{"id":37446,"date":"2019-10-31T22:17:39","date_gmt":"2019-10-31T19:17:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov\/"},"modified":"2019-10-31T22:17:39","modified_gmt":"2019-10-31T19:17:39","slug":"ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov","title":{"rendered":"Nu doar prin scanare, sau cum s\u0103 construie\u0219ti un proces de gestionare a vulnerabilit\u0103\u021bilor \u00een 9 pa\u0219i","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Pe 4 iulie, am organizat un mare <noindex><a rel=\"nofollow\" href=\"https:\/\/uni.dtln.ru\/courses\/universitety-dataline-v-moskve\/upravlenie-uyazvimostyami-standarty-realnost-instrumenty\">seminar despre gestionarea vulnerabilit\u0103\u021bilor<\/a><\/noindex>. Ast\u0103zi, public\u0103m transcrierea prezent\u0103rii lui Andrei Novikov de la Qualys. El va vorbi despre etapele pe care trebuie s\u0103 le parcurgi pentru a construi un flux de lucru eficient \u00een gestionarea vulnerabilit\u0103\u021bilor. Spoiler: vom ajunge la scanare abia la mijlocul drumului.<\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"rGXwDWhYWTg\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/rGXwDWhYWTg\/hqdefault.jpg\" alt=\"Reda\u021bi video\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Pasul nr. 1: Determin\u0103 nivelul de maturitate al proceselor de gestionare a vulnerabilit\u0103\u021bilor<\/h3>\n<p>\nLa \u00eenceput, trebuie s\u0103 \u00een\u021belegi \u00een ce etap\u0103 se afl\u0103 organiza\u021bia ta \u00een ceea ce prive\u0219te maturitatea proceselor de gestionare a vulnerabilit\u0103\u021bilor. Doar dup\u0103 aceea vei putea \u00een\u021belege \u00een ce direc\u021bie trebuie s\u0103 te \u00eendrep\u021bi \u0219i ce pa\u0219i este necesar s\u0103 urmezi. \u00cenainte de a te apuca de scan\u0103ri \u0219i alte activit\u0103\u021bi, organiza\u021biile trebuie s\u0103 fac\u0103 o munc\u0103 intern\u0103 \u0219i s\u0103 \u00een\u021beleag\u0103 cum sunt structurate procesele lor actuale din perspectiva IT-ului \u0219i a securit\u0103\u021bii informa\u021biei.<\/p>\n<p>\u00cencerca\u021bi s\u0103 r\u0103spunde\u021bi la \u00eentreb\u0103rile fundamentale:<\/p>\n<ul>\n<li>ave\u021bi procese de inventariere \u0219i clasificare a activelor;\u00a0<\/li>\n<li>c\u00e2t de regulat este scanat\u0103 infrastructura IT \u0219i dac\u0103 \u00eentreaga infrastructur\u0103 este acoperit\u0103, dac\u0103 vede\u021bi \u00eentreaga imagine;<\/li>\n<li>sunt monitorizate resursele dumneavoastr\u0103 IT;<\/li>\n<li>sunt implementate \u00een procesele dumneavoastr\u0103 anumite KPI-uri \u0219i cum \u00een\u021belege\u021bi c\u0103 acestea sunt \u00eendeplinite;<\/li>\n<li>sunt documentate toate aceste procese.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Nu doar prin scanare, sau cum s\u0103 construie\u0219ti un proces de gestionare a vulnerabilit\u0103\u021bilor \u00een 9 pa\u0219i\" src=\"\/wp-content\/uploads\/2019\/08\/8bfd0539c7e0e360fa2a45cc1d7bd9ac.