{"id":52599,"date":"2019-11-12T00:00:00","date_gmt":"2019-11-11T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam"},"modified":"2021-02-01T11:40:25","modified_gmt":"2021-02-01T09:40:25","slug":"privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","title":{"rendered":"Gest\u00e3o de Acesso Privilegiado como principal tarefa em seguran\u00e7a da informa\u00e7\u00e3o (exemplo Fudo PAM)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Gest\u00e3o de Acesso Privilegiado como principal tarefa em seguran\u00e7a da informa\u00e7\u00e3o (exemplo Fudo PAM)\" src=\"\/wp-content\/uploads\/2019\/11\/fe518ef5e33b7ebcaa08e5e5459d31b6.jpg\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>H\u00e1 um documento bastante interessante <noindex><a rel=\"nofollow\" href=\"https:\/\/drive.google.com\/file\/d\/1qOT0XDf71JJ1lBZUZQSbpC4cJKwGqVzM\/view?usp=sharing\">Controles CIS<\/a><\/noindex>, que aborda a Seguran\u00e7a da Informa\u00e7\u00e3o aplicando o princ\u00edpio de Pareto (80\/20). Este princ\u00edpio afirma que 20% das medidas de prote\u00e7\u00e3o geram 80% do resultado em termos de seguran\u00e7a da empresa. Ao analisar este documento, muitos especialistas em seguran\u00e7a descobrem que, ao escolher medidas de prote\u00e7\u00e3o, n\u00e3o come\u00e7am pelas mais eficazes. O documento destaca 5 medidas-chave de prote\u00e7\u00e3o que t\u00eam o maior impacto na SI:<\/p>\n<ol>\n<li><b>Invent\u00e1rio de todos os dispositivos na rede<\/b>. \u00c9 dif\u00edcil proteger a rede quando voc\u00ea n\u00e3o sabe o que existe nela.<\/li>\n<li><b>Invent\u00e1rio de todo o software<\/b>. Softwares com vulnerabilidades s\u00e3o frequentemente o ponto de entrada para um hacker.<\/li>\n<li><b>Configura\u00e7\u00e3o Segura<\/b> \u2014 ou a utiliza\u00e7\u00e3o obrigat\u00f3ria de recursos de prote\u00e7\u00e3o embutidos em softwares ou dispositivos. Em poucas palavras \u2014 mude as senhas padr\u00e3o e restrinja o acesso.<\/li>\n<li><b>Identifica\u00e7\u00e3o e Remedia\u00e7\u00e3o de Vulnerabilidades<\/b>. A maioria dos ataques come\u00e7a com uma vulnerabilidade conhecida.<\/li>\n<li><b>Gerenciamento de Acesso Privilegiado<\/b>. Seus usu\u00e1rios devem ter apenas os direitos realmente necess\u00e1rios e executar apenas as a\u00e7\u00f5es que s\u00e3o realmente necess\u00e1rias.<\/li>\n<\/ol>\n<p>Neste artigo, vamos examinar precisamente o 5\u00ba ponto usando <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/katalog\/fudo_security\">Fudo PAM<\/a><\/noindex>. Mais especificamente, vamos analisar casos t\u00edpicos e problemas que podem ser detectados ap\u00f3s a implementa\u00e7\u00e3o ou durante o teste gratuito do Fudo PAM.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Fudo PAM<\/h3>\n<p>Apenas algumas palavras sobre a solu\u00e7\u00e3o. O Fudo PAM \u00e9 uma solu\u00e7\u00e3o relativamente nova para gerenciamento de acesso privilegiado. Entre as principais caracter\u00edsticas:<\/p>\n<ul>\n<li><b>Grava\u00e7\u00e3o de Sess\u00f5es<\/b>. Visualiza\u00e7\u00e3o de sess\u00f5es em tempo real. Conex\u00e3o a sess\u00f5es. Cria\u00e7\u00e3o de evid\u00eancias para processos judiciais.<\/li>\n<li><b>Monitoramento Proativo<\/b>. Pol\u00edticas flex\u00edveis. Busca por padr\u00f5es. Automa\u00e7\u00e3o de a\u00e7\u00f5es.<\/li>\n<li><b>Alertas de Amea\u00e7as<\/b>. Uso indevido de contas. Avalia\u00e7\u00e3o do n\u00edvel de amea\u00e7a. Detec\u00e7\u00e3o de anomalias.<\/li>\n<li><b>Identifica\u00e7\u00e3o de Respons\u00e1veis<\/b>. No caso de uma \u00fanica conta sendo usada por v\u00e1rios usu\u00e1rios.<\/li>\n<li><b>An\u00e1lise de Efic\u00e1cia<\/b>. De usu\u00e1rios individuais, departamentos ou de organiza\u00e7\u00f5es inteiras.<\/li>\n<li><b>Controle Preciso de Acesso<\/b>. Restri\u00e7\u00e3o de tr\u00e1fego e acesso para usu\u00e1rios em per\u00edodos espec\u00edficos.<\/li>\n<\/ul>\n<p>E o principal benef\u00edcio \u2014 \u00e9 implantado em apenas poucas horas, ap\u00f3s o que o sistema est\u00e1 pronto para uso.<\/p>\n<p>Para aqueles que est\u00e3o interessados no produto, haver\u00e1 um webinar com uma vis\u00e3o detalhada e demonstra\u00e7\u00e3o das funcionalidades. Agora, vamos abordar os problemas reais que conseguimos identificar nos projetos piloto de sistemas de gerenciamento de acesso privilegiado.<\/p>\n<h3>1. Administradores de rede frequentemente acessam recursos proibidos<\/h3>\n<p>Stranhamente, os primeiros incidentes que conseguimos identificar s\u00e3o viola\u00e7\u00f5es por parte dos administradores. Na maioria das vezes, envolve altera\u00e7\u00f5es indevidas nas listas de acesso em equipamentos de rede. Por exemplo, para abrir acesso a um site proibido ou a um aplicativo restrito. Vale ressaltar que essas altera\u00e7\u00f5es podem permanecer na configura\u00e7\u00e3o do equipamento por anos.<\/p>\n<h3>2. Uma \u00fanica conta \u00e9 compartilhada por v\u00e1rios administradores<\/h3>\n<p>Outro problema comum relacionado a administradores. Compartilhar uma \u00fanica conta entre colegas \u00e9 uma pr\u00e1tica muito frequente. \u00c9 conveniente, mas depois disso \u00e9 bastante dif\u00edcil entender quem \u00e9 realmente respons\u00e1vel por determinada a\u00e7\u00e3o.