{"id":52619,"date":"2019-11-13T00:00:00","date_gmt":"2019-11-12T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/informatsionnaya-bezopasnost-tsod"},"modified":"2020-02-18T14:00:24","modified_gmt":"2020-02-18T11:00:24","slug":"informatsionnaya-bezopasnost-tsod","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/informatsionnaya-bezopasnost-tsod","title":{"rendered":"Securitatea informa\u021biilor \u00een DC","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Securitatea informa\u021biilor \u00een DC\" src=\"\/wp-content\/uploads\/2019\/11\/07652cf8ae6be66324feae34f87ec975.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Iat\u0103 cum arat\u0103 centrul de monitorizare al centrului de date NORD-2 situat \u00een Moscova.<\/i><\/p>\n<p><i>Despre m\u0103surile luate pentru asigurarea securit\u0103\u021bii informa\u021biilor (SI) a\u021bi citit nu o dat\u0103. Orice specialist IT de bun-sim\u021b poate enumera cu u\u0219urin\u021b\u0103 5-10 reguli de SI. Cloud4Y \u00eens\u0103 propune s\u0103 discut\u0103m despre securitatea informa\u021bional\u0103 a centrelor de date.<\/i><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Atunci c\u00e2nd se asigur\u0103 securitatea informa\u021bional\u0103 a centrului de date, cele mai \u201eprotejate\u201d obiecte sunt: <\/p>\n<ul>\n<li>resursele informa\u021bionale (datele); <\/li>\n<li>procesele de colectare, prelucrare, stocare \u0219i transmitere a informa\u021biilor; <\/li>\n<li>utilizatorii sistemului \u0219i personalul de suport; <\/li>\n<li>infrastructura informa\u021bional\u0103, care include mijloace tehnice \u0219i software pentru procesarea, transmiterea \u0219i afi\u0219area informa\u021biilor, inclusiv canalele de schimb informa\u021bional, sistemele de protec\u021bie a informa\u021biilor \u0219i locurile. <\/li>\n<\/ul>\n<p>\nZona de responsabilitate a centrului de date depinde de modelul serviciilor oferite (IaaS\/PaaS\/SaaS). Cum arat\u0103 acest lucru, vede\u021bi \u00een imaginea de mai jos:<\/p>\n<p><img decoding=\"async\" alt=\"Securitatea informa\u021biilor \u00een DC\" src=\"\/wp-content\/uploads\/2019\/11\/39d75d16b5ce9c9d1c3f723c1d6138bb.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Domeniul de aplicare al politicii de securitate a centrului de date \u00een func\u021bie de modelul serviciilor oferite<\/i><\/p>\n<p>Partea cea mai important\u0103 a dezvolt\u0103rii politicii de securitate informa\u021bional\u0103 este construirea unui model de amenin\u021b\u0103ri \u0219i infractori. Ce poate constitui o amenin\u021bare pentru centrul de date?<\/p>\n<ol>\n<li>Evenimente nefavorabile de natur\u0103 natural\u0103, tehnogenic\u0103 \u0219i social\u0103<\/li>\n<li>Terori\u0219ti, elemente criminale etc.<\/li>\n<li>Dependenta de furnizori, operatori, parteneri, clien\u021bi<\/li>\n<li>Defec\u021biuni, erori, distrugeri, deterior\u0103ri ale mijloacelor software \u0219i tehnice<\/li>\n<li>Angaja\u021bii centrului de date care pun \u00een aplicare amenin\u021b\u0103rile SI folosindu-se de drepturile \u0219i autorit\u0103\u021bile acordate legal (infractori interni de SI)<\/li>\n<li>Angaja\u021bii centrului de date care pun \u00een aplicare amenin\u021b\u0103rile SI \u00een afara drepturilor \u0219i autorit\u0103\u021bilor acordate legal, precum \u0219i subiec\u021bi care nu fac parte din personalul centrului de date, dar care \u00eencearc\u0103 s\u0103 acceseze neautorizat \u0219i s\u0103 efectueze ac\u021biuni nepermise (infractori externi de SI)<\/li>\n<li>Nerespectarea cerin\u021belor autorit\u0103\u021bilor de supraveghere \u0219i reglementare, legisla\u021bia \u00een vigoare<\/li>\n<\/ol>\n<p>\nAnaliza riscurilor - identificarea amenin\u021b\u0103rilor poten\u021biale \u0219i evaluarea magnitudinii consecin\u021belor implement\u0103rii acestora - va ajuta la alegerea corect\u0103 a sarcinilor prioritare pe care trebuie s\u0103 le abordeze speciali\u0219tii \u00een securitatea informa\u021bional\u0103 a centrului de date, planific\u00e2nd bugetele pentru achizi\u021bionarea de mijloace tehnice \u0219i software.