2. Kuphunzitsa ogwiritsa ntchito zoyambira zachitetezo chazidziwitso. Phishman

Tikupitiliza kukudziwitsani za dziko lomwe limalimbana ndi phishing, limaphunzira zoyambira zaukadaulo wa anthu ndipo osayiwala kuphunzitsa antchito ake. Lero mlendo wathu ndi mankhwala a Phishman. Uyu ndi m'modzi mwa othandizana nawo a TS Solution, omwe amapereka makina oyeserera oyesa ndi kuphunzitsa antchito. Mwachidule za lingaliro lake:

• Kuzindikiritsa zosowa za maphunziro a antchito enaake.

• Maphunziro othandiza komanso ongoyerekeza kwa ogwira ntchito kudzera pa portal yophunzitsira.

• Flexible automation system yogwiritsira ntchito dongosolo.

Chiyambi cha Zamalonda

Kampaniyo Phishman Kuyambira 2016, wakhala akupanga mapulogalamu okhudzana ndi kuyesa ndi maphunziro kwa ogwira ntchito m'makampani akuluakulu pachitetezo cha cybersecurity. Pakati pa makasitomala pali oimira osiyanasiyana a mafakitale: zachuma, inshuwalansi, malonda, zopangira ndi zimphona zamakampani - kuchokera ku M.Video kupita ku Rosatom.

Njira zopangira

Phishman amagwirizana ndi makampani osiyanasiyana (kuyambira mabizinesi ang'onoang'ono mpaka mabizinesi akulu), poyambira ndizokwanira kukhala ndi antchito 10. Tiyeni tilingalire mfundo zamitengo ndi ziphaso:

1. Kwa mabizinesi ang'onoang'ono:

   NDI) Phishman Lite - mtundu wa malonda kuchokera 10 mpaka 249 ogwira ntchito ndi mtengo woyambira wa chilolezo kuchokera ku 875 rubles. Muli zigawo zazikuluzikulu: zosonkhanitsira zidziwitso (kuyesa kutumiza maimelo achinyengo), maphunziro (makosi atatu ofunikira pachitetezo chazidziwitso), makina opangira okha (kukhazikitsa njira yoyesera).

   B) Phishman Standard - mtundu wa malonda kuchokera 10 mpaka 999 ogwira ntchito ndi mtengo woyambira wa chilolezo kuchokera ku 1120 rubles. Mosiyana ndi mtundu wa Lite, imatha kulumikizana ndi seva yanu ya AD; gawo lophunzitsira lili ndi maphunziro 5.

2. Kwa mabizinesi akuluakulu:

   NDI) Phishman Enterprise - mu yankho ili kuchuluka kwa ogwira ntchito sikokwanira; imapereka ndondomeko yowonjezereka yodziwitsira anthu ogwira ntchito pachitetezo chazidziwitso kwamakampani amtundu uliwonse omwe amatha kusintha maphunziro kuti agwirizane ndi zosowa za kasitomala ndi bizinesi. Kuyanjanitsa ndi AD, SIEM, DLP machitidwe akupezeka kuti asonkhanitse zambiri za ogwira ntchito ndikuzindikira ogwiritsa ntchito omwe akufunika kuphunzitsidwa. Pali chithandizo chophatikizira ndi njira yomwe ilipo yophunzirira kutali (DLS), kulembetsa komwe kuli ndi maphunziro 7 oyambira a IS, 4 apamwamba ndi masewera atatu. Njira yosangalatsa yophunzitsira kuukira pogwiritsa ntchito ma drive a USB (makadi owunikira) imathandizidwanso.

   B) Phishman Enterprise + - Mtundu wosinthidwa umaphatikizapo zosankha zonse za Enterpise, zimakhala zotheka kupanga zolumikizira zanu ndi malipoti (mothandizidwa ndi mainjiniya a Phishman).

   Chifukwa chake, mankhwalawa amatha kusinthidwa kuti agwirizane ndi ntchito zabizinesi inayake ndikuphatikizidwa munjira zomwe zilipo kale zophunzitsira chitetezo.

Kudziwa dongosolo

Kuti tilembe nkhaniyi, tidayika masanjidwe okhala ndi izi:

1. Ubuntu Server kuchokera ku mtundu wa 16.04.

2. 4 GB RAM, 50 GB hard drive space, purosesa yokhala ndi liwiro la wotchi ya 1 GHz kapena kupitilira apo.

