Mhoroi mose! Ini ndinomhanyisa iyo DataLine Cyber Defense Center. Vatengi vanouya kwatiri nebasa rekusangana nezvinodiwa zve152-FZ mugore kana pazvivakwa zvemuviri.
Munenge purojekiti imwe neimwe inofanirwa kuita basa rekudzidzisa kubvisa nhema dzakapoteredza mutemo uyu. Ndakaunganidza zvinowanzoitika zvisiri izvo zvinogona kudhura kune bhajeti uye nervous system yemunhu data opareta. Ini ndichakurumidza kuita chengetedzo kuti nyaya dzemahofisi ehurumende (GIS) dzinobata zvakavanzika zvehurumende, KII, nezvimwewo zvicharamba zviri kunze kwechikamu chechinyorwa ichi.
Nhema 1. Ndakaisa antivirus, firewall, uye ndakakomberedza marako nefenzi. Ndiri kutevera mutemo here?
152-FZ haisi yekudzivirira masisitimu uye maseva, asi nezve kuchengetedzwa kwedata rako rezvidzidzo. Saka, kutevedzera 152-FZ kunotanga kwete neantivirus, asi nenhamba yakawanda yemapepa uye nyaya dzesangano.
Mutariri mukuru, Roskomnadzor, haazotarisi kuvepo uye mamiriro ehunyanzvi nzira dzekudzivirira, asi pahwaro hwepamutemo hwekugadziriswa kwedata remunhu (PD):
- nechinangwa chei chaunounganidza data rako pachako;
- kana iwe uchiunganidza zvakawanda kupfuura zvaunoda pazvinangwa zvako;
- unotora nguva yakareba sei data yako pachako;
- pane mutemo wekugadzirisa data rako pachako;
- Uri kuunganidza mvumo yekugadziriswa kwedata rako pachako, kuyambuka-muganho kuchinjisa, kugadzirisa nevechitatu mapato, nezvimwe.
Mhinduro dzemibvunzo iyi, pamwe chete nemaitirwo acho pachawo, dzinofanirwa kunyorwa mumagwaro akakodzera. Heino iri kure nerunyorwa ruzere rwezvinoda kugadzirira wega data opareta:
- Fomu remvumo rakajairwa rekugadziriswa kwedata remunhu (aya ndiwo mapepa atinosaina pese pese patinosiya mazita edu akazara uye ruzivo rwepasipoti).
- Mutemo weOperator maererano nekugadziriswa kwedata remunhu ( pane zvinokurudzirwa zvekugadzira).
- Raira pakugadzwa kwemunhu ane mutoro wekuronga kugadziridzwa kwedata remunhu.
- Tsanangudzo yebasa remunhu ane mutoro wekuronga kugadziridzwa kwedata rako.
- Mitemo yekutonga kwemukati uye (kana) kuongororwa kwekuteerera kwePD kugadzirisa nezvinodiwa zvemutemo.
- Rondedzero yemasisitimu edata remunhu (ISPD).
- Mitemo yekupa iyo nyaya kuwana kune yake yega data.
- Mitemo yekuongorora chiitiko.
- Raira pakubvumidzwa kwevashandi kune kugadzirisa kwedata remunhu.
- Mitemo yekudyidzana nevanodzora.
- Chiziviso cheRKN, nezvimwe.
- Fomu yekuraira yePD kugadzirisa.
- ISPD yekutyisidzira modhi.
Mushure mekugadzirisa nyaya idzi, unogona kutanga kusarudza matanho chaiwo uye tekinoroji nzira. Ndedzipi dzaunoda zvinoenderana nehurongwa, maitiro avo ekushanda, uye kutyisidzira kwazvino. Asi zvakawanda pamusoro pazvo gare gare.
Chokwadi: kutevedzera mutemo ndiko kugadzwa uye kutevedzera mamwe maitiro, kutanga kune zvese, uye chechipiri chete - kushandiswa kwehunyanzvi nzira dzehunyanzvi.
Nhema 2. Ndinochengetedza dhesi yega yega mugore, data data inosangana nezvinodiwa zve152-FZ. Iye zvino vane basa rekuchengetedza mutemo
Paunoburitsa chengetedzo yedata rako kune gore rinopa kana data data, hauregi kuve wega data opareta.
