{"id":32662,"date":"2019-10-31T21:48:16","date_gmt":"2019-10-31T18:48:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chto-budet-s-autentifikatsiej-i-parolyami-perevod-otcheta-javelin-sostoyanie-strogoj-autentifikatsii-s-kommentariyami\/"},"modified":"2019-10-31T21:48:16","modified_gmt":"2019-10-31T18:48:16","slug":"chto-budet-s-autentifikatsiej-i-parolyami-perevod-otcheta-javelin-sostoyanie-strogoj-autentifikatsii-s-kommentariyami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/chto-budet-s-autentifikatsiej-i-parolyami-perevod-otcheta-javelin-sostoyanie-strogoj-autentifikatsii-s-kommentariyami","title":{"rendered":"\u00c7far\u00eb do t\u00eb ndodh\u00eb me autentifikimin dhe fjal\u00ebkalimet? P\u00ebrkthimi i raportit Javelin 'Shteti i autentifikimit t\u00eb fort\u00eb' me komente","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"\u00c7far\u00eb do t\u00eb ndodh\u00eb me autentifikimin dhe fjal\u00ebkalimet? P\u00ebrkthimi i raportit Javelin &#039;Shteti i autentifikimit t\u00eb fort\u00eb&#039; me komente\" src=\"\/wp-content\/uploads\/2019\/04\/8bf86f8c9daa411a24c4a4052f642fad.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSpoileri nga titulli i raportit \"Numri i rasteve t\u00eb p\u00ebrdorimit t\u00eb autentifikimit t\u00eb fort\u00eb \u00ebsht\u00eb rritur p\u00ebr shkak t\u00eb rreziqeve t\u00eb reja dhe k\u00ebrkesave t\u00eb rregullator\u00ebve.\"<br \/>\nKompania k\u00ebrkimore \"Javelin Strategy &amp; Research\" publikoi raportin \"Gjendja e Autentifikimit t\u00eb Fort\u00eb 2019\" (<noindex><a rel=\"nofollow\" href=\"https:\/\/1nmqmp2u9dgf3jo9centu6rq-wpengine.netdna-ssl.com\/wp-content\/uploads\/2019\/01\/The-State-of-Strong-Authentication-2019-Report.pdf\"> originali n\u00eb formatin pdf mund t\u00eb shkarkohet k\u00ebtu<\/a><\/noindex>). N\u00eb k\u00ebt\u00eb raport shkruhet: sa p\u00ebrqind e kompanive amerikane dhe evropiane p\u00ebrdorin fjal\u00ebkalime (dhe pse fjal\u00ebkalimet tani p\u00ebrdoren rrall\u00eb); pse p\u00ebrqindja e p\u00ebrdorimit t\u00eb autentifikimit me dy faktor\u00eb t\u00eb bazuar n\u00eb televizione kriptografike po rritet kaq shpejt; pse kodet nj\u00ebher\u00ebsh t\u00eb d\u00ebrguara me SMS jan\u00eb t\u00eb pasigurta.<\/p>\n<p>T\u00eb gjith\u00eb ata q\u00eb jan\u00eb t\u00eb interesuar p\u00ebr tem\u00ebn e autentifikimit t\u00eb tanish\u00ebm, t\u00eb kaluar dhe t\u00eb ardhsh\u00ebm n\u00eb nd\u00ebrmarrje dhe aplikacione p\u00ebrdoruesi \u2014 mir\u00ebsevini.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\n<b class=\"spoiler_title\">Nga p\u00ebrkthyesi<\/b><\/p>\n<blockquote><p>Fatkeq\u00ebsisht, gjuha me t\u00eb cil\u00ebn \u00ebsht\u00eb shkruar ky raport \u00ebsht\u00eb mjaft \"e that\u00eb\" dhe formale. P\u00ebrdorimi i pes\u00ebfisht\u00eb i fjal\u00ebs \"autentifikim\" n\u00eb nj\u00eb fjali t\u00eb shkurt\u00ebr nuk \u00ebsht\u00eb d\u00ebshtim i p\u00ebrkthyesit, por nj\u00eb kapricio i autor\u00ebve. Kur p\u00ebrktheja nga dy mund\u00ebsi \u2014 t\u2019u jap lexuesve nj\u00eb tekst m\u00eb t\u00eb af\u00ebrt me origjinalin ose nj\u00eb m\u00eb interesant, her\u00eb pas here zgjidhja e par\u00eb, her\u00eb t\u00eb tjera t\u00eb dyt\u00ebn. Por duroni, lexues t\u00eb dashur, p\u00ebrmbajtja e raportit ia vlen.<\/p>\n<p>Disa pjes\u00eb t\u00eb pad \u00cbnshme dhe t\u00eb panevojshme p\u00ebr tregimin u hoq\u00ebn, p\u00ebrndryshe shumica do t\u00eb kishte v\u00ebshtir\u00ebsi ta lexonte t\u00ebr\u00eb tekstin. Ata q\u00eb d\u00ebshirojn\u00eb t\u00eb njohin raportin \"pa cenzur\u00eb\", mund ta b\u00ebjn\u00eb k\u00ebt\u00eb n\u00eb gjuh\u00ebn origjinale, duke ndjekur lidhjen.<\/p>\n<p>Fatkeq\u00ebsisht, autor\u00ebt nuk jan\u00eb gjithmon\u00eb t\u00eb sakt\u00eb me terminologjin\u00eb. K\u00ebshtu, fjal\u00ebkalimet nj\u00ebher\u00ebsh (One Time Password \u2013 OTP) ndonj\u00ebher\u00eb i quajn\u00eb \"fjal\u00ebkalime\", dhe ndonj\u00ebher\u00eb \"kode\". Me metodat e autentifikimit \u00ebsht\u00eb edhe m\u00eb keq. Lexuesit e pa p\u00ebrgatitur nuk e kan\u00eb gjithmon\u00eb t\u00eb leht\u00eb t\u00eb kuptojn\u00eb se \"autentifikimi q\u00eb p\u00ebrdor \u00e7el\u00ebsa kriptografik\u00eb\" dhe \"autentifikimi i fort\u00eb\" jan\u00eb t\u00eb nj\u00ebjtat. Kam p\u00ebrpiqur t\u00eb unifikoj terminologjin\u00eb sa m\u00eb shum\u00eb q\u00eb t\u00eb jet\u00eb e mundur, prandaj n\u00eb raport ka nj\u00eb fragment me p\u00ebrshkrimin e tyre.<\/p>\n<p><b>Megjithat\u00eb, raporti rekomandohet me ngulm p\u00ebr t'u lexuar, pasi p\u00ebrmban rezultate unike k\u00ebrkimore dhe p\u00ebrfundime t\u00eb sakta. <\/b><\/p>\n<p>T\u00eb gjitha numrat dhe faktet jan\u00eb dh\u00ebn\u00eb pa asnj\u00eb ndryshim, dhe n\u00ebse nuk jeni dakord me to, \u00ebsht\u00eb m\u00eb mir\u00eb t\u00eb mos diskutoni me p\u00ebrkthyesin, por me autor\u00ebt e raportit. Komentet e mia (t\u00eb formatteruara si citate, dhe n\u00eb tekst t\u00eb sh\u00ebnuara <i>me italik<\/i>) jan\u00eb gjykimi im dhe do t\u00eb jem i lumtur t\u00eb diskutoj p\u00ebr secilin prej tyre (ashtu si edhe p\u00ebr cil\u00ebsin\u00eb e p\u00ebrkthimit). <\/p><\/blockquote>\n<p><\/p>\n<h2>P\u00ebrmbledhje<\/h2>\n<p>\nN\u00eb koh\u00ebt moderne, kanalet digjitale t\u00eb komunikimit me klient\u00ebt jan\u00eb m\u00eb t\u00eb r\u00ebnd\u00ebsishme se kurr\u00eb p\u00ebr bizneset. Edhe brenda nd\u00ebrmarrjes, komunikimet midis punonj\u00ebsve jan\u00eb m\u00eb shum\u00eb t\u00eb orientuara drejt ambientit digjital se kurr\u00eb m\u00eb par\u00eb. Dhe sa m\u00eb t\u00eb sigurta t\u00eb jen\u00eb k\u00ebto nd\u00ebrveprime, aq m\u00eb shum\u00eb varet nga metoda e zgjedhur p\u00ebr autentifikimin e p\u00ebrdoruesve. Kriminel\u00ebt p\u00ebrdorin autentifikimin e dob\u00ebt p\u00ebr sulme n\u00eb mas\u00eb ndaj llogarive t\u00eb p\u00ebrdoruesve. N\u00eb p\u00ebrgjigje, autoritetet rregullatore po forcojn\u00eb standardet, p\u00ebr t'i detyruar bizneset t\u00eb mbrojn\u00eb m\u00eb mir\u00eb llogarit\u00eb dhe t\u00eb dh\u00ebnat e p\u00ebrdoruesve.<\/p>\n<p>K\u00ebrc\u00ebnimet q\u00eb lidhen me autentifikimin nuk p\u00ebrfshijn\u00eb vet\u00ebm aplikacionet p\u00ebr konsumator\u00eb, kriminel\u00ebt mund t\u00eb ken\u00eb qasje edhe n\u00eb aplikacionin q\u00eb punon brenda nd\u00ebrmarrjes. Kjo lejon ata t\u00eb b\u00ebhen identifikues si p\u00ebrdorues t\u00eb korporat\u00ebs. Kriminel\u00ebt, duke p\u00ebrdorur pikat e qasjes me autentifikim t\u00eb dob\u00ebt, mund t\u00eb vjedhin t\u00eb dh\u00ebna dhe t\u00eb kryejn\u00eb aktivitete t\u00eb tjera mashtruese. P\u00ebr fat, ekzistojn\u00eb masa p\u00ebr t'u luftuar. Autentifikimi i fort\u00eb do t\u00eb ndihmoj\u00eb duksh\u00ebm n\u00eb uljen e rrezikut nga sulmi i kriminel\u00ebve, si n\u00eb aplikacionet p\u00ebr konsumator\u00eb ashtu edhe n\u00eb sistemet e biznesit t\u00eb nd\u00ebrmarrjeve.<\/p>\n<p>Ky studim shqyrton: si nd\u00ebrmarrjet zbatojn\u00eb autentifikimin p\u00ebr t\u00eb mbrojtur aplikacionet e p\u00ebrdoruesve dhe sistemet e biznesit t\u00eb nd\u00ebrmarrjeve; faktor\u00ebt q\u00eb ata marrin parasysh kur zgjedhin zgjidhjet p\u00ebr autentifikimin; rolin q\u00eb autentifikimi i fort\u00eb luan n\u00eb organizatat e tyre; p\u00ebrfitimet q\u00eb k\u00ebto organizata k\u00ebto marrin.