{"id":32662,"date":"2019-10-31T21:48:16","date_gmt":"2019-10-31T18:48:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chto-budet-s-autentifikatsiej-i-parolyami-perevod-otcheta-javelin-sostoyanie-strogoj-autentifikatsii-s-kommentariyami\/"},"modified":"2019-10-31T21:48:16","modified_gmt":"2019-10-31T18:48:16","slug":"chto-budet-s-autentifikatsiej-i-parolyami-perevod-otcheta-javelin-sostoyanie-strogoj-autentifikatsii-s-kommentariyami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/chto-budet-s-autentifikatsiej-i-parolyami-perevod-otcheta-javelin-sostoyanie-strogoj-autentifikatsii-s-kommentariyami","title":{"rendered":"\u00c7far\u00eb ndodh me autentikimin dhe fjal\u00ebkalimet? P\u00ebrkthimi i raportit Javelin \"Shtate e autentikimit t\u00eb fort\u00eb\" me komente","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"\u00c7far\u00eb
\n
\nSpoiler nga titulli i raportit \"Numri i rasteve t\u00eb p\u00ebrdorimit t\u00eb autentikimit t\u00eb fort\u00eb \u00ebsht\u00eb rritur p\u00ebr shkak t\u00eb k\u00ebrc\u00ebnimeve t\u00eb rrezikshme dhe k\u00ebrkesave t\u00eb rregullator\u00ebve.\"
\nKompania k\u00ebrkimore \"Javelin Strategy & Research\" publikoi raportin \"Gjani i Autentikimit t\u00eb Fort\u00eb 2019\" ( originali n\u00eb format pdf mund t\u00eb shkarkohet k\u00ebtu<\/a><\/noindex>). N\u00eb k\u00ebt\u00eb raport p\u00ebrmendet: cili \u00ebsht\u00eb p\u00ebrqindja e kompanive amerikane dhe evropiane q\u00eb p\u00ebrdorin fjal\u00ebkalime (dhe pse tani p\u00ebrdorimi i fjal\u00ebkalimeve \u00ebsht\u00eb shum\u00eb i pak\u00ebt); pse p\u00ebrqindja e p\u00ebrdorimit t\u00eb autentikimit me dy faktor\u00eb, t\u00eb bazuar n\u00eb toka kriptografike, po rritet shpejt; pse kodet nj\u00eb her\u00ebshe, t\u00eb d\u00ebrguara me SMS, nuk jan\u00eb t\u00eb sigurta.<\/p>\n

T\u00eb gjith\u00eb atyre q\u00eb i intereson tema e t\u00eb kaluar\u00ebs, tashm\u00eb dhe t\u00eb ardhmes s\u00eb autentikimit n\u00eb nd\u00ebrmarrje dhe n\u00eb aplikacione p\u00ebr p\u00ebrdoruesit \u2013 mir\u00ebseerdh\u00ebt.
\n<\/a><\/noindex>
\nNga p\u00ebrkthyesi<\/b><\/p>\n

Fatkeq\u00ebsisht, gjuha me t\u00eb cil\u00ebn \u00ebsht\u00eb shkruar ky raport \u00ebsht\u00eb mjaft \"e that\u00eb\" dhe formale. Dhe p\u00ebrdorimi pes\u00eb her\u00eb i fjal\u00ebs \"autentikim\" n\u00eb nj\u00eb fjali t\u00eb shkurt\u00ebr nuk \u00ebsht\u00eb dora (ose truri) e p\u00ebrkthyesit, por nj\u00eb kapricio i autor\u00ebve. Kur zgjedhin midis dy variant\u00ebsh \u2013 t'u japin lexuesve nj\u00eb tekst m\u00eb af\u00ebr origjinalit ose nj\u00eb tekst m\u00eb interesant, ndonj\u00ebher\u00eb kam zgjedhur t\u00eb par\u00ebn dhe ndonj\u00ebher\u00eb t\u00eb dyt\u00ebn. Por duroni, t\u00eb dashur lexues, p\u00ebrmbajtja e raportit e justifikon.<\/p>\n

