{"id":32662,"date":"2019-10-31T21:48:16","date_gmt":"2019-10-31T18:48:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chto-budet-s-autentifikatsiej-i-parolyami-perevod-otcheta-javelin-sostoyanie-strogoj-autentifikatsii-s-kommentariyami\/"},"modified":"2019-10-31T21:48:16","modified_gmt":"2019-10-31T18:48:16","slug":"chto-budet-s-autentifikatsiej-i-parolyami-perevod-otcheta-javelin-sostoyanie-strogoj-autentifikatsii-s-kommentariyami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/chto-budet-s-autentifikatsiej-i-parolyami-perevod-otcheta-javelin-sostoyanie-strogoj-autentifikatsii-s-kommentariyami","title":{"rendered":"\u010co sa stane s autentifik\u00e1ciou a heslami? Preklad spr\u00e1vy Javelin \u201eStav silnej autentifik\u00e1cie\u201c s koment\u00e1rmi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"\u010co
\n
\nSpoiler from the report title \"The use of strong authentication has increased due to new risks and regulatory requirements.\"
\nThe research company \"Javelin Strategy & Research\" published the report \"The State of Strong Authentication 2019\" ( the original in pdf format can be downloaded here<\/a><\/noindex>). This report discusses: what percentage of American and European companies use passwords (and why few currently use passwords); why the percentage of two-factor authentication based on cryptographic tokens is rapidly increasing; and why one-time codes sent via SMS are unsafe.<\/p>\n

Everyone interested in the topic of the present, past, and future of authentication in enterprise and consumer applications \u2014 welcome.
\n<\/a><\/noindex>
\nOd prekladate\u013ea<\/b><\/p>\n

Unfortunately, the language in which this report is written is quite \"dry\" and formal. The five-fold use of the word \"authentication\" in one short sentence is not due to the translator's clumsy hands (or brains), but rather a quirk of the authors. In translating, given the two options \u2014 to provide readers with a version closer to the original or a more engaging text, I sometimes chose the first, and sometimes the second. But bear with me, dear readers, the content of the report is worth it.<\/p>\n

Some insignificant and unnecessary pieces for the narrative have been omitted; otherwise, most would not have managed to get through the entire text. Those wishing to read the report \"uncensored\" can do so in the original language by following the link.<\/p>\n

Unfortunately, the authors are not always careful with terminology. For example, one-time passwords (One Time Password \u2013 OTP) are sometimes referred to as \"passwords\" and sometimes as \"codes.\" The situation with authentication methods is even worse. An unprepared reader may not readily guess that \"authentication using cryptographic keys\" and \"strong authentication\" refer to the same thing. I have tried to unify the terminology as much as possible, and there is also a section in the report that describes them.<\/p>\n

Nevertheless, the report is highly recommended for reading, as it contains unique research findings and correct conclusions. <\/b><\/p>\n

V\u0161etky \u010d\u00edsla a fakty s\u00fa uveden\u00e9 bez najmen\u0161\u00edch zmien, a ak s nimi nes\u00fahlas\u00edte, je lep\u0161ie sa h\u00e1da\u0165 nie s prekladate\u013eom, ale s autormi spr\u00e1vy. Moje koment\u00e1re (ktor\u00e9 s\u00fa zarovnan\u00e9 ako cit\u00e1ty a v texte ozna\u010den\u00e9 kurz\u00edvou<\/i>) s\u00fa m\u00f4jmi hodnoteniami a o ka\u017edom z nich budem r\u00e1d diskutova\u0165 (ako aj o kvalite prekladu). <\/p><\/blockquote>\n

