{"id":39359,"date":"2019-10-31T22:30:52","date_gmt":"2019-10-31T19:30:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chto-takoe-zero-trust-model-bezopasnosti\/"},"modified":"2019-10-31T22:30:52","modified_gmt":"2019-10-31T19:30:52","slug":"chto-takoe-zero-trust-model-bezopasnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-takoe-zero-trust-model-bezopasnosti","title":{"rendered":"\u00c7far\u00eb \u00ebsht\u00eb Zero Trust? Modeli i siguris\u00eb","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"\u00c7far\u00eb
\n
\nZero Trust (\u00abbesimi zero\u00bb) \u00ebsht\u00eb nj\u00eb model sigurie, hartuar nga analisti i m\u00ebparsh\u00ebm i Forrester John Kindervag<\/a><\/noindex> n\u00eb vitin 2010. Q\u00eb at\u00ebher\u00eb, modeli i \u00abbesimit zero\u00bb \u00ebsht\u00eb b\u00ebr\u00eb koncepti m\u00eb i njohur n\u00eb fush\u00ebn e siguris\u00eb kibernetike. Shkeljet masive t\u00eb t\u00eb dh\u00ebnave n\u00eb koh\u00ebt e fundit vet\u00ebm sa konfirmojn\u00eb nevoj\u00ebn p\u00ebr q\u00eb kompanit\u00eb t\u00eb kushtojn\u00eb m\u00eb shum\u00eb v\u00ebmendje siguris\u00eb kibernetike, dhe modeli Zero Trust mund t\u00eb jet\u00eb qasja e duhur.<\/p>\n

Zero Trust n\u00ebnkupton nj\u00eb munges\u00eb t\u00eb plot\u00eb besimi ndaj askujt \u2013 madje edhe p\u00ebrdoruesve brenda perimetrin. Modeli implicon q\u00eb secili p\u00ebrdorues ose pajisje duhet t\u00eb konfirmojn\u00eb t\u00eb dh\u00ebnat e tyre \u00e7do her\u00eb q\u00eb k\u00ebrkojn\u00eb qasje n\u00eb ndonj\u00eb burim brenda ose jasht\u00eb rrjetit. <\/p>\n

Lexoni m\u00eb tej n\u00ebse d\u00ebshironi t\u00eb m\u00ebsoni m\u00eb shum\u00eb rreth konceptit t\u00eb siguris\u00eb Zero Trust.
\n<\/a><\/noindex><\/p>\n

Si funksionon koncepti Zero Trust <\/h1>\n

\n\"\u00c7far\u00eb
\n
\nKoncepti Zero Trust ka evoluar n\u00eb nj\u00eb qasje t\u00ebr\u00ebsore ndaj siguris\u00eb kibernetike, e cila p\u00ebrfshin disa teknologji dhe procese. Q\u00ebllimi i modelit t\u00eb \"trustit zero\" \u00ebsht\u00eb t\u00eb mbroj\u00eb kompanin\u00eb nga k\u00ebrc\u00ebnimet moderne n\u00eb fush\u00ebn e siguris\u00eb kibernetike dhe rrjedhjes s\u00eb t\u00eb dh\u00ebnave, duke arritur nj\u00ebkoh\u00ebsisht p\u00ebrputhshm\u00ebrin\u00eb me rregullat ligjore p\u00ebr mbrojtjen e t\u00eb dh\u00ebnave dhe sigurin\u00eb.<\/p>\n

Le t\u00eb analizojm\u00eb fushat kryesore t\u00eb konceptit Zero Trust. Forrester rekomandon q\u00eb organizatat t\u00eb kushtojn\u00eb v\u00ebmendje \u00e7do pik\u00eb, p\u00ebr t\u00eb nd\u00ebrtuar strategjin\u00eb m\u00eb t\u00eb mir\u00eb t\u00eb \"trustit zero\". <\/p>\n

T\u00eb dh\u00ebnat Zero Trust:<\/strong> T\u00eb dh\u00ebnat tuaja jan\u00eb ajo q\u00eb tentojn\u00eb t\u00eb vjedhin agresor\u00ebt. Prandaj, plot\u00ebsisht e logjikshme q\u00eb baza e par\u00eb e konceptit \"trustit zero\" \u00ebsht\u00eb mbrojtja e t\u00eb dh\u00ebnave p\u00ebrpara gjith\u00e7ka tjet\u00ebr<\/a><\/noindex>. Kjo do t\u00eb thot\u00eb se \u00ebsht\u00eb e nevojshme t\u00eb jeni n\u00eb gjendje t\u00eb analizoni, mbroni, klasifikoni, ndiqni dhe mbani sigurin\u00eb e t\u00eb dh\u00ebnave tuaja korporative. <\/p>\n