Disa pjes\u00eb t\u00eb pavlera dhe jo t\u00eb nevojshme p\u00ebr tregim jan\u00eb hequr, p\u00ebrndryshe shumica nuk do t'i p\u00ebrballonin t\u00eb gjith\u00eb tekstin. T\u00eb interesuarit p\u00ebr t\u00eb lexuar raportin \"pa cenzur\u00eb\" mund ta b\u00ebjn\u00eb k\u00ebt\u00eb n\u00eb gjuh\u00ebn origjinale duke klikuar n\u00eb lidhjen.<\/p>\n

Fatkeq\u00ebsisht, autor\u00ebt nuk jan\u00eb gjithmon\u00eb t\u00eb kujdessh\u00ebm me terminologjin\u00eb. K\u00ebshtu, fjal\u00ebkalimet nj\u00eb her\u00ebshe (One Time Password \u2013 OTP) ndonj\u00ebher\u00eb i quajn\u00eb \"fjal\u00ebkalime\", dhe ndonj\u00ebher\u00eb \"kode\". Me metodat e autentikimit \u00ebsht\u00eb edhe m\u00eb keq. P\u00ebr lexuesin e pap\u00ebrgatitur, nuk \u00ebsht\u00eb gjithmon\u00eb e leht\u00eb t\u00eb kuptoj\u00eb se \"autentikimi me p\u00ebrdorimin e \u00e7el\u00ebsave kriptografik\u00eb\" dhe \"autentikimi i fort\u00eb\" jan\u00eb t\u00eb nj\u00ebjt\u00eb. Un\u00eb kam p\u00ebrpiqur t\u00eb unifikoj sa m\u00eb shum\u00eb terminologjin\u00eb, p\u00ebr m\u00eb tep\u00ebr n\u00eb vet\u00eb raportin ka nj\u00eb fragment me p\u00ebrshkrimin e tyre.<\/p>\n

Megjithat\u00eb, raporti rekomandohet fuqish\u00ebm p\u00ebr lexim, sepse p\u00ebrmban rezultate unike t\u00eb hulumtimeve dhe p\u00ebrfundime t\u00eb sakta. <\/b><\/p>\n

T\u00eb gjitha numrat dhe faktet jan\u00eb paraqitur pa asnj\u00eb ndryshim t\u00eb vog\u00ebl, dhe n\u00ebse nuk jeni dakord me to, \u00ebsht\u00eb m\u00eb mir\u00eb t\u00eb mos debatohet me p\u00ebrkthyesin, por me autor\u00ebt e raportit. Komentet e mia (t\u00eb formatizuara si citate, dhe n\u00eb tekst t\u00eb sh\u00ebnuara me italisht<\/i>) jan\u00eb gjykime t\u00eb mia dhe p\u00ebr secilin prej tyre do t\u00eb isha i lumtur t\u00eb diskutoja (si dhe p\u00ebr cil\u00ebsin\u00eb e p\u00ebrkthimit). <\/p><\/blockquote>\n

<\/p>\n

P\u00ebrmbledhje<\/h2>\n

\nN\u00eb koh\u00ebn ton\u00eb, kanalet digjitale t\u00eb komunikimit me klient\u00ebt jan\u00eb m\u00eb t\u00eb r\u00ebnd\u00ebsishme se kurr\u00eb p\u00ebr biznesin. Edhe brenda nd\u00ebrmarrjeve, komunikimet midis punonj\u00ebsve jan\u00eb m\u00eb shum\u00eb t\u00eb orientuara drejt mjedisit digjital se kurr\u00eb m\u00eb par\u00eb. Dhe sa t\u00eb sigurta do t\u00eb jen\u00eb k\u00ebto nd\u00ebrveprime, varet nga m\u00ebnyra e zgjedhur p\u00ebr autentifikimin e p\u00ebrdoruesve. Kriminel\u00ebt p\u00ebrdorin autentikimin e dob\u00ebt p\u00ebr t\u00eb b\u00ebr\u00eb sulme masive ndaj llogarive t\u00eb p\u00ebrdoruesve. Si p\u00ebrgjigje, organet rregullatore po ashp\u00ebrsojn\u00eb standartet p\u00ebr t\u00eb detyruar bizneset t\u00eb mbrojn\u00eb m\u00eb mir\u00eb llogarit\u00eb dhe t\u00eb dh\u00ebnat e p\u00ebrdoruesve.<\/p>\n

