{"id":37446,"date":"2019-10-31T22:17:39","date_gmt":"2019-10-31T19:17:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov\/"},"modified":"2019-10-31T22:17:39","modified_gmt":"2019-10-31T19:17:39","slug":"ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov","title":{"rendered":"Nie len skenovan\u00edm, alebo ako vybudova\u0165 proces riadenia zranite\u013enost\u00ed v 9 krokoch","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>4. j\u00fala sme usporiadali ve\u013ek\u00fd <noindex><a rel=\"nofollow\" href=\"https:\/\/uni.dtln.ru\/courses\/universitety-dataline-v-moskve\/upravlenie-uyazvimostyami-standarty-realnost-instrumenty\">semin\u00e1r o riaden\u00ed zranite\u013enost\u00ed<\/a><\/noindex>. Dnes zverej\u0148ujeme prepis vyst\u00fapenia Andreja Novikova z Qualys. Predstav\u00ed, ak\u00e9 kroky je potrebn\u00e9 podnikn\u00fa\u0165 na vybudovanie funk\u010dn\u00e9ho procesu riadenia zranite\u013enost\u00ed. Spojler: k skenovaniu sa dostaneme a\u017e v polovici cesty.<\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"rGXwDWhYWTg\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/rGXwDWhYWTg\/hqdefault.jpg\" alt=\"Prehrajte video\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Krok \u010d. 1: Ur\u010dte \u00farove\u0148 zrelosti procesov riadenia zranite\u013enost\u00ed<\/h3>\n<p>\nNa za\u010diatku je potrebn\u00e9 pochopi\u0165, na akej \u00farovni sa nach\u00e1dza va\u0161a organiz\u00e1cia z poh\u013eadu zrelosti procesov riadenia zranite\u013enost\u00ed. A\u017e potom budete schopn\u00ed ur\u010di\u0165, ktor\u00fdm smerom sa posun\u00fa\u0165 a ak\u00e9 kroky je potrebn\u00e9 podnikn\u00fa\u0165. Predt\u00fdm, ako sa pust\u00edte do skenovania a \u010fal\u0161\u00edch aktiv\u00edt, by organiz\u00e1cie mali vykona\u0165 vn\u00fatorn\u00fa pr\u00e1cu a zisti\u0165, ako s\u00fa va\u0161e aktu\u00e1lne procesy nastaven\u00e9 z poh\u013eadu IT a z poh\u013eadu informa\u010dnej bezpe\u010dnosti.<\/p>\n<p>Sk\u00faste si odpoveda\u0165 na z\u00e1kladn\u00e9 ot\u00e1zky:<\/p>\n<ul>\n<li>m\u00e1te procesy inventariz\u00e1cie a klasifik\u00e1cie akt\u00edv;\u00a0<\/li>\n<li>ako \u010dasto sa skenuje IT infra\u0161trukt\u00fara a \u010di pokr\u00fdva cel\u00fa infra\u0161trukt\u00faru, \u010di vid\u00edte celkov\u00fd obr\u00e1zok;<\/li>\n<li>monitoruj\u00fa sa va\u0161e IT zdroje;<\/li>\n<li>s\u00fa do va\u0161ich procesov implementovan\u00e9 nejak\u00e9 KPI a ako zis\u0165ujete, \u017ee sa plnia;<\/li>\n<li>s\u00fa v\u0161etky tieto procesy zdokumentovan\u00e9.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Nie len skenovan\u00edm, alebo ako vybudova\u0165 proces riadenia zranite\u013enost\u00ed v 9 krokoch\" src=\"\/wp-content\/uploads\/2019\/08\/8bfd0539c7e0e360fa2a45cc1d7bd9ac.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Krok \u010d. 2: Zabezpe\u010dte \u00fapln\u00e9 pokrytie infra\u0161trukt\u00fary <\/h3>\n<p>\nNem\u00f4\u017eete chr\u00e1ni\u0165 to, o \u010dom neviete. Ak nem\u00e1te \u00fapln\u00fd obraz o tom, z \u010doho pozost\u00e1va va\u0161a IT infra\u0161trukt\u00fara, nebudete ju schopn\u00ed chr\u00e1ni\u0165. Modern\u00e1 infra\u0161trukt\u00fara je zlo\u017eit\u00e1 a neust\u00e1le sa men\u00ed kvantitat\u00edvne aj kvalitat\u00edvne. <br \/>\nTeraz je IT infra\u0161trukt\u00fara zalo\u017een\u00e1 nielen na klasick\u00fdch technol\u00f3gi\u00e1ch (pracovn\u00e9 stanice, <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/server\/\"   