3. Seva ya Windows yokhala ndi DNS, AD, MAIL maudindo.

Kawirikawiri, ndondomekoyi ndi yokhazikika ndipo sichifuna zinthu zambiri, makamaka poganizira kuti, monga lamulo, muli ndi seva ya AD. Mukatumizidwa, chidebe cha Docker chidzakhazikitsidwa, chomwe chidzangosintha mwayi wolowera ndi kuphunzira portal.

Pansi pa wowonongayo pali chithunzi chofanana cha netiweki ndi Fishman

Chithunzi chodziwika bwino cha netiweki

Kenaka, tidzadziwa mawonekedwe a dongosolo, mphamvu zoyendetsera ntchito komanso, ndithudi, ntchito.

Lowani ku portal yoyang'anira

The Phishman administration portal imagwiritsidwa ntchito kuyang'anira mndandanda wamadipatimenti amakampani ndi antchito. Imayambitsa ziwopsezo potumiza maimelo achinyengo (monga gawo la maphunziro), ndipo zotsatira zake zimaphatikizidwa kukhala malipoti. Mutha kuyipeza pogwiritsa ntchito adilesi ya IP kapena dzina lachidziwitso lomwe mumatchula mukamatumiza makinawo.

Chilolezo pa tsamba la Phishman

Patsamba lalikulu mudzakhala ndi mwayi wopeza ma widget omwe ali ndi ziwerengero za antchito anu:

Tsamba lofikira la Phishman portal

Kuwonjezera antchito kuti agwirizane

Kuchokera ku menyu yayikulu mutha kupita kugawo "Antchito", pomwe pali mndandanda wa ogwira ntchito pakampani omwe agawidwa ndi dipatimenti (pamanja kapena kudzera mwa AD). Lili ndi zida zoyendetsera deta yawo; ndizotheka kupanga dongosolo molingana ndi ogwira ntchito.

User Control PanelKhadi yopanga antchito

Unsankhula: Kuphatikizana ndi AD kulipo, komwe kumakupatsani mwayi woti muzitha kuyendetsa bwino ntchito yophunzitsira antchito atsopano ndikusunga ziwerengero zonse.

Kukhazikitsidwa kwa maphunziro a antchito

Mukangowonjezera zambiri za ogwira ntchito pakampaniyo, mumakhala ndi mwayi wowatumiza kumaphunziro ophunzitsira. Zikakhala zothandiza:

• wogwira ntchito watsopano;

• maphunziro okonzedwa;

• mwachangu (pali chakudya chodziwitsa, muyenera kuchenjeza).

Zojambulazo zimapezeka kwa onse ogwira ntchito payekha komanso dipatimenti yonse.

Kupanga maphunziro a maphunziro

Zosankha zili kuti:

• pangani gulu lophunzirira (sonkhanitsani ogwiritsa ntchito);

• kusankha kosi yophunzitsira (kuchuluka kutengera chilolezo);

• kupeza (kwamuyaya kapena kwakanthawi kokhala ndi masiku osonyezedwa).

Zofunika!

Mukalembetsa koyamba maphunziro, wogwira ntchitoyo adzalandira imelo yokhala ndi zambiri zolowera ku Training Portal. Mawonekedwe oyitanitsa ndi template, yomwe ikupezeka kuti isinthidwe pakufuna kwa Makasitomala.

Chitsanzo cha kalata yoitanira ku phunziro

Mukatsatira ulalo, wogwira ntchitoyo adzatengedwa kupita kumalo ophunzitsira, komwe kupita kwake kudzajambulidwa ndikuwonetsedwa mu ziwerengero za woyang'anira Phishman.

Chitsanzo cha maphunziro oyambitsidwa ndi ogwiritsa ntchito

Kugwira ntchito ndi machitidwe owukira

Ma templates amakulolani kuti mutumize maimelo achinyengo ophunzirira omwe amayang'ana kwambiri zaukadaulo wamakhalidwe.

Gawo "Zithunzi"

Ma templates ali m'magulu, mwachitsanzo:

Sakani ma templates omangidwa m'magulu osiyanasiyana

Pali zambiri za template iliyonse yomwe yapangidwa kale, kuphatikiza chidziwitso chogwira ntchito.

Chitsanzo cha template ya Twitter Newsletter

Ndikoyeneranso kutchula luso losavuta kupanga ma tempuleti anu: ingotengerani zolemba kuchokera m'chilembocho ndipo zimasinthidwa kukhala HTML code.

