{"id":37446,"date":"2019-10-31T22:17:39","date_gmt":"2019-10-31T19:17:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov\/"},"modified":"2019-10-31T22:17:39","modified_gmt":"2019-10-31T19:17:39","slug":"ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov","title":{"rendered":"Jo vet\u00ebm skanimi, ose si t\u00eb nd\u00ebrtojm\u00eb procesin e menaxhimit t\u00eb dob\u00ebsive n\u00eb 9 hapa","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>M\u00eb 4 korrik ne organizuam nj\u00eb seminar t\u00eb madh <noindex><a rel=\"nofollow\" href=\"https:\/\/uni.dtln.ru\/courses\/universitety-dataline-v-moskve\/upravlenie-uyazvimostyami-standarty-realnost-instrumenty\">p\u00ebr menaxhimin e vulnerabiliteteve.<\/a><\/noindex>Sot ne publikojm\u00eb transkriptin e fjalimit t\u00eb Andrey Novikov nga Qualys. Ai do t\u00eb tregoj\u00eb se cilat hapa duhet t\u00eb ndiqni p\u00ebr t\u00eb krijuar nj\u00eb proces t\u00eb funksionimit t\u00eb menaxhimit t\u00eb vulnerabiliteteve. Spoiler: ne do t\u00eb arrijm\u00eb te skanimi vet\u00ebm n\u00eb mes t\u00eb rrug\u00ebs.<\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"rGXwDWhYWTg\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/rGXwDWhYWTg\/hqdefault.jpg\" alt=\"Luaj videon\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Hapi \u2116 1: P\u00ebrcaktoni nivelin e pjekuris\u00eb s\u00eb proceseve t\u00eb menaxhimit t\u00eb vulnerabiliteteve<\/h3>\n<p>\nN\u00eb fillim duhet t\u00eb kuptoni n\u00eb cilin shkall\u00eb ndodhet organizata juaj n\u00eb lidhje me pjekurin\u00eb e proceseve t\u00eb menaxhimit t\u00eb vulnerabiliteteve. Vet\u00ebm pas k\u00ebsaj do t\u00eb mund t\u00eb kuptoni se ku duhet t\u00eb shkoni dhe cil\u00ebt hapa duhet t\u00eb nd\u00ebrmerrni. Para se t\u00eb filloni me skanimin dhe aktivitete t\u00eb tjera, organizatat duhet t\u00eb b\u00ebjn\u00eb nj\u00eb pun\u00eb t\u00eb brendshme dhe t\u00eb kuptojn\u00eb se si jan\u00eb t\u00eb strukturuara proceset tuaja aktuale n\u00eb lidhje me IT-n\u00eb dhe me sigurin\u00eb e informacionit.<\/p>\n<p>Provoni t\u00eb p\u00ebrgjigjeni n\u00eb pyetje bazike:<\/p>\n<ul>\n<li>a keni procese p\u00ebr inventarizimin dhe klasifikimin e aseteve;\u00a0<\/li>\n<li>sa rregullisht skanohet infrastruktura IT dhe a \u00ebsht\u00eb e gjith\u00eb infrastruktura e mbuluar, a e shihni t\u00ebr\u00eb pamjen;<\/li>\n<li>a monitorohen burimet tuaja IT;<\/li>\n<li>a jan\u00eb implementuar disa KPI n\u00eb proceset tuaja dhe si e kuptoni se ato po realizohen;<\/li>\n<li>a jan\u00eb dokumentuar t\u00eb gjitha k\u00ebto procese.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Jo vet\u00ebm skanimi, ose si t\u00eb nd\u00ebrtojm\u00eb procesin e menaxhimit t\u00eb dob\u00ebsive n\u00eb 9 hapa\" src=\"\/wp-content\/uploads\/2019\/08\/8bfd0539c7e0e360fa2a45cc1d7bd9ac.