Ngatishevedzei tsanangudzo kubva kumutemo kuti tibatsirwe:
Kugadziriswa kwedata remunhu - chero chiito (kushanda) kana seti yezviito (mashandisirwo) anoitwa uchishandisa otomatiki maturusi kana pasina kushandisa nzira dzakadaro nedata remunhu, kusanganisira kuunganidza, kurekodha, systematization, kuunganidza, kuchengetedza, kujekesa (kugadzirisa, kuchinja), kudhirowa, kushandisa, kuendesa (kugovera, kupihwa, kuwana), depersonalization, kuvharira, kudzima, kuparadzwa kwedata rako.
Kwakabva: chinyorwa 3,
Pane zvese izvi zviito, mupi webasa ane basa rekuchengetedza nekuparadza dhata remunhu (kana mutengi apedza chibvumirano naye). Zvimwe zvese zvinopihwa nemunhu wedata opareta. Izvi zvinoreva kuti mutyairi, uye kwete mupi webasa, anogadza mutemo wekugadzirisa dhata remunhu, anowana zvibvumirano zvakasainwa zvekugadzirisa dhata remunhu kubva kune vatengi vayo, anodzivirira uye anoongorora nyaya dzekudonha kwedata remunhu kune vechitatu mapato, zvichingodaro.
Nekuda kweizvozvo, iyo yemunhu data opareta anofanirwa kuramba achiunganidza magwaro akanyorwa pamusoro uye kuita hurongwa nehunyanzvi matanho ekudzivirira PDIS yavo.
Kazhinji, mupi anobatsira mufambisi nekuona kutevedzera zvinodiwa nemutemo padanho rezvivakwa apo ISPD yemushandisi ichave iripo: racks nemidziyo kana gore. Anounganidzawo pasuru yemagwaro, anotora hurongwa uye tekinoroji matanho kune chidimbu chake chezvivakwa zvinoenderana ne152-FZ.
Vamwe vapeji vanobatsira nemapepa uye kupihwa kwehunyanzvi hwekuchengetedza matanho eISDN ivo pachavo, kureva, pamwero wepamusoro pezvivakwa. Mushandi anogona zvakare kupa mabasa aya, asi mutoro nezvisungo zviri pasi pemutemo hazviperi.
Chokwadi: Nekushandisa masevhisi emupi kana data data, haugone kuendesa kwaari mabasa emunhu wega data opareta uye kubvisa mutoro. Kana mupi akakuvimbisa izvi, saka, kuti uzviise zvinyoro, ari kureva nhema.
Nhema 3. Ndine pasuru inodiwa yezvinyorwa uye zviyero. Ini ndinochengeta data rangu nemunhu anovimbisa kutevedzera 152-FZ. Zvinhu zvese zvakarongeka here?
Hongu, kana ukarangarira kusaina odha. Nemutemo, mushandisi anogona kupa kugadziridzwa kwedata rako kune mumwe munhu, semuenzaniso, mupi webasa mumwechete. Odha imhando yechibvumirano chinonyora izvo zvinogona kuitwa nemupi webasa nedata remunhu wemushandisi.
Mushandi ane kodzero yekupa kugadziridzwa kwedata rako kune mumwe munhu nemvumo yenyaya yedata remunhu, kunze kwekunge zvapihwa neimwe Federal Law, pahwaro hwechibvumirano chakapedzwa nemunhu uyu, kusanganisira chibvumirano chenyika kana kanzuru, kana nekubvumwa kwechiito chakakodzera nehurumende kana dare remanisiparati (zvino zvinozonzi mushandisi webasa). Iye munhu anogadzirisa dhata remunhu achimiririra mushandisi anosungirwa kutevedzera misimboti uye mirau yekugadzirisa yemunhu data inopihwa neiyo Federal Law.
Source:
Chisungo chemupi chekuchengetedza kuvanzika kwedata remunhu uye kuona kuchengetedzwa kwayo zvinoenderana nezvinodiwa zvinomiswa zvakare:
Mirayiridzo yemushandisi inofanirwa kutsanangura rondedzero yezviito (mashandiro) ane data remunhu iro richaitwa nemunhu ari kugadzirisa dhata rake uye zvinangwa zvekugadzirisa, chisungo chemunhu akadaro chinofanirwa kusimbiswa kuchengetedza kuvanzika kwedata remunhu uye kuona kuti chengetedzo yedata remunhu panguva yekugadziriswa kwavo, pamwe nezvinodiwa zvekuchengetedzwa kweyakagadziriswa data remunhu zvinofanirwa kutsanangurwa zvinoenderana yeiyi Federal Law.
