{"id":31627,"date":"2019-10-31T21:42:14","date_gmt":"2019-10-31T18:42:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/informatsionnaya-bezopasnost-bankovskih-beznalichnyh-platezhej-chast-8-tipovye-modeli-ugroz\/"},"modified":"2019-10-31T21:42:14","modified_gmt":"2019-10-31T18:42:14","slug":"informatsionnaya-bezopasnost-bankovskih-beznalichnyh-platezhej-chast-8-tipovye-modeli-ugroz","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/informatsionnaya-bezopasnost-bankovskih-beznalichnyh-platezhej-chast-8-tipovye-modeli-ugroz","title":{"rendered":"Siguria informative e pagesave bankare pa cash. Pjesa 8 - Modelet tipike t\u00eb k\u00ebrc\u00ebnimeve","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/\"><img decoding=\"async\" alt=\"Siguria informative e pagesave bankare pa cash. Pjesa 8 - Modelet tipike t\u00eb k\u00ebrc\u00ebnimeve\" src=\"\/wp-content\/uploads\/2019\/04\/acac26db4761c25a5215f37ef9e8cb5b.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#ABOUT\">N\u00eb lidhje me k\u00ebrkimin<\/a><\/noindex><\/p>\n<p><b class=\"spoiler_title\">Linket n\u00eb pjes\u00eb t\u00eb tjera t\u00eb k\u00ebrkimit<\/b><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/344740\/\">Siguria informacionit p\u00ebr pagesat bankare pa para. Pjesa 1 \u2014 Bazat ekonomike.<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/345194\/\">Siguria informacionit p\u00ebr pagesat bankare pa para. Pjesa 2 \u2014 Infrastruktur\u00ebn TIPIKE IT t\u00eb bank\u00ebs.<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/350852\/\">Siguria informacionit p\u00ebr pagesat bankare pa para. Pjesa 3 \u2014 Formimi i k\u00ebrkesave p\u00ebr sistemin e mbrojtjes.<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/351326\/\">Siguria informacionit p\u00ebr pagesat bankare pa para. Pjesa 4 \u2014 Pasqyra e standardeve p\u00ebr modelimin e k\u00ebrc\u00ebnimeve.<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/413703\/\">Siguria informacionit p\u00ebr pagesat bankare pa para. Pjesa 5 \u2014 100+ lidhje tematike mbi thyerjet bankare.<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/419027\/\">Siguria informacionit p\u00ebr pagesat bankare pa para. Pjesa 6 \u2014 Analiza e krimeve bankare.<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/421161\/\">Siguria informacionit p\u00ebr pagesat bankare pa para. Pjesa 7 \u2014 Modeli baz\u00eb i k\u00ebrc\u00ebnimeve.<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/\">Siguria informative e pagesave bankare pa cash. Pjesa 8 - Modelet tipike t\u00eb k\u00ebrc\u00ebnimeve <\/a><\/noindex>(<b>Ju jeni k\u00ebtu<\/b>)<\/li>\n<\/ul>\n<p>Ky artikull p\u00ebrfundon ciklin e publikimeve q\u00eb i kushtohen siguris\u00eb informacionit p\u00ebr pagesat bankare pa para. K\u00ebtu do t\u00eb shqyrtojm\u00eb modelet tipike t\u00eb k\u00ebrc\u00ebnimeve, p\u00ebr t\u00eb cilat u cituan n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/421161\/\">modelin baz\u00eb<\/a><\/noindex>:<\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUNC\">Modeli tipik i k\u00ebrc\u00ebnimeve. Koneksioni n\u00eb rrjet<\/a><\/noindex>.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUIS\">Modeli tipik i k\u00ebrc\u00ebnimeve. Sistemi informacionit, i nd\u00ebrtuar mbi arkitektur\u00ebn klient-server<\/a><\/noindex>.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUSRD\">Modeli tipik i k\u00ebrc\u00ebnimeve. Sistemi i ndarjes s\u00eb aksesit<\/a><\/noindex>.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUMI\">Modeli tipik i k\u00ebrc\u00ebnimeve. Moduli i integrimit<\/a><\/noindex>.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUSKZI\">Modeli tipik i k\u00ebrc\u00ebnimeve. Sistemi i mbrojtjes kriptografike t\u00eb informacionit.<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<blockquote><p><b>\u0425\u0410\u0411\u0420\u041e-WARNING !!!<\/b> T\u00eb dashur an\u00ebtar\u00eb t\u00eb Habr, ky nuk \u00ebsht\u00eb nj\u00eb postim arg\u00ebtues. <br \/>\nMaterialet e fshehura n\u00ebn katin 40+ jan\u00eb t\u00eb destinuara p\u00ebr <b>t\u00eb ndihmojn\u00eb n\u00eb pun\u00eb ose studim<\/b> njer\u00ebzve q\u00eb specializohen n\u00eb banking ose sigurin\u00eb informacionit. K\u00ebto materiale jan\u00eb produkti p\u00ebrfundimtar i k\u00ebrkimit dhe jan\u00eb shkruar n\u00eb nj\u00eb stil t\u00eb that\u00eb zyrtar. N\u00eb thelb, k\u00ebto jan\u00eb shabllone p\u00ebr dokumente t\u00eb brendshme mbi SI. <\/p>\n<p>Dhe natyrisht \u2014 <b>\u00abp\u00ebrdorimi i informacionit nga artikulli p\u00ebr q\u00ebllime t\u00eb paligjshme nd\u00ebshkohet nga ligji\u00bb<\/b>. Lexim produktiv!\n<\/p><\/blockquote>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nInformacion p\u00ebr lexuesit q\u00eb njohin k\u00ebrkimin duke filluar nga ky publikim.<br \/>\n<noindex><a rel=\"nofollow\" name=\"ABOUT\"><\/a><\/noindex><\/p>\n<blockquote>\n<h2>N\u00eb lidhje me k\u00ebrkimin<\/h2>\n<p>\nPo lexoni nj\u00eb udh\u00ebzues p\u00ebr specialistin e p\u00ebrgjegjsh\u00ebm p\u00ebr sigurin\u00eb e pagesave n\u00eb bank\u00eb. <\/p>\n<p><b>Logjika e paraqitjes<\/b><\/p>\n<p>N\u00eb fillim, n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/344740\/\">pjesa 1<\/a><\/noindex> \u0438 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/345194\/\">pjesa 2<\/a><\/noindex> jepet p\u00ebrshkrimi i subjektit t\u00eb mbrojtjes. Pastaj, n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/350852\/\">pjes\u00ebn 3<\/a><\/noindex> tregohet se si t\u00eb nd\u00ebrtohet nj\u00eb sistem mbrojtjeje dhe theksohet nevoja p\u00ebr t\u00eb formuar nj\u00eb model k\u00ebrc\u00ebnimesh. N\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/351326\/\">pjese 4<\/a><\/noindex> tregohet se cilat modele k\u00ebrc\u00ebnimesh ekzistojn\u00eb dhe si formohen ato. N\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/413703\/\">pjese 5<\/a><\/noindex> \u0438 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/419027\/\">pjese 6<\/a><\/noindex> jepen analiza t\u00eb sulmeve reale. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/421161\/\">Pjesa 7<\/a><\/noindex> \u0438 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/\">pjese 8<\/a><\/noindex> kan\u00eb p\u00ebrshkrimin e modelit t\u00eb k\u00ebrc\u00ebnimeve, t\u00eb nd\u00ebrtuar duke marr\u00eb parasysh informacionin nga t\u00eb gjitha pjes\u00ebt e m\u00ebparshme.<\/p><\/blockquote>\n<p>\n<noindex><a rel=\"nofollow\" name=\"TMUNC\"><\/a><\/noindex><\/p>\n<h2>MODEL TIPALET E K\u00cbRC\u00cbNIMEVE. KONEKSIONI RRJET<\/h2>\n<p><\/p>\n<h3>Objekti i mbrojtjes, p\u00ebr t\u00eb cilin aplikohet modeli i k\u00ebrc\u00ebnimeve (scope)<\/h3>\n<p>\nObje futja e mbrojtjes jan\u00eb t\u00eb dh\u00ebnat q\u00eb transmetohen p\u00ebrmes nj\u00eb koneksioni rrjetesh, funksionon n\u00eb rrjetet e transmetimit t\u00eb t\u00eb dh\u00ebnave t\u00eb nd\u00ebrtuara mbi baz\u00ebn e stek\u00ebs TCP\/IP.<\/p>\n<p><b>Arkitektura<\/b><\/p>\n<p><img decoding=\"async\" alt=\"Siguria informative e pagesave bankare pa cash. Pjesa 8 - Modelet tipike t\u00eb k\u00ebrc\u00ebnimeve\" src=\"\/wp-content\/uploads\/2019\/04\/7fec6dc479280db22a581595ae7fc493.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nP\u00ebrshkrimi i elementeve t\u00eb arkitektur\u00ebs:<\/p>\n<ul>\n<li><i>\u00abNodet p\u00ebrfundimtare\u00bb<\/i> \u2014 nodet q\u00eb shk\u00ebmbejn\u00eb informacionin e mbrojtur.<\/li>\n<li><i>\u00abNodet nd\u00ebrmjet\u00ebse\u00bb<\/i> \u2014 element\u00eb t\u00eb rrjetit t\u00eb transmetimit t\u00eb t\u00eb dh\u00ebnave: ruter\u00eb, switch, server\u00eb akses, server\u00eb proxy dhe pajisje t\u00eb tjera, p\u00ebrmes t\u00eb cilave kalon trafiku i koneksionit rrjet. N\u00eb p\u00ebrgjith\u00ebsi, nj\u00eb koneksion rrjet mund t\u00eb funksionoj\u00eb pa nodet nd\u00ebrmjet\u00ebse (drejt p\u00ebr drejt midis nod\u00ebve p\u00ebrfundimtare).<\/li>\n<\/ul>\n<p><\/p>\n<h3>K\u00ebrc\u00ebnimet e siguris\u00eb s\u00eb nivelit t\u00eb lart\u00eb<\/h3>\n<p>\n<b>Dekompuzimi<\/b><\/p>\n<p>U1. Ndalimi i paautorizuar i njohjes s\u00eb t\u00eb dh\u00ebnave t\u00eb transmetuara.<br \/>\nU2. Ndalimi i paautorizuar i modifikimit t\u00eb t\u00eb dh\u00ebnave t\u00eb transmetuara.<br \/>\nU3. Shkelja e autor\u00ebsis\u00eb s\u00eb t\u00eb dh\u00ebnave t\u00eb transmetuara.<br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUNCU1\"><\/a><\/noindex><\/p>\n<h3>U1. Ndalimi i paautorizuar i njohjes s\u00eb t\u00eb dh\u00ebnave t\u00eb transmetuara<\/h3>\n<p>\n<b>Dekompuzimi<\/b><br \/>\n\u04231.1. &lt;&#8230;&gt;, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u043e\u0435 \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0445 \u0443\u0437\u043b\u0430\u0445:<br \/>\n\u04231.1.1. &lt;&#8230;&gt; \u043f\u0443\u0442\u0435\u043c \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0438\u0445 \u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u0437\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0449\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0443\u0437\u043b\u0430:<br \/>\n\u04231.1.1.1. &lt;&#8230;&gt; \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438.<br \/>\n<i>Shpjegime p\u00ebr U1.1.1.1.<\/i><br \/>\nP.sh., gjat\u00eb p\u00ebrpunimit t\u00eb t\u00eb dh\u00ebnave nga steka rrjetore t\u00eb nodit.<\/p>\n<p>\u04231.1.1.2. &lt;&#8230;&gt; \u0432 \u044d\u043d\u0435\u0440\u0433\u043e\u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438.<br \/>\n<i>Shpjegime p\u00ebr U1.1.1.2.<\/i><br \/>\nP.sh., gjat\u00eb ruajtjes s\u00eb t\u00eb dh\u00ebnave t\u00eb transmetuara n\u00eb cache, skedar\u00eb t\u00eb p\u00ebrkohsh\u00ebm ose skedar\u00eb swap.<\/p>\n<p>\u04231.2. &lt;&#8230;&gt;, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u043e\u0435 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0443\u0437\u043b\u0430\u0445 \u0441\u0435\u0442\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445:<br \/>\n\u04231.2.1. &lt;&#8230;&gt; \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0432\u0441\u0435\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0449\u0438\u0445 \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u0437\u043b\u0430:<br \/>\n<i>Shpjegime p\u00ebr U1.2.1.<\/i><br \/>\nKapja e t\u00eb gjitha paketave realizohet duke i kaluar kartat rrjetore n\u00eb m\u00ebnyr\u00ebn strikte (modi i promiscuous p\u00ebr adapter\u00ebt e kabllovik\u00ebve ose n\u00eb modalitetin monitor p\u00ebr adapter\u00ebt wi-fi).<\/p>\n<p>\u04231.2.2. &lt;&#8230;&gt; \u043f\u0443\u0442\u0435\u043c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 \u00ab\u0447\u0435\u043b\u043e\u0432\u0435\u043a \u043f\u043e\u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 (MiTM)\u00bb, \u043d\u043e \u0431\u0435\u0437 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (\u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u044f \u0441\u043b\u0443\u0436\u0435\u0431\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432).<br \/>\nU1.2.2.1. Referenca: <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUNCU2\">\u00abModeli tipik i k\u00ebrc\u00ebnimeve. Lidha rrjet\u00eb. U2. Modifikimi i paautorizuar i t\u00eb dh\u00ebnave t\u00eb transmetuara\u00bb<\/a><\/noindex>.<\/p>\n<p>\u04231.3. &lt;&#8230;&gt;, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u043e\u0435 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c (\u0422\u041a\u0423\u0418) \u0441 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u0437\u043b\u043e\u0432 \u0438\u043b\u0438 \u043b\u0438\u043d\u0438\u0439 \u0441\u0432\u044f\u0437\u0438.<\/p>\n<p>\u04231.4. &lt;&#8230;&gt;, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u043e\u0435 \u0437\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0438\u043b\u0438 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0435 \u0443\u0437\u043b\u044b \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 (\u0421\u0422\u0421), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043d\u0435\u0433\u043b\u0430\u0441\u043d\u043e\u0433\u043e \u0441\u044a\u0435\u043c\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.<br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUNCU2\"><\/a><\/noindex><\/p>\n<h3>U2. Modifikimi i paautorizuar i t\u00eb dh\u00ebnave t\u00eb transmetuara<\/h3>\n<p>\n<b>Dekompuzimi<\/b><br \/>\n\u04232.1. &lt;&#8230;&gt;, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u0430\u044f \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0445 \u0443\u0437\u043b\u0430\u0445:<br \/>\n\u04232.1.1. &lt;&#8230;&gt; \u043f\u0443\u0442\u0435\u043c \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0438\u0445 \u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u0437\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0449\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0443\u0437\u043b\u043e\u0432:<br \/>\n\u04232.1.1.1. &lt;&#8230;&gt; \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438:<br \/>\n\u04232.1.1.2. &lt;&#8230;&gt; \u0432 \u044d\u043d\u0435\u0440\u0433\u043e\u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438:<\/p>\n<p>\u04232.2. &lt;&#8230;&gt;, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u0430\u044f \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0443\u0437\u043b\u0430\u0445 \u0441\u0435\u0442\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445:<br \/>\n\u04232.2.1. &lt;&#8230;&gt; \u043f\u0443\u0442\u0435\u043c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u0438 \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 \u00ab\u0447\u0435\u043b\u043e\u0432\u0435\u043a \u043f\u043e\u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 (MiTM)\u00bb \u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u0443\u0437\u0435\u043b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432:<br \/>\nU2.2.1.1. Lidhi fizik i pajisjeve t\u00eb sulmuesve n\u00eb prishjen e lidhjes rrjet\u00eb.<br \/>\nU2.2.1.2. Realizimi i sulmeve mbi protokollet rrjet\u00eb:<br \/>\n\u04232.2.1.2.1. &lt;&#8230;&gt; \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0435\u0442\u044f\u043c\u0438 (VLAN):<br \/>\nU2.2.1.2.1.1. <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/VLAN_hopping\">VLAN hopping<\/a><\/noindex>.