{"id":33885,"date":"2019-10-31T21:55:12","date_gmt":"2019-10-31T18:55:12","guid":{"rendered":"https:\/\/prohoster.info\/blog\/tak-chto-zhe-budet-s-autentifikatsiej-i-parolyami-vtoraya-chast-otcheta-javelin-sostoyanie-strogoj-autentifikatsii\/"},"modified":"2019-10-31T21:55:12","modified_gmt":"2019-10-31T18:55:12","slug":"tak-chto-zhe-budet-s-autentifikatsiej-i-parolyami-vtoraya-chast-otcheta-javelin-sostoyanie-strogoj-autentifikatsii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/tak-chto-zhe-budet-s-autentifikatsiej-i-parolyami-vtoraya-chast-otcheta-javelin-sostoyanie-strogoj-autentifikatsii","title":{"rendered":"\u00c7far\u00eb do t\u00eb ndodh\u00eb me autentikimin dhe fjal\u00ebkalimet? Pjesa e dyt\u00eb e raportit Javelin \u00abGjendja e autentikimit t\u00eb fort\u00eb\u00bb","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"\u00c7far\u00eb
\n
\nS\u00eb fundi, kompania k\u00ebrkimore \u00abJavelin Strategy & Research\u00bb publikoi raportin \u00abThe State of Strong Authentication 2019\u00bb. Krijuesit e tij mbledh\u00ebn informacion mbi metodat e autentifikimit q\u00eb p\u00ebrdoren n\u00eb mjedisin korporativ dhe aplikacionet p\u00ebr p\u00ebrdoruesit, si dhe b\u00ebn\u00eb p\u00ebrfundime interesante p\u00ebr t\u00eb ardhmen e autentifikimit t\u00eb fort\u00eb.<\/p>\n

Ne kemi publikuar tashm\u00eb p\u00ebrkthimin e pjes\u00ebs s\u00eb par\u00eb me p\u00ebrfundimet e autor\u00ebve t\u00eb raportit n\u00eb Habr\u00e9<\/a><\/noindex>. Me ndihm\u00ebn e k\u00ebsaj, ju paraqesim pjes\u00ebn e dyt\u00eb \u2014 me t\u00eb dh\u00ebna dhe grafika.
\n<\/a><\/noindex>
\nNga p\u00ebrkthyesi<\/b><\/p>\n

Nuk do t\u00eb kopjoj gjith\u00e7ka nga segmenti me t\u00eb nj\u00ebjtin em\u00ebr nga pjesa e par\u00eb, por do t\u00eb rip\u00ebrs\u00ebris nj\u00eb paragraf.<\/p>\n

T\u00eb gjitha numrat dhe faktet jan\u00eb paraqitur pa asnj\u00eb ndryshim t\u00eb vog\u00ebl, dhe n\u00ebse nuk jeni dakord me to, \u00ebsht\u00eb m\u00eb mir\u00eb t\u00eb mos debatohet me p\u00ebrkthyesin, por me autor\u00ebt e raportit. Komentet e mia (t\u00eb formatizuara si citate, dhe n\u00eb tekst t\u00eb sh\u00ebnuara me italisht<\/i>) jan\u00eb gjykime t\u00eb mia dhe p\u00ebr secilin prej tyre do t\u00eb isha i lumtur t\u00eb diskutoja (si dhe p\u00ebr cil\u00ebsin\u00eb e p\u00ebrkthimit). <\/p><\/blockquote>\n

<\/p>\n

Autentifikimi i p\u00ebrdoruesve<\/h2>\n

\nQ\u00eb nga viti 2017, p\u00ebrdorimi i autentifikimit t\u00eb fort\u00eb n\u00eb aplikacionet p\u00ebr p\u00ebrdoruesit ka p\u00ebsuar nj\u00eb rritje t\u00eb dukshme, kryesisht p\u00ebr shkak t\u00eb disponueshm\u00ebris\u00eb s\u00eb metodave t\u00eb kriptografis\u00eb n\u00eb pajisjet mobile, megjith\u00ebse nj\u00eb p\u00ebrqindje pak m\u00eb e vog\u00ebl e kompanive p\u00ebrdorin autentifikimin e fort\u00eb p\u00ebr aplikacionet n\u00eb internet.<\/p>\n

N\u00eb p\u00ebrgjith\u00ebsi, p\u00ebrqindja e kompanive q\u00eb p\u00ebrdorin autentifikimin e fort\u00eb n\u00eb biznesin e tyre \u00ebsht\u00eb rritur trefish nga 5% n\u00eb 2017 n\u00eb 16% n\u00eb 2018 (figur\u00eb 3).<\/p>\n