<\/p>\n<h2>Curriculum Vitae<\/h2>\n<p><\/p>\n<h3> Konkluzionet kryesore<\/h3>\n<p>\n<b>Q\u00eb nga viti 2017, p\u00ebrqindja e p\u00ebrdorimit t\u00eb autentifikimit t\u00eb fort\u00eb \u00ebsht\u00eb rritur ndjesh\u00ebm. <\/b> Me rritjen e numrit t\u00eb dob\u00ebsive q\u00eb prekin zgjidhjet tradicionale p\u00ebr autentifikimin, organizatat po forcojn\u00eb kapacitetet e tyre t\u00eb autentifikimit me autentifikimin e fort\u00eb. Numri i organizatave q\u00eb p\u00ebrdorin autentifikimin me shum\u00eb faktor\u00eb duke p\u00ebrdorur kriptografi (MFA) \u00ebsht\u00eb trefishuar q\u00eb nga viti 2017 p\u00ebr aplikacionet p\u00ebr konsumator\u00eb dhe \u00ebsht\u00eb rritur gati 50% p\u00ebr aplikacionet p\u00ebr biznese. Rritja m\u00eb e shpejt\u00eb v\u00ebrehet n\u00eb autentifikimin mobil p\u00ebr shkak t\u00eb rritjes s\u00eb disponueshm\u00ebris\u00eb s\u00eb autentifikimit biometrik.<\/p>\n<blockquote><p>\u0417\u0434\u0435\u0441\u044c \u043c\u044b \u0432\u0438\u0434\u0438\u043c \u0438\u043b\u043b\u044e\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u043a\u0438 \u00ab\u043f\u043e\u043a\u0430 \u0433\u0440\u043e\u043c \u043d\u0435 \u0433\u0440\u044f\u043d\u0435\u0442 \u2013 \u043c\u0443\u0436\u0438\u043a \u043d\u0435 \u043f\u0435\u0440\u0435\u043a\u0440\u0435\u0441\u0442\u0438\u0442\u0441\u044f\u00bb. \u041a\u043e\u0433\u0434\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0438 \u043e \u043d\u0435\u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u0442\u043e\u0440\u043e\u043f\u0438\u043b\u0441\u044f \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e. \u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u2013 \u043d\u0430\u0440\u043e\u0434 \u0441\u0442\u0430\u043b \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.<\/p>\n<p>\u041f\u0440\u0430\u0432\u0434\u0430 \u0447\u0430\u0441\u0442\u043d\u044b\u0435 \u043b\u0438\u0446\u0430 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u0435\u0435 \u0432\u043d\u0435\u0434\u0440\u044f\u044e\u0442 2\u0424\u0410. \u0412\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u0442\u0430\u043a \u0438\u043c \u043f\u0440\u043e\u0449\u0435 \u0443\u0441\u043f\u043e\u043a\u043e\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0442\u0440\u0430\u0445\u0438, \u0443\u043f\u043e\u0432\u0430\u044f \u043d\u0430 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b \u0431\u0438\u043e\u043c\u0435\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043d\u0430 \u0434\u0435\u043b\u0435 \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u043d\u0430\u0434\u0451\u0436\u043d\u0443\u044e. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0436\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u043e\u0442\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043d\u0430 \u043f\u0440\u0438\u043e\u0431\u0440\u0435\u0442\u0435\u043d\u0438\u0435 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0440\u0430\u0431\u043e\u0442\u044b (\u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u0440\u043e\u0441\u0442\u044b\u0435) \u043f\u043e \u0438\u0445 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e. \u0410 \u0432\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, \u043f\u0440\u043e \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u0437 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0442\u0438\u043f\u0430 Facebook \u0438 Dropbox \u043d\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043b \u0442\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u043d\u0438\u0432\u044b\u0439, \u0430 \u0432\u043e\u0442 \u0438\u0441\u0442\u043e\u0440\u0438\u044f\u043c\u0438 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u0432\u043e\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u0430\u0440\u043e\u043b\u0438 (\u0438 \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u0434\u0430\u043b\u044c\u0448\u0435) \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445, \u0418\u0422-\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0430 \u044d\u0442\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043d\u0435 \u043f\u043e\u0434\u0435\u043b\u044f\u0442\u0441\u044f \u043d\u0438 \u043f\u0440\u0438 \u043a\u0430\u043a\u0438\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. <\/p><\/blockquote>\n<p>\n<b>\u0422\u0435, \u043a\u0442\u043e \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u0442\u0440\u043e\u0433\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043d\u0435\u0434\u043e\u043e\u0446\u0435\u043d\u0438\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u0431\u0438\u0437\u043d\u0435\u0441\u0430 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. <\/b> \u041e\u0434\u043d\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u0442\u0440\u043e\u0433\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0441\u043a\u043b\u043e\u043d\u043d\u044b \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u043b\u043e\u0433\u0438\u043d\u044b \u0438 \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u0430\u043a \u043e\u0434\u0438\u043d \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0438 \u043f\u0440\u043e\u0441\u0442\u044b\u0445 \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0414\u0440\u0443\u0433\u0438\u0435 \u043d\u0435 \u0432\u0438\u0434\u044f\u0442 \u0446\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u0430\u043a\u0442\u0438\u0432\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u0432\u043b\u0430\u0434\u0435\u044e\u0442. \u0412\u0435\u0434\u044c \u0441\u0442\u043e\u0438\u0442 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0442\u043e, \u0447\u0442\u043e \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430 \u043b\u044e\u0431\u0430\u044f \u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u0438 \u0434\u0435\u043b\u043e\u0432\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f. \u0414\u0432\u0435 \u0442\u0440\u0435\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0432\u043e\u0438\u0445 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432, \u0434\u0435\u043b\u0430\u044e\u0442 \u044d\u0442\u043e, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0441\u0447\u0438\u0442\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0445\u043e\u0440\u043e\u0448\u0438 \u0434\u043b\u044f \u0442\u043e\u0433\u043e \u0442\u0438\u043f\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u043d\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u044e\u0442.<\/p>\n<p><b>\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043f\u0430\u0440\u043e\u043b\u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u043d\u0430 \u043f\u0443\u0442\u0438 \u00ab\u0432 \u043c\u043e\u0433\u0438\u043b\u0443\u00bb. <\/b> \u0417\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0433\u043e\u0434 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043d\u0438\u0437\u0438\u043b\u0430\u0441\u044c, \u043a\u0430\u043a \u0434\u043b\u044f \u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (\u0441 44% \u0434\u043e 31%, \u0438 \u043e\u0442 56% \u0434\u043e 47% \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e), \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u044e\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e\u0439 MFA \u0438 \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.<br \/>\n\u041d\u043e \u0435\u0441\u043b\u0438 \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0432 \u0446\u0435\u043b\u043e\u043c, \u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043f\u0440\u0435\u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0442. \u0414\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u043a\u043e\u043b\u043e \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 SMS OTP (\u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c) \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u043c\u0438 \u0432\u043e\u043f\u0440\u043e\u0441\u0430\u043c\u0438. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b, \u0447\u0442\u043e \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u0437\u0430\u0442\u0440\u0430\u0442\u044b. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0431\u043e\u043b\u0435\u0435 \u043d\u0430\u0434\u0451\u0436\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043b\u044e\u0447\u0438, \u043d\u0430\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0440\u0435\u0436\u0435, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 5% \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.<\/p>\n<p><b>\u0420\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u043e\u0440\u043c\u0430\u0442\u0438\u0432\u043d\u043e-\u043f\u0440\u0430\u0432\u043e\u0432\u0430\u044f \u0441\u0440\u0435\u0434\u0430 \u043e\u0431\u0435\u0449\u0430\u0435\u0442 \u0443\u0441\u043a\u043e\u0440\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. <\/b> \u0421 \u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0435\u043c PSD2, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u0430\u0432\u0438\u043b \u0437\u0430\u0449\u0438\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0415\u0421 \u0438 \u0440\u044f\u0434\u0435 \u0448\u0442\u0430\u0442\u043e\u0432 \u0421\u0428\u0410, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u044f, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0447\u0443\u0432\u0441\u0442\u0432\u0443\u044e\u0442, \u0447\u0442\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0436\u0430\u0440\u043a\u043e. \u041f\u043e\u0447\u0442\u0438 70% \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u044b \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d\u0438 \u0441\u0442\u0430\u043b\u043a\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0441 \u0441\u0438\u043b\u044c\u043d\u044b\u043c \u0440\u0435\u0433\u0443\u043b\u044f\u0442\u043e\u0440\u043d\u044b\u043c \u0434\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u0411\u043e\u043b\u0435\u0435 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u044b \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0439 \u0441\u0447\u0438\u0442\u0430\u044e\u0442, \u0447\u0442\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u043e\u0440\u043c\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430\u043c.<\/p>\n<blockquote><p>\u0425\u043e\u0440\u043e\u0448\u043e \u0437\u0430\u043c\u0435\u0442\u043d\u0430 \u0440\u0430\u0437\u043d\u0438\u0446\u0430 \u0432 \u043f\u043e\u0434\u0445\u043e\u0434\u0430\u0445 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u0438 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u043e-\u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0438\u0445 \u0437\u0430\u043a\u043e\u043d\u043e\u0434\u0430\u0442\u0435\u043b\u0435\u0439 \u043a \u0437\u0430\u0449\u0438\u0442\u0435 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432. \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u0433\u043e\u0432\u043e\u0440\u044f\u0442: \u0434\u043e\u0440\u043e\u0433\u0438\u0435 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u044b \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u0434\u0435\u043b\u0430\u0439\u0442\u0435 \u0447\u0442\u043e \u0445\u043e\u0442\u0438\u0442\u0435 \u0438 \u043a\u0430\u043a \u0445\u043e\u0442\u0438\u0442\u0435, \u043d\u043e \u0435\u0441\u043b\u0438 \u0432\u0430\u0448 \u0430\u0434\u043c\u0438\u043d \u0441\u043e\u043b\u044c\u0435\u0442 \u0431\u0430\u0437\u0443, \u0442\u043e \u043c\u044b \u0432\u0430\u0441 \u043d\u0430\u043a\u0430\u0436\u0435\u043c. \u0417\u0430 \u0440\u0443\u0431\u0435\u0436\u043e\u043c \u0433\u043e\u0432\u043e\u0440\u044f\u0442: \u0432\u044b \u0434\u043e\u043b\u0436\u043d\u044b \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441 \u043c\u0435\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 <b>\u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442<\/b> \u0441\u043b\u0438\u0442\u044c \u0431\u0430\u0437\u0443. \u0418\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0442\u0430\u043c \u0432\u043e\u0432\u0441\u044e \u0432\u043d\u0435\u0434\u0440\u044f\u044e\u0442\u0441\u044f \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043a \u043d\u0430\u043b\u0438\u0447\u0438\u044e \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.<br \/>\n\u041f\u0440\u0430\u0432\u0434\u0430, \u0434\u0430\u043b\u0435\u043a\u043e \u043d\u0435 \u0444\u0430\u043a\u0442, \u0447\u0442\u043e \u043d\u0430\u0448\u0430 \u0437\u0430\u043a\u043e\u043d\u043e\u0434\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u043c\u0430\u0448\u0438\u043d\u0430 \u0432 \u043e\u0434\u0438\u043d \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435 \u043e\u043f\u043e\u043c\u043d\u0438\u0442\u0441\u044f \u0438 \u043d\u0435 \u0443\u0447\u0442\u0451\u0442 \u0437\u0430\u043f\u0430\u0434\u043d\u044b\u0439 \u043e\u043f\u044b\u0442. \u0412\u043e\u0442 \u0442\u043e\u0433\u0434\u0430 \u043e\u043a\u0430\u0436\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432\u0441\u0435\u043c \u043d\u0443\u0436\u043d\u043e \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c 2\u0424\u0410, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u043c \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430\u043c, \u043f\u0440\u0438\u0447\u0451\u043c \u0441\u0440\u043e\u0447\u043d\u043e.\n<\/p><\/blockquote>\n<p>\n<b>\u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0439 \u043e\u0441\u043d\u043e\u0432\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c \u0441\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0430\u043a\u0446\u0435\u043d\u0442 \u0441 \u0443\u0434\u043e\u0432\u043b\u0435\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u044f \u043d\u043e\u0440\u043c\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0439 \u043d\u0430 \u0443\u0434\u043e\u0432\u043b\u0435\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u0435 \u043f\u043e\u0442\u0440\u0435\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. <\/b> \u0414\u043b\u044f \u0442\u0435\u0445, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043a\u0430 \u0435\u0449\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u043e\u0432 \u043f\u043e SMS, \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u043c \u0444\u0430\u043a\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u0438 \u0432\u044b\u0431\u043e\u0440\u0435 \u043c\u0435\u0442\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u043d\u043e\u0440\u043c\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c. \u0410 \u0432\u043e\u0442 \u0442\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u0442\u0440\u043e\u0433\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0438\u0442\u044c\u0441\u044f \u043d\u0430 \u0432\u044b\u0431\u043e\u0440\u0435 \u0442\u0435\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0432\u044b\u0448\u0430\u044e\u0442 \u043b\u043e\u044f\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.