Zindikirani:

ngati mubwerera ku zomwe zili 1 zolemba, ndiye tidayenera kusankha pamanja template kuti tikonzekere kuukira kwa phishing. Yankho la Phishman Enterprise lili ndi ma tempulo ambiri ophatikizika, ndipo pali chithandizo chazida zosavuta kupanga zanu. Kuphatikiza apo, wogulitsa amathandizira makasitomala mwachangu ndipo amatha kuthandizira kuwonjezera ma templates apadera, omwe timakhulupirira kuti ndi othandiza kwambiri.  

General khwekhwe ndi thandizo

Mu gawo la "Zikhazikiko", magawo a dongosolo la Phishman amasintha malingana ndi kuchuluka kwa wogwiritsa ntchito pano (chifukwa cha kuchepa kwa masanjidwe, iwo sanapezeke kwathunthu kwa ife).

Chiyankhulo cha gawo la "Zikhazikiko".

Tiyeni titchule mwachidule zosankha za kasinthidwe:

• magawo a netiweki (adilesi ya seva yamakalata, doko, kubisa, kutsimikizika);

• kusankha njira yophunzitsira (kuphatikiza ndi LMS ina kumathandizidwa);

• kusintha ma templates ndi maphunziro;

• mndandanda wakuda wa ma adilesi a imelo (mwayi wofunikira wosatenga nawo gawo pamakalata achinyengo, mwachitsanzo, kwa oyang'anira makampani);

• kasamalidwe ka ogwiritsa ntchito (kupanga, kusintha maakaunti ofikira);

• kusintha (onani mawonekedwe ndi ndondomeko).

Oyang'anira apeza gawo la "Thandizo" kukhala lothandiza; imatha kupeza bukhu la ogwiritsa ntchito ndikuwunika mwatsatanetsatane ntchito ndi Phishman, adilesi ya chithandizo chothandizira, komanso zambiri zadongosolo ladongosolo.

Chiyankhulo cha "Thandizo" gawoZambiri zamasinthidwe adongosolo

Kuukira ndi kuphunzitsa

Pambuyo poyang'ana zosankha zoyambira ndi zoikidwiratu zamakina, tidzachita masewera olimbitsa thupi; chifukwa cha izi tidzatsegula gawo la "Attacks".

Imawukira mawonekedwe a gulu lowongolera

Mmenemo tikhoza kudzidziwitsa tokha ndi zotsatira za kuukiridwa kale, kupanga zatsopano, ndi zina zotero. Tiyeni tifotokoze masitepe oyambitsa kampeni.

Kuyambitsa kuwukira

1) Tiyeni tiyitane kuukira kwatsopano "kutayikira kwa data".

Tiyeni tifotokoze makonda awa:

Kumeneko:

Wotumiza → malo otumizira amawonetsedwa (mwachisawawa kuchokera kwa wogulitsa).

Mafomu a phishing → amagwiritsidwa ntchito m'ma template kuti ayese kupeza deta kuchokera kwa ogwiritsa ntchito, pamene mfundo yokhayo yolowera imalembedwa, deta siisungidwa.

Kutumiza mafoni → kulondoleranso tsambalo kumawonetsedwa wogwiritsa ntchito atayenda.

2) Pa gawo logawa, njira yofalitsa kuukira ikuwonetsedwa

Kumeneko:

Mtundu wowukira → imasonyeza momwe kuukiraku kudzachitika komanso nthawi yake. (zosankha zikuphatikizapo njira yogawa yosiyana, etc.)

Nthawi yoyambira kutumiza → nthawi yoyambira kutumiza mauthenga ikuwonetsedwa.

3) Pa siteji ya "Zolinga", antchito amasonyezedwa ndi dipatimenti kapena payekha

4) Pambuyo pake tikuwonetsa machitidwe omwe tawakhudza kale:

Chifukwa chake, kuti tiyambe kuukira, tidafunikira:

a) kupanga chiwonongeko chitsanzo;

b) onetsani njira yogawa;

c) kusankha zolinga;

d) pezani template ya imelo yachinyengo.

Kuyang'ana zotsatira za kuukira

Poyamba tili ndi:

Kuchokera kumbali ya wogwiritsa ntchito, uthenga watsopano wa imelo ukuwoneka:

Mukatsegula:

Mukatsatira ulalowu, mudzapemphedwa kuti mulowetse imelo yanu:

Nthawi yomweyo, tiyeni tiwone ziwerengero zakuukira:

Zofunika!

Ndondomeko ya Phishman imatsatira mosamalitsa malamulo oyendetsera ntchito ndi makhalidwe abwino, kotero kuti deta yomwe imalowetsedwa ndi wogwiritsa ntchito siisungidwa paliponse, kungolemba chabe kutayikira kumalembedwa.