K\u00ebrc\u00ebnimet q\u00eb lidhen me autentikimin nuk kufizohen vet\u00ebm n\u00eb aplikacionet p\u00ebr konsumator\u00ebt, kriminel\u00ebt mund t\u00eb aksesojn\u00eb edhe aplikacionet q\u00eb funksionojn\u00eb brenda nd\u00ebrmarrjes. Kjo veprimtari u lejon atyre t\u00eb paraqiten si p\u00ebrdorues korporativ\u00eb. Kriminel\u00ebt, duke p\u00ebrdorur pika qasjeje me autentikim t\u00eb dob\u00ebt, mund t\u00eb vjedhin t\u00eb dh\u00ebna dhe t\u00eb kryejn\u00eb aktivitete t\u00eb tjera t\u00eb paligjshme. Fatmir\u00ebsisht, ka masa p\u00ebr t'u kund\u00ebrv\u00ebn\u00eb k\u00ebsaj. Autentikimi i ashp\u00ebr do t\u00eb ndihmoj\u00eb ndjesh\u00ebm n\u00eb uljen e rrezikut t\u00eb sulmeve nga kriminel\u00ebt, si n\u00eb aplikacionet p\u00ebr konsumator\u00ebt ashtu edhe n\u00eb sistemet e biznesit t\u00eb nd\u00ebrmarrjeve.<\/p>\n

Ky studim shqyrton: se si nd\u00ebrmarrjet implementojn\u00eb autentikimin p\u00ebr t\u00eb mbrojtur aplikacionet e p\u00ebrdoruesve dhe sistemet e biznesit; faktor\u00ebt q\u00eb ato marrin parasysh kur zgjedhin nj\u00eb zgjidhje p\u00ebr autentikimin; rolin q\u00eb autentikimi i ashp\u00ebr luan n\u00eb organizatat e tyre; p\u00ebrfitimet q\u00eb k\u00ebto organizata marrin.<\/p>\n

CV<\/h2>\n

<\/p>\n

Konkluzionet kryesore<\/h3>\n

\nQ\u00eb nga viti 2017, \u00ebsht\u00eb rritur ndjesh\u00ebm p\u00ebrqindja e p\u00ebrdorimit t\u00eb autentikimit t\u00eb ashp\u00ebr. <\/b> Me rritjen e numrit t\u00eb dob\u00ebsive q\u00eb prekin zgjidhjet tradicionale p\u00ebr autentikimin, organizatat po forcojn\u00eb kapacitetet e tyre t\u00eb autentikimit me autentikimin e fort\u00eb. Numri i organizatave q\u00eb p\u00ebrdorin autentikimin shum\u00ebfaktor\u00ebsh me p\u00ebrdorim t\u00eb kriptografis\u00eb (MFA) \u00ebsht\u00eb trefishuar q\u00eb nga viti 2017 p\u00ebr konsumator\u00ebt dhe \u00ebsht\u00eb rritur thuajse me 50% p\u00ebr aplikacionet korporative. Rritja m\u00eb e shpejt\u00eb \u00ebsht\u00eb v\u00ebrejtur n\u00eb autentikimin mobil p\u00ebr shkak t\u00eb rritjes s\u00eb disponueshm\u00ebris\u00eb s\u00eb autentikimit biometrik.<\/p>\n

