{"id":52599,"date":"2019-11-12T00:00:00","date_gmt":"2019-11-11T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam"},"modified":"2021-02-01T11:40:25","modified_gmt":"2021-02-01T09:40:25","slug":"privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","title":{"rendered":"Managementul accesului privilegiat ca sarcin\u0103 prioritar\u0103 \u00een securitatea informa\u021biei (de exemplu, Fudo PAM)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Managementul accesului privilegiat ca sarcin\u0103 prioritar\u0103 \u00een securitatea informa\u021biei (de exemplu, Fudo PAM)\" src=\"\/wp-content\/uploads\/2019\/11\/fe518ef5e33b7ebcaa08e5e5459d31b6.jpg\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Exist\u0103 un document destul de interesant <noindex><a rel=\"nofollow\" href=\"https:\/\/drive.google.com\/file\/d\/1qOT0XDf71JJ1lBZUZQSbpC4cJKwGqVzM\/view?usp=sharing\">CIS Controls<\/a><\/noindex>, care abordeaz\u0103 Securitatea Informa\u021bional\u0103 utiliz\u00e2nd principiul Pareto (80\/20). Acest principiu afirm\u0103 c\u0103 20% din m\u0103surile de protec\u021bie ofer\u0103 80% din rezultat \u00een ceea ce prive\u0219te securitatea companiei. Studiind acest document, mul\u021bi \u201especiali\u0219ti \u00een securitate\u201d descoper\u0103 c\u0103, \u00een alegerea m\u0103surilor de protec\u021bie, nu pornesc de la cele mai eficiente m\u0103suri. Documentul eviden\u021biaz\u0103 5 m\u0103suri cheie de protec\u021bie, care au cel mai mare efect asupra Securit\u0103\u021bii Informa\u021bionale:<\/p>\n<ol>\n<li><b>Inventarierea tuturor dispozitivelor din re\u021bea<\/b>. Este greu s\u0103 protejezi re\u021beaua c\u00e2nd nu \u0219tii ce se afl\u0103 \u00een ea.<\/li>\n<li><b>Inventarierea tuturor aplica\u021biilor software<\/b>. Software-ul cu vulnerabilit\u0103\u021bi devine adesea punctul de intrare pentru hacker.<\/li>\n<li><b>Configurare sigur\u0103<\/b> \u2014 sau utilizarea obligatorie a func\u021biilor de protec\u021bie \u00eencorporate \u00een software sau dispozitive. Pe scurt \u2014 schimba\u021bi parolele implicite \u0219i limita\u021bi accesul.<\/li>\n<li><b>Identificarea \u0219i remedierea vulnerabilit\u0103\u021bilor<\/b>. Cele mai multe atacuri \u00eencep din cauza unei vulnerabilit\u0103\u021bi cunoscute.<\/li>\n<li><b>Gestionarea accesului privilegiat<\/b>. Utilizatorii dvs. ar trebui s\u0103 aib\u0103 doar drepturile necesare \u0219i s\u0103 efectueze doar ac\u021biunile esen\u021biale.<\/li>\n<\/ol>\n<p>\u00cen cadrul acestui articol, vom analiza exact punctul 5 prin utilizarea <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/katalog\/fudo_security\">Fudo PAM<\/a><\/noindex>. Mai precis, vom examina cazurile tipice \u0219i problemele care pot fi identificate dup\u0103 implementare sau \u00een cadrul test\u0103rii gratuite a Fudo PAM.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Fudo PAM<\/h3>\n<p>C\u00e2teva cuvinte despre solu\u021bie. Fudo PAM este o solu\u021bie relativ nou\u0103 pentru gestionarea accesului privilegiat. Printre caracteristicile cheie se num\u0103r\u0103:<\/p>\n<ul>\n<li><b>\u00cenregistrarea sesiunii<\/b>. Vizualizarea sesiunii \u00een timp real. Conectarea la sesiune. Crearea de dovezi pentru procesul judiciar.<\/li>\n<li><b>Monitorizare proactiv\u0103<\/b>. Politici flexibile. C\u0103utare dup\u0103 \u0219ablon. Automatizarea ac\u021biunilor.<\/li>\n<li><b>Avertizarea amenin\u021b\u0103rilor<\/b>. Utilizarea neautorizat\u0103 a conturilor. Evaluarea nivelului de amenin\u021bare. Detectarea anomaliilor.<\/li>\n<li><b>Identificarea responsabililor<\/b>. \u00cen cazul utiliz\u0103rii unei singure cont pentru conectarea mai multor utilizatori.<\/li>\n<li><b>Analiza eficien\u021bei<\/b>. A utilizatorilor individuali, departamentelor sau organiza\u021biilor \u00eentregi.<\/li>\n<li><b>Controlul precis al accesului<\/b>. Limitarea traficului \u0219i accesul pentru utilizatori \u00een anumite intervale de timp.<\/li>\n<\/ul>\n<p>\u0218i, cel mai mare avantaj \u2014 se implementeaz\u0103 practic \u00een c\u00e2teva ore, dup\u0103 care sistemul este gata de utilizare.<\/p>\n<p>Pentru cei interesa\u021bi de produs, va avea loc un webinar cu o prezentare detaliat\u0103 \u0219i o demonstra\u021bie a func\u021bionalit\u0103\u021bii. \u00cens\u0103, vom trece la problemele reale pe care reu\u0219im s\u0103 le identific\u0103m \u00een cadrul proiectelor pilot de gestionare a accesului privilegiat.<\/p>\n<h3>1. Administratorii re\u021belei \u00ee\u0219i deschid \u00een mod regulat accesul la resurse interzise<\/h3>\n<p>C\u00e2t de ciudat, dar primele incidente pe care reu\u0219im s\u0103 le identific\u0103m sunt \u00eenc\u0103lc\u0103rile din partea administratorilor. Cel mai frecvent, acestea constau \u00een modific\u0103ri neautorizate ale listelor de acces pe echipamentele de re\u021bea. De exemplu, pentru a deschide accesul la un site interzis sau pentru o aplica\u021bie interzis\u0103. Trebuie men\u021bionat c\u0103 astfel de modific\u0103ri pot r\u0103m\u00e2ne \u00een configura\u021bia echipamentului timp de ani de zile.<\/p>\n<h3>2. Folosirea aceluia\u0219i cont de c\u0103tre mai mul\u021bi administratori<\/h3>\n<p>O alt\u0103 problem\u0103 frecvent\u0103 legat\u0103 de administratori. \u00cemp\u0103rt\u0103\u0219irea unui cont \u00eentre colegi este o practic\u0103 foarte comun\u0103. Este convenabil, dar dup\u0103 aceea este destul de greu de \u00een\u021beles cine anume este responsabil pentru anumite ac\u021biuni.