<img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/609f0c01f6bde5a01e712928b82c818c.png\" style=\"display:block;margin: 0 auto;\" \/>Informacije o stanju sustava<\/p>\n<h2>Napad i obuka<\/h2>\n<p>Nakon pregleda osnovnih opcija i postavki sustava, provest \u0107emo edukacijski napad, za to otvaramo odjeljak \u201eNapadi\u201d.<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/ba8438534ce852f876889c4f20695d91.png\" style=\"display:block;margin: 0 auto;\" \/>Su\u010delje kontrolne plo\u010de \u201eNapadi\u201c<\/p>\n<p>U njemu mo\u017eemo pregledati rezultate ve\u0107 pokrenutih napada, stvoriti nove itd. Opi\u0161imo korake za pokretanje kampanje.<\/p>\n<p>Pokretanje napada<\/p>\n<p>1) Nazovimo novi napad \u201ecurenje podataka\u201c.<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/7b5c472d6e8135bd172c88a0bbc65f4c.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Odredit \u0107emo sljede\u0107e postavke:<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/6ec74b442ef112594aee260cadcdb759.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><strong>Gdje:<\/strong><\/p>\n<p><em>Po\u0161iljatelj<\/em> \u2192 navodi se domena slanja (podefaultu od vendora).<\/p>\n<p><em>Phishing obrasci<\/em> \u2192 koriste se u \u0161ablonima u cilju poku\u0161aja dobivanja podataka od korisnika, pri \u010demu se bilje\u017ei samo \u010dinjenica unosa, podaci se ne pohranjuju.<\/p>\n<p><em>Preusmjeravanje <\/em>\u2192 navodi se preusmjeravanje na stranicu nakon \u0161to korisnik pre\u0111e.<\/p>\n<\/p>\n<p>2) U fazi slanja navodi se na\u010din \u0161irenja napada<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/1fbe0a857c0b80b6210be4f1eac362da.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><strong>Gdje:<\/strong><\/p>\n<p><em>Tip napada<\/em> \u2192 se navodi kako i u kojem vremenskom okviru \u0107e napad biti proveden. (opcija uklju\u010duje neujedna\u010den na\u010din slanja i sl.)<\/p>\n<p><em>Vrijeme po\u010detka slanja<\/em> \u2192 navodi se vrijeme po\u010detka slanja poruka.<\/p>\n<\/p>\n<p>3) U fazi \u201cCiljevi\u201d navode se zaposlenici po odjelima ili pojedina\u010dno<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/66698796256e7f7e4e4844bdb2217beb.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>4) Nakon toga navodimo predlo\u0161ke koje \u0107emo koristiti za napad:<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/8bbb71e86be3b423c61561eade889699.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Dakle, za pokretanje napada potrebno je:<\/p>\n<p>a) izraditi predlo\u017eak napada;<\/p>\n<p>b) navesti na\u010din slanja;<\/p>\n<p>v) odabrati ciljeve;<\/p>\n<p>g) odrediti predlo\u017eak phishing e-po\u0161te.<\/p>\n<p>Provjera rezultata napada<\/p>\n<p>Prvotno imamo:<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/775783b9705e4cd8ec96d557841edf3d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>S korisni\u010dke strane, vidljivo je novo e-mail poruka:<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/f5196bfcce773826ac5e6a96d8842bcf.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Ako se otvori:<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/6e539daf5e0e408f36bd8dc7ba796d39.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Ako se klikne na vezu, bit \u0107e ponu\u0111eno da se unesu podaci za e-po\u0161tu:<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/c3f767d6df1d008930f39e3abf513e0a.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Paralelno gledamo statistiku napada:<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/7adca0c5f8f5e9a064d3f18f1ba1c80e.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><strong>Va\u017eno!<\/strong><\/p>\n<p>Politika Phishmana strogo se pridr\u017eava normi i eti\u010dkih standarda, stoga se podaci koje unese korisnik nigdje ne pohranjuju, ve\u0107 se bilje\u017ei samo \u010dinjenica curenja.<\/p>\n<h2>Izvje\u0161taji<\/h2>\n<p>Sve \u0161to je prethodno u\u010dinjeno, treba biti potkrijepljeno raznim statistikama i op\u0107im informacijama o razini pripravnosti zaposlenika. Za pra\u0107enje postoji poseban odjeljak \u201cIzvje\u0161taji.\u201d<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/0d17eea6097a9edb21c8cc05851aa895.