\"\u00c7far\u00eb
\nMund\u00ebsit\u00eb p\u00ebr p\u00ebrdorimin e autentifikimit t\u00eb fort\u00eb p\u00ebr aplikacionet web ende jan\u00eb t\u00eb kufizuara (p\u00ebr shkak se vet\u00ebm versionet m\u00eb t\u00eb reja t\u00eb disa shfletuesve mb\u00ebshtesin nd\u00ebrveprimin me tokenat kriptografike, megjithat\u00eb ky problem \u00ebsht\u00eb duke u zgjidhur me instalimin e softuer\u00ebve shtes\u00eb si Ruthoken Plugin<\/a><\/noindex><\/i>), prandaj shum\u00eb kompani p\u00ebrdorin metoda alternative p\u00ebr autentifikimin online, si\u00e7 jan\u00eb programet p\u00ebr pajisjet mobile q\u00eb gjenerojn\u00eb fjal\u00ebkalime t\u00eb nj\u00ebhershme.<\/p>\n

\u00c7el\u00ebsat kriptografik\u00eb harduerik\u00eb (k\u00ebtu flasim vet\u00ebm p\u00ebr ata q\u00eb p\u00ebrputhen me standardet FIDO<\/i>), si\u00e7 ofrohen nga Google, Feitian, One Span, dhe Yubico mund t\u00eb p\u00ebrdoren p\u00ebr autentifikim t\u00eb fort\u00eb pa instaluar softuer shtes\u00eb n\u00eb kompjuter\u00ebt stacionar\u00eb dhe laptop\u00ebt (sepse shumica e shfletuesve tashm\u00eb mb\u00ebshtesin standardin WebAuthn t\u00eb FIDO<\/i>), por vet\u00ebm 3% e kompanive e p\u00ebrdorin k\u00ebt\u00eb mund\u00ebsi p\u00ebr ky\u00e7jen e p\u00ebrdoruesve t\u00eb tyre.<\/p>\n

Krahasimi i tokenave kriptografik\u00eb (si\u00e7 jan\u00eb Rutoken ECP PKI<\/a><\/noindex>) dhe \u00e7el\u00e7ir\u00ebs sekrete, q\u00eb funksionojn\u00eb sipas standardeve FIDO, dalin jo vet\u00ebm jasht\u00eb k\u00ebtij raporti, por edhe komenteve t\u00eb mia mbi t\u00eb. N\u00ebse flasim shkurt, t\u00eb dy llojet e token\u00ebve p\u00ebrdorin algoritma dhe principe t\u00eb ngjashme. Token\u00ebt FIDO aktualisht mb\u00ebshteten m\u00eb mir\u00eb nga prodhuesit e shfletuesve, megjithat\u00eb, situata do t\u00eb ndryshoj\u00eb s\u00eb shpejti nd\u00ebrsa m\u00eb shum\u00eb shfletues do t\u00eb ofrojn\u00eb mb\u00ebshtetje. Web USB API<\/a><\/noindex>. Nd\u00ebrkoh\u00eb, token\u00ebt klasik\u00eb kriptografik\u00eb mbrohen me PIN, mund t\u00eb n\u00ebnshkruajn\u00eb dokumente elektronic dhe t\u00eb p\u00ebrdoren p\u00ebr autentifikim t\u00eb dyfisht\u00eb n\u00eb Windows (\u00e7do version), Linux dhe Mac OS X, kan\u00eb API p\u00ebr gjuh\u00eb t\u00eb ndryshme programimi q\u00eb lejojn\u00eb realizimin e 2FA dhe EP n\u00eb aplikacione desktop, mobile dhe Web, nd\u00ebrsa token\u00ebt e prodhuar n\u00eb Rusi mb\u00ebshtesin algoritm\u00ebt rus\u00eb GOST. N\u00eb \u00e7do rast, nj\u00eb token kriptografik, pavar\u00ebsisht nga standardi sipas t\u00eb cilit \u00ebsht\u00eb krijuar, \u00ebsht\u00eb metoda m\u00eb e besueshme dhe e p\u00ebrshtatshme p\u00ebr autentifikim.<\/p><\/blockquote>\n

\n\"\u00c7far\u00eb
\n\"\u00c7far\u00eb
\n\"\u00c7far\u00eb<\/p>\n

P\u00ebrve\u00e7 siguris\u00eb: p\u00ebrfitime t\u00eb tjera t\u00eb autentikimit t\u00eb fort\u00eb<\/h3>\n