<\/p>\n

Preh\u013ead<\/h2>\n

\nV s\u00fa\u010dasnosti s\u00fa pre podniky digit\u00e1lne komunika\u010dn\u00e9 kan\u00e1ly s klientami d\u00f4le\u017eitej\u0161ie ako kedyko\u013evek predt\u00fdm. Rovnako aj intern\u00e1 komunik\u00e1cia medzi zamestnancami je viac orientovan\u00e1 na digit\u00e1lne prostredie ako kedyko\u013evek predt\u00fdm. A to, ako bezpe\u010dn\u00e9 bud\u00fa tieto interakcie, z\u00e1vis\u00ed od zvolen\u00e9ho sp\u00f4sobu autentifik\u00e1cie pou\u017e\u00edvate\u013eov. \u00dato\u010dn\u00edci vyu\u017e\u00edvaj\u00fa slab\u00fa autentifik\u00e1ciu na mas\u00edvne hackovanie pou\u017e\u00edvate\u013esk\u00fdch \u00fa\u010dtov. V reakcii na to regul\u00e1tori spr\u00eds\u0148uj\u00fa \u0161tandardy, aby don\u00fatili podniky lep\u0161ie chr\u00e1ni\u0165 \u00fa\u010dty a \u00fadaje pou\u017e\u00edvate\u013eov.<\/p>\n

Hrozby spojen\u00e9 s autentifik\u00e1ciou sa neobmedzuj\u00fa len na spotrebite\u013esk\u00e9 aplik\u00e1cie, \u00fato\u010dn\u00edci m\u00f4\u017eu z\u00edska\u0165 pr\u00edstup aj k aplik\u00e1ci\u00e1m funguj\u00facim v r\u00e1mci podniku. Tak\u00e1to oper\u00e1cia im umo\u017e\u0148uje predstiera\u0165, \u017ee s\u00fa firemn\u00fdmi pou\u017e\u00edvate\u013emi. \u00dato\u010dn\u00edci, ktor\u00ed pou\u017e\u00edvaj\u00fa pr\u00edstupov\u00e9 body so slabou autentifik\u00e1ciou, m\u00f4\u017eu ukradn\u00fa\u0165 \u00fadaje a vykon\u00e1va\u0165 in\u00e9 podvodn\u00e9 aktivity. Na\u0161\u0165astie existuj\u00fa opatrenia na boj proti tomu. Pr\u00edsna autentifik\u00e1cia pom\u00f4\u017ee v\u00fdrazne zn\u00ed\u017ei\u0165 riziko \u00fatoku \u00fato\u010dn\u00edka, ako na spotrebite\u013esk\u00e9 aplik\u00e1cie, tak na podnikov\u00e9 syst\u00e9my.<\/p>\n

T\u00e1to \u0161t\u00fadia sa zaober\u00e1: ako podniky zav\u00e1dzaj\u00fa autentifik\u00e1ciu na ochranu pou\u017e\u00edvate\u013esk\u00fdch aplik\u00e1ci\u00ed a podnikov\u00fdch syst\u00e9mov; faktory, ktor\u00e9 zoh\u013ead\u0148uj\u00fa pri v\u00fdbere autentifika\u010dn\u00e9ho rie\u0161enia; \u00falohu, ktor\u00fa pr\u00edsna autentifik\u00e1cia zohr\u00e1va v ich organiz\u00e1ci\u00e1ch; v\u00fdhodami, ktor\u00e9 tieto organiz\u00e1cie z\u00edskavaj\u00fa.<\/p>\n

Zhrnutie<\/h2>\n

<\/p>\n

Hlavn\u00e9 zistenia<\/h3>\n

\nOd roku 2017 sa v\u00fdrazne zv\u00fd\u0161il percentu\u00e1lny podiel vyu\u017e\u00edvania pr\u00edsnej autentifik\u00e1cie. <\/b> S rast\u00facim po\u010dtom zranite\u013enost\u00ed t\u00fdkaj\u00facich sa tradi\u010dn\u00fdch autentifika\u010dn\u00fdch rie\u0161en\u00ed organiz\u00e1cie posil\u0148uj\u00fa svoje autentifika\u010dn\u00e9 schopnosti pomocou pr\u00edsnej autentifik\u00e1cie. Po\u010det organiz\u00e1ci\u00ed vyu\u017e\u00edvaj\u00facich viacfaktorov\u00fa autentifik\u00e1ciu s pou\u017eit\u00edm kryptografie (MFA) sa od roku 2017 strojn\u00e1sobil pre spotrebite\u013eske a zv\u00fd\u0161il sa o takmer 50 % pre podnikov\u00e9 aplik\u00e1cie. Najr\u00fdchlej\u0161\u00ed rast je zaznamenan\u00fd v mobilnej autentifik\u00e1cii v d\u00f4sledku rast\u00facej dostupnosti biometrickej autentifik\u00e1cie.<\/p>\n