<\/p>\n<p><b>\u041f\u0440\u0438 \u0432\u044b\u0431\u043e\u0440\u0435 \u043c\u0435\u0442\u043e\u0434\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u0433\u0443\u043b\u044f\u0442\u043e\u0440\u043e\u0432 \u0443\u0436\u0435 \u043d\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u043c \u0444\u0430\u043a\u0442\u043e\u0440\u043e\u043c. <\/b> \u0412 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0432\u0430\u0436\u043d\u0435\u0435 \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u0430 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 (32%) \u0438 \u0441\u0442\u043e\u0438\u043c\u043e\u0441\u0442\u044c (26%). <\/p>\n<p><b>N\u00eb epok\u00ebn e phishing-ut, kriminel\u00ebt mund t\u00eb p\u00ebrdorin emailin korporativ p\u00ebr mashtrime,<\/b> p\u00ebr t\u00eb marr\u00eb akses n\u00eb t\u00eb dh\u00ebna, llogari (me t\u00eb drejtat p\u00ebrkat\u00ebse), dhe madje p\u00ebr t\u00eb bindur punonj\u00ebsit t\u00eb kryejn\u00eb nj\u00eb transfer t\u00eb parave n\u00eb llogarin\u00eb e tij. Prandaj, llogarit\u00eb e emailit korporativ dhe portaleve duhet t\u00eb jen\u00eb t\u00eb ve\u00e7anta t\u00eb mbrojtura mir\u00eb.<\/p>\n<p><b>Google ka fuqizuar mbrojtjen e tij duke zbatuar autentifikimin e fort\u00eb.<\/b> M\u00eb shum\u00eb se dy vite m\u00eb par\u00eb, Google publikoi nj\u00eb raport mbi zbatimin e autentifikimit me dy faktor\u00eb n\u00eb baz\u00eb t\u00eb \u00e7el\u00ebsave t\u00eb siguris\u00eb sipas standardit FIDO U2F, duke raportuar rezultate mbres\u00ebl\u00ebn\u00ebse. Sipas kompanis\u00eb, nuk ka pasur asnj\u00eb sulm phishing ndaj m\u00eb shum\u00eb se 85,000 punonj\u00ebsve. <\/p>\n<h3>R rekomandimet<\/h3>\n<p>\n<b>Zbatoni autentifikimin e fort\u00eb p\u00ebr aplikacionet mobile dhe ato online. <\/b> Autentifikimi multifaktoror n\u00eb baz\u00eb t\u00eb \u00e7el\u00ebsave t\u00eb siguris\u00eb \u00ebsht\u00eb shum\u00eb m\u00eb i sigurt kund\u00ebr thyerjeve sesa metodat tradicionale t\u00eb MFA. P\u00ebr m\u00eb tep\u00ebr, p\u00ebrdorimi i \u00e7el\u00ebsave t\u00eb siguris\u00eb \u00ebsht\u00eb shum\u00eb m\u00eb i p\u00ebrshtatsh\u00ebm, sepse nuk k\u00ebrkon t\u00eb p\u00ebrdoren dhe transferohen informacione shtes\u00eb \u2014 fjal\u00ebkalime, fjal\u00ebkalime t\u00eb nj\u00ebhershme ose t\u00eb dh\u00ebna biometrike nga pajisja e p\u00ebrdoruesit n\u00eb serverin e autentikimit. Gjithashtu, standardizimi i protokolleve t\u00eb autentifikimit lejon implementimin e m\u00eb shum\u00eb metodave t\u00eb reja t\u00eb autentifikimit si\u00e7 shfaqen, duke ulur kostot e p\u00ebrdorimit dhe duke mbrojtur nga skemat m\u00eb t\u00eb komplikuara t\u00eb mashtrimit.<\/p>\n<p><b>P\u00ebrgatituni p\u00ebr per\u00ebndimin e fjal\u00ebkalimeve t\u00eb nj\u00ebhershme (OTP). <\/b> Rreziqet e lidhura me OTP po b\u00ebhen gjithnj\u00eb e m\u00eb t\u00eb dukshme n\u00eb nj\u00eb koh\u00eb kur kriminel\u00ebt kibernetik\u00eb p\u00ebrdorin inxhinierin\u00eb sociale, klonimin e smartfon\u00ebve dhe malware p\u00ebr t\u00eb kompromentuar k\u00ebto mjete autentikimi. Dhe n\u00ebse OTP-t\u00eb kan\u00eb ndonj\u00ebher\u00eb disa p\u00ebrfitime, ato jan\u00eb vet\u00ebm sa i p\u00ebrket aksesueshm\u00ebris\u00eb universale p\u00ebr t\u00eb gjith\u00eb p\u00ebrdoruesit, por jo n\u00eb aspektin e siguris\u00eb.<\/p>\n<blockquote><p>Nuk mund t\u00eb mos v\u00ebresh se marrja e kodit p\u00ebrmes SMS-\u00ebve apo njoftimeve Push, si dhe gjenerimi i kodit p\u00ebrmes aplikacioneve p\u00ebr smartfon\u00eb \u00ebsht\u00eb pik\u00ebrisht p\u00ebrdorimi i atyre fjal\u00ebkalimeve t\u00eb nj\u00ebhershme (OTP) p\u00ebr t\u00eb cilat na ofrohet p\u00ebrgatitja p\u00ebr per\u00ebndimin. Teknikisht, kjo \u00ebsht\u00eb nj\u00eb zgjidhje shum\u00eb e duhur, sepse rrall\u00eb ndonj\u00eb mashtrues nuk p\u00ebrpiqet t\u00eb nxjerr\u00eb nj\u00eb fjal\u00ebkalim t\u00eb nj\u00ebhersh\u00ebm nga nj\u00eb p\u00ebrdorues besnik. Por mendoj se prodhuesit e sistemeve t\u00eb tilla do t\u00eb mbahen deri n\u00eb fund pas teknologjis\u00eb s\u00eb vdekur. <\/p><\/blockquote>\n<p><b>P\u00ebrdorni autentifikimin e fort\u00eb si nj\u00eb mjet marketingu p\u00ebr t\u00eb rritur besimin e klient\u00ebve. <\/b> Autentifikimi i fort\u00eb nuk p\u00ebrmir\u00ebson vet\u00ebm sigurin\u00eb faktike t\u00eb biznesit tuaj. Informimi i klient\u00ebve se biznesi juaj p\u00ebrdor autentifikimin e fort\u00eb mund t\u00eb forcoj\u00eb perceptimin publik p\u00ebr sigurin\u00eb e k\u00ebtij biznesi \u2014 nj\u00eb faktor i r\u00ebnd\u00ebsish\u00ebm kur ekziston nj\u00eb k\u00ebrkes\u00eb e konsiderueshme nga klient\u00ebt p\u00ebr metoda t\u00eb besueshme autentifikimi.<\/p>\n<p><b>Kryeni nj\u00eb inventar t\u00eb holl\u00eb dhe vler\u00ebsimin e r\u00ebnd\u00ebsis\u00eb s\u00eb t\u00eb dh\u00ebnave korporative dhe mbrojini sipas r\u00ebnd\u00ebsis\u00eb. <\/b> Edhe t\u00eb dh\u00ebnat me nivel t\u00eb ul\u00ebt rreziku, si informacioni kontaktues i klient\u00ebve (<i>jo, me t\u00eb v\u00ebrtet\u00eb, n\u00eb raport thuhet \"low-risk\", shum\u00eb e \u00e7uditshme q\u00eb ata e n\u00ebnvler\u00ebsojn\u00eb r\u00ebnd\u00ebsin\u00eb e k\u00ebsaj informacioni<\/i>), mund t\u00eb sjellin vler\u00eb t\u00eb konsiderueshme p\u00ebr mashtruesit dhe t\u00eb b\u00ebhen shkak p\u00ebr probleme p\u00ebr kompanin\u00eb. <\/p>\n<p><b>P\u00ebrdorni autentifikimin e fort\u00eb n\u00eb nd\u00ebrmarrje. <\/b> Nj\u00eb s\u00ebr\u00eb sistemesh jan\u00eb q\u00ebllime mjaft t\u00ebrheq\u00ebse p\u00ebr kriminel\u00ebt. K\u00ebto p\u00ebrfshijn\u00eb sisteme t\u00eb brendshme dhe t\u00eb lidhura me internetin, si programet e kontabilitetit ose depozitat e t\u00eb dh\u00ebnave korporative. Autentifikimi i fort\u00eb nuk u ofron kriminel\u00ebve akses t\u00eb paautorizuar, si dhe lejon t\u00eb p\u00ebrcaktohet sakt\u00ebsisht k\u00eb nga punonj\u00ebsit e ka kryer veprimtari t\u00eb keqe.<\/p>\n<h2> \u00c7far\u00eb \u00ebsht\u00eb autentifikimi i fort\u00eb? <\/h2>\n<p>\nN\u00eb p\u00ebrdorimin e autentifikimit t\u00eb fort\u00eb, p\u00ebr t\u00eb verifikuar identitetin e p\u00ebrdoruesit p\u00ebrdoren disa metoda ose faktor\u00eb:<\/p>\n<ul>\n<li><b>Faktori i njohur:<\/b> sekret i p\u00ebrbashk\u00ebt midis p\u00ebrdoruesit dhe subjektit t\u00eb verifikimit t\u00eb identitetit (si fjal\u00ebkalime, p\u00ebrgjigje n\u00eb pyetje sekrete etj.)<\/li>\n<li><b>Faktori i pron\u00ebsis\u00eb:<\/b> nj\u00eb pajisje q\u00eb e ka vet\u00ebm p\u00ebrdoruesi (si nj\u00eb pajisje mobile, \u00e7el\u00ebs kriptografik etj.)<\/li>\n<li><b>Faktori i pashtjerrshm\u00ebris\u00eb:<\/b> karakteristika fizike (shpesh biometrike) t\u00eb p\u00ebrdoruesit (si gjurm\u00eb t\u00eb gishtave, modele t\u00eb irisit t\u00eb syve, z\u00ebri, sjellja etj.)<\/li>\n<\/ul>\n<p>\nNevoja p\u00ebr t\u00eb kaluar disa faktor\u00eb rrit ndjesh\u00ebm mund\u00ebsin\u00eb e d\u00ebshtimit p\u00ebr hakerat, pasi kalimi ose mashtrimi i faktor\u00ebve t\u00eb ndrysh\u00ebm k\u00ebrkon p\u00ebrdorimin e disa llojeve t\u00eb taktikave t\u00eb sulmit p\u00ebr \u00e7do faktor t\u00eb ve\u00e7ant\u00eb.<\/p>\n<blockquote><p> P\u00ebr shembull, me 2FA \"fjal\u00ebkalimi + smartphone\", nj\u00eb haker mund t\u00eb kryej\u00eb autentifikimin duke spiunuar fjal\u00ebkalimin e p\u00ebrdoruesit dhe duke b\u00ebr\u00eb nj\u00eb kopje \u0442\u043e\u0447\u043d\u0443\u044e t\u00eb pajisjes s\u00eb tij. Kjo \u00ebsht\u00eb shum\u00eb m\u00eb e v\u00ebshtir\u00eb se thjesht t\u00eb vjedh\u00ebsh fjal\u00ebkalimin. <\/p>\n<p>Por, n\u00ebse p\u00ebr 2FA p\u00ebrdoret nj\u00eb fjal\u00ebkalim dhe nj\u00eb token kriptografik, at\u00ebher\u00eb mund\u00ebsia e kopjimit nuk funksionon k\u00ebtu - ndarja e tokenit \u00ebsht\u00eb e pamundur. Hakeri do t\u00eb duhet t\u00eb vjedh\u00eb n\u00eb m\u00ebnyr\u00eb t\u00eb padukshme tokenin nga p\u00ebrdoruesi. N\u00ebse p\u00ebrdoruesi e v\u00ebren n\u00eb koh\u00eb humbjen dhe e njofton administratorin, at\u00ebher\u00eb tokeni do t\u00eb bllokohet dhe p\u00ebrpjekjet e hakerit do t\u00eb jen\u00eb t\u00eb kota. Prandaj, p\u00ebr faktor\u00ebt e pron\u00ebsis\u00eb duhet t\u00eb p\u00ebrdoren pajisje t\u00eb specializuara t\u00eb mbrojtura (token), jo pajisje t\u00eb zakonshme (smartphone).