\nNuk \u00ebsht\u00eb befasi q\u00eb p\u00ebrdorimi i autentikimit t\u00eb fort\u00eb \u00ebsht\u00eb ngusht\u00ebsisht i lidhur me r\u00ebnd\u00ebsin\u00eb e t\u00eb dh\u00ebnave t\u00eb ruajtura nga bizneset. Kompanit\u00eb q\u00eb ruajn\u00eb informacion personal t\u00eb besuesh\u00ebm (Personally Identifiable Information \u2014 PII), si numrat e sigurimeve shoq\u00ebrore ose informacionin sh\u00ebndet\u00ebsor personal (Personal Health Information \u2014 PHI), p\u00ebrballen me presionin m\u00eb t\u00eb madh ligjor dhe rregullator. Pik\u00ebrisht k\u00ebto kompani jan\u00eb mb\u00ebshtet\u00ebsit m\u00eb t\u00eb fort\u00eb t\u00eb autentikimit t\u00eb fort\u00eb. Presioni mbi biznesin forcohet nga pritshm\u00ebrit\u00eb e klient\u00ebve, t\u00eb cil\u00ebt d\u00ebshirojn\u00eb t\u00eb din\u00eb se organizatat n\u00eb t\u00eb cilat ata i besojn\u00eb t\u00eb dh\u00ebnat e tyre m\u00eb t\u00eb ndjeshme p\u00ebrdorin metoda t\u00eb sigurta autentikimi. Organizatat q\u00eb p\u00ebrpunojn\u00eb PII ose PHI t\u00eb ndjesh\u00ebm p\u00ebrdorin autentikimin e fort\u00eb m\u00eb shum\u00eb se dyfish n\u00eb krahasim me organizatat q\u00eb ruajn\u00eb vet\u00ebm informacionin e kontaktit t\u00eb p\u00ebrdoruesve (figura 7).<\/p>\n

\"\u00c7far\u00eb
\n
\nFatkeq\u00ebsisht, kompanit\u00eb ende nuk duan t\u00eb implementojn\u00eb metoda t\u00eb besueshme autentikimi. Gati nj\u00eb e treta e personave q\u00eb marrin vendime biznesi e konsiderojn\u00eb fjal\u00ebkalimin si metod\u00ebn m\u00eb efektive t\u00eb autentikimit, nd\u00ebrsa 43% e konsiderojn\u00eb fjal\u00ebkalimin si m\u00ebnyr\u00ebn m\u00eb t\u00eb thjesht\u00eb t\u00eb autentikimit.<\/p>\n

\"\u00c7far\u00eb
\n<\/p>\n

Ky\u00e7ja e k\u00ebtij grafiku tregon se zhvilluesit e aplikacioneve t\u00eb biznesit n\u00eb t\u00eb gjith\u00eb bot\u00ebn jan\u00eb t\u00eb ngjash\u00ebm\u2026 Ata nuk shohin fitimin nga zbatimi i mekanizmave t\u00eb avancuar t\u00eb mbrojtjes s\u00eb qasjes n\u00eb llogari dhe ndajn\u00eb t\u00eb nj\u00ebjtat keqkuptime. Vet\u00ebm veprimet e rregullator\u00ebve mund ta ndryshojn\u00eb situat\u00ebn. <\/p>\n

T\u00eb mos prekim fjal\u00ebkalimet. Por besimi n\u00eb \u00e7far\u00eb, q\u00eb e b\u00ebn t\u00eb mendojm\u00eb se pyetjet kontrolluese jan\u00eb m\u00eb t\u00eb sigurta se tokenet kriptografike?? Efektiviteti i pyetjeve kontrolluese, t\u00eb cilat jan\u00eb leht\u00ebsisht t\u00eb kapshme, \u00ebsht\u00eb vler\u00ebsuar n\u00eb 15%, nd\u00ebrsa tokenet e paprekshme n\u00eb vet\u00ebm 10. T\u00eb pakt\u00ebn do t\u00eb kishit par\u00eb filmin \"Iluzion i Mashtrimit\", ku, edhe pse n\u00eb nj\u00eb form\u00eb alegorike, tregohet se sa leht\u00eb magjistar\u00ebt i mor\u00ebn t\u00eb gjitha p\u00ebrgjigjet e nevojshme nga nj\u00eb biznesmen mashtrues dhe e lan\u00eb at\u00eb pa para.<\/p>\n

Nj\u00eb tjet\u00ebr fakt i r\u00ebnd\u00ebsish\u00ebm q\u00eb ndri\u00e7on aft\u00ebsin\u00eb e atyre q\u00eb jan\u00eb p\u00ebrgjegj\u00ebs p\u00ebr mekanizmat e siguris\u00eb n\u00eb aplikacionet p\u00ebr p\u00ebrdoruesit. N\u00eb mendimin e tyre, procesi i futjes s\u00eb fjal\u00ebkalimit \u00ebsht\u00eb nj\u00eb operacion m\u00eb i thjesht\u00eb se sa autentifikimi me ndihm\u00ebn e nj\u00eb tokeni kriptografik. Megjithat\u00eb, \u00e7far\u00eb mund t\u00eb jet\u00eb m\u00eb e thjesht\u00eb se lidhja e nj\u00eb tokeni n\u00eb portin USB dhe futja e nj\u00eb PIN-i t\u00eb thjesht\u00eb. <\/p><\/blockquote>\n