<br \/>\nU2.2.1.2.1.2. Modifikimi i paautorizuar i konfigurimeve VLAN n\u00eb switch-e ose router-a.<br \/>\n\u04232.2.1.2.2. &lt;&#8230;&gt; \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0440\u0430\u0444\u0438\u043a\u0430:<br \/>\nU2.2.1.2.2.1. Modifikimi i paautorizuar i tabelave t\u00eb routing-ut statik n\u00eb router-a.<br \/>\nU2.2.1.2.2.2. Anoncing ngadal\u00eb me rrug\u00ebt e rreme nga sulmuesit p\u00ebrmes protokolleve t\u00eb routing-ut dinamik.<br \/>\n\u04232.2.1.2.3. &lt;&#8230;&gt; \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f:<br \/>\nU2.2.1.2.3.1. <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Rogue_DHCP\">Rogue DHCP<\/a><\/noindex>.<br \/>\nU2.2.1.2.3.2. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.securitylab.ru\/analytics\/379619.php\">Rogue WPAD<\/a><\/noindex>.<br \/>\n\u04232.2.1.2.4. &lt;&#8230;&gt; \u0430\u0434\u0440\u0435\u0441\u0430\u0446\u0438\u0438 \u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0438\u043c\u0435\u043d:<br \/>\nU2.2.1.2.4.1. <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/ARP-spoofing\">ARP spoofing<\/a><\/noindex>.<br \/>\nU2.2.1.2.4.2. <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/DNS_spoofing\">DNS spoofing<\/a><\/noindex>.<br \/>\nU2.2.1.2.4.3. B\u00ebrja e ndryshimeve t\u00eb paautorizuara n\u00eb skedar\u00ebt lokal\u00eb t\u00eb emrave t\u00eb nyjeve (hosts, lmhosts dhe t\u00eb tjera)<br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUNCU3\"><\/a><\/noindex><\/p>\n<h3>U3. Shkelja e autor\u00ebsis\u00eb s\u00eb t\u00eb dh\u00ebnave t\u00eb transmetuara<\/h3>\n<p>\n<b>Dekompuzimi<\/b><br \/>\nU3.1. Neutralizimi i mekanizmave t\u00eb p\u00ebrcaktimit t\u00eb autor\u00ebsis\u00eb s\u00eb informacionit p\u00ebrmes ofrimit t\u00eb t\u00eb dh\u00ebnave t\u00eb rreme p\u00ebr autorin ose burimin e t\u00eb dh\u00ebnave:<br \/>\nU3.1.1. Ndryshimi i t\u00eb dh\u00ebnave mbi autorin, t\u00eb p\u00ebrfshira n\u00eb informacionin e transmetuar.<br \/>\nU3.1.1.1. Neutralizimi i siguris\u00eb kriptografike t\u00eb integritetit dhe autor\u00ebsis\u00eb s\u00eb t\u00eb dh\u00ebnave t\u00eb transmetuara:<br \/>\nU3.1.1.1.1. Referenca: <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUSKZIU4\">\u00abModeli tipik i k\u00ebrc\u00ebnimeve. Sistemi i mbrojtjes kriptografike t\u00eb informacionit.<br \/>\nU4. Krijimi i nj\u00eb n\u00ebnshkrimi elektronik t\u00eb nj\u00eb n\u00ebnshkruesi legjitim n\u00ebn t\u00eb dh\u00ebna t\u00eb rreme\u00bb<\/a><\/noindex>.<br \/>\nU3.1.1.2. Neutralizimi i mbrojtjes s\u00eb autor\u00ebsis\u00eb s\u00eb informacionit t\u00eb transmetuar, i realizuar p\u00ebrmes kodave konfirmuese nj\u00eb her\u00ebshe:<br \/>\nU3.1.1.2.1. <noindex>Nd\u00ebrrimi i SIM-it<\/noindex>.<\/p>\n<p>U3.1.2. Ndryshimi i t\u00eb dh\u00ebnave t\u00eb burimit t\u00eb informacionit t\u00eb transmetuar:<br \/>\nU3.1.2.1. <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/IP_address_spoofing\">Marrja e IP-ve<\/a><\/noindex>.<br \/>\nU3.1.2.2. <noindex><a rel=\"nofollow\" href=\"http:\/\/xgu.ru\/wiki\/MAC-spoofing\">Marrja e MAC-it<\/a><\/noindex>.<\/p>\n<p>\n<noindex><a rel=\"nofollow\" name=\"TMUIS\"><\/a><\/noindex><\/p>\n<h2>MODEL TYPIC I RRETHIMEVE. SISTEMI INFORMACIONAL, ND\u00cbRTUAR N\u00cb BAZ\u00cb T\u00cb ARKITEKTUR\u00cbS KLIENT-SERVER<\/h2>\n<p><\/p>\n<h3>Objekti i mbrojtjes, p\u00ebr t\u00eb cilin aplikohet modeli i k\u00ebrc\u00ebnimeve (scope)<\/h3>\n<p>\nObjekti i mbrojtjes \u00ebsht\u00eb nj\u00eb sistem informacioni, i nd\u00ebrtuar mbi baz\u00ebn e arkitektur\u00ebs klient-server.<\/p>\n<p><b>Arkitektura<\/b><br \/>\n<img decoding=\"async\" alt=\"Siguria informative e pagesave bankare pa cash. Pjesa 8 - Modelet tipike t\u00eb k\u00ebrc\u00ebnimeve\" src=\"\/wp-content\/uploads\/2019\/04\/f18c9c6c1e3d5372932d8c2a331284cf.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nP\u00ebrshkrimi i elementeve t\u00eb arkitektur\u00ebs:<\/p>\n<ul>\n<li><i>\u00abKlienti\u00bb<\/i> \u2013 nj\u00eb pajisje n\u00eb t\u00eb cil\u00ebn funksionon pjesa klient e sistemit informacional.<\/li>\n<li><i>\u00abServeri\u00bb<\/i> \u2013 nj\u00eb pajisje n\u00eb t\u00eb cil\u00ebn funksionon pjesa server e sistemit informacional.<\/li>\n<li><i>\u00abDepoja e t\u00eb dh\u00ebnave\u00bb<\/i> \u2013 nj\u00eb pjes\u00eb e infrastruktur\u00ebs server t\u00eb sistemit informacional, e cila \u00ebsht\u00eb e destinuar p\u00ebr ruajtjen e t\u00eb dh\u00ebnave t\u00eb p\u00ebrpunuara nga sistemi informacional.<\/li>\n<li><i>\u00abLidhja rrjet\u00bb<\/i> \u2013 nj\u00eb kanal i shk\u00ebmbimit t\u00eb informacionit mes Klientit dhe Serverit, q\u00eb kalon p\u00ebrmes rrjetit t\u00eb transmetimit t\u00eb t\u00eb dh\u00ebnave. P\u00ebr nj\u00eb p\u00ebrshkrim m\u00eb t\u00eb detajuar t\u00eb modelit t\u00eb elementit, referohuni n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUNC\">\u00abModelin tipik t\u00eb rreziqeve. Lidhja rrjet\u00bb<\/a><\/noindex>.<\/li>\n<\/ul>\n<p>\n<b>Kufizimet<\/b><br \/>\nN\u00eb modelimin e objektit u caktuan kufizimet e m\u00ebposhtme:<\/p>\n<ol>\n<li>P\u00ebrdoruesi nd\u00ebrvepron me sistemin informacional brenda intervaleve t\u00eb caktuara kohore, t\u00eb njohura si seancat e pun\u00ebs.<\/li>\n<li>N\u00eb fillim t\u00eb \u00e7do seance pune ndodhin identifikimi, autentifikimi dhe autorizimi i p\u00ebrdoruesit.<\/li>\n<li>T\u00eb gjitha informacionet e mbrojtura ruhen n\u00eb pjes\u00ebn server t\u00eb sistemit informacional.<\/li>\n<\/ol>\n<p><\/p>\n<h3>K\u00ebrc\u00ebnimet e siguris\u00eb s\u00eb nivelit t\u00eb lart\u00eb<\/h3>\n<p>\n<b>Dekompuzimi<\/b><br \/>\nU1. Kryerja e veprimeve t\u00eb paautorizuara nga hakerat n\u00eb em\u00ebr t\u00eb nj\u00eb p\u00ebrdoruesi legjitim.<br \/>\nU2. Modifikimi i paautorizuar i informacionit t\u00eb mbrojtur gjat\u00eb p\u00ebrpunimit nga pjesa server e sistemit informacional.<br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUISU1\"><\/a><\/noindex><\/p>\n<h3>U1. Kryerja e veprimeve t\u00eb paautorizuara nga hakerat n\u00eb em\u00ebr t\u00eb nj\u00eb p\u00ebrdoruesi legjitim<\/h3>\n<p>\n<b>Shpjegime<\/b><br \/>\nZakonisht, n\u00eb sistemet informacionale, lidhja e veprimeve me p\u00ebrdoruesin q\u00eb i ka realizuar ato b\u00ebhet p\u00ebrmes:<\/p>\n<ol>\n<li>dokumenteve t\u00eb pun\u00ebs s\u00eb sistemit (logs). <\/li>\n<li>atributes speciale t\u00eb objekteve t\u00eb t\u00eb dh\u00ebnave, q\u00eb p\u00ebrmbajn\u00eb informacione rreth p\u00ebrdoruesit q\u00eb i krijoi ose e ndryshoi ato.<\/li>\n<\/ol>\n<p>\nN\u00eb lidhje me seanc\u00ebn e pun\u00ebs, kjo rrezik mund t\u00eb dekompozohet n\u00eb:<\/p>\n<ol>\n<li>&lt;&#8230;&gt; \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u044b\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0435\u0430\u043d\u0441\u0430 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.<\/li>\n<li>&lt;&#8230;&gt; \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u044b\u0435 \u0432\u043d\u0435 \u0441\u0435\u0430\u043d\u0441\u0430 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.<\/li>\n<\/ol>\n<p>\nSeanca e pun\u00ebs t\u00eb p\u00ebrdoruesit mund t\u00eb iniciohet:<\/p>\n<ol>\n<li>Nga vet\u00eb p\u00ebrdoruesi.<\/li>\n<li>K\u00ebrc\u00ebnuesit.<\/li>\n<\/ol>\n<p>\nN\u00eb k\u00ebt\u00eb faz\u00eb, dekompozimi i nd\u00ebrmjet\u00ebm t\u00eb k\u00ebtij k\u00ebrc\u00ebnimi do t\u00eb duket si n\u00eb vijim:<br \/>\nU1.1. Veprime t\u00eb paautorizuara jan\u00eb kryer brenda seanc\u00ebs s\u00eb pun\u00ebs s\u00eb p\u00ebrdoruesit:<br \/>\n\u04231.1.1. &lt;&#8230;&gt;, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.<br \/>\n\u04231.1.2. &lt;&#8230;&gt;, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.<br \/>\nU1.2. Veprime t\u00eb paautorizuara jan\u00eb kryer jasht\u00eb seanc\u00ebs s\u00eb pun\u00ebs s\u00eb p\u00ebrdoruesit.<\/p>\n<p>Nga pik\u00ebpamja e objekteve t\u00eb infrastruktur\u00ebs informative, mbi t\u00eb cilat mund t\u00eb ndikojn\u00eb k\u00ebrc\u00ebnuesit, dekompozimi i k\u00ebrc\u00ebnimeve t\u00eb nd\u00ebrmjetme do t\u00eb duket si n\u00eb vijim:<\/p>\n<p>Elementet<br \/>\nDekompozimi i k\u00ebrc\u00ebnimeve<\/p>\n<p><b>U1.1.1.<\/b><br \/>\n<b>U1.1.2.<\/b><br \/>\n<b>U1.2.<\/b><\/p>\n<p>K\u03bb\u03af\u03bf\u03c5ent<br \/>\nU1.1.1.1.<br \/>\nU1.1.2.1.<\/p>\n<p>Koneksioni i rrjetit<br \/>\nU1.1.1.2.<\/p>\n<p>Server<\/p>\n<p>U1.2.1.<\/p>\n<p>\n<b>Dekompuzimi<\/b><br \/>\nU1.1. Veprime t\u00eb paautorizuara jan\u00eb kryer brenda seanc\u00ebs s\u00eb pun\u00ebs s\u00eb p\u00ebrdoruesit:<br \/>\n\u04231.1.1. &lt;&#8230;&gt;, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c:<br \/>\nU1.1.1.1. K\u00ebrc\u00ebnuesit vepruan n\u00eb m\u00ebnyr\u00eb t\u00eb pavarur nga Klienti:<br \/>\nU1.1.1.1.1 K\u00ebrc\u00ebnuesit p\u00ebrdor\u00ebn mjete t\u00eb zakonshme p\u00ebr qasje n\u00eb sistemin informativ:<br \/>\nU1.1.1.1.1.1. K\u00ebrc\u00ebnuesit p\u00ebrdor\u00ebn mjete fizike input-output t\u00eb Klientit (tastier\u00eb, maus, monitor ose ekran prekes t\u00eb pajisjes mobile):<br \/>\nU1.1.1.1.1.1.1. K\u00ebrc\u00ebnuesit vepruan n\u00eb periudha kohe kur seanca \u00ebsht\u00eb aktive, mjetet input-output jan\u00eb t\u00eb aksesueshme, dhe p\u00ebrdoruesi nuk \u00ebsht\u00eb i pranish\u00ebm.<br \/>\nU1.1.1.1.1.2. K\u00ebrc\u00ebnuesit p\u00ebrdor\u00ebn mjete p\u00ebr adminstrim t\u00eb larg\u00ebt (t\u00eb zakonshme ose t\u00eb ofruara nga kodi i d\u00ebmsh\u00ebm) p\u00ebr t\u00eb kontrolluar Klientin:<br \/>\nU1.1.1.1.1.2.1. K\u00ebrc\u00ebnuesit vepruan n\u00eb periudha kohe kur seanca \u00ebsht\u00eb aktive, mjetet input-output jan\u00eb t\u00eb aksesueshme, dhe p\u00ebrdoruesi nuk \u00ebsht\u00eb i pranish\u00ebm.<br \/>\nU1.1.1.1.1.2.2. K\u00ebrc\u00ebnuesit p\u00ebrdor\u00ebn mjete p\u00ebr administrimin e larg\u00ebt, funksionimi i t\u00eb cilave nuk v\u00ebrehet nga p\u00ebrdoruesi i sulmuar.<br \/>\nU1.1.1.2. K\u00ebrc\u00ebnuesit falsifikuan t\u00eb dh\u00ebnat n\u00eb koneksionin e rrjetit mes Klientit dhe Serverit, duke i modifikuar n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb perceptoheshin si veprime t\u00eb p\u00ebrdoruesit legjitim:<br \/>\nU1.1.1.2.1. Lidhja: <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUNCU2\">\u00abModeli tipik i k\u00ebrc\u00ebnimeve. Lidha rrjet\u00eb. U2. Modifikimi i paautorizuar i t\u00eb dh\u00ebnave t\u00eb transmetuara\u00bb<\/a><\/noindex>.<br \/>\nU1.1.1.3. K\u00ebrc\u00ebnuesit e detyruan p\u00ebrdoruesin t\u00eb kryej\u00eb veprimet e caktuara nga ata, duke p\u00ebrdorur metoda t\u00eb inxhinieris\u00eb sociale.<\/p>\n<p>\u04231.1.2 &lt;&#8230;&gt; \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438:<br \/>\nU1.1.2.1. K\u00ebrc\u00ebnuesit vepruan nga Klienti (<b>\u0418<\/b>):<br \/>\nU1.1.2.1.1. K\u00ebrc\u00ebnuesit neutralizuan sistemin e kufizimit t\u00eb qasjes n\u00eb sistemin informativ:<br \/>\nU1.1.2.1.1.1. Lidhja: <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUSRDU1\">\u00abModeli standard i k\u00ebrc\u00ebnimeve. Sistemi i kufizimit t\u00eb aksesit. U1. N\u00ebnshkrimi i nj\u00eb sesioni pune pa autorizim n\u00eb em\u00ebr t\u00eb nj\u00eb p\u00ebrdoruesi legjitim\u00bb<\/a><\/noindex>. <br \/>\nU1.1.2.1.2. K\u00ebrc\u00ebnuesit p\u00ebrdor\u00ebn mjete standarde p\u00ebr aksesin n\u00eb sistemin informatik<br \/>\nU1.1.2.2. K\u00ebrc\u00ebnuesit vepruan nga nyje t\u00eb tjera t\u00eb rrjetit t\u00eb transmetimit t\u00eb t\u00eb dh\u00ebnave, nga t\u00eb cilat mund t\u00eb krijohet nj\u00eb lidhje rrjet me Serverin (<b>\u0418<\/b>):<br \/>\nU1.1.2.2.1. K\u00ebrc\u00ebnuesit neutralizuan sistemin e kufizimit t\u00eb aksesit t\u00eb sistemit informatik:<br \/>\nU1.1.2.2.1.1. Lidhja: <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUSRDU1\">\u00abModeli standard i k\u00ebrc\u00ebnimeve. Sistemi i kufizimit t\u00eb aksesit. U1. N\u00ebnshkrimi i nj\u00eb sesioni pune pa autorizim n\u00eb em\u00ebr t\u00eb nj\u00eb p\u00ebrdoruesi legjitim\u00bb<\/a><\/noindex>. <br \/>\nU1.1.2.2.2. K\u00ebrc\u00ebnuesit p\u00ebrdor\u00ebn mjete jo standarde p\u00ebr aksesin n\u00eb sistemin informatik.<br \/>\n<i>Shpjegimet U1.1.2.2.2.<\/i><br \/>\nK\u00ebrc\u00ebnuesit mund t\u00eb ken\u00eb instaluar klientin standard t\u00eb sistemit informatik n\u00eb nj\u00eb nyje t\u00eb jashtme ose mund t\u00eb ken\u00eb p\u00ebrdorur softuer jo standard q\u00eb implementon protokollet standarde t\u00eb shk\u00ebmbimit midis Klientit dhe Serverit.<\/p>\n<p>U1.2 Veprime t\u00eb paautorizuara u realizuan jasht\u00eb sesionit t\u00eb pun\u00ebs t\u00eb p\u00ebrdoruesit.<br \/>\nU1.2.1 K\u00ebrc\u00ebnuesit realizuan veprime t\u00eb paautorizuara dhe m\u00eb pas b\u00ebn\u00eb ndryshime t\u00eb paautorizuara n\u00eb regjistrat e funksionimit t\u00eb sistemit informatik ose n\u00eb atribute speciale t\u00eb objekteve t\u00eb t\u00eb dh\u00ebnave, duke treguar se veprimet e b\u00ebra prej tyre ishin kryer nga nj\u00eb p\u00ebrdorues legjitim.<br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUISU2\"><\/a><\/noindex><\/p>\n<h3>U2. Modifikimi i paautorizuar i informacionit t\u00eb mbrojtur gjat\u00eb p\u00ebrpunimit nga ana e serverit t\u00eb sistemit informatik<\/h3>\n<p>\n<b>Dekompuzimi<\/b><br \/>\nU2.1. K\u00ebrc\u00ebnuesit modifikojn\u00eb informacionin e mbrojtur duke p\u00ebrdorur mjete standarde t\u00eb sistemit informatik dhe e b\u00ebjn\u00eb k\u00ebt\u00eb n\u00eb em\u00ebr t\u00eb nj\u00eb p\u00ebrdoruesi legjitim.<br \/>\nU2.1.1. Lidhja: <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUISU1\">\u00abModeli standard i k\u00ebrc\u00ebnimeve. Sistemi informatik, i nd\u00ebrtuar mbi baz\u00ebn e arkitektur\u00ebs klient-server. U1. Kryerja e veprimeve t\u00eb paautorizuara nga ana e k\u00ebrc\u00ebnuesve n\u00eb em\u00ebr t\u00eb nj\u00eb p\u00ebrdoruesi legjitim\u00bb<\/a><\/noindex>.<\/p>\n<p>U2.2. K\u00ebrc\u00ebnuesit modifikojn\u00eb informacionin e mbrojtur duke p\u00ebrdorur mekanizma t\u00eb aksesit n\u00eb t\u00eb dh\u00ebna q\u00eb nuk parashikohen nga modaliteti standard i funksionimit t\u00eb sistemit informatik.