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Hapi \u2116 2: Siguroni mbulimin e plot\u00eb t\u00eb infrastruktur\u00ebs <\/h3>\n<p>\nNuk mund ta mbroni at\u00eb p\u00ebr t\u00eb cil\u00ebn nuk e dini. N\u00ebse nuk keni nj\u00eb pamje t\u00eb plot\u00eb se \u00e7far\u00eb p\u00ebrb\u00ebn infrastruktura juaj IT, nuk do t\u00eb jeni n\u00eb gjendje ta mbroni at\u00eb. Infrastruktura moderne \u00ebsht\u00eb komplekse dhe vazhdimisht ndryshon sasiht dhe cil\u00ebsisht. <br \/>\nTani infrastruktura IT bazohen jo vet\u00ebm n\u00eb nj\u00eb grumbull teknologjish klasike (stacionet e pun\u00ebs, <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/\"   title=\"server\u00ebt\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1841\">server\u00ebt<\/a>, makinat virtuale), por edhe n\u00eb t\u00eb rejat \u2013 kontejner\u00ebt, mikrosh\u00ebrbimet. Sh\u00ebrbimi i siguris\u00eb informacionit gjithmon\u00eb p\u00ebrpiqet t\u00eb shmang\u00eb t\u00eb fundit, pasi \u00ebsht\u00eb shum\u00eb e v\u00ebshtir\u00eb t\u00eb punosh me to p\u00ebrmes grupeve ekzistuese t\u00eb mjeteve, t\u00eb cilat p\u00ebrb\u00ebhen kryesisht nga skaner\u00eb. Problemi \u00ebsht\u00eb se \u00e7do skaner nuk mund t\u00eb mbuloj\u00eb t\u00ebr\u00eb infrastruktur\u00ebn. Q\u00eb skaneri t\u00eb arrij\u00eb \u00e7do nyje n\u00eb infrastruktur\u00eb, duhet t\u00eb p\u00ebrputhen disa faktor\u00eb nj\u00ebkoh\u00ebsisht. Aktivi duhet t\u00eb jet\u00eb brenda perimetrit t\u00eb organizat\u00ebs n\u00eb momentin e skanimit. Skaneri duhet t\u00eb ket\u00eb qasje n\u00eb rrjet n\u00eb aktive, llogarit\u00eb e tyre, p\u00ebr t\u00eb mbledhur informacionin e plot\u00eb.<\/p>\n<p>Sipas statistikave tona, kur b\u00ebhet fjal\u00eb p\u00ebr organizata mesatare ose t\u00eb m\u00ebdha, rreth 15-20% e infrastruktur\u00ebs nuk kapet nga skaneri p\u00ebr arsye t\u00eb ndryshme: aktivi ka dal\u00eb jasht\u00eb perimetrit ose nuk ka marr\u00eb pjes\u00eb kurr\u00eb n\u00eb zyr\u00eb. P\u00ebr shembull, nj\u00eb laptop i punonj\u00ebsit q\u00eb punon n\u00eb distanc\u00eb, por ka qasje n\u00eb rrjetin korporativ, ose aktivet jan\u00eb n\u00eb sh\u00ebrbime cloud t\u00eb jashtme si Amazon. Dhe skaneri, ndoshta, nuk do t\u00eb dij\u00eb asgj\u00eb p\u00ebr k\u00ebto aktive, pasi ato jan\u00eb jasht\u00eb zon\u00ebs s\u00eb tij t\u00eb dukshm\u00ebris\u00eb.<\/p>\n<p>P\u00ebr t\u00eb mbuluar t\u00ebr\u00eb infrastruktur\u00ebn, nuk duhet t\u00eb p\u00ebrdoren vet\u00ebm skaner\u00eb, por nj\u00eb shenj\u00eb t\u00eb plot\u00eb sensor\u00ebsh, duke p\u00ebrfshir\u00eb teknologji p\u00ebr d\u00ebgjimin pasiv t\u00eb trafikut p\u00ebr t\u00eb zbuluar pajisje t\u00eb reja n\u00eb infrastruktur\u00ebn tuaj, metod\u00ebn agent p\u00ebr mbledhjen e t\u00eb dh\u00ebnave, q\u00eb lejon marrjen e t\u00eb dh\u00ebnave n\u00eb koh\u00eb reale, pa pasur nevoj\u00eb p\u00ebr skanim, pa ndarjen e kredencialeve.<\/p>\n<p><img decoding=\"async\" alt=\"Jo vet\u00ebm skanimi, ose si t\u00eb nd\u00ebrtojm\u00eb procesin e menaxhimit t\u00eb dob\u00ebsive n\u00eb 9 hapa\" src=\"\/wp-content\/uploads\/2019\/08\/8eb24a33955ba1f6a8f295001b4e413f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Hapi \u2116 3: Kryeni kategorizimin e aktiveve<\/h3>\n<p>\nJo t\u00eb gjitha aktivet jan\u00eb t\u00eb nj\u00ebjta n\u00eb p\u00ebrdorim. T\u00eb p\u00ebrcaktosh se cilat aktive jan\u00eb t\u00eb r\u00ebnd\u00ebsishme dhe cilat jo, \u00ebsht\u00eb detyra juaj. Asnj\u00eb instrument, po ashtu skaneri, nuk do ta b\u00ebj\u00eb k\u00ebt\u00eb p\u00ebr ju. N\u00eb m\u00ebnyr\u00eb ideale, siguria informacionit, IT dhe biznesi s\u00eb bashku analizojn\u00eb infrastruktur\u00ebn p\u00ebr t\u00eb identifikuar sistemet kritike p\u00ebr biznesin. P\u00ebr to, ata p\u00ebrcaktojn\u00eb metrikat e pranuara p\u00ebr disponueshm\u00ebrin\u00eb, integritetin, privat\u00ebsin\u00eb, RTO\/RPO etj.