<\/p>\n<h3>3. Funcion\u00e1rios remotos trabalham menos de 2 horas por dia<\/h3>\n<p>Em muitas empresas, h\u00e1 funcion\u00e1rios remotos ou parceiros que precisam acessar recursos internos (mais frequentemente a \u00e1rea de trabalho remota). O Fudo PAM permite monitorar a atividade real durante essas sess\u00f5es. Frequentemente, \u00e9 descoberto que os funcion\u00e1rios remotos trabalham muito menos do que o declarado.<\/p>\n<h3>4. A mesma senha \u00e9 usada para v\u00e1rios sistemas<\/h3>\n<p>Um problema bastante s\u00e9rio. Lembrar de v\u00e1rias senhas \u00e9 sempre dif\u00edcil, por isso os usu\u00e1rios frequentemente usam uma \u00fanica senha para todos os sistemas. Se essa senha 'vazar', um poss\u00edvel invasor poder\u00e1 acessar praticamente toda a infraestrutura de TI.<\/p>\n<h3>5. Os usu\u00e1rios possuem mais direitos do que o esperado<\/h3>\n<p>Com frequ\u00eancia, \u00e9 descoberto que usu\u00e1rios aparentemente com direitos limitados t\u00eam na verdade mais privil\u00e9gios do que deveriam. Por exemplo, eles podem reiniciar um dispositivo controlado. Normalmente isso \u00e9 resultado de um erro na concess\u00e3o de direitos ou simplesmente falhas no sistema embutido de controle de direitos.<\/p>\n<h3>Webinar<\/h3>\n<p>Se voc\u00ea est\u00e1 interessado no tema PAM, convidamos voc\u00ea para o <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/events\/fudo_vebinar\"><b>pr\u00f3ximo webinar sobre Fudo PAM<\/b><\/a><\/noindex>, que ocorrer\u00e1 no dia 21 de novembro.<\/p>\n<p>Este n\u00e3o \u00e9 nosso \u00faltimo webinar deste ano, que vamos realizar, ent\u00e3o fique atento \u00e0s novidades (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">Blog da TS Solution<\/a><\/noindex>)!<\/p>\n<p>Fonte: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/471750\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 CIS Controls, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0430 \u041f\u0430\u0440\u0435\u0442\u043e (80\/20). \u042d\u0442\u043e\u0442 \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u0433\u043b\u0430\u0441\u0438\u0442, \u0447\u0442\u043e 20% \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0440 \u0434\u0430\u044e\u0442 80% \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430 \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u041e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0432\u0448\u0438\u0441\u044c \u0441 \u044d\u0442\u0438\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u043c\u043d\u043e\u0433\u0438\u0435 \u201c\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0438\u201d \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0438 \u0432\u044b\u0431\u043e\u0440\u0435 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0440 \u043e\u043d\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u043d\u0435 \u0441 \u0441\u0430\u043c\u044b\u0445 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043c\u0435\u0440. \u0412 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0432\u044b\u0434\u0435\u043b\u044f\u044e\u0442 5 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043c\u0435\u0440 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":52600,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-52599","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"pt_PT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Privileged Access Management \u043a\u0430\u043a \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u0432 \u0418\u0411 (\u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 Fudo PAM) | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-11T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-02-01T09:40:25+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Gerenciamento de Acesso Privilegiado como uma prioridade em Seguran\u00e7a da Informa\u00e7\u00e3o (exemplo do Fudo PAM) | ProHoster","description":"\u00c9 bastante.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Privileged Access Management \u043a\u0430\u043a \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u0432 \u0418\u0411 (\u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 Fudo PAM) | ProHoster","og:description":"\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e.","og:url":"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-11T21:00:00+00:00","article:modified_time":"2021-02-01T09:40:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52599","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 04:11:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:40:27","updated":"2026-01-24 04:11:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/52599","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=52599"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/52599\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/52600"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=52599"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=52599"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=52599"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}