{"id":97776,"date":"2020-10-21T20:42:28","date_gmt":"2020-10-21T18:42:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/red-teaming-kompleksnaya-imitacziya-atak-metodologiya-i-instrumenty"},"modified":"2020-10-21T20:42:28","modified_gmt":"2020-10-21T18:42:28","slug":"red-teaming-kompleksnaya-imitacziya-atak-metodologiya-i-instrumenty","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/red-teaming-kompleksnaya-imitacziya-atak-metodologiya-i-instrumenty","title":{"rendered":"Red Teaming \u2014 simularea complet\u0103 a atacurilor. Metodologie \u0219i instrumente","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Red Teaming \u2014 simularea complet\u0103 a atacurilor. Metodologie \u0219i instrumente\" src=\"\/wp-content\/uploads\/2020\/10\/9c219b917125bd86b6d9e544417c7548.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Sursa: Acunetix<\/i><\/p>\n<p>Red Teaming (atac de \u00abechip\u0103 ro\u0219ie\u00bb) \u2013 este o simulare complex\u0103 a atacurilor reale cu scopul de a evalua securitatea cibernetic\u0103 a sistemelor. \u00abEchipa ro\u0219ie\u00bb reprezint\u0103 un grup <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/penetration-testing-tools\/\">de speciali\u0219ti \u00een teste de penetrare <\/a><\/noindex> (exper\u021bi care efectueaz\u0103 teste de penetrare \u00een sistem). Ace\u0219tia pot fi angaja\u021bi extern sau parte a organiza\u021biei tale, dar \u00een toate cazurile, rolul lor este acela\u0219i \u2013 de a imita ac\u021biunile atacatorilor \u0219i de a \u00eencerca s\u0103 p\u0103trund\u0103 \u00een sistemul t\u0103u.<\/p>\n<p>Al\u0103turi de \u00abechipele ro\u0219ii\u00bb, \u00een securitatea cibernetic\u0103 exist\u0103 \u0219i alte echipe. De exemplu, \u00abechipa albastr\u0103\u00bb (Blue Team) colaboreaz\u0103 cu cea ro\u0219ie, dar activitatea ei este axat\u0103 pe \u00eembun\u0103t\u0103\u021birea securit\u0103\u021bii infrastructurilor sistemului din interior. \u00abEchipa purpurie\u00bb (Purple Team) este un liant, ajut\u00e2nd cele dou\u0103 echipe \u00een dezvoltarea strategiilor de atac \u0219i a m\u0103surilor de protec\u021bie. Cu toate acestea, red teaming este una dintre cele mai pu\u021bin \u00een\u021belese metode de gestionare a securit\u0103\u021bii cibernetice, iar multe organiza\u021bii \u00eenc\u0103 ezit\u0103 s\u0103 foloseasc\u0103 aceast\u0103 practic\u0103.<br \/>\n\u00cen acest articol, vom explica detaliat ce se ascunde \u00een spatele no\u021biunii de Red Teaming \u0219i cum implementarea practicilor complexe de simulare a atacurilor reale poate ajuta la \u00eembun\u0103t\u0103\u021birea securit\u0103\u021bii organiza\u021biei tale. Scopul articolului este de a ar\u0103ta cum aceast\u0103 metod\u0103 poate \u00eembun\u0103t\u0103\u021bi semnificativ securitatea sistemelor tale informa\u021bionale.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2> Red Teaming: prezentare general\u0103<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Red Teaming \u2014 simularea complet\u0103 a atacurilor. Metodologie \u0219i instrumente\" src=\"\/wp-content\/uploads\/2020\/10\/25c2fe66a5b91050c9a6c8947d6c8340.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDe\u0219i \u00een zilele noastre \u00abechipele ro\u0219ii\u00bb \u0219i \u00abechipele albastre\u00bb sunt asociate \u00een principal cu domeniul tehnologiilor informa\u021bionale \u0219i securit\u0103\u021bii cibernetice, aceste no\u021biuni au fost concepute de militari. De fapt, eu am auzit prima dat\u0103 despre aceste concepte \u00een armat\u0103. Lucr\u00e2nd ca analist de securitate cibernetic\u0103 \u00een anii 1980, accesul la sistemele informatice criptate era mult mai restric\u021bionat dec\u00e2t acum.<\/p>\n<p>\u00cen rest, prima mea experien\u021b\u0103 cu jocurile de r\u0103zboi \u2014 modelare, simulare \u0219i organizarea interac\u021biunilor \u2014 a fost foarte similar\u0103 cu procesul de ast\u0103zi de simulare complex\u0103 a atacurilor, care a g\u0103sit aplicare \u00een securitatea cibernetic\u0103. La fel ca acum, o mare aten\u021bie a fost acordat\u0103 utiliz\u0103rii metodelor de inginerie social\u0103 pentru a convinge angaja\u021bii s\u0103 ofere acces neautorizat \u201edu\u0219manului\u201d la sistemele militare. Prin urmare, de\u0219i metodele tehnice de simulare a atacurilor au avansat semnificativ fa\u021b\u0103 de anii '80, este important de men\u021bionat c\u0103 multe dintre instrumentele fundamentale ale abord\u0103rii competi\u021bionale, \u00een special tehnicile de inginerie social\u0103, depind \u00een mare m\u0103sur\u0103 de platform\u0103.<\/p>\n<p>Valoarea principal\u0103 a simul\u0103rii complexe a atacurilor reale nu s-a schimbat nici ea din anii '80. Simul\u00e2nd un atac asupra sistemelor proprii, este mai u\u0219or s\u0103 detectezi vulnerabilit\u0103\u021bile \u0219i s\u0103 \u00een\u021belegi cum pot fi utilizate. \u0218i, de\u0219i \u00eenainte red teaming-ul era folosit \u00een principal de \u201ehackeri etici\u201d \u0219i speciali\u0219ti \u00een securitate cibernetic\u0103 care c\u0103utau vulnerabilit\u0103\u021bi prin teste de penetrare, acum aceast\u0103 metod\u0103 are o aplicare mai larg\u0103 \u00een domeniul securit\u0103\u021bii cibernetice \u0219i al afacerilor.<\/p>\n<p>Cheia red teaming-ului este \u00een\u021belegerea faptului c\u0103 nu po\u021bi ob\u021bine o imagine a securit\u0103\u021bii sistemelor tale p\u00e2n\u0103 nu sunt atacate. \u0218i, \u00een loc s\u0103 te expui riscului unui atac din partea unor infractori reali, este mult mai sigur s\u0103 modelezi un astfel de atac cu ajutorul \u201eechipei ro\u0219ii\u201d.