<br \/>\nU2.2.1. K\u00ebrc\u00ebnuesit modifikojn\u00eb skedar\u00ebt q\u00eb p\u00ebrmbajn\u00eb informacionin e mbrojtur:<br \/>\n\u04232.2.1.1. &lt;&#8230;&gt;, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.<br \/>\n\u04232.2.1.2. &lt;&#8230;&gt; \u043f\u0443\u0442\u0435\u043c \u043f\u0440\u043e\u0432\u043e\u043a\u0430\u0446\u0438\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0438\u0437 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0439 \u043a\u043e\u043f\u0438\u0438.<\/p>\n<p>U2.2.2. K\u00ebrc\u00ebnuesit modifikojn\u00eb informacionin e mbrojtur q\u00eb ruhet n\u00eb baz\u00ebn e t\u00eb dh\u00ebnave (<b>\u0418<\/b>):<br \/>\nU2.2.2.1. Sulmuesit neutralizojn\u00eb sistemin e ndarjes s\u00eb qasjes n\u00eb DBMS:<br \/>\nU2.2.2.1.1. Lidhja: <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUSRDU1\">\u00abModeli standard i k\u00ebrc\u00ebnimeve. Sistemi i kufizimit t\u00eb aksesit. U1. N\u00ebnshkrimi i nj\u00eb sesioni pune pa autorizim n\u00eb em\u00ebr t\u00eb nj\u00eb p\u00ebrdoruesi legjitim\u00bb<\/a><\/noindex>.<br \/>\nU2.2.2.2. Sulmuesit modifikojn\u00eb informacionin duke p\u00ebrdorur nd\u00ebrfaqet p\u00ebrkat\u00ebse t\u00eb DBMS p\u00ebr qasje n\u00eb t\u00eb dh\u00ebna.<\/p>\n<p>U2.3. Sulmuesit modifikojn\u00eb informacionin e mbrojtur p\u00ebrmes modifikimit t\u00eb paautorizuar t\u00eb algoritmeve t\u00eb funksionimit t\u00eb softuerit p\u00ebrpunues.<br \/>\nU2.3.1. Modifikimi i n\u00ebnt\u00eb kodit burimor t\u00eb softuerit.<br \/>\nU2.3.1. Modifikimi i n\u00ebnt\u00eb kodit t\u00eb machine t\u00eb softuerit.<\/p>\n<p>U2.4. Sulmuesit modifikojn\u00eb informacionin e mbrojtur duke p\u00ebrdorur dob\u00ebsi n\u00eb softuerin e sistemit informativ.<\/p>\n<p>U2.5. Sulmuesit modifikojn\u00eb informacionin e mbrojtur gjat\u00eb transferimit t\u00eb tij midis komponenteve t\u00eb pjes\u00ebs server t\u00eb sistemit informativ (p.sh., serveri i baz\u00ebs s\u00eb t\u00eb dh\u00ebnave dhe serveri i aplikacioneve):<br \/>\nU2.5.1. Lidhja: <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUNCU2\">\u00abModeli tipik i k\u00ebrc\u00ebnimeve. Lidha rrjet\u00eb. U2. Modifikimi i paautorizuar i t\u00eb dh\u00ebnave t\u00eb transmetuara\u00bb<\/a><\/noindex>.<\/p>\n<p>\n<noindex><a rel=\"nofollow\" name=\"TMUSRD\"><\/a><\/noindex><\/p>\n<h2>MODELI I TIPIK I K\u00cbRCENIMEVE. SISTEMI I NDARJES S\u00cb QASJES<\/h2>\n<p><\/p>\n<h3>Objekti i mbrojtjes, p\u00ebr t\u00eb cilin aplikohet modeli i k\u00ebrc\u00ebnimeve (scope)<\/h3>\n<p>\nObjekti i mbrojtjes, p\u00ebr t\u00eb cilin aplikohet ky model k\u00ebrc\u00ebnimi, korrespondon me objektin e mbrojtjes s\u00eb modelit t\u00eb k\u00ebrc\u00ebnimeve: 'Modeli tipik i k\u00ebrc\u00ebnimeve. Sistemi informativ, nd\u00ebrtuar mbi arkitektur\u00ebn klient-server'.<\/p>\n<p>N\u00ebn sistemin e ndarjes s\u00eb qasjes p\u00ebr p\u00ebrdoruesit n\u00eb k\u00ebt\u00eb model k\u00ebrc\u00ebnimi n\u00ebnkuptohet komponenti i sistemit informativ q\u00eb realizon funksionet:<\/p>\n<ol>\n<li>Identifikimi i p\u00ebrdoruesve.<\/li>\n<li>Autentifikimi i p\u00ebrdoruesve.<\/li>\n<li>Autorizimi i p\u00ebrdoruesve.<\/li>\n<li>Protokollimi i veprimeve t\u00eb p\u00ebrdoruesve.<\/li>\n<\/ol>\n<p><\/p>\n<h3>K\u00ebrc\u00ebnimet e siguris\u00eb s\u00eb nivelit t\u00eb lart\u00eb<\/h3>\n<p>\n<b>Dekompuzimi<\/b><br \/>\nU1. Krijimi i paautorizuar i nj\u00eb sesioni pune n\u00eb em\u00ebr t\u00eb nj\u00eb p\u00ebrdoruesi legjitim. <br \/>\nU2. Rritja e paautorizuar e privilegjeve t\u00eb p\u00ebrdoruesit n\u00eb sistemin informativ.<br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUSRDU1\"><\/a><\/noindex> <\/p>\n<h3>U1. Krijimi i paautorizuar i nj\u00eb sesioni pune n\u00eb em\u00ebr t\u00eb nj\u00eb p\u00ebrdoruesi legjitim <\/h3>\n<p>\n<b>Shpjegime<\/b><br \/>\nDekompensimi i k\u00ebtij k\u00ebrc\u00ebnimi n\u00eb p\u00ebrgjith\u00ebsi do t\u00eb varet nga lloji i sistemeve q\u00eb p\u00ebrdoren p\u00ebr identifikimin dhe autentifikimin e p\u00ebrdoruesve. <\/p>\n<p>N\u00eb k\u00ebt\u00eb model do t\u00eb shqyrtohet vet\u00ebm sistemi i identifikimit dhe autentifikimit t\u00eb p\u00ebrdoruesve, q\u00eb p\u00ebrdor emrin dhe fjal\u00ebkalimin tekstual. N\u00eb k\u00ebt\u00eb rast, do t\u00eb supozojm\u00eb se emri i p\u00ebrdoruesit \u00ebsht\u00eb informacion publik, t\u00eb njohur nga sulmuesit.<\/p>\n<p><b>Dekompuzimi<\/b><br \/>\n\u04231.1. &lt;&#8230;&gt; \u0437\u0430 \u0441\u0447\u0435\u0442 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445:<br \/>\nU1.1.1. Sulmuesit e kan\u00eb kompromentuar t\u00eb dh\u00ebnat e llogaris\u00eb s\u00eb p\u00ebrdoruesit gjat\u00eb ruajtjes s\u00eb tyre.<br \/>\n<i>Shpjegime U1.1.1.<\/i><br \/>\nP\u00ebr shembull, t\u00eb dh\u00ebnat e llogaris\u00eb mund t\u00eb ken\u00eb qen\u00eb t\u00eb shkruara n\u00eb nj\u00eb ngrit\u00ebse, e cila ishte e ngjitur te monitore.<\/p>\n<p>U1.1.2. P\u00ebrdoruesi rast\u00ebsisht ose me q\u00ebllim t\u00eb keq i ka kaluar t\u00eb dh\u00ebnat e qasjes keqb\u00ebr\u00ebseve.<br \/>\nU1.1.2.1. P\u00ebrdoruesi e ka th\u00ebn\u00eb me z\u00eb t\u00eb lart\u00eb informacionin e llogaris\u00eb gjat\u00eb hyrjes.<br \/>\nU1.1.2.2. P\u00ebrdoruesi me dashje e kaloi informacionin e llogaris\u00eb s\u00eb tij:<br \/>\n\u04231.1.2.2.1. &lt;&#8230;&gt; \u043a\u043e\u043b\u043b\u0435\u0433\u0430\u043c \u043f\u043e \u0440\u0430\u0431\u043e\u0442\u0435.<br \/>\n<i>Shpjegime U1.1.2.2.1.<\/i><br \/>\nP\u00ebr shembull, p\u00ebr t'u mund\u00ebsuar atyre z\u00ebvend\u00ebsimin gjat\u00eb nj\u00eb periudhe s\u00ebmundjeje.<\/p>\n<p>\u04231.1.2.2.2. &lt;&#8230;&gt; \u043a\u043e\u043d\u0442\u0440\u0430\u0433\u0435\u043d\u0442\u0430\u043c \u0440\u0430\u0431\u043e\u0442\u043e\u0434\u0430\u0442\u0435\u043b\u044f, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0438\u043c \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0430\u0434 \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.<br \/>\n\u04231.1.2.2.3. &lt;&#8230;&gt; \u0442\u0440\u0435\u0442\u044c\u0438\u043c \u043b\u0438\u0446\u0430\u043c.<br \/>\n<i>Shpjegime U1.1.2.2.3.<\/i><br \/>\nNj\u00eb nga m\u00ebnyrat, por jo t\u00eb vetmet p\u00ebr realizimin e k\u00ebtij rreziku \u00ebsht\u00eb p\u00ebrdorimi nga ana e keqb\u00ebr\u00ebseve i metodave t\u00eb inxhinieris\u00eb sociale.<\/p>\n<p>U1.1.3. Keqb\u00ebr\u00ebst\u00ebt kan\u00eb gjetur t\u00eb dh\u00ebnat e llogaris\u00eb me metod\u00eb provimi:<br \/>\n\u04231.1.3.1. &lt;&#8230;&gt; \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0448\u0442\u0430\u0442\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430.<br \/>\n\u04231.1.3.2. &lt;&#8230;&gt; \u043f\u043e \u0440\u0430\u043d\u0435\u0435 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u043a\u043e\u0434\u0430\u043c (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0445\u044d\u0448\u0430\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u0439) \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.<\/p>\n<p>U1.1.4. Keqb\u00ebr\u00ebst\u00ebt p\u00ebrdor\u00ebn kod t\u00eb d\u00ebmsh\u00ebm p\u00ebr t\u00eb kapur t\u00eb dh\u00ebnat e llogaris\u00eb s\u00eb p\u00ebrdoruesit.<\/p>\n<p>U1.1.5. Keqb\u00ebr\u00ebst\u00ebt e nxorr\u00ebn informacionin e llogaris\u00eb nga lidhja rrjet\u00ebsore midis Klientit dhe Serverit:<br \/>\nU1.1.5.1. Linku: <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUNCU1\">\u00abModeli standard i rreziqeve. Lidhja rrjet\u00ebsore. U1. Qasja e paautorizuar n\u00eb t\u00eb dh\u00ebnat e transmetuara\u00bb<\/a><\/noindex>.<\/p>\n<p>U1.1.6. Keqb\u00ebr\u00ebst\u00ebt e nxorr\u00ebn t\u00eb dh\u00ebnat e llogaris\u00eb nga regjistrat e sistemeve t\u00eb monitorimit t\u00eb pun\u00ebs:<br \/>\n\u04231.1.6.1. &lt;&#8230;&gt; \u0441\u0438\u0441\u0442\u0435\u043c \u0432\u0438\u0434\u0435\u043e\u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f (\u0432 \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043d\u0430\u0436\u0430\u0442\u0438\u044f \u043a\u043b\u0430\u0432\u0438\u0448 \u043d\u0430 \u043a\u043b\u0430\u0432\u0438\u0430\u0442\u0443\u0440\u0435).<br \/>\n\u04231.1.6.2. &lt;&#8230;&gt; \u0441\u0438\u0441\u0442\u0435\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u0437\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c <br \/>\n<i>Shpjegime U1.1.6.2.<\/i><br \/>\nNj\u00eb shembull i till\u00eb i sistemit \u00ebsht\u00eb \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.staffcop.ru\">StuffCop<\/a><\/noindex>.<\/p>\n<p>U1.1.7. Keqb\u00ebr\u00ebst\u00ebt kan\u00eb kompromentuar t\u00eb dh\u00ebnat e llogaris\u00eb s\u00eb p\u00ebrdoruesit p\u00ebr shkak t\u00eb mang\u00ebsive n\u00eb procesin e kalimit t\u00eb tyre.<br \/>\n<i>Shpjegime U1.1.7.<\/i><br \/>\nP\u00ebr shembull, kalimi i fjal\u00ebkalimeve n\u00eb form\u00eb t\u00eb hapur p\u00ebrmes emailit.<\/p>\n<p>U1.1.8. Keqb\u00ebr\u00ebst\u00ebt zbuluan t\u00eb dh\u00ebnat e llogaris\u00eb p\u00ebrmes v\u00ebzhgimit t\u00eb seanc\u00ebs s\u00eb pun\u00ebs s\u00eb p\u00ebrdoruesit me an\u00eb t\u00eb sistemeve t\u00eb administrat\u00ebs n\u00eb distanc\u00eb.<\/p>\n<p>U1.1.9. Keqb\u00ebr\u00ebst\u00ebt e nxorr\u00ebn t\u00eb dh\u00ebnat e llogaris\u00eb si rezultat i daljes s\u00eb tyre p\u00ebrmes kanaleve teknike (TKU):<br \/>\nU1.1.9.1. Keqb\u00ebr\u00ebst\u00ebt e v\u00ebzhguan se si p\u00ebrdoruesi vendoste t\u00eb dh\u00ebnat e llogaris\u00eb me tastier\u00eb:<br \/>\nU1.1.9.1.1 Keqb\u00ebr\u00ebst\u00ebt ndodheshin n\u00eb af\u00ebrsi t\u00eb p\u00ebrdoruesit dhe e pan\u00eb fjal\u00ebkalimin q\u00eb po vendoste me sy. <br \/>\n<i>Shpjegime U1.1.9.1.1<\/i><br \/>\nSituata t\u00eb tilla p\u00ebrfshijn\u00eb veprimet e koleg\u00ebve n\u00eb pun\u00eb ose rastin kur tastiera e p\u00ebrdoruesit \u00ebsht\u00eb e dukshme p\u00ebr vizitor\u00ebt e organizat\u00ebs.<\/p>\n<p>U1.1.9.1.2 Kriminel\u00ebt p\u00ebrdor\u00ebn mjete teknike shtes\u00eb, si nj\u00eb p\u00ebrshkues p\u00ebr, ose nj\u00eb dron, dhe pan\u00eb futjen e kredencialeve p\u00ebrmes dritares. <br \/>\nU1.1.9.2. Kriminel\u00ebt nxorr\u00ebn kredencialet nga regjistrimet e komunikimeve radio midis tastier\u00ebs dhe nj\u00ebsis\u00eb qendrore t\u00eb kompjuterit n\u00eb rast se ato ishin t\u00eb lidhura p\u00ebrmes nj\u00eb interfesi radio (p.sh., Bluetooth).<br \/>\nU1.1.9.3. Kriminel\u00ebt kryen p\u00ebrvet\u00ebsimin e kredencialeve p\u00ebrmes rrjedhjes s\u00eb tyre p\u00ebrmes nj\u00eb kanali t\u00eb ndikimeve elektromagnetike (PEM).<br \/>\n<i>Shpjegime U1.1.9.3.<\/i><br \/>\nShembuj t\u00eb sulmeve <noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/watch?v=tMSglPLIDYU\">k\u00ebtu<\/a><\/noindex> \u0438 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cl.cam.ac.uk\/~mgk25\/pet2004-fpd.pdf\">k\u00ebtu<\/a><\/noindex>. <\/p>\n<p>U1.1.9.4. Krimineli kryen p\u00ebrvet\u00ebsimin e futjes s\u00eb kredencialeve nga tastiera p\u00ebrmes p\u00ebrdorimit t\u00eb mjeteve teknike speciale (STS), t\u00eb destinuara p\u00ebr ekstraktimin e fsheht\u00eb t\u00eb informacionit.<br \/>\n<i>Shpjegime U1.1.9.4.<\/i><br \/>\nShembuj <noindex>dispozitave<\/noindex>. <\/p>\n<p>U1.1.9.5. Kriminel\u00ebt kryen p\u00ebrvet\u00ebsimin e futjes s\u00eb kredencialeve nga tastiera p\u00ebrmes <br \/>\nanaliz\u00ebs s\u00eb sinjalit Wi-Fi, t\u00eb moduluar nga procesi i shtypjes s\u00eb \u00e7el\u00ebsave nga p\u00ebrdoruesi.<br \/>\n<i>Shpjegime U1.1.9.5.<\/i><br \/>\nShembulli <noindex><a rel=\"nofollow\" href=\"https:\/\/threatpost.com\/keystroke-recognition-uses-wi-fi-signals-to-snoop\/120135\/\">sulm<\/a><\/noindex>.<\/p>\n<p>U1.1.9.6. Kriminel\u00ebt kryen p\u00ebrvet\u00ebsimin e futjes s\u00eb kredencialeve nga tastiera p\u00ebrmes analiz\u00ebs s\u00eb z\u00ebrit t\u00eb shtypjes s\u00eb \u00e7el\u00ebsave.<br \/>\n<i>Shpjegime U1.1.9.6.<\/i><br \/>\nShembulli <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/398545\/\">sulm<\/a><\/noindex>.<\/p>\n<p>U1.1.9.7. Kriminel\u00ebt kryen p\u00ebrvet\u00ebsimin e futjes s\u00eb kredencialeve nga tastiera e nj\u00eb pajisjeje mobile p\u00ebrmes analiz\u00ebs s\u00eb t\u00eb dh\u00ebnave t\u00eb akselerometrit.<br \/>\n<i>Shpjegime U1.1.9.7.<\/i><br \/>\nShembulli <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/126806\/\">sulm<\/a><\/noindex>.<\/p>\n<p>\u04231.1.10. &lt;&#8230;&gt;, \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u041a\u043b\u0438\u0435\u043d\u0442\u0435.<br \/>\n<i>Shpjegime U1.1.10.<\/i><br \/>\nP\u00ebr shembull, p\u00ebrdoruesi mund t\u00eb ket\u00eb ruajtur n\u00eb shfletuesin e tij emrin e p\u00ebrdoruesit dhe fjal\u00ebkalimin p\u00ebr t\u00eb hyr\u00eb n\u00eb nj\u00eb faqe t\u00eb caktuar.<\/p>\n<p>U1.1.11. Kriminel\u00ebt komprometuan kredencialet p\u00ebr shkak t\u00eb mang\u00ebsive n\u00eb procesin e t\u00ebrheqjes s\u00eb aksesit t\u00eb p\u00ebrdoruesve.<br \/>\n<i>Shpjegime U1.1.11.<\/i><br \/>\nP\u00ebr shembull, pas shkarkimit t\u00eb p\u00ebrdoruesit, llogarit\u00eb e tij mbet\u00ebn t\u00eb papenguar.<\/p>\n<p>\u04231.2. &lt;&#8230;&gt; \u0437\u0430 \u0441\u0447\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430.<br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUSRDU2\"><\/a><\/noindex> <\/p>\n<h3>U2. Rritja e padeshme e privilegjeve t\u00eb p\u00ebrdoruesit n\u00eb sistemin informacionit<\/h3>\n<p>\n<b>Dekompuzimi<\/b><br \/>\n\u04232.1 &lt;&#8230;&gt; \u043f\u0443\u0442\u0435\u043c \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.<\/p>\n<p>\u04232.2 &lt;&#8230;&gt; \u0437\u0430 \u0441\u0447\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430.<\/p>\n<p>\u04232.3. &lt;&#8230;&gt; \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u043b\u0435\u0439.<br \/>\n<i>Shpjegimet U2.3.<\/i><br \/>\nShembulli 1. P\u00ebrdoruesit iu dha akses m\u00eb t\u00eb madh se sa i nevojitej p\u00ebr arsye pune.<br \/>\nShembulli 2. Pas kalimit t\u00eb p\u00ebrdoruesit n\u00eb nj\u00eb pozit\u00eb tjet\u00ebr, t\u00eb drejtat e aksesit t\u00eb dh\u00ebna m\u00eb par\u00eb nuk u t\u00ebrhoq\u00ebn.<\/p>\n<p>\n<noindex><a rel=\"nofollow\" name=\"TMUMI\"><\/a><\/noindex><\/p>\n<h2>MODEL TYPIC I K\u00cbRC\u00cbNIMIT. MODULI I INTEGRIMIT<\/h2>\n<p><\/p>\n<h3>Objekti i mbrojtjes, p\u00ebr t\u00eb cilin aplikohet modeli i k\u00ebrc\u00ebnimeve (scope)<\/h3>\n<p>\nModuli i integrimit \u2013 nj\u00eb set objektesh t\u00eb infrastruktur\u00ebs informative, t\u00eb destinuara p\u00ebr organizimin e shk\u00ebmbimit t\u00eb informacionit midis sistemeve informative.