{"id":30167,"date":"2019-10-31T21:33:58","date_gmt":"2019-10-31T18:33:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform\/"},"modified":"2019-10-31T21:33:58","modified_gmt":"2019-10-31T18:33:58","slug":"razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","title":{"rendered":"A KIB SEARCHINFORM titkos\u00edt\u00e1si algoritmus\u00e1nak kritikus hib\u00e1j\u00e1nak vizsg\u00e1lata","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A szervezetben kering\u0151 inform\u00e1ci\u00f3k ellen\u0151rz\u00e9se a legfontosabb feladatok egyike a szervez\u00e9si \u00e9s ir\u00e1ny\u00edt\u00e1si dokumentumok (inform\u00e1ci\u00f3biztons\u00e1gi politika \u00e9s m\u00e1s alacsonyabb szint\u0171 bels\u0151 dokumentumok) gyakorlati megval\u00f3s\u00edt\u00e1sakor.
\nAz informatikai rendszerb\u0151l sz\u00e1rmaz\u00f3 bizalmas inform\u00e1ci\u00f3k sziv\u00e1rg\u00e1s\u00e1nak megel\u0151z\u00e9s\u00e9re szolg\u00e1l\u00f3 rendszerek (Data Leak Prevention, DLP) nagyr\u00e9szt k\u00e9pesek megoldani ezt a probl\u00e9m\u00e1t.
\n<\/a><\/noindex>
\nA mai piacon elegend\u0151 fajta ilyen rendszer l\u00e9tezik, p\u00e9ld\u00e1ul: SearchInform DLP, Infowatch Traffic Monitor DLP, Zecurion DLP, Symantec DLP \u00e9s m\u00e1sok. De ma ennek a cikknek a t\u00e9m\u00e1ja az LLC \"SearchInform\" term\u00e9ke lesz.<\/p>\n

A SearchInform inform\u00e1ci\u00f3biztons\u00e1gi keretrendszer (KIB SearchInform) egy komoly \u00e9s rugalmasan konfigur\u00e1lhat\u00f3 szoftverkomplexum, amely funkci\u00f3ival \u00e9s sz\u00e9lesk\u00f6r\u0171 elemz\u0151eszk\u00f6zeivel komoly versenyt\u00e1rsat jelent a piacon. Mint minden term\u00e9knek, a KIB SearchInformnak is van egy h\u00e1tr\u00e1nya, amir\u0151l most sz\u00f3 lesz.<\/p>\n

\"A
\n
\n1. \u00e1bra \u2013 A KIB SearchInform log\u00f3ja<\/i><\/p>\n

A KIB SearchInformban az inform\u00e1ci\u00f3gy\u0171jt\u00e9s egyik forr\u00e1sa az \u00fcgyn\u00f6k (Windows\/Linux). A Windows \u00e9s Linux oper\u00e1ci\u00f3s rendszerekhez is egy modul\u00e1ris inform\u00e1ci\u00f3gy\u0171jt\u0151 rendszer tartozik, amelynek elemei sz\u00fcks\u00e9g eset\u00e9n be- vagy kikapcsolhat\u00f3k. Megvizsg\u00e1ljuk a Device modult (k\u00fcls\u0151 eszk\u00f6z\u00f6k, h\u00e1l\u00f3zati eszk\u00f6z\u00f6k, folyamatok stb. ellen\u0151rz\u00e9se). A term\u00e9k dem\u00f3verzi\u00f3j\u00e1t hivatalosan k\u00e9rheti a fejleszt\u0151 weboldal\u00e1n (a teljes funkci\u00f3val). A tov\u00e1bbi l\u00e9p\u00e9seket a megkapott licenckulcs seg\u00edts\u00e9g\u00e9vel hajtj\u00e1k v\u00e9gre \u2014 az EndPointController 5.51.0.9 verzi\u00f3ja (\u00fcgyn\u00f6k verzi\u00f3ja 5.51.0.9).<\/p>\n

