{"id":39359,"date":"2019-10-31T22:30:52","date_gmt":"2019-10-31T19:30:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chto-takoe-zero-trust-model-bezopasnosti\/"},"modified":"2019-10-31T22:30:52","modified_gmt":"2019-10-31T19:30:52","slug":"chto-takoe-zero-trust-model-bezopasnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-takoe-zero-trust-model-bezopasnosti","title":{"rendered":"\u00c7far\u00eb \u00ebsht\u00eb Zero Trust? Modeli i siguris\u00eb","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"\u00c7far\u00eb
\n
\nZero Trust (\u00abbesim i shkall\u00ebs s\u00eb zeros\u00bb) \u00ebsht\u00eb nj\u00eb model sigurie i zhvilluar nga analisti i dikursh\u00ebm i Forrester Jon Kindervag<\/a><\/noindex> n\u00eb vitin 2010. Q\u00eb at\u00ebher\u00eb, modeli i \u00abbesimit t\u00eb zeros\u00bb ka evolucionuar n\u00eb konceptin m\u00eb t\u00eb popullarizuar n\u00eb fush\u00ebn e siguris\u00eb kibernetike. Shkarkimet masive t\u00eb t\u00eb dh\u00ebnave s\u00eb fundmi vet\u00ebm sa konfirmojn\u00eb nevoj\u00ebn q\u00eb kompanit\u00eb t\u00eb p\u00ebrqendrohen m\u00eb shum\u00eb n\u00eb sigurin\u00eb kibernetike, dhe modeli Zero Trust mund t\u00eb jet\u00eb qasja e duhur.<\/p>\n

Zero Trust do t\u00eb thot\u00eb t\u00eb mos kesh besim ndaj askujt \u2013 madje as ndaj p\u00ebrdoruesve brenda perimetrave. Modeli n\u00ebnkupton q\u00eb \u00e7do p\u00ebrdorues ose pajisje duhet t\u00eb konfirmoj\u00eb t\u00eb dh\u00ebnat e tij sa her\u00eb q\u00eb k\u00ebrkon qasje n\u00eb ndonj\u00eb burim brenda ose jasht\u00eb rrjetit. <\/p>\n

Lexoni m\u00eb tej n\u00ebse d\u00ebshironi t\u00eb m\u00ebsoni m\u00eb shum\u00eb rreth konceptit t\u00eb siguris\u00eb Zero Trust.
\n<\/a><\/noindex><\/p>\n

Si funksionon koncepti Zero Trust <\/h1>\n

\n\"\u00c7far\u00eb
\n
\nKoncepti Zero Trust ka evoluar n\u00eb nj\u00eb qasje t\u00ebr\u00ebsore ndaj siguris\u00eb kibernetike, duke p\u00ebrfshir\u00eb disa teknologji dhe procese. Q\u00ebllimi i modelit t\u00eb \u00abbesimit t\u00eb zeros\u00bb \u00ebsht\u00eb t\u00eb mbroj\u00eb kompanin\u00eb nga k\u00ebrc\u00ebnimet moderne n\u00eb fush\u00ebn e siguris\u00eb kibernetike dhe shkarkimeve t\u00eb t\u00eb dh\u00ebnave, duke arritur gjithashtu p\u00ebrputhjen me rregulloret ligjore p\u00ebr mbrojtjen e t\u00eb dh\u00ebnave dhe sigurin\u00eb.<\/p>\n

Le t\u00eb analizojm\u00eb fushat kryesore t\u00eb konceptit Zero Trust. Forrester rekomandon q\u00eb organizatat t\u00eb kushtojn\u00eb v\u00ebmendje \u00e7do p\u00ebrcaktimi p\u00ebr t\u00eb nd\u00ebrtuar strategjin\u00eb m\u00eb t\u00eb mir\u00eb t\u00eb \u00abbesimit t\u00eb zeros\u00bb. <\/p>\n

T\u00eb dh\u00ebnat Zero Trust:<\/strong> T\u00eb dh\u00ebnat tuaja jan\u00eb ato q\u00eb p\u00ebrpiqen t'i vjedhin keqb\u00ebr\u00ebsit. Prandaj, \u00ebsht\u00eb logjike q\u00eb themeli i par\u00eb i konceptit \u00abbesimit t\u00eb zeros\u00bb t\u00eb jet\u00eb mbrojtja e t\u00eb dh\u00ebnave n\u00eb radh\u00eb t\u00eb par\u00eb, e jo n\u00eb fund<\/a><\/noindex>. Kjo do t\u00eb thot\u00eb se \u00ebsht\u00eb e nevojshme t\u00eb analizoni, mbani, klasifikoni, ndihmoni dhe ruani sigurin\u00eb e t\u00eb dh\u00ebnave tuaja korporative. <\/p>\n

