{"id":33885,"date":"2019-10-31T21:55:12","date_gmt":"2019-10-31T18:55:12","guid":{"rendered":"https:\/\/prohoster.info\/blog\/tak-chto-zhe-budet-s-autentifikatsiej-i-parolyami-vtoraya-chast-otcheta-javelin-sostoyanie-strogoj-autentifikatsii\/"},"modified":"2019-10-31T21:55:12","modified_gmt":"2019-10-31T18:55:12","slug":"tak-chto-zhe-budet-s-autentifikatsiej-i-parolyami-vtoraya-chast-otcheta-javelin-sostoyanie-strogoj-autentifikatsii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/tak-chto-zhe-budet-s-autentifikatsiej-i-parolyami-vtoraya-chast-otcheta-javelin-sostoyanie-strogoj-autentifikatsii","title":{"rendered":"Pra, \u00e7far\u00eb do t\u00eb ndodh\u00eb me autentikimin dhe fjal\u00ebkalimet? Pjesa e dyt\u00eb e raportit Javelin \"Gjendja e autentikimit t\u00eb fort\u00eb\"","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Pra,
\n
\nS\u00eb fundmi, kompania e hulumtimit \u00abJavelin Strategy & Research\u00bb publikoi raportin \u00abThe State of Strong Authentication 2019\u00bb. Krijuesit e tij mblodh\u00ebn informacion n\u00eb lidhje me metodat e autentikimit q\u00eb p\u00ebrdoren n\u00eb mjedisin korporativ dhe aplikacionet p\u00ebr p\u00ebrdoruesit, si dhe b\u00ebn\u00eb disa p\u00ebrfundime interesante p\u00ebr t\u00eb ardhmen e autentikimit t\u00eb fort\u00eb.<\/p>\n

P\u00ebrkthimi i pjes\u00ebs s\u00eb par\u00eb me p\u00ebrfundimet e autor\u00ebve t\u00eb raportit, ne kemi publikuar tashm\u00eb n\u00eb Habr<\/a><\/noindex>. Tani po ju paraqesim pjes\u00ebn e dyt\u00eb \u2014 me t\u00eb dh\u00ebna dhe grafika.
\n<\/a><\/noindex>
\nNga p\u00ebrkthyesi<\/b><\/p>\n

Nuk do ta kopjoj t\u00eb gjith\u00eb segmentin e nj\u00ebjt\u00eb nga pjesa e par\u00eb, por nj\u00eb paragraf do ta p\u00ebrs\u00ebris.<\/p>\n

T\u00eb gjitha numrat dhe faktet jan\u00eb dh\u00ebn\u00eb pa asnj\u00eb ndryshim, dhe n\u00ebse nuk jeni dakord me to, \u00ebsht\u00eb m\u00eb mir\u00eb t\u00eb mos diskutoni me p\u00ebrkthyesin, por me autor\u00ebt e raportit. Komentet e mia (t\u00eb formatteruara si citate, dhe n\u00eb tekst t\u00eb sh\u00ebnuara me italik<\/i>) jan\u00eb gjykimi im dhe do t\u00eb jem i lumtur t\u00eb diskutoj p\u00ebr secilin prej tyre (ashtu si edhe p\u00ebr cil\u00ebsin\u00eb e p\u00ebrkthimit). <\/p><\/blockquote>\n

<\/p>\n

Autentikimi i p\u00ebrdoruesve<\/h2>\n

\nQ\u00eb nga viti 2017, p\u00ebrdorimi i autentikimit t\u00eb fort\u00eb n\u00eb aplikacionet p\u00ebr p\u00ebrdoruesit ka p\u00ebsuar nj\u00eb rritje drastike, kryesisht p\u00ebr shkak t\u00eb disponueshm\u00ebris\u00eb s\u00eb metodave t\u00eb kriptografis\u00eb p\u00ebr autentikim n\u00eb pajisjet mobile, megjithat\u00eb, nj\u00eb p\u00ebrqindje pak m\u00eb e vog\u00ebl e kompanive p\u00ebrdorin autentikimin e fort\u00eb p\u00ebr aplikacionet n\u00eb internet.<\/p>\n

N\u00eb p\u00ebrgjith\u00ebsi, p\u00ebrqindja e kompanive q\u00eb p\u00ebrdorin autentikimin e fort\u00eb n\u00eb biznesin e tyre ka trefishuar, duke kaluar nga 5% n\u00eb 2017 n\u00eb 16% n\u00eb 2018 (figura 3).<\/p>\n

