Ichangobva kugoverwa musangano redu. Mashoko aya akasimudza nyaya yakakomba yekuchengetedzwa kweruzivo rwe USB pamusoro peIP hardware mhinduro, iyo inotinetsa zvakanyanya.
Saka, kutanga, ngatitarisei pamamiriro ekutanga.
- Nhamba huru yemagetsi ekuchengetedza makiyi.
- Dzinofanirwa kuwanikwa kubva kunzvimbo dzakasiyana dzenzvimbo.
- Isu tiri kutarisa chete USB pamusoro peIP hardware mhinduro uye tiri kuyedza kuchengetedza iyi mhinduro nekutora mamwe masangano uye tekinoroji matanho (hatisi kufunga nezve nyaya yedzimwe nzira parizvino).
- Mukati mechikamu chechinyorwa ichi, ini handisi kuzotsanangura zvizere mhando dzekutyisidzira dzatiri kufunga (iwe unogona kuona zvakawanda mukati. ), asi ndichatarisa muchidimbu pfungwa mbiri. Isu tinobvisa social engineering uye zvisiri pamutemo zviito zvevashandisi pachavo kubva kumuenzaniso. Isu tiri kufunga nezve mukana wekupinda zvisina mvumo kumidziyo yeUSB kubva kune chero network isina magwaro enguva dzose.
Kuti ive nechokwadi chekuchengetedzwa kwekuwanikwa kwemidziyo yeUSB, matanho ehurongwa uye ehunyanzvi akatorwa:
1. Matanho ekuchengetedzwa kwesangano.
Iyo inochengetedzwa USB pamusoro pe IP hub yakaiswa mune yepamusoro-yemhando yakavharika server cabinet. Kupinda kwemuviri kwairi kunogadziridzwa (yekupinda kudzora sisitimu kune iyo nzvimbo pachayo, vhidhiyo yekutarisa, makiyi uye kodzero dzekuwana kune yakanyatso kuganhurwa nhamba yevanhu).
Zvese USB zvishandiso zvinoshandiswa musangano zvakakamurwa kuita mapoka matatu:
- Critical. Mari yedhijitari masiginicha - anoshandiswa zvinoenderana nekurudziro yemabhangi (kwete kuburikidza ne USB pamusoro peIP)
- Zvakakosha. Yemagetsi edhijitari masiginicha ekutengesa mapuratifomu, masevhisi, e-gwaro kuyerera, kushuma, nezvimwe, akati wandei makiyi esoftware - anoshandiswa uchishandisa USB inochengetedzwa pamusoro peIP hub.
- Kwete kutsoropodza. Makiyi esoftware akati wandei, makamera, akati wandei madhiraivha uye madhisiki ane ruzivo rusingakoshi, USB modem - inoshandiswa uchishandisa yakachengetedzwa USB pamusoro pe IP hub.
2. Matanho ekuchengetedza kwehunyanzvi.
Network yekuwana kune inochengetedzwa USB pamusoro pe IP hub inopihwa chete mukati meiyo yega subnet. Kuwana kune imwe yega subnet inopihwa:
- kubva kune terminal server purazi,
- kuburikidza neVPN (chitupa uye password) kune shoma nhamba yemakomputa nemalaptops, kuburikidza neVPN vanopihwa kero dzechigarire,
- kuburikidza neVPN tunnels inobatanidza mahofisi ematunhu.
Pane yakachengetedzwa USB pamusoro pe IP hub DistKontrolUSB, uchishandisa maturusi ayo akajairwa, anotevera mabasa anogadziriswa:
- Kuti uwane zvishandiso zve USB pa USB pamusoro pe IP hub, encryption inoshandiswa (SSL encryption inogoneswa pahubhu), kunyangwe izvi zvingave zvisina basa.
- "Kurambidza kupinda kumidziyo ye USB ne IP kero" inogadziriswa. Zvichienderana nekero yeIP, mushandisi anopihwa kana kusasvika kune akapihwa USB zvishandiso.
- "Dzivisa kupinda pachiteshi che USB nekupinda uye password" inogadziriswa. Saizvozvo, vashandisi vanopihwa kodzero dzekuwana kune USB zvishandiso.
- "Kurambidza kupinda kune USB mudziyo nekupinda uye password" yakatemwa kuti isashandiswa, nekuti Ese makiyi e USB akabatana ne USB pamusoro pe IP hub zvachose uye haagone kutamiswa kubva kuchiteshi kuenda kuchiteshi. Izvo zvine musoro kuti isu tipe vashandisi mukana wekuwana USB port ine USB mudziyo wakaiswa mairi kwenguva yakareba.
- Kubatidza nekudzima USB ports kunoitwa:
- Kune makiyi esoftware uye EDM - kushandisa mugadziri webasa uye akapihwa mabasa ehubhu (nhamba yemakiyi akarongedzerwa kuvhura pa9.00 uye kudzima pa18.00, nhamba kubva 13.00 kusvika 16.00);
- Kune makiyi ekutengesa mapuratifomu uye akati wandei software - nevashandisi vane mvumo kuburikidza neWEB interface;
- Makamera, nhamba yemadhiraivha uye madhisiki ane ruzivo rusina kukosha anogara akabatidzwa.
Isu tinofungidzira kuti iyi sangano rekuwana kune USB zvishandiso inovimbisa kushandiswa kwavo kwakachengeteka:
- kubva kumahofisi ematunhu (conditionally NET No. 1...... NET No. N),
- kwenhamba shoma yemakomputa nemalaptops anobatanidza USB midziyo kuburikidza netiweki yepasi rose,
- yevashandisi yakaburitswa pane terminal application maseva.
Mune zvirevo, ndinoda kunzwa chaiwo matanho anoshanda anowedzera kuchengetedzwa kweruzivo rwekupa kuwanikwa kwepasi rose kumidziyo ye USB.
Source: www.habr.com