<\/p>\n<p>Kjo do t\u00eb ndihmoj\u00eb n\u00eb p\u00ebrcaktimin e prioriteteve n\u00eb procesin e menaxhimit t\u00eb dob\u00ebsive. Kur specialist\u00ebt tuaj t\u00eb marrin t\u00eb dh\u00ebna mbi dob\u00ebsit\u00eb, ato do t\u00eb jen\u00eb informacione t\u00eb detajuara, duke marr\u00eb parasysh r\u00ebnd\u00ebsin\u00eb e sistemeve, jo nj\u00eb flet\u00eb me mij\u00ebra dob\u00ebsi n\u00eb t\u00ebr\u00eb infrastruktur\u00ebn.<\/p>\n<p><img decoding=\"async\" alt=\"Jo vet\u00ebm skanimi, ose si t\u00eb nd\u00ebrtojm\u00eb procesin e menaxhimit t\u00eb dob\u00ebsive n\u00eb 9 hapa\" src=\"\/wp-content\/uploads\/2019\/08\/8c5fc2ea7a0c6f0df26be14c07bb7a9c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Hapi \u2116 4: Kryeni nj\u00eb vler\u00ebsim t\u00eb infrastruktur\u00ebs<\/h3>\n<p>\nN\u00eb hapin e kat\u00ebrt, ne arrijm\u00eb n\u00eb vler\u00ebsimin e infrastruktur\u00ebs nga k\u00ebndv\u00ebshtrimi i dob\u00ebsive. K\u00ebshillojm\u00eb q\u00eb n\u00eb k\u00ebt\u00eb faz\u00eb t\u00eb kushtoni v\u00ebmendje jo vet\u00ebm dob\u00ebsive n\u00eb software, por edhe gabimeve n\u00eb konfigurime, t\u00eb cilat gjithashtu mund t\u00eb jen\u00eb dob\u00ebsi. K\u00ebtu ne rekomandojm\u00eb nj\u00eb metod\u00eb agjente p\u00ebr mbledhjen e informacionit. Skener\u00ebt mund dhe duhet t\u00eb p\u00ebrdoren p\u00ebr t\u00eb vler\u00ebsuar sigurin\u00eb e perimetrave. N\u00ebse p\u00ebrdorni burime nga ofruesit e sh\u00ebrbimeve Cloud, duhet gjithashtu t\u00eb mbledhni informacion p\u00ebr asetet dhe konfigurimet nga aty. Kushtoni v\u00ebmendje t\u00eb ve\u00e7ant\u00eb analiz\u00ebs s\u00eb dob\u00ebsive n\u00eb infrastruktura q\u00eb p\u00ebrdorin kontenier\u00eb Docker.<\/p>\n<p><img decoding=\"async\" alt=\"Jo vet\u00ebm skanimi, ose si t\u00eb nd\u00ebrtojm\u00eb procesin e menaxhimit t\u00eb dob\u00ebsive n\u00eb 9 hapa\" src=\"\/wp-content\/uploads\/2019\/08\/3aa4a3a6aca611af6e49ef5aa2360ea0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Hapi \u2116 5: Konfiguroni raportimin<\/h3>\n<p>\nKy \u00ebsht\u00eb nj\u00eb nga element\u00ebt e r\u00ebnd\u00ebsish\u00ebm brenda procesit t\u00eb menaxhimit t\u00eb dob\u00ebsive. <br \/>\nPika e par\u00eb: askush nuk do t\u00eb punoj\u00eb me raporte shum\u00ebfaq\u00ebshe me nj\u00eb list\u00eb t\u00eb \u00e7rregullt dob\u00ebsish dhe p\u00ebrshkrime p\u00ebr zgjidhjen e tyre. Duhet n\u00eb radh\u00eb t\u00eb par\u00eb t\u00eb komunikoni me koleg\u00ebt dhe t\u00eb zbuloni se \u00e7far\u00eb duhet t\u00eb jet\u00eb n\u00eb raport dhe si u p\u00ebrshtatet atyre t\u00eb marrin informacionin. P\u00ebr shembull, ndonj\u00eb administrator nuk ka nevoj\u00eb p\u00ebr nj\u00eb p\u00ebrshkrim t\u00eb detajuar t\u00eb dob\u00ebsis\u00eb dhe ka nevoj\u00eb vet\u00ebm p\u00ebr informacion mbi patch-in dhe nj\u00eb lidhje p\u00ebr t\u00eb. P\u00ebr nj\u00eb specialist tjet\u00ebr, e r\u00ebnd\u00ebsishme jan\u00eb vet\u00ebm dob\u00ebsit\u00eb e gjetura n\u00eb infrastruktur\u00ebn rrjetore.