\"Pra,
\nMund\u00ebsit\u00eb p\u00ebr p\u00ebrdorimin e autentikimit t\u00eb fort\u00eb p\u00ebr aplikacionet web ende jan\u00eb t\u00eb kufizuara (p\u00ebr shkak se vet\u00ebm versionet e reja t\u00eb disa shfletuesve mb\u00ebshtesin nd\u00ebrveprimin me tokenat e kriptografis\u00eb, megjithat\u00eb kjo \u00e7\u00ebshtje po zgjidhet p\u00ebrmes instalimit t\u00eb software t\u00eb shtesave, si Rutoken Plugin<\/a><\/noindex><\/i>), prandaj shum\u00eb kompani p\u00ebrdorin metoda alternative p\u00ebr autentikim online, si\u00e7 jan\u00eb programet p\u00ebr pajisje mobile q\u00eb gjenerojn\u00eb fjal\u00ebkalime t\u00eb p\u00ebrkohshme.<\/p>\n

\u00c7el\u00ebsat e kriptografis\u00eb hardware (k\u00ebtu i referohemi vet\u00ebm atyre q\u00eb p\u00ebrputhen me standardet FIDO<\/i>), si\u00e7 ofrohen nga Google, Feitian, One Span, dhe Yubico mund t\u00eb p\u00ebrdoren p\u00ebr autentikim t\u00eb fort\u00eb pa pasur nevoj\u00eb p\u00ebr instalimin e software t\u00eb shtesave n\u00eb kompjuter\u00ebt desktop dhe laptop\u00ebt (pasi shumica e shfletuesve tashm\u00eb mb\u00ebshtesin standardin WebAuthn nga FIDO<\/i>), por vet\u00ebm 3% e kompanive e p\u00ebrdorin k\u00ebt\u00eb mund\u00ebsi p\u00ebr identifikimin e p\u00ebrdoruesve t\u00eb tyre.<\/p>\n

Krahasimi i tokenave t\u00eb kriptografis\u00eb (si\u00e7 \u00ebsht\u00eb Rutoken ECP PKI<\/a><\/noindex>) dhe \u00e7el\u00ebsat sekret\u00eb q\u00eb punojn\u00eb sipas standardeve FIDO, tejkalon jo vet\u00ebm raportin e k\u00ebtij dokumenti, por edhe komentet e mia n\u00eb lidhje me t\u00eb. N\u00ebse e p\u00ebrmbledhim, t\u00eb dy llojet e tokenave p\u00ebrdorin algoritme dhe principe t\u00eb ngjashme. Tokenat FIDO aktualisht mb\u00ebshteten m\u00eb mir\u00eb nga prodhuesit e shfletuesve, megjithat\u00eb, situata do t\u00eb ndryshoj\u00eb p\u00ebr shkak t\u00eb mb\u00ebshtetjes n\u00eb rritje t\u00eb shfletuesve p\u00ebr Web USB API<\/a><\/noindex>. Por tokenat klasike t\u00eb kriptografis\u00eb jan\u00eb t\u00eb mbrojtura me nj\u00eb kod PIN, mund t\u00eb n\u00ebnshkruajn\u00eb dokumente elektronike dhe t\u00eb p\u00ebrdoren p\u00ebr autentikim me dy faktor\u00eb n\u00eb Windows (\u00e7do version), Linux dhe Mac OS X, kan\u00eb API p\u00ebr gjuh\u00eb t\u00eb ndryshme programimi q\u00eb mund\u00ebsojn\u00eb implementimin e 2FA dhe EDS n\u00eb aplikacionet desktop, mobile dhe web, dhe tokenat e prodhuar n\u00eb Rusi mb\u00ebshtesin algoritmet e normave GOST. N\u00eb \u00e7do rast, tokeni i kriptografis\u00eb, pavar\u00ebsisht se cilin standard ka, \u00ebsht\u00eb metoda m\u00eb e besueshme dhe m\u00eb e leht\u00eb p\u00ebr t'u autentikuar.<\/p><\/blockquote>\n

\n\"Pra,
\n\"Pra,
\n\"Pra,<\/p>\n

P\u00ebrve\u00e7 siguris\u00eb: p\u00ebrfitime t\u00eb tjera t\u00eb autentikimit t\u00eb fort\u00eb<\/h3>\n

\nNuk \u00ebsht\u00eb befasi q\u00eb aplikimi i autentikimit t\u00eb fort\u00eb \u00ebsht\u00eb ngusht\u00ebsisht i lidhur me r\u00ebnd\u00ebsin\u00eb e t\u00eb dh\u00ebnave q\u00eb ruan biznesi. Kompanit\u00eb q\u00eb ruajn\u00eb informacione personale t\u00eb ndjeshme (Personally Identifiable Information \u2014 PII), si\u00e7 jan\u00eb numrat e sigurimeve shoq\u00ebrore apo informacioni personal n\u00eb lidhje me sh\u00ebndetin (Personal Health Information \u2014 PHI), hasin m\u00eb shum\u00eb presion ligjor dhe rregullator. K\u00ebto kompani jan\u00eb avokat\u00eb t\u00eb fort\u00eb p\u00ebr autentikimin e fort\u00eb. Presioni mbi biznesin rritet nga pritshm\u00ebria e klient\u00ebve, t\u00eb cil\u00ebt d\u00ebshirojn\u00eb t\u00eb din\u00eb q\u00eb organizatat n\u00eb t\u00eb cilat ata besojn\u00eb t\u00eb dh\u00ebnat e tyre m\u00eb t\u00eb ndjeshme p\u00ebrdorin metoda t\u00eb sigurta autentikimi. Organizatat q\u00eb trajtojn\u00eb PII t\u00eb ndjesh\u00ebm ose PHI p\u00ebrdorin autentikimin e fort\u00eb m\u00eb shum\u00eb se dyfish se organizatat q\u00eb ruajn\u00eb vet\u00ebm informacionin kontaktues t\u00eb p\u00ebrdoruesve (figura 7).<\/p>\n