T\u00eb gjitha rrjetet Zero Trust:<\/strong> P\u00ebr t\u00eb vjedhur informacionin, sulmuesit duhet t\u00eb jen\u00eb n\u00eb gjendje t\u00eb l\u00ebvizin brenda rrjetit, prandaj detyra juaj \u00ebsht\u00eb ta b\u00ebni k\u00ebt\u00eb proces sa m\u00eb t\u00eb v\u00ebshtir\u00eb. Segmentoni, izolojeni dhe kontrolloni rrjetet tuaja me teknologji moderne, t\u00eb tilla si firewall-et e brezit t\u00eb ri, t\u00eb dizajnuara pik\u00ebrisht p\u00ebr k\u00ebto q\u00ebllime. <\/p>\n

P\u00ebrdoruesit Zero Trust:<\/strong> Njer\u00ebzit jan\u00eb elementi m\u00eb i dob\u00ebt n\u00eb strategjin\u00eb e siguris\u00eb. Kufizoni, ndiqni dhe zbatuani rrept\u00ebsisht parimet e qasjes s\u00eb p\u00ebrdoruesve n\u00eb burimet brenda rrjetit dhe internetit. Konfiguroni VPN, CASB (broker\u00eb t\u00eb aksesit t\u00eb sigurt n\u00eb re) dhe opsione t\u00eb tjera t\u00eb qasjes p\u00ebr t\u00eb mbrojtur punonj\u00ebsit tuaj. <\/p>\n

Ngarkesa Zero Trust:<\/strong> Termi i ngarkes\u00ebs p\u00ebrdoret nga p\u00ebrfaq\u00ebsuesit e departamentit t\u00eb mb\u00ebshtetje dhe kontroll t\u00eb infrastruktur\u00ebs p\u00ebr t\u00eb p\u00ebrshkruar t\u00ebr\u00eb stek aplikacionesh dhe softueri backend q\u00eb p\u00ebrdoret nga klient\u00ebt tuaj p\u00ebr t\u00eb nd\u00ebrvepruar me biznesin. Aplikacionet e klient\u00ebve q\u00eb nuk jan\u00eb patch-uar jan\u00eb nj\u00eb vektor i zakonsh\u00ebm sulmi, nga i cili duhet t\u00eb mbroheni. Shikoni t\u00ebr\u00eb stek teknologjish \u2014 nga hipervizori deri te frontend-i n\u00eb web \u2014 si nj\u00eb vektor k\u00ebrc\u00ebnimi dhe mbrojeni at\u00eb me mjete q\u00eb p\u00ebrputhen me konceptin e 'besimit t\u00eb zero'. <\/p>\n

Pajisjet Zero Trust:<\/strong> N\u00eb lidhje me p\u00ebrhapjen e internetit t\u00eb gj\u00ebrave (smartphone, smart TV, kafe t\u00eb men\u00e7ura etj.), numri i pajisjeve q\u00eb jetojn\u00eb brenda rrjeteve tuaja \u00ebsht\u00eb rritur ndjesh\u00ebm gjat\u00eb disa viteve t\u00eb fundit. K\u00ebto pajisje jan\u00eb gjithashtu nj\u00eb vektor potencial sulmi, prandaj ato duhet t\u00eb n\u00ebnshtren segmetimit dhe monitorimit, ashtu si \u00e7do kompjuter tjet\u00ebr n\u00eb rrjet.<\/p>\n

Vizualizimi dhe analitika:<\/strong> P\u00ebr nj\u00eb zbatim t\u00eb suksessh\u00ebm t\u00eb principit t\u00eb \"besimit t\u00eb nul\", ofroni punonj\u00ebsve tuaj t\u00eb siguris\u00eb dhe reagimit ndaj incidenteve mjete vizualizimi t\u00eb gjith\u00e7kaje q\u00eb ndodh n\u00eb rrjetin tuaj, si dhe analiza p\u00ebr t\u00eb kuptuar kuptimin e asaj q\u00eb po ndodh. Mbrojtja nga k\u00ebrc\u00ebnimet e avancuara<\/a><\/noindex> dhe analitika e sjelljes s\u00eb p\u00ebrdoruesve<\/a><\/noindex> jan\u00eb pika ky\u00e7e n\u00eb luft\u00ebn e suksesshme kund\u00ebr \u00e7do k\u00ebrc\u00ebnimi potencial n\u00eb rrjet.<\/p>\n