<\/p>\n<h2> Red Teaming: scenarii de utilizare<\/h2>\n<p>\nO modalitate simpl\u0103 de a \u00een\u021belege principiile red teaming-ului este s\u0103 privim c\u00e2teva exemple. Iat\u0103 dou\u0103 dintre ele:<\/p>\n<ul>\n<li><strong>Scenariul 1.<\/strong> Imagina\u021bi-v\u0103 c\u0103 a avut loc un test de penetrare asupra unui site de asisten\u021b\u0103 pentru clien\u021bi, iar verificarea a fost reu\u0219it\u0103. La prima vedere, asta ar p\u0103rea c\u0103 totul este \u00een regul\u0103. Totu\u0219i, ulterior, \u00een cadrul unei simul\u0103ri complexe a atacului, \u201eechipa ro\u0219ie\u201d descoper\u0103 c\u0103, de\u0219i aplica\u021bia de asisten\u021b\u0103 pentru clien\u021bi func\u021bioneaz\u0103 corect, func\u021bia de chat de la ter\u021bi nu poate identifica precis persoanele, iar acest lucru le ofer\u0103 ocazia de a p\u0103c\u0103li reprezentan\u021bii serviciului de asisten\u021b\u0103 pentru clien\u021bi s\u0103 schimbe adresa de email din cont (ceea ce face ca o nou\u0103 persoan\u0103, un infractor, s\u0103 poat\u0103 ob\u021bine acces).<\/li>\n<li><strong>Scenariul 2. <\/strong>\u00cen urma desf\u0103\u0219ur\u0103rii unui test de penetrare, s-a constatat c\u0103 toate sistemele de control VPN \u0219i acces de la distan\u021b\u0103 sunt protejate. Cu toate acestea, un reprezentant al \u201eechipei ro\u0219ii\u201d trece f\u0103r\u0103 obstacole pe l\u00e2ng\u0103 recep\u021bie \u0219i ia laptopul unuia dintre angaja\u021bi.<\/li>\n<\/ul>\n<p>\n\u00cen ambele cazuri men\u021bionate mai sus, \u201eechipa ro\u0219ie\u201d verific\u0103 nu doar fiabilitatea fiec\u0103rui sistem \u00een parte, ci \u0219i \u00eentreaga sistem\u0103 \u00een ansamblu pentru a identifica punctele slabe.<\/p>\n<h2> Cui \u00eei este necesar\u0103 o simulare cuprinz\u0103toare a atacurilor?<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Red Teaming \u2014 simularea complet\u0103 a atacurilor. Metodologie \u0219i instrumente\" src=\"\/wp-content\/uploads\/2020\/10\/885c58d274c4e57dd165bf47da13e410.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPe scurt, aproape orice companie poate beneficia de red teaming. A\u0219a cum se arat\u0103 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/2019-data-risk-report\/\">\u00een raportul nostru despre riscurile globale ale datelor din 2019.<\/a><\/noindex>, un num\u0103r alarmant de mare de organiza\u021bii se afl\u0103 \u00een falsa convingere c\u0103 au control complet asupra datelor lor. Am descoperit, de exemplu, c\u0103 \u00een medie 22% din folderele unei companii sunt accesibile oric\u0103rui angajat \u0219i c\u0103 87% dintre companii au mai mult de 1000 de fi\u0219iere confiden\u021biale \u00eenvechite \u00een sistemele lor.<\/p>\n<p>Dac\u0103 compania dumneavoastr\u0103 nu activeaz\u0103 \u00een domeniul tehnologiei, ar putea p\u0103rea c\u0103 red teaming nu va aduce multe beneficii. Dar nu este adev\u0103rat. Securitatea cibernetic\u0103 nu \u00eenseamn\u0103 doar protejarea informa\u021biilor confiden\u021biale.<\/p>\n<p>Atacatorii \u00eencearc\u0103 \u00een egal\u0103 m\u0103sur\u0103 s\u0103 ob\u021bin\u0103 acces la tehnologie, indiferent de domeniul de activitate al companiei. De exemplu, ei pot c\u0103uta s\u0103 acceseze re\u021beaua dumneavoastr\u0103 pentru a-\u0219i masca ac\u021biunile de capturare a unei alte sisteme sau re\u021bele din alt\u0103 parte a lumii. \u00cen acest tip de atac, datele dumneavoastr\u0103 nu sunt importante pentru ei. Ei doresc s\u0103 infecteze computerele dumneavoastr\u0103 cu malware pentru a transforma sistemul dumneavoastr\u0103 \u00eentr-un botnet.<\/p>\n<p>Pentru companiile mici, poate fi dificil s\u0103 g\u0103seasc\u0103 resursele necesare pentru a desf\u0103\u0219ura red teaming. \u00cen acest caz, are sens s\u0103 \u00eencredin\u021beze acest proces unui contractor extern.<\/p>\n<h2> Red Teaming: recomand\u0103ri<\/h2>\n<p>\nTimpul optim pentru desf\u0103\u0219urarea red teaming-ului \u0219i frecven\u021ba acestuia depind de sectorul \u00een care activa\u021bi \u0219i de maturitatea m\u0103surilor dumneavoastr\u0103 de asigurare a securit\u0103\u021bii cibernetice.<\/p>\n<p>\u00cen special, trebuie s\u0103 automatiza\u021bi ac\u021biuni cum ar fi cercetarea activelor \u0219i analiza vulnerabilit\u0103\u021bilor. Organiza\u021bia dvs. trebuie, de asemenea, s\u0103 combine tehnologiile automatizate cu controlul uman, efectu\u00e2nd \u00een mod regulat teste complete de penetrare.<br \/>\nDup\u0103 finalizarea mai multor cicluri de business de testare a penetra\u021biei \u0219i identificare de vulnerabilit\u0103\u021bi, pute\u021bi trece la o simulare complex\u0103 a unui atac real. \u00cen aceast\u0103 etap\u0103, red teaming v\u0103 va aduce beneficii semnificative. Totu\u0219i, \u00eencercarea de a-l desf\u0103\u0219ura \u00eenainte de a stabili fundamentele securit\u0103\u021bii cibernetice nu va aduce rezultate semnificative.<\/p>\n<p>O echip\u0103 de \u00abhackeri buni\u00bb va fi probabil capabil\u0103 s\u0103 compromit\u0103 un sistem nepreg\u0103tit at\u00e2t de repede \u0219i u\u0219or, \u00eenc\u00e2t ve\u021bi ob\u021bine prea pu\u021bine informa\u021bii pentru a lua m\u0103suri ulterioare. Pentru a avea un efect real, informa\u021biile ob\u021binute de echipa ro\u0219ie trebuie s\u0103 fie corelate cu testele anterioare de penetrare \u0219i evalu\u0103rile vulnerabilit\u0103\u021bilor.