\"Pra,
\n
\nFatkeq\u00ebsisht, kompanit\u00eb ende nuk jan\u00eb t\u00eb gatshme t\u00eb implementojn\u00eb metoda t\u00eb sigurta autentikimi. Gati nj\u00eb e treta e individ\u00ebve q\u00eb marrin vendime p\u00ebr biznes mendojn\u00eb se fjal\u00ebkalimet jan\u00eb metoda m\u00eb efektive t\u00eb autentikimit, midis t\u00eb gjitha atyre t\u00eb renditura n\u00eb figur\u00ebn 9, dhe 43% mendojn\u00eb se fjal\u00ebkalimet jan\u00eb metoda m\u00eb e thjesht\u00eb e autentikimit.<\/p>\n

\"Pra,
\n<\/p>\n

Ky\u00e7ja e k\u00ebsaj diagrame \u00ebsht\u00eb se zhvilluesit e aplikacioneve biznesore n\u00eb mbar\u00eb bot\u00ebn jan\u00eb t\u00eb ngjash\u00ebm\u2026 Ata nuk shohin fitime n\u00eb zbatimin e mekanizmave t\u00eb avancuar t\u00eb mbrojtjes s\u00eb aksesit n\u00eb llogari dhe ndajn\u00eb t\u00eb nj\u00ebjtat keqkuptime. Vet\u00ebm veprimet e rregullator\u00ebve mund ta ndryshojn\u00eb situat\u00ebn. <\/p>\n

Mos e prekni fjal\u00ebkalimin. Por, \u00e7far\u00eb duhet t\u00eb besosh q\u00eb t\u00eb mendosh se pyetjet kontrolluese jan\u00eb m\u00eb t\u00eb sigurta se tokenat kriptografik\u00eb?? Efikasiteti i pyetjeve kontrolluese, t\u00eb cilat jan\u00eb relativisht t\u00eb lehta p\u00ebr t'u zgjedhur, \u00ebsht\u00eb 15%, nd\u00ebrsa p\u00ebr tokenat q\u00eb nuk mund t\u00eb thyhen \u00ebsht\u00eb vet\u00ebm 10. T\u00eb pakt\u00ebn t\u00eb kishim par\u00eb filmin \"Iluzioni i Mashtrimit\", ku, ndon\u00ebse n\u00eb nj\u00eb form\u00eb allegorike, tregohet se si leht\u00ebsisht magjistar\u00ebt ia mor\u00ebn t\u00eb gjitha p\u00ebrgjigjet e nevojshme nj\u00eb biznesmeni t\u00eb mashtruar dhe e lan\u00eb pa para.<\/p>\n

Nj\u00eb tjet\u00ebr fakt i r\u00ebnd\u00ebsish\u00ebm q\u00eb tregon cil\u00ebsin\u00eb e atyre q\u00eb merren me mekanizmat e siguris\u00eb n\u00eb aplikacionet p\u00ebr p\u00ebrdoruesit. N\u00eb mendimin e tyre, procesi i futjes s\u00eb fjal\u00ebkalimit \u00ebsht\u00eb nj\u00eb operacion m\u00eb i thjesht\u00eb se autentikimi me ndihm\u00ebn e nj\u00eb tokeni kriptografik. Megjithat\u00eb, \u00e7far\u00eb mund t\u00eb jet\u00eb m\u00eb e leht\u00eb se t\u00eb lidh\u00ebsh nj\u00eb token n\u00eb portin USB dhe t\u00eb futesh nj\u00eb PIN t\u00eb thjesht\u00eb. <\/p><\/blockquote>\n

\n\u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb theksohet se zbatimi i autentikimit t\u00eb rrept\u00eb lejon q\u00eb bizneset t\u00eb mos mendojn\u00eb m\u00eb p\u00ebr metodat e autentikimit dhe rregullat e pun\u00ebs q\u00eb jan\u00eb t\u00eb nevojshme p\u00ebr bllokimin e skemave t\u00eb mashtrimit, duke iu p\u00ebrgjigjur k\u00ebrkesave reale t\u00eb klient\u00ebve t\u00eb tyre.<\/p>\n