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Ovaj odjeljak uklju\u010duje:<\/p>\n<ul>\n<li>\n<p>Izvje\u0161taj o obuci, koji odra\u017eava informacije o rezultatima prolaska te\u010daja u okviru izvje\u0161tajnog razdoblja.<\/p>\n<\/li>\n<li>\n<p>Izvje\u0161taj o napadima, koji prikazuje rezultate provo\u0111enja phishing napada (broj incidenata, raspodjela po vremenu itd.).<\/p>\n<\/li>\n<li>\n<p>Izvje\u0161taj o dinamici obuke, koji prikazuje uspje\u0161nost va\u0161ih zaposlenika.<\/p>\n<\/li>\n<li>\n<p>Izvje\u0161taj o dinamici phishing ranjivosti (sa\u017eete informacije o incidentima).<\/p>\n<\/li>\n<li>\n<p>Analiti\u010dki izvje\u0161taj (reakcija zaposlenika na doga\u0111aje prije\/ponovno).<\/p>\n<\/li>\n<\/ul>\n<p>Rad s izvje\u0161tajem<\/p>\n<p>1) Izvr\u0161it \u0107emo \u201cGenerirati izvje\u0161taj\u201d.<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/ae9ea2a2d20dc89e7b6c2ea1daf6eba7.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>2) Navest \u0107emo odjel\/zaposlenike za izradu izvje\u0161taja.<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/03336a0a100340a4402978ff1bf7b955.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>3) Odabrat \u0107emo razdoblje <\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/738bfd5573aadd5c753549aaa2ef2d5a.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>4) Navest \u0107emo zanimljive te\u010dajeve<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/dea299bfbdf9c2f369d1b0f5a8c2d465.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>5) Generiramo kona\u010dni izvje\u0161taj<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/a2cb0589c31f76410d74c0aac094382e.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Tako izvje\u0161taji poma\u017eu na prakti\u010dan na\u010din da odraze statistiku i prate rezultate rada obrazovne platforme, kao i pona\u0161anje zaposlenika.<\/p>\n<h2>Automatizacija u\u010denja<\/h2>\n<p>Posebno treba napomenuti mogu\u0107nost kreiranja automatskih pravila, koja \u0107e pomo\u0107i administratorima da postave logiku rada Phishmana.<\/p>\n<p>Pisanje automatskog scenarija<\/p>\n<p>Za postavku je potrebno pre\u0107i u odjeljak \u201cPravila\u201d. Ponu\u0111eno nam je:<\/p>\n<p>1) Unesite ime i postavite vrijeme provjere uvjeta.<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/49d5cfdeb4097368d0180613a4503d04.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>2) Kreiramo doga\u0111aj iz jednog od izvora (Phishing, Obuka, Korisnici), ako ih ima vi\u0161e, mo\u017eete koristiti logi\u010dki operator (I \/ ILI).&nbsp;<\/p>\n<p><img decoding=\"async\" alt=\"2. Obuka korisnika o osnovama IB. Phishman\" src=\"\/wp-content\/uploads\/2020\/10\/0b198c694201449ef200cc062439b417.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>U na\u0161em primjeru stvorili smo sljede\u0107e pravilo: \u201cAko je korisnik kliknuo na zlonamjernu vezu iz jedne od na\u0161ih phishing napada, automatski \u0107e biti upisan na te\u010daj obuke, shodno tome, na njegovu e-po\u0161tu \u0107e sti\u0107i pozivnica, i zapo\u010det \u0107e pra\u0107enje napretka prola\u017eenja.<\/p>\n<\/p>\n<p><strong>Opcionalno:<\/strong> <\/p>\n<p>\u2014&gt; Postoji podr\u0161ka za kreiranje razli\u010ditih pravila prema izvorima (DLP, SIEM, Antivirus, Kadrovske slu\u017ebe itd.).&nbsp;<\/p>\n<p>Scenarij: \u201cAko korisnik \u0161alje osjetljive informacije, DLP bilje\u017ei doga\u0111aj i \u0161alje podatke u Phishman, gdje se aktivira pravilo: dodijeliti te\u010daj zaposleniku za rad s povjerljivim informacijama.\u201d<\/p>\n<p>Na taj na\u010din, administrator mo\u017ee skratiti dio rutinskih procesa (slanje zaposlenika na obuku, provo\u0111enje planiranih napada itd.). <\/p>\n<h2>Umjesto zaklju\u010dka<\/h2>\n<p>Danas smo se upoznali s ruskim rje\u0161enjem za automatizaciju procesa testiranja i obuke zaposlenika. Poma\u017ee u pripremi tvrtke za uskla\u0111enost s 187. zakonom, PCI DSS, ISO 27001. Prednosti obuke putem Phishmana uklju\u010duju:<\/p>\n<ul>\n<li>\n<p>Prilagodba te\u010dajeva \u2014 mogu\u0107nost promjene sadr\u017eaja te\u010dajeva;<\/p>\n<\/li>\n<li>\n<p>Brendiranje \u2014 izrada digitalne platforme prema va\u0161im korporativnim standardima;<\/p>\n<\/li>\n<li>\n<p>Rad offline \u2014 instalacija na vlastiti poslu\u017eitelj;<\/p>\n<\/li>\n<li>\n<p>Automatizacija \u2014 izrada pravila (scenarija) za zaposlenike;<\/p>\n<\/li>\n<li>\n<p>Izvje\u0161tavanje \u2014 statistika o zanimljivim doga\u0111anjima;<\/p>\n<\/li>\n<li>\n<p>Fleksibilnost licenciranja \u2014 podr\u0161ka od 10 korisnika.