K\u00ebtu shohim iluzionin e th\u00ebnies \"derisa t\u00eb bie rrufe, nuk e b\u00ebn njeri kryqin\". Kur ekspert\u00ebt paralajm\u00ebronin p\u00ebr pasigurin\u00eb e fjal\u00ebkalimeve, askush nuk po ngut\u00ebj t\u00eb implementonte autentikimin dy-faktor\u00ebsh. Sapo haker\u00ebt filluan t\u00eb vjedhin fjal\u00ebkalimet \u2013 njer\u00ebzit filluan t\u00eb implementonin autentikimin dy-faktor\u00ebsh.<\/p>\n

Ndoshta individ\u00ebt po implementojn\u00eb 2FA shum\u00eb m\u00eb aktivisht. S\u00eb pari, k\u00ebshtu ata e gjejn\u00eb m\u00eb t\u00eb leht\u00eb t\u00eb qet\u00ebsojn\u00eb frik\u00ebn e tyre, duke u mb\u00ebshtetur n\u00eb autentikimin biometrik t\u00eb integruar n\u00eb smartphone, q\u00eb n\u00eb t\u00eb v\u00ebrtet\u00eb \u00ebsht\u00eb shum\u00eb jo i besuesh\u00ebm. Nd\u00ebrsa organizatat duhet t\u00eb shpenzojn\u00eb p\u00ebr t\u00eb bler\u00eb tokene dhe t\u00eb kryejn\u00eb pun\u00eb (n\u00eb t\u00eb v\u00ebrtet\u00eb shum\u00eb t\u00eb thjeshta) p\u00ebr implementimin e tyre. S\u00eb dyti, p\u00ebr rrjedhjet e fjal\u00ebkalimeve nga sh\u00ebrbime si Facebook dhe Dropbox nuk ka shkruar vet\u00ebm ai q\u00eb ka qen\u00eb i len\u00eb, nd\u00ebrsa nuk do t\u00eb ndajn\u00eb historit\u00eb e vjedhjeve t\u00eb fjal\u00ebkalimeve (dhe \u00e7far\u00eb ndodhi m\u00eb pas) n\u00eb organizata, drejtor\u00ebt e IT-s\u00eb t\u00eb k\u00ebtyre organizatave n\u00ebn asnj\u00eb kusht. <\/p><\/blockquote>\n

\nAta q\u00eb nuk p\u00ebrdorin autentikimin e fort\u00eb n\u00ebnvler\u00ebsojn\u00eb rrezikun e tyre p\u00ebr biznesin dhe klient\u00ebt. <\/b> Disa organizata, t\u00eb cilat aktualisht nuk p\u00ebrdorin autentikimin e fort\u00eb, jan\u00eb t\u00eb prirura t\u00eb shqyrtojn\u00eb emrat e p\u00ebrdoruesve dhe fjal\u00ebkalimet si nj\u00eb nga metodat m\u00eb efektive dhe m\u00eb t\u00eb lehta p\u00ebr p\u00ebrdorim p\u00ebr autentikimin e p\u00ebrdoruesve. T\u00eb tjer\u00eb nuk shohin vler\u00ebn e aktiveve digjitale q\u00eb zot\u00ebrojn\u00eb. Duhet pasur parasysh q\u00eb kriminel\u00ebt kibernetik\u00eb interesohen p\u00ebr \u00e7do informacion konsumator dhe biznesi. Dy t\u00eb tretat e kompanive q\u00eb p\u00ebrdorin vet\u00ebm fjal\u00ebkalime p\u00ebr autentikimin e punonj\u00ebsve t\u00eb tyre e b\u00ebjn\u00eb k\u00ebt\u00eb, sepse besojn\u00eb se fjal\u00ebkalimet jan\u00eb mjaft t\u00eb mira p\u00ebr llojin e informacionit q\u00eb po mbrojn\u00eb.<\/p>\n