Nd\u00ebrsa p\u00ebrmbushja e k\u00ebrkesave rregullative \u00ebsht\u00eb nj\u00eb prioritet shum\u00eb i arsyesh\u00ebm p\u00ebr t\u00eb dyja bizneset q\u00eb p\u00ebrdorin autentikimin e rrept\u00eb dhe p\u00ebr ata q\u00eb nuk e b\u00ebjn\u00eb k\u00ebt\u00eb, kompanit\u00eb q\u00eb tashm\u00eb p\u00ebrdorin autentikimin e rrept\u00eb jan\u00eb shum\u00eb m\u00eb t\u00eb prirura t\u00eb thon\u00eb se rritja e besnik\u00ebris\u00eb s\u00eb klient\u00ebve \u00ebsht\u00eb treguesi m\u00eb i r\u00ebnd\u00ebsish\u00ebm q\u00eb marrin parasysh kur vler\u00ebsojn\u00eb metod\u00ebn e autentikimit. (18% kundrejt 12%) (figura 10).<\/p>\n

\"Pra,<\/p>\n

Autentikimi Korporativ<\/h2>\n

\nQ\u00eb nga viti 2017, zbatimi i autentikimit t\u00eb rrept\u00eb n\u00eb biznese ka pasur nj\u00eb rritje, por pak m\u00eb t\u00eb ngadalt\u00eb se p\u00ebr aplikacionet p\u00ebr konsumator\u00eb. Pjesa e nd\u00ebrmarrjeve q\u00eb p\u00ebrdorin autentikimin e rrept\u00eb u rrit nga 7% n\u00eb 2017 n\u00eb 12% n\u00eb 2018. Ndryshe nga aplikacionet p\u00ebr p\u00ebrdoruesit, n\u00eb mjedisin korporativ, p\u00ebrdorimi i metodave t\u00eb autentikimit pa fjal\u00ebkalim \u00ebsht\u00eb pak m\u00eb i zakonsh\u00ebm n\u00eb aplikacionet web se sa n\u00eb ato mobile. Rreth gjysma e nd\u00ebrmarrjeve raportojn\u00eb se p\u00ebrdorin vet\u00ebm emra p\u00ebrdoruesish dhe fjal\u00ebkalime p\u00ebr autentikimin e p\u00ebrdoruesve t\u00eb tyre kur ky\u00e7en n\u00eb sistem, p\u00ebrkat\u00ebsisht nj\u00eb n\u00eb pes\u00eb (22%) gjithashtu mb\u00ebshtetet vet\u00ebm n\u00eb fjal\u00ebkalime p\u00ebr autentikimin dyt\u00ebsor kur kan\u00eb qasje n\u00eb t\u00eb dh\u00ebna ve\u00e7an\u00ebrisht t\u00eb r\u00ebnd\u00ebsishme (n\u00eb t\u00eb cilin p\u00ebrdoruesi fillimisht lidhet n\u00eb aplikacion me nj\u00eb metod\u00eb m\u00eb t\u00eb thjesht\u00eb autentikimi, dhe n\u00ebse d\u00ebshiron t\u00eb marr\u00eb qasje n\u00eb t\u00eb dh\u00ebna kritike, at\u00ebher\u00eb do t\u00eb realizoj\u00eb nj\u00eb procedur\u00eb t\u00eb re autentikimi, k\u00ebsaj here zakonisht duke p\u00ebrdorur nj\u00eb metod\u00eb m\u00eb t\u00eb sigurt.<\/i>).<\/p>\n

\"Pra,<\/p>\n

Duhet kuptuar se n\u00eb raportin nuk \u00ebsht\u00eb p\u00ebrfshir\u00eb p\u00ebrdorimi i tokenave kriptografik\u00eb p\u00ebr autentikimin me dy faktor\u00eb n\u00eb sistemet operuese Windows, Linux dhe Mac OS X. Kjo aktualisht \u00ebsht\u00eb p\u00ebrdorimi m\u00eb i zakonsh\u00ebm i 2FA. (Fatkeq\u00ebsisht, tokenat e krijuar sipas standardeve FIDO mund t\u00eb realizojn\u00eb 2FA vet\u00ebm p\u00ebr Windows 10).<\/p>\n

Dhe, n\u00ebse p\u00ebr zbatimin e 2FA n\u00eb aplikacione online dhe mobile nevojitet nj\u00eb kompleks aktivitsh, duke p\u00ebrfshir\u00eb p\u00ebrmir\u00ebsimin e k\u00ebtyre aplikacioneve, p\u00ebr zbatimin e 2FA n\u00eb Windows mjafton t\u00eb konfiguroni PKI (p.sh., mbi baz\u00ebn e Microsoft Certification Server) dhe politikat e autentikimit n\u00eb AD. <\/p>\n