\n\u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb theksohet se zbatimi i autentifikimit t\u00eb rrept\u00eb i lejon kompanive t\u00eb mos mendojn\u00eb m\u00eb p\u00ebr metodat e autentifikimit dhe rregullat e operimit, t\u00eb cilat jan\u00eb t\u00eb nevojshme p\u00ebr t\u00eb bllokuar skemat mashtruese, duke u p\u00ebrmbushur nevojat reale t\u00eb klient\u00ebve t\u00eb tyre.<\/p>\n

Nd\u00ebrsa respektimi i rregullave \u00ebsht\u00eb nj\u00eb prioritet mjaft t\u00eb arsyesh\u00ebm si p\u00ebr kompanit\u00eb q\u00eb p\u00ebrdorin autentifikim t\u00eb rrept\u00eb, ashtu edhe p\u00ebr ato q\u00eb nuk e b\u00ebjn\u00eb, kompanit\u00eb q\u00eb tashm\u00eb p\u00ebrdorin autentifikim t\u00eb rrept\u00eb kan\u00eb shum\u00eb m\u00eb shum\u00eb gjasa t\u00eb thon\u00eb se rritja e besnik\u00ebris\u00eb s\u00eb klient\u00ebve \u00ebsht\u00eb treguesi m\u00eb i r\u00ebnd\u00ebsish\u00ebm q\u00eb ata e konsiderojn\u00eb kur vler\u00ebsojn\u00eb metod\u00ebn e autentifikimit. (18% ndaj 12%) (figura 10).<\/p>\n

\"\u00c7far\u00eb<\/p>\n

Autentifikimi korporativ<\/h2>\n

\nQ\u00eb nga viti 2017, zbatimi i autentifikimit t\u00eb fort\u00eb n\u00eb nd\u00ebrmarrje ka rritur, por pak m\u00eb modest se sa p\u00ebr aplikacionet p\u00ebr konsumator\u00ebt. Pjesa e nd\u00ebrmarrjeve q\u00eb p\u00ebrdorin autentifikimin e fort\u00eb \u00ebsht\u00eb rritur nga 7% n\u00eb 2017 n\u00eb 12% n\u00eb 2018. N\u00eb kund\u00ebrshtim me aplikacionet p\u00ebr p\u00ebrdoruesit, n\u00eb mjedisin korporativ p\u00ebrdorimi i metodave t\u00eb autentifikimit pa fjal\u00ebkalim \u00ebsht\u00eb disi m\u00eb i zakonsh\u00ebm n\u00eb aplikacionet web sesa n\u00eb ato mobile. Rreth gjysma e nd\u00ebrmarrjeve raportojn\u00eb se p\u00ebrdorin vet\u00ebm emra p\u00ebrdoruesish dhe fjal\u00ebkalime p\u00ebr autentifikimin e p\u00ebrdoruesve t\u00eb tyre kur hyjn\u00eb n\u00eb sistem, ku \u00e7do e pesta (22%) gjithashtu mb\u00ebshtetet ekskluzivisht n\u00eb fjal\u00ebkalime p\u00ebr autentifikimin sekondar kur akseson t\u00eb dh\u00ebna ve\u00e7an\u00ebrisht t\u00eb r\u00ebnd\u00ebsishme.dmth, p\u00ebrdoruesi fillimisht regjistrohet n\u00eb aplikacion duke p\u00ebrdorur nj\u00eb metod\u00eb m\u00eb t\u00eb thjesht\u00eb autentifikimi, dhe n\u00ebse d\u00ebshiron t\u00eb fitoj\u00eb akses n\u00eb t\u00eb dh\u00ebna kritike, do t\u00eb kryej\u00eb nj\u00eb procedur\u00eb tjet\u00ebr autentifikimi, k\u00ebsaj here zakonisht duke p\u00ebrdorur nj\u00eb metod\u00eb m\u00eb t\u00eb besueshme.<\/i>).<\/p>\n

\"\u00c7far\u00eb<\/p>\n

Duhet t\u00eb kuptohet se n\u00eb raport nuk \u00ebsht\u00eb p\u00ebrfshir\u00eb p\u00ebrdorimi i tokeneve kriptografike p\u00ebr autentifikimin me dy faktor\u00eb n\u00eb sistemet operative Windows, Linux dhe Mac OS X. Kjo n\u00eb k\u00ebt\u00eb moment \u00ebsht\u00eb p\u00ebrdorimi m\u00eb i gjer\u00eb i 2FA. (Fatkeq\u00ebsisht, tokene t\u00eb krijuara sipas standardeve FIDO mund t\u00eb implementojn\u00eb 2FA vet\u00ebm p\u00ebr Windows 10).<\/p>\n