<\/p>\n<h2> Ce este testarea penetra\u021biei?<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Red Teaming \u2014 simularea complet\u0103 a atacurilor. Metodologie \u0219i instrumente\" src=\"\/wp-content\/uploads\/2020\/10\/e617ef8e900aac596c76e7e66673c779.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSimularea complex\u0103 a unui atac real (Red Teaming) este adesea confundat\u0103 cu <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/varonis-six-part-guide-to-penetration-testing\/\">testarea penetra\u021biei (pentest)<\/a><\/noindex>, dar cele dou\u0103 metode sunt pu\u021bin diferite. Mai exact, testarea penetra\u021biei este doar o metod\u0103 dintre cele care fac parte din red teaming.<\/p>\n<p>Rolul pentester-ului <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/penetration-testing-explained-part-i-risky-business\/\">este destul de bine definit<\/a><\/noindex>. Activitatea pentester-ilor este \u00eemp\u0103r\u021bit\u0103 \u00een patru etape principale: planificare, descoperire de informa\u021bii, atac \u0219i raportare. A\u0219a cum vede\u021bi, pentester-ii fac mai mult dec\u00e2t s\u0103 identifice vulnerabilit\u0103\u021bi \u00een software. Ei \u00eencearc\u0103 s\u0103 se pun\u0103 \u00een locul hackerilor, iar dup\u0103 ce reu\u0219esc s\u0103 p\u0103trund\u0103 \u00een sistemul dvs., \u00eencepe adev\u0103rata lor munc\u0103.<\/p>\n<p>Ei descoper\u0103 vulnerabilit\u0103\u021bi \u0219i apoi efectueaz\u0103 noi atacuri, pe baza informa\u021biilor ob\u021binute, navig\u00e2nd prin ierarhia folderelor. Aceasta este diferen\u021ba dintre speciali\u0219tii care efectueaz\u0103 teste de penetrare \u0219i cei care sunt angaja\u021bi doar pentru a g\u0103si vulnerabilit\u0103\u021bi, folosind software de scanare a porturilor sau detectare a viru\u0219ilor. Un pentester experimentat poate determina:<\/p>\n<ul>\n<li>unde hackerii ar putea direc\u021biona atacul;<\/li>\n<li>metoda prin care hackerii vor ataca; <\/li>\n<li>cum va reac\u021biona ap\u0103rarea dvs.; <\/li>\n<li>dimensiunea poten\u021bial\u0103 a unei bre\u0219e. <\/li>\n<\/ul>\n<p>\nTestarea de penetrare vizeaz\u0103 identificarea deficien\u021belor la nivelul aplica\u021biilor \u0219i re\u021belelor, precum \u0219i oportunit\u0103\u021bile de a dep\u0103\u0219i barierele fizice de securitate. \u00cen timp ce testarea automat\u0103 poate identifica anumite probleme de cibersecuritate, testarea manual\u0103 de penetrare ia \u00een considerare, de asemenea, vulnerabilitatea afacerii la atacuri.<\/p>\n<h2> Red Teaming vs. testarea de penetrare<\/h2>\n<p>\nCu siguran\u021b\u0103, testul de penetrare este important, dar este doar o parte dintr-o serie de m\u0103suri luate \u00een cadrul red teaming. Activitatea echipei ro\u0219ii are scopuri mult mai largi dec\u00e2t pentr testerii, care adesea \u00eencearc\u0103 doar s\u0103 ob\u021bin\u0103 acces la re\u021bea. \u00cen red teaming sunt adesea implicate mai multe persoane, resurse \u0219i timp, deoarece exper\u021bii \u201eechipei ro\u0219ii\u201d cerceteaz\u0103 \u00een profunzime pentru a \u00een\u021belege pe deplin true nivelul riscurilor \u0219i vulnerabilit\u0103\u021bilor \u00een tehnologia, precum \u0219i \u00een activele umane \u0219i fizice ale organiza\u021biei.<\/p>\n<p>\u00cen plus, exist\u0103 \u0219i alte diferen\u021be. Red teaming este de obicei folosit de organiza\u021bii cu m\u0103suri de cibersecuritate mai mature \u0219i dezvoltate (de\u0219i, \u00een practic\u0103, acest lucru nu este \u00eentotdeauna adev\u0103rat).<\/p>\n<p>De obicei, acestea sunt companii care au efectuat deja teste de penetrare \u0219i au remediat majoritatea vulnerabilit\u0103\u021bilor identificate, c\u0103ut\u00e2nd acum pe cineva care s\u0103 \u00eencerce din nou s\u0103 ob\u021bin\u0103 acces la informa\u021bii confiden\u021biale sau s\u0103 sparg\u0103 protec\u021bia \u00een orice mod.<br \/>\nDe aceea, red teaming se bazeaz\u0103 pe o echip\u0103 de exper\u021bi \u00een securitate, concentra\u021bi pe un scop specific. Ace\u0219tia vizeaz\u0103 vulnerabilit\u0103\u021bile interne \u0219i utilizeaz\u0103 at\u00e2t metode electronice, c\u00e2t \u0219i fizice de inginerie social\u0103 pe angaja\u021bii organiza\u021biei. Spre deosebire de testerii de penetrare, \u201eechipele ro\u0219ii\u201d nu se gr\u0103besc \u00een timpul atacurilor lor, dorind s\u0103 evite descoperirea, a\u0219a cum ar face un adev\u0103rat cibercriminal.<\/p>\n<h2> Avantajele Red Teaming<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Red Teaming \u2014 simularea complet\u0103 a atacurilor. Metodologie \u0219i instrumente\" src=\"\/wp-content\/uploads\/2020\/10\/0c9895d155dac3fc3e996366ec96b951.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00cen simularea complex\u0103 a atacurilor reale exist\u0103 numeroase avantaje, dar cel mai important este c\u0103 aceast\u0103 abordare ofer\u0103 o imagine cuprinz\u0103toare a nivelului de securitate cibernetic\u0103 al organiza\u021biei. Procesul tipic de simulare complex\u0103 a atacului va include testarea penetr\u0103rii (re\u021bea, aplica\u021bie, telefon mobil \u0219i alte dispozitive), inginerie social\u0103 (prin \u00eent\u00e2lniri directe, apeluri telefonice, emailuri sau mesaje text \u0219i chat) \u0219i intruziune fizic\u0103 (spargerea \u00eencuietorilor, identificarea zonelor moarte ale camerelor de supraveghere, ocolirea sistemelor de alert\u0103). Dac\u0103 existe vulnerabilit\u0103\u021bi \u00een oricare dintre aceste aspecte ale sistemului dumneavoastr\u0103, acestea vor fi descoperite.