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Pasul nr. 2: Asigura\u021bi-v\u0103 c\u0103 infrastructura este complet acoperit\u0103 <\/h3>\n<p>\nNu po\u021bi proteja ceea ce nu \u0219tii. Dac\u0103 nu ai o imagine complet\u0103 a ceea ce constituie infrastructura ta IT, nu vei putea s\u0103 o protejezi. Infrastructura modern\u0103 este complex\u0103 \u0219i se schimb\u0103 constant at\u00e2t cantitativ, c\u00e2t \u0219i calitativ. <br \/>\nAcum, infrastructura IT se bazeaz\u0103 nu doar pe un stoc de tehnologii clasice (sta\u021bii de lucru, <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/server\/\"   title=\"servere\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1841\">servere<\/a>, ma\u0219ini virtuale), dar \u0219i pe cele relativ noi \u2013 containere, microservicii. Serviciul de securitate informa\u021bional\u0103 se fere\u0219te din r\u0103sputeri de acestea, deoarece le este foarte greu s\u0103 lucreze cu ele folosind seturile existente de instrumente, care constau \u00een principal din scanere. Problema este c\u0103 orice scaner nu poate acoperi \u00eentreaga infrastructur\u0103. Pentru ca un scaner s\u0103 poat\u0103 accesa orice nod din infrastructur\u0103, trebuie s\u0103 coincid\u0103 mai mul\u021bi factori \u00een acela\u0219i timp. Activul trebuie s\u0103 fie \u00een interiorul perimetrului organiza\u021biei \u00een momentul scan\u0103rii. Scanerul trebuie s\u0103 aib\u0103 acces la re\u021bea c\u0103tre active, conturile acestora, pentru a aduna informa\u021bii complete.<\/p>\n<p>Conform statisticilor noastre, atunci c\u00e2nd este vorba despre organiza\u021bii medii sau mari, aproximativ 15\u201320% din infrastructur\u0103 nu este captat\u0103 de scaner din diverse motive: activul a ie\u0219it din perimetrul organiza\u021biei sau nu a ap\u0103rut niciodat\u0103 \u00een birou. De exemplu, un laptop al unui angajat care lucreaz\u0103 de la distan\u021b\u0103, dar are acces la re\u021beaua corporativ\u0103, sau un activ care se afl\u0103 \u00een servicii cloud externe de tip Amazon. \u0218i scanerul, cel mai probabil, nu va cunoa\u0219te nimic despre aceste active, deoarece sunt \u00een afara zonei sale de vizibilitate.<\/p>\n<p>Pentru a acoperi \u00eentreaga infrastructur\u0103, trebuie s\u0103 folosi\u021bi nu doar scanere, ci un \u00eentreg set de senzori, inclusiv tehnologii de ascultare pasiv\u0103 a traficului pentru a descoperi noi dispozitive \u00een infrastructura dumneavoastr\u0103, metoda agentului de colectare a datelor, care permite ob\u021binerea de date \u00een timp real, f\u0103r\u0103 a necesita scanare, f\u0103r\u0103 a necesita acreditive.<\/p>\n<p><img decoding=\"async\" alt=\"Nu doar prin scanare, sau cum s\u0103 construie\u0219ti un proces de gestionare a vulnerabilit\u0103\u021bilor \u00een 9 pa\u0219i\" src=\"\/wp-content\/uploads\/2019\/08\/8eb24a33955ba1f6a8f295001b4e413f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Pasul nr. 3: Efectua\u021bi categorisirea activelor<\/h3>\n<p>\nNu toate activele sunt la fel de utile. Determinarea activelor importante \u0219i a celor care nu sunt este sarcina dumneavoastr\u0103. Niciun instrument, acela\u0219i scaner, nu va face acest lucru pentru dumneavoastr\u0103. Ideal ar fi ca securitatea informa\u021bional\u0103, IT-ul \u0219i afacerea s\u0103 analizeze \u00eempreun\u0103 infrastructura pentru a identifica sistemele critice pentru afaceri. Pentru acestea, se stabilesc metrici acceptabile privind disponibilitatea, integritatea, confiden\u021bialitatea, RTO\/RPO etc.<\/p>\n<p>Acest lucru va ajuta la stabilirea priorit\u0103\u021bilor \u00een procesul de gestionare a vulnerabilit\u0103\u021bilor. C\u00e2nd speciali\u0219tii dumneavoastr\u0103 vor primi date despre vulnerabilit\u0103\u021bi, acestea nu vor fi o list\u0103 cu mii de vulnerabilit\u0103\u021bi \u00een \u00eentreaga infrastructur\u0103, ci informa\u021bii detaliate \u021bin\u00e2nd cont de criticitatea sistemelor.