{"id":30167,"date":"2019-10-31T21:33:58","date_gmt":"2019-10-31T18:33:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform\/"},"modified":"2019-10-31T21:33:58","modified_gmt":"2019-10-31T18:33:58","slug":"razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","title":{"rendered":"Anal\u00fdza kritickej chyby v algoritmoch \u0161ifrovania KIB SEARCHINFORM","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kontrola v\u0161etk\u00fdch inform\u00e1ci\u00ed cirkuluj\u00facich v organiz\u00e1cii je jednou z hlavn\u00fdch \u00faloh pri praktickej implement\u00e1cii organiza\u010dno-poriadkov\u00fdch dokumentov (politika informa\u010dnej bezpe\u010dnosti a in\u00e9 vn\u00fatorn\u00e9 dokumenty ni\u017e\u0161\u00edch \u00farovn\u00ed) organiz\u00e1cie.
\nSyst\u00e9my prevencie \u00fanikov d\u00f4vern\u00fdch inform\u00e1ci\u00ed z informa\u010dn\u00e9ho syst\u00e9mu (Data Leak Prevention, DLP) s\u00fa v\u00e4\u010d\u0161inou schopn\u00e9 vyrie\u0161i\u0165 tento probl\u00e9m.
\n<\/a><\/noindex>
\nNa modernom trhu existuje dostatok variantov t\u00fdchto syst\u00e9mov, ako napr\u00edklad: SearchInform DLP, Infowatch Traffic Monitor DLP, Zecurion DLP, Symantec DLP a \u010fal\u0161ie. Dnes sa v\u0161ak tento \u010dl\u00e1nok zameriava na produkt spolo\u010dnosti LLC \u201eSearchInform\u201c.<\/p>\n

Kontejner informa\u010dnej bezpe\u010dnosti SearchInform (KIB S\u00f6rcinform) je robustn\u00fd a flexibilne prisp\u00f4sobite\u013en\u00fd softv\u00e9rov\u00fd bal\u00edk, ktor\u00fd svoj\u00edm funk\u010dn\u00fdm zlo\u017een\u00edm a rozsiahlymi analytick\u00fdmi n\u00e1strojmi vytv\u00e1ra siln\u00fa konkurenciu in\u00fdm spolo\u010dnostiam v tejto oblasti. Av\u0161ak, ako pri v\u0161etk\u00fdch produktoch, aj KIB S\u00f6rcinform m\u00e1 jednu z nev\u00fdhod, o ktorej sa teraz budeme zaobera\u0165.<\/p>\n

\"Anal\u00fdza
\n
\nObr\u00e1zok 1 \u2013 Logo KIB S\u00f6rcinform<\/i><\/p>\n

V KIB S\u00f6rcinform je jedn\u00fdm zo zdrojov zberu inform\u00e1ci\u00ed agent (Windows\/Linux). Agent pre opera\u010dn\u00e9 syst\u00e9my Windows a Linux m\u00e1 modul\u00e1rny syst\u00e9m zberu inform\u00e1ci\u00ed, ktor\u00fd je mo\u017en\u00e9 v pr\u00edpade potreby zapn\u00fa\u0165 alebo vypn\u00fa\u0165. Sk\u00famame modul Device (riadenie vonkaj\u0161\u00edch zariaden\u00ed, sie\u0165ov\u00fdch zariaden\u00ed, procesov a pod.). Demos\u00fabor tohto produktu je mo\u017en\u00e9 z\u00edska\u0165 ofici\u00e1lne prostredn\u00edctvom webovej str\u00e1nky v\u00fdvoj\u00e1ra (s plnou funk\u010dnos\u0165ou). \u010eal\u0161ie kroky bud\u00fa realizovan\u00e9 pomocou z\u00edskan\u00e9ho licen\u010dn\u00e9ho k\u013e\u00fa\u010da \u2014 verzia programu EndPointController 5.51.0.9 (verzia agenta 5.51.0.9).<\/p>\n

Hlavn\u00fdm probl\u00e9mom v pr\u00e1ci tohto modulu je algoritmus \u0161ifrovania inform\u00e1ci\u00ed na vonkaj\u0161\u00edch prenosn\u00fdch zariadeniach. Sk\u00famame princ\u00edp fungovania algoritmu \u0161ifrovania v KIB S\u00f6rcinform.<\/p>\n

In\u0161talujeme agenta na pracovn\u00fa stanicu a nastavujeme kontrolu vonkaj\u0161\u00edch zariaden\u00ed (modul Device) v sekcii \u201eSie\u0165ov\u00e9 prostredie\u201c EndPointController 5.51.0.9<\/p>\n

\"Anal\u00fdza
\nObr\u00e1zok 2 \u2013 In\u0161tal\u00e1cia a aktiv\u00e1cia modulu<\/i><\/p>\n

Vytv\u00e1rame konfigur\u00e1ciu \u0161ifrovania v nastaveniach modulu Device na karte \u201e\u0160ifrovanie\u201c: generujeme k\u013e\u00fa\u010d a zap\u00edname \u0161ifrovanie pre v\u0161etky m\u00e9dium (je mo\u017en\u00e9 zapn\u00fa\u0165 \u0161ifrovanie iba pre ur\u010dit\u00e9 m\u00e9dium).<\/p>\n

\"Anal\u00fdza
\nObr\u00e1zok 3 \u2013 Nastavenie bieleho zoznamu<\/i><\/p>\n

\"Anal\u00fdza
\nObr\u00e1zok 4 \u2013 Konfigur\u00e1cia \u0161ifrovania<\/i><\/p>\n