<\/p>\n<p>Odat\u0103 ce vulnerabilit\u0103\u021bile sunt descoperite, acestea pot fi remediate. O procedur\u0103 eficient\u0103 de simulare a atacului nu se \u00eencheie odat\u0103 cu descoperirea vulnerabilit\u0103\u021bilor. Dup\u0103 ce defectele de securitate sunt clar definite, ve\u021bi dori s\u0103 lucra\u021bi la remedierea acestora \u0219i la retestarea lor. De fapt, adev\u0103rata munc\u0103 \u00eencepe de obicei dup\u0103 intruziunea \u201eechipei ro\u0219ii\u201d, c\u00e2nd efectua\u021bi o analiz\u0103 forensic\u0103 a atacului \u0219i \u00eencerca\u021bi s\u0103 reduce\u021bi vulnerabilit\u0103\u021bile identificate.<\/p>\n<p>Pe l\u00e2ng\u0103 aceste dou\u0103 avantaje principale, red teaming ofer\u0103 \u0219i o serie de altele. Astfel, \u201eechipa ro\u0219ie\u201d poate:<\/p>\n<ul>\n<li>identifica riscuri \u0219i vulnerabilit\u0103\u021bi la atacuri \u00een activele informa\u021bionale cheie ale afacerii;<\/li>\n<li>simula metodele, tacticile \u0219i procedurile infractorilor reali \u00eentr-un mediu cu risc limitat \u0219i controlat; <\/li>\n<li>evalua capacitatea organiza\u021biei dumneavoastr\u0103 de a detecta, reac\u021biona \u0219i preveni amenin\u021b\u0103rile complexe \u021bintite; <\/li>\n<li>stimula o colaborare str\u00e2ns\u0103 cu departamentele de securitate IT \u0219i \u201eechipele albastre\u201d pentru a asigura o reducere semnificativ\u0103 a consecin\u021belor \u0219i a desf\u0103\u0219ura seminarii practice cuprinz\u0103toare bazate pe vulnerabilit\u0103\u021bile descoperite. <\/li>\n<\/ul>\n<p><\/p>\n<h2> Cum func\u021bioneaz\u0103 Red Teaming? <\/h2>\n<p>\nO modalitate excelent\u0103 de a \u00een\u021belege principiul red teaming-ului este s\u0103 ne uit\u0103m la modul \u00een care se desf\u0103\u0219oar\u0103 de obicei. Procesul obi\u0219nuit de simulare a atacului complex const\u0103 \u00een mai mul\u021bi pa\u0219i:<\/p>\n<ul>\n<li>Organiza\u021bia stabile\u0219te cu \u201eechipa ro\u0219ie\u201d (intern\u0103 sau extern\u0103) obiectivul atacului desf\u0103\u0219urat. De exemplu, un astfel de obiectiv poate fi extragerea de informa\u021bii confiden\u021biale de pe un anumit server.<\/li>\n<li>Apoi, echipa ro\u0219ie efectueaz\u0103 recunoa\u0219terea obiectivului. Ca rezultat, se elaboreaz\u0103 o schem\u0103 a sistemelor \u021bint\u0103, inclusiv servicii de re\u021bea, aplica\u021bii web \u0219i portaluri interne pentru angaja\u021bi.<\/li>\n<li>Ulterior, \u00een sistemul \u021bint\u0103 se caut\u0103 vulnerabilit\u0103\u021bi, care sunt de obicei exploatate prin phishing sau atacuri XSS.<\/li>\n<li>Odat\u0103 ce sunt ob\u021binute token-uri de acces, echipa ro\u0219ie le folose\u0219te pentru a explora alte vulnerabilit\u0103\u021bi.<\/li>\n<li>Atunci c\u00e2nd sunt identificate alte vulnerabilit\u0103\u021bi, echipa ro\u0219ie \u00ee\u0219i va str\u0103dui s\u0103 \u00ee\u0219i creasc\u0103 nivelul de acces la nivelul necesar pentru a-\u0219i atinge scopurile.<\/li>\n<li>C\u00e2nd se ob\u021bine accesul la datele sau activele \u021bint\u0103, sarcina atacului este considerat\u0103 \u00eendeplinit\u0103.<\/li>\n<\/ul>\n<p>\nDe fapt, un specialist experimentat al echipei ro\u0219ii va utiliza o gam\u0103 larg\u0103 de metode diferite pentru a trece prin fiecare dintre pa\u0219ii enumera\u021bi. Totu\u0219i, concluzia cheie din exemplul de mai sus este c\u0103 vulnerabilit\u0103\u021bile mici din sistemele individuale pot deveni defec\u021biuni catastrofale dac\u0103 sunt combinate \u00eentr-un lan\u021b.<\/p>\n<h2> Ce trebuie s\u0103 lua\u021bi \u00een considerare atunci c\u00e2nd contacta\u021bi echipa ro\u0219ie? <\/h2>\n<p>\n<img decoding=\"async\" alt=\"Red Teaming \u2014 simularea complet\u0103 a atacurilor. Metodologie \u0219i instrumente\" src=\"\/wp-content\/uploads\/2020\/10\/70892885775ca71b132d6a3b4321923a.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPentru a ob\u021bine cel mai bun rezultat din red teaming, este necesar\u0103 o preg\u0103tire atent\u0103. Sistemele \u0219i procesele utilizate de fiecare organiza\u021bie sunt diferite, iar un nivel de calitate \u00een red teaming este atins atunci c\u00e2nd este destinat identific\u0103rii vulnerabilit\u0103\u021bilor specifice sistemelor dumneavoastr\u0103. Din acest motiv, este important s\u0103 lua\u021bi \u00een considerare o serie de factori:<\/p>\n<h3>\u0218ti\u021bi ce c\u0103uta\u021bi<\/h3>\n<p>\n\u00cen primul r\u00e2nd, este esen\u021bial s\u0103 \u00een\u021belege\u021bi ce sisteme \u0219i procese dori\u021bi s\u0103 verifica\u021bi. Este posibil s\u0103 \u0219ti\u021bi c\u0103 dori\u021bi s\u0103 testa\u021bi o aplica\u021bie web, dar s\u0103 nu \u00een\u021belege\u021bi foarte bine ce \u00eenseamn\u0103 acest lucru \u0219i ce alte sisteme sunt integrate cu aplica\u021biile dumneavoastr\u0103 web. De aceea, este important s\u0103 ave\u021bi o cunoa\u0219tere solid\u0103 a propriilor sisteme \u0219i s\u0103 remedia\u021bi toate vulnerabilit\u0103\u021bile evidente \u00eenainte de a \u00eencepe o simulare complex\u0103 a unui atac real.<\/p>\n<h3>\u0218ti\u021bi-v\u0103 re\u021beaua<\/h3>\n<p>\nAceasta se leag\u0103 de recomandarea anterioar\u0103, dar se refer\u0103 mai mult la specifica\u021biile tehnice ale re\u021belei dumneavoastr\u0103. Cu c\u00e2t reu\u0219i\u021bi s\u0103 evalua\u021bi mai bine mediul de testare, cu at\u00e2t mai precis \u0219i specific va ac\u021biona echipa dumneavoastr\u0103 ro\u0219ie.