Dhe, duke qen\u00eb se mbrojtja e hyrjes n\u00eb PC-n\u00eb e pun\u00ebs dhe domain \u00ebsht\u00eb nj\u00eb element i r\u00ebnd\u00ebsish\u00ebm i mbrojtjes s\u00eb t\u00eb dh\u00ebnave korporative, numri i zbatimeve t\u00eb autentikimit me dy faktor\u00eb po rritet gjithnj\u00eb e m\u00eb shum\u00eb.<\/p><\/blockquote>\n

\nMetodat e tjera dy m\u00eb t\u00eb zakonshme p\u00ebr autentikimin e p\u00ebrdoruesve gjat\u00eb hyrjes n\u00eb sistem jan\u00eb fjal\u00ebkalimet nj\u00eb her\u00ebsh t\u00eb ofruara p\u00ebrmes nj\u00eb aplikacioni t\u00eb ve\u00e7ant\u00eb (13% e nd\u00ebrmarrjeve), dhe kodet e aksesit nj\u00eb her\u00ebsh t\u00eb d\u00ebrguara p\u00ebrmes SMS (12%). Pavar\u00ebsisht se p\u00ebrqindja e p\u00ebrdorimit t\u00eb t\u00eb dy metodave \u00ebsht\u00eb mjaft e ngjashme, por OTP SMS p\u00ebrdoret m\u00eb shpesh p\u00ebr t\u00eb rritur nivelin e autorizimit (n\u00eb 24% t\u00eb kompanive). (Figura 12).<\/p>\n

\"Pra,
\n
\nRritja e p\u00ebrdorimit t\u00eb autentikimit t\u00eb rrept\u00eb n\u00eb nd\u00ebrmarrje, ndoshta mund t\u00eb shpjegohet me rritjen e disponueshm\u00ebris\u00eb s\u00eb implementimeve t\u00eb metodave kriptografike t\u00eb autentikimit n\u00eb platformat e menaxhimit t\u00eb identitetit t\u00eb nd\u00ebrmarrjes (p\u00ebr ta th\u00ebn\u00eb ndryshe - sistemet korporative SSO dhe IAM kan\u00eb m\u00ebsuar t\u00eb p\u00ebrdorin tokenat). <\/p>\n

P\u00ebr autentifikimin e punonj\u00ebsve dhe kontraktor\u00ebve p\u00ebrmes telefon\u00ebve mobil\u00eb, kompanit\u00eb shpesh besojn\u00eb m\u00eb shum\u00eb tek fjal\u00ebkalimet sesa te aplikacionet p\u00ebr konsumator\u00ebt. M\u00eb shum\u00eb se gjysma (53%) e kompanive p\u00ebrdorin fjal\u00ebkalime p\u00ebr autentifikimin e aksesit t\u00eb p\u00ebrdoruesve n\u00eb t\u00eb dh\u00ebnat e kompanis\u00eb p\u00ebrmes nj\u00eb pajisjeje mobile.<\/p>\n

N\u00eb rastin e pajisjeve mobile, do ishte e besueshme t\u00eb mendohej p\u00ebr fuqin\u00eb e madhe t\u00eb biometris\u00eb, n\u00ebse nuk do t\u00eb ishin kaq shum\u00eb raste t\u00eb falsifikimit t\u00eb gisht\u00ebrinjve, z\u00ebra, fytyrash dhe madje edhe irishe. Nj\u00eb k\u00ebrkes\u00eb n\u00eb nj\u00eb motor k\u00ebrkimi do t\u00eb tregonte se nuk ka nj\u00eb m\u00ebnyr\u00eb t\u00eb besueshme t\u00eb autentifikimit biometrik. N\u00eb t\u00eb v\u00ebrtet\u00eb ekzistojn\u00eb sensor\u00eb shum\u00eb t\u00eb sakt\u00eb, por ata jan\u00eb shum\u00eb t\u00eb shtrenjt\u00eb dhe t\u00eb m\u00ebdhenj \u2014 dhe nuk instalohet n\u00eb smartphone.<\/p>\n

Prandaj, metoda e vetme funksionale e 2FA n\u00eb pajisjet mobile \u00ebsht\u00eb p\u00ebrdorimi i tokeneve kriptografike q\u00eb lidhen me smartphone p\u00ebrmes interfaceve NFC, Bluetooth dhe USB Type-C.<\/p><\/blockquote>\n