Sidoqoft\u00eb, n\u00ebse p\u00ebr zbatimin e 2FA n\u00eb aplikacionet online dhe mobile k\u00ebrkohet nj\u00eb s\u00ebr\u00eb masash, duke p\u00ebrfshir\u00eb p\u00ebrmir\u00ebsime t\u00eb k\u00ebtyre aplikacioneve, p\u00ebr zbatimin e 2FA n\u00eb Windows \u00ebsht\u00eb e nevojshme vet\u00ebm t\u00eb konfigurohet PKI (p\u00ebr shembull, mbi baz\u00ebn e Microsoft Certification Server) dhe politikave t\u00eb autentifikimit n\u00eb AD. <\/p>\n

Dhe pasi mbrojtja e hyrjes n\u00eb PC-n\u00eb e pun\u00ebs dhe n\u00eb domen \u00ebsht\u00eb nj\u00eb element i r\u00ebnd\u00ebsish\u00ebm i mbrojtjes s\u00eb t\u00eb dh\u00ebnave korporative, zbatimi i autentifikimit me dy faktor\u00eb po rritet vazhdimisht.<\/p><\/blockquote>\n

\nMetodat e tjera dy t\u00eb zakonshme t\u00eb autentifikimit t\u00eb p\u00ebrdoruesve kur hyjn\u00eb n\u00eb sistem jan\u00eb fjal\u00ebkalimet nj\u00eb her\u00eb, t\u00eb ofruara p\u00ebrmes nj\u00eb aplikacioni t\u00eb ve\u00e7ant\u00eb (13% e nd\u00ebrmarrjeve), dhe fjal\u00ebkalimet nj\u00eb her\u00eb, t\u00eb d\u00ebrguara p\u00ebrmes SMS (12%). Edhe pse p\u00ebrqindja e p\u00ebrdorimit t\u00eb t\u00eb dy metodave \u00ebsht\u00eb mjaft e ngjashme, por OTP SMS zakonisht p\u00ebrdoret p\u00ebr t\u00eb rritur nivelin e autorizimit (n\u00eb 24% t\u00eb kompanive). (Figura 12).<\/p>\n

\"\u00c7far\u00eb
\n
\nRritja e p\u00ebrdorimit t\u00eb autentikimit t\u00eb fort\u00eb n\u00eb nd\u00ebrmarrje, ndoshta mund t\u00eb shpjegohet me rritjen e disponueshm\u00ebris\u00eb s\u00eb zbatimeve t\u00eb metodave t\u00eb kriptografis\u00eb p\u00ebr autentikimin n\u00eb platformat e menaxhimit t\u00eb identitetit t\u00eb nd\u00ebrmarrjes (thjesht, sistemi korporativ SSO dhe IAM kan\u00eb m\u00ebsuar t\u00eb p\u00ebrdorin tokene). <\/p>\n

P\u00ebr autentikimin mobil t\u00eb punonj\u00ebsve dhe kontraktor\u00ebve, nd\u00ebrmarrjet, n\u00eb mas\u00ebn m\u00eb t\u00eb madhe, mb\u00ebshteten n\u00eb fjal\u00ebkalime m\u00eb shum\u00eb se sa n\u00eb autentikimin n\u00eb aplikacionet p\u00ebr konsumator\u00ebt. Pak m\u00eb shum\u00eb se gjysma (53%) e nd\u00ebrmarrjeve p\u00ebrdorin fjal\u00ebkalime p\u00ebr autentikimin e aksesit t\u00eb p\u00ebrdoruesve n\u00eb t\u00eb dh\u00ebnat e kompanis\u00eb p\u00ebrmes nj\u00eb pajisje mobile.<\/p>\n

N\u00eb rastin e pajisjeve mobile, do t\u00eb ishte e leht\u00eb t\u00eb besohej n\u00eb fuqin\u00eb e madhe t\u00eb biometris\u00eb, n\u00ebse nuk do t\u00eb ishin kaq shum\u00eb raste t\u00eb falsifikimit t\u00eb shenjave t\u00eb gisht\u00ebrinjve, z\u00ebrit, fytyr\u00ebs dhe madje edhe irid\u00ebs. Nj\u00eb k\u00ebrkes\u00eb n\u00eb nj\u00eb motor k\u00ebrkimi do t\u00eb tregonte se nj\u00eb m\u00ebnyr\u00eb t\u00eb besueshme p\u00ebr autentikimin biometrik thjesht nuk ekziston. Sensor\u00ebt e sakt\u00eb q\u00eb p\u00ebrdoren n\u00eb t\u00eb v\u00ebrtet\u00eb ekzistojn\u00eb, por jan\u00eb t\u00eb shtrenjt\u00eb dhe me p\u00ebrmasa t\u00eb m\u00ebdha \u2013 dhe nuk instalohet n\u00eb smartphone.<\/p>\n

Prandaj, metoda e vetme funksionale e 2FA n\u00eb pajisjet mobile \u00ebsht\u00eb p\u00ebrdorimi i tokeneve kriptografike, t\u00eb cilat lidhen me smartphone p\u00ebrmes interfejs\u00ebve NFC, Bluetooth dhe USB Type-C.<\/p><\/blockquote>\n