<\/p>\n<h3>\u0218ti\u021bi-v\u0103 bugetul<\/h3>\n<p>\nRed teaming poate fi realizat la diferite niveluri, dar simularea unui spectru complet de atacuri asupra re\u021belei dumneavoastr\u0103, inclusiv inginerie social\u0103 \u0219i intruziune fizic\u0103, se poate dovedi a fi o activitate costisitoare. Din acest motiv, este important s\u0103 \u00een\u021belege\u021bi c\u00e2t sunte\u021bi dispu\u0219i s\u0103 cheltui\u021bi pentru o astfel de evaluare \u0219i, \u00een consecin\u021b\u0103, s\u0103 contura\u021bi amploarea acesteia.<\/p>\n<h3>Cunoa\u0219te\u021bi nivelul vostru de risc<\/h3>\n<p>\nUnele organiza\u021bii pot tolera un nivel destul de ridicat de risc \u00een cadrul standardelor lor de afaceri. Pe de alt\u0103 parte, altele va trebui s\u0103 \u00ee\u0219i limiteze nivelul de risc \u00eentr-o m\u0103sur\u0103 mult mai mare, \u00een special dac\u0103 compania activeaz\u0103 \u00eentr-o industrie foarte reglementat\u0103. De aceea, \u00een timpul red teaming-ului, este important s\u0103 v\u0103 concentra\u021bi asupra riscurilor care reprezint\u0103 cu adev\u0103rat o amenin\u021bare pentru afacerea dumneavoastr\u0103.<\/p>\n<h2> Red Teaming: instrumente \u0219i tactici<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Red Teaming \u2014 simularea complet\u0103 a atacurilor. Metodologie \u0219i instrumente\" src=\"\/wp-content\/uploads\/2020\/10\/a3d807258e5254ebdd025e76076f7915.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAtunci c\u00e2nd este implementat corect, \u201eechipa ro\u0219ie\u201d va efectua un atac pe scar\u0103 larg\u0103 asupra re\u021belelor dumneavoastr\u0103 folosind toate instrumentele \u0219i metodele utilizate de hackeri. Acestea includ, printre altele:<\/p>\n<ul>\n<li><strong>Testarea penetr\u0103rii aplica\u021biilor <\/strong>\u2014 se concentreaz\u0103 pe identificarea deficien\u021belor la nivelul aplica\u021biilor, cum ar fi falsificarea cererilor intersite, deficien\u021bele \u00een validarea datelor, gestionarea slab\u0103 a sesiunilor \u0219i multe altele.<\/li>\n<li><strong>Testarea penetr\u0103rii re\u021belei <\/strong>\u2014 se concentreaz\u0103 pe identificarea deficien\u021belor la nivelul re\u021belei \u0219i sistemului, inclusiv configura\u021bii gre\u0219ite, vulnerabilit\u0103\u021bi \u00een re\u021belele wireless, servicii neautorizate \u0219i multe altele. <\/li>\n<li><strong>Testare fizic\u0103 a penetr\u0103rii<\/strong> \u2014 evaluarea eficien\u021bei, precum \u0219i a punctelor forte \u0219i slabe ale controlului de securitate fizic\u0103 \u00een via\u021ba real\u0103. <\/li>\n<li><strong>Inginerie social\u0103 <\/strong>\u2014 urm\u0103re\u0219te s\u0103 profite de sl\u0103biciunile umane \u0219i de natura uman\u0103, test\u00e2nd c\u00e2t de predispu\u0219i sunt indivizii la \u00een\u0219el\u0103ciune, convingere \u0219i manipulare prin phishing prin e-mail, apeluri telefonice \u0219i mesaje text, precum \u0219i prin contact fizic la fa\u021ba locului. <\/li>\n<\/ul>\n<p>\nToate cele men\u021bionate anterior sunt componente ale red teaming-ului. Aceasta este o simulare de atac pe mai multe niveluri, destinat\u0103 s\u0103 determine c\u00e2t de bine pot rezista oamenii, re\u021belele, aplica\u021biile \u0219i controalele de securitate fizic\u0103 atacurilor unui atacator real. <\/p>\n<h2>Dezvoltarea continu\u0103 a metodelor de Red Teaming<\/h2>\n<p>\nNatura simul\u0103rii complexe a atacurilor reale, \u00een care \u201eechipele ro\u0219ii\u201d \u00eencearc\u0103 s\u0103 g\u0103seasc\u0103 noi vulnerabilit\u0103\u021bi \u00een sistemul de securitate, iar \u201eechipele albastre\u201d \u00eencearc\u0103 s\u0103 le remedieze, duce la dezvoltarea constant\u0103 a metodelor acestor verific\u0103ri. Din acest motiv, este dificil s\u0103 se elaboreze o list\u0103 actualizat\u0103 a tehnicilor moderne de red teaming, deoarece acestea devin rapid \u00eenvechite.<\/p>\n<p>Prin urmare, majoritatea speciali\u0219tilor care efectueaz\u0103 red teaming vor petrece cel pu\u021bin o parte din timpul lor studind noi vulnerabilit\u0103\u021bi \u0219i metode de exploatare a acestora, folosind numeroasele resurse furnizate de comunitatea \u201eechipelor ro\u0219ii\u201d. Iat\u0103 cele mai populare dintre aceste comunit\u0103\u021bi:<\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.pentesteracademy.com\/\">Pentester Academy <\/a><\/noindex>\u2014 este un serviciu pe baz\u0103 de abonament, care ofer\u0103 cursuri video online, dedicate \u00een principal test\u0103rii penetr\u0103rii, precum \u0219i cursuri de criminalistic\u0103 a sistemelor de operare, probleme de inginerie social\u0103 \u0219i limbaj de asamblare pentru protec\u021bia informa\u021biilor.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.linkedin.com\/in\/vincent-yiu\/\">Vincent Yiu <\/a><\/noindex>\u2014 \u201eoperator de securitate cibernetic\u0103 ofensiv\u0103\u201d, care \u021bine un blog despre metodele simul\u0103rii complexe a atacurilor reale \u0219i este o surs\u0103 bun\u0103 de noi abord\u0103ri.<\/li>\n<li>Twitter este de asemenea o surs\u0103 bun\u0103, dac\u0103 c\u0103uta\u021bi informa\u021bii actuale despre red teaming. Pute\u021bi g\u0103si aceste informa\u021bii folosind hashtag-uri. <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/hashtag\/redteam\">#redteam<\/a><\/noindex> \u0219i <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/hashtag\/redteaming\">#redteaming<\/a><\/noindex>.