<\/p>\n<p>Pika e dyt\u00eb: p\u00ebr raportimin un\u00eb kuptoj jo vet\u00ebm raportet n\u00eb nj\u00eb format t\u00eb shkruar. Ky \u00ebsht\u00eb nj\u00eb format i vjetruar p\u00ebr marrjen e informacionit dhe nj\u00eb histori statike. Nj\u00eb person merr nj\u00eb raport dhe nuk ka mund\u00ebsi t\u00eb ndikoj\u00eb n\u00eb m\u00ebnyr\u00ebn se si do t\u00eb paraqiten t\u00eb dh\u00ebnat n\u00eb at\u00eb raport. P\u00ebr t\u00eb marr\u00eb nj\u00eb raport n\u00eb formatin e d\u00ebshiruar, nj\u00eb specialist IT duhet t\u00eb kontaktoj\u00eb me specialistin e siguris\u00eb IT dhe t'i k\u00ebrkoj\u00eb atij t\u00eb ristrukturoj\u00eb raportin. Koha kalon, dalin dob\u00ebsi t\u00eb reja. N\u00eb vend q\u00eb t\u00eb shk\u00ebmbejn\u00eb raporte nga nj\u00eb departament n\u00eb tjetrin, specialist\u00ebt e t\u00eb dy fushave duhet t\u00eb ken\u00eb mund\u00ebsin\u00eb t\u00eb observojn\u00eb t\u00eb dh\u00ebnat n\u00eb linj\u00eb dhe t\u00eb shohin t\u00eb nj\u00ebjt\u00ebn pamje. Prandaj, n\u00eb platform\u00ebn ton\u00eb ne p\u00ebrdorim raporte dinamike n\u00eb form\u00ebn e dashboard-eve t\u00eb personalizuara. <\/p>\n<p><img decoding=\"async\" alt=\"Jo vet\u00ebm skanimi, ose si t\u00eb nd\u00ebrtojm\u00eb procesin e menaxhimit t\u00eb dob\u00ebsive n\u00eb 9 hapa\" src=\"\/wp-content\/uploads\/2019\/08\/1ec7434339d2162d172e10cdc77afc6a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Hapi \u2116 6: Jepni prioritet<\/h3>\n<p>\nK\u00ebtu mund t\u00eb b\u00ebni sa vijon:<\/p>\n<p>1. Krijimi i nj\u00eb repositori me imazhe t\u00eb arta t\u00eb sistemeve. Punoni me imazhe t\u00eb arta, kontrolloni ato p\u00ebr dob\u00ebsi dhe sakt\u00ebsin\u00eb e konfigurimeve n\u00eb m\u00ebnyr\u00eb t\u00eb vazhdueshme. K\u00ebt\u00eb mund ta b\u00ebni me ndihm\u00ebn e agen\u00ebve, t\u00eb cil\u00ebt do t\u00eb raportojn\u00eb automatikisht p\u00ebr shfaqjen e aktiveve t\u00eb reja dhe do t\u00eb ofrojn\u00eb informacion mbi dob\u00ebsit\u00eb e tyre. <\/p>\n<p>2. Fokusohuni te asetet q\u00eb jan\u00eb kritik\u00eb p\u00ebr biznesin. Nuk ka asnj\u00eb organizat\u00eb n\u00eb bot\u00eb q\u00eb mund t\u00eb eliminoj\u00eb dob\u00ebsit\u00eb n\u00eb nj\u00eb hap. Procesi i eliminimit t\u00eb dob\u00ebsive \u00ebsht\u00eb i gjat\u00eb dhe madje i mundimsh\u00ebm. <\/p>\n<p>3. Ngushtoni sip\u00ebrfaqen e sulmeve. Pastroni infrastruktur\u00ebn tuaj nga softuer\u00eb t\u00eb panevojsh\u00ebm, sh\u00ebrbime, mbyllni porta t\u00eb panevojshme. Koh\u00ebt e fundit pat\u00ebm nj\u00eb rast me nj\u00eb kompani, ku n\u00eb 40 mij\u00eb pajisje u gjet\u00ebn rreth 100 mij\u00eb dob\u00ebsi t\u00eb lidhura me nj\u00eb version t\u00eb vjet\u00ebr t\u00eb shfletuesit Mozilla. Si\u00e7 u kuptua m\u00eb von\u00eb, Mozilla ishte implementuar n\u00eb imazhin e art\u00eb shum\u00eb vite m\u00eb par\u00eb, askush nuk e ka p\u00ebrdorur at\u00eb, por ajo \u00ebsht\u00eb burimi i nj\u00eb s\u00ebr\u00eb dob\u00ebsish. Kur shfletuesi u hoq nga kompjuter\u00ebt (madje ishte instaluar n\u00eb disa servera), ato dhjetra mij\u00ebra dob\u00ebsi u zhduk\u00ebn.