Tu vid\u00edme ilustr\u00e1ciu pr\u00edslovia \u201ek\u00fdm hrom neudrie, chlap sa nepre\u017eehn\u00e1\u201c. Ke\u010f odborn\u00edci varovali pred nespolehlivos\u0165ou hesiel, nikto sa nepon\u00e1h\u013eal zav\u00e1dza\u0165 dvojfaktorov\u00fa autentifik\u00e1ciu. Hne\u010f ako hackeri za\u010dali kradn\u00fa\u0165 hesl\u00e1, \u013eudia za\u010dali zav\u00e1dza\u0165 dvojfaktorov\u00fa autentifik\u00e1ciu.<\/p>\n

Pravda\u017ee, fyzick\u00e9 osoby ove\u013ea akt\u00edvnej\u0161ie zav\u00e1dzaj\u00fa 2FA. Po prv\u00e9, tak je pre nich jednoduch\u0161ie upokoji\u0165 svoje obavy, spoliehaj\u00fac sa na biometriu pre autentifik\u00e1ciu na smartf\u00f3noch, ktor\u00e1 je v skuto\u010dnosti dos\u0165 nespolehliv\u00e1. Organiz\u00e1cie v\u0161ak musia investova\u0165 do zak\u00fapenia tokenov a vykona\u0165 (v skuto\u010dnosti ve\u013emi jednoduch\u00e9) pr\u00e1ce na ich zaveden\u00ed. A po druh\u00e9, o \u00fanikoch hesiel zo slu\u017eieb ako Facebook a Dropbox nenap\u00edsal leniv\u00fd, no pr\u00edbehy o tom, ako sa hesl\u00e1 kradli (a \u010do sa stalo \u010falej) organiza\u010dn\u00ed IT riaditelia za \u017eiadnych okolnost\u00ed nezverejnia. <\/p><\/blockquote>\n

\nT\u00ed, ktor\u00ed nevyu\u017e\u00edvaj\u00fa pr\u00edsnu autentifik\u00e1ciu, podce\u0148uj\u00fa riziko pre svoje podnikanie a klientov. <\/b> Niektor\u00e9 organiz\u00e1cie, ktor\u00e9 v s\u00fa\u010dasnosti nevyu\u017e\u00edvaj\u00fa pr\u00edsnu autentifik\u00e1ciu, maj\u00fa tendenciu pova\u017eova\u0165 u\u017e\u00edvate\u013esk\u00e9 men\u00e1 a hesl\u00e1 za jeden z najefekt\u00edvnej\u0161\u00edch a najjednoduch\u0161\u00edch sp\u00f4sobov autentifik\u00e1cie pou\u017e\u00edvate\u013eov. In\u00ed nevidia hodnotu digit\u00e1lnych akt\u00edv, ktor\u00e9 vlastn\u00ed. Je potrebn\u00e9 zoh\u013eadni\u0165, \u017ee kyberzlo\u010dincov zauj\u00edmaj\u00fa v\u0161etky spotrebite\u013esk\u00e9 a obchodn\u00e9 inform\u00e1cie. Dve tretiny spolo\u010dnost\u00ed, ktor\u00e9 na autentifik\u00e1ciu svojich zamestnancov pou\u017e\u00edvaj\u00fa len hesl\u00e1, to robia, preto\u017ee pova\u017euj\u00fa hesl\u00e1 za dostato\u010dne dobr\u00e9 pre typ inform\u00e1ci\u00ed, ktor\u00e9 chr\u00e1nia.<\/p>\n

