{"id":37831,"date":"2019-10-31T22:20:00","date_gmt":"2019-10-31T19:20:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-kazaki-gicsp-sertifikat-poluchali\/"},"modified":"2019-10-31T22:20:00","modified_gmt":"2019-10-31T19:20:00","slug":"kak-kazaki-gicsp-sertifikat-poluchali","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kak-kazaki-gicsp-sertifikat-poluchali","title":{"rendered":"Si si e merrni certifikat\u00ebn GICSP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

P\u00ebrsh\u00ebndetje t\u00eb gjith\u00ebve! N\u00eb portalin ton\u00eb t\u00eb dashur ka pasur shum\u00eb artikuj t\u00eb ndrysh\u00ebm rreth certifikimit n\u00eb fush\u00ebn e siguris\u00eb s\u00eb informacionit, prandaj nuk kam p\u00ebr q\u00ebllim t\u00eb pretendoj origjinalitetin dhe unik\u00ebn e p\u00ebrmbajtjes, por megjithat\u00eb do doja shum\u00eb t\u00eb ndaj p\u00ebrvoj\u00ebn time n\u00eb marrjen e certifikimit GIAC (Global Information Assurance Company) n\u00eb fush\u00ebn e siguris\u00eb kibernetike industriale. Q\u00eb nga koha kur u shfaq\u00ebn terma t\u00eb till\u00eb t\u00eb friksh\u00ebm si Stuxnet<\/a><\/noindex>, Duqu<\/a><\/noindex>, Shamoon, Triton, gradualisht filloi t\u00eb formohej tregu i sh\u00ebrbimeve t\u00eb ofruara nga specialist\u00eb, q\u00eb duket se jan\u00eb IT, por gjithashtu mund t\u00eb rinegocionojn\u00eb PLC-t\u00eb me riprogramimin e konfiguracionit n\u00eb ladders dhe nj\u00ebkoh\u00ebsisht ta mbajn\u00eb fabrik\u00ebn n\u00eb pun\u00eb. <\/p>\n

<\/a><\/noindex><\/p>\n

K\u00ebshtu erdhi n\u00eb bot\u00eb koncepti IT&OT (Teknologjia e Informacionit & Teknologjia e Operacioneve). <\/p>\n

<\/p>\n

Menj\u00ebher\u00eb pas k\u00ebsaj, (sigurisht q\u00eb nuk mund t\u00eb lejohet q\u00eb t\u00eb punojn\u00eb kadra t\u00eb pa kualifikuara) erdhi nevoja p\u00ebr t\u00eb certifikuar specialist\u00ebt n\u00eb fush\u00ebn q\u00eb lidhet me sigurimin e A\u00c7SUT, sistemeve industriale \u2013 t\u00eb cilat, si\u00e7 duket, jan\u00eb shum\u00eb t\u00eb shumta n\u00eb jet\u00ebn ton\u00eb, nga ventili automatik i furnizimit me uj\u00eb n\u00eb apartament deri tek sistemi i menaxhimit t\u00eb aeroplan\u00ebve (t\u00eb kujtojm\u00eb artikullin e shk\u00eblqyer rreth hetimit t\u00eb problemeve Boeing<\/a><\/noindex>). Dhe madje, si\u00e7 u zbulua papritur \u2014 e pajisjeve t\u00eb nd\u00ebrlikuara mjek\u00ebsore. <\/p>\n

<\/p>\n

Nj\u00eb pak lirik\u00eb se si erdha n\u00eb nevoj\u00ebn p\u00ebr t\u00eb marr\u00eb certifikimin (mund ta kaloni): Pas p\u00ebrfundimit t\u00eb suksessh\u00ebm n\u00eb fund t\u00eb viteve dy mij\u00eb n\u00eb fakultetin e mbrojtjes s\u00eb informacionit, hapi me krenari k\u00ebmb\u00ebn p\u00ebr n\u00eb radh\u00ebt e specialist\u00ebve t\u00eb siguris\u00eb, duke punuar si tekniker n\u00eb sistemet e siguris\u00eb t\u00eb ulta. Si duket, m\u00eb than\u00eb n\u00eb at\u00eb koh\u00eb n\u00eb nd\u00ebrmarrje \ud83d\ude42 K\u00ebshtu filloi karriera ime si specialist n\u00eb sistemet automatike t\u00eb kontrollit me nj\u00eb diplom\u00eb bachelor n\u00eb mbrojtjen e informacionit. Pas gjasht\u00eb vjet\u00ebsh, duke arritur deri n\u00eb pozitat e drejtorit t\u00eb departamentit t\u00eb sistemeve SCADA, u largova p\u00ebr t\u00eb punuar si k\u00ebshilltar p\u00ebr sigurin\u00eb e sistemeve industriale t\u00eb menaxhimit n\u00eb nj\u00eb kompani t\u00eb huaj q\u00eb merret me softuer dhe pajisje. Aty pik\u00ebrisht erdhi nevoja p\u00ebr t'u b\u00ebr\u00eb specialist i certifikuar n\u00eb fush\u00ebn e siguris\u00eb. <\/p>\n