<\/p>\n<p>Duke marr\u00eb parasysh faktin se n\u00eb rrjetet korporative nuk \u00ebsht\u00eb gjithmon\u00eb e mundur t\u00eb ndahet qart\u00eb nj\u00eb sistem informatik nga tjetri, moduli i integrimit mund t\u00eb konsiderohet gjithashtu si nj\u00eb lidh\u00ebs midis komponent\u00ebve brenda nj\u00eb sistemi informatik.<\/p>\n<p><b>Arkitektura<\/b><br \/>\nSkema e p\u00ebrgjithshme e modulit t\u00eb integrimit duket si m\u00ebposht\u00eb:<\/p>\n<p><img decoding=\"async\" alt=\"Siguria informative e pagesave bankare pa cash. Pjesa 8 - Modelet tipike t\u00eb k\u00ebrc\u00ebnimeve\" src=\"\/wp-content\/uploads\/2019\/04\/6b91d59698b761a14aef7f1c4fbec325.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nP\u00ebrshkrimi i elementeve t\u00eb arkitektur\u00ebs:<\/p>\n<ul>\n<li><i>\u00abServeri i shk\u00ebmbimit (SS)\u00bb<\/i> \u2013 nyje \/ sh\u00ebrbim \/ komponent i sistemit informatik, q\u00eb kryen funksionin e shk\u00ebmbimit t\u00eb t\u00eb dh\u00ebnave me nj\u00eb sistem informatik tjet\u00ebr.<\/li>\n<li><i>\u00abMediatori\u00bb<\/i> \u2013 nyje \/ sh\u00ebrbim, e parashikuar p\u00ebr organizimin e bashk\u00ebpunimit midis sistemeve informative, por q\u00eb nuk \u00ebsht\u00eb pjes\u00eb e tyre. <br \/>\nShembuj <i>\u00abMediator\u00ebve\u00bb<\/i> mund t\u00eb jen\u00eb sh\u00ebrbimet e post\u00ebs elektronike, autobus\u00ebt sh\u00ebrbimor\u00eb t\u00eb nd\u00ebrmarrjes (enterprise service bus \/ arkitektura SoA), serverat e skedar\u00ebve t\u00eb pal\u00ebve t\u00eb treta dhe t\u00eb tjer\u00eb. N\u00eb p\u00ebrgjith\u00ebsi, moduli i integrimit mund t\u00eb mos p\u00ebrmbaj\u00eb \u00abMediat ajor\u00bb.<\/li>\n<li><i>\u00abSO i p\u00ebrpunimit t\u00eb t\u00eb dh\u00ebnave\u00bb<\/i> \u2013 nj\u00eb grumbull programesh, q\u00eb realizon protokollet e shk\u00ebmbimit t\u00eb t\u00eb dh\u00ebnave dhe transformimin e formateve. <br \/>\nP\u00ebr shembull, transformimi i t\u00eb dh\u00ebnave nga formati UFEBS n\u00eb formatin ABS, ndryshimi i statuseve t\u00eb mesazheve gjat\u00eb p\u00ebrcjelljes etj.<\/li>\n<li><i>\u00abLidhja rrjet\u00bb<\/i> i p\u00ebrgjigjet objektit t\u00eb p\u00ebrshkruar n\u00eb modelin tipik t\u00eb k\u00ebrc\u00ebnimit \u00abK\u00ebrc\u00ebnimi i rrjetit\u00bb. Disa nga lidhjet e rrjetit q\u00eb jan\u00eb p\u00ebrfaq\u00ebsuar n\u00eb skem\u00ebn e m\u00ebsip\u00ebrme, mund edhe t\u00eb mos ekzistojn\u00eb.<\/li>\n<\/ul>\n<p><b>Shembuj t\u00eb moduleve t\u00eb integrimit<\/b><\/p>\n<p><i>Skema 1. Integrimi i ABS dhe ARM KBR p\u00ebrmes nj\u00eb serveri skedar\u00ebsh t\u00eb pal\u00ebve t\u00eb treta<\/i><\/p>\n<p>\u0414\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u043b\u0430\u0442\u0435\u0436\u0435\u0439 \u0443\u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0435\u043d\u043d\u044b\u0439 \u0440\u0430\u0431\u043e\u0442\u043d\u0438\u043a \u0431\u0430\u043d\u043a\u0430 \u0432\u044b\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0438\u0437 \u0410\u0411\u0421 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0435 \u043f\u043b\u0430\u0442\u0435\u0436\u043d\u044b\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 \u0438\u0445 \u0432 \u0444\u0430\u0439\u043b (\u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0444\u043e\u0440\u043c\u0430\u0442\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 SQL-\u0434\u0430\u043c\u043f) \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u0430\u043f\u043a\u0435 (&#8230;SHARE) \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0417\u0430\u0442\u0435\u043c \u044d\u0442\u043e\u0442 \u0444\u0430\u0439\u043b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043a\u0440\u0438\u043f\u0442\u0430-\u043a\u043e\u043d\u0432\u0435\u0440\u0442\u0435\u0440\u0430 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043d\u0430\u0431\u043e\u0440 \u0444\u0430\u0439\u043b\u043e\u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0430 \u0423\u0424\u042d\u0411\u0421, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0435\u043c \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442 \u0410\u0420\u041c \u041a\u0411\u0420. <br \/>\nPasi k\u00ebsaj, punonj\u00ebsi i autorizuar \u2014 p\u00ebrdoruesi i ARM KBR \u2014 enkripton dhe n\u00ebnshkruan skedarin e marr\u00eb dhe e d\u00ebrgon at\u00eb n\u00eb sistemin e pagesave t\u00eb Bank\u00ebs s\u00eb Rusis\u00eb.<\/p>\n<p>Kur arrijn\u00eb pagesat nga Banka e Rusis\u00eb, ARM KBR kryen dekryptimin dhe verifikimin e n\u00ebnshkrimit elektronik, pas s\u00eb cil\u00ebs e regjistron si nj\u00eb set skedar\u00ebsh n\u00eb formatin UFEBS n\u00eb serverin e skedar\u00ebve. Para importit t\u00eb dokumenteve t\u00eb pagesave n\u00eb ABS, ato shnd\u00ebrrohen me ndihm\u00ebn e skriptit-konvertues nga formati UFEBS n\u00eb formatin ABS. <\/p>\n<p>Le t\u00eb supozojm\u00eb se n\u00eb k\u00ebt\u00eb skem\u00eb ABS funksionon n\u00eb nj\u00eb server fizik t\u00eb vet\u00ebm, ARM KBR funksionon n\u00eb nj\u00eb kompjuter t\u00eb dedikuar, nd\u00ebrsa skripti-konvertues punon n\u00eb serverin e skedar\u00ebve.<\/p>\n<p><img decoding=\"async\" alt=\"Siguria informative e pagesave bankare pa cash. Pjesa 8 - Modelet tipike t\u00eb k\u00ebrc\u00ebnimeve\" src=\"\/wp-content\/uploads\/2019\/04\/bef53aaa1deaee5adeca620204345642.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKorespondenca e objekteve t\u00eb skem\u00ebs s\u00eb shqyrtuar me element\u00ebt e modelit t\u00eb integrimit:<br \/>\n<i>\u00abServers p\u00ebr shk\u00ebmbim nga ana e ABS\u00bb<\/i> \u2013 serveri ABS.<br \/>\n<i>\u00abServers p\u00ebr shk\u00ebmbim nga ana e ARM KBR\u00bb<\/i> \u2013 kompjuteri ARM KBR.<br \/>\n<i>\u00abMediatori\u00bb<\/i> \u2013 serveri i jasht\u00ebm i skedar\u00ebve.<br \/>\n<i>\u00abSO i p\u00ebrpunimit t\u00eb t\u00eb dh\u00ebnave\u00bb<\/i> \u2013 skripti-konvertues.<\/p>\n<p><i>Skema 2. Integrimi i ABS dhe ARM KBR gjat\u00eb vendosjes s\u00eb nj\u00eb dosjeje t\u00eb p\u00ebrbashk\u00ebt rrjetore me pagesa n\u00eb ARM KBR<\/i><\/p>\n<p>\u0412\u0441\u0435 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e \u0421\u0445\u0435\u043c\u0435 1, \u043d\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f, \u0432\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u0441\u0435\u0442\u0435\u0432\u0430\u044f \u043f\u0430\u043f\u043a\u0430 (&#8230;SHARE) \u0441 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u043c\u0438 \u043f\u043b\u0430\u0442\u0435\u0436\u043d\u044b\u043c\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0441 \u0410\u0420\u041c \u041a\u0411\u0420. \u0421\u043a\u0440\u0438\u043f\u0442-\u043a\u043e\u043d\u0432\u0435\u0440\u0442\u0435\u0440 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u0410\u0420\u041c \u041a\u0411\u0420.<\/p>\n<p><img decoding=\"async\" alt=\"Siguria informative e pagesave bankare pa cash. Pjesa 8 - Modelet tipike t\u00eb k\u00ebrc\u00ebnimeve\" src=\"\/wp-content\/uploads\/2019\/04\/7d3ecde6d78b2c45e1249236c7da925b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKorespondenca e objekteve t\u00eb skem\u00ebs s\u00eb shqyrtuar me element\u00ebt e modelit t\u00eb integrimit:<br \/>\nNj\u00eblloj si n\u00eb Skem\u00ebn 1, por <i>\u00abMediatori\u00bb<\/i> nuk p\u00ebrdoret.<\/p>\n<p><i>Skema 3. Integrimi i ABS dhe ARM KBR-N p\u00ebrmes IBM WebSphere MQ dhe realizimi i n\u00ebnshkrimit t\u00eb dokumenteve elektronike \"n\u00eb an\u00ebn e ABS\"<\/i><\/p>\n<p>ABS punon n\u00eb nj\u00eb platform\u00eb q\u00eb nuk mb\u00ebshtetet nga SKZI SKAD N\u00ebnshkrimi. N\u00ebnshkrimi i dokumenteve elektronike q\u00eb dalin b\u00ebhet n\u00eb nj\u00eb server t\u00eb ve\u00e7ant\u00eb n\u00ebnshkrimi elektronik (Server EP). Ky server gjithashtu kontrollon n\u00ebnshkrimin elektronik t\u00eb dokumenteve q\u00eb vijn\u00eb nga Banka e Rusis\u00eb.<\/p>\n<p>ABS eksporton n\u00eb Server EP nj\u00eb skedar me dokumentet e pagesave n\u00eb formatin e vet.<br \/>\nServeri EP me ndihm\u00ebn e skriptit-konvertues shnd\u00ebrron skedarin n\u00eb mesazhe elektronike n\u00eb formatin UFEBS, pas k\u00ebsaj mesazhet elektronike n\u00ebnshkruhen dhe d\u00ebrgohen n\u00eb IBM WebSphere MQ.<\/p>\n<p>ARM KBR-N i drejtohet IBM WebSphere MQ dhe merr mesazhet e pagesave t\u00eb n\u00ebnshkruara prej andej, pas s\u00eb cil\u00ebs punonj\u00ebsi i autorizuar \u2014 p\u00ebrdoruesi i ARM KBR \u2014 i enkripton dhe i d\u00ebrgon n\u00eb sistemin e pagesave t\u00eb Bank\u00ebs s\u00eb Rusis\u00eb.<\/p>\n<p>Kur n\u00eb pranim t\u00eb pagesave nga Banka e Rusis\u00eb, ARM KBR-N i dekriptin ato dhe verifikon n\u00ebnshkrimin elektronik. Pagesat e p\u00ebrpunuara me sukses si mesazhe elektronike t\u00eb dekriptuara dhe t\u00eb n\u00ebnshkruara n\u00eb formatin UFBSS d\u00ebrgohen n\u00eb IBM WebSphere MQ, nga ku i merr Serveri EP.<\/p>\n<p>Serveri EP verifikon n\u00ebnshkrimin elektronik t\u00eb pagesave t\u00eb ardhura dhe i ruan ato n\u00eb nj\u00eb skedar n\u00eb formatin ABS. M\u00eb pas, punonj\u00ebsi i autorizuar \u2014 p\u00ebrdoruesi i ABS \u2014 ngarkon skedarin e krijuar n\u00eb ABS n\u00eb m\u00ebnyr\u00eb t\u00eb p\u00ebrcaktuar.<\/p>\n<p><img decoding=\"async\" alt=\"Siguria informative e pagesave bankare pa cash. Pjesa 8 - Modelet tipike t\u00eb k\u00ebrc\u00ebnimeve\" src=\"\/wp-content\/uploads\/2019\/04\/b1bd9c224b18dc84cca5f8bdc7d69713.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKorespondenca e objekteve t\u00eb skem\u00ebs s\u00eb shqyrtuar me element\u00ebt e modelit t\u00eb integrimit:<br \/>\n<i>\u00abServeri i shk\u00ebmbimit nga ana e ABS\u00bb<\/i> \u2013 serveri ABS.<br \/>\n<i>\u00abServeri i shk\u00ebmbimit nga ana e ARM KBR\u00bb<\/i> \u2014 kompjuter i ARM KBR.<br \/>\n<i>\u00abMediatori\u00bb<\/i> \u2013 Serveri EP dhe IBM WebSphere MQ.<br \/>\n<i>\u00abSO i p\u00ebrpunimit t\u00eb t\u00eb dh\u00ebnave\u00bb<\/i> \u2013 skenari konvertues, SKZI SKAD Firma n\u00eb Serverin EP.<\/p>\n<p><i>Shema 4. Integrimi i Serverit DBO dhe ABS p\u00ebrmes API-s\u00eb, e cila ofrohet nga serveri i ve\u00e7ant\u00eb i shk\u00ebmbimit<\/i><\/p>\n<p>Do t\u00eb supozojm\u00eb se n\u00eb bank\u00eb p\u00ebrdoren disa sisteme t\u00eb sh\u00ebrbimeve bankare n\u00eb distanc\u00eb (DBO): <\/p>\n<ul>\n<li>\u00abInternet Klienti-Banku\u00bb p\u00ebr individ\u00eb (IKB FIZ);<\/li>\n<li>\u00abInternet Klienti-Banku\u00bb p\u00ebr persona juridik\u00eb (IKB JUR). <\/li>\n<\/ul>\n<p>\nMe q\u00ebllim t\u00eb sigurimit t\u00eb siguris\u00eb informacionit, t\u00eb gjitha nd\u00ebrveprimet e ABS me sistemet DBO realizohen p\u00ebrmes nj\u00eb serveri t\u00eb ve\u00e7ant\u00eb t\u00eb shk\u00ebmbimit, q\u00eb funksionon brenda sistemit informatike \u00abABS\u00bb.<\/p>\n<p>M\u00eb pas do t\u00eb shqyrtojm\u00eb procesin e nd\u00ebrveprimit t\u00eb sistemit DBO IKB JUR me ABS.<br \/>\nServeri DBO, pasi ka marr\u00eb nga klienti nj\u00eb urdh\u00ebr pages\u00eb t\u00eb vulosur si\u00e7 duhet, duhet t\u00eb krijoj\u00eb dokumentin p\u00ebrkat\u00ebs n\u00eb ABS. P\u00ebr k\u00ebt\u00eb, ai transmeton informacionin n\u00eb serverin e shk\u00ebmbimit p\u00ebrmes API-s\u00eb, dhe ai, nga ana e tij, e regjistron t\u00eb dh\u00ebnat n\u00eb ABS. <\/p>\n<p>Kur ndryshojn\u00eb saldat n\u00eb llogarin\u00eb e klientit, ABS shqipon njoftime elektronike, t\u00eb cilat p\u00ebrmes serverit t\u00eb shk\u00ebmbimit d\u00ebrgohen n\u00eb serverin DBO.<\/p>\n<p><img decoding=\"async\" alt=\"Siguria informative e pagesave bankare pa cash. Pjesa 8 - Modelet tipike t\u00eb k\u00ebrc\u00ebnimeve\" src=\"\/wp-content\/uploads\/2019\/04\/63f88ad151996e7ddaa883349a6d8e22.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKorespondenca e objekteve t\u00eb skem\u00ebs s\u00eb shqyrtuar me element\u00ebt e modelit t\u00eb integrimit:<br \/>\n<i>\u00abServeri i shk\u00ebmbimit nga ana e DBO\u00bb<\/i> \u2013 serveri DBO IKB JUR.<br \/>\n<i>\u00abServeri i shk\u00ebmbimit nga ana e ABS\u00bb<\/i> \u2013 serveri i shk\u00ebmbimit.<br \/>\n<i>\u00abMediatori\u00bb<\/i> \u2013 mungon.<br \/>\n<i>\u00abSO i p\u00ebrpunimit t\u00eb t\u00eb dh\u00ebnave\u00bb<\/i> \u2013 komponent\u00ebt e Serverit DBO, p\u00ebrgjegj\u00ebs p\u00ebr p\u00ebrdorimin e API-s\u00eb s\u00eb serverit t\u00eb shk\u00ebmbimit, komponent\u00ebt e serverit t\u00eb shk\u00ebmbimit, p\u00ebrgjegj\u00ebs p\u00ebr p\u00ebrdorimin e API-s\u00eb s\u00eb ABS.<\/p>\n<h3>K\u00ebrc\u00ebnimet e siguris\u00eb s\u00eb nivelit t\u00eb lart\u00eb<\/h3>\n<p>\n<b>Dekompuzimi<\/b><br \/>\nU1. Kthimi i informacionit t\u00eb rrem\u00eb nga ana e sulmuesve p\u00ebrmes modulit t\u00eb integrimit. <br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUMIU1\"><\/a><\/noindex><\/p>\n<h3>U1. Kthimi i informacionit t\u00eb rrem\u00eb nga ana e sulmuesve p\u00ebrmes modulit t\u00eb integrimit <\/h3>\n<p><b>Dekompuzimi<\/b><br \/>\nU1.1. Modifikimi i paautorizuar i t\u00eb dh\u00ebnave legjitime gjat\u00eb transmetimit p\u00ebrmes lidhjeve rrjet\u00ebrore:<br \/>\nU1.1.1 Link: <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUNCU2\">\u00abModeli tipik i k\u00ebrc\u00ebnimeve. Lidha rrjet\u00eb. U2. Modifikimi i paautorizuar i t\u00eb dh\u00ebnave t\u00eb transmetuara\u00bb<\/a><\/noindex>.<\/p>\n<p>U1.2. Transmetimi i t\u00eb dh\u00ebnave t\u00eb rreme nga kanalet e komunikimit n\u00eb em\u00ebr t\u00eb nj\u00eb pjes\u00ebmarr\u00ebsi legjitim n\u00eb shk\u00ebmbim:<br \/>\nU1.1.2 Link: <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUNCU3\">\u00abModeli tipik i k\u00ebrc\u00ebnimeve. Lidha rrjeti. U3. Shkelja e autor\u00ebsis\u00eb s\u00eb t\u00eb dh\u00ebnave t\u00eb transmetuara\u00bb<\/a><\/noindex>.<\/p>\n<p>U1.3. Modifikimi i paautorizuar i t\u00eb dh\u00ebnave legjitime gjat\u00eb p\u00ebrpunimit n\u00eb Server\u00ebt e shk\u00ebmbimit ose Nd\u00ebrmjet\u00ebsin:<br \/>\nU1.3.1. Linku: <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUISU2\">\u00abModeli tipik i k\u00ebrc\u00ebnimeve. Sistemi informativ, i nd\u00ebrtuar mbi baz\u00ebn e arkitektur\u00ebs klient-server. U2. Modifikimi i paautorizuar i informacionit t\u00eb mbrojtur gjat\u00eb p\u00ebrpunimit nga ana e serverit t\u00eb sistemit informativ\u00bb<\/a><\/noindex>.