title=\"servery\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1841\">servery<\/a>, virtu\u00e1lne stroje), ale aj na relat\u00edvne nov\u00e9 \u2013 kontajnery, mikroslu\u017eby. Slu\u017eba informa\u010dnej bezpe\u010dnosti sa v\u0161etk\u00fdmi prostriedkami vyh\u00fdba posledn\u00fdm, preto\u017ee je ve\u013emi \u0165a\u017ek\u00e9 pracova\u0165 s nimi pomocou existuj\u00facich s\u00faborov n\u00e1strojov, ktor\u00e9 pozost\u00e1vaj\u00fa predov\u0161etk\u00fdm zo skenerov. Probl\u00e9m spo\u010d\u00edva v tom, \u017ee \u017eiaden skener nem\u00f4\u017ee pokry\u0165 cel\u00fa infra\u0161trukt\u00faru. Aby sa skener dostal k ak\u00e9muko\u013evek uzlu v infra\u0161trukt\u00fare, musia sa splni\u0165 viacer\u00e9 faktory naraz. Akt\u00edvum mus\u00ed by\u0165 vn\u00fatri perimetra organiz\u00e1cie v \u010dase skenovania. Skener mus\u00ed ma\u0165 sie\u0165ov\u00e9 pr\u00edstupy k akt\u00edvam, ich \u00fa\u010dtom, aby mohol zbiera\u0165 \u00fapln\u00e9 inform\u00e1cie.<\/p>\n<p>Pod\u013ea na\u0161ich \u0161tatist\u00edk, ke\u010f ide o stredn\u00e9 alebo ve\u013ek\u00e9 organiz\u00e1cie, pribli\u017ene 15\u201320% infra\u0161trukt\u00fary nie je zahrnut\u00e9 v skeneri z r\u00f4znych d\u00f4vodov: akt\u00edvum opustilo hranice perimetra alebo sa nikdy neobjavilo v kancel\u00e1rii. Napr\u00edklad laptop zamestnanca, ktor\u00fd pracuje na dia\u013eku, ale m\u00e1 pr\u00edstup do firemnej siete, alebo akt\u00edvum sa nach\u00e1dza vo vonkaj\u0161\u00edch cloudov\u00fdch slu\u017eb\u00e1ch ako Amazon. A skener o t\u00fdchto akt\u00edvach pravdepodobne ni\u010d nebude vedie\u0165, preto\u017ee s\u00fa mimo jeho dosahu.<\/p>\n<p>Aby ste pokryli cel\u00fa infra\u0161trukt\u00faru, mus\u00edte pou\u017ei\u0165 nielen skenery, ale cel\u00fd s\u00fabor senzorov, vr\u00e1tane technol\u00f3gi\u00ed pas\u00edvneho odpo\u010d\u00favania prev\u00e1dzky na detekciu nov\u00fdch zariaden\u00ed vo va\u0161ej infra\u0161trukt\u00fare, agenta na zber \u00fadajov, aby ste z\u00edskali inform\u00e1cie \u2013 umo\u017e\u0148uje z\u00edskava\u0165 d\u00e1ta online, bez nutnosti skenovania, bez pride\u013eovania autentifika\u010dn\u00fdch \u00fadajov.<\/p>\n<p><img decoding=\"async\" alt=\"Nie len skenovan\u00edm, alebo ako vybudova\u0165 proces riadenia zranite\u013enost\u00ed v 9 krokoch\" src=\"\/wp-content\/uploads\/2019\/08\/8eb24a33955ba1f6a8f295001b4e413f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Krok \u010d. 3: vykonajte kategoriz\u00e1ciu akt\u00edv<\/h3>\n<p>\nNie v\u0161etky akt\u00edva s\u00fa rovnak\u00e9. Ur\u010dte, ktor\u00e9 akt\u00edva s\u00fa d\u00f4le\u017eit\u00e9 a ktor\u00e9 nie \u2013 to je va\u0161a \u00faloha. \u017diaden n\u00e1stroj, ten ist\u00fd skener, to za v\u00e1s neurob\u00ed. Ide\u00e1lne je, aby IT, IB a biznis spolo\u010dne analyzovali infra\u0161trukt\u00faru a vy\u017earovali kritick\u00e9 syst\u00e9my pre biznis. Pre nich ur\u010duj\u00fa prijate\u013en\u00e9 metriky dostupnosti, integrity, d\u00f4vernosti, RTO\/RPO at\u010f.<\/p>\n<p>To pom\u00f4\u017ee ur\u010di\u0165 priority v procese spr\u00e1vy zranite\u013enost\u00ed. Ke\u010f va\u0161i odborn\u00edci z\u00edskaj\u00fa \u00fadaje o zranite\u013enostiach, nebude to len zoznam tis\u00edcov zranite\u013enost\u00ed v celej infra\u0161trukt\u00fare, ale granulovan\u00e9 inform\u00e1cie zoh\u013ead\u0148uj\u00face kritickos\u0165 syst\u00e9mov.