<\/p>\n<p><img decoding=\"async\" alt=\"Nu doar prin scanare, sau cum s\u0103 construie\u0219ti un proces de gestionare a vulnerabilit\u0103\u021bilor \u00een 9 pa\u0219i\" src=\"\/wp-content\/uploads\/2019\/08\/8c5fc2ea7a0c6f0df26be14c07bb7a9c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Pasul nr. 4: Efectua\u021bi o evaluare a infrastructurii<\/h3>\n<p>\n\u0218i abia \u00een cea de-a patra etap\u0103 ajungem la evaluarea infrastructurii din perspectiva vulnerabilit\u0103\u021bilor. V\u0103 recomand\u0103m s\u0103 acorda\u021bi aten\u021bie nu doar vulnerabilit\u0103\u021bilor din software, ci \u0219i erorilor de configurare, care pot fi, de asemenea, o vulnerabilitate. Aici recomand\u0103m metoda de colectare a informa\u021biilor prin agen\u021bi. Scannerele pot \u0219i trebuie folosite pentru a evalua securitatea perimetrului. Dac\u0103 utiliza\u021bi resurse de la furnizorii de cloud, trebuie s\u0103 colecta\u021bi informa\u021bii despre active \u0219i configura\u021bii \u0219i de acolo. Acorda\u021bi o aten\u021bie deosebit\u0103 analizei vulnerabilit\u0103\u021bilor \u00een infrastructurile care utilizeaz\u0103 containere Docker.<\/p>\n<p><img decoding=\"async\" alt=\"Nu doar prin scanare, sau cum s\u0103 construie\u0219ti un proces de gestionare a vulnerabilit\u0103\u021bilor \u00een 9 pa\u0219i\" src=\"\/wp-content\/uploads\/2019\/08\/3aa4a3a6aca611af6e49ef5aa2360ea0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Pasul nr. 5: Configura\u021bi raportarea<\/h3>\n<p>\nAcesta este unul dintre elementele importante din cadrul procesului de gestionare a vulnerabilit\u0103\u021bilor. <br \/>\nPrimul aspect: nimeni nu va dori s\u0103 lucreze cu rapoarte multipagina care con\u021bin liste dezordonate de vulnerabilit\u0103\u021bi \u0219i descrieri ale remedierii acestora. \u00cen primul r\u00e2nd, trebuie s\u0103 comunica\u021bi cu colegii \u0219i s\u0103 stabili\u021bi ce trebuie s\u0103 con\u021bin\u0103 raportul \u0219i cum prefer\u0103 s\u0103 primeasc\u0103 datele. De exemplu, unui administrator nu \u00eei trebuie o descriere detaliat\u0103 a vulnerabilit\u0103\u021bii, ci doar informa\u021bii despre patch-uri \u0219i un link pentru acestea. Altui specialist \u00eei sunt importante doar vulnerabilit\u0103\u021bile g\u0103site \u00een infrastructura de re\u021bea.<\/p>\n<p>Al doilea aspect: prin raportare \u00een\u021beleg nu doar rapoarte pe h\u00e2rtie. Acesta este un format \u00eenvechit de ob\u021binere a informa\u021biilor \u0219i o poveste static\u0103. O persoan\u0103 prime\u0219te un raport \u0219i nu poate influen\u021ba modul \u00een care sunt prezentate datele \u00een acel raport. Pentru a ob\u021bine raportul \u00een forma dorit\u0103, specialistul IT trebuie s\u0103 contacteze specialistul \u00een securitate cibernetic\u0103 \u0219i s\u0103 \u00eei cear\u0103 s\u0103 restructureze raportul. Timpul trece, apar noi vulnerabilit\u0103\u021bi. \u00cen loc s\u0103 se trimit\u0103 rapoarte dintre departamente, speciali\u0219tii din ambele domenii trebuie s\u0103 aib\u0103 posibilitatea de a observa datele online \u0219i de a vedea aceea\u0219i imagine. De aceea, \u00een platforma noastr\u0103 folosim rapoarte dinamice sub form\u0103 de tablouri de bord personalizabile. <\/p>\n<p><img decoding=\"async\" alt=\"Nu doar prin scanare, sau cum s\u0103 construie\u0219ti un proces de gestionare a vulnerabilit\u0103\u021bilor \u00een 9 pa\u0219i\" src=\"\/wp-content\/uploads\/2019\/08\/1ec7434339d2162d172e10cdc77afc6a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Pasul