<\/p>\n<p>Asigurarea securit\u0103\u021bii este un proces continuu care implic\u0103 etape de planificare, implementare \u0219i exploatare, monitorizare, analiz\u0103 \u0219i \u00eembun\u0103t\u0103\u021birea sistemului de securitate a informa\u021biei. Pentru crearea sistemelor de management al securit\u0103\u021bii informa\u021biei se folose\u0219te a\u0219a-numitul \u201e<noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%A6%D0%B8%D0%BA%D0%BB_%D0%94%D0%B5%D0%BC%D0%B8%D0%BD%D0%B3%D0%B0\">ciclul Deming<\/a><\/noindex>\u00bb.<\/p>\n<p>O parte esen\u021bial\u0103 a politicilor de securitate este distribu\u021bia rolurilor \u0219i responsabilit\u0103\u021bii personalului pentru implementarea acestora. Politicile trebuie revizuite constant \u00een raport cu schimb\u0103rile legislative, noile amenin\u021b\u0103ri \u0219i instrumentele de protec\u021bie emergente. \u0218i, desigur, cerin\u021bele de securitate a informa\u021biei trebuie comunicate personalului, iar acesta trebuie instruit.<\/p>\n<h2>M\u0103suri organiza\u021bionale<\/h2>\n<p>\nUnii exper\u021bi sunt sceptici cu privire la \u201esecuritatea pe h\u00e2rtie\u201d, consider\u00e2nd c\u0103 abilit\u0103\u021bile practice de a face fa\u021b\u0103 \u00eencerc\u0103rilor de hacking sunt cele mai importante. Experien\u021ba real\u0103 \u00een asigurarea securit\u0103\u021bii informa\u021biei \u00een b\u0103nci spune altceva. Speciali\u0219tii \u00een securitate a informa\u021biei pot avea o expertiz\u0103 excelent\u0103 \u00een identificarea \u0219i diminuarea riscurilor, dar dac\u0103 personalul din centrul de date nu le va urma indica\u021biile, totul va fi inutil.<\/p>\n<p>Securitatea, de obicei, nu aduce bani, ci mai degrab\u0103 minimizeaz\u0103 riscurile. Din acest motiv, este adesea perceput\u0103 ca un obstacol secundar. \u0218i atunci c\u00e2nd speciali\u0219tii \u00een securitate \u00eencep s\u0103 se pl\u00e2ng\u0103 (ceea ce este pe deplin justificat), apar adesea conflicte cu personalul \u0219i cu conduc\u0103torii departamentelor opera\u021bionale.<\/p>\n<p>Existen\u021ba standardelor de industrie \u0219i a cerin\u021belor reglementatorilor \u00eei ajut\u0103 pe cei din domeniul securit\u0103\u021bii s\u0103 \u00ee\u0219i sus\u021bin\u0103 pozi\u021biile \u00een negocierile cu conducerea, iar politicile de securitate aprobate, reglement\u0103rile \u0219i regulamentele permit ob\u021binerea de la personal a respect\u0103rii cerin\u021belor enun\u021bate, oferind o baz\u0103 pentru implementarea adesea a solu\u021biilor nepopulare.<\/p>\n<h2>Protec\u021bia spa\u021biilor<\/h2>\n<p>\nAtunci c\u00e2nd un centru de date ofer\u0103 servicii \u00een modelul de colocation, asigurarea securit\u0103\u021bii fizice \u0219i a controlului accesului la echipamentele clien\u021bilor devine esen\u021bial\u0103. \u00cen acest scop, se folosesc compartiment\u0103ri (zone delimitate \u00een sal\u0103) care sunt supravegheate video de client \u0219i la care accesul personalului centrului de date este restric\u021bionat.<\/p>\n<p>\u00cen centrele de calculatoare ale statului, cu securitate fizic\u0103, la sf\u00e2r\u0219itul secolului trecut, lucrurile st\u0103teau destul de bine. Existau regimuri de acces, control al accesului \u00een \u00eenc\u0103peri, chiar dac\u0103 f\u0103r\u0103 calculatoare \u0219i camere video, iar sistemele de stingere a incendiilor - \u00een caz de incendiu, \u00een sala de calcul se activa automat freonul.