Teraz prejdeme k anal\u00fdze algoritmu \u0161ifrovania s\u00faborov t\u00fdmto produktom. Skop\u00edrujeme s\u00fabory \u201eInstall.exe\u201c a \u201eZ\u00e1klady pr\u00e1va.rtf\u201c z pod kontrolou pracovnej stanice \u201eWINOC\u201c na extern\u00e9 prenosn\u00e9 m\u00e9dium \u201ePrenosn\u00fd disk (E:)\u201c. Ako je vidie\u0165 na obr\u00e1zku 5, v skrytej zlo\u017eke \u201eSystem Volume Information\u201c vznikli objekty \u201eInstall.exe\u201c a \u201eZ\u00e1klady pr\u00e1va.rtf\u201c. T\u00fdmto m\u00f4\u017eeme dospie\u0165 k z\u00e1veru, \u017ee zlo\u017eka \u201eSystem Volume Information\u201c obsahuje preh\u013ead za\u0161ifrovan\u00fdch objektov na prenosnom m\u00e9diu.<\/p>\n

\"Anal\u00fdza
\nObr\u00e1zok 5 \u2013 zlo\u017eka \u201eSystem Volume Information\u201c<\/i><\/p>\n

\"Anal\u00fdza
\nObr\u00e1zok 6 \u2013 Hlavn\u00e1 zlo\u017eka prenosn\u00e9ho m\u00e9dia inform\u00e1cie<\/i><\/p>\n

Ako je zn\u00e1me, existuj\u00fa tri aspekty, na ktor\u00fdch sa zaklad\u00e1 informa\u010dn\u00e1 bezpe\u010dnos\u0165 \u2013 integrita, dostupnos\u0165 a d\u00f4vernos\u0165. Tieto aspekty s\u00fa naru\u0161ovan\u00e9 pou\u017eit\u00edm tohto pr\u00edstupu k \u0161ifrovaniu, preto\u017ee syst\u00e9mov\u00e9 inform\u00e1cie o tom, \u010di je objekt za\u0161ifrovan\u00fd alebo nie, by mali by\u0165 umiestnen\u00e9 v samotnom hlavi\u010dke objektu. <\/p>\n

Pri aktu\u00e1lnej v\u00fdstavbe algoritmu s\u00fa mo\u017en\u00e9 varianty n\u00e1hodnej modifik\u00e1cie\/odstr\u00e1nenia objektov zlo\u017eky \u201eSystem Volume Information\u201c na prenosnom m\u00e9diu s n\u00e1slednou stratou p\u00f4vodn\u00fdch za\u0161ifrovan\u00fdch objektov, ako aj modifik\u00e1cia samotn\u00fdch objektov na nekontrolovan\u00fdch pracovn\u00fdch staniciach (napr\u00edklad: premenovanie objektu \u201eInstall.exe\u201c so sie\u0165ovou cestou \u201eE:Install.exe\u201c na po\u010d\u00edta\u010di bez agenta, pri\u010dom informa\u010dn\u00fd s\u00fabor programov\u00e9ho produktu KIB S\u00f6r\u010dinform v zlo\u017eke \u201eSystem Volume Information\u201c \u201eInstall.exe\u201c so sie\u0165ovou cestou \u201eE:System Volume InformationInstall.exe\u201c zost\u00e1va nezmenen\u00fd, preto\u017ee ch\u00fdba agent, ktor\u00fd by zmenil servisn\u00e9 inform\u00e1cie, a otvorenie tohto s\u00faboru sa u\u017e st\u00e1va nemo\u017en\u00fdm).<\/p>\n

D\u00fafajme, \u017ee v\u00fdvoj\u00e1r vezme do \u00favahy tento nedostatok vo funkcii \u0161ifrovania prenosn\u00fdch m\u00e9di\u00ed inform\u00e1ci\u00ed v produkte KIB S\u00f6r\u010dinform a zmen\u00ed jeho algoritmus.
\n
Zdroj: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0441\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0446\u0438\u0440\u043a\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0437\u0430\u0434\u0430\u0447 \u043f\u0440\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u043e-\u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 (\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u044b\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u043d\u0438\u0436\u043d\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u0435\u0439) \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (Data Leak Prevention, DLP) \u0432 \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041d\u0430 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u043c \u0440\u044b\u043d\u043a\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a: […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30167","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Anal\u00fdza kritickej chyby v algoritme \u0161ifrovania KIB SEARCHINFORM | ProHoster","description":"Kontrola v\u0161etk\u00fdch inform\u00e1ci\u00ed cirkuluj\u00facich v organiz\u00e1cii je jednou z hlavn\u00fdch \u00faloh pri praktickej realiz\u00e1cii organiza\u010dno-rozpo\u010dtov\u00fdch dokumentov (politika informa\u010dnej bezpe\u010dnosti a in\u00e9 intern\u00e9).","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0437\u0431\u043e\u0440 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u041a\u0418\u0411 SEARCHINFORM | ProHoster","og:description":"\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0441\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0446\u0438\u0440\u043a\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0437\u0430\u0434\u0430\u0447 \u043f\u0440\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u043e-\u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 (\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u044b\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435.","og:url":"https:\/\/prohoster.info\/sk\/blog\/razbor-kriticheskoj-oshibki-v-algoritme-raboty-shifrovaniya-kib-searchinform","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:33:58+00:00","article:modified_time":"2019-10-31T18:33:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30167","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-20 23:59:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:40:41","updated":"2026-01-20 23:59:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/30167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=30167"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/30167\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=30167"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=30167"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=30167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}