<\/p>\n<p>P\u00ebrdorimi i t\u00eb tri faktor\u00ebve do ta b\u00ebnte k\u00ebt\u00eb metod\u00eb autentifikimi mjaft t\u00eb shtrenjt\u00eb p\u00ebr t'u zbatuar dhe mjaft t\u00eb paqart\u00eb p\u00ebr t'u p\u00ebrdorur. Prandaj zakonisht p\u00ebrdoren dy faktor\u00eb nga tre.<\/p>\n<p>Parimet e autentifikimit me dy faktor\u00eb jan\u00eb p\u00ebrshkruar m\u00eb holl\u00ebsisht <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/aktiv-company\/blog\/436926\/\">k\u00ebtu<\/a><\/noindex>, n\u00eb bllokun \"Si funksionon autentifikimi me dy faktor\u00eb\". <\/p><\/blockquote>\n<p>\n<b>\u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb theksohet se t\u00eb pakt\u00ebn nj\u00eb nga faktor\u00ebt e autentifikimit, t\u00eb p\u00ebrdorur n\u00eb autentifikimin e rrept\u00eb, duhet t\u00eb p\u00ebrdor\u00eb kriptografi bazuar n\u00eb \u00e7el\u00ebsin publik.<\/b><\/p>\n<p>Autentifikimi i rrept\u00eb ofron mbrojtje shum\u00eb m\u00eb serioze sesa autentifikimi me nj\u00eb faktor bazuar n\u00eb fjal\u00ebkalime klasike dhe MFA tradicionale. Fjal\u00ebkalimet mund t\u00eb spiunohen ose t\u00eb kapen me an\u00eb t\u00eb keylogger-\u00ebve, faqeve t\u00eb phishing-ut ose sulmeve t\u00eb bazuara n\u00eb inxhinierin\u00eb sociale (kur viktima e mashtruar e tregon vet\u00eb fjal\u00ebkalimin e saj). Dhe pronari i fjal\u00ebkalimit nuk do t\u00eb dij\u00eb asgj\u00eb p\u00ebr faktin e vjedhjes. MFA tradicionale (e cila p\u00ebrfshin kodet OTP, lidhjen me smartphone-in ose kart\u00ebn SIM) gjithashtu mund t\u00eb jet\u00eb mjaft leht\u00ebsisht e komprometuar, pasi nuk bazohet n\u00eb kriptografin\u00eb e \u00e7el\u00ebsit publik (<i>p\u00ebr t'u v\u00ebn\u00eb re, ekzistojn\u00eb shum\u00eb raste kur me an\u00eb t\u00eb teknikave t\u00eb nj\u00ebjta inxhinierie sociale, mashtruesit kan\u00eb bindur p\u00ebrdoruesit t\u00eb tregojn\u00eb nj\u00eb fjal\u00ebkalim t\u00eb nj\u00ebhersh\u00ebm.<\/i>).<\/p>\n<p>Fatmir\u00ebsisht, q\u00eb nga viti i kaluar, p\u00ebrdorimi i autentifikimit t\u00eb rrept\u00eb dhe MFA tradicionale \u00ebsht\u00eb duke mbledhur forc\u00eb si n\u00eb aplikacionet p\u00ebr konsumator\u00ebt ashtu edhe n\u00eb ato korporative. P\u00ebrdorimi i autentifikimit t\u00eb rrept\u00eb n\u00eb aplikacionet p\u00ebr konsumator\u00ebt \u00ebsht\u00eb rritur ve\u00e7an\u00ebrisht shpejt. N\u00eb vitin 2017, vet\u00ebm 5% e kompanive e p\u00ebrdornin at\u00eb, nd\u00ebrsa n\u00eb vitin 2018 numri ishte trefishuar - 16%. Kjo mund t\u00eb shpjegohet nga disponueshm\u00ebria n\u00eb rritje e tokeneve q\u00eb mb\u00ebshtesin algoritmet e kriptografis\u00eb me \u00e7el\u00ebs publik (Public Key Cryptography - PKC). P\u00ebr m\u00eb tep\u00ebr, rritja e presionit nga rregullator\u00ebt evropian\u00eb pas miratimit t\u00eb rregulloreve t\u00eb reja p\u00ebr mbrojtjen e informacionit, si PSD2 dhe GDPR, kishte nj\u00eb efekt t\u00eb fuqish\u00ebm edhe jasht\u00eb Evrop\u00ebs (<i>p\u00ebrfshir\u00eb edhe Russin\u00eb<\/i>).<\/p>\n<p><img decoding=\"async\" alt=\"\u00c7far\u00eb do t\u00eb ndodh\u00eb me autentifikimin dhe fjal\u00ebkalimet? P\u00ebrkthimi i raportit Javelin &#039;Shteti i autentifikimit t\u00eb fort\u00eb&#039; me komente\" src=\"\/wp-content\/uploads\/2019\/04\/a94d3015f440fe2b98a56cc5c91a2721.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<blockquote><p>Le t\u00eb shohim m\u00eb ngusht\u00eb k\u00ebto numra. Si\u00e7 shohim, p\u00ebrqindja e individ\u00ebve q\u00eb p\u00ebrdorin autentifikimin shum\u00eb-faktor\u00ebsh \u00ebsht\u00eb rritur me nj\u00eb ecuri t\u00eb mrekullueshme prej 11% brenda nj\u00eb viti. Kjo ka ndodhur kryesisht p\u00ebr shkak t\u00eb atyre q\u00eb besonin se fjal\u00ebkalimet ishin t\u00eb sigurta, pasi numrat e atyre q\u00eb besojn\u00eb n\u00eb sigurin\u00eb e njoftimeve Push, SMS dhe biometrive nuk kan\u00eb ndryshuar.<\/p>\n<p>Megjithat\u00eb, me autentifikimin me dy faktor\u00eb p\u00ebr aplikimin n\u00eb korporata, situata nuk \u00ebsht\u00eb aq e mir\u00eb. S\u00eb pari, sipas raporteve, vet\u00ebm 5% e punonj\u00ebsve jan\u00eb kaluar nga autentifikimi me fjal\u00ebkalim n\u00eb token\u00eb. S\u00eb dyti, numri i atyre q\u00eb p\u00ebrdorin alternativa t\u00eb tjera p\u00ebr MFA n\u00eb ambientin korporativ ka sh\u00ebnuar nj\u00eb rritje prej 4%.<\/p>\n<p>Do t\u00eb provoj t\u00eb luaj si analist dhe do t\u00eb jap interpretimin tim. N\u00eb qend\u00ebr t\u00eb bot\u00ebs digjitale t\u00eb p\u00ebrdoruesve individual\u00eb \u00ebsht\u00eb smartphone. Prandaj, nuk \u00ebsht\u00eb befasi q\u00eb shumica e tyre p\u00ebrdorin mund\u00ebsit\u00eb q\u00eb ofron ky pajisje - autentifikimin biometrik, SMS dhe njoftime Push, si dhe fjal\u00ebkalimet nj\u00ebp\u00ebrdorimshme t\u00eb gjeneruara nga aplikacione n\u00eb vet\u00eb smartphone-in. Rreth siguris\u00eb dhe besueshm\u00ebris\u00eb gjat\u00eb p\u00ebrdorimit t\u00eb mjeteve q\u00eb ata njohin, njer\u00ebzit zakonisht nuk mendojn\u00eb.<\/p>\n<p>Prandaj, p\u00ebrqindja e p\u00ebrdoruesve t\u00eb faktor\u00ebve tradicionale \"tradicional\u00eb\" t\u00eb autentifikimit mbetet e pandryshuar. Por ata q\u00eb m\u00eb par\u00eb p\u00ebrdornin fjal\u00ebkalime, kuptojn\u00eb se sa t\u00eb rrezikuar jan\u00eb, dhe kur zgjedhin nj\u00eb faktor t\u00eb ri autentifikimi, ndalen te varianti m\u00eb t\u00eb ri dhe m\u00eb t\u00eb sigurt - tokenin kriptografik.<\/p>\n<p>Sa p\u00ebrfaq\u00ebsimin e tregut korporativ, \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb kuptohet se n\u00eb cilin sistem realizohet autentikimi. N\u00ebse realizohet hyrja n\u00eb domenin Windows, p\u00ebrdoren tokenat kriptografik\u00eb. Mund\u00ebsit\u00eb p\u00ebr p\u00ebrdorimin e tyre p\u00ebr 2FA jan\u00eb tashm\u00eb t\u00eb p\u00ebrcaktuara n\u00eb Windows dhe Linux, nd\u00ebrsa opsionet alternative zbatohen me v\u00ebshtir\u00ebsi dhe jan\u00eb t\u00eb komplikuara. Ja, ju dhe migrimi i 5% nga fjal\u00ebkalimet n\u00eb tokene.<\/p>\n<p>Implementimi i 2FA n\u00eb sistemet e informacionit korporativ varet shum\u00eb nga kualifikimi i zhvilluesve. Zhvilluesve u \u00ebsht\u00eb m\u00eb e leht\u00eb t\u00eb p\u00ebrdorin module t\u00eb gatshme p\u00ebr gjenerimin e fjal\u00ebkalimeve t\u00eb nj\u00eb her\u00ebshme, sesa t\u00eb kuptojn\u00eb funksionimin e algorimeve kriptografik\u00eb. Si rezultat, aplikacione q\u00eb jan\u00eb tep\u00ebr kritike p\u00ebr sigurin\u00eb, si sistemet e Single Sign-On ose Privileged Access Management, p\u00ebrdorin OTP si faktor t\u00eb dyt\u00eb. <\/p><\/blockquote>\n<h2> Shum\u00eb vulnerabilitete n\u00eb metodat tradicionale t\u00eb autentikimit<\/h2>\n<p>\nMegjith\u00ebse shum\u00eb organizata mbeten t\u00eb varura nga sistemet e vjetra nj\u00ebfaktoriale, vulnerabilitetet n\u00eb autentikimin tradicional me shum\u00eb faktor b\u00ebhen gjithnj\u00eb e m\u00eb t\u00eb evidente. Fjal\u00ebkalimet e nj\u00eb her\u00ebshme, zakonisht nga gjasht\u00eb n\u00eb tet\u00eb karaktere, t\u00eb d\u00ebrguara p\u00ebrmes SMS, mbeten forma m\u00eb e zakonshme e autentikimit (sigurisht, p\u00ebrve\u00e7 faktor\u00ebve t\u00eb njohurive t\u00eb fjal\u00ebkalimit). Dhe kur mediat popullore p\u00ebrmendin fjal\u00ebt 'autentikimi me dy faktor\u00eb' ose 'verifikimi me dy hapa', ato zakonisht i referohen autentikimit p\u00ebrmes fjal\u00ebkalimeve t\u00eb nj\u00eb her\u00ebshme p\u00ebr SMS.