Megjithat\u00eb, fjal\u00ebkalimet jan\u00eb n\u00eb rrug\u00ebn \"e varrimit\". <\/b> Gjat\u00eb vitit t\u00eb kaluar, var\u00ebsia nga fjal\u00ebkalimet \u00ebsht\u00eb ulur ndjesh\u00ebm, si p\u00ebr aplikacionet e konsumator\u00ebve ashtu edhe p\u00ebr ato korporative (nga 44% n\u00eb 31% dhe nga 56% n\u00eb 47% p\u00ebrkat\u00ebsisht), nd\u00ebrsa organizatat po zgjerojn\u00eb p\u00ebrdorimin e MFA tradicionale dhe autentikimit t\u00eb rrept\u00eb.
\nPor n\u00ebse e shohim situat\u00ebn n\u00eb t\u00ebr\u00ebsi, m\u00ebnyrat e brishme t\u00eb autentikimit ende mbizot\u00ebrojn\u00eb. Rreth nj\u00eb e kat\u00ebrta e organizatave p\u00ebrdorin SMS OTP (fjal\u00ebkalim t\u00eb p\u00ebrkohsh\u00ebm) s\u00eb bashku me pyetje sekrete p\u00ebr autentikimin e konsumator\u00ebve. Si rezultat, p\u00ebr t\u00eb mbrojtur nga k\u00ebto dob\u00ebsi, \u00ebsht\u00eb e nevojshme t\u00eb implementohen m\u00ebnyra shtes\u00eb mbrojt\u00ebse, gj\u00eb q\u00eb rrit kostot. P\u00ebrdorimi i metodave m\u00eb t\u00eb sigurta t\u00eb autentikimit, si\u00e7 jan\u00eb \u00e7el\u00ebsat kriptografik\u00eb hardware, \u00ebsht\u00eb shum\u00eb m\u00eb i rrall\u00eb, rreth 5% e organizatave.<\/p>\n

Mjedisi rregullator n\u00eb zhvillim premton t\u00eb p\u00ebrshpejtoj\u00eb implementimin e autentikimit t\u00eb rrept\u00eb p\u00ebr aplikacionet e konsumator\u00ebve. <\/b> Me hyrjen n\u00eb fuqi t\u00eb PSD2, si dhe t\u00eb rregullave t\u00eb reja t\u00eb mbrojtjes s\u00eb t\u00eb dh\u00ebnave n\u00eb BE dhe n\u00eb disa shtete t\u00eb SHBA, si California, kompanit\u00eb e ndiejn\u00eb se situata po b\u00ebhet e nxeht\u00eb. Pothuajse 70% e kompanive bien dakord se po p\u00ebrballen me presion t\u00eb madh rregullator p\u00ebr t\u00eb siguruar autentikimin e rrept\u00eb p\u00ebr klient\u00ebt e tyre. M\u00eb shum\u00eb se gjysma e bizneseve mendojn\u00eb se brenda pak vitesh metodat e tyre t\u00eb autentikimit nuk do t\u00eb jen\u00eb t\u00eb mjaftueshme p\u00ebr t\u00eb p\u00ebrmbushur standartet rregullatore.<\/p>\n