<\/p>\n<p>U1.4. Krijimi n\u00eb Server\u00ebt e shk\u00ebmbimit ose Nd\u00ebrmjet\u00ebsin t\u00eb dh\u00ebnave t\u00eb rreme n\u00eb em\u00ebr t\u00eb nj\u00eb  pjes\u00ebmarr\u00ebsi legjitim t\u00eb shk\u00ebmbimit:<br \/>\nU1.4.1. Linku: <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUISU1\">\u00abModeli tipik i k\u00ebrc\u00ebnimeve. Sistemi informativ, i nd\u00ebrtuar mbi baz\u00ebn e arkitektur\u00ebs klient-server. U1. Kryerja e veprimeve t\u00eb paautorizuara nga ana e sulmuesve n\u00eb em\u00ebr t\u00eb nj\u00eb p\u00ebrdoruesi legjitim\u00bb.<\/a><\/noindex><\/p>\n<p>U1.5. Modifikimi i paautorizuar i t\u00eb dh\u00ebnave gjat\u00eb p\u00ebrpunimit me an\u00eb t\u00eb softuerit p\u00ebr p\u00ebrpunimin e t\u00eb dh\u00ebnave:<br \/>\n\u04231.5.1. &lt;&#8230;&gt; \u0437\u0430 \u0441\u0447\u0435\u0442 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 (\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e) \u041f\u041e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.<br \/>\n\u04231.5.2. &lt;&#8230;&gt; \u0437\u0430 \u0441\u0447\u0435\u0442 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u041f\u041e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.<br \/>\n\u04231.5.3. &lt;&#8230;&gt; \u0437\u0430 \u0441\u0447\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0440\u0430\u0431\u043e\u0442\u043e\u0439 \u041f\u041e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.<\/p>\n<p>\n<noindex><a rel=\"nofollow\" name=\"TMUSKZI\"><\/a><\/noindex><\/p>\n<h2>MODEL TIPIK I K\u00cbRC\u00cbNIMET. SISTEMI I MBRONJES KRIPTOGRAFike T\u00cb INFORMACIONIT<\/h2>\n<p><\/p>\n<h3>Objekti i mbrojtjes, p\u00ebr t\u00eb cilin aplikohet modeli i k\u00ebrc\u00ebnimeve (scope)<\/h3>\n<p>\nObjekti i mbrojtjes \u00ebsht\u00eb sistemi i mbrojtjes kriptografike t\u00eb informacionit, i p\u00ebrdorur p\u00ebr t\u00eb siguruar sigurin\u00eb e sistemit informativ.<\/p>\n<p><b>Arkitektura<\/b><br \/>\nBaza e \u00e7do sistemi informativ \u00ebsht\u00eb softueri aplikativ (PA) q\u00eb realizon funksionalitetin e tij t\u00eb synuar. <\/p>\n<p>Mbrojtja kriptografike realizohet zakonisht p\u00ebrmes thirrjeve nga logjika biznesore e PA-s\u00eb p\u00ebr funksionet kriptografike, t\u00eb cilat ndodhen n\u00eb biblioteka t\u00eb specializuara \u2013 b\u00ebrthama kriptografike.<\/p>\n<p>Funksionet kriptografike p\u00ebrfshijn\u00eb funksione kriptografike t\u00eb nivelit t\u00eb ul\u00ebt, si:<\/p>\n<ul>\n<li>t\u00eb enkriptoj\u00eb \/ dekrypotoj\u00eb nj\u00eb bllok t\u00eb dh\u00ebnash;<\/li>\n<li>t\u00eb krijoj\u00eb \/ verifikoj\u00eb nj\u00eb n\u00ebnshkrim elektronik t\u00eb nj\u00eb blloku t\u00eb dh\u00ebnash;<\/li>\n<li>t\u00eb llogaris\u00eb nj\u00eb funksion hash p\u00ebr nj\u00eb bllok t\u00eb dh\u00ebnash;<\/li>\n<li>t\u00eb formoj\u00eb \/ ngarkoj\u00eb \/ shkarkoj\u00eb informacionin mbi \u00e7el\u00ebsat;<\/li>\n<li>etj.<\/li>\n<\/ul>\n<p>\nLogjika biznesore e PA-s\u00eb realizon funksionalitete t\u00eb nivelit m\u00eb t\u00eb lart\u00eb p\u00ebrmes funksioneve kriptografike:<\/p>\n<ul>\n<li>t\u00eb enkriptoj\u00eb nj\u00eb skedar me \u00e7el\u00ebsat e marr\u00ebsve t\u00eb zgjedhur;<\/li>\n<li>instaloni nj\u00eb lidhje t\u00eb sigurt rrjetore;<\/li>\n<li>informoni p\u00ebr rezultatet e verifikimit t\u00eb n\u00ebnshkrimit elektronik;<\/li>\n<li>etj.<\/li>\n<\/ul>\n<p>\nNd\u00ebrveprimi i logjik\u00ebs biznesore dhe b\u00ebrtham\u00ebs kriptografike mund t\u00eb realizohet:<\/p>\n<ul>\n<li>direkt, duke thirrur nga logjika biznesore primitiv\u00ebt kriptografik\u00eb nga bibliotekat dinamike t\u00eb b\u00ebrtham\u00ebs kriptografike (.DLL \u2013 p\u00ebr Windows, .SO \u2013 p\u00ebr Linux);<\/li>\n<li>indirekt, p\u00ebrmes nd\u00ebrfaqeve kriptografike \u2013 mb\u00ebshtjell\u00ebsve (wrappers), p\u00ebr shembull, MS Crypto API, Java Cryptography Architecture, PKCS#11 dhe t\u00eb tjer\u00eb. N\u00eb k\u00ebt\u00eb rast, logjika e biznesit i drejtohet nd\u00ebrfaqes kriptografike, e cila translacionon thirrjen n\u00eb b\u00ebrtham\u00ebn p\u00ebrkat\u00ebse kriptografike, e cila n\u00eb nj\u00eb rast t\u00eb till\u00eb quhet furnizuesi kriptografik. P\u00ebrdorimi i nd\u00ebrfaqeve kriptografike lejon q\u00eb aplikacioni t\u00eb abstenohet nga algoritmet specifike kriptografike dhe t\u00eb jet\u00eb m\u00eb fleksib\u00ebl.<\/li>\n<\/ul>\n<p>\nDua t\u00eb dalloj dy skema tipike t\u00eb organizimit t\u00eb b\u00ebrtham\u00ebs kriptografike:<\/p>\n<p><i>Skema 1 \u2013 B\u00ebrthama kriptografike monolite<\/i><br \/>\n<img decoding=\"async\" alt=\"Siguria informative e pagesave bankare pa cash. Pjesa 8 - Modelet tipike t\u00eb k\u00ebrc\u00ebnimeve\" src=\"\/wp-content\/uploads\/2019\/04\/e5186d11e4e0e9ad9361f3935228bc30.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<i>Skema 2 \u2013 B\u00ebrthama kriptografike t\u00eb ndara<\/i><br \/>\n<img decoding=\"async\" alt=\"Siguria informative e pagesave bankare pa cash. Pjesa 8 - Modelet tipike t\u00eb k\u00ebrc\u00ebnimeve\" src=\"\/wp-content\/uploads\/2019\/04\/9953d524fbee78d7e4eb917e9d56a38f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nElement\u00ebt n\u00eb skemat e paraqitura mund t\u00eb jen\u00eb si module t\u00eb ve\u00e7anta t\u00eb software-it q\u00eb funksionojn\u00eb n\u00eb nj\u00eb kompjuter, ashtu si edhe sh\u00ebrbime rrjetore q\u00eb nd\u00ebrveprojn\u00eb brenda nj\u00eb rrjeti kompjuterik.<\/p>\n<p>Kur p\u00ebrdoren sisteme t\u00eb nd\u00ebrtuara sipas skem\u00ebs 1, aplikacioni dhe b\u00ebrthama kriptografike funksionojn\u00eb n\u00eb kuad\u00ebr t\u00eb t\u00eb nj\u00ebjtit mjedis funksionimi t\u00eb mjetit kriptografik (MFK), p\u00ebr shembull, n\u00eb t\u00eb nj\u00ebjtin kompjuter, n\u00ebn menaxhimin e t\u00eb nj\u00ebjtit sistem operativ. P\u00ebrdoruesi i sistemit, zakonisht, mund t\u00eb niste edhe programe t\u00eb tjera brenda t\u00eb nj\u00ebjtit mjedis funksionimi, duke p\u00ebrfshir\u00eb ato q\u00eb p\u00ebrmbajn\u00eb kod t\u00eb d\u00ebmsh\u00ebm. N\u00eb kushte t\u00eb tilla ekziston nj\u00eb rrezik serioz i rrjedhjes s\u00eb \u00e7el\u00ebsave t\u00eb mbyllur kriptografik\u00eb.<\/p>\n<p>P\u00ebr t\u00eb minimizuar rrezikun, aplikohet skema 2, n\u00eb t\u00eb cil\u00ebn b\u00ebrthama kriptografike ndahet n\u00eb dy pjes\u00eb:<\/p>\n<ol>\n<li>Pjesa e par\u00eb bashk\u00eb me aplikacionin punon n\u00eb nj\u00eb mjedis t\u00eb pamb\u00ebshtetur, ku ekziston rreziku i infektimit me kod t\u00eb d\u00ebmsh\u00ebm. Kjo pjes\u00eb do ta quajm\u00eb \u2013 \"pjesa programore\".<\/li>\n<li>Pjesa e dyt\u00eb punon n\u00eb nj\u00eb mjedis t\u00eb besuesh\u00ebm n\u00eb nj\u00eb pajisje t\u00eb dedikuar, e cila p\u00ebrmban nj\u00eb ruajt\u00ebs t\u00eb \u00e7el\u00ebsave t\u00eb mbyllur. K\u00ebt\u00eb pjes\u00eb do ta quajm\u00eb \u2013 \"pjesa harduerike\".<\/li>\n<\/ol>\n<p>\nNdara e ndarjes s\u00eb kripto-thembrit n\u00eb pjes\u00eb t\u00eb softuerit dhe harduerit \u00ebsht\u00eb mjaft e kusht\u00ebzuar. N\u00eb treg ka sisteme t\u00eb nd\u00ebrtuara sipas skem\u00ebs me ndarjen e kripto-thembrit, por pjesa \"harduer\" p\u00ebrfaq\u00ebsohet n\u00eb form\u00ebn e nj\u00eb imazhi t\u00eb makin\u00ebs virtuale \u2014 virtual HSM (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.unboundtech.com\/product\/unbound-key-control\/\">\u00ebsht\u00eb<\/a><\/noindex>).<\/p>\n<p>Nd\u00ebrveprimi i t\u00eb dy pjes\u00ebve t\u00eb kripto-thembrit ndodh n\u00eb nj\u00eb m\u00ebnyr\u00eb, q\u00eb \u00e7el\u00ebsat e mbyllur nuk transmetohen kurr\u00eb n\u00eb pjes\u00ebn e softuerit dhe, si rrjedhim, nuk mund t\u00eb vihen n\u00eb rrezik nga kodi keqdash\u00ebs.<\/p>\n<p>Nd\u00ebrfaqja e nd\u00ebrveprimit (API) dhe grupi i primitave kriptografik\u00eb, t\u00eb ofruar p\u00ebr softuerin aplikativ nga kripto-thembri, jan\u00eb t\u00eb nj\u00ebjt\u00eb n\u00eb t\u00eb dy rastet. Dallimi q\u00ebndron n\u00eb m\u00ebnyr\u00ebn e realizimit t\u00eb tyre.<\/p>\n<p>K\u00ebshtu, kur p\u00ebrdoret skema me ndarjen e kripto-thembrit, nd\u00ebrveprimi midis pjes\u00ebs s\u00eb softuerit dhe asaj harduerike kryhet sipas k\u00ebtij parimi:<\/p>\n<ol>\n<li>Primitat kriptografike, q\u00eb nuk k\u00ebrkojn\u00eb p\u00ebrdorimin e \u00e7el\u00ebsit t\u00eb mbyllur (p.sh., llogaritja e funksionit hash, verifikimi i n\u00ebnshkrimit elektronik etj.), kryhen nga pjesa e softuerit.<\/li>\n<li>Primitat kriptografike, q\u00eb p\u00ebrdorin \u00e7el\u00ebsin e mbyllur (krijimi i n\u00ebnshkrimit elektronik, dekriptimi i t\u00eb dh\u00ebnave etj.), kryhen nga pjesa e harduerit.<\/li>\n<\/ol>\n<p>\nIlustrojm\u00eb pun\u00ebn e kripto-thembrit t\u00eb ndar\u00eb me shembullin e krijimit t\u00eb n\u00ebnshkrimit elektronik:<\/p>\n<ol>\n<li>Pjesa e softuerit llogarit funksionin hash t\u00eb t\u00eb dh\u00ebnave q\u00eb n\u00ebnshkruhen dhe e d\u00ebrgon k\u00ebt\u00eb vler\u00eb n\u00eb pjes\u00ebn e harduerit p\u00ebrmes kanaleve t\u00eb shk\u00ebmbimit midis kripto-thembrit.<\/li>\n<li>Pjesa e harduerit, duke p\u00ebrdorur \u00e7el\u00ebsin e mbyllur dhe hash-in, formon vler\u00ebn e n\u00ebnshkrimit elektronik dhe e d\u00ebrgon at\u00eb n\u00eb pjes\u00ebn e softuerit p\u00ebrmes kanaleve t\u00eb shk\u00ebmbimit.<\/li>\n<li>Pjesa e softuerit kthen vler\u00ebn e marr\u00eb n\u00eb softuerin aplikativ.<\/li>\n<\/ol>\n<p>\n<b>Ve\u00e7orit\u00eb e kontrollit t\u00eb sakt\u00ebsis\u00eb s\u00eb n\u00ebnshkrimit elektronik<\/b><\/p>\n<p>Kur pala marr\u00ebse merr t\u00eb dh\u00ebna, t\u00eb n\u00ebnshkruara me n\u00ebnshkrim elektronik, ajo duhet t\u00eb kaloj\u00eb disa etapa t\u00eb verifikimit. Nj\u00eb rezultat pozitiv i verifikimit t\u00eb n\u00ebnshkrimit elektronik arrihet vet\u00ebm pas kalimit me sukses t\u00eb t\u00eb gjitha etapave t\u00eb verifikimit.<\/p>\n<p><i>Etapa 1. Kontrolli i integritetit t\u00eb t\u00eb dh\u00ebnave dhe autor\u00ebsis\u00eb s\u00eb t\u00eb dh\u00ebnave.<\/i><\/p>\n<p><u>P\u00ebrmbajtja e etap\u00ebs.<\/u> Poquni kontrollin e n\u00ebnshkrimit elektronik t\u00eb t\u00eb dh\u00ebnave n\u00eb p\u00ebrputhje me algoritmin p\u00ebrkat\u00ebs kriptografik. Kalimi me sukses i k\u00ebtij faze tregon se t\u00eb dh\u00ebnat nuk jan\u00eb modifikuar q\u00eb nga n\u00ebnshkrimi i tyre, si dhe q\u00eb n\u00ebnshkrimi \u00ebsht\u00eb realizuar me \u00e7el\u00ebsin e mbyllur q\u00eb p\u00ebrputhet me \u00e7el\u00ebsin e hapur p\u00ebr kontrollin e n\u00ebnshkrimit elektronik.<br \/>\n<u>Vendi i realizimit t\u00eb faz\u00ebs:<\/u> kriptoedhe.<\/p>\n<p><i>Faza 2. Kontrolli i besueshm\u00ebris\u00eb ndaj \u00e7el\u00ebsit t\u00eb hapur t\u00eb n\u00ebnshkruesit dhe kontrolli i afatit t\u00eb \u00e7el\u00ebsit t\u00eb mbyllur t\u00eb n\u00ebnshkrimit elektronik.<\/i><br \/>\n<u>P\u00ebrmbajtja e etap\u00ebs.<\/u> Faza p\u00ebrb\u00ebhet nga dy n\u00ebnfazat nd\u00ebrmjet\u00ebse. N\u00eb t\u00eb par\u00ebn, p\u00ebrcaktohet n\u00ebse \u00e7el\u00ebsi i hapur p\u00ebr kontrollin e n\u00ebnshkrimit elektronik ishte i besuesh\u00ebm n\u00eb momentin e n\u00ebnshkrimit t\u00eb t\u00eb dh\u00ebnave. N\u00eb t\u00eb dyt\u00ebn, p\u00ebrcaktohet n\u00ebse \u00e7el\u00ebsi i mbyllur i n\u00ebnshkrimit elektronik ishte n\u00eb fuqi n\u00eb momentin e n\u00ebnshkrimit t\u00eb t\u00eb dh\u00ebnave. N\u00eb p\u00ebrgjith\u00ebsi, afatet e k\u00ebtyre \u00e7el\u00ebsave mund t\u00eb mos p\u00ebrputhen (p.sh., p\u00ebr certifikatat e kualifikuara t\u00eb \u00e7el\u00ebsave p\u00ebr kontrollin e n\u00ebnshkrimit elektronik). M\u00ebnyrat e p\u00ebrcaktimit t\u00eb besueshm\u00ebris\u00eb s\u00eb \u00e7el\u00ebsit t\u00eb hapur t\u00eb n\u00ebnshkruesit p\u00ebrcaktohen nga rregullat e dokumenteve elektronike t\u00eb miratuara nga pal\u00ebt q\u00eb bashk\u00ebpunojn\u00eb.<br \/>\n<u>Vendi i realizimit t\u00eb faz\u00ebs:<\/u> software aplikativ \/ kriptoedhe.<\/p>\n<p><i>Faza 3. Kontrolli i autorizimeve t\u00eb n\u00ebnshkruesit.<\/i><br \/>\n<u>P\u00ebrmbajtja e etap\u00ebs.<\/u> N\u00eb p\u00ebrputhje me rregullat e caktuara t\u00eb dokumenteve elektronike, kontrollohet n\u00ebse n\u00ebnshkruesi kishte t\u00eb drejt\u00ebn p\u00ebr t\u00eb v\u00ebrtetuar t\u00eb dh\u00ebnat e mbrojtura. P\u00ebr shembull, diskutojm\u00eb nj\u00eb situat\u00eb shkeljeje t\u00eb autorizimeve. Supozoni se ka nj\u00eb organizat\u00eb ku t\u00eb gjith\u00eb punonj\u00ebsit kan\u00eb n\u00ebnshkrimin elektronik. Nj\u00eb urdh\u00ebr i drejtorit hyn n\u00eb sistemin e brendsh\u00ebm t\u00eb dokumenteve elektronike, por n\u00ebnshkruhet me n\u00ebnshkrimin elektronik t\u00eb menaxherit t\u00eb magazin\u00ebs. Prandaj, nj\u00eb dokument i till\u00eb nuk mund t\u00eb konsiderohet legjitim.<br \/>\n<u>Vendi i realizimit t\u00eb faz\u00ebs:<\/u> software aplikativ.<\/p>\n<p><b>Supozimet e pranuara n\u00eb p\u00ebrshkrimin e objektit t\u00eb mbrojtjes<\/b><\/p>\n<ol>\n<li>Kanalet e transmetimit t\u00eb informacionit, p\u00ebrve\u00e7 kanaleve t\u00eb shk\u00ebmbimit t\u00eb \u00e7el\u00ebsave, p\u00ebrfshijn\u00eb gjithashtu software-in aplikativ, API-n\u00eb dhe kriptoedhen.<\/li>\n<li>T\u00eb dh\u00ebnat mbi besueshm\u00ebrin\u00eb ndaj \u00e7el\u00ebsave t\u00eb hapur dhe (ose) certifikatave, si dhe informacioni mbi autorizimet e pronar\u00ebve t\u00eb \u00e7el\u00ebsave t\u00eb hapur, vendosen n\u00eb magazin\u00ebn e \u00e7el\u00ebsave t\u00eb hapur.<\/li>\n<li>Software-i aplikativ punon me magazin\u00ebn e \u00e7el\u00ebsave t\u00eb hapur p\u00ebrmes kriptoedhes.