A modul m\u0171k\u00f6d\u00e9s\u00e9nek f\u0151 probl\u00e9m\u00e1ja az inform\u00e1ci\u00f3k titkos\u00edt\u00e1s\u00e1nak algoritmusa a k\u00fcls\u0151 elt\u00e1vol\u00edthat\u00f3 eszk\u00f6z\u00f6k\u00f6n. Vizsg\u00e1ljuk meg a titkos\u00edt\u00e1si algoritmus m\u0171k\u00f6d\u00e9si elv\u00e9t a KIB SearchInform k\u00f6rnyezet\u00e9ben.<\/p>\n

Telep\u00edtj\u00fck az \u00fcgyn\u00f6k\u00f6t a munka\u00e1llom\u00e1sra, \u00e9s a munkahelyi k\u00f6rnyezetben be\u00e1ll\u00edtjuk a k\u00fcls\u0151 eszk\u00f6z\u00f6k ellen\u0151rz\u00e9s\u00e9t (Device modul) az EndPointController 5.51.0.9 \"H\u00e1l\u00f3zati k\u00f6rnyezet\" r\u00e9sz\u00e9ben.<\/p>\n

\"A
\n2. \u00e1bra \u2013 A modul telep\u00edt\u00e9se \u00e9s aktiv\u00e1l\u00e1sa<\/i><\/p>\n

Konfigur\u00e1ljuk a titkos\u00edt\u00e1st a Device modul be\u00e1ll\u00edt\u00e1saiban a \"Titkos\u00edt\u00e1s\" f\u00fcl alatt: gener\u00e1lunk egy kulcsot, \u00e9s aktiv\u00e1ljuk a titkos\u00edt\u00e1st minden adathordoz\u00f3ra (lehets\u00e9ges a titkos\u00edt\u00e1s aktiv\u00e1l\u00e1sa csak bizonyos inform\u00e1ci\u00f3s adathordoz\u00f3kra).<\/p>\n

\"A
\n3. \u00e1bra \u2013 A feh\u00e9rlista be\u00e1ll\u00edt\u00e1sa<\/i><\/p>\n

\"A
\n4. \u00e1bra \u2013 Titkos\u00edt\u00e1si konfigur\u00e1ci\u00f3<\/i><\/p>\n

Most kezdj\u00fck el a f\u00e1jlok titkos\u00edt\u00e1si algoritmus\u00e1nak bont\u00e1s\u00e1t. M\u00e1soljuk az \u201eInstall.exe\u201d \u00e9s a \u201eJogi alapok.rtf\u201d f\u00e1jlokat az ir\u00e1ny\u00edtott munka\u00e1llom\u00e1sr\u00f3l \u201eWINOC\u201d egy k\u00fcls\u0151, elt\u00e1vol\u00edthat\u00f3 t\u00e1rol\u00f3ra \u201eElt\u00e1vol\u00edthat\u00f3 lemez (E:)\u201d. Ahogy az az 5. \u00e1br\u00e1n l\u00e1that\u00f3, a \u201eSystem Volume Information\u201d rejtett mapp\u00e1ban l\u00e9trej\u00f6ttek az \u201eInstall.exe\u201d \u00e9s a \u201eJogi alapok.rtf\u201d objektumok. Ez alapj\u00e1n arra k\u00f6vetkeztethet\u00fcnk, hogy a \u201eSystem Volume Information\u201d mappa az elt\u00e1vol\u00edthat\u00f3 t\u00e1rol\u00f3n tal\u00e1lhat\u00f3 titkos\u00edtott objektumok list\u00e1j\u00e1t tartalmazza.<\/p>\n

\"A
\n5. \u00e1bra \u2013 a \u201eSystem Volume Information\u201d mappa<\/i><\/p>\n

\"A
\n6. \u00e1bra \u2013 Az elt\u00e1vol\u00edthat\u00f3 t\u00e1rol\u00f3 gy\u00f6k\u00e9rmapp\u00e1ja<\/i><\/p>\n

Mint ismeretes, h\u00e1rom szempont van, amelyre az inform\u00e1ci\u00f3biztons\u00e1g \u00e9p\u00fcl \u2013 ezek az integrit\u00e1s, hozz\u00e1f\u00e9rhet\u0151s\u00e9g \u00e9s titkoss\u00e1g. E szempontok megs\u00e9r\u00fclnek ennek a titkos\u00edt\u00e1si megk\u00f6zel\u00edt\u00e9snek a haszn\u00e1lat\u00e1val, mivel a titkos\u00edtott objektumokr\u00f3l val\u00f3 rendszerinform\u00e1ci\u00f3nak mag\u00e1ban az objektum fejl\u00e9ceiben kell lennie. <\/p>\n