Dallohet qart\u00eb ndryshimi n\u00eb qasjet e ligjv\u00ebn\u00ebsve rus\u00eb dhe amerikano-evropian\u00eb ndaj mbrojtjes s\u00eb t\u00eb dh\u00ebnave personale t\u00eb p\u00ebrdoruesve t\u00eb aplikacioneve dhe sh\u00ebrbimeve. Rus\u00ebt thon\u00eb: pronar\u00eb t\u00eb sh\u00ebrbimeve t\u00eb shtrenjta, b\u00ebni \u00e7far\u00eb t\u00eb doni dhe si t\u00eb doni, por n\u00ebse admini juaj i thith bazat, ne do t'ju nd\u00ebshkojm\u00eb. N\u00eb per\u00ebndim thon\u00eb: ju duhet t\u00eb implementoni nj\u00eb s\u00ebr\u00eb masash q\u00eb nuk do lejojn\u00eb<\/b> rrjedhjen e baz\u00ebs. Pik\u00ebrisht p\u00ebr k\u00ebt\u00eb shkak atje po implementohen k\u00ebrkesat p\u00ebr ekzistenc\u00ebn e autentikimit t\u00eb rrept\u00eb me dy faktor\u00eb.
\nMegjithat\u00eb, nuk \u00ebsht\u00eb aspak e sigurt q\u00eb makineria jon\u00eb legjislative nj\u00eb dit\u00eb nuk do t'i jap\u00eb v\u00ebmendje eksperienc\u00ebs per\u00ebndimore. At\u00ebher\u00eb do t\u00eb rezultoj\u00eb se t\u00eb gjith\u00eb duhet t\u00eb implementojn\u00eb 2FA, p\u00ebrputhsh\u00ebm me standardet kriptografike ruse, dhe jo me urgjenc\u00eb.\n<\/p><\/blockquote>\n

\nKrijimi i nj\u00eb baze t\u00eb besueshme t\u00eb autentikimit lejon kompanit\u00eb t\u00eb zhvendosin fokusin nga p\u00ebrmbushja e k\u00ebrkesave rregullatore te p\u00ebrmbushja e nevojave t\u00eb klient\u00ebve. <\/b> P\u00ebr ata organizata q\u00eb ende p\u00ebrdorin fjal\u00ebkalime t\u00eb thjeshta ose marrin kodet p\u00ebrmes SMS, faktori m\u00eb i r\u00ebnd\u00ebsish\u00ebm n\u00eb zgjedhjen e metod\u00ebs s\u00eb autentikimit do t\u00eb jet\u00eb p\u00ebrputhshm\u00ebria me k\u00ebrkesat rregullatore. Nd\u00ebrsa ato kompani q\u00eb tashm\u00eb p\u00ebrdorin autentikimin e fort\u00eb, mund t\u00eb p\u00ebrqendrohen n\u00eb zgjedhjen e metodave t\u00eb autentikimit q\u00eb rrisin besnik\u00ebrin\u00eb e klient\u00ebve.<\/p>\n

Kur zgjidhni nj\u00eb metod\u00eb autentikimi korporate brenda nd\u00ebrmarrjes, k\u00ebrkesat e rregullator\u00ebve nuk jan\u00eb m\u00eb nj\u00eb faktor i r\u00ebnd\u00ebsish\u00ebm. <\/b> N\u00eb k\u00ebt\u00eb rast, thjesht\u00ebsia e integrimit (32%) dhe costs (26%) jan\u00eb shum\u00eb m\u00eb t\u00eb r\u00ebnd\u00ebsishme. <\/p>\n

N\u00eb epok\u00ebn e phishing-ut, keqb\u00ebr\u00ebsit mund t\u00eb p\u00ebrdorin post\u00ebn elektronike korporative p\u00ebr mashtrim,<\/b> n\u00eb m\u00ebnyr\u00eb t\u00eb padrejt\u00eb p\u00ebr t\u00eb marr\u00eb akses n\u00eb t\u00eb dh\u00ebna, llogari (me p\u00ebrkat\u00ebsit\u00eb p\u00ebrkat\u00ebse t\u00eb qasjes), madje edhe p\u00ebr t\u00eb bindur punonj\u00ebsit q\u00eb t\u00eb kryejn\u00eb nj\u00eb transferim parash n\u00eb llogarin\u00eb e tij. Prandaj, llogarit\u00eb e post\u00ebs elektronike korporative dhe portalet duhet t\u00eb jen\u00eb ve\u00e7an\u00ebrisht t\u00eb mbrojtura.<\/p>\n