Rrjetet Zero Trust:<\/strong> P\u00ebr t\u00eb vjedhur informacion, sulmuesit duhet t\u00eb jen\u00eb n\u00eb gjendje t\u00eb l\u00ebvizin brenda rrjetit, prandaj detyra juaj \u00ebsht\u00eb ta b\u00ebni k\u00ebt\u00eb proces sa m\u00eb t\u00eb v\u00ebshtir\u00eb t\u00eb jet\u00eb e mundur. Segmentoni, izolohuni dhe kontrolloni rrjetet tuaja me teknologji moderne, si\u00e7 jan\u00eb firewall-et e brezit t\u00eb ri, t\u00eb krijuara posa\u00e7\u00ebrisht p\u00ebr k\u00ebto q\u00ebllime. <\/p>\n

P\u00ebrdoruesit Zero Trust:<\/strong> Njer\u00ebzit jan\u00eb lidhja m\u00eb e dob\u00ebt n\u00eb strategjin\u00eb e siguris\u00eb. Kufizoni, monitoroni dhe forconi rrept\u00ebsisht filozofin\u00eb e aksesit t\u00eb p\u00ebrdoruesve n\u00eb burimet brenda rrjetit dhe internetit. Konfiguroni VPN, CASB (broker\u00ebt e siguris\u00eb n\u00eb cloud) dhe opsione t\u00eb tjera aksesimi p\u00ebr t\u00eb mbrojtur punonj\u00ebsit tuaj. <\/p>\n

Ngarkesa Zero Trust:<\/strong> Termi i ngarkes\u00ebs p\u00ebrdoret nga profesionist\u00ebt e sh\u00ebrbimit dhe mbik\u00ebqyrjes s\u00eb infrastruktur\u00ebs p\u00ebr t\u00eb p\u00ebrshkruar t\u00eb gjith\u00eb grupe e aplikacioneve dhe softuer\u00ebve backend q\u00eb p\u00ebrdoren nga klient\u00ebt tuaj p\u00ebr t\u00eb nd\u00ebrvepruar me biznesin. Aplikacionet e klient\u00ebve q\u00eb nuk jan\u00eb t\u00eb patch-uara jan\u00eb nj\u00eb vektor i zakonsh\u00ebm sulmi, p\u00ebr t\u00eb cilin duhet t\u00eb mbroheni. Trajtoni t\u00eb gjith\u00eb stack-un e teknologjive - nga hipervizori deri te frontend-i i web-it - si nj\u00eb vektor k\u00ebrc\u00ebnimi dhe mbrojtini ato me mjete q\u00eb p\u00ebrgjigjen ndaj konceptit \"Zero Trust\". <\/p>\n

Pajisjet Zero Trust:<\/strong> Me shtrirjen e internetit t\u00eb gj\u00ebrave (smartphone, smart TV, kafetier\u00eb inteligjente etj.), numri i pajisjeve q\u00eb jetojn\u00eb brenda rrjeteve tuaja \u00ebsht\u00eb rritur ndjesh\u00ebm gjat\u00eb disa viteve t\u00eb fundit. K\u00ebto pajisje gjithashtu p\u00ebrb\u00ebjn\u00eb nj\u00eb vektor t\u00eb mundsh\u00ebm sulmi, prandaj ato duhet t\u00eb ndeshen dhe monitorohen, si \u00e7do kompjuter tjet\u00ebr n\u00eb rrjet.<\/p>\n

Vizualizimi dhe analiza:<\/strong> P\u00ebr implementimin e suksessh\u00ebm t\u00eb parimit \"Zero Trust\", ofroni punonj\u00ebsve tuaj t\u00eb siguris\u00eb dhe reagimit ndaj incidenteve mjete vizualizimi p\u00ebr gjith\u00e7ka q\u00eb ndodh n\u00eb rrjetin tuaj, si dhe analiz\u00ebn p\u00ebr t\u00eb kuptuar kuptimin e ngjarjeve. Mbrojtja nga k\u00ebrc\u00ebnimet e avancuara<\/a><\/noindex> dhe analiza e sjelljes s\u00eb p\u00ebrdoruesve<\/a><\/noindex> jan\u00eb pika ky\u00e7e n\u00eb luft\u00ebn e suksesshme ndaj k\u00ebrc\u00ebnimeve t\u00eb mundshme n\u00eb rrjet.<\/p>\n