<\/p>\n<p>\u00cen prezent, securitatea fizic\u0103 este asigurat\u0103 \u0219i mai bine. Sistemele de control \u0219i gestionare a accesului (SCGA) au devenit inteligente, fiind implementate metode biometrice de restric\u021bionare a accesului.<\/p>\n<p>Sistemele de stingere a incendiilor au devenit mai sigure pentru personal \u0219i echipamente, printre care se num\u0103r\u0103 instala\u021biile pentru inhibare, izolare, r\u0103cire \u0219i efectul hipoxic asupra zonei de incendiu. Al\u0103turi de sistemele obligatorii de protec\u021bie \u00eempotriva incendiilor, \u00een centrele de date se folose\u0219te adesea un sistem de detectare timpurie a incendiilor de tip aspira\u021bional.<\/p>\n<p>Pentru a proteja centrele de date de amenin\u021b\u0103rile externe - incendii, explozii, pr\u0103bu\u0219iri de structuri cl\u0103diri, inunda\u021bii, gaze corozive - au fost create camere \u0219i seifuri de securitate, \u00een care echipamentele serverului sunt protejate practic de to\u021bi factorii externi de distrugere.<\/p>\n<h2>Punctul slab - omul<\/h2>\n<p>\nSistemele de supraveghere video \u201eintelligente\u201d, senzorii de urm\u0103rire volumetric\u0103 (acustici, infraro\u0219ii, ultrasunete, microonde), SCGA au redus riscurile, dar nu au rezolvat toate problemele. Aceste instrumente nu vor ajuta, de exemplu, c\u00e2nd persoanele corect autorizate \u00een centru de date, cu uneltele corect transportate, \u201eating\u201d ceva. \u0218i, a\u0219a cum se \u00eent\u00e2mpl\u0103 adesea, o atingere accidental\u0103 va aduce maximum de probleme.<\/p>\n<p>Utilizarea necorespunz\u0103toare a resurselor de c\u0103tre personalul centrului de date poate afecta activitatea acestuia, de exemplu, mineritul ilegal. \u00cen aceste cazuri, sistemele de gestionare a infrastructurii centrului de date (DCIM) pot fi de ajutor.<\/p>\n<p>Personalul are nevoie de protec\u021bie, deoarece omul este adesea numit cea mai vulnerabil\u0103 verig\u0103 a sistemului de securitate. Atacurile \u021bintite ale delincven\u021bilor profesioni\u0219ti \u00eencep cel mai adesea prin utilizarea metodelor de inginerie social\u0103. Adesea, cele mai protejate sisteme e\u0219ueaz\u0103 sau sunt compromise dup\u0103 ce cineva a ap\u0103sat\/descarc\u0103\/f\u0103cut ceva. Riscurile de acest fel pot fi minimizate prin instruirea personalului \u0219i implementarea celor mai bune practici globale \u00een domeniul securit\u0103\u021bii informa\u021biilor.<\/p>\n<h2>Protec\u021bia infrastructurii ingineriei<\/h2>\n<p>\nAmenin\u021b\u0103rile tradi\u021bionale la func\u021bionarea centrului de date sunt \u00eentreruperile de alimentare \u0219i defectarea sistemelor de r\u0103cire. Aceste amenin\u021b\u0103ri sunt deja cunoscute \u0219i s-a \u00eenv\u0103\u021bat cum s\u0103 se lupte cu ele.<\/p>\n<p>O nou\u0103 tendin\u021b\u0103 a fost implementarea pe scar\u0103 larg\u0103 a echipamentelor \u201einteligente\u201d unite \u00eentr-o re\u021bea: UPS-uri gestionate, sisteme inteligente de r\u0103cire \u0219i ventila\u021bie, diverse controlere \u0219i senzori conecta\u021bi la sistemele de monitorizare. Atunci c\u00e2nd se construie\u0219te un model de amenin\u021b\u0103ri pentru centrul de date, nu trebuie uitat\u0103 probabilitatea unei atacuri asupra re\u021belei de infrastructur\u0103 (\u0219i, poate, \u0219i asupra re\u021belei IT asociate centrului de date). Situa\u021bia este complicat\u0103 de faptul c\u0103 o parte din echipament (de exemplu, chillere) poate fi plasat\u0103 \u00een afara centrului de date, de exemplu, pe acoperi\u0219ul unei cl\u0103diri \u00eenchiriate.