\n\"\u00c7far\u00eb
\n
\nMbrojtja e t\u00eb dh\u00ebnave financiare t\u00eb kompanis\u00eb \u00ebsht\u00eb arsyeja kryesore p\u00ebr investimet n\u00eb autentikimin pa fjal\u00ebkalim (44%) me rritjen m\u00eb t\u00eb shpejt\u00eb q\u00eb nga viti 2017 (rritje prej tet\u00eb pikash p\u00ebrqindje). M\u00eb pas vjen mbrojtja e pron\u00ebs intelektuale (40%) dhe t\u00eb dh\u00ebnave t\u00eb burimeve njerzore (HR) (39%). Dhe \u00ebsht\u00eb e qart\u00eb pse \u2013 p\u00ebrve\u00e7 faktit q\u00eb vlera e lidhur me k\u00ebto lloje t\u00eb dh\u00ebnash njihet gjer\u00ebsisht, ato jan\u00eb gjithashtu n\u00eb p\u00ebrdorim nga nj\u00eb num\u00ebr relativisht i vog\u00ebl punonj\u00ebsish. K\u00ebshtu, shpenzimet p\u00ebr zbatimin e tyre nuk jan\u00eb aq t\u00eb larta, dhe p\u00ebr t\u00eb m\u00ebsuar se si t\u00eb punosh me nj\u00eb sistem m\u00eb t\u00eb komplikuar autentikimi nevojiten vet\u00ebm disa persona. N\u00eb an\u00ebn tjet\u00ebr, llojet e t\u00eb dh\u00ebnave dhe pajisjeve, t\u00eb cilat zakonisht i qasen shumic\u00ebs s\u00eb punonj\u00ebsve t\u00eb nd\u00ebrmarrjeve, jan\u00eb ende t\u00eb mbrojtura ekskluzivisht nga fjal\u00ebkalimet. Dokumentet e punonj\u00ebsve, stacionet e pun\u00ebs dhe portalet korporative t\u00eb post\u00ebs elektronike jan\u00eb fushat e rrezikut m\u00eb t\u00eb madh, pasi vet\u00ebm nj\u00eb t\u00eb kat\u00ebrt\u00ebn e nd\u00ebrmarrjeve i mbrojn\u00eb k\u00ebto asete me autentikimin pa fjal\u00ebkalim.<\/p>\n

\"\u00c7far\u00eb<\/p>\n

N\u00eb t\u00eb v\u00ebrtet\u00eb, emaili korporativ \u00ebsht\u00eb nj\u00eb mjet mjaft i rreziksh\u00ebm dhe \"i \u00e7ar\u00eb\", dhe niveli i rrezikut potencial n\u00ebnvler\u00ebsohet nga shumica e drejtor\u00ebve t\u00eb IT. \u00c7do dit\u00eb, punonj\u00ebsit marrin dhjet\u00ebra e-maile, k\u00ebshtu q\u00eb pse t\u00eb mos ket\u00eb ndonj\u00eb mesazh phishing (dometh\u00ebn\u00eb, mashtrues) n\u00eb mes t\u00eb tyre? Ky email do t\u00eb jet\u00eb i formatuar si emailet e kompanis\u00eb, prandaj punonj\u00ebsi pa frik\u00eb do t\u00eb klikoj\u00eb n\u00eb lidhjen n\u00eb k\u00ebt\u00eb email. M\u00eb pas, mund t\u00eb ndodh\u00eb \u00e7do gj\u00eb, p\u00ebr shembull, shkarkimi i nj\u00eb virusi n\u00eb makin\u00ebn e sulmuar ose rrjedhja e fjal\u00ebkalimeve (duke p\u00ebrfshir\u00eb metod\u00ebn e inxhinieris\u00eb sociale, p\u00ebrmes futjes n\u00eb nj\u00eb form\u00eb autentikimi t\u00eb falsifikuar t\u00eb krijuar nga sulmuesi).<\/p>\n

P\u00ebr t\u00eb parandaluar q\u00eb ngjash\u00ebm t\u00eb ndodhin, e-mailet duhet t\u00eb jen\u00eb t\u00eb n\u00ebnshkruara. K\u00ebshtu do t\u00eb jet\u00eb menj\u00ebher\u00eb e qart\u00eb se cili email \u00ebsht\u00eb krijuar nga nj\u00eb punonj\u00ebs legal dhe cili nga nj\u00eb sulmues. N\u00eb Outlook \/ Exchange, p\u00ebr shembull, n\u00ebnshkrimi elektronik i bazuar n\u00eb tokene kriptografike aktivizohet mjaft shpejt dhe leht\u00eb dhe mund t\u00eb p\u00ebrdoret s\u00eb bashku me autentikimin me dy faktor\u00eb n\u00eb PC dhe domainet e Windows.<\/p><\/blockquote>\n