<\/li>\n<\/ol>\n<p><\/p>\n<h3>Shembulli i nj\u00eb sistemi informativ t\u00eb mbrojtur me ndihm\u00ebn e SKZI<\/h3>\n<p>\nP\u00ebr ilustrimin e skemave t\u00eb paraqitura m\u00eb par\u00eb, le t\u00eb shqyrtojm\u00eb nj\u00eb sistem informacioni hipotez\u00eb dhe t\u00eb dallojm\u00eb t\u00eb gjith\u00eb element\u00ebt strukturor\u00eb t\u00eb tij. <\/p>\n<p><b>P\u00ebrshkrimi i sistemit t\u00eb informacionit<\/b><\/p>\n<p><img decoding=\"async\" alt=\"Siguria informative e pagesave bankare pa cash. Pjesa 8 - Modelet tipike t\u00eb k\u00ebrc\u00ebnimeve\" src=\"\/wp-content\/uploads\/2019\/04\/74f3e2fd669ed97f50253fbb4b348f6f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDy organizata vendos\u00ebn t\u00eb implementojn\u00eb mes tyre nj\u00eb shk\u00ebmbim t\u00eb r\u00ebnd\u00ebsish\u00ebm t\u00eb dokumenteve elektronike (EDO). P\u00ebr k\u00ebt\u00eb ata n\u00ebnshkruan nj\u00eb marr\u00ebveshje, n\u00eb t\u00eb cil\u00ebn shkruhej se dokumentet do t\u00eb d\u00ebrgoheshin me email dhe se ato duhej t\u00eb ishin t\u00eb enkriptuara dhe t\u00eb n\u00ebnshkruara me nj\u00eb n\u00ebnshkrim elektronik t\u00eb kualifikuar. Si mjete p\u00ebr krijimin dhe p\u00ebrpunimin e dokumenteve duhen p\u00ebrdorur programet zyrtare nga paketa Microsoft Office 2016, nd\u00ebrsa p\u00ebr mjetet e mbrojtjes kriptografike \u2014 SCZI KryptoPRO dhe softuerin e enkriptimit KryptoARM.<\/p>\n<p><b>P\u00ebrshkrimi i infrastruktur\u00ebs s\u00eb organizat\u00ebs 1<\/b><\/p>\n<p>Organizata 1 vendosi t\u00eb vendos\u00eb SCZI KryptoPRO dhe softuerin KryptoARM n\u00eb ARM t\u00eb p\u00ebrdoruesit \u2014 kompjuter fizik. \u00c7el\u00ebsat e enkriptimit dhe n\u00ebnshkimit elektronik do t\u00eb ruajn\u00eb n\u00eb nj\u00eb pajisje \u00e7el\u00ebsi ruToken, e cila funksionon n\u00eb modin e \u00e7el\u00ebsit t\u00eb nxjerrsh\u00ebm. P\u00ebrdoruesi do t\u00eb p\u00ebrgatis\u00eb dokumentet elektronike lokal, pas s\u00eb cil\u00ebs do t'i enkriptoj\u00eb, n\u00ebnshkruaj\u00eb dhe d\u00ebrgoj\u00eb p\u00ebrmes nj\u00eb klienti lokal t\u00eb emailit.<\/p>\n<p><b>P\u00ebrshkrimi i infrastruktur\u00ebs s\u00eb organizat\u00ebs 2<\/b><\/p>\n<p>Organizata 2 vendosi t\u00eb transferoj\u00eb funksionet e enkriptimit dhe n\u00ebnshkimit elektronik n\u00eb nj\u00eb makin\u00eb virtuale t\u00eb dedikuar. N\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb, t\u00eb gjitha operacionet kriptografike do t\u00eb kryhen n\u00eb m\u00ebnyr\u00eb automatike. <\/p>\n<p>\u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043d\u0430 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u043e \u0434\u0432\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043f\u043a\u0438: &#171;&#8230;In&#187;, &#171;&#8230;Out&#187;. \u0412 \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u043f\u0430\u043f\u043a\u0443 &#171;&#8230;In&#187; \u0431\u0443\u0434\u0443\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u043c\u0435\u0449\u0430\u0442\u044c\u0441\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u043e\u0442 \u043a\u043e\u043d\u0442\u0440\u0430\u0433\u0435\u043d\u0442\u0430 \u0444\u0430\u0439\u043b\u044b \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \u042d\u0442\u0438 \u0444\u0430\u0439\u043b\u044b \u0431\u0443\u0434\u0443\u0442 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u044b, \u0438 \u043d\u0430 \u043d\u0438\u0445 \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u0430\u044f \u043f\u043e\u0434\u043f\u0438\u0441\u044c.<\/p>\n<p>\u0412 \u043f\u0430\u043f\u043a\u0443 &#171;&#8230;Out&#187; \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043c\u0435\u0449\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c, \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u0442\u044c \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u0430\u0433\u0435\u043d\u0442\u0443. \u0421\u0430\u043c\u0438 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0443\u0434\u0435\u0442 \u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u043d\u0430 \u0441\u0432\u043e\u0435\u043c \u0410\u0420\u041c\u0435.<br \/>\nP\u00ebr t\u00eb kryer funksionet e enkriptimit dhe n\u00ebnshkimit elektronik, n\u00eb makin\u00ebn virtuale jan\u00eb instaluar SCZI KryptoPRO, softueri KryptoARM dhe nj\u00eb klient p\u00ebr email. Menaxhimi automatik i t\u00eb gjith\u00eb element\u00ebve t\u00eb makin\u00ebs virtuale do t\u00eb realizohet p\u00ebrmes skripteve t\u00eb zhvilluara nga administrator\u00ebt e sistemit. Puna e skripteve do t\u00eb dokumentohet n\u00eb dosjet e regjistrit (logs).<\/p>\n<p>\u00c7el\u00ebsat kriptografik\u00eb t\u00eb n\u00ebnshkrimit elektronik do t\u00eb vendosen n\u00eb nj\u00eb token me \u00e7el\u00ebs t\u00eb pa\u00e7vendosur JaCarta \u0413\u041e\u0421\u0422, i cili do t\u00eb lidhet me kompjuterin lokal t\u00eb p\u00ebrdoruesit.<\/p>\n<p>Tokeni do t\u00eb kaloj\u00eb n\u00eb makin\u00eb virtuale p\u00ebrmes mjeteve t\u00eb specializuara software USB-over-IP, t\u00eb instaluara n\u00eb ARM-n\u00eb e p\u00ebrdoruesit dhe n\u00eb makin\u00ebn virtuale.<\/p>\n<p>Or\u00ebt sistematike n\u00eb ARM-n\u00eb e p\u00ebrdoruesit n\u00eb organizat\u00ebn 1 do t\u00eb rregullohen manualisht. Or\u00ebt sistematike t\u00eb makin\u00ebs virtuale n\u00eb organizat\u00ebn 2 do t\u00eb sinkronizohen me or\u00ebt sistematike t\u00eb hiperkriptorit, t\u00eb cilat, nga ana e tyre, do t\u00eb sinkronizohen p\u00ebrmes Internetit me serverat publik t\u00eb or\u00ebs.<\/p>\n<p><b>Dallimi i elementeve strukturore t\u00eb SKZI<\/b><br \/>\nBazuar n\u00eb p\u00ebrshkrimin e m\u00ebsip\u00ebrm t\u00eb infrastruktur\u00ebs IT, do t\u00eb dalim n\u00eb elementet strukturore t\u00eb SKZI dhe do t\u2019i regjistrojm\u00eb ato n\u00eb nj\u00eb tabel\u00eb.<\/p>\n<p><i>Tabel\u00eb \u2014 P\u00ebrputhshm\u00ebria e elementeve t\u00eb modelit SKZI me element\u00ebt e sistemeve informative<\/i> <\/p>\n<p><b>Emri i elementit<\/b><br \/>\n<b>Organizata 1<\/b><br \/>\n<b>Organizata 2<\/b><\/p>\n<p>Software aplikativ<br \/>\nSoftware KryptoARM<br \/>\nSoftware KryptoARM<\/p>\n<p>Pjesa programore e kriptoeskal\u00ebs<br \/>\nSKZI KryptoPRO CSP<br \/>\nSKZI KryptoPRO CSP<\/p>\n<p>Pjesa harduerike e kriptoeskal\u00ebs<br \/>\nnuk ka<br \/>\nJaCarta \u0413\u041e\u0421\u0422<\/p>\n<p>API<br \/>\nMS CryptoAPI<br \/>\nMS CryptoAPI<\/p>\n<p>Depoja e \u00e7el\u00ebsave publik\u00eb<br \/>\nARM e p\u00ebrdoruesit:<br \/>\n \u2014 disku i ngurt\u00eb;<br \/>\n \u2014 depo standarde e certifikatave Windows.<br \/>\nHiperkripti:<br \/>\n \u2014 disku i ngurt\u00eb.<\/p>\n<p>Makin\u00eb virtuale:<br \/>\n \u2014 disku i ngurt\u00eb;<br \/>\n \u2014 depo standarde e certifikatave Windows.<\/p>\n<p>Depoja e \u00e7el\u00ebsave t\u00eb mbyllur<br \/>\nMjeti i \u00e7el\u00ebsit ruToken, duke punuar n\u00eb modin e \u00e7el\u00ebsit t\u00eb nxjerrsh\u00ebm<br \/>\nMjeti i \u00e7el\u00ebsit JaCarta \u0413\u041e\u0421\u0422, duke punuar n\u00eb modin e \u00e7el\u00ebsit t\u00eb pa\u00e7vendosur<\/p>\n<p>Kanal i shk\u00ebmbimit t\u00eb \u00e7el\u00ebsave publik\u00eb<br \/>\nARM e p\u00ebrdoruesit:<br \/>\n \u2014 memoria e pun\u00ebs.<\/p>\n<p>Hiperkripti:<br \/>\n \u2014 memoria e pun\u00ebs.<\/p>\n<p>Makin\u00eb virtuale:<br \/>\n \u2014 memoria e pun\u00ebs.<\/p>\n<p>Kanal i shk\u00ebmbimit t\u00eb \u00e7el\u00ebsave t\u00eb mbyllura<br \/>\nARM e p\u00ebrdoruesit:<br \/>\n \u2014 autobusi USB;<br \/>\n \u2014 memoria e pun\u00ebs.<br \/>\nnuk ka<\/p>\n<p>Kanal i shk\u00ebmbimit midis kriptoeskalave<br \/>\nnuk ka (nuk ka pjes\u00eb harduerike t\u00eb kriptoeskal\u00ebs)<br \/>\nARM e p\u00ebrdoruesit:<br \/>\n \u2014 autobusi USB;<br \/>\n \u2014 memoria e pun\u00ebs;<br \/>\n \u2014 moduli programor USB-over-IP;<br \/>\n \u2014 interfeksi rrjetor.<\/p>\n<p>Rrjeti korporativ i organizat\u00ebs 2.<\/p>\n<p>Hiperkripti:<br \/>\n \u2014 memoria e pun\u00ebs;<br \/>\n \u2014 interfeksi rrjetor.<\/p>\n<p>Makin\u00eb virtuale:<br \/>\n \u2014 interfeksi rrjetor;<br \/>\n \u2014 memoria e pun\u00ebs;<br \/>\n \u2014 moduli programor USB-over-IP.<\/p>\n<p>Kanal i shk\u00ebmbimit t\u00eb t\u00eb dh\u00ebnave t\u00eb hapura<br \/>\nARM e p\u00ebrdoruesit:<br \/>\n \u2014 mjetet e hyrjes-daljes;<br \/>\n \u2014 memoria e pun\u00ebs;<br \/>\n \u2014 disku i ngurt\u00eb.<br \/>\nARM e p\u00ebrdoruesit:<br \/>\n \u2014 mjetet e hyrjes-daljes;<br \/>\n \u2014 memoria e pun\u00ebs;<br \/>\n \u2014 disku i ngurt\u00eb;<br \/>\n \u2014 interfeksi rrjetor.<\/p>\n<p>Rrjeti korporativ i organizat\u00ebs 2.<\/p>\n<p>Hiperkripti:<br \/>\n \u2014 interfeksi rrjetor; <br \/>\n \u2014 memoria e pun\u00ebs;<br \/>\n \u2014 disku i ngurt\u00eb.<\/p>\n<p>Makin\u00eb virtuale: <br \/>\n \u2014 interfeksi rrjetor; <br \/>\n \u2014 memoria e pun\u00ebs;<br \/>\n \u2014 disku i ngurt\u00eb.<\/p>\n<p>Kanal i shk\u00ebmbimit t\u00eb t\u00eb dh\u00ebnave t\u00eb mbrojtura<br \/>\nInternet.<\/p>\n<p>Rrjeti korporativ i organizat\u00ebs 1.<\/p>\n<p>ARM e p\u00ebrdoruesit:<br \/>\n \u2014 disku i ngurt\u00eb;<br \/>\n \u2014 memoria e pun\u00ebs;<br \/>\n \u2014 interfeksi rrjetor.<\/p>\n<p>Internet.<\/p>\n<p>Rrjeti korporativ i organizat\u00ebs 2.<\/p>\n<p>Hiperkripti:<br \/>\n \u2014 interfeksi rrjetor; <br \/>\n \u2014 memoria e pun\u00ebs;<br \/>\n \u2014 disku i ngurt\u00eb.<\/p>\n<p>Makin\u00eb virtuale: <br \/>\n \u2014 interfeksi rrjetor; <br \/>\n \u2014 memoria e pun\u00ebs;<br \/>\n \u2014 disku i ngurt\u00eb.<\/p>\n<p>Kanal i transmetimit t\u00eb koh\u00ebs<br \/>\nARM e p\u00ebrdoruesit:<br \/>\n \u2014 mjetet e hyrjes-daljes;<br \/>\n \u2014 memoria e pun\u00ebs;<br \/>\n \u2014 timeri sistemik.<\/p>\n<p>Internet. <br \/>\nRrjeti korporativ i organizat\u00ebs 2,<\/p>\n<p>Hiperkripti:<br \/>\n \u2014 interfeksi rrjetor;<br \/>\n \u2014 memoria e pun\u00ebs;<br \/>\n \u2014 timeri sistemik.<\/p>\n<p>Makin\u00eb virtuale:<br \/>\n \u2014 memoria e pun\u00ebs;<br \/>\n \u2014 timeri sistemik.<\/p>\n<p>Kanal i transmetimit t\u00eb komandave menaxhuese<br \/>\nARM e p\u00ebrdoruesit:<br \/>\n \u2014 mjetet e hyrjes-daljes;<br \/>\n \u2014 memoria e pun\u00ebs.<\/p>\n<p>(Nd\u00ebrfaqja grafike e software KryptoARM)<\/p>\n<p>Makin\u00eb virtuale:<br \/>\n \u2014 memoria e pun\u00ebs;<br \/>\n \u2014 disku i ngurt\u00eb.<\/p>\n<p>(Skriptet e automatizimit)<\/p>\n<p>Kanal i pranimit t\u00eb rezultateve t\u00eb pun\u00ebs<br \/>\nARM e p\u00ebrdoruesit:<br \/>\n \u2014 mjetet e hyrjes-daljes;<br \/>\n \u2014 memoria e pun\u00ebs.<\/p>\n<p>(Nd\u00ebrfaqja grafike e software KryptoARM)<\/p>\n<p>Makin\u00eb virtuale:<br \/>\n \u2014 memoria e pun\u00ebs;<br \/>\n \u2014 disku i ngurt\u00eb.<\/p>\n<p>(Skedar\u00ebt e ditar\u00ebve t\u00eb pun\u00ebs s\u00eb skript\u00ebve t\u00eb automatizimit)<\/p>\n<p><\/p>\n<h3>K\u00ebrc\u00ebnimet e siguris\u00eb s\u00eb nivelit t\u00eb lart\u00eb<\/h3>\n<p>\n<b>Shpjegime<\/b><\/p>\n<p>Supozime t\u00eb pranuara gjat\u00eb dekompozimit t\u00eb k\u00ebrc\u00ebnimeve:<\/p>\n<ol>\n<li>Algoritmet kriptografike q\u00eb p\u00ebrdoren jan\u00eb t\u00eb q\u00ebndrueshme.<\/li>\n<li>Algoritmet kriptografike p\u00ebrdoren n\u00eb m\u00ebnyr\u00eb t\u00eb sigurt n\u00eb m\u00ebnyrat e duhura t\u00eb funksionimit (p.sh., <noindex><a rel=\"nofollow\" href=\"http:\/\/cryptowiki.net\/index.php?title=Electronic_Code_Book\">ECB<\/a><\/noindex> nuk aplikohet p\u00ebr enkriptimin e volumit t\u00eb madh t\u00eb t\u00eb dh\u00ebnave, duke marr\u00eb parasysh ngarkes\u00ebn e pranueshme p\u00ebr \u00e7el\u00ebsin, etj.).<\/li>\n<li>T\u00eb dh\u00ebnat p\u00ebr kriptografit jan\u00eb t\u00eb njohura p\u00ebr keqb\u00ebr\u00ebsit, duke p\u00ebrfshir\u00eb t\u00eb gjitha algoritmet, protokollet dhe \u00e7el\u00ebsat publik\u00eb t\u00eb aplikuar.<\/li>\n<li>T\u00eb dh\u00ebnat e enkriptuara jan\u00eb t\u00eb lexueshme p\u00ebr keqb\u00ebr\u00ebsit.<\/li>\n<li>Keqb\u00ebr\u00ebsit jan\u00eb n\u00eb gjendje t\u00eb riprodhojn\u00eb \u00e7do element programor brenda sistemit.<\/li>\n<\/ol>\n<p>\n<b>Dekompuzimi<\/b><\/p>\n<p>U1. Kompromitimi i \u00e7el\u00ebsave t\u00eb mbyllur kriptografik.<br \/>\nU2. Enkriptimi i t\u00eb dh\u00ebnave t\u00eb rrejshme n\u00eb em\u00ebr t\u00eb d\u00ebrguesit legjitim.<br \/>\nU3. Deshifrimi i t\u00eb dh\u00ebnave t\u00eb enkriptuara nga persona q\u00eb nuk jan\u00eb marr\u00ebs legjitim t\u00eb t\u00eb dh\u00ebnave (keqb\u00ebr\u00ebsit).<br \/>\nU4. Krijimi i nj\u00eb n\u00ebnshkrimi elektronik nga n\u00ebnshkruesi legjitim mbi t\u00eb dh\u00ebna t\u00eb rrejshme.<br \/>\nU5. Marrja e rezultat pozitiv t\u00eb verifikimit t\u00eb n\u00ebnshkrimit elektronik mbi t\u00eb dh\u00ebna t\u00eb rrejshme.<br \/>\nU6. Pranimi gabim i dokumenteve elektronike p\u00ebr zbatim p\u00ebr shkak t\u00eb problemeve n\u00eb organizimin e qarkullimit elektronik t\u00eb dokumenteve.<br \/>\nU7. Aksesi i paautorizuar n\u00eb t\u00eb dh\u00ebnat e mbrojtura gjat\u00eb p\u00ebrpunimit t\u00eb tyre nga SKZI.<br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUSKZIU1\"><\/a><\/noindex><\/p>\n<h3>U1. Kompromitimi i \u00e7el\u00ebsave t\u00eb mbyllur kriptografik<\/h3>\n<p>\nU1.1. Marrja e \u00e7el\u00ebsit t\u00eb mbyllur nga depoja e \u00e7el\u00ebsave t\u00eb mbyllur.<\/p>\n<p>U1.2. Marrja e \u00e7el\u00ebsit t\u00eb mbyllur nga objektet e mjedisit t\u00eb funksionimit t\u00eb mjeteve kriptografike, n\u00eb t\u00eb cilat ai mund t\u00eb q\u00ebndroj\u00eb p\u00ebrkoh\u00ebsisht.<br \/>\n<i>Shpjegime U1.2.<\/i><\/p>\n<p>Objektet n\u00eb t\u00eb cilat \u00e7el\u00ebsi i mbyllur mund t\u00eb ruhet p\u00ebrkoh\u00ebsisht p\u00ebrfshijn\u00eb:<\/p>\n<ol>\n<li>memorja operative, <\/li>\n<li>skedar\u00ebt e p\u00ebrkohsh\u00ebm, <\/li>\n<li>skedar\u00ebt e shk\u00ebmbimit, <\/li>\n<li>skedar\u00ebt e hibernimit, <\/li>\n<li>skedar\u00ebt e snapshot-eve t\u00eb gjendjes \"n\u00eb gjendje t\u00eb ngroht\u00eb\" t\u00eb makinave virtuale, duke p\u00ebrfshir\u00eb skedar\u00ebt e p\u00ebrmbajtjes s\u00eb memories operative t\u00eb makinave virtuale q\u00eb jan\u00eb pezulluar.<\/li>\n<\/ol>\n<p>\nU1.2.1. Nxjerrja e \u00e7el\u00ebsave t\u00eb mbyllur nga memoria operative aktive p\u00ebrmes ngrirjes s\u00eb moduleve t\u00eb RAM, nxjerrjes s\u00eb tyre dhe leximit t\u00eb m\u00ebtejsh\u00ebm t\u00eb t\u00eb dh\u00ebnave (sulmi nga ngrirja).<br \/>\n<i>Shpjegime U1.2.1.<\/i><br \/>\nShembulli <noindex><a rel=\"nofollow\" href=\"https:\/\/www.securitylab.ru\/analytics\/452899.php\">sulm<\/a><\/noindex>. <\/p>\n<p>U1.3. Marrja e \u00e7el\u00ebsit t\u00eb mbyllur nga kanali i shk\u00ebmbimit t\u00eb \u00e7el\u00ebsave t\u00eb mbyllur.<br \/>\n<i>Shpjegime U1.3.<\/i><br \/>\nNj\u00eb shembull i zbatimit t\u00eb k\u00ebtij rreziku do t\u00eb jepet <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUSKZIA3\">m\u00eb posht\u00eb<\/a><\/noindex>.