<\/p>\n<p>4. Renditni dob\u00ebsit\u00eb n\u00eb baz\u00eb t\u00eb t\u00eb dh\u00ebnave t\u00eb inteligjenc\u00ebs p\u00ebr k\u00ebrc\u00ebnimet (threat intelligence). Merrni parasysh jo vet\u00ebm r\u00ebnd\u00ebsin\u00eb e dob\u00ebsis\u00eb, por edhe ekzistenc\u00ebn e nj\u00eb shfryt\u00ebzimi publik, malware, patch, qasje t\u00eb jashtme n\u00eb sistemin me dob\u00ebsi. Vler\u00ebsoni ndikimin e k\u00ebsaj dob\u00ebsie n\u00eb sistemet kritike t\u00eb biznesit: a mund t\u00eb \u00e7oj\u00eb n\u00eb humbjen e t\u00eb dh\u00ebnave, sh\u00ebrbim t\u00eb nd\u00ebrprer\u00eb, etj.<\/p>\n<p><img decoding=\"async\" alt=\"Jo vet\u00ebm skanimi, ose si t\u00eb nd\u00ebrtojm\u00eb procesin e menaxhimit t\u00eb dob\u00ebsive n\u00eb 9 hapa\" src=\"\/wp-content\/uploads\/2019\/08\/8335bdbd2055437c756055a1788500bc.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Hapi Nr. 7: Pajtohuni p\u00ebr KPI-t\u00eb<\/h3>\n<p>\nMos skanoni thjesht p\u00ebr t\u00eb skanuar. N\u00ebse nuk ndodhin asgj\u00eb me dob\u00ebsit\u00eb e gjetura, at\u00ebher\u00eb ky skanimi shnd\u00ebrrohet n\u00eb nj\u00eb operacion t\u00eb panevojsh\u00ebm. N\u00eb m\u00ebnyr\u00eb q\u00eb puna me dob\u00ebsit\u00eb t\u00eb mos shnd\u00ebrrohet n\u00eb nj\u00eb formalitet, mendoni se si do t\u00eb vler\u00ebsoni rezultatet e saj. Siguria dhe IT duhet t\u00eb bien dakord se si do t\u00eb organizohet puna p\u00ebr eliminimin e dob\u00ebsive, sa shpesh do t\u00eb kryhen skanimet, instalimi i patch-eve, etj.<br \/>\nN\u00eb slajd shihni shembuj t\u00eb mundsh\u00ebm t\u00eb KPI-ve. Ka gjithashtu nj\u00eb list\u00eb t\u00eb zgjeruar q\u00eb ne rekomandojm\u00eb klient\u00ebve tan\u00eb. N\u00ebse do t\u00eb jet\u00eb interesante, kontaktoni, un\u00eb do ta ndaj k\u00ebt\u00eb informacion me ju.<\/p>\n<p><img decoding=\"async\" alt=\"Jo vet\u00ebm skanimi, ose si t\u00eb nd\u00ebrtojm\u00eb procesin e menaxhimit t\u00eb dob\u00ebsive n\u00eb 9 hapa\" src=\"\/wp-content\/uploads\/2019\/08\/3ff48f666b1c4f82546467a8514092f9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Hapi Nr. 8: Automatizoni<\/h3>\n<p>\nS\u00ebrish do t\u00eb kthehem te skanimi. Ne n\u00eb Qualys mendojm\u00eb se skanimi \u00ebsht\u00eb gj\u00ebja m\u00eb pak e r\u00ebnd\u00ebsishme q\u00eb mund t\u00eb jet\u00eb sot n\u00eb procesin e menaxhimit t\u00eb dob\u00ebsive, dhe q\u00eb p\u00ebrpar\u00ebsia duhet t\u00eb jet\u00eb maksimizimi i automatizimit t\u00eb tij, n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb p\u00ebrfundoj\u00eb pa nd\u00ebrhyrjen e nj\u00eb specialisti t\u00eb siguris\u00eb. Sot ekzistojn\u00eb shum\u00eb mjete q\u00eb e lejojn\u00eb k\u00ebt\u00eb. Mjafton q\u00eb ato t\u00eb ken\u00eb nj\u00eb API t\u00eb hapur dhe numrin e nevojsh\u00ebm t\u00eb lidh\u00ebsve.