Google e forcoi mbrojtjen e tij duke vendosur autentikimin e fort\u00eb.<\/b> M\u00eb shum\u00eb se dy vjet m\u00eb par\u00eb, Google publikoi nj\u00eb raport mbi zbatimin e autentikimit me dy faktor\u00eb t\u00eb bazuar n\u00eb \u00e7el\u00ebsa t\u00eb kriptografis\u00eb, standardi FIDO U2F, duke raportuar rezultate mbres\u00ebl\u00ebn\u00ebse. Sipas kompanis\u00eb, nuk \u00ebsht\u00eb kryer asnj\u00eb sulm phishing ndaj m\u00eb shum\u00eb se 85,000 punonj\u00ebsve. <\/p>\n

Rekomandime<\/h3>\n

\nZbatoni autentikimin e fort\u00eb p\u00ebr aplikacionet mobile dhe online. <\/b> Autentikimi shum\u00eb-faktor\u00ebsh i bazuar n\u00eb \u00e7el\u00ebsa t\u00eb kriptografis\u00eb mbron shum\u00eb m\u00eb mir\u00eb nga thyerjet sesa metodat tradicionale MFA. P\u00ebr m\u00eb tep\u00ebr, p\u00ebrdorimi i \u00e7el\u00ebsave t\u00eb kriptografis\u00eb \u00ebsht\u00eb shum\u00eb m\u00eb i p\u00ebrshtatsh\u00ebm, sepse nuk \u00ebsht\u00eb e nevojshme t\u00eb p\u00ebrdorim dhe t\u00eb shp\u00ebrndajm\u00eb informacion shtes\u00eb \u2014 fjal\u00ebkalime, fjal\u00ebkalime nj\u00eb her\u00ebsh ose t\u00eb dh\u00ebna biometrike nga pajisja e p\u00ebrdoruesit n\u00eb serverin e autentikimit. P\u00ebr m\u00eb tep\u00ebr, standardizimi i protokolleve t\u00eb autentikimit lejon zbatimin m\u00eb t\u00eb leht\u00eb t\u00eb metodave t\u00eb reja t\u00eb autentikimit nd\u00ebrsa ato shfaqen, duke ulur kostot dhe duke mbrojtur nga skemat m\u00eb komplekse t\u00eb mashtrimit.<\/p>\n

P\u00ebrgatituni p\u00ebr mbarimin e fjal\u00ebkalimeve nj\u00eb her\u00ebshe (OTP). <\/b> Dobit\u00eb e OTP po b\u00ebhen gjithnj\u00eb e m\u00eb t\u00eb dukshme, nd\u00ebrsa kriminel\u00ebt kibernetik\u00eb p\u00ebrdorin inxhinierin\u00eb sociale, klonimin e smartphone-ve dhe malware-in p\u00ebr t\u00eb komprometuar k\u00ebto mjete autentikimi. Dhe n\u00ebse OTP n\u00eb disa raste ka avantazhe t\u00eb caktuara, ato jan\u00eb vet\u00ebm nga pik\u00ebpamja e aksesit universale p\u00ebr t\u00eb gjith\u00eb p\u00ebrdoruesit, por jo nga pik\u00ebpamja e siguris\u00eb.<\/p>\n

Nuk mund t\u00eb mos e vini re se marrja e kodeve p\u00ebrmes SMS-it ose njoftimeve Push, si dhe gjenerimi i kod\u00ebve me ndihm\u00ebn e aplikacioneve p\u00ebr smartphone jan\u00eb n\u00eb t\u00eb v\u00ebrtet\u00eb p\u00ebrdorimi i atyre fjal\u00ebve kalimtare (OTP) p\u00ebr t\u00eb cilat na k\u00ebshillohet t\u00eb jemi t\u00eb p\u00ebrgatitur p\u00ebr fundin. Nga pik\u00ebpamja teknike, kjo \u00ebsht\u00eb nj\u00eb zgjidhje shum\u00eb e drejt\u00eb, sepse \u00ebsht\u00eb e rrall\u00eb q\u00eb ndonj\u00eb mashtrues t\u00eb mos p\u00ebrpiqet t\u00eb nxjerr\u00eb nj\u00eb fjal\u00eb kalimtare kalimtare nga nj\u00eb p\u00ebrdorues i besuesh\u00ebm. Por mendoj se prodhuesit e k\u00ebtyre sistemeve do t\u00eb kapen te teknologjia e vdekshme deri n\u00eb fund. <\/p><\/blockquote>\n