A jelenlegi algoritmus fel\u00e9p\u00edt\u00e9se lehet\u0151s\u00e9get ad a \u201eSystem Volume Information\u201d mappa objektumainak v\u00e9letlenszer\u0171 m\u00f3dos\u00edt\u00e1s\u00e1ra\/t\u00f6rl\u00e9s\u00e9re az elt\u00e1vol\u00edthat\u00f3 t\u00e1rol\u00f3n, tov\u00e1bb\u00e1 a titkos\u00edtott eredeti objektumok elveszt\u00e9s\u00e9re is, valamint az objektumok m\u00f3dos\u00edt\u00e1s\u00e1ra ellen\u0151rizetlen \u00e1llom\u00e1sokon (p\u00e9ld\u00e1ul: az \u201eInstall.exe\u201d objektum \u00e1tnevez\u00e9se a \u201eE:Install.exe\u201d h\u00e1l\u00f3zati \u00faton egy \u00fcgyn\u00f6k n\u00e9lk\u00fcli sz\u00e1m\u00edt\u00f3g\u00e9pen, mik\u00f6zben a programterm\u00e9k inform\u00e1ci\u00f3s f\u00e1jlja a KIB SearchInform \u201eInstall.exe\u201d a \u201eSystem Volume Information\u201d mapp\u00e1ban, h\u00e1l\u00f3zati \u00faton \u201eE:System Volume InformationInstall.exe\u201d v\u00e1ltozatlan marad, mivel hi\u00e1nyzik az \u00fcgyn\u00f6k, amely megv\u00e1ltoztatn\u00e1 a rendszerinform\u00e1ci\u00f3t, \u00e9s az adott f\u00e1jl megnyit\u00e1sa lehetetlenn\u00e9 v\u00e1lik).<\/p>\n

Rem\u00e9lj\u00fck, hogy a fejleszt\u0151 figyelembe veszi ezt a hi\u00e1nyoss\u00e1got a KIB SearchInform inform\u00e1ci\u00f3s t\u00e1rol\u00f3k titkos\u00edt\u00e1si funkci\u00f3j\u00e1nak m\u0171k\u00f6d\u00e9s\u00e9ben, \u00e9s m\u00f3dos\u00edtja az algoritmust.
\n
Forr\u00e1s: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0441\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0446\u0438\u0440\u043a\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0437\u0430\u0434\u0430\u0447 \u043f\u0440\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u043e-\u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 (\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u044b\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u043d\u0438\u0436\u043d\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u0435\u0439) \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (Data Leak Prevention, DLP) \u0432 \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041d\u0430 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u043c \u0440\u044b\u043d\u043a\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a: […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30167","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 A KIB SEARCHINFORM titkos\u00edt\u00e1si algoritmus\u00e1nak kritikus hib\u00e1j\u00e1nak elemz\u00e9se | ProHoster","description":"A szervezeten bel\u00fcl cirkul\u00e1l\u00f3 inform\u00e1ci\u00f3k ellen\u0151rz\u00e9se az egyik legfontosabb feladat az szervezeti szab\u00e1lyoz\u00f3 dokumentumok (inform\u00e1ci\u00f3biztons\u00e1gi politika \u00e9s egy\u00e9b bels\u0151) gyakorlati v\u00e9grehajt\u00e1sakor.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0437\u0431\u043e\u0440 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u041a\u0418\u0411 SEARCHINFORM | ProHoster","og:description":"\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0441\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0446\u0438\u0440\u043a\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0437\u0430\u0434\u0430\u0447 \u043f\u0440\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u043e-\u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 (\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u044b\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435.","og:url":"https:\/\/prohoster.info\/hu\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:33:58+00:00","article:modified_time":"2019-10-31T18:33:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30167","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-20 23:59:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:40:41","updated":"2026-01-20 23:59:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/30167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=30167"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/30167\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=30167"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=30167"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=30167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}