Chii che encrypt mune yekambani system? Uye sei uchiita izvi?

GlobalSign Kambani akaita ongororo, sei uye nei makambani anoshandisa public key infrastructure (PKI) pakutanga. Vanenge 750 vanhu vakatora chikamu muongororo: vakabvunzwawo mibvunzo nezve masaini edhijitari uye DevOps.

Kana usiri kujairana neshoko iri, PKI inobvumira masisitimu kuchinjana zvakachengeteka data uye kuona varidzi vezvitupa. PKI Solutions sanganisira huchokwadi hwezvitupa zvedhijitari uye makiyi eruzhinji ekunyorera uye cryptographic verification yehuchokwadi hwedata. Chero ruzivo rwakadzama runovimba nePKI system, uye GlobalSign inoonekwa semumwe wevanotungamira pasirese vanopa masisitimu akadaro.

Saka, ngatitarisei zvishoma zvakakosha zvakawanikwa kubva muchidzidzo.

Chii chinonzi encrypted?

Pakazara, 61,76% yemakambani anoshandisa PKI mune imwe nzira kana imwe.

Imwe yemibvunzo mikuru yaifarira vaongorori yaive iyo chaiyo encryption masisitimu uye edhijitari zvitupa vanopindura vanoshandisa. Hazvishamisi kuti chikamu che75% vakati vanoshandisa zvitupa zveveruzhinji SSL kana TLS, uye vanenge 50% vanovimba neyakavanzika SSL neTLS. Iyi ndiyo inonyanya kufarirwa application yemazuva ano cryptography - encrypting network traffic.

Mubvunzo uyu wakabvunzwa kumakambani akapindura hongu kumibvunzo yapfuura nezvekushandisa PKI masisitimu, uye yakabvumira mhinduro dzakawanda.

Chetatu chevatori vechikamu (30%) vakati vanoshandisa zvitupa zvemasaini edhijitari, nepo zvishoma vachivimba nePKI kuchengetedza email (S / MIME) S/MIME inzira inoshandiswa nevakawanda kutumira mameseji akasainwa nedhijitari uye nzira yekudzivirira vashandisi kubva kuhutsotsi. Nekurwiswa kwe phishing kuri kuwedzera, zviri pachena kuti nei iyi iri mhinduro iri kuwedzera mukurumbira yekuchengetedza bhizinesi.

Isu takatarisawo kuti nei makambani akatanga kusarudza PKI-based tekinoroji. Kupfuura 30% yakaratidza scalability yeInternet yezvinhu (IoT), uye 26% vanotenda kuti PKI inogona kushandiswa kune akasiyana maindasitiri. 35% yevakapindura vakacherechedza kuti vanokoshesa PKI kuitira kuchengetedza data kutendeseka.

Zvakajairwa kuita matambudziko

Kunyange isu tichiziva kuti PKI ine kukosha kukuru kune sangano, cryptography tekinoroji yakaoma yakaoma. Izvi zvinokonzera matambudziko nekushandiswa. Takabvunza vakapindura zvavanofunga nezvematambudziko makuru ekuita. Zvakazoitika kuti imwe yematambudziko makuru ndeyekushaikwa kwemukati IT zviwanikwa. Ikoko hakuna vashandi vakakwana vanokwanisa vanonzwisisa cryptography. Pamusoro pezvo, 17% yevakapindura vakashuma nguva refu yekutumirwa kweprojekiti, uye vangangoita makumi mana muzana vakataura kuti kutonga kwehupenyu kunogona kutora nguva. Kune vakawanda, chipingamupinyi ndiyo mutengo wakakwira wetsika PKI mhinduro.

Takadzidza kubva muongororo iyi kuti makambani mazhinji achiri kushandisa ega ega certification chiremera chemukati, kunyangwe mutoro waanogadzira pane zviwanikwa zveIT zvekambani.

Chidzidzo chacho chakaratidzawo kuwedzera kwekushandiswa kwemasaini edhijitari. Vanopfuura makumi mashanu muzana evabvunzurudzo vakapindura vakati vanoshingairira kushandisa masiginecha edhijitari kuchengetedza kutendeseka uye huchokwadi hwemukati.

Nezve chikonzero nei vakasarudza masiginecha edhijitari, 53% yevakapindura vakati kutevedzera ndicho chikonzero chikuru, ne60% vachitaura kutorwa kwemapepa asina mapepa. Kuchengetedza nguva yakataurwa sechimwe chezvikonzero zvikuru zvekuchinjira kumasaini edhijitari. Pamwe nekugona kuderedza magwaro ekugadzirisa nguva ndeimwe yemabhenefiti makuru ekushandisa tekinoroji yePKI.

Encryption muDevOps

Chidzidzo ichi chaisazopedzwa pasina kubvunza vanopindura nezve mashandisirwo ekunyorera masisitimu muDevOps, musika uri kukurumidza kukurumidza unofungidzirwa kusvika pamadhora gumi nematatu panosvika 13. Kunyangwe iyo IT musika yakakurumidza kuchinjira kuDevOps (budiriro + mashandiro) maitiro ane otomatiki bhizinesi maitiro, kuchinjika uye Agile maitiro, muchokwadi nzira idzi dzinovhura njodzi nyowani dzekuchengetedza. Parizvino, maitiro ekutora zvitupa munzvimbo yeDevOps yakaoma, inopedza nguva, uye kukanganisa-kukanganisa. Izvi ndizvo zvinosangana nevagadziri uye makambani:

• Kune akawanda uye akawanda makiyi uye zvitupa zvinoshanda semakina anozivisa mukutakura mitoro, chaiwo muchina, midziyo uye masevhisi network. Chaotic manejimendi yezvitupa izvi pasina tekinoroji chaiyo inokurumidza kuve inodhura uye ine njodzi maitiro.
• Zvitupa zvisina kusimba kana zvisingatarisirwi zvitupa zvinopera kana zvakanaka kuteedzerwa kwepolicy uye maitiro ekutarisa achishaikwa. Hazvina basa kutaura, nguva yekudzikira yakadaro ine chekuita kwakakura pabhizinesi.

Ndosaka GlobalSign ichipa mhinduro PKI yeDevOps, iyo inobatanidza zvakananga neREST API, EST kana cloud Venafi, kuitira kuti boka rekuvandudza rirambe richishanda pamwero wakafanana pasina kupa kuchengetedzwa.

Public kiyi cryptosystems ndeimwe yeakanyanya kuchengetedzwa matekinoroji. Uye zvicharamba zvakadaro kune ramangwana rinoonekwa. Uye nekuwedzera kuri kuita kukura kwatiri kuona muIoT chikamu, isu tinotarisira zvakanyanya kutumirwa kwePKI gore rino.

Source: www.habr.com