<\/p>\n

GIAC<\/a><\/noindex> \u00ebsht\u00eb zhvillim SANS<\/a><\/noindex> organizata q\u00eb merret me zhvillimin e trajnimve dhe certifikimin e specialist\u00ebve n\u00eb sigurin\u00eb informatike. Reputacioni i certifikat\u00ebs nga GIAC \u00ebsht\u00eb shum\u00eb i lart\u00eb mes specialist\u00ebve dhe klient\u00ebve n\u00eb tregjet EMEA, SHBA, dhe Asia Pacific. K\u00ebtu, n\u00eb hap\u00ebsir\u00ebn post-sovjetike dhe n\u00eb vendet e CIS, nj\u00eb certifikat\u00eb e till\u00eb mund t\u00eb k\u00ebrkohet vet\u00ebm nga kompanit\u00eb nd\u00ebrkomb\u00ebtare q\u00eb kan\u00eb biznes n\u00eb vendet tona, agjencit\u00eb nd\u00ebrkomb\u00ebtare dhe konsultuese. Personalish, nuk kam hasur ndonj\u00ebher\u00eb k\u00ebrkes\u00ebn p\u00ebr nj\u00eb certifikim t\u00eb till\u00eb nga kompanit\u00eb vendase. T\u00eb gjith\u00eb kryesisht k\u00ebrkojn\u00eb CISSP. Ky \u00ebsht\u00eb mendimi im subjektiv dhe n\u00ebse dikush do t\u00eb ndaj\u00eb p\u00ebrvoj\u00ebn e tij n\u00eb komentet \u2013 do t\u00eb ishte interesante t\u00eb dihet.<\/p>\n

<\/p>\n

N\u00eb SANS ka mjaft drejtime t\u00eb ndryshme (n\u00eb mendimin tim, koh\u00ebt e fundit ata e kan\u00eb zgjeruar shum\u00eb numrin e tyre), por ka dhe kurse praktik shum\u00eb interesante. M\u00eb p\u00eblqeu ve\u00e7an\u00ebrisht NetWars<\/a><\/noindex>. Por tregimi do t\u00eb lidhet me kursin ICS410: ICS\/SCADA Security Essentials <\/a><\/noindex> dhe certifikat\u00ebn e quajtur: Global Industrial Cyber Security Professional (GICSP)<\/a><\/noindex>.<\/p>\n

<\/p>\n

Nga t\u00eb gjitha llojet e certifikimeve t\u00eb SANS p\u00ebr Sigurin\u00eb Industriale t\u00eb Cibernetik\u00ebs q\u00eb ofrohen, kjo \u00ebsht\u00eb m\u00eb universale. Nd\u00ebrsa e dyta i p\u00ebrket kryesisht sistemeve t\u00eb rrjetit elektrik, t\u00eb cilave u kushtohet nj\u00eb v\u00ebmendje e ve\u00e7ant\u00eb n\u00eb Per\u00ebndim dhe i p\u00ebrkasin nj\u00eb klase t\u00eb ve\u00e7ant\u00eb t\u00eb sistemeve. E treta (n\u00eb momentin e rrug\u00ebs time drejt certifikimit) i p\u00ebrkiste p\u00ebrgjigjes ndaj incidenteve.
\nKursi nuk \u00ebsht\u00eb i lir\u00eb, por ofron njohuri t\u00eb mjaftueshme p\u00ebr IT dhe OT. Sidomos do t\u00eb jet\u00eb i dobish\u00ebm p\u00ebr ata q\u00eb kan\u00eb vendosur t\u00eb ndryshojn\u00eb fush\u00ebn e tyre, p\u00ebr shembull nga sigurimi IT n\u00eb industrin\u00eb bankare n\u00eb Sigurin\u00eb Industriale t\u00eb Cibernetik\u00ebs. N\u00ebse merrni parasysh se un\u00eb tashm\u00eb kisha nj\u00eb njohuri n\u00eb fush\u00ebn e sistemeve t\u00eb automatizimit, instrumenteve dhe Teknologjis\u00eb s\u00eb Operacioneve, nuk kishte asgj\u00eb thelb\u00ebsore ose jetike t\u00eb re n\u00eb k\u00ebt\u00eb kurs p\u00ebr mua.<\/p>\n