<\/p>\n<h2>Protec\u021bia canalelor de comunica\u021bie<\/h2>\n<p>\nDac\u0103 centrul de date ofer\u0103 servicii nu numai pe modelul de colocation, va trebui s\u0103 se ocupe de protec\u021bia cloud-urilor. Potrivit Check Point, doar anul trecut 51% din organiza\u021biile din \u00eentreaga lume s-au confruntat cu atacuri asupra structurilor cloud. Atacurile DDoS opresc afacerile, viru\u0219ii criptatori solicit\u0103 o recompens\u0103, iar atacurile \u021bintite asupra sistemelor bancare duc la furtul de fonduri din conturile curente. <\/p>\n<p>Amenin\u021b\u0103rile externe \u00eei \u00eengrijoreaz\u0103 \u0219i pe speciali\u0219tii \u00een securitate informatic\u0103 ai centrelor de date. Cele mai relevante pentru centrele de date sunt atacurile distribuite, care vizeaz\u0103 oprirea furniz\u0103rii de servicii, precum \u0219i amenin\u021b\u0103rile de hacking, furt sau modificare a datelor con\u021binute \u00een infrastructura virtual\u0103 sau \u00een sistemele de stocare.<\/p>\n<p>Pentru protec\u021bia perimetrului extern al centrului de date, sunt utilizate sisteme moderne cu func\u021bii de detectare \u0219i neutralizare a codului mali\u021bios, controlul aplica\u021biilor \u0219i posibilitatea de a importa tehnologii de protec\u021bie proactiv\u0103 Threat Intelligence. \u00cen unele cazuri, se implementeaz\u0103 sisteme cu func\u021bionalitate IPS (prevenirea intruziunilor) cu ajustarea automat\u0103 a setului de semn\u0103turi \u00een func\u021bie de parametrii mediului protejat.<\/p>\n<p>Pentru protec\u021bia \u00eempotriva atacurilor DDoS, companiile ruse\u0219ti utilizeaz\u0103, de obicei, servicii externe specializate, care redirec\u021bioneaz\u0103 traficul c\u0103tre alte noduri \u0219i \u00eel filtreaz\u0103 \u00een cloud. Protec\u021bia de partea operatorului este realizat\u0103 mult mai eficient dec\u00e2t de partea clientului, iar centrele de date \u00eendeplinesc rolul de intermediari \u00een v\u00e2nzarea serviciilor.<\/p>\n<p>\u00cen centrele de date, pot ap\u0103rea atacuri DDoS interne: un atacator p\u0103trunde \u00een serverele slab protejate ale unei companii care \u00ee\u0219i opereaz\u0103 echipamentele pe modelul de colocation \u0219i, de pe acestea, efectueaz\u0103 un atac de tip \u201erefuz de serviciu\u201d asupra altor clien\u021bi ai acelui centru de date, prin re\u021beaua intern\u0103.<\/p>\n<h2>Aten\u021bie medii virtuale<\/h2>\n<p>\nTrebuie s\u0103 \u021binem cont de specificul obiectului protejat \u2014 utilizarea solu\u021biilor de virtualizare, dinamica modific\u0103rilor infrastructurii IT, interconectivitatea serviciilor, unde un atac reu\u0219it asupra unui client poate amenin\u021ba securitatea vecinilor. De exemplu, dac\u0103 un atacator sparge un container frontend \u00een timpul func\u021bion\u0103rii PaaS bazat pe Kubernetes, acesta poate ob\u021bine imediat toate informa\u021biile de autentificare \u0219i chiar acces la sistemul de orchestration.<\/p>\n<p>Produsele furnizate prin modelul de servicii au un grad ridicat de automatizare. Pentru a nu perturb\u0103 activitatea afacerii, protec\u021biile impuse trebuie s\u0103 aib\u0103 un grad similar de automatizare \u0219i scalabilitate orizontal\u0103. Scalabilitatea trebuie s\u0103 fie garantat\u0103 pe toate nivelurile securit\u0103\u021bii informa\u021biei, inclusiv automatizarea controlului accesului \u0219i rota\u021bia cheilor de acces. O problem\u0103 aparte este scalarea modulelor func\u021bionale care efectueaz\u0103 inspec\u021bia traficului de re\u021bea. <\/p>\n<p>De exemplu, filtrarea traficului de re\u021bea la nivelurile aplica\u021biei, re\u021belei \u0219i sesiunii \u00een centrele de date cu un grad ridicat de virtualizare ar trebui s\u0103 se efectueze la nivelul modulelor de re\u021bea ale hipervizorului (de exemplu, Distributed Firewall de la VMware) sau prin crearea de lan\u021buri de servicii (scuturi de re\u021bea virtuale de la Palo Alto Networks).