Muna Gumiguru 2017, ndakave nemukana wekuenda kumusangano wekusimudzira weDeviceLock DLP system, uko, mukuwedzera kune basa guru rekudzivirira kubva pakudonha sekuvhara USB ports, kuongororwa kwetsamba uye clipboard, kuchengetedzwa kubva kune maneja. kushambadzira. Iyo modhi iri nyore uye yakanaka - muisi anouya kukambani diki, anoisa seti yezvirongwa, anoseta password yeBIOS, anogadzira iyo DeviceLock administrator account, uye anosiya chete kodzero dzekutarisira Windows pachayo uye yakasara software kune yemuno. admin. Kunyangwe paine chinangwa, admin uyu haakwanise kuba chero chinhu. Asi iyi yese ndiyo theory...
Nokuti pamusoro pemakore makumi maviri + ekushanda mumunda wekugadzira maturusi ekuchengetedza ruzivo, ndakanyatsogutsikana kuti maneja anogona kuita chero chinhu, kunyanya nekuwana kwemuviri kune komputa, saka kudzivirirwa kukuru kwairi kunogona kungova matanho ehurongwa akadai sekutaura kwakasimba uye. kuchengetedzwa kwemuviri kwemakomputa ane ruzivo rwakakosha, ipapo pakarepo Pfungwa yakasimuka kuti iedze kusimba kwechigadzirwa chakarongwa.
Kuedza kuita izvi nekukurumidza mushure mekupera kwesemina hakuna kubudirira; kudzivirirwa pakubviswa kwesevhisi huru DlService.exe yakaitwa uye havana kana kukanganwa nezvekodzero dzekuwana uye kusarudzwa kwekupedzisira kwakabudirira kumisikidzwa, semhedzisiro yacho. vakazvitema, semavhairasi mazhinji, vachiramba system yekuwana kuverenga nekuita, haina kushanda.
Kumibvunzo yese nezvekudzivirirwa kwevatyairi vangangosanganisirwa muchigadzirwa, mumiriri weSmart Line mugadziri akataura nechivimbo kuti "zvese zviri pamwero wakafanana."
Kwapera zuva ndakafunga kuenderera mberi netsvagiridzo yangu uye ndakadhawunirodha vhezheni yekuedza. Ini pakarepo ndakashamiswa nehukuru hwekugovera, inenge 2 GB! Ini ndakajaira chokwadi chekuti system software, iyo inowanzo kurongedzerwa seruzivo rwekuchengetedza maturusi (ISIS), kazhinji ine yakawanda compact saizi.
Mushure mekuisirwa, ndakashamisika kechipiri - saizi yeiyi yataurwa pamusoro apa inoitwa yakakura zvakare - 2MB. Ndakabva ndangofunga kuti nevolume yakadaro paive nechakubata. Ndakaedza kutsiva module ndichishandisa kunonoka kurekodha - yakavharwa. Ndakachera mumabhuku epurogiramu, uye pakanga patova nevatyairi 13! Ndakatsvaga mvumo - haina kuvharwa kuti ichinje! Zvakanaka, munhu wese akarambidzwa, ngatiwedzerei!
Mhedzisiro yacho inongonakidza - mabasa ese akavharwa, sevhisi haina kutanga. Ndeupi rudzi rwekuzvidzivirira uripo, tora uye kopi chero chaunoda, kunyangwe pane madhiraivha, kunyangwe pane network. Yekutanga yakakomba drawback yehurongwa yakabuda - kubatanidzwa kwezvikamu kwaive kwakasimba zvakanyanya. Ehe, sevhisi inofanirwa kutaurirana nevatyairi, asi sei kuparara kana pasina anopindura? Nekuda kweizvozvo, pane imwe nzira yekunzvenga kudzivirira.
Sezvo ndaona kuti sevhisi yechishamiso yakapfava uye ine hanya, ndakafunga kutarisa kutsamira kwayo pamaraibhurari ebato rechitatu. Izvo zvakatonyanya kupusa pano, iyo rondedzero yakakura, isu tinongodzima raibhurari yeWinSock_II chero uye toona mufananidzo wakafanana - sevhisi haisati yatanga, sisitimu yakavhurika.
Somugumisiro, tine chinhu chimwe chete icho mukurukuri akatsanangura pamusangano, fence ine simba, asi kwete kuvhara iyo yose yakadzivirirwa perimeter nekuda kwekushayikwa kwemari, uye munzvimbo isina kuvharwa kune zvinongova prickly rose mahudyu. Muchiitiko ichi, tichifunga nezvemavakirwo echigadzirwa chesoftware, izvo zvisingarevi nzvimbo yakavharwa nekukasira, asi akasiyana siyana maplugs, interceptors, traffic analyzers, inotova piketi fenzi, ine akawanda emitsetse yakadzvanywa. kunze ne-self-tapping screws uye zviri nyore kwazvo kusunungura. Dambudziko neakawanda emhinduro idzi nderekuti nehuwandu hwakakura kudaro hwemakomba angangove, pane nguva dzose mukana wekukanganwa chimwe chinhu, kupotsa hukama, kana kukanganisa kugadzikana nekusabudirira kuita imwe yeanopindira. Tichifunga nenyaya yekuti kusasimba kuri kuratidzwa muchinyorwa ichi kuri pamusoro, chigadzirwa chine zvimwe zvakawanda zvinotora maawa akati wandei kutsvaga.