<\/p>\n

Kursi p\u00ebrb\u00ebhet nga 50% teori dhe 50% praktik\u00eb. Nga praktika, aktiviteti m\u00eb interesant ishte konkursi - NetWars. N\u00eb gjat\u00eb dy dit\u00ebve, pas kursit kryesor, t\u00eb gjith\u00eb student\u00ebt nga t\u00eb gjitha klasat u ndan\u00eb n\u00eb grupe dhe kryen detyra p\u00ebr t\u00eb fituar t\u00eb drejtat e qasjes, nxjerrjen e informacionit t\u00eb nevojsh\u00ebm, qasjen n\u00eb rrjet, shum\u00eb detyra p\u00ebr t\u00eb kthyer hash, puna me Wireshark dhe shum\u00eb aspekte t\u00eb tjera. <\/p>\n

<\/p>\n

Materiali i kursit p\u00ebrmban nj\u00eb p\u00ebrmbledhje n\u00eb form\u00ebn e librave, t\u00eb cil\u00ebt m\u00eb pas i merrni p\u00ebr p\u00ebrdorim t\u00eb pakufizuar. N\u00eb fakt, mund t\u2019i p\u00ebrdorni edhe gjat\u00eb provimit, pasi formati \u00ebsht\u00eb Open Book, por ato do t'ju ndihmojn\u00eb pak, pasi provimi zgjat 3 or\u00eb, me 115 pyetje, dhe gjuha e provimit \u00ebsht\u00eb anglisht. Gjat\u00eb k\u00ebtyre 3 or\u00ebve, mund t\u00eb merrni nj\u00eb pushim prej 15 minutash. Por kujdes, pasi n\u00ebse merrni nj\u00eb pushim prej 15 minutash dhe ktheheni te testet pas 5 minutash, thjesht humbni 10 minutat e mbetura, pasi nuk do t\u00eb mund t\u00eb ndaloni m\u00eb koh\u00ebn n\u00eb programin e testimit. Mund t\u00eb kaloni deri n\u00eb 15 pyetje, t\u00eb cilat do t\u00eb shfaqen n\u00eb fund. <\/p>\n

<\/p>\n

Personalisht, nuk rekomandoj t\u00eb lini shum\u00eb pyetje p\u00ebr n\u00eb fund, pasi koha e 3 or\u00ebve \u00ebsht\u00eb v\u00ebrtet e shkurt\u00ebr, dhe kur n\u00eb fund shfaqen pyetje q\u00eb nuk keni zgjidhur, ka nj\u00eb mund\u00ebsi t\u00eb madhe t\u00eb mos i b\u00ebni dot. Un\u00eb kam l\u00ebn\u00eb p\u00ebr n\u00eb fund vet\u00ebm tre pyetje, t\u00eb cilat ishin v\u00ebrtet t\u00eb v\u00ebshtira p\u00ebr mua, pasi shqet\u00ebsonin njohurit\u00eb mbi standardin NIST 800.82 dhe NERC. Psikologjikisht, pyetje t\u00eb tilla \"p\u00ebr n\u00eb fund\" ndjehen e r\u00ebnd\u00eb n\u00eb vet\u00ebdije n\u00eb momentet e fundit \u2014 kur truri juaj \u00ebsht\u00eb lodhur, d\u00ebshironi t\u00eb shkoni n\u00eb tualet, dhe ndiheni sikur timeri n\u00eb ekran po p\u00ebrshpejtohet n\u00eb progresion gjeometrik. <\/p>\n