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/DanielMiessler\">Daniel Miessler<\/a><\/noindex> \u2014 un alt specialist experimentat \u00een red teaming care public\u0103 un buletin informativ \u0219i <noindex><a rel=\"nofollow\" href=\"https:\/\/overcast.fm\/+GrY_qF4ss\">un podcast<\/a><\/noindex>, conduce<noindex><a rel=\"nofollow\" href=\"https:\/\/danielmiessler.com\/\"> un site web<\/a><\/noindex> \u0219i scrie mult despre tendin\u021bele actuale ale \u201eechipelor ro\u0219ii\u201d. Dintre articolele sale recente: <noindex><a rel=\"nofollow\" href=\"https:\/\/danielmiessler.com\/blog\/purple-team-pentests-mean-youre-failing-at-red-and-blue\/\">\u201ePentestul echipei purpurie \u00eenseamn\u0103 c\u0103 echipa dvs. ro\u0219ie \u0219i cea albastr\u0103 au e\u0219uat\u201d<\/a><\/noindex> \u0219i <noindex><a rel=\"nofollow\" href=\"https:\/\/danielmiessler.com\/blog\/when-vulnerability-assessments-pentesting-red-team-bug-bounties\/\">\u201ePremiile pentru vulnerabilit\u0103\u021bile descoperite \u0219i c\u00e2nd s\u0103 folose\u0219ti evaluarea vulnerabilit\u0103\u021bilor, testul de penetrare \u0219i simularea complex\u0103 a atacului\u201d<\/a><\/noindex>.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/portswigger.net\/daily-swig\">Daily Swig<\/a><\/noindex> \u2014 este un buletin informativ despre securitatea web, sponsorizat de PortSwigger Web Security. Este o resurs\u0103 bun\u0103 pentru a afla despre progrese \u0219i \u0219tiri \u00een domeniul red teaming \u2014 atacuri, bre\u0219e de securitate, exploat\u0103ri, vulnerabilit\u0103\u021bi ale aplica\u021biilor web \u0219i noi tehnologii de securitate.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/HanseSecure\">Florian Hansemann <\/a><\/noindex>\u2014 \u201ehacker alb\u201d \u0219i specialist \u00een testarea penetr\u0103rii, el abordeaz\u0103 regulat noi tactici ale \u201eechipelor ro\u0219ii\u201d \u00een cadrul <noindex><a rel=\"nofollow\" href=\"https:\/\/hansesecure.de\/blog\/\">blog<\/a><\/noindex>.<\/li>\n<li>MWR labs \u2014 o surs\u0103 bun\u0103, de\u0219i extrem de tehnic\u0103, de \u0219tiri despre red teaming. Public\u0103 informa\u021bii utile pentru echipele ro\u0219ii <noindex><a rel=\"nofollow\" href=\"https:\/\/labs.mwrinfosecurity.com\/tools\/\">instrumente<\/a><\/noindex>, iar al lor <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/mwrlabs\">\u0219tiri pe Twitter <\/a><\/noindex>con\u021bine sfaturi pentru rezolvarea problemelor cu care se confrunt\u0103 speciali\u0219tii \u00een testarea securit\u0103\u021bii.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/Alra3ees\">Emad Shanab<\/a><\/noindex> \u2014 avocat \u0219i \u201ehacker alb\u201d. \u00cen fluxul s\u0103u Twitter exist\u0103 metode utile pentru \u201eechipele ro\u0219ii\u201d, cum ar fi scrierea de injec\u021bii SQL \u0219i falsificarea token-urilor OAuth.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/attack.mitre.org\/wiki\/Main_Page\">Tactici, Tehnici \u0219i Cuno\u0219tin\u021be Comune Adversariale Mitre<\/a><\/noindex> (ATT &amp; CK) \u2014 este o baz\u0103 de cuno\u0219tin\u021be atent selectat\u0103 despre comportamentul atacatorilor. Aceasta urm\u0103re\u0219te fazele ciclului de via\u021b\u0103 al atacatorilor \u0219i platformele vizate de ace\u0219tia.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.amazon.com\/Hacker-Playbook-Practical-Penetration-Testing-ebook\/dp\/B07CSPFYZ2\">The Hacker Playbook<\/a><\/noindex> \u2014 este un ghid pentru hackeri, care, de\u0219i destul de vechi, acoper\u0103 multe dintre metodele fundamentale care stau la baza simul\u0103rii complexe a atacurilor reale. Autorul Peter Kim are de asemenea <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/hackerplaybook?lang=en\">\u0219tiri pe Twitter<\/a><\/noindex>, \u00een care ofer\u0103 sfaturi despre hacking \u0219i alte informa\u021bii.<\/li>\n<li>SANS Institute \u2014 un alt furnizor de marc\u0103 de materiale educa\u021bionale \u00een domeniul securit\u0103\u021bii cibernetice. Canalul lor de <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/sansforensics\">Twitter<\/a><\/noindex>, dedicat criminalisticii digitale \u0219i r\u0103spunsului la incidente, con\u021bine ultimele \u0219tiri despre cursurile SANS \u0219i sfaturi de la exper\u021bi practicieni.<\/li>\n<li>Unele dintre cele mai interesante nout\u0103\u021bi despre red teaming sunt publicate \u00een <noindex><a rel=\"nofollow\" href=\"https:\/\/redteamjournal.com\/\">Red Team Journal<\/a><\/noindex>. Acolo se g\u0103sesc articole orientate spre tehnologie, precum compararea Red Teaming-ului cu testarea penetr\u0103rii, precum \u0219i articole analitice, cum ar fi \u201eManifestul specialistului echipei ro\u0219ii\u201d.<\/li>\n<li>\u00cen cele din urm\u0103, Awesome Red Teaming este o comunitate pe GitHub care ofer\u0103 <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/yeyintminthuhtut\/Awesome-Red-Teaming\">o list\u0103 foarte detaliat\u0103 <\/a><\/noindex>de resurse dedicate Red Teaming-ului. Aceasta abordeaz\u0103 practic toate aspectele tehnice ale activit\u0103\u021bii \u201eechipei ro\u0219ii\u201d, de la ob\u021binerea accesului ini\u021bial, efectuarea de ac\u021biuni mali\u021bioase p\u00e2n\u0103 la colectarea \u0219i extragerea de date.<\/li>\n<\/ul>\n<p><\/p>\n<h2> Ce este \u201eechipa albastr\u0103\u201d?