<\/p>\n<p>U1.4. Modifikimi i paautorizuar i b\u00ebrtham\u00ebs kriptografike, n\u00eb rezultat t\u00eb cilit \u00e7el\u00ebsat e mbyllur b\u00ebhen t\u00eb njohura p\u00ebr keqb\u00ebr\u00ebsit.<\/p>\n<p>U1.5. Kompromitimi i \u00e7el\u00ebsit t\u00eb mbyllur si rezultat i p\u00ebrdorimit t\u00eb kanaleve teknike t\u00eb rrjedhjes s\u00eb informacionit (TKUI).<br \/>\n<i>Shpjegimet U1.5.<\/i><br \/>\nShembulli <noindex><a rel=\"nofollow\" href=\"https:\/\/www.usenix.org\/system\/files\/conference\/usenixsecurity18\/sec18-alam.pdf\">sulm<\/a><\/noindex>. <\/p>\n<p>U1.6. Kompromitimi i \u00e7el\u00ebsit t\u00eb mbyllur si rezultat i p\u00ebrdorimit t\u00eb mjeteve teknike speciale (STS), t\u00eb dizajnuara p\u00ebr p\u00ebrvet\u00ebsimin e fsheht\u00eb t\u00eb informacionit (\u201cgjuajt\u00ebsve\u201d).<\/p>\n<p>U1.7. Kompromitimi i \u00e7el\u00ebsve t\u00eb mbyllur gjat\u00eb ruajtjes s\u00eb tyre jasht\u00eb SKZI.<br \/>\n<i>Shpjegimet U1.7.<\/i><br \/>\nP\u00ebr shembull, p\u00ebrdoruesi ruan pajisjet e tij ky\u00e7 n\u00eb kutin\u00eb e tavolin\u00ebs s\u00eb pun\u00ebs, nga e cila ato mund t\u00eb nxirren leht\u00ebsisht nga sulmuesit.<br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUSKZIU2\"><\/a><\/noindex><\/p>\n<h3>U2. Kriptimi i t\u00eb dh\u00ebnave t\u00eb rreme n\u00eb em\u00ebr t\u00eb d\u00ebrguesit legjitim.<\/h3>\n<p>\n<b>Shpjegime<\/b><br \/>\nKjo k\u00ebrc\u00ebnim shqyrtohet vet\u00ebm p\u00ebr skemat e kriptimit t\u00eb t\u00eb dh\u00ebnave me autentifikim t\u00eb d\u00ebrguesit. Shembuj t\u00eb till\u00eb jan\u00eb t\u00eb p\u00ebrfshir\u00eb n\u00eb rekomandimet p\u00ebr standardizimin. <noindex><a rel=\"nofollow\" href=\"https:\/\/tc26.ru\/standarts\/rekomendatsii-po-standartizatsii\/r-1323565-1-004-2017-informatsionnaya-tekhnologiya-kriptograficheskaya-zashchita-informatsii-skhemy-vyrabotki-obshchego-klyucha-s-autentifikatsiey-na-osnove-otkrytogo-klyucha.html\">R 1323565.1.004-2017 \u00abTeknologjia informative. Mbrojtja kriptografike e informacionit. Skemat e prodhimit t\u00eb \u00e7el\u00ebsit t\u00eb p\u00ebrbashk\u00ebt me autentifikim mbi baz\u00ebn e \u00e7el\u00ebsit t\u00eb hapur\u00bb<\/a><\/noindex>. P\u00ebr skemat e tjera kriptografike, ky k\u00ebrc\u00ebnim nuk ekziston, pasi kriptimi b\u00ebhet mbi \u00e7el\u00ebsat e hapur t\u00eb marr\u00ebsit, dhe ato n\u00eb p\u00ebrgjith\u00ebsi jan\u00eb t\u00eb njohura nga sulmuesit.<\/p>\n<p><b>Dekompuzimi<\/b><br \/>\nU2.1. Kompromitimi i \u00e7el\u00ebsit t\u00eb mbyllur t\u00eb d\u00ebrguesit:<br \/>\nU2.1.1. Lidhja: <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUSKZIU1\">\u00abModel standard i k\u00ebrc\u00ebnimeve. Sistemi i mbrojtjes kriptografike t\u00eb informacionit. U1. Kompromitimi i \u00e7el\u00ebsave t\u00eb mbyllur kriptografik\u00bb<\/a><\/noindex>.<\/p>\n<p>U2.2. Z\u00ebvend\u00ebsimi i t\u00eb dh\u00ebnave hyr\u00ebse n\u00eb kanal t\u00eb shk\u00ebmbimit t\u00eb t\u00eb dh\u00ebnave t\u00eb hapura.<br \/>\n<i>Sh\u00ebnime U2.2.<\/i><br \/>\nShembujt e realizimit t\u00eb k\u00ebtij k\u00ebrc\u00ebnimi jan\u00eb paraqitur m\u00eb posht\u00eb. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUSKZIA1\">k\u00ebtu<\/a><\/noindex> \u0438 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUSKZIA2\">k\u00ebtu<\/a><\/noindex>.<br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUSKZIU3\"><\/a><\/noindex><\/p>\n<h3>U3. Shk\u00ebputja e t\u00eb dh\u00ebnave t\u00eb kriptuara nga persona q\u00eb nuk jan\u00eb marr\u00ebs legjitim t\u00eb t\u00eb dh\u00ebnave (sulmuesit).<\/h3>\n<p>\n<b>Dekompuzimi<\/b><br \/>\nU3.1. Kompromitimi i \u00e7el\u00ebsave t\u00eb mbyllur t\u00eb marr\u00ebsve t\u00eb t\u00eb dh\u00ebnave t\u00eb kriptuara. <br \/>\nU3.1.1 Referenca: <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUSKZIU1\">\u00abModel standard i k\u00ebrc\u00ebnimeve. Sistemi i mbrojtjes kriptografike t\u00eb informacionit. U1. Kompromitimi i \u00e7el\u00ebsave t\u00eb mbyllur kriptografik\u00bb<\/a><\/noindex>.<\/p>\n<p>U3.2. Z\u00ebvend\u00ebsimi i t\u00eb dh\u00ebnave t\u00eb kriptuara n\u00eb kanal t\u00eb shk\u00ebmbimit t\u00eb t\u00eb dh\u00ebnave t\u00eb mbrojtura.<br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUSKZIU4\"><\/a><\/noindex><\/p>\n<h3>U4. Krijimi i n\u00ebnshkrimit elektronik nga nj\u00eb n\u00ebnshkrues legjitim n\u00ebn t\u00eb dh\u00ebna t\u00eb rreme.<br \/>\n<\/h3>\n<p>\n<b>Dekompuzimi<\/b><br \/>\nU4.1. Kompromitimi i \u00e7el\u00ebsave t\u00eb mbyllur t\u00eb n\u00ebnshkrimit elektronik t\u00eb n\u00ebnshkruesit legjitim. <br \/>\nU4.1.1 Referenca: <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUSKZIU1\">\u00abModel standard i k\u00ebrc\u00ebnimeve. Sistemi i mbrojtjes kriptografike t\u00eb informacionit. U1. Kompromitimi i \u00e7el\u00ebsave t\u00eb mbyllur kriptografik\u00bb<\/a><\/noindex>.<\/p>\n<p>U4.2. Z\u00ebvend\u00ebsimi i t\u00eb dh\u00ebnave n\u00eb procesin e n\u00ebnshkrimit n\u00eb kanalin e shk\u00ebmbimit t\u00eb t\u00eb dh\u00ebnave t\u00eb hapura.<br \/>\n<i>Sh\u00ebnim U4.2.<\/i><br \/>\nShembujt e realizimit t\u00eb k\u00ebtij k\u00ebrc\u00ebnimi jan\u00eb paraqitur m\u00eb posht\u00eb. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUSKZIA1\">k\u00ebtu<\/a><\/noindex> \u0438 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUSKZIA2\">k\u00ebtu<\/a><\/noindex>.<br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUSKZIU5\"><\/a><\/noindex><\/p>\n<h3>U5. Marrja e nj\u00eb rezultati pozitiv t\u00eb verifikimit t\u00eb n\u00ebnshkrimit elektronik n\u00ebn t\u00eb dh\u00ebna t\u00eb rreme.<\/h3>\n<p>\n<b>Dekompuzimi<\/b><br \/>\nU5.1. Sulmuesit kapin kanalin e transmetimit t\u00eb rezultateve t\u00eb pun\u00ebs nj\u00eb mesazh mbi nj\u00eb rezultat negativ t\u00eb verifikimit t\u00eb n\u00ebnshkrimit elektronik dhe e z\u00ebvend\u00ebsojn\u00eb at\u00eb me nj\u00eb mesazh me rezultat pozitiv.<\/p>\n<p>U5.2. Sulmuesit kryejn\u00eb nj\u00eb sulm mbi besueshm\u00ebrin\u00eb e certifikatave t\u00eb n\u00ebnshkrimit (<b>SKENARI \u2014 t\u00eb gjitha element\u00ebt jan\u00eb t\u00eb detyruesh\u00ebm<\/b>):<br \/>\nU5.2.1. Sulmuesit gjenerojn\u00eb nj\u00eb \u00e7el\u00ebs publik dhe nj\u00eb \u00e7el\u00ebs privat p\u00ebr n\u00ebnshkrimin elektronik. N\u00ebse n\u00eb sistem p\u00ebrdoren certifikatat e \u00e7el\u00ebsave t\u00eb n\u00ebnshkrimit elektronik, ata gjenerojn\u00eb nj\u00eb certifikat n\u00ebnshkrimi elektronik q\u00eb i ngjan sa m\u00eb shum\u00eb certifikat\u00ebs s\u00eb d\u00ebrguesit t\u00eb parashikuar t\u00eb t\u00eb dh\u00ebnave, mesazhin e t\u00eb cilit ata d\u00ebshirojn\u00eb ta falsifikojn\u00eb.<br \/>\nU5.2.2. Sulmuesit b\u00ebjn\u00eb ndryshime t\u00eb paautorizuara n\u00eb depozitat e \u00e7el\u00ebsave publik, duke u dh\u00ebn\u00eb \u00e7el\u00ebsit t\u00eb gjeneruar nga ata nivelet e nevojshme t\u00eb besueshm\u00ebris\u00eb dhe autorizimit.<br \/>\nU5.2.3. Sulmuesit n\u00ebnshkruajn\u00eb t\u00eb dh\u00ebna fallco me \u00e7el\u00ebsin e n\u00ebnshkrimit elektronik q\u00eb kan\u00eb formuar m\u00eb par\u00eb dhe i injektojn\u00eb ato n\u00eb kanalin e shk\u00ebmbimit t\u00eb t\u00eb dh\u00ebnave t\u00eb mbrojtura.<\/p>\n<p>U5.3. Sulmuesit kryejn\u00eb nj\u00eb sulm duke p\u00ebrdorur \u00e7el\u00ebsa t\u00eb skaduar t\u00eb n\u00ebnshkrimit elektronik t\u00eb n\u00ebnshkruesit legjitim (<b>SKENARI \u2014 t\u00eb gjitha element\u00ebt jan\u00eb t\u00eb detyruesh\u00ebm<\/b>):<br \/>\nU5.3.1. Sulmuesit komprometojn\u00eb \u00e7el\u00ebsat privat\u00eb t\u00eb skaduar (t\u00eb pa funksionuesh\u00ebm n\u00eb k\u00ebt\u00eb moment) t\u00eb n\u00ebnshkruesit legjitim.<br \/>\nU5.3.2. Sulmuesit z\u00ebvend\u00ebsojn\u00eb koh\u00ebn n\u00eb kanalin e transmetimit t\u00eb koh\u00ebs me nj\u00eb koh\u00eb kur \u00e7el\u00ebsat e komprometuar ishin ende t\u00eb vlefsh\u00ebm.<br \/>\nU5.3.3. Sulmuesit n\u00ebnshkruajn\u00eb t\u00eb dh\u00ebna fallco me \u00e7el\u00ebsin e n\u00ebnshkrimit elektronik t\u00eb komprometuar m\u00eb par\u00eb dhe i injektojn\u00eb ato n\u00eb kanalin e shk\u00ebmbimit t\u00eb t\u00eb dh\u00ebnave t\u00eb mbrojtura.<\/p>\n<p>U5.4. Sulmuesit kryejn\u00eb nj\u00eb sulm duke p\u00ebrdorur \u00e7el\u00ebsa t\u00eb komprometuar t\u00eb n\u00ebnshkrimit elektronik t\u00eb n\u00ebnshkruesit legjitim (<b>SKENARI \u2014 t\u00eb gjitha element\u00ebt jan\u00eb t\u00eb detyruesh\u00ebm<\/b>):<br \/>\nU5.4.1. Sulmuesit b\u00ebjn\u00eb nj\u00eb kopje t\u00eb depozit\u00ebs s\u00eb \u00e7el\u00ebsave publik.<br \/>\nU5.4.2. Sulmuesit komprometojn\u00eb \u00e7el\u00ebsat privat\u00eb t\u00eb nj\u00eb nga d\u00ebrguesit legjitim. Ai v\u00ebren komprometimin, anullojn\u00eb \u00e7el\u00ebsat, informacionet mbi anulimin e \u00e7el\u00ebsit vendosen n\u00eb depozit\u00ebn e \u00e7el\u00ebsave publik.<br \/>\nU5.4.3. Sulmuesit z\u00ebvend\u00ebsojn\u00eb depozit\u00ebn e \u00e7el\u00ebsave publik me at\u00eb t\u00eb kopjuar m\u00eb her\u00ebt.<br \/>\nU5.4.4. Sulmuesit n\u00ebnshkruajn\u00eb t\u00eb dh\u00ebna fallco me \u00e7el\u00ebsin e n\u00ebnshkrimit elektronik q\u00eb \u00ebsht\u00eb komprometuar m\u00eb par\u00eb dhe i injektojn\u00eb ato n\u00eb kanalin e shk\u00ebmbimit t\u00eb t\u00eb dh\u00ebnave t\u00eb mbrojtura.<\/p>\n<p>\u04235.5. &lt;&#8230;&gt; \u0437\u0430 \u0441\u0447\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 2-\u0433\u043e \u0438 3-\u0433\u043e \u044d\u0442\u0430\u043f\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438:<br \/>\n<i>Shpjegime U5.5.<\/i><br \/>\nShembulli i realizimit t\u00eb k\u00ebsaj k\u00ebrc\u00ebnimi \u00ebsht\u00eb dh\u00ebn\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/422329\/#TMUSKZIA4\">m\u00eb posht\u00eb<\/a><\/noindex>.<\/p>\n<p>U5.5.1. Kontrolli i besueshm\u00ebris\u00eb ndaj certifikat\u00ebs s\u00eb \u00e7el\u00ebsit t\u00eb n\u00ebnshkrimit elektronik vet\u00ebm p\u00ebrmes pranis\u00eb s\u00eb besueshm\u00ebris\u00eb ndaj certifikat\u00ebs me an\u00eb t\u00eb s\u00eb cil\u00ebs \u00ebsht\u00eb n\u00ebnshkruar, pa kontrollime CRL ose OCSP.<br \/>\n<i>Shpjegime U5.5.1.<\/i><br \/>\nShembulli i realizimit <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/332730\/\">k\u00ebrc\u00ebnimi<\/a><\/noindex>. <\/p>\n<p>U5.5.2. Kur nd\u00ebrtohet zinxhiri i besueshm\u00ebris\u00eb ndaj certifikat\u00ebs, nuk analizohet autoriteti i l\u00ebshuesve t\u00eb certifikatave<br \/>\n<i>Shpjegime U5.5.2.<\/i><br \/>\nShembulli i sulmit ndaj certifikatave SSL\/TLS. <br \/>\nK\u00ebrc\u00ebnuesit blen\u00eb nj\u00eb certifikat\u00eb legjitime p\u00ebr e-mail-in e tyre. M\u00eb pas ata krijuan nj\u00eb certifikat\u00eb fallco p\u00ebr nj\u00eb faqe dhe e n\u00ebnshkruan at\u00eb me certifikat\u00ebn e tyre. N\u00ebse nuk b\u00ebhet verifikimi i autoritetit, at\u00ebher\u00eb gjat\u00eb kontrollit t\u00eb zinxhirit t\u00eb besueshm\u00ebris\u00eb ai do t\u00eb rezultoj\u00eb t\u00eb jet\u00eb korrekt, dhe, p\u00ebr rrjedhoj\u00eb, certifikata fallco gjithashtu do t\u00eb jet\u00eb e sakt\u00eb.<\/p>\n<p>U5.5.3. Kur nd\u00ebrtohet zinxhiri i besueshm\u00ebris\u00eb ndaj certifikat\u00ebs, nuk kontrollohen certifikatat e nd\u00ebrmjetme p\u00ebr revokim.<\/p>\n<p>U5.5.4. Pndatekimi i CRL ndodh m\u00eb shpesh se sa nxitet nga autoriteti i besimit.<\/p>\n<p>U5.5.5. Vendimi p\u00ebr besueshm\u00ebrin\u00eb e n\u00ebnshkrimit elektronik merret m\u00eb her\u00ebt se sa marr\u00eb p\u00ebrgjigja OCSP p\u00ebr statusin e certifikat\u00ebs, e d\u00ebrguar nga nj\u00eb k\u00ebrkes\u00eb, e b\u00ebr\u00eb pas koh\u00ebs s\u00eb formimit t\u00eb n\u00ebnshkrimit ose m\u00eb her\u00ebt se sa \u00ebsht\u00eb marr\u00eb CRL q\u00eb pason at\u00eb pas formimit t\u00eb n\u00ebnshkrimit. <br \/>\n<i>Shpjegime U5.5.5.<\/i><br \/>\nN\u00eb rregulloret e shumic\u00ebs s\u00eb autoriteteve t\u00eb besueshm\u00ebris\u00eb, koha e revokimit t\u00eb certifikat\u00ebs konsiderohet koha e l\u00ebshimit t\u00eb CRL-t\u00eb m\u00eb t\u00eb af\u00ebrt, q\u00eb p\u00ebrmban informacion p\u00ebr revokimin e certifikat\u00ebs.<\/p>\n<p>U5.5.6. Kur pranohen t\u00eb dh\u00ebna t\u00eb n\u00ebnshkruara, nuk verifikohet p\u00ebrkat\u00ebsia e certifikat\u00ebs p\u00ebr d\u00ebrguesin. <br \/>\n<i>Shpjegime U5.5.6.<\/i><br \/>\nShembulli i sulmit. N\u00eb lidhje me certifikatat SSL: mund t\u00eb mos verifikohet p\u00ebrputhshm\u00ebria e adres\u00ebs s\u00eb serverit t\u00eb thirrur me vler\u00ebn e fush\u00ebs CN n\u00eb certifikat\u00eb.<br \/>\nShembulli i sulmit. K\u00ebrc\u00ebnuesit kompromentuan \u00e7el\u00ebsat e n\u00ebnshkrimit elektronik t\u00eb nj\u00eb prej pjes\u00ebmarr\u00ebsve n\u00eb sistemin e pagesave. M\u00eb pas, ata thyen rrjetin e nj\u00eb pjes\u00ebmarr\u00ebsi tjet\u00ebr dhe n\u00eb emrin e tij d\u00ebrguan n\u00eb serverin e llogarive dokumentet e pages\u00ebs t\u00eb n\u00ebnshkruara me \u00e7el\u00ebsat e kompromentuar. N\u00ebse serveri analizon vet\u00ebm besueshm\u00ebrin\u00eb dhe nuk kontrollon p\u00ebrputhshm\u00ebrin\u00eb, dokumentet fallco do t\u00eb pranohen si legjitime.<br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUSKZIU6\"><\/a><\/noindex><\/p>\n<h3>U6. Pranimi gabim i dokumenteve elektronike p\u00ebr zbatim p\u00ebr shkak t\u00eb problemeve n\u00eb organizimin e qarkullimit elektronik t\u00eb dokumenteve.<\/h3>\n<p>\n<b>Dekompuzimi<\/b><br \/>\nU6.1. An\u00ebtarja pranuese nuk zbulohet rip\u00ebrs\u00ebritja e dokumenteve t\u00eb marra.<br \/>\n<i>Shpjegime U6.1.<\/i><br \/>\nShembulli i sulmit. Sulmuesit mund t\u00eb kapin dokumentin e d\u00ebrguar te marr\u00ebsi, madje edhe t\u00eb mbrojtur me kriptografi, dhe pastaj ta d\u00ebrgojn\u00eb at\u00eb shum\u00eb her\u00eb n\u00eb kanalin e sh\u00ebrbimeve t\u00eb sigurta t\u00eb t\u00eb dh\u00ebnave. N\u00ebse marr\u00ebsi nuk zbulon kopjet, t\u00eb gjitha dokumentet e marra do t\u00eb perceptohen dhe p\u00ebrpunohen si dokumente t\u00eb ndryshme.<br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUSKZIU7\"><\/a><\/noindex><\/p>\n<h3>U7. Qasja e paautorizuar n\u00eb t\u00eb dh\u00ebnat e mbrojtura gjat\u00eb p\u00ebrpunimit t\u00eb tyre me SKZI <\/h3>\n<p>\n<b>Dekompuzimi<\/b><\/p>\n<p>\u04237.1. &lt;&#8230;&gt; \u0432\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c (side channel attack).