<\/p>\n<p><img decoding=\"async\" alt=\"Nie len skenovan\u00edm, alebo ako vybudova\u0165 proces riadenia zranite\u013enost\u00ed v 9 krokoch\" src=\"\/wp-content\/uploads\/2019\/08\/8c5fc2ea7a0c6f0df26be14c07bb7a9c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Krok \u010d. 4: vykonajte hodnotenie infra\u0161trukt\u00fary<\/h3>\n<p>\nA\u017e na \u0161tvrtom kroku prich\u00e1dzame k hodnoteniu infra\u0161trukt\u00fary z h\u013eadiska zranite\u013enost\u00ed. Odpor\u00fa\u010dame, aby ste sa v tejto f\u00e1ze zamerali nielen na zranite\u013enosti v softv\u00e9ri, ale aj na chyby v konfigur\u00e1ci\u00e1ch, ktor\u00e9 m\u00f4\u017eu tie\u017e predstavova\u0165 zranite\u013enos\u0165. Tu odpor\u00fa\u010dame agentn\u00fa met\u00f3du zhroma\u017e\u010fovania inform\u00e1ci\u00ed. Skenery je mo\u017en\u00e9 a potrebn\u00e9 pou\u017e\u00edva\u0165 na hodnotenie bezpe\u010dnosti perimetra. Ak vyu\u017e\u00edvate zdroje cloudov\u00fdch poskytovate\u013eov, je tie\u017e potrebn\u00e9 zhroma\u017e\u010fova\u0165 inform\u00e1cie o akt\u00edvach a konfigur\u00e1ci\u00e1ch odtia\u013e. Osobitn\u00fa pozornos\u0165 venujte anal\u00fdze zranite\u013enost\u00ed v infra\u0161trukt\u00farach pou\u017e\u00edvaj\u00facich kontajnery Docker.<\/p>\n<p><img decoding=\"async\" alt=\"Nie len skenovan\u00edm, alebo ako vybudova\u0165 proces riadenia zranite\u013enost\u00ed v 9 krokoch\" src=\"\/wp-content\/uploads\/2019\/08\/3aa4a3a6aca611af6e49ef5aa2360ea0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Krok \u010d. 5: Nastavte reportovanie<\/h3>\n<p>\nToto je jeden z d\u00f4le\u017eit\u00fdch prvkov v procese riadenia zranite\u013enost\u00ed. <br \/>\nPrv\u00fd bod: nikto nebude pracova\u0165 s mnohostr\u00e1nkov\u00fdmi spr\u00e1vami s nepreh\u013eadn\u00fdm zoznamom zranite\u013enost\u00ed a popisom ich odstr\u00e1nenia. Je potrebn\u00e9 najprv komunikova\u0165 s kolegami a zisti\u0165, \u010do by malo by\u0165 v spr\u00e1ve a ako im vyhovuje prij\u00edma\u0165 \u00fadaje. Napr\u00edklad, niektor\u00e9mu administr\u00e1torovi nemus\u00ed by\u0165 potrebn\u00fd podrobn\u00fd popis zranite\u013enosti a sta\u010d\u00ed mu len inform\u00e1cia o patche a odkaz na\u0148. In\u00e9mu odborn\u00edkovi s\u00fa d\u00f4le\u017eit\u00e9 len zranite\u013enosti n\u00e1jden\u00e9 v sie\u0165ovej infra\u0161trukt\u00fare.<\/p>\n<p>Druh\u00fd bod: pod reportovan\u00edm ch\u00e1pem nielen papierov\u00e9 spr\u00e1vy. To je zastaran\u00fd form\u00e1t z\u00edskavania inform\u00e1ci\u00ed a statick\u00e1 hist\u00f3ria. \u010clovek dost\u00e1va spr\u00e1vu a nijako nem\u00f4\u017ee ovplyvni\u0165, ako bud\u00fa v tejto spr\u00e1ve prezentovan\u00e9 \u00fadaje. Aby z\u00edskal spr\u00e1vu v potrebnej podobe, IT \u0161pecialista mus\u00ed kontaktova\u0165 odborn\u00edka na informa\u010dn\u00fa bezpe\u010dnos\u0165 a po\u017eiada\u0165 ho, aby prestaval spr\u00e1vu. \u010cas plynie, objavuj\u00fa sa nov\u00e9 zranite\u013enosti. Namiesto prehadzovania spr\u00e1v z oddelenia do oddelenia by mali ma\u0165 odborn\u00edci oboch smerov mo\u017enos\u0165 sledova\u0165 \u00fadaje online a vidie\u0165 rovnak\u00fd obraz. Preto vo svojej platforme pou\u017e\u00edvame dynamick\u00e9 spr\u00e1vy vo forme prisp\u00f4sobite\u013en\u00fdch dashboardov. <\/p>\n<p><img decoding=\"async\" alt=\"Nie len skenovan\u00edm, alebo ako vybudova\u0165 proces riadenia zranite\u013enost\u00ed v 9 krokoch\" src=\"\/wp-content\/uploads\/2019\/08\/1ec7434339d2162d172e10cdc77afc6a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Krok \u010d. 6: Prioritizujte<\/h3>\n<p>\nTu je mo\u017en\u00e9 robi\u0165 nasledovn\u00e9:<\/p>\n<p>1. Vytvorenie repozit\u00e1ra so zlat\u00fdmi obrazmi syst\u00e9mov. Pracujte so zlat\u00fdmi obrazmi, pravidelne ich kontrolujte na zranite\u013enosti a spr\u00e1vnos\u0165 konfigur\u00e1cie. Toto je mo\u017en\u00e9 zabezpe\u010di\u0165 pomocou agentov, ktor\u00ed automaticky hl\u00e1sia vznik nov\u00e9ho akt\u00edva a poskytuj\u00fa inform\u00e1cie o jeho zranite\u013enostiach. <\/p>\n<p>2. Zamerajte sa na tie akt\u00edva, ktor\u00e9 s\u00fa kritick\u00e9 pre podnikanie. Neexistuje \u017eiadna organiz\u00e1cia na svete, ktor\u00e1 by mohla eliminova\u0165 zranite\u013enosti na prv\u00fd pokus. Proces odstra\u0148ovania zranite\u013enost\u00ed je dlh\u00fd a \u010dasto \u00fanavn\u00fd. <\/p>\n<p>3. Z\u00fa\u017eenie \u00fatokovej plochy. Vypr\u00e1zdnite svoju infra\u0161trukt\u00faru od nepotrebn\u00e9ho softv\u00e9ru a slu\u017eieb, zatvorte zbyto\u010dn\u00e9 porty. Ned\u00e1vno sme mali pr\u00edpad jednej spolo\u010dnosti, u ktorej sa na 40 tis\u00edcoch zariaden\u00ed na\u0161lo pribli\u017ene 100 tis\u00edc zranite\u013enost\u00ed spojen\u00fdch so starou verziou prehliada\u010da Mozilla. Ako sa nesk\u00f4r zistilo, Mozilla bola implementovan\u00e1 do zlat\u00e9ho obrazu pred mnoh\u00fdmi rokmi, nikto ju nepou\u017e\u00edval, ale bola zdrojom ve\u013ek\u00e9ho mno\u017estva zranite\u013enost\u00ed. Ke\u010f odstr\u00e1nili prehliada\u010d z po\u010d\u00edta\u010dov (bol dokonca na niektor\u00fdch serveroch), tieto desiatky tis\u00edc zranite\u013enost\u00ed zmizli.<\/p>\n<p>4. Raduje zranite\u013enosti na z\u00e1klade datab\u00e1zy spravodajstva (threat intelligence). Zoh\u013eadnite nielen kritickos\u0165 zranite\u013enosti, ale aj pr\u00edtomnos\u0165 verejn\u00e9ho exploit, malv\u00e9ru, z\u00e1platy, vonkaj\u0161ieho pr\u00edstupu k syst\u00e9mu so zranite\u013enos\u0165ou. Hodno\u0165te dopad tejto zranite\u013enosti na kritick\u00e9 podnikov\u00e9 syst\u00e9my: m\u00f4\u017ee sp\u00f4sobi\u0165 stratu d\u00e1t, odmietanie slu\u017eby at\u010f.<\/p>\n<p><img decoding=\"async\" alt=\"Nie len skenovan\u00edm, alebo ako vybudova\u0165 proces riadenia zranite\u013enost\u00ed v 9 krokoch\" src=\"\/wp-content\/uploads\/2019\/08\/8335bdbd2055437c756055a1788500bc.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Krok \u010d. 7: Zla\u010fte KPI<\/h3>\n<p>\nNeskenujte len zo skenovania. Ak sa s n\u00e1jden\u00fdmi zranite\u013enos\u0165ami ni\u010d nerob\u00ed, skenovanie sa st\u00e1va zbyto\u010dnou oper\u00e1ciou. Aby sa pr\u00e1ca so zranite\u013enos\u0165ami nestala formalitou, premyslite, ako budete hodnoti\u0165 jej v\u00fdsledky. Bezpe\u010dnostn\u00fd a IT t\u00edm by sa mali dohodn\u00fa\u0165, ak\u00fdm sp\u00f4sobom bude zabezpe\u010den\u00e9 odstra\u0148ovanie zranite\u013enost\u00ed, ako \u010dasto sa bud\u00fa vykon\u00e1va\u0165 skenovania, in\u0161tal\u00e1cie z\u00e1plat at\u010f.<br \/>\nNa slide vid\u00edte pr\u00edklady mo\u017en\u00fdch KPI. Existuje aj roz\u0161\u00edren\u00fd zoznam, ktor\u00fd odpor\u00fa\u010dame na\u0161im klientom. Ak m\u00e1te z\u00e1ujem, kontaktujte ma, r\u00e1d sa s vami podel\u00edm o tieto inform\u00e1cie.