Automatizimi dhe menaxhimi:<\/strong> Automatizimi<\/a><\/noindex> ndihmojn\u00eb n\u00eb ruajtjen e funksionimit t\u00eb t\u00eb gjitha sistemeve tuaja me modelin \"Zero Trust\" dhe monitorimin e zbatimit t\u00eb politikave Zero Trust. Njer\u00ebzit thjesht nuk jan\u00eb n\u00eb gjendje t\u00eb ndjekin sasin\u00eb e ngjarjeve q\u00eb k\u00ebrkohet p\u00ebr parimin \"Zero Trust\".<\/p>\n

3 parimet e modelit Zero Trust<\/h1>\n

\n\"\u00c7far\u00eb
\n<\/p>\n

K\u00ebrkoni akses t\u00eb sigurt dhe t\u00eb verifikuar n\u00eb t\u00eb gjitha burimet <\/h3>\n

\nParimi i par\u00eb themelor i konceptit Zero Trust \u2013 autentifikimi dhe verifikimi<\/a><\/noindex><\/strong> t\u00eb gjitha t\u00eb drejtave t\u00eb aksesit n\u00eb t\u00eb gjitha burimet. \u00c7do her\u00eb q\u00eb nj\u00eb p\u00ebrdorues i qaset nj\u00eb burimi skedari, aplikacioni ose ruajtjes n\u00eb re, \u00ebsht\u00eb e nevojshme t\u00eb b\u00ebhet nj\u00eb ri-autentifikim dhe autorizim i k\u00ebtij p\u00ebrdoruesi p\u00ebr k\u00ebt\u00eb burim.
\nDuhet t\u00eb shqyrtoni \u00e7do<\/i> p\u00ebrpjekje p\u00ebr t'u qasur n\u00eb rrjetin tuaj si nj\u00eb k\u00ebrc\u00ebnim derisa t\u00eb konfirmohet t\u00eb kund\u00ebrta, pavar\u00ebsisht modelit tuaj t\u00eb hostingut dhe prej nga vjen lidhja. <\/p>\n

P\u00ebrdorni modelin e privilegjeve m\u00eb t\u00eb ulta dhe kontrolloni aksesin <\/h3>\n

\nModeli i privilegjeve m\u00eb t\u00eb ulta<\/a><\/noindex><\/strong> \u00ebsht\u00eb nj\u00eb paradigm\u00eb sigurie q\u00eb kufizon t\u00eb drejtat e aksesit t\u00eb \u00e7do p\u00ebrdoruesi n\u00eb at\u00eb nivel q\u00eb \u00ebsht\u00eb e nevojshme p\u00ebr t\u00eb p\u00ebrmbushur detyrat e tij. Duke kufizuar qasjen p\u00ebr \u00e7do punonj\u00ebs, parandaloni q\u00eb nj\u00eb sulmues t\u00eb ket\u00eb akses n\u00eb nj\u00eb sasi t\u00eb madhe t\u00eb dh\u00ebnash p\u00ebrmes kompromitimit t\u00eb nj\u00eb llogarie.
\nP\u00ebrdorni modeli i kontrollit t\u00eb aksesit t\u00eb bazuar n\u00eb rol (Role Based Access Control)<\/a><\/noindex><\/strong>, p\u00ebr t\u00eb arritur privilegjet m\u00eb t\u00eb ulta dhe p\u00ebr t\u00eb ofruar pronar\u00ebve t\u00eb bizneseve mund\u00ebsin\u00eb q\u00eb t\u00eb menaxhojn\u00eb vet\u00eb lejet p\u00ebr t\u00eb dh\u00ebnat e tyre n\u00ebn kontroll. Kryeni auditimin e t\u00eb drejtave dhe an\u00ebtar\u00ebsive n\u00eb grupe me rregullsi. <\/p>\n