<br \/>\n<i>Shpjegime p\u00ebr U7.1.<\/i><br \/>\nShembulli <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cs.tau.ac.il\/~tromer\/synesthesia\/synesthesia.pdf\">sulm<\/a><\/noindex>. <\/p>\n<p>\u04237.2. &lt;&#8230;&gt; \u0432\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u043e\u0439 \u043d\u0430 \u0421\u041a\u0417\u0418:<br \/>\nU7.2.1. Shfryt\u00ebzimi i SKZI me shkelje t\u00eb k\u00ebrkesave, t\u00eb p\u00ebrshkruara n\u00eb dokumentacionin p\u00ebr SKZI.<\/p>\n<p>\u04237.2.2. &lt;&#8230;&gt;, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u0437\u0430 \u0441\u0447\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432:<br \/>\n\u04237.2.2.1. &lt;&#8230;&gt; \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u0445 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.<br \/>\n\u04237.2.2.2. &lt;&#8230;&gt; \u0441\u0430\u043c\u043e\u0439 \u0421\u041a\u0417\u0418.<br \/>\n\u04237.2.2.3. &lt;&#8230;&gt; \u0441\u0440\u0435\u0434\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0440\u0438\u043f\u0442\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430.<\/p>\n<h3>Shembuj t\u00eb sulmeve<\/h3>\n<p>\nScenar\u00ebt e diskutuar m\u00eb posht\u00eb p\u00ebrmbajn\u00eb me vet\u00ebdije gabime n\u00eb organizimin e siguris\u00eb informacionit dhe sh\u00ebrbejn\u00eb vet\u00ebm p\u00ebr ilustruar sulme t\u00eb mundshme.<br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUSKZIA1\"><\/a><\/noindex><\/p>\n<h4>Scenari 1. Shembulli i realizimit t\u00eb rreziqeve U2.2 dhe U4.2.<\/h4>\n<p>\n<b>P\u00ebrshkrimi i objektit<\/b><br \/>\n<img decoding=\"async\" alt=\"Siguria informative e pagesave bankare pa cash. Pjesa 8 - Modelet tipike t\u00eb k\u00ebrc\u00ebnimeve\" src=\"\/wp-content\/uploads\/2019\/04\/77d51167720552df4eb9c2bafbce6765.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSOFTWARE i ARM KBR dhe SKZI SKAD \u00ebsht\u00eb instaluar n\u00eb nj\u00eb kompjuter fizik, i cili nuk \u00ebsht\u00eb lidhur me rrjetin informatik. Si mjet kryesor p\u00ebrdoret FKN vdToken n\u00eb m\u00ebnyr\u00eb pune me \u00e7el\u00ebsin e paeksploruesh\u00ebm.<\/p>\n<p>Rregullorja e realizimit t\u00eb llogarive supozon se specialisti i llogarive shkarkon mesazhe elektronike n\u00eb nj\u00eb format t\u00eb hapur (skema e vjet\u00ebr e ARM KBR) nga nj\u00eb server i specializuar t\u00eb mbrojtur t\u00eb skedar\u00ebve, pastaj i regjistron ato n\u00eb nj\u00eb mbajt\u00ebs USB t\u00eb ndar\u00eb dhe i transferon n\u00eb ARM KBR, ku ato kriptografohen dhe n\u00ebnshkruhen. M\u00eb pas, specialisti transferon mesazhet elektronike t\u00eb mbrojtura n\u00eb nj\u00eb mbajt\u00ebs t\u00eb ndar\u00eb, dhe pastaj n\u00ebp\u00ebrmjet kompjuterit t\u00eb tij t\u00eb pun\u00ebs i regjistron ato n\u00eb serverin e skedar\u00ebve, nga ku ato kalojn\u00eb n\u00eb UTA dhe m\u00eb pas n\u00eb sistemin e pagesave t\u00eb Bank\u00ebs s\u00eb Rusis\u00eb.<\/p>\n<p>N\u00eb k\u00ebt\u00eb rast, kanalet e nd\u00ebrrimit t\u00eb t\u00eb dh\u00ebnave t\u00eb hapura dhe t\u00eb mbrojtura do t\u00eb p\u00ebrfshijn\u00eb: serverin e skedar\u00ebve, kompjuterin e pun\u00ebs t\u00eb specialistit dhe mbajt\u00ebsin e ndar\u00eb.<\/p>\n<p><b>Sulmi<\/b><br \/>\nK\u00ebrkuesit e paautorizuar instalojn\u00eb n\u00eb kompjuterin e pun\u00ebs t\u00eb specialistit nj\u00eb sistem menaxhimi t\u00eb larg\u00ebt dhe n\u00eb momentin e regjistrimit t\u00eb informacionit n\u00eb nj\u00eb medium t\u00eb transferuesh\u00ebm p\u00ebr urdh\u00ebrat e pagesave (mesazhe elektronike) n\u00eb form\u00eb t\u00eb hapur nd\u00ebrronin p\u00ebrmbajtjen e nj\u00ebr\u00ebs prej tyre. Specialistin transferon urdh\u00ebrat e pagesave n\u00eb APM KBR, i n\u00ebnshkruan dhe i kodon ato, duke mos e v\u00ebn\u00eb re nd\u00ebrrimin (p\u00ebr shembull, p\u00ebr shkak t\u00eb numrit t\u00eb madh t\u00eb urdh\u00ebrave t\u00eb pagesave n\u00eb rrug\u00eb, lodhjes, etj.). Pas k\u00ebsaj, urdh\u00ebri i falsifikuar i pages\u00ebs, duke kaluar p\u00ebrmes zinxhirit teknologjik, p\u00ebrfundon n\u00eb sistemin e pagesave t\u00eb Bank\u00ebs s\u00eb Rusis\u00eb.<br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUSKZIA2\"><\/a><\/noindex><\/p>\n<h4>Skema 2. Shembulli i realizimit t\u00eb k\u00ebrc\u00ebnimeve U2.2 dhe U4.2.<\/h4>\n<p>\n<b>P\u00ebrshkrimi i objektit<\/b><br \/>\n<img decoding=\"async\" alt=\"Siguria informative e pagesave bankare pa cash. Pjesa 8 - Modelet tipike t\u00eb k\u00ebrc\u00ebnimeve\" src=\"\/wp-content\/uploads\/2019\/04\/b4489290d665b359323ec6b58dde1139.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKompjuteri me APM KBR, SKAD Signatura t\u00eb instaluara dhe me nj\u00eb mjet t\u00eb ky\u00e7jes FKN vdToken, funksionon n\u00eb nj\u00eb ambient t\u00eb dedikuar pa qasje nga ana e personelit.<br \/>\nSpecialisti i llogarive lidhet me APM KBR n\u00eb m\u00ebnyr\u00ebn e qasjes s\u00eb larg\u00ebt p\u00ebrmes protokollit RDP.<\/p>\n<p><b>Sulmi<\/b><br \/>\nK\u00ebrkuesit e paautorizuar kapin t\u00eb dh\u00ebnat e identifikimit q\u00eb specialisti i llogarive p\u00ebrdor p\u00ebr t\u00eb lidhur dhe punuar me APM KBR (p\u00ebr shembull, p\u00ebrmes nj\u00eb kodi t\u00eb d\u00ebmsh\u00ebm n\u00eb kompjuterin e tij). Pastaj realizojn\u00eb lidhjen n\u00eb emrin e tij dhe d\u00ebrgojn\u00eb n\u00eb sistemin e pagesave t\u00eb Bank\u00ebs s\u00eb Rusis\u00eb nj\u00eb urdh\u00ebr t\u00eb falsifikuar p\u00ebr pages\u00eb.<br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUSKZIA3\"><\/a><\/noindex><\/p>\n<h4>Skema 3. Shembulli i realizimit t\u00eb k\u00ebrc\u00ebnimit U1.3. <\/h4>\n<p>\n<b>P\u00ebrshkrimi i objektit<\/b><br \/>\n<img decoding=\"async\" alt=\"Siguria informative e pagesave bankare pa cash. Pjesa 8 - Modelet tipike t\u00eb k\u00ebrc\u00ebnimeve\" src=\"\/wp-content\/uploads\/2019\/04\/988a97dd75247780556d388566d771f0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nLe t\u00eb shqyrtojm\u00eb nj\u00eb nga variantet hipotetike t\u00eb realizimit t\u00eb modules integruese \"ABS-KBR\" p\u00ebr skem\u00ebn e re (APM KBR-N), ku n\u00ebnshkrimi elektronik i dokumenteve n\u00eb dalje ndodh n\u00eb an\u00ebn e ABS. N\u00eb k\u00ebt\u00eb rast, t\u00eb supozojm\u00eb se ABS funksionon n\u00eb nj\u00eb sistem operativ q\u00eb nuk mb\u00ebshtetet nga SKZI SKAD Signatura dhe, p\u00ebr pasoj\u00eb, funksionaliteti kriptografik \u00ebsht\u00eb transferuar n\u00eb nj\u00eb makin\u00eb virtuale t\u00eb ve\u00e7ant\u00eb \u2014 moduli integrues \"ABS-KBR\".<br \/>\nSi nj\u00eb mjet ky\u00e7 p\u00ebrdoret nj\u00eb USB-tok\u00ebn e zakonsh\u00ebm, q\u00eb funksionon n\u00eb m\u00ebnyr\u00ebn e ky\u00e7jes s\u00eb dezinfektueshme. Kur mjeti i ky\u00e7jes u lidhi n\u00eb hipervizor, doli se n\u00eb sistem nuk kishte porte USB t\u00eb lira, prandaj u vendos t\u00eb lidhet USB-tok\u00ebn p\u00ebrmes nj\u00eb concentratori USB n\u00eb rrjet dhe n\u00eb makin\u00eb virtuale t\u00eb instalohet klienti USB-over-IP, i cili do t\u00eb realizonte lidhjen me concentratorin.<\/p>\n<p><b>Sulmi<\/b><br \/>\nKrer\u00ebt e sulmit kap\u00ebn \u00e7el\u00ebsin e mbyllur t\u00eb n\u00ebnshkrimit elektronik nga kanali i komunikimit midis USB-hub-it dhe hypervisor-it (t\u00eb dh\u00ebnat u transmetuan n\u00eb form\u00eb t\u00eb hapur). Duke pasur \u00e7el\u00ebsin e mbyllur, sulmuesit krijuan nj\u00eb urdh\u00ebr pagese t\u00eb falsifikuar, e n\u00ebnshkruan at\u00eb me n\u00ebnshkrimin elektronik dhe e d\u00ebrguan p\u00ebr ekzekutim n\u00eb ARM KBR-N.<br \/>\n<noindex><a rel=\"nofollow\" name=\"TMUSKZIA4\"><\/a><\/noindex><\/p>\n<h4>Skenari 4. Shembuj t\u00eb implementimit t\u00eb k\u00ebrc\u00ebnimeve U5.5.<\/h4>\n<p>\n<b>P\u00ebrshkrimi i objektit<\/b><br \/>\n\u0420\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0442\u0443 \u0436\u0435 \u0441\u0445\u0435\u043c\u0443, \u0447\u0442\u043e \u0438 \u0432 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438. \u0411\u0443\u0434\u0435\u043c \u0441\u0447\u0438\u0442\u0430\u0442\u044c, \u0447\u0442\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f, \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0438\u0435 \u0438\u0437 \u0410\u0420\u041c \u041a\u0411\u0420-\u041d, \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0442 \u0432 \u043f\u0430\u043f\u043a\u0443 &#8230;SHAREIn, \u0430 \u0442\u0435, \u0447\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432 \u0410\u0420\u041c \u041a\u0411\u0420-\u041d \u0438 \u0434\u0430\u043b\u044c\u0448\u0435 \u0432 \u043f\u043b\u0430\u0442\u0435\u0436\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0411\u0430\u043d\u043a\u0430 \u0420\u043e\u0441\u0441\u0438\u0438, \u2014 \u0432 &#8230;SHAREout.<br \/>\n\u0422\u0430\u043a\u0436\u0435 \u0431\u0443\u0434\u0435\u043c \u0441\u0447\u0438\u0442\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u0440\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u043e\u0434\u0443\u043b\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0441\u043f\u0438\u0441\u043a\u0438 \u043e\u0442\u043e\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u043e, \u0447\u0442\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f, \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u0432\u0448\u0438\u0435 \u0432 \u043f\u0430\u043f\u043a\u0443 &#8230;SHAREIn \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u043a \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c\u0443 \u043a\u043b\u044e\u0447\u0443 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438.<\/p>\n<p><b>Sulmi<\/b><\/p>\n<p>Sulmuesit, duke shfryt\u00ebzuar \u00e7el\u00ebsat e vjedhur n\u00eb skenarin e m\u00ebparsh\u00ebm, n\u00ebnshkruan nj\u00eb urdh\u00ebr pagese t\u00eb falsifikuar q\u00eb p\u00ebrmbante t\u00eb dh\u00ebna p\u00ebr pranimin e parave n\u00eb llogarin\u00eb e klientit t\u00eb mashtruesit dhe e p\u00ebrfshin\u00eb at\u00eb n\u00eb kanalin e shk\u00ebmbimit t\u00eb t\u00eb dh\u00ebnave t\u00eb mbrojtura. Duke qen\u00eb se nuk kryhet kontrolli i n\u00ebnshkrimit t\u00eb urdhrit t\u00eb pages\u00ebs nga Banka e Rusis\u00eb, ai pranohet p\u00ebr ekzekutim.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/422329\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e \u0447\u0435\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0447\u0430\u0441\u0442\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0445 \u0431\u0435\u0437\u043d\u0430\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0435\u0436\u0435\u0439. \u0427\u0430\u0441\u0442\u044c 1 \u2014 \u042d\u043a\u043e\u043d\u043e\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0441\u043d\u043e\u0432\u044b. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0445 \u0431\u0435\u0437\u043d\u0430\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0435\u0436\u0435\u0439. \u0427\u0430\u0441\u0442\u044c 2 \u2014 \u0422\u0438\u043f\u043e\u0432\u0430\u044f IT-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0431\u0430\u043d\u043a\u0430. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0445 \u0431\u0435\u0437\u043d\u0430\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0435\u0436\u0435\u0439. \u0427\u0430\u0441\u0442\u044c 3 \u2014 \u0424\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0439 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0437\u0430\u0449\u0438\u0442\u044b. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0445 \u0431\u0435\u0437\u043d\u0430\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0435\u0436\u0435\u0439. \u0427\u0430\u0441\u0442\u044c 4 \u2014 \u041e\u0431\u0437\u043e\u0440 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043e\u0432 \u043c\u043e\u0434\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0433\u0440\u043e\u0437. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23545,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31627","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/informatsionnaya-bezopasnost-bankovskih-beznalichnyh-platezhej-chast-8-tipovye-modeli-ugroz\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0445 \u0431\u0435\u0437\u043d\u0430\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0435\u0436\u0435\u0439. \u0427\u0430\u0441\u0442\u044c 8 \u2014 \u0422\u0438\u043f\u043e\u0432\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0443\u0433\u0440\u043e\u0437 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/informatsionnaya-bezopasnost-bankovskih-beznalichnyh-platezhej-chast-8-tipovye-modeli-ugroz\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:42:14+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:42:14+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Siguria informacionit t\u00eb pagesave bankare pa para. Pjesa 8 \u2014 Modele tipike t\u00eb k\u00ebrc\u00ebnimeve | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/informatsionnaya-bezopasnost-bankovskih-beznalichnyh-platezhej-chast-8-tipovye-modeli-ugroz","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0445 \u0431\u0435\u0437\u043d\u0430\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0435\u0436\u0435\u0439. \u0427\u0430\u0441\u0442\u044c 8 \u2014 \u0422\u0438\u043f\u043e\u0432\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0443\u0433\u0440\u043e\u0437 | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/informatsionnaya-bezopasnost-bankovskih-beznalichnyh-platezhej-chast-8-tipovye-modeli-ugroz","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:14+00:00","article:modified_time":"2019-10-31T18:42:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31627","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 07:04:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:13:29","updated":"2026-01-21 07:04:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/31627","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=31627"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/31627\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/23545"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=31627"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=31627"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=31627"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}