\n\"Pra,
\n
\nMbrojtja e t\u00eb dh\u00ebnave financiare t\u00eb kompanis\u00eb \u00ebsht\u00eb arsyeja kryesore p\u00ebr investimin n\u00eb autentifikimin pa fjal\u00ebkalim (44%) me rritjen m\u00eb t\u00eb shpejt\u00eb q\u00eb nga viti 2017 (t\u00eb shtohet me tet\u00eb pik\u00eb p\u00ebrqindje). M\u00eb pas vjen mbrojtja e pron\u00ebs intelektuale (40%) dhe t\u00eb dh\u00ebnave t\u00eb resurseve njer\u00ebzore (39%). Dhe \u00ebsht\u00eb e qart\u00eb pse \u2014 p\u00ebrve\u00e7 faktit se vlera e lidhur me k\u00ebto lloj t\u00eb dh\u00ebnash njihet gjer\u00ebsisht, ato gjithashtu p\u00ebrdoren nga nj\u00eb num\u00ebr relativisht t\u00eb vog\u00ebl t\u00eb punonj\u00ebsve. Pra, shpenzimet p\u00ebr implementimin nuk jan\u00eb kaq t\u00eb m\u00ebdha, dhe p\u00ebr t\u00eb m\u00ebsuar disa njer\u00ebz p\u00ebr t\u00eb punuar me nj\u00eb sistem autentifikimi m\u00eb t\u00eb komplikuar \u00ebsht\u00eb e mjaftueshme. N\u00eb kontrast, llojet e t\u00eb dh\u00ebnave dhe pajisjeve me t\u00eb cilat shpesh punojn\u00eb shumica e punonj\u00ebsve t\u00eb kompanis\u00eb, akoma mbrohen vet\u00ebm me fjal\u00ebkalime. Dokumentet e punonj\u00ebsve, stacionet e pun\u00ebs dhe portalet e-mail t\u00eb korporatave jan\u00eb fushat m\u00eb t\u00eb rrezikuara, pasi vet\u00ebm nj\u00eb e kat\u00ebrta e kompanive i mbrojn\u00eb k\u00ebto asete me autentifikimin pa fjal\u00ebkalim.<\/p>\n

\"Pra,<\/p>\n

N\u00eb p\u00ebrgjith\u00ebsi, emaili korporativ \u00ebsht\u00eb nj\u00eb gj\u00eb shum\u00eb e rrezikshme dhe \"me vrima\", shkalla e rrezikshm\u00ebris\u00eb s\u00eb t\u00eb cilit t\u00eb n\u00ebnvler\u00ebsohet nga shumica e drejtuesve t\u00eb IT. \u00c7do dit\u00eb, punonj\u00ebsit marrin dhjet\u00ebra email-e, k\u00ebshtu q\u00eb pse t\u00eb mos ket\u00eb s\u00eb paku nj\u00eb email t\u00eb peshkimit (dmth, t\u00eb mashtrimit) mes tyre? Ky email do t\u00eb jet\u00eb i formuluar si email-i i kompanis\u00eb, prandaj punonj\u00ebsi do t\u00eb klikoj\u00eb pa frik\u00eb n\u00eb lidhjen q\u00eb ndodhet n\u00eb k\u00ebt\u00eb email. Dhe m\u00eb pas mund t\u00eb ndodh\u00eb cdo gj\u00eb, p\u00ebr shembull, shkarkimi i nj\u00eb virusi n\u00eb makin\u00ebn e sulmuar ose rrjedhja e fjal\u00ebkalimeve (p\u00ebrfshir\u00eb p\u00ebrmes inxhinieris\u00eb sociale, p\u00ebrmes futjes n\u00eb nj\u00eb form\u00eb falsifikimi t\u00eb krijuar nga sulmuesi).<\/p>\n

P\u00ebr t\u00eb parandaluar q\u00eb k\u00ebto gj\u00ebra t\u00eb ndodhin, email-et duhet t\u00eb n\u00ebnshkruhen. K\u00ebshtu q\u00eb menj\u00ebher\u00eb do t\u00eb jet\u00eb e qart\u00eb se cili email \u00ebsht\u00eb krijuar nga nj\u00eb punonj\u00ebs i ligjsh\u00ebm dhe cili nga nj\u00eb sulmues. N\u00eb Outlook \/ Exchange, p\u00ebr shembull, n\u00ebnshkrimi elektronik n\u00eb baz\u00eb t\u00eb tokeneve kriptografike aktivizohet shum\u00eb shpejt dhe leht\u00eb dhe mund t\u00eb p\u00ebrdoret s\u00eb bashku me autentifikimin me dy faktor\u00eb n\u00eb PC dhe domainet Windows.<\/p><\/blockquote>\n

\nMidis atyre drejtor\u00ebve q\u00eb mb\u00ebshteten ekskluzivisht n\u00eb autentifikimin me fjal\u00ebkalim brenda kompanis\u00eb, dy t\u00eb tretat (66%) e b\u00ebjn\u00eb k\u00ebt\u00eb sepse besojn\u00eb se fjal\u00ebkalimet ofrojn\u00eb siguri t\u00eb mjaftueshme p\u00ebr llojin e informacionit q\u00eb kompani e tyre duhet t\u00eb mbroj\u00eb.<\/p>\n

Por metodat e autentifikimit t\u00eb fort\u00eb po b\u00ebhen gjithnj\u00eb e m\u00eb t\u00eb zakonshme. Kryesisht p\u00ebr shkak se b\u00ebhen m\u00eb t\u00eb qasshme. Sistemet e menaxhimit t\u00eb identitetit dhe aksesit (IAM), shfletuesit dhe sistemet operative mb\u00ebshtesin gjithnj\u00eb e m\u00eb shum\u00eb autentifikimin me tokene kriptografike. <\/p>\n