P\u00ebrgatituni p\u00ebr \u00e7do gj\u00eb <\/h3>\n

\nParimet e 'mir\u00ebbesimit zero' p\u00ebrfshijn\u00eb kontrollin dhe verifikimin e gjith\u00e7kaje. Regjistrimi i \u00e7do thirrjeje rrjetore, qasje n\u00eb skedar apo mesazh me email p\u00ebr analiza t\u00eb aktiviteteve t\u00eb d\u00ebmshme \u2013 kjo nuk \u00ebsht\u00eb di\u00e7ka q\u00eb mund ta b\u00ebj\u00eb nj\u00eb person apo nj\u00eb ekip i t\u00ebr\u00eb. Prandaj, p\u00ebrdorni analitik\u00ebn e siguris\u00eb s\u00eb t\u00eb dh\u00ebnave<\/a><\/noindex><\/strong> p\u00ebrmbi regjistrat e mbledhur, p\u00ebr t\u00eb zbuluar leht\u00ebsisht k\u00ebrc\u00ebnimet n\u00eb rrjetin tuaj, si\u00e7 jan\u00eb sulmet b\u0440\u0443\u0442-for\u0441<\/a><\/noindex>, programe t\u00eb d\u00ebmshme ose eksfiltrimin e fsheht\u00eb t\u00eb t\u00eb dh\u00ebnave. <\/p>\n

Zbatimi i modelit 'mir\u00ebbesim zero' <\/h1>\n

\n\"\u00c7far\u00eb
\n
\nLe t\u00eb sh\u00ebnojm\u00eb disa recommendations kryesore <\/i>kur zbatojm\u00eb modelin e 'mir\u00ebbesimit zero':<\/p>\n

    \n
  1. P\u00ebrdit\u00ebsoni \u00e7do element t\u00eb strategjis\u00eb suaj t\u00eb siguris\u00eb informative p\u00ebr t'u p\u00ebrputhur me parimet Zero Trust: <\/strong> Kontrolloni t\u00eb gjitha pjes\u00ebt e strategjis\u00eb suaj aktuale p\u00ebr t'u p\u00ebrputhur me parimet e m\u00ebsip\u00ebrme t\u00eb 'mir\u00ebbesimit zero' dhe rregulloni ato n\u00ebse \u00ebsht\u00eb e nevojshme. <\/li>\n
  2. Analizoni stek\u00ebn e teknologjive q\u00eb po p\u00ebrdorni dhe kontrolloni n\u00ebse k\u00ebrkon p\u00ebrdit\u00ebsime ose z\u00ebvend\u00ebsime p\u00ebr t\u00eb arritur Zero Trust: <\/strong> K\u00ebrkoni nga prodhuesit e teknologjive t\u00eb p\u00ebrdorura p\u00ebr p\u00ebrputhshm\u00ebrin\u00eb e tyre me parimet e \"mosbesimit t\u00eb plot\u00eb\". Kontaktoni ofrues t\u00eb rinj p\u00ebr t\u00eb gjetur zgjidhje shtes\u00eb q\u00eb mund t\u00eb nevojiten p\u00ebr zbatimin e strategjis\u00eb Zero Trust.<\/li>\n
  3. Ndjekni parimin e nj\u00eb qasjeje metodike dhe t\u00eb vet\u00ebdijshme gjat\u00eb zbatimit t\u00eb Zero Trust: <\/strong> vendosni objektiva t\u00eb matsh\u00ebm dhe t\u00eb arritsh\u00ebm. Sigurohuni q\u00eb ofruesit e rinj t\u00eb zgjidhjeve gjithashtu p\u00ebrputhen me strategjin\u00eb tuaj t\u00eb zgjedhur. <\/li>\n<\/ol>\n

    <\/p>\n

    Modeli i Zero Trust: besoni n\u00eb p\u00ebrdoruesit tuaj<\/h1>\n

    \nModeli \"i mosbesimit t\u00eb plot\u00eb\" ndoshta nuk p\u00ebrputhet sakt\u00ebsisht me emrin e tij, por fraza \"mos besoni askujt, kontrolloni gjith\u00e7ka\" nga ana tjet\u00ebr nuk ka tingull kaq mir\u00eb. Ju me t\u00eb v\u00ebrtet\u00eb duhet t\u00eb besoni n\u00eb p\u00ebrdoruesit tuaj, n\u00ebse<\/i> (dhe kjo \u00ebsht\u00eb me t\u00eb v\u00ebrtet\u00eb nj\u00eb \"n\u00ebse\" e madhe) ata jan\u00eb autorizuar n\u00eb m\u00ebnyr\u00eb adekuate dhe mjetet tuaja t\u00eb monitorimit nuk kan\u00eb zbuluar asgj\u00eb t\u00eb dyshimt\u00eb. <\/p>\n

    Parimi i \"mosbesimit t\u00eb plot\u00eb\" me Varonis<\/h1>\n

    \nMe zbatimin e parimit Zero Trust, Varonis lejon aplikimin e nj\u00eb qasjeje me orientim n\u00eb sigurin\u00eb e t\u00eb dh\u00ebnave:<\/i><\/p>\n