Zvakare, musika uzere nemienzaniso yekugonesa kuita kwekudzivirira kwekudzivirira, semuenzaniso, zvigadzirwa zvemumba zvinorwisa hutachiona, uko kuzvidzivirira hakugone kungopfuura. Sekuziva kwangu, ivo vaive vasina usimbe hwekuita FSTEC certification.
Mushure mekuita hurukuro dzinoverengeka nevashandi veSmart Line, nzvimbo dzakati wandei dzakafanana dzavasina kumbonzwa nezvadzo dzakawanikwa. Mumwe muenzaniso ndeyeAppInitDll michina.
Inogona kunge isiri iyo yakadzika, asi muzviitiko zvakawanda inokutendera iwe kuti uite pasina kupinda muOS kernel uye kwete kukanganisa kugadzikana kwayo. Vatyairi venVidia vanoshandisa zvizere iyi michina kugadzirisa vhidhiyo adapta yemutambo chaiwo.
Kushaikwa kwakakwana kwemaitiro akabatanidzwa ekuvaka otomatiki sisitimu yakavakirwa paDL 8.2 inomutsa mibvunzo. Zvinotarisirwa kutsanangurira mutengi zvakanakira chigadzirwa, tarisa simba rekombuta remaPC aripo uye maseva (context analyzers anonyanya kushandisa zviwanikwa uye ikozvino fashoni hofisi ese-mu-imwe makomputa uye Atom-based nettops haana kukodzera. mune iyi kesi) uye ingo buritsa chigadzirwa pamusoro. Panguva imwecheteyo, mazwi akadai se "kutonga kwekuwana" uye "yakavharwa software nharaunda" haana kana kutaurwa pasemina. Zvakataurwa nezve encryption kuti, kunze kwekuoma, ichamutsa mibvunzo kubva kune vanodzora, kunyangwe muchokwadi hapana matambudziko nazvo. Mibvunzo nezve certification, kunyangwe kuFSTEC, inosundirwa parutivi nekuda kwekufungidzirwa kwavo kuoma uye kureba. Senyanzvi yezvekuchengetedza ruzivo iyo yakambotora chikamu mumatanho akadai, ndinogona kutaura kuti mukuita izvi, kusasimba kwakawanda kwakafanana nekwatsanangurwa munyaya ino kunoburitswa, nekuti. nyanzvi dzezvitupa marabhoritari vane yakakomba hunyanzvi kudzidziswa.
Nekuda kweizvozvo, iyo yakaunzwa DLP sisitimu inogona kuita diki kwazvo seti yemabasa ayo anove nechokwadi chekuchengetedza ruzivo, uku ichigadzira yakakomba komputa mutoro uye kugadzira manzwiro echengeteko yedata rekambani pakati pevakuru vekambani vasina ruzivo mune zvekuchengetedza ruzivo.
Inogona chete kuchengetedza chaizvo data hombe kubva kune asina rusarura mushandisi, nekuti ... maneja anonyatsokwanisa kudzima dziviriro, uye kune zvakavanzika zvakakura, kunyangwe maneja wekuchenesa anozokwanisa kutora zvine hungwaru foto yechidzitiro, kana kurangarira kero kana nhamba yekadhi rechikwereti nekutarisa pachiratidziro pamusoro peumwe waanoshanda naye. bendekete.
Uyezve, izvi zvese ndezvechokwadi chete kana zvisingaite kuti vashandi vawane mukana wekupinda mukati mePC kana kuti kuBIOS kuti ivhure booting kubva kunze midhiya. Zvadaro kunyange BitLocker, iyo isingakwanisi kushandiswa mumakambani ari kungofunga nezvekuchengetedza ruzivo, inogona kusabatsira.
Mhedziso, sebhanari sezvazvinganzwika, inzira yakabatanidzwa yekuchengetedzwa kwemashoko, kusanganisira kwete chete software / hardware mhinduro, asiwo maitiro ehurongwa uye ehunyanzvi ekubvisa mapikicha / vhidhiyo kupfura uye kudzivirira vasina mvumo "vakomana vane ndangariro dzinoshamisa" kupinda. nzvimbo. Haufanire kuvimba nechishamiso chigadzirwa DL 8.2, icho chinoshambadzirwa sechino-nhanho mhinduro kune mazhinji ebhizinesi ekuchengetedza matambudziko.
Source: www.habr.com