\nMes atyre drejtuesve q\u00eb mb\u00ebshteten ekskluzivisht n\u00eb autentifikimin p\u00ebrmes fjal\u00ebkalimeve brenda nd\u00ebrmarrjes, dy t\u00eb tretat (66%) e b\u00ebjn\u00eb k\u00ebt\u00eb sepse mendojn\u00eb se fjal\u00ebkalimet sigurojn\u00eb nj\u00eb siguri t\u00eb mjaftueshme p\u00ebr k\u00ebt\u00eb lloj informacioni q\u00eb kompania e tyre duhet t\u00eb mbroj\u00eb (ilustrimi 15).<\/p>\n

Megjithat\u00eb, metodat e autentifikimit t\u00eb fort\u00eb po b\u00ebhen gjithnj\u00eb e m\u00eb t\u00eb zakonshme. Kjo \u00ebsht\u00eb kryesisht p\u00ebr shkak t\u00eb rritjes s\u00eb disponueshm\u00ebris\u00eb s\u00eb tyre. M\u00eb shum\u00eb e m\u00eb shum\u00eb sisteme t\u00eb menaxhimit t\u00eb identitetit dhe aksesit (IAM), shfletuesish dhe sisteme operativash mb\u00ebshtesin autentifikimin p\u00ebrmes tokeneve kriptografike. <\/p>\n

P\u00ebrve\u00e7 k\u00ebsaj, autentifikimi i fort\u00eb ka nj\u00eb avantazh tjet\u00ebr. Duke qen\u00eb se fjal\u00ebkalimi nuk p\u00ebrdoret m\u00eb (i z\u00ebvend\u00ebsuar me nj\u00eb kod PIN t\u00eb thjesht\u00eb), nuk ka as k\u00ebrkesa nga punonj\u00ebsit p\u00ebr t\u00eb ndryshuar fjal\u00ebkalimin e harruar. Kjo, nga ana tjet\u00ebr, redukton ngarkes\u00ebn ndaj departamentit t\u00eb IT t\u00eb nd\u00ebrmarrjes.<\/p>\n