Source:
Kune izvi, mupi ane mhosva kune anoshanda, uye kwete kune nyaya yedata rako pachako:
Kana mushandisi akapa kugadziridzwa kwedata remunhu kune mumwe munhu, mutyairi ane mhosva kune iyo yedata yemunhu pane zviito zvemunhu akatsanangurwa. Munhu anogadzirisa dhata remunhu achimiririra mushandisi ane mutoro kune opareta.
Source: .
Izvo zvakakoshawo kudoma muhurongwa chisungo chekuona kuchengetedzwa kwedata rako pachako:
Kuchengeteka kwedata remunhu kana ichigadziriswa muhurongwa hweruzivo kunovimbiswa nemushandisi weiyi system, uyo anogadzirisa dhata remunhu (achazonzi mutyairi), kana nemunhu ari kugadzirisa data rake achimiririra mushandisi pahwaro hwe chibvumirano chakapedzwa nemunhu uyu (zvinozonzi munhu ane mvumo). Chibvumirano pakati peanoshanda nemunhu ane mvumo chinofanira kupa chisungo chemunhu ane mvumo kuti ave nechokwadi chekuchengetedzwa kwedata remunhu kana ichigadziriswa muhurongwa hweruzivo.
Source:
Chokwadi: Kana iwe ukapa ruzivo rwemunhu kune mupi, saka saina hurongwa. Mukurongeka, ratidza chinodiwa kuti uve nechokwadi chekuchengetedzwa kwezvinyorwa zvemunhu data. Zvikasadaro, iwe hauite zvinoenderana nemutemo une chekuita nekuendeswa kwega data rekugadzirisa basa kune wechitatu bato, uye mupi haana chikwereti kwauri maererano nekuteerera 152-FZ.
Nhema 4. Mossad iri kundisora, kana kuti ndine UZ-1
Vamwe vatengi vanoramba vachiratidza kuti vane ISPD yezinga rekuchengetedza 1 kana 2. Kazhinji kazhinji izvi handizvo. Ngatirangarirei hardware kuti tione kuti sei izvi zvichiitika.
Iyo LO, kana nhanho yekuchengetedza, inosarudza chauchachengetedza data rako pachako kubva.
Chiyero chekuchengetedza chinokanganiswa neanotevera mapoinzi:
- mhando yedata remunhu (yakakosha, biometric, inowanikwa pachena uye nevamwe);
- uyo ane ruzivo rwemunhu - vashandi kana vasiri vashandi veayo data opareta;
- nhamba yezvidzidzo zvega data - zvakawanda kana zvishoma 100 zviuru.
- marudzi ekutyisidzira kwazvino.
Inotiudza nezvemhando dzekutyisidzira . Heino tsananguro yechimwe nechimwe chine dudziro yangu yemahara mumutauro wevanhu.
Nyora 1 kutyisidzira kwakakodzera kune yeruzivo system kana kutyisidzira kwakabatana nekuvapo kwezvisina kunyorwa (zvisina kutaurwa) kugona musoftware software inoshandiswa muhurongwa hweruzivo zvine chekuita nazvo.
Kana iwe ukaona rudzi urwu rwekutyisidzira sechinhu chakakosha, saka unotenda zvakasimba kuti vamiririri veCIA, MI6 kana MOSSAD vakaisa bookmark muhurongwa hwekushanda kuti vabire data yega yezvinyorwa kubva kuISPD yako.
Kutyisidzira kwemhando ye2nd kwakakosha kune hurongwa hweruzivo kana kutyisidzira kwakabatana nekuvapo kwezvisina kunyorwa (zvisingazivikanwe) kugona musoftware yekushandiswa inoshandiswa muhurongwa hweruzivo zvakare yakakosha kwairi.
Kana iwe uchifunga kuti kutyisidzira kwerudzi rwechipiri inyaya yako, wobva warara woona kuti iwo maagent eCIA, MI6, MOSSAD, akaipa ari ega hacker kana boka akaisa mabookmark mune imwe hofisi software package kuti avhime chaizvo. data rako pachako. Ehe, kune inokatyamadza application software senge μTorrent, asi iwe unogona kuita runyoro rweanotenderwa software yekumisikidza uye kusaina chibvumirano nevashandisi, kwete kupa vashandisi kodzero dzemunzvimbo, nezvimwe.
Type 3 kutyisidzira kwakakodzera kune yeruzivo system kana kutyisidzira kusingaenderane nekuvapo kwezvisina kunyorwa (zvisina kutaurwa) kugona muhurongwa uye software yekushandisa inoshandiswa muhurongwa hweruzivo inoenderana nazvo.