Malipoti

Chilichonse chomwe chidachitika pamwambapa chiyenera kuthandizidwa ndi ziwerengero zosiyanasiyana komanso zambiri zokhudzana ndi kukonzekera kwa ogwira ntchito. Pali gawo lina la "Malipoti" loyang'anira.

Zimaphatikizapo:

• Lipoti la maphunziro lomwe likuwonetsa zambiri za zotsatira za kumaliza maphunzirowo mkati mwa nthawi yochitira lipoti.

• Lipoti lowukira lomwe likuwonetsa zotsatira zauchifwamba (chiwerengero cha zochitika, kugawa nthawi, ndi zina).

• Lipoti la momwe maphunziro akuyendera akuwonetsa momwe antchito anu akuyendera.

• Nenani za kusinthika kwa zovuta zachinyengo (zachidule za zochitika).

• Lipoti lowunikira (zochita za ogwira ntchito pazochitika zisanachitike / pambuyo pake).

Kugwira ntchito ndi lipoti

1) Pangani "Pangani lipoti".

2) Tchulani dipatimenti / ogwira ntchito kuti apange lipotilo.

3) Sankhani nthawi

4) Tidzawonetsa maphunziro omwe mukufuna

5) Pangani lipoti lomaliza

Chifukwa chake, malipoti amathandizira kuwonetsa ziwerengero m'njira yabwino ndikuwunika zotsatira za portal yophunzitsira, komanso machitidwe a antchito.

Automation ya maphunziro

Ndikoyeneranso kutchula kuthekera kopanga malamulo odziwikiratu omwe angathandize olamulira kukonza malingaliro a Phishman.

Kulemba script yokha

Kuti musinthe, muyenera kupita ku gawo la "Malamulo". Timapatsidwa:

1) Tchulani dzina ndikukhazikitsa nthawi yowunikira momwe zilili.

2) Pangani chochitika kutengera imodzi mwa magwero (Phishing, Training, Users), ngati alipo angapo, ndiye kuti mutha kugwiritsa ntchito wowongolera (NDI / KAPENA). 

Muchitsanzo chathu, tidapanga lamulo ili: "Ngati wogwiritsa ntchito adina ulalo woyipa kuchokera kumodzi mwachinyengo chathu, amangolembetsa nawo maphunziro, chifukwa chake, alandila kuyitanidwa ndi imelo, ndipo kupita patsogolo kudzayamba. kuti atsatidwe.

Unsankhula:

-> Pali chithandizo chopanga malamulo osiyanasiyana ndi gwero (DLP, SIEM, Antivirus, HR services, etc.). 

Chitsanzo: "Ngati wogwiritsa ntchito atumiza zidziwitso zachinsinsi, DLP imalemba zomwe zachitika ndikutumiza zidziwitsozo kwa Phishman, pomwe lamuloli lidayambika: perekani maphunziro kwa wogwira ntchito kuti azigwira ntchito ndi zinsinsi."

Chifukwa chake, woyang'anira amatha kuchepetsa njira zina zachizoloŵezi (kutumiza antchito kuti akaphunzitse, kuchita zigawenga zokonzekera, ndi zina zotero).

M'malo mapeto

Lero tidadziwa njira yaku Russia yosinthira njira yoyeserera ndi kuphunzitsa antchito. Zimathandiza kukonzekera kampani kuti igwirizane ndi Federal Law 187, PCI DSS, ISO 27001. Ubwino wophunzitsidwa kudzera ku Phishman ndi monga:

• Kusintha makonda a maphunziro - kuthekera kosintha zomwe zili m'maphunziro;

• Kutsatsa - kupanga nsanja ya digito molingana ndi miyezo yanu yamakampani;

• Gwirani ntchito pa intaneti - kukhazikitsa pa seva yanu;

• Automation - kupanga malamulo (zochitika) kwa ogwira ntchito;

• Kupereka lipoti - ziwerengero za zochitika zochititsa chidwi;

• Kusinthasintha kwa chilolezo - thandizo kuchokera kwa ogwiritsa 10. 

Ngati muli ndi chidwi ndi yankho ili, mutha kulumikizana nthawi zonse kwa ife, tidzathandiza kukonza woyendetsa ndegeyo ndikulangiza pamodzi ndi oimira Phishman. Ndizo zonse lero, phunzirani nokha ndikuphunzitsa antchito anu, tidzakuwonani nthawi ina!

Source: www.habr.com