<\/p>\n

N\u00eb p\u00ebrgjith\u00ebsi, p\u00ebr t\u00eb kaluar testimin, duhet t\u00eb arrini 71% p\u00ebrgjigje t\u00eb sakta. Para se t\u00eb jepni provimin, do t\u00eb keni mund\u00ebsin\u00eb t\u00eb st\u00ebrviteni me teste reale, pasi n\u00eb \u00e7mim p\u00ebrfshihen 2 teste st\u00ebrvitore me nga 115 pyetje dhe me kushte q\u00eb ngjajn\u00eb me ato t\u00eb provimit t\u00eb v\u00ebrtet\u00eb.<\/p>\n

<\/p>\n

Un\u00eb rekomandoj q\u00eb t\u00eb jepni provimin nj\u00eb muaj pas p\u00ebrfundimit t\u00eb trajnimit, duke e shfryt\u00ebzuar k\u00ebt\u00eb muaj p\u00ebr m\u00ebsime sistematike t\u00eb pavarura mbi tematikat n\u00eb t\u00eb cilat ndiheni t\u00eb pasigurt. Do t\u00eb ishte mir\u00eb n\u00ebse do t\u00eb merrnit materialet e shkruara q\u00eb keni marr\u00eb n\u00eb kurs, t\u00eb cilat duken si sh\u00ebnime t\u00eb shkurtra mbi \u00e7do tem\u00eb \u2014 dhe do t\u00eb k\u00ebrkoni informacione n\u00eb lidhje me temat q\u00eb p\u00ebrmbahen n\u00eb k\u00ebto libra. Ndani muajin n\u00eb dy pjes\u00eb, duke kryer teste provuese dhe duke marr\u00eb nj\u00eb ide t\u00eb p\u00ebrgjithshme se n\u00eb cilat pyetje jeni t\u00eb fort\u00eb dhe ku duhet t\u00eb p\u00ebrmir\u00ebsoheni. <\/p>\n

<\/p>\n

Do t\u00eb doja t\u00eb theksoja drejtimet kryesore q\u00eb p\u00ebrb\u00ebjn\u00eb provimin e vet\u00eb (jo kursin m\u00ebsimor, pasi ai mbulon tema shum\u00eb m\u00eb t\u00eb gjera):<\/p>\n

<\/p>\n

    \n
  1. Siguria fizike: si n\u00eb provimet e tjera t\u00eb certifikimit, ky \u00e7\u00ebshtje merr shum\u00eb v\u00ebmendje n\u00eb GICSP. Jan\u00eb pyetje p\u00ebr llojet e \u00e7el\u00ebsave fizik\u00eb n\u00eb dyer, situata me falsifikimin e kartave elektronike, ku duhet t\u00eb jepet nj\u00eb p\u00ebrgjigje p\u00ebr identifikimin e qart\u00eb t\u00eb problemit. Ka pyetje q\u00eb i p\u00ebrkasin siguris\u00eb s\u00eb teknologjis\u00eb (procesit) n\u00eb var\u00ebsi t\u00eb fush\u00ebs s\u00eb aplikimit \u2013 proceset e naft\u00ebs dhe gazit, centralet b\u00ebrthamore ose rrjetet elektrike. P\u00ebr shembull, mund t\u00eb ket\u00eb nj\u00eb pyetje si: Cila lloj kontrolli t\u00eb siguris\u00eb fizike p\u00ebrb\u00ebn situat\u00ebn kur vjen nj\u00eb alarm nga sensori i temperatur\u00ebs s\u00eb avullit n\u00eb HMI? Ose nj\u00eb pyetje si: Cila situat\u00eb (ngjarje) do t\u00eb jet\u00eb shkaku p\u00ebr t\u00eb kryer nj\u00eb analiz\u00eb t\u00eb regjistrimeve video nga kamerat e sistemit t\u00eb siguris\u00eb periferike t\u00eb objektit?\n

    N\u00eb p\u00ebrqindje, do t\u00eb vler\u00ebsoja se numri i pyetjeve p\u00ebr k\u00ebt\u00eb seksion n\u00eb provimin tim dhe n\u00eb testet provuese nuk kalonte 5%.<\/li>\n