<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Red Teaming \u2014 simularea complet\u0103 a atacurilor. Metodologie \u0219i instrumente\" src=\"\/wp-content\/uploads\/2020\/10\/9400932d18d0368c694e85087d026a16.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nCu at\u00e2t de multe \u201eechipe colorate\u201d, poate fi dificil s\u0103 determini ce tip este necesar organiza\u021biei tale.<\/p>\n<p>Una dintre alternativele echipei ro\u0219ii, mai exact un alt tip de echip\u0103 care poate fi utilizat\u0103 \u00eempreun\u0103 cu echipa ro\u0219ie, este echipa albastr\u0103. Echipa albastr\u0103 evalueaz\u0103, de asemenea, securitatea re\u021belei \u0219i identific\u0103 orice posibile vulnerabilit\u0103\u021bi ale infrastructurii. Cu toate acestea, ea are un alt obiectiv. Echipelor de acest tip le este necesar s\u0103 g\u0103seasc\u0103 modalit\u0103\u021bi de protec\u021bie, modificare \u0219i reorganizare a mecanismelor de ap\u0103rare pentru a face reac\u021bia la incidente mult mai eficient\u0103.<\/p>\n<p>Ca \u0219i echipa ro\u0219ie, echipa albastr\u0103 trebuie s\u0103 de\u021bin\u0103 acelea\u0219i cuno\u0219tin\u021be despre tacticile atacatorilor, tehnici \u0219i proceduri pentru a dezvolta strategii de reac\u021bie pe baza acestora. Totu\u0219i, responsabilit\u0103\u021bile echipei albastre nu se limiteaz\u0103 doar la ap\u0103rarea \u00eempotriva atacurilor. Aceasta particip\u0103, de asemenea, la consolidarea \u00eentregii infrastructuri de securitate, utiliz\u00e2nd, de exemplu, un sistem de detectare a intruziunilor (IDS), care asigur\u0103 o analiz\u0103 continu\u0103 a activit\u0103\u021bii neobi\u0219nuite \u0219i suspecte.<\/p>\n<p>Iat\u0103 c\u00e2teva dintre pa\u0219ii pe care \u00eei execut\u0103 echipa albastr\u0103:<\/p>\n<ul>\n<li>audit de securitate, \u00een special audit DNS;<\/li>\n<li>analiza jurnalelor \u0219i memoriei; <\/li>\n<li>analiza pachetelor de date de re\u021bea; <\/li>\n<li>analiza datelor despre riscuri; <\/li>\n<li>analiza amprentei digitale; <\/li>\n<li>dezvoltare invers\u0103; <\/li>\n<li>testarea DDoS; <\/li>\n<li>dezvoltarea scenariilor de implementare a riscurilor. <\/li>\n<\/ul>\n<p><\/p>\n<h3>Diferen\u021bele dintre echipele ro\u0219ii \u0219i albastre<\/h3>\n<p>\nO \u00eentrebare frecvent\u0103 pentru multe organiza\u021bii este: care echip\u0103 ar trebui s\u0103 utilizeze \u2014 echipa ro\u0219ie sau echipa albastr\u0103. Aceast\u0103 \u00eentrebare este adesea \u00eenso\u021bit\u0103 de o antipatie prietenoas\u0103 \u00eentre cei care lucreaz\u0103 \u201ede cealalt\u0103 parte a baricadei\u201d. Totu\u0219i, \u00een realitate, nicio echip\u0103 nu are sens f\u0103r\u0103 cealalt\u0103. A\u0219adar, r\u0103spunsul corect la aceast\u0103 \u00eentrebare este c\u0103 ambele echipe sunt importante.<\/p>\n<p>Echipa ro\u0219ie atac\u0103 \u0219i este utilizat\u0103 pentru a verifica preg\u0103tirea echipei albastre \u00een ap\u0103rare. Uneori, echipa ro\u0219ie poate g\u0103si vulnerabilit\u0103\u021bi pe care echipa albastr\u0103 le-a trecut cu vederea complet, iar \u00een acest caz echipa ro\u0219ie ar trebui s\u0103 arate cum pot fi remediate aceste vulnerabilit\u0103\u021bi.<\/p>\n<p>Este esen\u021bial ca ambele echipe s\u0103 colaboreze \u00eempotriva cibercriminalilor pentru a \u00eent\u0103ri securitatea informa\u021bional\u0103.<\/p>\n<p>Din acest motiv, nu are sens s\u0103 alegi doar o singur\u0103 parte sau s\u0103 investe\u0219ti doar \u00eentr-un singur tip de echip\u0103. Este important s\u0103 ne amintim c\u0103 scopul ambelor p\u0103r\u021bi este prevenirea criminalit\u0103\u021bii cibernetice.<br \/>\nCu alte cuvinte, companiile trebuie s\u0103 stabileasc\u0103 o colaborare reciproc\u0103 \u00eentre cele dou\u0103 echipe pentru a asigura un audit complex \u2014 cu jurnale ale tuturor atacurilor \u0219i verific\u0103rilor efectuate, precum \u0219i \u00eenregistr\u0103ri ale caracteristicilor descoperite.<\/p>\n<p>Echipa \u201ero\u0219ie\u201d ofer\u0103 informa\u021bii despre opera\u021biunile pe care le-au efectuat \u00een timpul simul\u0103rii atacului, iar echipa albastr\u0103 despre ac\u021biunile pe care le-au \u00eentreprins pentru a umple lacunele \u0219i a remedia vulnerabilit\u0103\u021bile identificate.<\/p>\n<p>Importan\u021ba ambelor echipe nu poate fi subestimat\u0103. F\u0103r\u0103 auditul lor constant de securitate, efectuarea testelor de penetrare \u0219i \u00eembun\u0103t\u0103\u021birea infrastructurii, companiile nu ar \u0219ti care este starea propriei securit\u0103\u021bi. Cel pu\u021bin p\u00e2n\u0103 c\u00e2nd apare o bre\u0219\u0103 de date, \u0219i devine dureros de clar c\u0103 m\u0103surile de securitate au fost insuficiente.<\/p>\n<h3>Ce este echipa \u201emov\u201d?<\/h3>\n<p>\nEchipa \u201emov\u201d a ap\u0103rut ca rezultat al \u00eencerc\u0103rilor de a uni echipele ro\u0219ie \u0219i albastr\u0103. Echipa \u201emov\u201d este mai degrab\u0103 o conceptie dec\u00e2t un tip separat de echip\u0103. Este mai bine s\u0103 o privim ca pe o combina\u021bie \u00eentre echipele ro\u0219ie \u0219i albastr\u0103. Aceasta implic\u0103 ambele echipe, ajut\u00e2ndu-le s\u0103 colaboreze.<\/p>\n<p>Echipa \u201emov\u201d poate ajuta serviciile de securitate s\u0103 \u00eembun\u0103t\u0103\u021beasc\u0103 eficien\u021ba \u00een detectarea vulnerabilit\u0103\u021bilor, identificarea amenin\u021b\u0103rilor \u0219i monitorizarea re\u021belei prin modelarea precis\u0103 a scenariilor comune de amenin\u021bare \u0219i ajut\u00e2nd la dezvoltarea de noi metode de detectare \u0219i prevenire a amenin\u021b\u0103rilor.