Napriek tomu s\u00fa hesl\u00e1 na ceste \u201edo hrobu\u201c. <\/b> Za uplynul\u00fd rok sa z\u00e1vislos\u0165 na hesl\u00e1ch v\u00fdrazne zn\u00ed\u017eila, a to ako pre spotrebite\u013esk\u00e9, tak aj pre korpor\u00e1tne aplik\u00e1cie (z 44% na 31%, a od 56% na 47% v danom porad\u00ed), ke\u010f\u017ee organiz\u00e1cie roz\u0161iruj\u00fa uplat\u0148ovanie tradi\u010dnej MFA a pr\u00edsnej autentifik\u00e1cie.
\nAk v\u0161ak zhodnot\u00edme situ\u00e1ciu ako celok, zranite\u013en\u00e9 met\u00f3dy autentifik\u00e1cie na\u010falej preva\u017euj\u00fa. Pre pou\u017e\u00edvate\u013esk\u00fa autentifik\u00e1ciu pribli\u017ene \u0161tvrtina organiz\u00e1ci\u00ed vyu\u017e\u00edva SMS OTP (jednorazov\u00fd k\u00f3d) spolu s tajn\u00fdmi ot\u00e1zkami. V\u00fdsledkom je, \u017ee na ochranu pred zranite\u013enos\u0165ou je potrebn\u00e9 zav\u00e1dza\u0165 \u010fal\u0161ie ochrann\u00e9 prostriedky, \u010do zvy\u0161uje n\u00e1klady. Pou\u017e\u00edvanie ove\u013ea spo\u013eahlivej\u0161\u00edch met\u00f3d autentifik\u00e1cie, ako s\u00fa hardv\u00e9rov\u00e9 kryptografick\u00e9 k\u013e\u00fa\u010de, sa vyu\u017e\u00edva ove\u013ea menej, pribli\u017ene v 5% organiz\u00e1ci\u00ed.<\/p>\n

Rozv\u00edjaj\u00face sa regula\u010dn\u00e9 prostredie s\u013eubuje ur\u00fdchlenie zavedenia pr\u00edsnej autentifik\u00e1cie pre spotrebite\u013esk\u00e9 aplik\u00e1cie. <\/b> S pr\u00edchodom PSD2, ako aj nov\u00fdch pravidiel na ochranu \u00fadajov v E\u00da a v niektor\u00fdch \u0161t\u00e1toch USA, ako je Kalifornia, spolo\u010dnosti c\u00edtia, \u017ee je to \u010doraz v\u00e1\u017enej\u0161ie. Takmer 70% spolo\u010dnost\u00ed s\u00fahlas\u00ed s t\u00fdm, \u017ee \u010del\u00ed siln\u00e9mu regula\u010dn\u00e9mu tlaku, aby zabezpe\u010dili pr\u00edsnu autentifik\u00e1ciu pre svojich z\u00e1kazn\u00edkov. Viac ako polovica podnikov pova\u017euje svoje met\u00f3dy autentifik\u00e1cie za nedostato\u010dn\u00e9 na splnenie regula\u010dn\u00fdch \u0161tandardov v bud\u00facnosti.<\/p>\n