Kutyisidzira kwemhando 1 uye 2 hakuna kukodzera iwe, saka ino ndiyo nzvimbo yako.
Isu takarongedza mhando dzekutyisidzira, ikozvino ngatitarisei kuti ndeipi nhanho yechengetedzo iyo ISPD yedu ichave nayo.
Tafura inoenderana netsamba dzinotaurwa mu .
Kana tikasarudza rudzi rwechitatu rwekutyisidzira chaiko, saka kazhinji tichava neUZ-3. Iyo chete inosarudzika, kana kutyisidzira kwemhando 1 uye 2 kusingakodzeri, asi mwero wekuchengetedza ucharamba uchikwira (UZ-2), makambani anogadzira data rakakosha revanhu vasiri vashandi muhuwandu hunopfuura 100 000. semuenzaniso, makambani anoita zvekurapa diagnostics uye kupa mabasa ekurapa.
Iko kunewo UZ-4, uye inowanikwa kunyanya mumakambani ane bhizinesi risingaenderani nekugadziriswa kwemashoko ega ega evasiri vashandi, i.e. vatengi kana makondirakiti, kana mabhesi ega ega maduku.
Sei zvakakosha kuti urege kuwedzeredza nehuwandu hwekuchengeteka? Zviri nyore: iyo seti yezviyero uye nzira dzekudzivirira kuti ive nechokwadi ichi chaicho chekuchengetedza chinoenderana neizvi. Iyo yakakwirira yezinga reruzivo, iyo yakawanda ichada kuitwa mumasangano uye tekinoroji mazwi (verenga: iyo yakawanda mari uye tsinga ichada kushandiswa).
Pano, semuenzaniso, ndiyo nzira iyo seti yematanho ekuchengetedza anochinja zvinoenderana neiyo PP-1119 imwechete.
Iye zvino ngationei kuti, zvichienderana nehuwandu hwakasarudzwa hwekuchengeteka, urongwa hwematanho anodiwa hunochinja maererano Pane apendikisi yakareba kune iyi gwaro, iyo inotsanangura matanho anodiwa. Kune zana nepfumbamwe dzazvo zvakazara, paKM yega yega zviyero zvinofanirwa zvinotsanangurwa uye zvakamisikidzwa nechiratidzo "+" - zvakaverengerwa chaizvo mutafura iri pazasi. Ukasiya chete anodiwa paUZ-109, unowana 3.
Chokwadi: kana iwe usingaunganidze bvunzo kana biometric kubva kune vatengi, iwe hausi paranoid nezve mabhukimaki mune system uye application software, saka kazhinji iwe une UZ-3. Iine rondedzero inonzwisisika yehurongwa uye tekinoroji matanho anogona kunyatsoitwa.
Nhema 5. Nzira dzose dzekuchengetedza dhata yega yega dzinofanirwa kusimbiswa neFSTEC yeRussia
Kana iwe uchida kana uchidikanwa kuitisa chitupa, saka zvakanyanya iwe uchafanirwa kushandisa zvakasimbiswa zvekudzivirira. Chitupa chichaitwa nemunhu ane rezinesi weFSTEC yeRussia, uyo:
- kufarira kutengesa zvimwe zvakasimbiswa zvekudzivirira ruzivo zvishandiso;
- achatya kuti rezinesi richakanzurwa nemutungamiriri kana paine chakaipa.
Kana iwe usingade certification uye wakagadzirira kuratidza kutevedzera zvinodiwa neimwe nzira, yakatumidzwa mukati "Kuongorora mashandiro ematanho anoitwa mukati meyako yekudzivirira data system kuti uve nechokwadi chekuchengetedza data rako," ipapo masisitimu ekuchengetedza ruzivo haadiwe kwauri. Ndichaedza kutsanangura muchidimbu chikonzero chacho.
В inotaura kuti zvinofanirwa kushandisa midziyo yekudzivirira iyo yakamboitwa conformity assessment maitiro zvinoenderana nematanho akatarwa.:
Kuve nechokwadi chekuchengetedzeka kwedata rako pachako kunowanikwa, kunyanya:
[…] 3) kushandiswa kwekuchengetedza ruzivo kunoreva kuti vakapfuura nzira yekuongorora yekuteerera zvinoenderana nematanho akatarwa.
