{"id":30167,"date":"2019-10-31T21:33:58","date_gmt":"2019-10-31T18:33:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform\/"},"modified":"2019-10-31T21:33:58","modified_gmt":"2019-10-31T18:33:58","slug":"razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","title":{"rendered":"Analiza unei erori critice \u00een algoritmul de func\u021bionare al cript\u0103rii KIB SEARCHINFORM","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Controlul tuturor informa\u021biilor circulante \u00een organiza\u021bie este una dintre principalele sarcini \u00een implementarea practic\u0103 a documentelor organiza\u021bionale (politica de securitate a informa\u021biilor \u0219i alte documente interne de nivel inferior) ale organiza\u021biei.
\nSistemele de prevenire a pierderilor de informa\u021bii confiden\u021biale din sistemele informa\u021bionale (Data Leak Prevention, DLP) sunt, \u00een mare parte, capabile s\u0103 rezolve aceast\u0103 problem\u0103.
\n<\/a><\/noindex>
\nPe pia\u021ba actual\u0103 exist\u0103 suficiente variante ale acestor sisteme, precum: SearchInform DLP, Infowatch Traffic Monitor DLP, Zecurion DLP, Symantec DLP \u0219i altele. \u00cens\u0103, ast\u0103zi acest articol va discuta despre produsul companiei SRL \u00ab\u0421\u0451\u0440\u0447\u0418\u043d\u0444\u043e\u0440\u043c\u00bb.<\/p>\n

Conturul de securitate a informa\u021biilor SearchInform (KIB \u0421\u0451\u0440\u0447\u0438\u043d\u0444\u043e\u0440\u043c) \u2013 este un complex software serios \u0219i flexibil care, prin func\u021bionalitatea sa \u0219i instrumentele analitice extinse, creeaz\u0103 o concuren\u021b\u0103 serioas\u0103 altor companii din acest domeniu. Dar, ca \u0219i \u00een cazul tuturor produselor, KIB \u0421\u0451\u0440\u0447\u0438\u043d\u0444\u043e\u0440\u043c are unul dintre dezavantaje despre care vom vorbi acum.<\/p>\n

\"Analiza
\n
\nFigura 1 \u2013 Logoul KIB \u0421\u0451\u0440\u0447\u0438\u043d\u0444\u043e\u0440\u043c<\/i><\/p>\n

\u00cen KIB \u0421\u0451\u0440\u0447\u0438\u043d\u0444\u043e\u0440\u043c, una dintre sursele de colectare a informa\u021biilor este agentul (Windows\/Linux). Agentul pentru OS Windows, la fel ca \u0219i pentru OS Linux, are un sistem modular de colectare a informa\u021biilor, care se activeaz\u0103 sau dezactiveaz\u0103 dup\u0103 necesitate. Vom analiza modulul Device (controlul dispozitivelor externe, dispozitivelor de re\u021bea, proceselor etc.). O versiune demo a acestui produs poate fi ob\u021binut\u0103 oficial prin intermediul site-ului dezvoltatorului (cu func\u021bionalitate complet\u0103). Ac\u021biunile ulterioare vor fi realizate cu ajutorul cheii de licen\u021b\u0103 ob\u021binute \u2014 versiunea programului EndPointController 5.51.0.9 (versiunea agentului 5.51.0.9).<\/p>\n

Principala problem\u0103 \u00een func\u021bionarea acestui modul este algoritmul de criptare a informa\u021biilor pe dispozitivele externe de stocare. S\u0103 analiz\u0103m principiul de func\u021bionare al algoritmului de criptare \u00een KIB \u0421\u0451\u0440\u0447\u0438\u043d\u0444\u043e\u0440\u043c.<\/p>\n

Instal\u0103m agentul pe sta\u021bia de lucru \u0219i stabilim pentru lucru controlul dispozitivelor externe (modulul Device) \u00een sec\u021biunea \u201eMediu de re\u021bea\u201d EndPointController 5.51.0.9<\/p>\n

\"Analiza
\nFigura 2 \u2013 Instalarea \u0219i activarea modulului<\/i><\/p>\n

Configur\u0103m criptarea \u00een set\u0103rile modulului Device de pe tab-ul \u201eCriptare\u201d: gener\u0103m o cheie \u0219i activ\u0103m criptarea pentru toate suporturile (se poate activa criptarea doar pentru anumite suporturi de informa\u021bie).<\/p>\n