<\/p>\n<p>\u00cen cazul \u00een care exist\u0103 puncte slabe la nivelul virtualiz\u0103rii resurselor de calcul, eforturile de a crea un sistem complex de securitate informa\u021bional\u0103 la nivelul platformei vor fi ineficiente.<\/p>\n<h2>Niveluri de protec\u021bie a informa\u021biilor \u00een centrele de date<\/h2>\n<p>\nAbordarea general\u0103 pentru protec\u021bie este utilizarea sistemelor integrate, multi-stratificate de asigurare a securit\u0103\u021bii informa\u021biei, care includ macro-segmentare la nivelul firewall-ului (delimitarea segmentelor pentru diverse direc\u021bii func\u021bionale de afaceri), micro-segmentare bazat\u0103 pe firewall-uri virtuale sau etichetarea traficului grupelor (rolurilor utilizatorilor sau serviciilor), definite prin politicile de acces.<\/p>\n<p>Urm\u0103toarea etap\u0103 este identificarea anomaliilor \u00een interiorul segmentelor \u0219i \u00eentre acestea. Se analizeaz\u0103 dinamica traficului, care poate indica activit\u0103\u021bi d\u0103un\u0103toare, precum scanarea re\u021belei, tentative de atacuri DDoS, desc\u0103rcarea de date, de exemplu, prin fragmentarea fi\u0219ierelor bazei de date \u0219i expunerea sesiunilor care apar periodic pe intervale lungi de timp. \u00cen interiorul centrului de date se desf\u0103\u0219oar\u0103 volume enorme de trafic, astfel c\u0103 pentru identificarea anomaliilor este necesar\u0103 utilizarea unor algoritmi avansa\u021bi de c\u0103utare, f\u0103r\u0103 analiza pachetelor. Este important s\u0103 fie recunoscute nu doar semnele activit\u0103\u021bii d\u0103un\u0103toare \u0219i anormale, ci \u0219i func\u021bionarea malware-ului chiar \u0219i \u00een traficul criptat f\u0103r\u0103 a-l decripta, a\u0219a cum este propus \u00een solu\u021biile Cisco (Stealthwatch).<\/p>\n<p>Ultima frontier\u0103 este protec\u021bia terminalelor din re\u021beaua local\u0103: servere \u0219i ma\u0219ini virtuale, de exemplu, prin intermediul agen\u021bilor instala\u021bi pe terminale (ma\u0219ini virtuale) care analizeaz\u0103 opera\u021biile de input-output, \u0219tergere, copiere \u0219i activit\u0103\u021bile re\u021belei, transmi\u021b\u00e2nd datele \u00een <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloud4y.ru\/cloud-hosting\/?utm_source=habr&amp;utm_medium=referral&amp;utm_campaign=article\">cloud<\/a><\/noindex>, unde se efectueaz\u0103 calculele ce necesit\u0103 puteri computa\u021bionale mari. Acolo se realizeaz\u0103 analiza folosind algoritmi Big Data, se construiesc arbori de logic\u0103 ma\u0219inal\u0103 \u0219i se identific\u0103 anomalii. Algoritmii se auto\u00eenv\u0103\u021b\u0103 pe baza unei cantit\u0103\u021bi uria\u0219e de date furnizate de re\u021beaua global\u0103 de senzori.<\/p>\n<p>Se poate evita instalarea agen\u021bilor. Instrumentele moderne de securitate a informa\u021biilor ar trebui s\u0103 fie f\u0103r\u0103 agen\u021bi \u0219i s\u0103 se integreze \u00een sistemele de operare la nivel de hypervisor.<br \/>\nM\u0103surile enumerate reduc semnificativ riscurile de securitate informa\u021bional\u0103, dar acestea ar putea fi insuficiente pentru centrele de date care asigur\u0103 automatizarea proceselor industriale de mare risc, cum ar fi centralele nucleare.