<\/p>\n<h3>3. Angaja\u021bii remote lucreaz\u0103 mai pu\u021bin de 2 ore pe zi<\/h3>\n<p>\u00cen multe companii exist\u0103 angaja\u021bi sau parteneri remote care au nevoie de acces la resursele interne (cel mai frecvent birou de lucru remote). Fudo PAM permite monitorizarea activit\u0103\u021bii reale \u00een cadrul acestor sesiuni. Deseori se constat\u0103 c\u0103 angaja\u021bii remote lucreaz\u0103 mult mai pu\u021bin dec\u00e2t este declarat.<\/p>\n<h3>4. Se folose\u0219te aceea\u0219i parol\u0103 pentru mai multe sisteme<\/h3>\n<p>O problem\u0103 destul de serioas\u0103. A \u021bine minte mai multe parole este \u00eentotdeauna greu, de aceea utilizatorii folosesc adesea o singur\u0103 parol\u0103 pentru toate sistemele. Dac\u0103 aceast\u0103 parol\u0103 \"se scurge\", atunci un infractor poten\u021bial poate ob\u021bine acces practic la \u00eentreaga infrastructur\u0103 IT.<\/p>\n<h3>5. Utilizatorii au drepturi mai mari dec\u00e2t era de a\u0219teptat<\/h3>\n<p>Se descoper\u0103 adesea c\u0103 utilizatorii, care p\u0103reau c\u0103 au drepturi restric\u021bionate, de fapt au privilegii mai mari dec\u00e2t este necesar. De exemplu, pot reporni un dispozitiv controlat. De obicei, aceasta este fie o eroare a celui care a dat drepturile, fie pur \u0219i simplu deficien\u021be ale sistemului \u00eencorporat de delimitare a drepturilor.<\/p>\n<h3>Webinar<\/h3>\n<p>Dac\u0103 v\u0103 intereseaz\u0103 subiectul PAM, v\u0103 invit\u0103m la <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/events\/fudo_vebinar\"><b>viitorul webinar despre Fudo PAM<\/b><\/a><\/noindex>, care va avea loc pe 21 noiembrie.<\/p>\n<p>Aceasta nu este ultimul nostru webinar din acest an pe care ne propunem s\u0103-l organiz\u0103m, a\u0219a c\u0103 r\u0103m\u00e2ne\u021bi la curent cu nout\u0103\u021bile (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\">Telegram<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\">Facebook<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\">VK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\">Blogul TS Solution<\/a><\/noindex>)!<\/p>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/471750\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 CIS Controls, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0430 \u041f\u0430\u0440\u0435\u0442\u043e (80\/20). \u042d\u0442\u043e\u0442 \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u0433\u043b\u0430\u0441\u0438\u0442, \u0447\u0442\u043e 20% \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0440 \u0434\u0430\u044e\u0442 80% \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430 \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u041e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0432\u0448\u0438\u0441\u044c \u0441 \u044d\u0442\u0438\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u043c\u043d\u043e\u0433\u0438\u0435 \u201c\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0438\u201d \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0438 \u0432\u044b\u0431\u043e\u0440\u0435 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0440 \u043e\u043d\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u043d\u0435 \u0441 \u0441\u0430\u043c\u044b\u0445 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043c\u0435\u0440. \u0412 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0432\u044b\u0434\u0435\u043b\u044f\u044e\u0442 5 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043c\u0435\u0440 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":52600,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-52599","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Privileged Access Management \u043a\u0430\u043a \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u0432 \u0418\u0411 (\u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 Fudo PAM) | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-11T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-02-01T09:40:25+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Managementul accesului privilegiat ca sarcin\u0103 prioritar\u0103 \u00een Securitatea Informa\u021biilor (exemplul Fudo PAM) | ProHoster","description":"Exist\u0103 destul de multe.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Privileged Access Management \u043a\u0430\u043a \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u0432 \u0418\u0411 (\u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 Fudo PAM) | ProHoster","og:description":"\u0415\u0441\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/privileged-access-management-kak-prioritetnaya-zadacha-v-ib-na-primere-fudo-pam","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-11T21:00:00+00:00","article:modified_time":"2021-02-01T09:40:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52599","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 04:11:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:40:27","updated":"2026-01-24 04:11:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/52599","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=52599"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/52599\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/52600"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=52599"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=52599"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=52599"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}