  2. Nj\u00eb kategori tjet\u00ebr dhe nj\u00eb nga kategorit\u00eb m\u00eb masive t\u00eb pyetjeve jan\u00eb ato n\u00eb lidhje me A\u0421UTP, PLC, SCADA: k\u00ebtu do t\u00eb jet\u00eb e nevojshme t\u00eb qasemi n\u00eb m\u00ebnyr\u00eb sistematike p\u00ebr t\u00eb studiuar materialet mbi m\u00ebnyr\u00ebn se si jan\u00eb nd\u00ebrtuar sistemet e menaxhimit t\u00eb proceseve teknologjike nga sensor\u00ebt deri te server\u00ebt ku funksionon vet\u00eb aplikacioni. Nj\u00eb sasi e mjaftueshme pyetjesh do t\u00eb haset n\u00eb lidhje me variacionet e protokolleve industriale p\u00ebr transferimin e t\u00eb dh\u00ebnave (ModBus, RTU, Profibus, HART etj.). Do t\u00eb ket\u00eb pyetje mbi dallimin midis RTU dhe PLC, si t\u00eb mbrohen t\u00eb dh\u00ebnat n\u00eb PLC nga modifikimi nga nj\u00eb sulmues, n\u00eb cilat seksione t\u00eb memories PLC ruhen t\u00eb dh\u00ebnat, dhe ku ruhet logjika e vet\u00eb (programi i shkruar nga programuesi i \u0410\u0421U\u0422\u041f). P\u00ebr shembull, mund t\u00eb ket\u00eb nj\u00eb pyetje t\u00eb k\u00ebtij lloji: Si mund t\u00eb zbulohet nj\u00eb sulm midis PLC dhe HMI q\u00eb punojn\u00eb me protokollin ModBus?\n

    Do t\u00eb takohet pyetje rreth ndryshimeve nd\u00ebrmjet sistemeve SCADA dhe DCS. Nj\u00eb num\u00ebr i madh pyetjesh rreth rregullave t\u00eb ndarjes s\u00eb rrjeteve t\u00eb ASUTP n\u00eb nivelin L1, L2 nga niveli L3 (do ta p\u00ebrshkruaj m\u00eb detajisht n\u00eb seksionin me pyetje rreth rrjetit). Pyetjet situative mbi k\u00ebt\u00eb tem\u00eb gjithashtu do t\u00eb jen\u00eb mjaft t\u00eb larmishme \u2013 p\u00ebrshkruajn\u00eb situat\u00ebn n\u00eb dhom\u00ebn e operacionit dhe duhet t\u00eb zgjidhen veprimet q\u00eb duhet t\u00eb kryej\u00eb operatori i procesit ose dispe\u00e7eri.<\/p>\n

    N\u00eb p\u00ebrgjith\u00ebsi, ky seksion \u00ebsht\u00eb m\u00eb specifiku dhe i specializuar. Do t\u00eb k\u00ebrkoj\u00eb nga ju njohuri t\u00eb mira:
    \n \u2014 ASUP, pjesa e fush\u00ebs (sensor\u00eb, llojet e lidhjeve t\u00eb pajisjeve, karakteristikat fizike t\u00eb sensor\u00ebve, PLC, RTU);
    \n \u2014 sistemet e mbrojtjes nga rreziku (ESD \u2013 emergency shutdown system) t\u00eb proceseve dhe objekteve (p\u00ebrfaq\u00ebsuesi i zakonsh\u00ebm, n\u00eb Habra ka nj\u00eb cik\u00ebl t\u00eb shk\u00eblqyer artikujsh mbi k\u00ebt\u00eb tem\u00eb nga     Vladimir_Sklyar<\/a><\/noindex>)
    \n \u2014 nj\u00eb kuptim bazik t\u00eb proceseve fizike q\u00eb ndodhin p\u00ebr shembull n\u00eb rafinimin e naft\u00ebs, prodhimin e energjis\u00eb, tubacione etj.;
    \n \u2014 kuptimi i struktur\u00ebs s\u00eb arkitektur\u00ebs s\u00eb sistemeve DCS dhe SCADA;
    \nDo t\u00eb theksoja se pyetje t\u00eb k\u00ebtij tipi mund t\u00eb p\u00ebrb\u00ebjn\u00eb deri n\u00eb 25% gjat\u00eb t\u00eb gjith\u00eb 115 pyetjeve t\u00eb provimit. <\/li>\n