Rozdiel v pr\u00edstupoch rusk\u00fdch a americko-eur\u00f3pskych z\u00e1konodarcov k ochrane osobn\u00fdch \u00fadajov pou\u017e\u00edvate\u013eov programov a slu\u017eieb je ve\u013emi vidite\u013en\u00fd. Rusk\u00ed hovoria: drah\u00ed majitelia slu\u017eieb, robte si, \u010do chcete a ako chcete, ale ak v\u00e1\u0161 administr\u00e1tor unikne datab\u00e1zu, potrest\u00e1me v\u00e1s. V zahrani\u010d\u00ed hovoria: mus\u00edte zavies\u0165 komplex opatren\u00ed, ktor\u00fd neumo\u017en\u00ed<\/b> unikne datab\u00e1zu. Pr\u00e1ve preto sa tam intenz\u00edvne zav\u00e1dzaj\u00fa po\u017eiadavky na pr\u00edtomnos\u0165 pr\u00edsnej dvojfaktorovej autentifik\u00e1cie.
\nPravda, nie je ani ist\u00e9, \u017ee na\u0161a legislat\u00edvna ma\u0161in\u00e9ria sa v jeden kr\u00e1sny de\u0148 nepreberie a nevyu\u017eije z\u00e1padn\u00e9 sk\u00fasenosti. Vtedy sa uk\u00e1\u017ee, \u017ee v\u0161etci musia zavies\u0165 2FA, zodpovedaj\u00facu rusk\u00fdm kryptografick\u00fdm \u0161tandardom, a to naliehavo.\n<\/p><\/blockquote>\n

\nVytvorenie spo\u013eahliv\u00e9ho z\u00e1kladu autentifik\u00e1cie umo\u017e\u0148uje firm\u00e1m presun\u00fa\u0165 d\u00f4raz z uspokojenia regula\u010dn\u00fdch po\u017eiadaviek na uspokojenie potrieb z\u00e1kazn\u00edkov. <\/b> Pre t\u00fdch organiz\u00e1ci\u00ed, ktor\u00e9 st\u00e1le pou\u017e\u00edvaj\u00fa jednoduch\u00e9 hesl\u00e1 alebo z\u00edskavaj\u00fa k\u00f3dy cez SMS, bude najd\u00f4le\u017eitej\u0161\u00edm faktorom pri v\u00fdbere met\u00f3dy autentifik\u00e1cie dodr\u017eiavanie regula\u010dn\u00fdch po\u017eiadaviek. Naopak, spolo\u010dnosti, ktor\u00e9 u\u017e implementovali pr\u00edsnu autentifik\u00e1ciu, sa m\u00f4\u017eu zamera\u0165 na v\u00fdber t\u00fdch met\u00f3d autentifik\u00e1cie, ktor\u00e9 zvy\u0161uj\u00fa z\u00e1kazn\u00edcku lojalitu.<\/p>\n

Pri v\u00fdbere met\u00f3dy firemnej autentifik\u00e1cie v r\u00e1mci podniku u\u017e nie s\u00fa regul\u00e1torsk\u00e9 po\u017eiadavky v\u00fdznamn\u00fdm faktorom. <\/b> V tomto pr\u00edpade je omnoho d\u00f4le\u017eitej\u0161ia jednoduchos\u0165 integr\u00e1cie (32%) a cena (26%). <\/p>\n

V \u00e9re phishingu m\u00f4\u017eu \u00fato\u010dn\u00edci vyu\u017e\u00edva\u0165 firemn\u00fa elektronick\u00fa po\u0161tu na podvody,<\/b> aby podvodne z\u00edskali pr\u00edstup k \u00fadajom, \u00fa\u010dtom (s pr\u00edslu\u0161n\u00fdmi pr\u00edstupov\u00fdmi pr\u00e1vami) a dokonca aby presved\u010dili zamestnancov, aby vykonali prevod pe\u0148az\u00ed na jeho \u00fa\u010det. Preto by mali by\u0165 \u00fa\u010dty firemnej po\u0161ty a port\u00e1lov obzvl\u00e1\u0161\u0165 dobre chr\u00e1nen\u00e9.<\/p>\n