<\/p>\n<p>Unele organiza\u021bii implic\u0103 echipa \u201emov\u201d \u00een activit\u0103\u021bi punctuale, unde obiectivele de securitate, termenele \u0219i rezultatele cheie sunt clar definite. Acest lucru include recunoa\u0219terea deficien\u021belor \u00een atac \u0219i ap\u0103rare, precum \u0219i stabilirea cerin\u021belor viitoare de formare \u0219i tehnologie.<\/p>\n<p>O abordare alternativ\u0103, care c\u00e2\u0219tig\u0103 acum teren, este de a trata echipa \u201emov\u201d ca pe un model conceptual care func\u021bioneaz\u0103 \u00een \u00eentreaga organiza\u021bie, promov\u00e2nd crearea unei culturi a securit\u0103\u021bii cibernetice \u0219i \u00eembun\u0103t\u0103\u021birea continu\u0103 a acesteia.<\/p>\n<h2> Concluzie<\/h2>\n<p>\nRed Teaming, sau simularea complex\u0103 a atacurilor, este o metod\u0103 puternic\u0103 de testare a vulnerabilit\u0103\u021bilor sistemului de securitate al organiza\u021biei, dar trebuie aplicat\u0103 cu pruden\u021b\u0103. \u00cen special, pentru a o aplica, trebuie s\u0103 ave\u021bi suficiente <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/cybersecurity-tips\/\">resurse de protec\u021bie a informa\u021biilor<\/a><\/noindex>, altfel nu va \u00eendeplini a\u0219tept\u0103rile dorite.<br \/>\nRed Teaming poate descoperi vulnerabilit\u0103\u021bi ale sistemului dumneavoastr\u0103 despre care nici m\u0103car nu a\u021bi b\u0103nuit \u0219i poate ajuta la remedierea lor. Adopt\u00e2nd o abordare competitiv\u0103 \u00eentre echipele albastre \u0219i ro\u0219ii, pute\u021bi simula ac\u021biunile unui hacker real, dac\u0103 ar dori s\u0103 fure datele dumneavoastr\u0103 sau s\u0103 d\u0103uneze activelor.<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/524308\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: Acunetix Red Teaming (\u0430\u0442\u0430\u043a\u0430 \u00ab\u043a\u0440\u0430\u0441\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b\u00bb) \u2013 \u044d\u0442\u043e \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u0430\u044f \u0438\u043c\u0438\u0442\u0430\u0446\u0438\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0441 \u0446\u0435\u043b\u044c\u044e \u043e\u0446\u0435\u043d\u043a\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c. \u00ab\u041a\u0440\u0430\u0441\u043d\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u00bb \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0443 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u043e\u0432 (\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0438\u0445 \u0442\u0435\u0441\u0442 \u043d\u0430 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443). \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043a\u0430\u043a \u043d\u0430\u043d\u044f\u0442\u044b\u043c\u0438 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b, \u0442\u0430\u043a \u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\u043c\u0438 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u043d\u043e \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u0440\u043e\u043b\u044c \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u0430 \u2014 \u0438\u043c\u0438\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97777,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97776","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/red-teaming-kompleksnaya-imitacziya-atak-metodologiya-i-instrumenty\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Red Teaming \u2014 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u0430\u044f \u0438\u043c\u0438\u0442\u0430\u0446\u0438\u044f \u0430\u0442\u0430\u043a. \u041c\u0435\u0442\u043e\u0434\u043e\u043b\u043e\u0433\u0438\u044f \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/red-teaming-kompleksnaya-imitacziya-atak-metodologiya-i-instrumenty\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-21T18:42:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-21T18:42:28+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Red Teaming \u2014 simularea complex\u0103 a atacurilor. Metodologia \u0219i instrumentele | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/red-teaming-kompleksnaya-imitacziya-atak-metodologiya-i-instrumenty","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Red Teaming \u2014 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u0430\u044f \u0438\u043c\u0438\u0442\u0430\u0446\u0438\u044f \u0430\u0442\u0430\u043a. \u041c\u0435\u0442\u043e\u0434\u043e\u043b\u043e\u0433\u0438\u044f \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b | ProHoster","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/red-teaming-kompleksnaya-imitacziya-atak-metodologiya-i-instrumenty","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-21T18:42:28+00:00","article:modified_time":"2020-10-21T18:42:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97776","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:13:06","updated":"2022-09-27 23:41:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/97776","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=97776"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/97776\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/97777"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=97776"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=97776"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=97776"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}