&nbsp;<\/p>\n<\/li>\n<\/ul>\n<p>Ako vas zanima ovo rje\u0161enje, uvijek se mo\u017eete obratiti <noindex><a rel=\"nofollow\" href=\"mailto:sales@tssolution.ru\"><u>nama<\/u><\/a><\/noindex>, pomo\u0107i \u0107emo vam u organizaciji pilot projekta i savjetovati u suradnji s predstavnicima Phishman. To bi za danas bilo sve, u\u010dite sami i obu\u010davajte zaposlenike, vidimo se uskoro!<\/p>\n<p>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/524320\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041c\u044b \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c \u0432\u0430\u0441 \u0441 \u043c\u0438\u0440\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u043e\u0440\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0442\u0438\u0432 \u0444\u0438\u0448\u0438\u043d\u0433\u0430, \u0438\u0437\u0443\u0447\u0430\u0435\u0442 \u043e\u0441\u043d\u043e\u0432\u044b \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438 \u0438 \u043d\u0435 \u0437\u0430\u0431\u044b\u0432\u0430\u0435\u0442 \u043e\u0431\u0443\u0447\u0430\u0442\u044c \u0441\u0432\u043e\u0439 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0443 \u043d\u0430\u0441 \u0432 \u0433\u043e\u0441\u0442\u044f\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 Phishman. \u042d\u0442\u043e \u043e\u0434\u0438\u043d \u0438\u0437 \u043f\u0430\u0440\u0442\u043d\u0435\u0440\u043e\u0432 TS Solution, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432. \u041a\u0440\u0430\u0442\u043a\u043e \u043e \u0435\u0433\u043e \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438: \u0412\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0442\u0440\u0435\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432. \u041f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u0443\u0440\u0441\u044b \u0434\u043b\u044f \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97903,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97902","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/2-obuchenie-polzovatelej-osnovam-ib-phishman\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"hr_HR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd472. \u041e\u0431\u0443\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0441\u043d\u043e\u0432\u0430\u043c \u0418\u0411. Phishman | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/2-obuchenie-polzovatelej-osnovam-ib-phishman\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-23T06:42:25+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-23T06:42:25+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd472. Obuka korisnika o osnovama informacijskih sigurnosti. Phishman | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/2-obuchenie-polzovatelej-osnovam-ib-phishman","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd472. \u041e\u0431\u0443\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0441\u043d\u043e\u0432\u0430\u043c \u0418\u0411. Phishman | ProHoster","og:url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/2-obuchenie-polzovatelej-osnovam-ib-phishman","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-23T06:42:25+00:00","article:modified_time":"2020-10-23T06:42:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97902","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:11:00","updated":"2022-10-03 07:08:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/97902","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=97902"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/97902\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/97903"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=97902"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=97902"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=97902"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}