Automatizimi dhe menaxhimi:<\/strong> Automatizimi<\/a><\/noindex> ndihmon p\u00ebr t\u00eb mbajtur funksionalitetin e t\u00eb gjith\u00eb sistemeve tuaja me modelin e \"besimit t\u00eb nul\" dhe p\u00ebr t\u00eb ndjekur zbatimin e politikave Zero Trust. Njer\u00ebzit thjesht nuk jan\u00eb n\u00eb gjendje t\u00eb ndjekin volumin e ngjarjeve q\u00eb k\u00ebrkohet p\u00ebr principin e \"besimit t\u00eb nul\".<\/p>\n

3 principe t\u00eb modelit Zero Trust<\/h1>\n

\n\"\u00c7far\u00eb
\n<\/p>\n

K\u00ebrkoni akses t\u00eb sigurt dhe t\u00eb konfirmuar n\u00eb t\u00eb gjitha burimet <\/h3>\n

\nPrincipi i par\u00eb baz\u00eb i konceptit Zero Trust \u2013 autentikimi dhe verifikimi<\/a><\/noindex><\/strong> i t\u00eb gjitha t\u00eb drejtave t\u00eb aksesit n\u00eb t\u00eb gjitha burimet. \u00c7do her\u00eb q\u00eb nj\u00eb p\u00ebrdorues akseson nj\u00eb burim skedar\u00ebsh, nj\u00eb aplikacion ose nj\u00eb ruajtje cloud, \u00ebsht\u00eb e nevojshme t\u00eb kryhet nj\u00eb autentikim dhe autorizim i ri p\u00ebr k\u00ebt\u00eb p\u00ebrdorues n\u00eb k\u00ebt\u00eb burim.
\nDuhet t\u00eb konsideroni \u00e7do<\/i> p\u00ebrpjekje p\u00ebr t\u00eb aksesuar rrjetin tuaj si nj\u00eb k\u00ebrc\u00ebnim derisa t\u00eb konfirmohet ndryshe, pavar\u00ebsisht nga modeli juaj i hostimit dhe prej nga vjen lidhja. <\/p>\n

P\u00ebrdorni modelin e privilegjeve m\u00eb t\u00eb ul\u00ebta dhe kontrolloni aksesin <\/h3>\n

\nModeli i privilegjeve m\u00eb t\u00eb ul\u00ebta<\/a><\/noindex><\/strong> \u00ebsht\u00eb nj\u00eb paradigm\u00eb sigurie q\u00eb kufizon t\u00eb drejtat e aksesit t\u00eb \u00e7do p\u00ebrdoruesi n\u00eb nivelin e nevojsh\u00ebm p\u00ebr t\u00eb kryer detyrat e tij. Duke e kufizuar aksesin p\u00ebr \u00e7do punonj\u00ebs, ju parandaloni aksesin e keqb\u00ebr\u00ebsve n\u00eb shum\u00eb t\u00eb dh\u00ebna p\u00ebrmes p\u00ebrvet\u00ebsimit t\u00eb nj\u00eb llogarie.
\nP\u00ebrdorni modeli i kontrollit t\u00eb aksesit t\u00eb bazuar n\u00eb role (Role Based Access Control)<\/a><\/noindex><\/strong>, p\u00ebr t\u00eb arritur privilegjet m\u00eb t\u00eb ul\u00ebta dhe t'u ofron pronar\u00ebve t\u00eb biznesit mund\u00ebsin\u00eb p\u00ebr t\u00eb menaxhuar vet\u00eb lejet p\u00ebr t\u00eb dh\u00ebnat e tyre n\u00ebn kontroll. Kryeni auditime t\u00eb t\u00eb drejtave dhe an\u00ebtar\u00ebsive n\u00eb grupe me rregull. <\/p>\n