nr. 6: Prioritiza\u021bi<\/h3>\n<p>\nAici se pot face urm\u0103toarele:<\/p>\n<p>1. Crearea unui depozit cu imagini de aur ale sistemelor. Lucra\u021bi cu imagini de aur, verifica\u021bi-le constant pentru vulnerabilit\u0103\u021bi \u0219i corectitudinea configura\u021biei. Acest lucru se poate face cu ajutorul agen\u021bilor, care vor raporta automat apari\u021bia unui nou activ \u0219i vor oferi informa\u021bii despre vulnerabilit\u0103\u021bile acestuia. <\/p>\n<p>2. Concentra\u021bi-v\u0103 asupra activelor critice pentru afacere. Nu exist\u0103 nicio organiza\u021bie \u00een lume care s\u0103 poat\u0103 elimina vulnerabilit\u0103\u021bile dintr-o singur\u0103 mi\u0219care. Procesul de remediere a vulnerabilit\u0103\u021bilor este lung \u0219i chiar obositor. <\/p>\n<p>3. Restr\u00e2ngerea suprafe\u021bei de atac. Cur\u0103\u021ba\u021bi infrastructura de software-ul, serviciile inutile \u0219i \u00eenchide\u021bi porturile nesolicitate. Recent am avut un caz cu o companie care avea aproximativ 100 de mii de vulnerabilit\u0103\u021bi legate de o versiune veche a browserului Mozilla g\u0103site pe 40 de mii de dispozitive. A\u0219a cum s-a dovedit ulterior, Mozilla fusese integrat\u0103 \u00een imaginea de baz\u0103 cu mul\u021bi ani \u00een urm\u0103, nimeni nu o folosea, dar era sursa unui num\u0103r mare de vulnerabilit\u0103\u021bi. C\u00e2nd browserul a fost eliminat de pe calculatoare (chiar era instalat pe unele servere), zecile de mii de vulnerabilit\u0103\u021bi au disp\u0103rut.<\/p>\n<p>4. Clasifica\u021bi vulnerabilit\u0103\u021bile pe baza datelor de inteligen\u021b\u0103 (threat intelligence). Lua\u021bi \u00een considerare nu doar gravitatea vulnerabilit\u0103\u021bii, ci \u0219i existen\u021ba unui exploit public, malware, patch-uri, acces extern la sistemul cu vulnerabilitate. Evalua\u021bi impactul acestei vulnerabilit\u0103\u021bi asupra sistemelor critice de afaceri: poate conduce la pierderi de date, la servicii \u00eentrerupte etc.<\/p>\n<p><img decoding=\"async\" alt=\"Nu doar prin scanare, sau cum s\u0103 construie\u0219ti un proces de gestionare a vulnerabilit\u0103\u021bilor \u00een 9 pa\u0219i\" src=\"\/wp-content\/uploads\/2019\/08\/8335bdbd2055437c756055a1788500bc.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Pasul nr. 7: Stabili\u021bi KPI<\/h3>\n<p>\nNu scana\u021bi doar pentru a scana. Dac\u0103 nu se \u00eent\u00e2mpl\u0103 nimic cu vulnerabilit\u0103\u021bile descoperite, atunci aceast\u0103 scanare devine o opera\u021biune inutil\u0103. Pentru ca gestionarea vulnerabilit\u0103\u021bilor s\u0103 nu devin\u0103 o formalitate, g\u00e2ndi\u021bi-v\u0103 la modul \u00een care ve\u021bi evalua rezultatele. Securitatea informa\u021biei \u0219i IT-ul trebuie s\u0103 convin\u0103 asupra modului \u00een care va fi organizat\u0103 activitatea de remediere a vulnerabilit\u0103\u021bilor, c\u00e2t de des vor avea loc scan\u0103rile, aplicarea patch-urilor etc.<br \/>\nPe diapozitiv vede\u021bi exemple de KPI posibili. Exist\u0103 \u0219i o list\u0103 extins\u0103 pe care o recomand\u0103m clien\u021bilor no\u0219tri. Dac\u0103 sunte\u021bi interesa\u021bi, contacta\u021bi-m\u0103, voi \u00eemp\u0103rt\u0103\u0219i aceste informa\u021bii cu voi.