<\/p>\n<h2>Cerin\u021bele reglementatorului<\/h2>\n<p>\n\u00cen func\u021bie de informa\u021biile prelucrate, infrastructurile fizice \u0219i virtualizate ale centrului de date trebuie s\u0103 \u00eendeplineasc\u0103 diferite cerin\u021be de securitate, formulate \u00een legi \u0219i standarde industriale.<\/p>\n<p>Printre aceste legi se num\u0103r\u0103 legea \u201eCu privire la datele personale\u201d (152-FZ) \u0219i legea \u201eCu privire la securitatea obiectelor KII din RF\u201d (187-FZ) care a intrat \u00een vigoare \u00een acest an \u2014 procuratura a \u00eenceput deja s\u0103 se intereseze de implementarea acesteia. Dispute privind apartenen\u021ba DC-urilor la subiec\u021bii KII sunt \u00eenc\u0103 \u00een curs de desf\u0103\u0219urare, dar cel mai probabil centrele de date care doresc s\u0103 ofere servicii subiec\u021bilor KII vor trebui s\u0103 respecte cerin\u021bele noii legisla\u021bii.<\/p>\n<p>Centrile de date care g\u0103zduiesc sistemele informa\u021bionale de stat se vor confrunta cu dificult\u0103\u021bi. Conform Hot\u0103r\u00e2rii Guvernului RF din 11.05.2017 nr. 555, problemele de securitate informa\u021bional\u0103 trebuie rezolvate \u00eenainte de punerea \u00een func\u021biune a sistemului GID. \u0218i un DC care dore\u0219te s\u0103 g\u0103zduiasc\u0103 sistemul GID trebuie s\u0103 corespund\u0103 anticipat cerin\u021belor autorit\u0103\u021bilor de reglementare.<\/p>\n<p>\u00cen ultimii 30 de ani, sistemele de asigurare a securit\u0103\u021bii DC-urilor au parcurs un drum lung: de la simple sisteme de protec\u021bie fizic\u0103 \u0219i m\u0103suri organizatorice, care \u00eentre timp nu \u0219i-au pierdut relevan\u021ba, la sisteme inteligente complexe, \u00een care din ce \u00een ce mai des sunt utilizate elemente de inteligen\u021b\u0103 artificial\u0103. \u00cens\u0103 esen\u021ba abord\u0103rii nu s-a schimbat. Cele mai moderne tehnologii nu vor salva f\u0103r\u0103 m\u0103suri organizatorice \u0219i o instruire adecvat\u0103 a personalului, iar documentele \u2014 f\u0103r\u0103 solu\u021bii software \u0219i tehnice. Securitatea DC-ului nu poate fi garantat\u0103 o dat\u0103 pentru totdeauna; aceasta este o munc\u0103 continu\u0103 zilnic\u0103 de identificare a amenin\u021b\u0103rilor prioritare \u0219i de solu\u021bionare complex\u0103 a problemelor care apar.<\/p>\n<p><b>Ce altceva util se poate citi \u00een blog <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloud4y.ru\/?utm_source=habr&amp;utm_medium=referral&amp;utm_campaign=article\">Cloud4Y<\/a><\/noindex><\/b><\/p>\n<p>\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/469487\/\">Configur\u0103m top \u00een GNU\/Linux<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/471380\/\">Pentesterii \u00een prima linie a securit\u0103\u021bii cibernetice<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/469447\/\">Calea inteligen\u021bei artificiale de la o idee fantastic\u0103 la o ramur\u0103 \u0219tiin\u021bific\u0103<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/461713\/\">4 modalit\u0103\u021bi de a economisi pe backup-urile din cloud<\/a><\/noindex><br \/>\n\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/474522\/\">O poveste tulbure<\/a><\/noindex><\/p>\n<p>Abona\u021bi-v\u0103 la canalul nostru <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/cloud4y\">Telegram<\/a><\/noindex>- pentru a nu rata urm\u0103torul articol! Scriem nu mai des de dou\u0103 ori pe s\u0103pt\u0103m\u00e2n\u0103 \u0219i doar despre subiecte relevante. De asemenea, v\u0103 reamintim c\u0103 pute\u021bi <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloud4y.ru\/try\/\">testa gratuit<\/a><\/noindex> solu\u021biile de cloud Cloud4Y.