Ka nj\u00eb tjet\u00ebr p\u00ebrfitim t\u00eb autentifikimit t\u00eb fort\u00eb. Duke qen\u00eb se fjal\u00ebkalimi nuk p\u00ebrdoret m\u00eb (e z\u00ebvend\u00ebsuar me nj\u00eb kod t\u00eb thjesht\u00eb PIN), at\u00ebher\u00eb nuk ka asnj\u00eb k\u00ebrkes\u00eb nga punonj\u00ebsit p\u00ebr t\u00eb ndryshuar fjal\u00ebkalimin e harruar. Kjo nga ana tjet\u00ebr redukton ngarkes\u00ebn mbi departamentin IT t\u00eb kompanis\u00eb.<\/p>\n

\"Pra,<\/p>\n

\n

P\u00ebrfundimet dhe konstatimet<\/h4>\n

<\/p>\n

    \n
  1. Drejtor\u00ebt shpesh nuk kan\u00eb njohurit\u00eb e nevojshme p\u00ebr t\u00eb vler\u00ebsuar efektivitetin <\/b>e v\u00ebrtet\u00eb t\u00eb opsioneve t\u00eb ndryshme t\u00eb autentifikimit. Ata jan\u00eb m\u00ebsuar t\u00eb besojn\u00eb n\u00eb metoda t\u00eb tilla t\u00eb vjetra <\/b>si fjal\u00ebkalimet dhe pyetjet sekrete thjesht sepse \"m\u00eb par\u00eb ka funksionuar\". <\/li>\n
  2. K\u00ebto njohuri p\u00ebrdoruesit i kan\u00eb akoma n\u00eb nj\u00eb mas\u00eb m\u00eb t\u00eb vog\u00ebl<\/b>, p\u00ebr ta, e r\u00ebnd\u00ebsishme \u00ebsht\u00eb thjesht\u00ebsia dhe komoditeti<\/b>. Nd\u00ebrsa ata nuk kan\u00eb motivim p\u00ebr t\u00eb zgjedhur zgjidhje m\u00eb t\u00eb sigurta<\/b>.<\/li>\n
  3. Zhvilluesit e aplikacioneve t\u00eb p\u00ebrdoruesve shpesh nuk kan\u00eb arsye<\/b>, p\u00ebr t\u00eb implementuar autentifikimin me dy faktor\u00eb n\u00eb vend t\u00eb atij me fjal\u00ebkalim. Konkurenca n\u00eb nivelin e mbrojtjes n\u00eb aplikacionet p\u00ebr p\u00ebrdorues mungon<\/b>.<\/li>\n
  4. I gjith\u00eb p\u00ebrgjegj\u00ebsia p\u00ebr thyerjen e kaluar te p\u00ebrdoruesi<\/b>. I dha nj\u00eb fjal\u00ebkalim t\u00eb p\u00ebrkohsh\u00ebm nj\u00eb sulmuesi - \u00ebsht\u00eb fajtor<\/b>. Fjal\u00ebkalimi yt \u00ebsht\u00eb kapur ose par\u00eb - \u00ebsht\u00eb fajtor<\/b>. Nuk k\u00ebrkoi nga zhvilluesi t\u00eb p\u00ebrdor\u00eb metoda t\u00eb sigurta autentifikimi n\u00eb produkt - \u00ebsht\u00eb fajtor<\/b>.<\/li>\n
  5. E drejt\u00eb <\/b>regullatori duhet t\u00eb k\u00ebrkoj\u00eb nga kompanit\u00eb t\u00eb implementojn\u00eb zgjidhje q\u00eb<\/b> ndalojn\u00eb shkarkimet e t\u00eb dh\u00ebnave (p\u00ebrfshir\u00eb autentifikimin me dy faktor\u00eb), dhe jo t\u00eb nd\u00ebshkojn\u00eb p\u00ebr <\/b>shkarkimin e t\u00eb dh\u00ebnave q\u00eb ndodhi.<\/b> d\u00ebgjuar t\u00eb dh\u00ebnat.<\/li>\n
  6. Disa zhvillues softuer\u00ebsh p\u00ebrpiqen t\u00eb shesin konsumator\u00ebve produkte t\u00eb vjetra dhe jo shum\u00eb t\u00eb sigurta<\/b> zgjidhjen n\u00eb nj\u00eb paketim t\u00eb bukur<\/b> si nj\u00eb produkt \u00abinovativ\u00bb. P\u00ebr shembull, autentifikimi q\u00eb lidhet me nj\u00eb smartphone specifik ose p\u00ebrdorimi i biometrik\u00ebs. Si\u00e7 mund t\u00eb shihet nga raporti, vet\u00ebm nj\u00eb zgjidhje e v\u00ebrtet\u00eb e besueshme<\/b> mund t\u00eb jet\u00eb nj\u00eb zgjidhje e bazuar n\u00eb autentifikim t\u00eb fort\u00eb, pra tokene kriptografike.<\/li>\n
  7. E nj\u00ebjta<\/b> token kriptografik mund t\u00eb p\u00ebrdoret p\u00ebr nj\u00eb gam\u00eb t\u00eb gjer\u00eb detyrash<\/b>: p\u00ebr autentifikimin e fort\u00eb<\/b> n\u00eb sistemin operativ t\u00eb organizat\u00ebs, n\u00eb aplikacionet korporative dhe p\u00ebrdoruese, p\u00ebr n\u00ebnshkrimin elektronik<\/b> e transaksioneve financiare (e r\u00ebnd\u00ebsishme p\u00ebr aplikacionet bankare), dokumenteve dhe email\u00ebve.<\/li>\n<\/ol>\n<\/blockquote>\n

    Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u00abJavelin Strategy & Research\u00bb \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u00abThe State of Strong Authentication 2019\u00bb. \u0415\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u0431\u0440\u0430\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u043e\u043c \u043a\u0430\u043a\u0438\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u043b\u044e\u0431\u043e\u043f\u044b\u0442\u043d\u044b\u0435 \u0432\u044b\u0432\u043e\u0434\u044b \u043e \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0435\u0440\u0435\u0432\u043e\u0434 \u043f\u0435\u0440\u0432\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u0441 \u0432\u044b\u0432\u043e\u0434\u0430\u043c\u0438 \u0430\u0432\u0442\u043e\u0440\u043e\u0432 \u043e\u0442\u0447\u0435\u0442\u0430, \u043c\u044b \u0443\u0436\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043d\u0430 \u0425\u0430\u0431\u0440\u0435. \u0410 \u0441\u0435\u0439\u0447\u0430\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25549,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33885","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Pra, \u00e7far\u00eb do t\u00eb ndodh\u00eb me autentifikimin dhe fjal\u00ebkalimet? Pjesa e dyt\u00eb e raportit Javelin \u00abGjendja e Autentifikimit t\u00eb Fort\u00eb\u00bb | ProHoster","description":"S\u00eb fundmi, kompania k\u00ebrkimore \u00abJavelin Strategy & Research\u00bb publikoi nj\u00eb raport mbi \u00abGjendjen e Autentifikimit t\u00eb Fort\u00eb 2019\u00bb. Krijuesit e tij mbledh\u00ebn informacion n\u00eb lidhje me metodat e autentifikimit q\u00eb p\u00ebrdoren n\u00eb ambientin korporativ dhe aplikacionet p\u00ebrdoruese, si dhe b\u00ebn\u00eb disa p\u00ebrfundime interesante mbi t\u00eb ardhmen e autentifikimit t\u00eb fort\u00eb. Pjesa e par\u00eb me p\u00ebrfundimet e autor\u00ebve t\u00eb raportit e kemi publikuar tashm\u00eb n\u00eb Habr. Tani po prezantojm\u00eb","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/tak-chto-zhe-budet-s-autentifikatsiej-i-parolyami-vtoraya-chast-otcheta-javelin-sostoyanie-strogoj-autentifikatsii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0422\u0430\u043a \u0447\u0442\u043e \u0436\u0435 \u0431\u0443\u0434\u0435\u0442 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438? \u0412\u0442\u043e\u0440\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043e\u0442\u0447\u0435\u0442\u0430 Javelin \u00ab\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\u00bb | ProHoster","og:description":"\u041d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u00abJavelin Strategy & Research\u00bb \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u00abThe State of Strong Authentication 2019\u00bb. \u0415\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u0431\u0440\u0430\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u043e\u043c \u043a\u0430\u043a\u0438\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u043b\u044e\u0431\u043e\u043f\u044b\u0442\u043d\u044b\u0435 \u0432\u044b\u0432\u043e\u0434\u044b \u043e \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0435\u0440\u0435\u0432\u043e\u0434 \u043f\u0435\u0440\u0432\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u0441 \u0432\u044b\u0432\u043e\u0434\u0430\u043c\u0438 \u0430\u0432\u0442\u043e\u0440\u043e\u0432 \u043e\u0442\u0447\u0435\u0442\u0430, \u043c\u044b \u0443\u0436\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043d\u0430 \u0425\u0430\u0431\u0440\u0435. \u0410 \u0441\u0435\u0439\u0447\u0430\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/tak-chto-zhe-budet-s-autentifikatsiej-i-parolyami-vtoraya-chast-otcheta-javelin-sostoyanie-strogoj-autentifikatsii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:55:12+00:00","article:modified_time":"2019-10-31T18:55:12+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33885","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 17:06:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:31:23","updated":"2026-01-21 17:06:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/33885","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=33885"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/33885\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/25549"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=33885"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=33885"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=33885"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}