<\/p>\n<p><img decoding=\"async\" alt=\"Nu doar prin scanare, sau cum s\u0103 construie\u0219ti un proces de gestionare a vulnerabilit\u0103\u021bilor \u00een 9 pa\u0219i\" src=\"\/wp-content\/uploads\/2019\/08\/3ff48f666b1c4f82546467a8514092f9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Pasul nr. 8: Automatiza\u021bi<\/h3>\n<p>\nM\u0103 voi \u00eentoarce la scanare. Noi la Qualys consider\u0103m c\u0103 scanarea este cel mai pu\u021bin important lucru care poate fi ast\u0103zi \u00een procesul de gestionare a vulnerabilit\u0103\u021bilor \u0219i c\u0103 trebuie s\u0103 o automatiz\u0103m c\u00e2t mai mult posibil, astfel \u00eenc\u00e2t s\u0103 se realizeze f\u0103r\u0103 interven\u021bia unui specialist \u00een securitatea informa\u021biei. Exist\u0103 multe instrumente disponibile ast\u0103zi care permit acest lucru. Este suficient s\u0103 aib\u0103 o API deschis\u0103 \u0219i num\u0103rul necesar de conectori.<\/p>\n<p>Un exemplu pe care \u00eemi place s\u0103-l dau este DevOps. Dac\u0103 inten\u021biona\u021bi s\u0103 implementa\u021bi un scanner de vulnerabilitate, atunci pur \u0219i simplu ve\u021bi uitat de DevOps. Cu tehnologiile vechi, care sunt scanner-ele clasice, nu ve\u021bi avea acces la aceste procese. Dezvoltatorii nu vor a\u0219tepta p\u00e2n\u0103 c\u00e2nd scanarea este finalizat\u0103 \u0219i le este livrat un raport voluminos \u0219i incomod. Dezvoltatorii se a\u0219teapt\u0103 ca informa\u021biile despre vulnerabilit\u0103\u021bi s\u0103 intre sub form\u0103 de bug-uri \u00een sistemele lor de compilare a codului. Securitatea trebuie s\u0103 fie integrat\u0103 perfect \u00een aceste procese \u0219i ea trebuie s\u0103 fie doar o func\u021bie care este apelat\u0103 automat de sistemul utilizat de dezvoltatorii dumneavoastr\u0103.<\/p>\n<p><img decoding=\"async\" alt=\"Nu doar prin scanare, sau cum s\u0103 construie\u0219ti un proces de gestionare a vulnerabilit\u0103\u021bilor \u00een 9 pa\u0219i\" src=\"\/wp-content\/uploads\/2019\/08\/82c15607c1c7b177e407181e19f17c0b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Pasul nr. 9: Concentra\u021bi-v\u0103 pe esen\u021bial<\/h3>\n<p>\nConcentra\u021bi-v\u0103 pe ceea ce aduce beneficii reale companiei dumneavoastr\u0103. Scan\u0103rile pot fi automate, iar rapoartele pot fi trimise tot automat. <br \/>\nConcentra\u021bi-v\u0103 pe \u00eembun\u0103t\u0103\u021birea proceselor pentru a le face mai flexibile \u0219i mai convenabile pentru to\u021bi participan\u021bii. Concentra\u021bi-v\u0103 pe integrarea securit\u0103\u021bii \u00een toate contractele cu partenerii dumneavoastr\u0103, care, de exemplu, dezvolt\u0103 aplica\u021bii web pentru dumneavoastr\u0103.<\/p>\n<p>Dac\u0103 ave\u021bi nevoie de informa\u021bii mai detaliate despre cum s\u0103 construi\u021bi un proces de gestionare a vulnerabilit\u0103\u021bilor \u00een companie, nu ezita\u021bi s\u0103 contacta\u021bi pe mine \u0219i colegii mei. Vom fi bucuro\u0219i s\u0103 ajut\u0103m.<\/p>\n<p><img decoding=\"async\" alt=\"Nu doar prin scanare, sau cum s\u0103 construie\u0219ti un proces de gestionare a vulnerabilit\u0103\u021bilor \u00een 9 pa\u0219i\" src=\"\/wp-content\/uploads\/2019\/08\/5a75c5f5b8569d5857a37464cae4af89.