Google posilnil svoju ochranu zaveden\u00edm pr\u00edsnej autentifik\u00e1cie.<\/b> Pred viac ako dvoma rokmi Google publikoval spr\u00e1vu o implement\u00e1cii dvojfaktorovej autentifik\u00e1cie zalo\u017eenej na kryptografick\u00fdch bezpe\u010dnostn\u00fdch k\u013e\u00fa\u010doch pod\u013ea \u0161tandardu FIDO U2F, pri\u010dom ozn\u00e1mil ohromuj\u00face v\u00fdsledky. Pod\u013ea \u00fadajov spolo\u010dnosti nebolo proti viac ako 85 000 zamestnancom vykonan\u00fdch \u017eiadnych phishingov\u00fdch \u00fatokov. <\/p>\n

Odpor\u00fa\u010dania<\/h3>\n

\nImplementujte pr\u00edsnu autentifik\u00e1ciu pre mobiln\u00e9 a online aplik\u00e1cie. <\/b> Viacfaktorov\u00e1 autentifik\u00e1cia zalo\u017een\u00e1 na kryptografick\u00fdch k\u013e\u00fa\u010doch ove\u013ea spo\u013eahlivej\u0161ie chr\u00e1ni pred hackingom ako tradi\u010dn\u00e9 met\u00f3dy MFA. Navy\u0161e, vyu\u017e\u00edvanie kryptografick\u00fdch k\u013e\u00fa\u010dov je ove\u013ea pohodlnej\u0161ie, preto\u017ee nie je potrebn\u00e9 pou\u017e\u00edva\u0165 a pren\u00e1\u0161a\u0165 dodato\u010dn\u00e9 inform\u00e1cie \u2014 hesl\u00e1, jednorazov\u00e9 hesl\u00e1 alebo biometrick\u00e9 \u00fadaje z pou\u017e\u00edvate\u013esk\u00e9ho zariadenia na server autentifik\u00e1cie. Okrem toho, \u0161tandardiz\u00e1cia autentifika\u010dn\u00fdch protokolov umo\u017e\u0148uje ove\u013ea jednoduch\u0161ie implementova\u0165 nov\u00e9 met\u00f3dy autentifik\u00e1cie, ako sa objavuj\u00fa, \u010d\u00edm sa zni\u017euj\u00fa n\u00e1klady na vyu\u017e\u00edvanie a chr\u00e1nia pred zlo\u017eitej\u0161\u00edmi podvodn\u00fdmi sch\u00e9mami.<\/p>\n

Pripravte sa na z\u00e1nik jednorazov\u00fdch hesiel (OTP). <\/b> Zranite\u013enosti spojen\u00e9 s OTP sa st\u00e1vaj\u00fa \u010doraz evidentnej\u0161\u00edmi, ke\u010f kybernetick\u00ed zlo\u010dinci pou\u017e\u00edvaj\u00fa soci\u00e1lne in\u017einierstvo, klonovanie smartf\u00f3nov a malware na kompromit\u00e1ciu t\u00fdchto autentifika\u010dn\u00fdch prostriedkov. A aj ke\u010f m\u00e1 OTP v ur\u010dit\u00fdch pr\u00edpadoch ur\u010dit\u00e9 v\u00fdhody, plat\u00ed to len z poh\u013eadu univerz\u00e1lnej dostupnosti pre v\u0161etk\u00fdch u\u017e\u00edvate\u013eov, nie v\u0161ak z poh\u013eadu bezpe\u010dnosti.<\/p>\n

Nie je mo\u017en\u00e9 prehliadnu\u0165, \u017ee z\u00edskavanie k\u00f3dov prostredn\u00edctvom SMS alebo Push notifik\u00e1ci\u00ed, ako aj generovanie k\u00f3dov pomocou aplik\u00e1ci\u00ed pre smartf\u00f3ny \u2013 to je presne pou\u017e\u00edvanie t\u00fdchto jednorazov\u00fdch hesiel (OTP), na ktor\u00fdch z\u00e1nik n\u00e1s nab\u00e1daj\u00fa pripravi\u0165 sa. Z technick\u00e9ho h\u013eadiska je to ve\u013emi rozumn\u00e9 rie\u0161enie, preto\u017ee zriedkavo sa n\u00e1jde podvodn\u00edk, ktor\u00fd by sa nepok\u00fasil z\u00edska\u0165 jednorazov\u00e9 heslo od d\u00f4ver\u010div\u00e9ho u\u017e\u00edvate\u013ea. Av\u0161ak mysl\u00edm si, \u017ee v\u00fdrobcovia tak\u00fdchto syst\u00e9mov sa bud\u00fa do posledn\u00e9ho momentu dr\u017ea\u0165 umieraj\u00facej technol\u00f3gie. <\/p><\/blockquote>\n