<\/p>\n<p><img decoding=\"async\" alt=\"Nie len skenovan\u00edm, alebo ako vybudova\u0165 proces riadenia zranite\u013enost\u00ed v 9 krokoch\" src=\"\/wp-content\/uploads\/2019\/08\/3ff48f666b1c4f82546467a8514092f9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Krok \u010d. 8: Automatizujte<\/h3>\n<p>\nOp\u00e4\u0165 sa vr\u00e1tim k skenovaniu. V spolo\u010dnosti Qualys pova\u017eujeme skenovanie za najmenej d\u00f4le\u017eit\u00e9, \u010do sa dnes deje v procese spr\u00e1vy zranite\u013enost\u00ed, a \u010do treba v prvom rade maxim\u00e1lne automatizova\u0165, aby sa vykon\u00e1valo bez \u00fa\u010dasti \u0161pecialistu na bezpe\u010dnos\u0165. Dnes existuje mnoho n\u00e1strojov, ktor\u00e9 to umo\u017e\u0148uj\u00fa. Sta\u010d\u00ed, aby mali otvoren\u00e9 API a po\u017eadovan\u00fd po\u010det konektorov.<\/p>\n<p>Pr\u00edklad, ktor\u00fd r\u00e1d uv\u00e1dzam, je DevOps. Ak implementujete do toho skener zranite\u013enost\u00ed, m\u00f4\u017eete jednoducho na DevOps zabudn\u00fa\u0165. So star\u00fdmi technol\u00f3giami, ktor\u00fdmi je klasick\u00fd skener, v\u00e1s jednoducho do t\u00fdchto procesov nepustia. V\u00fdvoj\u00e1ri nebud\u00fa \u010daka\u0165, k\u00fdm v\u00e1s skenovanie neuzavrie a nedostan\u00fa ve\u013ea str\u00e1nkov\u00fa nepraktick\u00fa spr\u00e1vu. V\u00fdvoj\u00e1ri o\u010dak\u00e1vaj\u00fa, \u017ee inform\u00e1cie o zranite\u013enostiach bud\u00fa zasielan\u00e9 ako inform\u00e1cie o chyb\u00e1ch do ich syst\u00e9mov na zostavovanie k\u00f3du. Bezpe\u010dnos\u0165 mus\u00ed by\u0165 bezprobl\u00e9movo integrovan\u00e1 do t\u00fdchto procesov a mala by by\u0165 len funkciou, ktor\u00e1 sa automaticky vyvol\u00e1va syst\u00e9mom pou\u017e\u00edvan\u00fdm va\u0161imi v\u00fdvoj\u00e1rmi.<\/p>\n<p><img decoding=\"async\" alt=\"Nie len skenovan\u00edm, alebo ako vybudova\u0165 proces riadenia zranite\u013enost\u00ed v 9 krokoch\" src=\"\/wp-content\/uploads\/2019\/08\/82c15607c1c7b177e407181e19f17c0b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Krok \u010d. 9: Zamerajte sa na podstatn\u00e9<\/h3>\n<p>\nZamerajte sa na to, \u010do naozaj prin\u00e1\u0161a hodnotu va\u0161ej spolo\u010dnosti. Skenovanie m\u00f4\u017ee by\u0165 automatick\u00e9, spr\u00e1vy m\u00f4\u017eu by\u0165 taktie\u017e zasielan\u00e9 automaticky. <br \/>\nZamerajte sa na zlep\u0161ovanie procesov, aby boli flexibilnej\u0161ie a pohodlnej\u0161ie pre v\u0161etk\u00fdch \u00fa\u010dastn\u00edkov. Zamerajte sa na to, aby bola bezpe\u010dnos\u0165 integrovan\u00e1 do v\u0161etk\u00fdch zml\u00fav s va\u0161imi dod\u00e1vate\u013emi, ktor\u00ed napr\u00edklad vyv\u00edjaj\u00fa webov\u00e9 aplik\u00e1cie pre v\u00e1s.<\/p>\n<p>Ak potrebujete podrobnej\u0161ie inform\u00e1cie o tom, ako v spolo\u010dnosti vytvori\u0165 proces riadenia zranite\u013enost\u00ed, obr\u00e1\u0165te sa na m\u0148a a mojich kolegov. R\u00e1d v\u00e1m pom\u00f4\u017eem.<\/p>\n<p><img decoding=\"async\" alt=\"Nie len skenovan\u00edm, alebo ako vybudova\u0165 proces riadenia zranite\u013enost\u00ed v 9 krokoch\" src=\"\/wp-content\/uploads\/2019\/08\/5a75c5f5b8569d5857a37464cae4af89.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/464643\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>4 \u0438\u044e\u043b\u044f \u043c\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0441\u0435\u043c\u0438\u043d\u0430\u0440 \u043f\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u043c \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0443 \u0432\u044b\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044f \u0410\u043d\u0434\u0440\u0435\u044f \u041d\u043e\u0432\u0438\u043a\u043e\u0432\u0430 \u0438\u0437 Qualys. \u041e\u043d \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0435\u0442, \u043a\u0430\u043a\u0438\u0435 \u044d\u0442\u0430\u043f\u044b \u043d\u0443\u0436\u043d\u043e \u043f\u0440\u043e\u0439\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u0421\u043f\u043e\u0439\u043b\u0435\u0440: \u0434\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u044b \u0434\u043e\u0431\u0435\u0440\u0435\u043c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043a \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u043f\u0443\u0442\u0438. \u0428\u0430\u0433 \u2116 1: \u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u0435 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0437\u0440\u0435\u043b\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0412 \u0441\u0430\u043c\u043e\u043c \u043d\u0430\u0447\u0430\u043b\u0435 \u043d\u0443\u0436\u043d\u043e \u043f\u043e\u043d\u044f\u0442\u044c, \u043d\u0430 \u043a\u0430\u043a\u043e\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28098,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-37446","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"4 \u0438\u044e\u043b\u044f \u043c\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0441\u0435\u043c\u0438\u043d\u0430\u0440 \u043f\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041d\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0435\u0434\u0438\u043d\u044b\u043c, \u0438\u043b\u0438 \u043a\u0430\u043a \u043f\u043e\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0437\u0430 9 \u0448\u0430\u0433\u043e\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"4 \u0438\u044e\u043b\u044f \u043c\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0441\u0435\u043c\u0438\u043d\u0430\u0440 \u043f\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:17:39+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:17:39+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nie len skenovan\u00edm, alebo ako vybudova\u0165 proces riadenia zranite\u013enost\u00ed v 9 krokoch | ProHoster","description":"4. j\u00fala sme organizovali ve\u013ek\u00fd semin\u00e1r o riaden\u00ed.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0435\u0434\u0438\u043d\u044b\u043c, \u0438\u043b\u0438 \u043a\u0430\u043a \u043f\u043e\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0437\u0430 9 \u0448\u0430\u0433\u043e\u0432 | ProHoster","og:description":"4 \u0438\u044e\u043b\u044f \u043c\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0441\u0435\u043c\u0438\u043d\u0430\u0440 \u043f\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e.","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:17:39+00:00","article:modified_time":"2019-10-31T19:17:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37446","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:59:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:26:28","updated":"2026-02-09 17:59:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/37446","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=37446"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/37446\/revisions"}],"predecessor-version":[{"id":159085,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/37446\/revisions\/159085"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/28098"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=37446"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=37446"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=37446"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}