<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/474620\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0422\u0430\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0446\u0435\u043d\u0442\u0440 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u041c\u043e\u0441\u043a\u0432\u0435 \u0426\u041e\u0414 NORD-2 \u041e \u0442\u043e\u043c, \u043a\u0430\u043a\u0438\u0435 \u043c\u0435\u0440\u044b \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0418\u0411), \u0432\u044b \u0447\u0438\u0442\u0430\u043b\u0438 \u043d\u0435 \u043e\u0434\u0438\u043d \u0440\u0430\u0437. \u041b\u044e\u0431\u043e\u0439 \u0443\u0432\u0430\u0436\u0430\u044e\u0449\u0438\u0439 \u0441\u0435\u0431\u044f \u0430\u0439\u0442\u0438\u0448\u043d\u0438\u043a \u0441 \u043b\u0451\u0433\u043a\u043e\u0441\u0442\u044c\u044e \u043d\u0430\u0437\u043e\u0432\u0451\u0442 5-10 \u043f\u0440\u0430\u0432\u0438\u043b \u0418\u0411. Cloud4Y \u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u0442\u044c \u043f\u0440\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u043e\u0432. \u041f\u0440\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0426\u041e\u0414\u0430 \u0441\u0430\u043c\u044b\u043c\u0438 \u00ab\u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u044b\u043c\u0438\u00bb \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f: \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b (\u0434\u0430\u043d\u043d\u044b\u0435); \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-52619","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0422\u0430\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0446\u0435\u043d\u0442\u0440 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u041c\u043e\u0441\u043a\u0432\u0435 \u0426\u041e\u0414.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/informatsionnaya-bezopasnost-tsod\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0426\u041e\u0414 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0422\u0430\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0446\u0435\u043d\u0442\u0440 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u041c\u043e\u0441\u043a\u0432\u0435 \u0426\u041e\u0414.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/informatsionnaya-bezopasnost-tsod\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-12T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:00:24+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Securitatea informa\u021bional\u0103 a DC-ului | ProHoster","description":"A\u0219a arat\u0103 centrul de monitorizare al DC-ului situat \u00een Moscova.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/informatsionnaya-bezopasnost-tsod","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0426\u041e\u0414 | ProHoster","og:description":"\u0422\u0430\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0446\u0435\u043d\u0442\u0440 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u041c\u043e\u0441\u043a\u0432\u0435 \u0426\u041e\u0414.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/informatsionnaya-bezopasnost-tsod","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-12T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52619","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 04:15:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:40:26","updated":"2026-01-24 04:15:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/52619","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=52619"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/52619\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=52619"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=52619"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=52619"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}