<\/p>\n<blockquote><p>K\u00ebtu autori gabon pak. D\u00ebrgimi i fjal\u00ebkalimeve t\u00eb nj\u00eb her\u00ebshme p\u00ebrmes SMS kurr\u00eb nuk ka qen\u00eb autentikim me dy faktor\u00eb. Kjo \u00ebsht\u00eb n\u00eb thelb faza e dyt\u00eb e autentikimit me dy hapa, ku faza e par\u00eb \u00ebsht\u00eb futja e emrit t\u00eb p\u00ebrdoruesit dhe fjal\u00ebkalimit.\n<\/p><\/blockquote>\n<p>\nN\u00eb vitin 2016, Instituti Komb\u00ebtar i Standardeve dhe Teknologjis\u00eb (NIST) p\u00ebrdit\u00ebsoi rregullat e tij t\u00eb autentikimit p\u00ebr t\u00eb eliminuar p\u00ebrdorimin e fjal\u00ebkalimeve t\u00eb nj\u00eb her\u00ebshme t\u00eb d\u00ebrguara p\u00ebrmes SMS. Megjithat\u00eb, k\u00ebto rregulla u zbut\u00ebn ndjesh\u00ebm pas protestave n\u00eb industri.<\/p>\n<blockquote><p>Pra, ndjekim histori. Regullatori amerikan me t\u00eb drejt\u00eb njeh se teknologjia e vjet\u00ebr nuk \u00ebsht\u00eb n\u00eb gjendje t\u00eb siguroj\u00eb sigurin\u00eb e p\u00ebrdoruesve dhe prezanton standarde t\u00eb reja. Standardet, t\u00eb destinuara p\u00ebr t\u00eb mbrojtur p\u00ebrdoruesit n\u00eb aplikacionet online dhe mobile (duke p\u00ebrfshir\u00eb ato financiare). Industria po shqyrton sa para do t\u00eb duhet t\u00eb paguajn\u00eb p\u00ebr blerjen e tokeneve kriptografik\u00eb t\u00eb besuesh\u00ebm, p\u00ebr ristrukturimin e aplikacioneve, p\u00ebr nd\u00ebrtimin e infrastruktur\u00ebs s\u00eb \u00e7el\u00ebsave publik\u00eb dhe 'po shkon n\u00eb p\u00ebrleshje'. Nga nj\u00ebra an\u00eb, p\u00ebrdoruesit jan\u00eb b\u00ebr\u00eb t\u00eb besojn\u00eb n\u00eb besueshm\u00ebrin\u00eb e fjal\u00ebkalimeve t\u00eb nj\u00eb her\u00ebshme, nd\u00ebrsa nga ana tjet\u00ebr jan\u00eb kryer sulme ndaj NIST. Si rezultat, standardi u zbut, nd\u00ebrsa numri i thyerjeve, vjedhjeve t\u00eb fjal\u00ebkalimeve (dhe parave nga aplikacionet bankare) u rrit ndjesh\u00ebm. Sidoqoft\u00eb, industria nuk kishte nevoj\u00eb t\u00eb shpenzonte para. <\/p><\/blockquote>\n<p>\nQ\u00eb at\u00ebher\u00eb, dob\u00ebsit\u00eb e SMS OTP jan\u00eb b\u00ebr\u00eb m\u00eb t\u00eb qarta. K\u00ebrc\u00ebnuesit p\u00ebrdorin m\u00ebnyra t\u00eb ndryshme p\u00ebr t\u00eb komprometuar mesazhet SMS:<\/p>\n<ul>\n<li><b> Dupletimi i kart\u00ebs SIM. <\/b> K\u00ebrc\u00ebnuesit krijojn\u00eb nj\u00eb kopje t\u00eb SIM <i>(n\u00ebp\u00ebrmjet punonj\u00ebsve t\u00eb operatorit t\u00eb celularit ose vet\u00eb, duke p\u00ebrdorur softuer dhe harduer t\u00eb ve\u00e7ant\u00eb<\/i>). Si rezultat, k\u00ebrc\u00ebnuesi merr nj\u00eb SMS me fjal\u00ebkalimin e nj\u00eb her\u00ebsh\u00ebm. N\u00eb nj\u00eb rast ve\u00e7an\u00ebrisht t\u00eb njohur, haker\u00ebt arrit\u00ebn t\u00eb komprometohet nj\u00eb llogari AT&amp;T e investitorit t\u00eb cryptocurrency Michael Terpin dhe t\u00eb vjedhin pothuajse 24 milion dollar\u00eb n\u00eb cryptocurrency. P\u00ebr pasoj\u00eb, Terpin deklaroi se AT&amp;T kishte p\u00ebrgjegj\u00ebsi p\u00ebr masat e dob\u00ebta t\u00eb kontrollit, q\u00eb \u00e7uan n\u00eb dupletime t\u00eb kart\u00ebs SIM.<br \/>\n<blockquote><p>Logjika e mrekullueshme. K\u00ebshtu, a \u00ebsht\u00eb e v\u00ebrtet\u00eb se vet\u00ebm AT&amp;T \u00ebsht\u00eb fajtori? Jo, fajin e operatorit celular n\u00eb at\u00eb se shit\u00ebsit n\u00eb sallonin e komunikimeve i dhan\u00eb nj\u00eb duplikat SIM, \u00ebsht\u00eb e sigurt. Po p\u00ebr sistemin e autentikimit t\u00eb burs\u00ebs s\u00eb cryptocurrency? Pse nuk p\u00ebrdor\u00ebn tokene kriptografik\u00eb t\u00eb besuesh\u00ebm? A ishin kursyes para p\u00ebr implementim? Dhe Michael vet\u00eb nuk ka faj? Pse nuk insistoi n\u00eb nd\u00ebrrimin e mekanizmit t\u00eb autentikimit apo nuk p\u00ebrdorte vet\u00ebm ato bursa q\u00eb implementojn\u00eb autentikimin me dy faktor\u00eb mbi baz\u00ebn e tokeneve kriptografik\u00eb?<\/p>\n<p>Zbatimi i metodave t\u00eb besueshme t\u00eb autentikimit po ngadal\u00ebsohet pik\u00ebrisht p\u00ebr shkak se deri te thyerja p\u00ebrdoruesit tregojn\u00eb nj\u00eb neglizhenc\u00eb t\u00eb habitshme, dhe pas saj \u2013 akuzojn\u00eb p\u00ebr t\u00eb zez\u00ebn e tyre \u00e7do gj\u00eb, p\u00ebrve\u00e7 teknologjive t\u00eb vjetra dhe 't\u00eb prishura' t\u00eb autentikimit.<\/p><\/blockquote>\n<\/li>\n<li><b>Programet e d\u00ebmshme (malware).<\/b> Nj\u00eb nga funksionet m\u00eb t\u00eb hershme t\u00eb malware-it mobil ishte kapja dhe d\u00ebrgimi i mesazheve tekst t\u00eb paligjshme. Po ashtu, sulmet \"njeri n\u00eb shfletues\" (man-in-the-browser) dhe \"njeri n\u00eb mes\" (man-in-the-middle) mund t\u00eb kapin fjal\u00ebkalimet nj\u00ebher\u00ebsh kur ato jan\u00eb futur n\u00eb laptop\u00eb ose pajisje desktop t\u00eb infektuara.<br \/>\n<blockquote><p>Kur aplikacioni i Sberbank n\u00eb telefonin tuaj tregojn\u00eb nj\u00eb ikon\u00eb t\u00eb gjelb\u00ebr n\u00eb status bar, ai gjithashtu k\u00ebrkon \"malware\" n\u00eb telefonin tuaj. Q\u00ebllimi i k\u00ebtij aktiviteti \u00ebsht\u00eb t\u00eb shnd\u00ebrroni nj\u00eb mjedis ekzekutimi t\u00eb pasigurt t\u00eb telefonit tipik n\u00eb nj\u00eb, n\u00eb nj\u00ebfar\u00eb m\u00ebnyre, t\u00eb sigurt.<br \/>\nP\u00ebr m\u00eb tep\u00ebr, telefoni inteligjent, si nj\u00eb pajisje plot\u00ebsisht e pasigurt, n\u00eb t\u00eb cil\u00ebn mund t\u00eb ekzekutohet gjith\u00e7ka, \u00ebsht\u00eb nj\u00eb tjet\u00ebr arsye p\u00ebr t\u00eb p\u00ebrdorur p\u00ebr autentikimin <b>vet\u00ebm token\u00eb harduerik\u00eb<\/b>, t\u00eb cilat jan\u00eb t\u00eb mbrojtura dhe t\u00eb lira nga viruse dhe trojan\u00eb.<\/p><\/blockquote>\n<\/li>\n<li><b>Inxhineria sociale.<\/b> Kur mashtruesit e din\u00eb q\u00eb viktima ka aktivizuar fjal\u00ebkalimet nj\u00ebher\u00ebsh p\u00ebr SMS, ata mund t\u00eb kontaktojn\u00eb drejtp\u00ebrdrejt viktim\u00ebn, duke u b\u00ebr\u00eb si nj\u00eb organizat\u00eb e besueshme, si banka e saj ose sindikata e kreditit, p\u00ebr t\u00eb mashtruar viktim\u00ebn dhe p\u00ebr t\u00eb marr\u00eb kodin e sapo marr\u00eb.<br \/>\n<blockquote><p>Kam p\u00ebrjetuar personalisht k\u00ebt\u00eb ndihm\u00ebs qeniesh dhe ve\u00e7an\u00ebrisht gjat\u00eb p\u00ebrpjekeve p\u00ebr t\u00eb shitur di\u00e7ka n\u00eb nj\u00eb treg t\u00eb njohur online. Ndjeva k\u00ebnaq\u00ebsi kur kam ngacmuar mashtruesin q\u00eb p\u00ebrpiqej t\u00eb m\u00eb mashtroje. Por fatkeq\u00ebsisht, \u00e7do dit\u00eb lexoj n\u00eb lajme se nj\u00eb viktim\u00eb e re \"nuk mendoi\", raportoi kodin konfirmues dhe humbi nj\u00eb shum\u00eb t\u00eb madhe. Dhe gjith\u00eb kjo ndodhi sepse bank\u00ebs thjesht nuk i p\u00eblqen t\u00eb angazhohet me implementimin e token\u00ebve kriptografik\u00eb n\u00eb aplikacionet e saj. Sepse n\u00ebse ndodh ndonj\u00eb gj\u00eb, klient\u00ebt \"jan\u00eb fajtor\u00eb\".<\/p><\/blockquote>\n<\/li>\n<\/ul>\n<p>\nMegjith\u00ebse metodat e tjera t\u00eb shp\u00ebrndarjes s\u00eb fjal\u00ebkalimeve nj\u00ebher\u00ebsh mund t\u00eb zbusin disa nga dob\u00ebsit\u00eb n\u00eb k\u00ebt\u00eb metod\u00eb autentikimi, dob\u00ebsi t\u00eb tjera mbesin. Aplikacionet autonome p\u00ebr gjenerimin e kodit jan\u00eb mbrojtja m\u00eb e mir\u00eb ndaj kapjes, sepse madje edhe malware ndryshe nuk mund t\u00eb interaktoj\u00eb drejtp\u00ebrdrejt me gjeneratorin e kodit (<i>v\u00ebrtet? autori i raportit harroi menaxhimin e larg\u00ebt?<\/i>), por fjal\u00ebkalimet nj\u00ebher\u00ebsh ende mund t\u00eb kapen kur futen n\u00eb shfletues (<i>p\u00ebr shembull, duke p\u00ebrdorur nj\u00eb keylogger<\/i>), p\u00ebrmes nj\u00eb aplikacioni t\u00eb celularit t\u00eb hackeruar; dhe gjithashtu mund t\u00eb merren drejtp\u00ebrdrejt nga p\u00ebrdoruesi p\u00ebrmes inxhinieris\u00eb sociale.