  3. Teknologjit\u00eb rrjet dhe siguria n\u00eb rrjet: Mendoj se numri i pyetjeve n\u00eb k\u00ebt\u00eb tem\u00eb do t\u00eb jet\u00eb n\u00eb vendin e par\u00eb n\u00eb provim. Do t\u00eb ket\u00eb ndoshta gjith\u00e7ka \u2013 modeli OSI, n\u00eb cilat nivele funksionon \u00e7do protokoll, shum\u00eb pyetje rreth segmentimit t\u00eb rrjetit, pyetje situatash mbi sulmet n\u00eb rrjet, shembuj log-\u00ebsh lidhjesh me propozimin p\u00ebr t\u00eb p\u00ebrcaktuar llojin e sulmit, shembuj konfigurimesh t\u00eb switches me propozimin p\u00ebr t\u00eb p\u00ebrcaktuar konfigurimin e dob\u00ebt, pyetje mbi dob\u00ebsit\u00eb e protokolleve rrjet dhe pyetje mbi specifikat e lidhjeve t\u00eb protokolleve industriale t\u00eb komunikimit. Vecan\u00ebrisht pyetjet p\u00ebr ModBus jan\u00eb shum\u00eb t\u00eb pranishme. Struktura e paketeve rrjetore t\u00eb ModBus, n\u00eb var\u00ebsi t\u00eb llojit t\u00eb saj dhe versioneve t\u00eb pajisjeve q\u00eb ajo mb\u00ebshtet. Nj\u00eb v\u00ebmendje e madhe i kushtohet sulmeve n\u00eb rrjete pa telekomand\u00eb \u2013 ZigBee, Wireless HART, thjesht pyetje p\u00ebr sigurin\u00eb e rrjetit t\u00eb gjith\u00eb familjes 802.1x. Do t\u00eb ket\u00eb pyetje n\u00eb lidhje me rregullat e vendosjes s\u00eb server\u00ebve t\u00eb ndrysh\u00ebm n\u00eb rrjetin e ASUTP (k\u00ebt\u00eb k\u00ebtu \u00ebsht\u00eb e nevojshme t\u00eb lexoni standardin IEC-62443 dhe t\u00eb kuptoni principet e modeleve standarde t\u00eb rrjeteve ASUTP). Do t\u00eb takoni pyetje n\u00eb lidhje me modelin Purdue.<\/li>\n
  4. Kategoria e pyetjeve q\u00eb i takon p\u00ebrjashtimisht karakteristikave funksionale t\u00eb sistemeve t\u00eb transmetimit t\u00eb energjis\u00eb elektrike dhe sistemeve t\u00eb siguris\u00eb informacionit p\u00ebr to. N\u00eb Shtetet e Bashkuara, kjo kategori sistemesh t\u00eb automatizimit t\u00eb proceseve industriale quhet Power Grid dhe i \u00ebsht\u00eb caktuar nj\u00eb rol i ve\u00e7ant\u00eb. P\u00ebr k\u00ebt\u00eb, jan\u00eb duke u l\u00ebshuar standarde t\u00eb ve\u00e7anta (NIST 800.82) q\u00eb rregullojn\u00eb qasjen n\u00eb krijimin e sistemeve t\u00eb siguris\u00eb informacionit p\u00ebr k\u00ebt\u00eb sektor. N\u00eb vendet tona, kryesisht ky sektor kufizohet n\u00eb sistemet e monitorimit dhe menaxhimit t\u00eb energjis\u00eb elektrike (m\u00eb ndihmoni n\u00ebse dikush ka hasur nj\u00eb qasje m\u00eb serioze p\u00ebr kontrollet e sistemeve t\u00eb shp\u00ebrndarjes dhe d\u00ebrgimit t\u00eb energjis\u00eb elektrike). Pra, n\u00eb provim do t\u00eb hasni pyetje mjaft specifike q\u00eb lidhen me Power Grid. N\u00eb shumic\u00ebn e rasteve, k\u00ebto ishin raste p\u00ebrdorimi p\u00ebr nj\u00eb situat\u00eb t\u00eb caktuar q\u00eb kishte ndodhur n\u00eb nj\u00eb central elektrik, por gjithashtu mund t\u00eb ket\u00eb pyetje mbi pajisjet q\u00eb p\u00ebrdoren sakt\u00ebsisht n\u00eb Power Grid. Do t\u00eb ket\u00eb pyetje q\u00eb adresojn\u00eb njohurit\u00eb p\u00ebr kapitujt e NIST p\u00ebr k\u00ebt\u00eb kategori sistemesh.<\/li>\n
  5. Pyetjet q\u00eb lidhen me njohjen e standardeve: NIST 800-82, NERC, IEC62443. Mendoj se k\u00ebtu nuk ka nevoj\u00eb p\u00ebr koment t\u00eb ve\u00e7ant\u00eb \u2013 duhet orientuar n\u00eb seksionet e standartve, se cilat jan\u00eb p\u00ebrgjegj\u00ebsit\u00eb dhe cilat rekomandime p\u00ebrmban. Gjejm\u00eb pyetje specifike, p\u00ebr shembull q\u00eb pyesin p\u00ebr periudh\u00ebn e kontrollit t\u00eb funksionalitetit t\u00eb sistemit, periudh\u00ebn e p\u00ebrdit\u00ebsimit t\u00eb procedur\u00ebs etj. N\u00eb raportin p\u00ebrqindje, k\u00ebto pyetje mund t\u00eb p\u00ebrb\u00ebjn\u00eb deri n\u00eb 15% t\u00eb numrit total t\u00eb pyetjeve. Por k\u00ebtu varet nga rasti. P\u00ebr shembull, n\u00eb dy provime provuese, m\u00eb jan\u00eb paraqitur vet\u00ebm disa t\u00eb tilla. Por n\u00eb provimin e v\u00ebrtet\u00eb ata ishin v\u00ebrtet t\u00eb shumt\u00eb.<\/li>\n
  6. Kategoria e fundit e pyetjeve jan\u00eb t\u00eb gjitha llojet e rasteve t\u00eb p\u00ebrdorimit dhe pyetjeve situative. <\/li>\n<\/ol>\n