В Pane zvakare chinodiwa chekushandisa ruzivo rwekuchengetedza maturusi akapfuura maitiro ekuongorora kutevedzera zvinodiwa nemutemo:
[…] kushandiswa kwezvishandiso zvekuchengetedza ruzivo zvakapfuura nzira yekuongorora kutevedza zvinodiwa nemutemo weRussian Federation mundima yechengetedzo yeruzivo, mumamiriro ezvinhu apo kushandiswa kwenzira dzakadaro kwakakosha kuderedza kutyisidzira kwazvino.
inodzokorora ndima PP-1119:
Matanho ekuona kuchengetedzwa kwedata remunhu anoitwa, pakati pezvimwe, kuburikidza nekushandiswa kweruzivo rwekuchengetedza maturusi mune yeruzivo system iyo yakapfuura iyo conformity yekuongorora maitiro zvinoenderana neyakagadzikwa maitiro, mumamiriro ezvinhu apo kushandiswa kwezvishandiso zvakadaro kuchidikanwa kuderedza kutyisidzira kwazvino kune chengetedzo yedata rako.
Zvigadzirwa izvi zvinei zvakafanana? Ndizvozvo - havadi kushandiswa kwemidziyo yekudzivirira yakasimbiswa. Icho chokwadi ndechekuti kune akati wandei mafomu ekuenderana kwekuongorora (kuzvidira kana kusungirwa chitupa, kuzivisa kwekuenderana). Certification ndechimwe chazvo. Mushandi anogona kushandisa zvigadzirwa zvisina-certified, asi anozoda kuratidza kune regulator kana awongorora kuti vakaita imwe nzira yekuenzanisa maitiro ekuongorora.
Kana mutyairi akasarudza kushandisa zvakasimbiswa zvekudzivirira, saka zvakakosha kuti usarudze ruzivo rwekuchengetedza ruzivo maererano nekudzivirira kwe ultrasound, iyo inotaurwa zvakajeka mukati. :
Matanho ehunyanzvi ekuchengetedza data remunhu anoitwa kuburikidza nekushandiswa kweruzivo rwekuchengetedza maturusi, kusanganisira software (hardware) maturusi maanoitwa, ane anodiwa kuchengetedza mabasa.
Paunenge uchishandisa ruzivo rwekuchengetedza maturusi akasimbiswa zvinoenderana neruzivo rwekuchengetedza zvinodiwa mumasisitimu eruzivo:
Chokwadi: Mutemo haudi kushandiswa kunosungirwa kwemidziyo yekudzivirira yakasimbiswa.
Nhema 6. Ndinoda kuchengetedzwa kwekrispto
Pane mashoma nuances pano:
- Vanhu vazhinji vanotenda kuti cryptography inosungirwa kune chero ISPD. Muchokwadi, iwo anofanirwa kushandiswa chete kana mushandisi asingaone chero mamwe matanho ekudzivirira kwaari kunze kwekushandisa cryptography.
- Kana usingakwanise kuita pasina cryptography, saka unofanirwa kushandisa CIPF yakasimbiswa neFSB.
- Semuenzaniso, iwe unosarudza kugamuchira ISPD mugore remupi webasa, asi iwe hauvimbe nayo. Iwe unotsanangura zvinokunetsa mukutyisidzira uye intruder modhi. Iwe une data rako pachako, saka wafunga kuti cryptography ndiyo chete nzira yekuzvidzivirira: iwe unonyora chaiwo muchina, kuvaka nzira dzakachengeteka uchishandisa cryptographic kuchengetedza. Muchiitiko ichi, iwe uchafanirwa kushandisa CIPF yakasimbiswa neFSB yeRussia.
- Certified CIPF inosarudzwa maererano nehumwe nhanho yekuchengetedza maererano .
Kune ISPDn ine UZ-3, unogona kushandisa KS1, KS2, KS3. KS1 ndeye, semuenzaniso, C-Terra Virtual Gateway 4.2 yekudzivirira nzira.
KC2, KS3 inomiririrwa chete nesoftware uye hardware masisitimu, akadai se: ViPNet Coordinator, APKSH "Continent", S-Terra Gateway, nezvimwe.
Kana iwe uine UZ-2 kana 1, ipapo iwe uchada cryptographic kuchengetedza nzira dzekirasi KV1, 2 uye KA. Aya ndiwo chaiwo software uye hardware masisitimu, inonetsa kushanda, uye maitiro avo ane mwero.
Chokwadi: Mutemo haumanikidze kushandiswa kweCIPF yakasimbiswa neFSB.
Source: www.habr.com