Pou\u017e\u00edvajte pr\u00edsnu autentifik\u00e1ciu ako marketingov\u00fd n\u00e1stroj na zv\u00fd\u0161enie d\u00f4very z\u00e1kazn\u00edkov. <\/b> Pr\u00edsna autentifik\u00e1cia m\u00f4\u017ee nielen zlep\u0161i\u0165 skuto\u010dn\u00fa bezpe\u010dnos\u0165 v\u00e1\u0161ho podnikania. Informovanie z\u00e1kazn\u00edkov o tom, \u017ee va\u0161e podnikanie pou\u017e\u00edva pr\u00edsnu autentifik\u00e1ciu, m\u00f4\u017ee posilni\u0165 verejn\u00e9 vn\u00edmanie bezpe\u010dnosti tohto podniku \u2014 d\u00f4le\u017eit\u00fd faktor, ke\u010f existuje zna\u010dn\u00fd dopyt z\u00e1kazn\u00edkov po spo\u013eahliv\u00fdch met\u00f3dach autentifik\u00e1cie.<\/p>\n

D\u00f4kladne inventarizujte a pos\u00fa\u010fte d\u00f4le\u017eitos\u0165 podnikov\u00fdch \u00fadajov a chr\u00e1\u0148te ich v s\u00falade s ich d\u00f4le\u017eitos\u0165ou. <\/b> Aj \u00fadaje s n\u00edzkou \u00farov\u0148ou rizika, ako s\u00fa kontaktn\u00e9 inform\u00e1cie z\u00e1kazn\u00edkov (to naozaj, v spr\u00e1ve je nap\u00edsan\u00e9 \"low-risk\", je ve\u013emi zvl\u00e1\u0161tne, \u017ee podce\u0148uj\u00fa d\u00f4le\u017eitos\u0165 t\u00fdchto inform\u00e1ci\u00ed<\/i>), m\u00f4\u017eu podvodn\u00edkom poskytn\u00fa\u0165 zna\u010dn\u00fa hodnotu a sp\u00f4sobi\u0165 probl\u00e9my pre spolo\u010dnos\u0165. <\/p>\n

Pou\u017e\u00edvajte pr\u00edsnu autentifik\u00e1ciu vo firme. <\/b> R\u00f4zne syst\u00e9my s\u00fa pre zlo\u010dincov obzvl\u00e1\u0161\u0165 atrakt\u00edvnymi cie\u013emi. Medzi ne patr\u00ed tak\u00e1 intern\u00e1 a na internet pripojen\u00e1 syst\u00e9my ako, \u00fa\u010dtovn\u00fd program alebo \u00falo\u017eisko podnikov\u00fdch \u00fadajov. Pr\u00edsna autentifik\u00e1cia zabra\u0148uje \u00fato\u010dn\u00edkom z\u00edska\u0165 neopr\u00e1vnen\u00fd pr\u00edstup a tie\u017e umo\u017e\u0148uje presne ur\u010di\u0165, ktor\u00fd zamestnanec vykonal nez\u00e1konn\u00fa \u010dinnos\u0165.<\/p>\n

\u010co je pr\u00edsna autentifik\u00e1cia? <\/h2>\n

\nPri pr\u00edsnej autentifik\u00e1cii sa na overenie prihlasovac\u00edch \u00fadajov pou\u017e\u00edvaj\u00fa viacer\u00e9 met\u00f3dy alebo faktory:<\/p>\n