P\u00ebrdorni autentikimin e fort\u00eb si nj\u00eb mjet marketingu p\u00ebr t\u00eb rritur besimin e klient\u00ebve. <\/b> Autentikimi i fort\u00eb mund t\u00eb p\u00ebrmir\u00ebsoj\u00eb jo vet\u00ebm sigurin\u00eb faktike t\u00eb biznesit tuaj. Informimi i klient\u00ebve se biznesi juaj p\u00ebrdor autentikimin e fort\u00eb mund t\u00eb forcoj\u00eb perceptimin publik p\u00ebr sigurin\u00eb e k\u00ebtij biznesi \u2014 nj\u00eb faktor i r\u00ebnd\u00ebsish\u00ebm kur ekziston nj\u00eb k\u00ebrkes\u00eb e konsiderueshme nga klient\u00ebt p\u00ebr metoda t\u00eb besueshme autentikimi.<\/p>\n

Kryerja e nj\u00eb inventarizimi t\u00eb kujdessh\u00ebm dhe vler\u00ebsimi i r\u00ebnd\u00ebsis\u00eb s\u00eb t\u00eb dh\u00ebnave kompanike dhe mbrojtja e tyre p\u00ebrkat\u00ebsisht r\u00ebnd\u00ebsis\u00eb. <\/b> Madje, t\u00eb dh\u00ebnat me nivel t\u00eb ul\u00ebt rreziku, si\u00e7 jan\u00eb informacionet kontaktuese t\u00eb klient\u00ebve (jo, v\u00ebrtet, n\u00eb raportin e shkruar \u00ebsht\u00eb \u201clow-risk\u201d, shum\u00eb e \u00e7uditshme q\u00eb ata n\u00ebnvler\u00ebsojn\u00eb r\u00ebnd\u00ebsin\u00eb e k\u00ebsaj informacioni<\/i>), mund t\u00eb ofrojn\u00eb nj\u00eb vler\u00eb t\u00eb konsiderueshme p\u00ebr mashtruesit dhe mund t\u00eb b\u00ebhen shkak p\u00ebr probleme p\u00ebr kompanin\u00eb. <\/p>\n

P\u00ebrdorni autentikimin e fort\u00eb n\u00eb vendin e pun\u00ebs. <\/b> Nj\u00eb s\u00ebr\u00eb sistemesh jan\u00eb objektiva t\u00ebrheq\u00ebs p\u00ebr kriminel\u00ebt. K\u00ebtu p\u00ebrfshihen sisteme t\u00eb brendshme dhe t\u00eb lidhura me internetin, si programet e kontabilitetit ose magazinat e t\u00eb dh\u00ebnave t\u00eb kompanis\u00eb. Autentikimi i fort\u00eb nuk u jep mund\u00ebsi keqb\u00ebr\u00ebsve t\u00eb marrin akses t\u00eb paautorizuar, p\u00ebrve\u00e7se lejon t\u00eb p\u00ebrcaktohet sakt\u00ebsisht se cili nga punonj\u00ebsit ka kryer veprimtari t\u00eb keqe.<\/p>\n

\u00c7far\u00eb \u00ebsht\u00eb autentikimi i rrept\u00eb? <\/h2>\n

\nKur p\u00ebrdoret autentikimi i rrept\u00eb p\u00ebr t\u00eb verifikuar identitetin e p\u00ebrdoruesit, p\u00ebrdoren disa metoda ose faktor\u00eb:<\/p>\n