\"Analiza
\nFigura 3 \u2013 Configurarea listei albe<\/i><\/p>\n

\"Analiza
\nFigura 4 \u2013 Configurarea cript\u0103rii<\/i><\/p>\n

Acum ne ocup\u0103m de analiza algoritmului de criptare a fi\u0219ierelor cu acest produs. Vom copia fi\u0219ierele \u201eInstall.exe\u201d \u0219i \u201eFundamentele dreptului.rtf\u201d de pe sta\u021bia de lucru controlat\u0103 \u201eWINOC\u201d pe suportul extern \u201eDiscul extern (E:)\u201d. A\u0219a cum se vede \u00een figura 5, \u00een folderul ascuns \u201eSystem Volume Information\u201d s-au creat obiectele \u201eInstall.exe\u201d \u0219i \u201eFundamentele dreptului.rtf\u201d. Din aceasta, putem concluziona c\u0103 folderul \u201eSystem Volume Information\u201d con\u021bine o list\u0103 de obiecte criptate pe suportul extern.<\/p>\n

\"Analiza
\nFigura 5 \u2013 folderul \u201eSystem Volume Information\u201d<\/i><\/p>\n

\"Analiza
\nFigura 6 \u2013 Folderul r\u0103d\u0103cin\u0103 al suportului extern de informa\u021bie<\/i><\/p>\n

Dup\u0103 cum se \u0219tie, exist\u0103 trei aspecte fondamentale pe care se bazeaz\u0103 securitatea informa\u021bional\u0103 \u2013 integritatea, disponibilitatea \u0219i confiden\u021bialitatea. Aceste aspecte sunt compromise prin utilizarea acestei metode de criptare, deoarece informa\u021biile sistemului despre dac\u0103 un obiect este criptat sau nu trebuie s\u0103 se afle chiar \u00een antetul obiectului. <\/p>\n

Prin structura actual\u0103 a algoritmului sunt posibile modific\u0103ri sau \u0219tergeri \u00eent\u00e2mpl\u0103toare ale obiectelor din folderul \u201eSystem Volume Information\u201d de pe suportul extern, ceea ce poate duce la pierderea obiectelor criptate originale, precum \u0219i la modificarea obiectelor \u00een sta\u021bii necontrolate (de exemplu: redenumirea obiectului \u201eInstall.exe\u201d cu calea de re\u021bea \u201eE:Install.exe\u201d pe un computer f\u0103r\u0103 agent, \u00een timp ce fi\u0219ierul de informa\u021bii al produsului software KIB S\u00f6rchinform din folderul \u201eSystem Volume Information\u201d \u201eInstall.exe\u201d cu calea de re\u021bea \u201eE:System Volume InformationInstall.exe\u201d r\u0103m\u00e2ne neschimbat, deoarece agentul care ar modifica informa\u021biile de serviciu lipse\u0219te, iar deschiderea acestui fi\u0219ier devine imposibil\u0103).<\/p>\n

Sper\u0103m c\u0103 dezvoltatorul va lua \u00een considerare aceast\u0103 deficien\u021b\u0103 \u00een func\u021bionalitatea cript\u0103rii suporturilor externe de informa\u021bie \u00een produsul KIB S\u00f6rchinform \u0219i va modifica algoritmul s\u0103u.
\n
Sursa: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0441\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0446\u0438\u0440\u043a\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0437\u0430\u0434\u0430\u0447 \u043f\u0440\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u043e-\u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 (\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u044b\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u043d\u0438\u0436\u043d\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u0435\u0439) \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (Data Leak Prevention, DLP) \u0432 \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041d\u0430 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u043c \u0440\u044b\u043d\u043a\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a: […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30167","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Analiza erorii critice \u00een algoritmul de func\u021bionare al cript\u0103rii KIB SEARCHINFORM | ProHoster","description":"Controlul tuturor informa\u021biilor care circul\u0103 \u00een organiza\u021bie este una dintre principalele sarcini \u00een implementarea practic\u0103 a documentelor organiza\u021bional-administrative (politica de securitate informa\u021bional\u0103 \u0219i alte documente interne).","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0437\u0431\u043e\u0440 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u041a\u0418\u0411 SEARCHINFORM | ProHoster","og:description":"\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0441\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0446\u0438\u0440\u043a\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0437\u0430\u0434\u0430\u0447 \u043f\u0440\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u043e-\u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 (\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u044b\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435.","og:url":"https:\/\/prohoster.info\/ro\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:33:58+00:00","article:modified_time":"2019-10-31T18:33:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30167","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-20 23:59:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:40:41","updated":"2026-01-20 23:59:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/30167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=30167"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/30167\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=30167"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=30167"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=30167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}