<\/p>\n<p>Nj\u00eb shembull q\u00eb m\u00eb p\u00eblqen ta sjell \u00ebsht\u00eb DevOps. N\u00ebse do t\u00eb implementoni nj\u00eb skaner vulnerab\u00ebl, mund t\u00eb haroni p\u00ebr DevOps. Me teknologjit\u00eb e vjetra, t\u00eb cilat jan\u00eb skaneri klasik, thjesht nuk do t'ju lejojn\u00eb t\u00eb hyni n\u00eb k\u00ebto procese. Zhvilluesit nuk do t\u00eb presin derisa t\u00eb skanoni dhe t'u dor\u00ebzoni nj\u00eb raport t\u00eb gjat\u00eb t\u00eb padobish\u00ebm. Zhvilluesit presin q\u00eb informacioni mbi vulnerabilitetet t\u00eb mb\u00ebrrij\u00eb si informacion p\u00ebr gabimet n\u00eb sistemet e tyre t\u00eb nd\u00ebrtimit t\u00eb kodit. Siguria duhet t\u00eb jet\u00eb e integruar pa probleme n\u00eb k\u00ebto procese, dhe ajo duhet t\u00eb jet\u00eb thjesht nj\u00eb funksion q\u00eb aktivizohet automatikisht nga sistemi q\u00eb po p\u00ebrdorin zhvilluesit tuaj.<\/p>\n<p><img decoding=\"async\" alt=\"Jo vet\u00ebm skanimi, ose si t\u00eb nd\u00ebrtojm\u00eb procesin e menaxhimit t\u00eb dob\u00ebsive n\u00eb 9 hapa\" src=\"\/wp-content\/uploads\/2019\/08\/82c15607c1c7b177e407181e19f17c0b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Hapi nr. 9: P\u00ebrqendrohuni te e r\u00ebnd\u00ebsishmja<\/h3>\n<p>\nP\u00ebrqendrohuni n\u00eb at\u00eb q\u00eb sjell vler\u00eb t\u00eb v\u00ebrtet\u00eb p\u00ebr kompanin\u00eb tuaj. Skanimet mund t\u00eb jen\u00eb automatike, gjithashtu raporte t\u00eb d\u00ebrgohen automatikisht. <br \/>\nP\u00ebrqendrohuni n\u00eb p\u00ebrmir\u00ebsimin e proceseve q\u00eb t\u00eb jen\u00eb m\u00eb t\u00eb fleksib\u00ebl dhe t\u00eb lehta p\u00ebr t\u00eb gjith\u00eb pjes\u00ebmarr\u00ebsit. P\u00ebrqendrohuni n\u00eb at\u00eb q\u00eb siguria t\u00eb jet\u00eb e integruar n\u00eb t\u00eb gjitha kontratat me partner\u00ebt tuaj, t\u00eb cil\u00ebt, p\u00ebr shembull, zhvillojn\u00eb aplikacione web p\u00ebr ju.<\/p>\n<p>N\u00ebse keni nevoj\u00eb p\u00ebr m\u00eb shum\u00eb informacion mbi m\u00ebnyr\u00ebn e nd\u00ebrtimit t\u00eb nj\u00eb procesi menaxhimi t\u00eb vulnerabiliteteve n\u00eb kompani, kontaktoni me mua dhe koleg\u00ebt e mi. Do t\u00eb jem i lumtur t\u00eb ndihmoj.<\/p>\n<p><img decoding=\"async\" alt=\"Jo vet\u00ebm skanimi, ose si t\u00eb nd\u00ebrtojm\u00eb procesin e menaxhimit t\u00eb dob\u00ebsive n\u00eb 9 hapa\" src=\"\/wp-content\/uploads\/2019\/08\/5a75c5f5b8569d5857a37464cae4af89.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/464643\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>4 \u0438\u044e\u043b\u044f \u043c\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0441\u0435\u043c\u0438\u043d\u0430\u0440 \u043f\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u043c \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0443 \u0432\u044b\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044f \u0410\u043d\u0434\u0440\u0435\u044f \u041d\u043e\u0432\u0438\u043a\u043e\u0432\u0430 \u0438\u0437 Qualys. \u041e\u043d \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0435\u0442, \u043a\u0430\u043a\u0438\u0435 \u044d\u0442\u0430\u043f\u044b \u043d\u0443\u0436\u043d\u043e \u043f\u0440\u043e\u0439\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u0421\u043f\u043e\u0439\u043b\u0435\u0440: \u0434\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u044b \u0434\u043e\u0431\u0435\u0440\u0435\u043c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043a \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u043f\u0443\u0442\u0438. \u0428\u0430\u0433 \u2116 1: \u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u0435 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0437\u0440\u0435\u043b\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0412 \u0441\u0430\u043c\u043e\u043c \u043d\u0430\u0447\u0430\u043b\u0435 \u043d\u0443\u0436\u043d\u043e \u043f\u043e\u043d\u044f\u0442\u044c, \u043d\u0430 \u043a\u0430\u043a\u043e\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28098,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-37446","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"4 \u0438\u044e\u043b\u044f \u043c\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0441\u0435\u043c\u0438\u043d\u0430\u0440 \u043f\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041d\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0435\u0434\u0438\u043d\u044b\u043c, \u0438\u043b\u0438 \u043a\u0430\u043a \u043f\u043e\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0437\u0430 9 \u0448\u0430\u0433\u043e\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"4 \u0438\u044e\u043b\u044f \u043c\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0441\u0435\u043c\u0438\u043d\u0430\u0440 \u043f\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:17:39+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:17:39+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Jo vet\u00ebm skanimi, ose si t\u00eb nd\u00ebrtoni nj\u00eb proces menaxhimi t\u00eb vulnerabiliteteve n\u00eb 9 hapa | ProHoster","description":"M\u00eb 4 korrik, ne organizuam nj\u00eb seminar t\u00eb madh mbi menaxhimin.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0435\u0434\u0438\u043d\u044b\u043c, \u0438\u043b\u0438 \u043a\u0430\u043a \u043f\u043e\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0437\u0430 9 \u0448\u0430\u0433\u043e\u0432 | ProHoster","og:description":"4 \u0438\u044e\u043b\u044f \u043c\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0441\u0435\u043c\u0438\u043d\u0430\u0440 \u043f\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/ne-skanirovaniem-edinym-ili-kak-postroit-protsess-upravleniya-uyazvimostyami-za-9-shagov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:17:39+00:00","article:modified_time":"2019-10-31T19:17:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37446","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:59:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:26:28","updated":"2026-02-09 17:59:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37446","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=37446"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37446\/revisions"}],"predecessor-version":[{"id":159085,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37446\/revisions\/159085"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/28098"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=37446"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=37446"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=37446"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}