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/464643\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>4 \u0438\u044e\u043b\u044f \u043c\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0441\u0435\u043c\u0438\u043d\u0430\u0440 \u043f\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u043c \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0443 \u0432\u044b\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044f \u0410\u043d\u0434\u0440\u0435\u044f \u041d\u043e\u0432\u0438\u043a\u043e\u0432\u0430 \u0438\u0437 Qualys. \u041e\u043d \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0435\u0442, \u043a\u0430\u043a\u0438\u0435 \u044d\u0442\u0430\u043f\u044b \u043d\u0443\u0436\u043d\u043e \u043f\u0440\u043e\u0439\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u0421\u043f\u043e\u0439\u043b\u0435\u0440: \u0434\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u044b \u0434\u043e\u0431\u0435\u0440\u0435\u043c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043a \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u043f\u0443\u0442\u0438. \u0428\u0430\u0433 \u2116 1: \u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u0435 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0437\u0440\u0435\u043b\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0412 \u0441\u0430\u043c\u043e\u043c \u043d\u0430\u0447\u0430\u043b\u0435 \u043d\u0443\u0436\u043d\u043e \u043f\u043e\u043d\u044f\u0442\u044c, \u043d\u0430 \u043a\u0430\u043a\u043e\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28098,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-37446","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"4 \u0438\u044e\u043b\u044f \u043c\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0441\u0435\u043c\u0438\u043d\u0430\u0440 \u043f\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041d\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0435\u0434\u0438\u043d\u044b\u043c, \u0438\u043b\u0438 \u043a\u0430\u043a \u043f\u043e\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0437\u0430 9 \u0448\u0430\u0433\u043e\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"4 \u0438\u044e\u043b\u044f \u043c\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0441\u0435\u043c\u0438\u043d\u0430\u0440 \u043f\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:17:39+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:17:39+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nu doar scanarea, sau cum s\u0103 construi\u021bi un proces de gestionare a vulnerabilit\u0103\u021bilor \u00een 9 pa\u0219i | ProHoster","description":"Pe 4 iulie, am desf\u0103\u0219urat un seminar important pe tema managementului.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0435\u0434\u0438\u043d\u044b\u043c, \u0438\u043b\u0438 \u043a\u0430\u043a \u043f\u043e\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0437\u0430 9 \u0448\u0430\u0433\u043e\u0432 | ProHoster","og:description":"4 \u0438\u044e\u043b\u044f \u043c\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0441\u0435\u043c\u0438\u043d\u0430\u0440 \u043f\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:17:39+00:00","article:modified_time":"2019-10-31T19:17:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37446","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:59:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:26:28","updated":"2026-02-09 17:59:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/37446","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=37446"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/37446\/revisions"}],"predecessor-version":[{"id":159085,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/37446\/revisions\/159085"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/28098"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=37446"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=37446"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=37446"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}