\"\u00c7far\u00eb<\/p>\n

\n

P\u00ebrfundimet dhe konkluzionet<\/h4>\n

<\/p>\n

    \n
  1. Drejtuesit shpesh nuk kan\u00eb njohurit\u00eb e nevojshme p\u00ebr t\u00eb vler\u00ebsuar efektivitetin <\/b>e v\u00ebrtet\u00eb t\u00eb varianteve t\u00eb ndryshme t\u00eb autentifikimit. Ata jan\u00eb m\u00ebsuar t\u00eb besojn\u00eb n\u00eb metoda t\u00eb tilla <\/b>t\u00eb vjetra <\/li>\n
  2. t\u00eb mbrojtjes si fjal\u00ebkalimet dhe pyetjet sekrete, thjesht p\u00ebr shkak se \"m\u00eb par\u00eb ka funksionuar\". P\u00ebrdoruesit kan\u00eb k\u00ebto njohuri edhe<\/b>m\u00eb pak se ata, p\u00ebr ta, e r\u00ebnd\u00ebsishme \u00ebsht\u00eb thjesht\u00ebsia dhe komoditeti<\/b>. Nd\u00ebrsa nuk kan\u00eb motive t\u00eb ngutshme p\u00ebr t\u00eb zgjedhur zgjidhje m\u00eb t\u00eb mbrojtura<\/b>.<\/li>\n
  3. Zhvilluesit e aplikacioneve p\u00ebrdorues shpeshher\u00eb nuk kan\u00eb arsye<\/b>, p\u00ebr t\u00eb implementuar autenticimin me dy faktor\u00eb n\u00eb vend t\u00eb fjal\u00ebkalimit. Konkurrenca p\u00ebr nivelin e mbrojtjes n\u00eb aplikacionet p\u00ebrdorues nuk ka<\/b>.<\/li>\n
  4. T\u00eb gjitha p\u00ebrgjegj\u00ebsi p\u00ebr thyerjen kalon te p\u00ebrdoruesi<\/b>. N\u00ebse ia tregove fjal\u00ebkalimin nj\u00eb t\u00eb keqi \u2013 je fajtor<\/b>. N\u00ebse ia kap\u00ebn ose e vun\u00eb re fjal\u00ebkalimin t\u00ebnd \u2013 je fajtor<\/b>. N\u00ebse nuk k\u00ebrkove nga zhvilluesi t\u00eb p\u00ebrdor\u00eb metoda t\u00eb sigurta t\u00eb autenticimit n\u00eb produktin e tij \u2013 je fajtor<\/b>.<\/li>\n
  5. Rregullatori <\/b>n\u00eb radh\u00eb t\u00eb par\u00eb duhet t\u00eb k\u00ebrkoj\u00eb nga kompanit\u00eb implementimin e zgjidhjeve q\u00eb<\/b> bllokojn\u00eb shkarkimet e t\u00eb dh\u00ebnave (ve\u00e7an\u00ebrisht autenticimi me dy faktor\u00eb), dhe jo t\u00eb nd\u00ebshkoj\u00eb p\u00ebr <\/b>shkarkimin e t\u00eb dh\u00ebnave q\u00eb \u00ebsht\u00eb b\u00ebr\u00eb. Disa zhvillues softueri p\u00ebrpiqen t\u00eb shesin konsumator\u00ebve<\/b> produkte t\u00eb vjetra dhe jo shum\u00eb t\u00eb sigurta<\/li>\n
  6. n\u00eb nj\u00eb paketim t\u00eb bukur \"produkti inovativ\". P\u00ebr shembull, autenticimi p\u00ebrmes lidhjes me nj\u00eb smartphone t\u00eb caktuar ose p\u00ebrdorimi i biometris\u00eb. Si\u00e7 tregohet nga raporti, vet\u00ebm<\/b> zgjidhjen zgjidhja e v\u00ebrtet\u00eb e siguris\u00eb<\/b> mund t\u00eb jet\u00eb ajo q\u00eb bazohet n\u00eb autenticimin e fort\u00eb, pra n\u00eb tokenat kriptografik\u00eb. I nj\u00ebjti<\/b> token kriptografik mund t\u00eb p\u00ebrdoret p\u00ebr<\/li>\n
  7. nj\u00eb gam\u00eb t\u00eb gjer\u00eb detyrash<\/b> : p\u00ebr autenticimin e fort\u00eb<\/b>n\u00eb sistemin operative t\u00eb nd\u00ebrmarrjes, n\u00eb aplikacionin korporativ dhe p\u00ebrdorues, p\u00ebr n\u00ebnshkrimin elektronik<\/b> t\u00eb transaksioneve financiare (e r\u00ebnd\u00ebsishme p\u00ebr aplikacionet bankare), dokumenteve dhe e-maileve. \ud83e\udd47\u00c7far\u00eb do t\u00eb ndodh\u00eb me autenticimin dhe fjal\u00ebkalimet? Pjesa e dyt\u00eb e raportit Javelin \"Gjendja e autenticimit t\u00eb fort\u00eb\" | ProHoster<\/b> \ud83e\udd47 \u00c7far\u00eb do t\u00eb ndodh\u00eb me autentifikimin dhe fjal\u00ebkalimet? Pjesa e dyt\u00eb e raportit Javelin \"Gjendja e autentifikimit t\u00eb fort\u00eb\" | ProHoster<\/li>\n<\/ol>\n<\/blockquote>\n

    Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u00abJavelin Strategy & Research\u00bb \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u00abThe State of Strong Authentication 2019\u00bb. \u0415\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u0431\u0440\u0430\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u043e\u043c \u043a\u0430\u043a\u0438\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u043b\u044e\u0431\u043e\u043f\u044b\u0442\u043d\u044b\u0435 \u0432\u044b\u0432\u043e\u0434\u044b \u043e \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0435\u0440\u0435\u0432\u043e\u0434 \u043f\u0435\u0440\u0432\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u0441 \u0432\u044b\u0432\u043e\u0434\u0430\u043c\u0438 \u0430\u0432\u0442\u043e\u0440\u043e\u0432 \u043e\u0442\u0447\u0435\u0442\u0430, \u043c\u044b \u0443\u0436\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043d\u0430 \u0425\u0430\u0431\u0440\u0435. \u0410 \u0441\u0435\u0439\u0447\u0430\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25549,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33885","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00c7far\u00eb do t\u00eb ndodh\u00eb me autentifikimin dhe fjal\u00ebkalimet? Pjesa e dyt\u00eb e raportit Javelin \"Gjendja e autentifikimit t\u00eb ashp\u00ebr\" | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/tak-chto-zhe-budet-s-autentifikatsiej-i-parolyami-vtoraya-chast-otcheta-javelin-sostoyanie-strogoj-autentifikatsii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0422\u0430\u043a \u0447\u0442\u043e \u0436\u0435 \u0431\u0443\u0434\u0435\u0442 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438? \u0412\u0442\u043e\u0440\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043e\u0442\u0447\u0435\u0442\u0430 Javelin \u00ab\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\u00bb | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/tak-chto-zhe-budet-s-autentifikatsiej-i-parolyami-vtoraya-chast-otcheta-javelin-sostoyanie-strogoj-autentifikatsii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:55:12+00:00","article:modified_time":"2019-10-31T18:55:12+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33885","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 17:06:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:31:23","updated":"2026-01-21 17:06:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/33885","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=33885"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/33885\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/25549"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=33885"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=33885"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=33885"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}