<br \/>\nP\u00ebrdorimi i mjeteve t\u00eb shumta t\u00eb vler\u00ebsimit t\u00eb rrezikut, si njohja e pajisjeve (<i>identifikimi i p\u00ebrpjekjeve p\u00ebr t\u00eb kryer operacione me pajisje q\u00eb nuk i p\u00ebrkasin p\u00ebrdoruesit t\u00eb ligjsh\u00ebm<\/i>), gjeolokalizimi (<i>p\u00ebrdoruesi sapo ndodhej n\u00eb Mosk\u00eb po tenton t\u00eb kryej\u00eb nj\u00eb operacion nga Novosibirsk<\/i>) dhe analiza e sjelljes, ka r\u00ebnd\u00ebsi t\u00eb madhe p\u00ebr eliminimin e dob\u00ebsive, por asnj\u00eb nga zgjidhjet nuk \u00ebsht\u00eb panacee. P\u00ebr secil\u00ebn situat\u00eb dhe lloj t\u00eb dh\u00ebnash duhet t\u00eb kryhet vler\u00ebsimi me kujdes i rreziqeve dhe t\u00eb zgjidhet cila teknologji autentikimi duhet t\u00eb p\u00ebrdoret.<\/p>\n<h2>Asnj\u00eb zgjidhje p\u00ebr autentikim nuk \u00ebsht\u00eb panacee<\/h2>\n<p>\n<b>Figura 2. Tabela e opsioneve t\u00eb autentikimit<\/b><\/p>\n<table>\n<tr>\n<td width=\"140\"><strong>Autentifikimi<\/strong><\/td>\n<td width=\"90\"><strong>Faktori<\/strong><\/td>\n<td><strong>P\u00ebrshkrimi<\/strong><\/td>\n<td><strong>Dob\u00ebsit\u00eb kryesore<\/strong><\/td>\n<\/tr>\n<tr>\n<td>Fjal\u00ebkalimi ose PIN<\/td>\n<td>Njohuri<\/td>\n<td>Nj\u00eb vler\u00eb e caktuar, e cila mund t\u00eb p\u00ebrfshij\u00eb letra, numra dhe nj\u00eb s\u00ebr\u00eb shenjash t\u00eb tjera<\/td>\n<td>Mund t\u00eb kapet, v\u00ebzhgohet, vjedhur, gjeshur apo shkat\u00ebrruar<\/td>\n<\/tr>\n<tr>\n<td>Autentifikimi i bazuar n\u00eb njohuri<\/td>\n<td>Njohuri<\/td>\n<td>Pyetje, p\u00ebrgjigjet e t\u00eb cilave mund t\u00eb di vet\u00ebm p\u00ebrdoruesi i ligjsh\u00ebm<\/td>\n<td>Mund t\u00eb kapen, gjeshen, fitohen p\u00ebrmes metodave t\u00eb inxhinieris\u00eb sociale<\/td>\n<\/tr>\n<tr>\n<td>OTP harduerike (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.rutoken.ru\/products\/all\/rutoken-otp\/\">shembull<\/a><\/noindex>)<\/td>\n<td>P\u00ebrvet\u00ebsim<\/td>\n<td>Nj\u00eb pajisje speciale q\u00eb gjeneron fjal\u00ebkalime nj\u00ebher\u00ebsh<\/td>\n<td>Kodi mund t\u00eb kapet dhe p\u00ebrs\u00ebritet, ose pajisja mund t\u00eb vjedhet<\/td>\n<\/tr>\n<tr>\n<td>OTP software<\/td>\n<td>P\u00ebrvet\u00ebsim<\/td>\n<td>Nj\u00eb aplikacion (mobil, e disponueshme p\u00ebrmes shfletuesit, ose d\u00ebrgon kodet me e-mail), i cili gjeneron fjal\u00ebkalime nj\u00ebher\u00ebsh<\/td>\n<td>Kodi mund t\u00eb kapet dhe p\u00ebrs\u00ebritet, ose pajisja mund t\u00eb vjedhet<\/td>\n<\/tr>\n<tr>\n<td>OTP SMS<\/td>\n<td>P\u00ebrvet\u00ebsim<\/td>\n<td>Fjal\u00ebkalimi nj\u00ebher\u00ebsh, i d\u00ebrguar p\u00ebrmes nj\u00eb mesazhi SMS<\/td>\n<td>Kodi mund t\u00eb kapet dhe p\u00ebrs\u00ebritet, ose telefoni inteligjent ose karta SIM mund t\u00eb vjedhen, ose karta SIM mund t\u00eb kopjohet<\/td>\n<\/tr>\n<tr>\n<td>Kartat inteligjente (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.rutoken.ru\/products\/all\/smart-card\/\">shembull<\/a><\/noindex>)<\/td>\n<td>P\u00ebrvet\u00ebsim<\/td>\n<td>Nj\u00eb kart\u00eb q\u00eb p\u00ebrmban nj\u00eb \u00e7ip kriptografik dhe memorie t\u00eb mbrojtur me \u00e7el\u00ebsa, q\u00eb p\u00ebrdoret p\u00ebr autentifikim n\u00eb infrastruktur\u00ebn e \u00e7el\u00ebsave t\u00eb hapur<\/td>\n<td>Mund t\u00eb vjedhet fizikisht (<i>por nj\u00eb sulmues nuk do t\u00eb mund ta p\u00ebrdor\u00eb pajisjen pa ditur kodin PIN; n\u00eb rast t\u00eb disa p\u00ebrpjekjeve t\u00eb gabuara t\u00eb futjes pajisja do t\u00eb bllokohet<\/i>)<\/td>\n<\/tr>\n<tr>\n<td>\u00c7el\u00ebsat e siguris\u00eb \u2014 token\u00eb (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.rutoken.ru\/products\/all\/rutoken-ecp-pki\/\">shembull<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.rutoken.ru\/products\/all\/rutoken-u2f\/\">nj\u00eb shembull tjet\u00ebr<\/a><\/noindex>)<\/td>\n<td>P\u00ebrvet\u00ebsim<\/td>\n<td>Nj\u00eb pajisje me USB q\u00eb p\u00ebrmban nj\u00eb \u00e7ip kriptografik dhe memorie t\u00eb mbrojtur me \u00e7el\u00ebsa, q\u00eb p\u00ebrdoret p\u00ebr autentifikim n\u00eb infrastruktur\u00ebn e \u00e7el\u00ebsave t\u00eb hapur<\/td>\n<td>Mund t\u00eb vidhet fizikisht (por sulmuesi nuk mund ta p\u00ebrdor\u00eb pajisjen pa ditur PIN-in; n\u00eb rastin e disa p\u00ebrpjekjeve t\u00eb gabuara p\u00ebr t\u00eb futur, pajisja do t\u00eb bllokohet)<\/td>\n<\/tr>\n<tr>\n<td>Lidhja me pajisjen<\/td>\n<td>P\u00ebrvet\u00ebsim<\/td>\n<td>Procesi q\u00eb krijon profilin shpesh me p\u00ebrdorim t\u00eb JavaScript, ose me ndihm\u00ebn e tokave, si cookie-t dhe Objektet e Ndara Flash p\u00ebr t\u00eb siguruar q\u00eb p\u00ebrdoret nj\u00eb pajisje e caktuar<\/td>\n<td>Tokat mund t\u00eb vidhen (kopjohen), gjithashtu karakteristikat e pajisjes ligjore mund t\u00eb imitojn\u00eb nga sulmuesi n\u00eb pajisjen e tij<\/td>\n<\/tr>\n<tr>\n<td>P\u00ebrve\u00e7 k\u00ebsaj<\/td>\n<td>Integreteti<\/td>\n<td>Analizohet si p\u00ebrdoruesi interakton me pajisjen ose programin<\/td>\n<td>Shtypi mund t\u00eb imitohet<\/td>\n<\/tr>\n<tr>\n<td>Gishtat e njohur<\/td>\n<td>Integreteti<\/td>\n<td>Gishtat e ruajtur krahasohen me ato q\u00eb lexohen n\u00eb m\u00ebnyr\u00eb optike ose elektronike<\/td>\n<td>Imazhi mund t\u00eb vidhet dhe t\u00eb p\u00ebrdoret p\u00ebr autentifikim<\/td>\n<\/tr>\n<tr>\n<td>Skandimi i syve<\/td>\n<td>Integreteti<\/td>\n<td>Karakteristikat e syrit, si modelin e irisit t\u00eb pupill\u00ebs, krahasohen me skane t\u00eb reja q\u00eb merren n\u00eb m\u00ebnyr\u00eb optike<\/td>\n<td>Imazhi mund t\u00eb vidhet dhe t\u00eb p\u00ebrdoret p\u00ebr autentifikim<\/td>\n<\/tr>\n<tr>\n<td>Njohja e fytyr\u00ebs<\/td>\n<td>Integreteti<\/td>\n<td>Karakteristikat e fytyr\u00ebs krahasohen me skanime t\u00eb reja q\u00eb merren n\u00eb m\u00ebnyr\u00eb optike<\/td>\n<td>Imazhi mund t\u00eb vidhet dhe t\u00eb p\u00ebrdoret p\u00ebr autentifikim<\/td>\n<\/tr>\n<tr>\n<td>Njohja e z\u00ebrit<\/td>\n<td>Integreteti<\/td>\n<td>Karakteristikat e modelit t\u00eb regjistruar t\u00eb z\u00ebrit krahasohen me mostra t\u00eb reja<\/td>\n<td>Regjistrimi mund t\u00eb vidhet dhe t\u00eb p\u00ebrdoret p\u00ebr autentifikim, ose t\u00eb emulohet<\/td>\n<\/tr>\n<\/table>\n<p>N\u00eb pjes\u00ebn e dyt\u00eb t\u00eb publikimit na pret m\u00eb e mira \u2014 numrat dhe faktet, mbi t\u00eb cilat bazohet p\u00ebrfundimi dhe rekomandimet e dh\u00ebna n\u00eb pjes\u00ebn e par\u00eb. Do t\u00eb shqyrtohet ve\u00e7mas autentifikimi n\u00eb aplikacionet p\u00ebr p\u00ebrdoruesit dhe n\u00eb sistemet korporative.<\/p>\n<p>N'usem mir\u00eb!<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/aktiv-company\/blog\/449442\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043f\u043e\u0439\u043b\u0435\u0440 \u0438\u0437 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 \u043e\u0442\u0447\u0435\u0442\u0430 \u00ab\u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u0433\u0440\u043e\u0437\u0430\u043c \u043d\u043e\u0432\u044b\u0445 \u0440\u0438\u0441\u043a\u043e\u0432 \u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c \u0440\u0435\u0433\u0443\u043b\u044f\u0442\u043e\u0440\u043e\u0432\u00bb. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u00abJavelin Strategy &amp; Research\u00bb \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u00abThe State of Strong Authentication 2019\u00bb ( \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 pdf \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u0442\u0443\u0442). \u0412 \u044d\u0442\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e: \u043a\u0430\u043a\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u043d\u0442 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0438 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u0430\u0440\u043e\u043b\u0438 (\u0438 \u043f\u043e\u0447\u0435\u043c\u0443 \u043f\u0430\u0440\u043e\u043b\u0438 \u0441\u0435\u0439\u0447\u0430\u0441 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24451,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-32662","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043f\u043e\u0439\u043b\u0435\u0440 \u0438\u0437 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 \u043e\u0442\u0447\u0435\u0442\u0430 \u00ab\u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u0433\u0440\u043e\u0437\u0430\u043c \u043d\u043e\u0432\u044b\u0445 \u0440\u0438\u0441\u043a\u043e\u0432 \u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c \u0440\u0435\u0433\u0443\u043b\u044f\u0442\u043e\u0440\u043e\u0432\u00bb. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u00abJavelin Strategy &amp; Research\u00bb \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u00abThe State of Strong Authentication 2019\u00bb ( \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 pdf \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u0442\u0443\u0442). \u0412 \u044d\u0442\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e: \u043a\u0430\u043a\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u043d\u0442 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0438 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u0430\u0440\u043e\u043b\u0438 (\u0438 \u043f\u043e\u0447\u0435\u043c\u0443 \u043f\u0430\u0440\u043e\u043b\u0438 \u0441\u0435\u0439\u0447\u0430\u0441\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/chto-budet-s-autentifikatsiej-i-parolyami-perevod-otcheta-javelin-sostoyanie-strogoj-autentifikatsii-s-kommentariyami\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0427\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438? \u041f\u0435\u0440\u0435\u0432\u043e\u0434 \u043e\u0442\u0447\u0435\u0442\u0430 Javelin \u00ab\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\u00bb \u0441 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f\u043c\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043f\u043e\u0439\u043b\u0435\u0440 \u0438\u0437 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 \u043e\u0442\u0447\u0435\u0442\u0430 \u00ab\u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u0433\u0440\u043e\u0437\u0430\u043c \u043d\u043e\u0432\u044b\u0445 \u0440\u0438\u0441\u043a\u043e\u0432 \u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c \u0440\u0435\u0433\u0443\u043b\u044f\u0442\u043e\u0440\u043e\u0432\u00bb. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u00abJavelin Strategy &amp; Research\u00bb \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u00abThe State of Strong Authentication 2019\u00bb ( \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 pdf \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u0442\u0443\u0442). \u0412 \u044d\u0442\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e: \u043a\u0430\u043a\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u043d\u0442 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0438 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u0430\u0440\u043e\u043b\u0438 (\u0438 \u043f\u043e\u0447\u0435\u043c\u0443 \u043f\u0430\u0440\u043e\u043b\u0438 \u0441\u0435\u0439\u0447\u0430\u0441\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/chto-budet-s-autentifikatsiej-i-parolyami-perevod-otcheta-javelin-sostoyanie-strogoj-autentifikatsii-s-kommentariyami\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:48:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:48:16+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00c7far\u00eb do t\u00eb ndodh\u00eb me autentifikimin dhe fjal\u00ebkalimet? P\u00ebrkthimi i raportit Javelin \"Shteti i Autentifikimit t\u00eb Fort\u00eb\" me komente | ProHoster","description":"Spoileri nga titulli i raportit \"Numri i rasteve t\u00eb p\u00ebrdorimit t\u00eb autentifikimit t\u00eb fort\u00eb \u00ebsht\u00eb rritur p\u00ebr shkak t\u00eb k\u00ebrc\u00ebnimeve t\u00eb rrezikshm\u00ebris\u00eb s\u00eb re dhe k\u00ebrkesave t\u00eb rregullator\u00ebve\". Kompania k\u00ebrkimore \"Javelin Strategy &amp; Research\" publikoi raportin \"Shteti i Autentifikimit t\u00eb Fort\u00eb 2019\" (originali n\u00eb formatin pdf mund t\u00eb shkarkohet k\u00ebtu). N\u00eb k\u00ebt\u00eb raport thuhet: cili p\u00ebrqindje e kompanive amerikane dhe evropiane p\u00ebrdorin fjal\u00ebkalime (dhe pse fjal\u00ebkalimet tani jan\u00eb","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/chto-budet-s-autentifikatsiej-i-parolyami-perevod-otcheta-javelin-sostoyanie-strogoj-autentifikatsii-s-kommentariyami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438? \u041f\u0435\u0440\u0435\u0432\u043e\u0434 \u043e\u0442\u0447\u0435\u0442\u0430 Javelin \u00ab\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\u00bb \u0441 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f\u043c\u0438 | ProHoster","og:description":"\u0421\u043f\u043e\u0439\u043b\u0435\u0440 \u0438\u0437 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 \u043e\u0442\u0447\u0435\u0442\u0430 \u00ab\u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u0433\u0440\u043e\u0437\u0430\u043c \u043d\u043e\u0432\u044b\u0445 \u0440\u0438\u0441\u043a\u043e\u0432 \u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c \u0440\u0435\u0433\u0443\u043b\u044f\u0442\u043e\u0440\u043e\u0432\u00bb. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u00abJavelin Strategy &amp; Research\u00bb \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u00abThe State of Strong Authentication 2019\u00bb ( \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 pdf \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u0442\u0443\u0442). \u0412 \u044d\u0442\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e: \u043a\u0430\u043a\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u043d\u0442 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0438 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u0430\u0440\u043e\u043b\u0438 (\u0438 \u043f\u043e\u0447\u0435\u043c\u0443 \u043f\u0430\u0440\u043e\u043b\u0438 \u0441\u0435\u0439\u0447\u0430\u0441","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/chto-budet-s-autentifikatsiej-i-parolyami-perevod-otcheta-javelin-sostoyanie-strogoj-autentifikatsii-s-kommentariyami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:48:16+00:00","article:modified_time":"2019-10-31T18:48:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32662","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 11:58:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:20:07","updated":"2026-01-21 11:58:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/32662","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=32662"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/32662\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/24451"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=32662"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=32662"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=32662"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}