Gjus\u00eb, \u00e7do gj\u00eb <\/h3>\n

\nPrincipet e 'mosbesimit zero' n\u00ebnkuptojn\u00eb kontroll dhe verifikim t\u00eb gjith\u00e7kaje. Regjistrimi i \u00e7do thirrjeje rrjetore, qasje n\u00eb skedar\u00eb ose mesazhe elektronike p\u00ebr analiz\u00eb mbi aktivitetin keqdash\u00ebs \u2013 nuk \u00ebsht\u00eb di\u00e7ka q\u00eb mund ta b\u00ebj\u00eb nj\u00eb person ose nj\u00eb ekip i t\u00ebr\u00eb. Prandaj, p\u00ebrdorni analiz\u00ebn e siguris\u00eb s\u00eb t\u00eb dh\u00ebnave<\/a><\/noindex><\/strong> mbi regjistrat e mbledhur p\u00ebr t\u00eb zbuluar leht\u00ebsisht k\u00ebrc\u00ebnimet n\u00eb rrjetin tuaj, si\u00e7 jan\u00eb sulmet me brute force<\/a><\/noindex>, programet keqdash\u00ebse ose shp\u00ebrndarjet sekrete t\u00eb t\u00eb dh\u00ebnave. <\/p>\n

Zbatimi i modelit 'mosbesimit zero' <\/h1>\n

\n\"\u00c7far\u00eb
\n
\nLe t\u00eb p\u00ebrcaktojm\u00eb disa rekomandime themelore <\/i>p\u00ebr zbatimin e modelit 'mosbesimit zero':<\/p>\n

    \n
  1. P\u00ebrmir\u00ebsoni \u00e7do element t\u00eb strategjis\u00eb suaj t\u00eb siguris\u00eb informative p\u00ebr t'iu p\u00ebrgjigjur parimeve t\u00eb Zero Trust: <\/strong> Kontrolloni t\u00eb gjitha pjes\u00ebt e strategjis\u00eb suaj aktuale p\u00ebr p\u00ebrputhshm\u00ebrin\u00eb me parimet e p\u00ebrshkruara m\u00eb lart t\u00eb 'mosbesimit zero' dhe rregulloni ato sipas nevoj\u00ebs. <\/li>\n
  2. Analizoni grugun e teknologjive t\u00eb p\u00ebrdorura dhe kontrolloni n\u00ebse ato k\u00ebrkojn\u00eb p\u00ebrmir\u00ebsime ose z\u00ebvend\u00ebsime p\u00ebr t\u00eb arritur Zero Trust: <\/strong> k\u00ebrkoni te prodhuesit e teknologjive t\u00eb p\u00ebrdorura p\u00ebr p\u00ebrputhshm\u00ebrin\u00eb e tyre me parimet e \"besimit zero\". Kontaktoni furnizues t\u00eb rinj p\u00ebr t\u00eb k\u00ebrkuar zgjidhje t\u00eb tjera q\u00eb mund t\u00eb nevojiten p\u00ebr implementimin e strategjis\u00eb Zero Trust.<\/li>\n
  3. Ndjekni parimin e nj\u00eb qasjeje metodike dhe t\u00eb vet\u00ebdijshme n\u00eb implementimin e Zero Trust: <\/strong> vendosni objektiva t\u00eb matsh\u00ebm dhe arritsh\u00ebm. Sigurohuni q\u00eb furnizuesit e rinj t\u00eb zgjidhjeve t\u00eb p\u00ebrputhen gjithashtu me strategjin\u00eb e zgjedhur. <\/li>\n<\/ol>\n

    <\/p>\n

    Modeli Zero Trust: besoni n\u00eb p\u00ebrdoruesit tuaj<\/h1>\n

    \nModeli \"besimit zero\" nuk p\u00ebrputhet plot\u00ebsisht me emrin e tij, por shprehja \"mos beso askujt, kontrollo gjith\u00e7ka\" nuk ting\u00ebllon gjithashtu shum\u00eb mir\u00eb. Ju me t\u00eb v\u00ebrtet\u00eb duhet t\u00eb besoni n\u00eb p\u00ebrdoruesit tuaj, n\u00ebse<\/i> (dhe kjo \u00ebsht\u00eb v\u00ebrtet nj\u00eb \"n\u00ebse\" e madhe) ata kan\u00eb kaluar nj\u00eb nivel adekuat autorizimi dhe mjetet tuaja t\u00eb monitorimit nuk kan\u00eb zbuluar asgj\u00eb t\u00eb dyshimta. <\/p>\n

    Parimi i \"besimit zero\" me Varonis<\/h1>\n

    \nKur implementoni parimin e Zero Trust, Varonis lejon aplikimin e nj\u00eb qasje me fokus n\u00eb<\/i><\/p>\n