    <\/p>\n

    N\u00eb p\u00ebrgjith\u00ebsi, trajnimet, p\u00ebrve\u00e7 ndoshta CTF NetWars, nuk ishin shum\u00eb informuese p\u00ebr mua n\u00eb aspektin e fitimit t\u00eb njohurive t\u00eb reja potencialisht. M\u00eb shum\u00eb ishin marr\u00eb detaje m\u00eb t\u00eb thella mbi disa tema, sidomos n\u00eb fush\u00ebn e organizimit dhe mbrojtjes s\u00eb rrjeteve radio, t\u00eb cilat p\u00ebrdoren p\u00ebr t\u00eb transferuar informacione teknologjike, si dhe nj\u00eb material m\u00eb t\u00eb strukturuar n\u00eb lidhje me standardet nd\u00ebrkomb\u00ebtare q\u00eb i kushtohen k\u00ebsaj teme. Prandaj, p\u00ebr inxhinier\u00ebt dhe specialist\u00ebt q\u00eb kan\u00eb mjaft njohuri dhe p\u00ebrvoj\u00eb n\u00eb fush\u00ebn e A\u00c7UTP\/KIP ose Rrjetet Industriale \u2013 mund t\u00eb mendojn\u00eb p\u00ebr t\u00eb kurseuar n\u00eb trajnim (dhe ka kuptim t\u00eb kursehet), t\u00eb p\u00ebrgatiten vet\u00eb dhe t\u00eb shkojn\u00eb drejtp\u00ebrdrejt p\u00ebr t\u00eb dh\u00ebn\u00eb provimin e certifikimit, i cili, p\u00ebr t'u p\u00ebrmendur, kushton 700 USD. N\u00eb rast d\u00ebshtimi, do t\u00eb duhet t\u00eb paguani p\u00ebrs\u00ebri. Ka mjaft qendra certifikimi q\u00eb do t'ju pranojn\u00eb p\u00ebr provim, vet\u00ebm duhet t\u00eb dor\u00ebzoni aplikimin paraprakisht. N\u00eb p\u00ebrgjith\u00ebsi, rekomandoj t\u00eb caktoni menj\u00ebher\u00eb dat\u00ebn e provimit, sepse p\u00ebrndryshe do ta shtyni at\u00eb vazhdimisht, duke e z\u00ebvend\u00ebsuar procesin e p\u00ebrgatitjes me \u00e7\u00ebshtje t\u00eb tjera jetike ose jo shum\u00eb t\u00eb r\u00ebnd\u00ebsishme. Dhe duke pasur nj\u00eb dat\u00eb t\u00eb qart\u00eb si afat, do t\u00eb jeni m\u00eb t\u00eb motivuar p\u00ebr veten.<\/p>\n

    Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u041d\u0430 \u0432\u0441\u0435\u043c\u0438 \u043b\u044e\u0431\u0438\u043c\u043e\u043c \u043f\u043e\u0440\u0442\u0430\u043b\u0435 \u0431\u044b\u043b\u043e \u043c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0442\u0430\u0442\u0435\u0439 \u043f\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0418\u0411, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u0435\u0442\u0435\u043d\u0434\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438 \u043d\u0435\u043f\u043e\u0432\u0442\u043e\u0440\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0441\u044c, \u043d\u043e \u0432\u0441\u0435 \u0436\u0435 \u043e\u0447\u0435\u043d\u044c \u0445\u043e\u0442\u0435\u043b \u0431\u044b \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0441\u0432\u043e\u0438\u043c \u043e\u043f\u044b\u0442\u043e\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f GIAC (Global Information Assurance Company) \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u043e \u0432\u0440\u0435\u043c\u0435\u043d \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0430\u043a\u0438\u0445 \u0441\u0442\u0440\u0430\u0448\u043d\u044b\u0445 \u0441\u043b\u043e\u0432 \u043a\u0430\u043a Stuxnet, Duqu, Shamoon, Triton, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37831","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Si e mor\u00ebn kazak\u00ebt diplom\u00ebn GICSP | ProHoster","description":"P\u00ebrsh\u00ebndetje t\u00eb gjith\u00ebve! N\u00eb portalin m\u00eb t\u00eb dashur jan\u00eb shkruar shum\u00eb artikuj t\u00eb ndrysh\u00ebm mbi certifikimin n\u00eb fush\u00ebn e siguris\u00eb kibernetike, prandaj nuk pretendoj p\u00ebr origjinalitetin dhe ve\u00e7an\u00ebsin\u00eb e p\u00ebrmbajtjes, por gjithsesi do t\u00eb doja t\u00eb ndaj eksperienc\u00ebn time p\u00ebr marrjen e certifikimit GIAC (Global Information Assurance Company) n\u00eb fush\u00ebn e siguris\u00eb industriale kibernetike. Q\u00eb nga shfaqja e fjal\u00ebve t\u00eb frikshme si Stuxnet, Duqu, Shamoon, Triton,","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kak-kazaki-gicsp-sertifikat-poluchali","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043a\u0430\u0437\u0430\u043a\u0438 GICSP \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u041d\u0430 \u0432\u0441\u0435\u043c\u0438 \u043b\u044e\u0431\u0438\u043c\u043e\u043c \u043f\u043e\u0440\u0442\u0430\u043b\u0435 \u0431\u044b\u043b\u043e \u043c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0442\u0430\u0442\u0435\u0439 \u043f\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0418\u0411, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u0435\u0442\u0435\u043d\u0434\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438 \u043d\u0435\u043f\u043e\u0432\u0442\u043e\u0440\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0441\u044c, \u043d\u043e \u0432\u0441\u0435 \u0436\u0435 \u043e\u0447\u0435\u043d\u044c \u0445\u043e\u0442\u0435\u043b \u0431\u044b \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0441\u0432\u043e\u0438\u043c \u043e\u043f\u044b\u0442\u043e\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f GIAC (Global Information Assurance Company) \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u043e \u0432\u0440\u0435\u043c\u0435\u043d \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0430\u043a\u0438\u0445 \u0441\u0442\u0440\u0430\u0448\u043d\u044b\u0445 \u0441\u043b\u043e\u0432 \u043a\u0430\u043a Stuxnet, Duqu, Shamoon, Triton,","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kak-kazaki-gicsp-sertifikat-poluchali","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:20:00+00:00","article:modified_time":"2019-10-31T19:20:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37831","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 19:26:35","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:20:22","updated":"2026-01-23 19:26:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37831","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=37831"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37831\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=37831"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=37831"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=37831"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}