{"id":81884,"date":"2020-05-17T13:42:18","date_gmt":"2020-05-17T11:42:18","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/bezopasnost-i-subd-o-chyom-nado-pomnit-podbiraya-sredstva-zashhity"},"modified":"2020-05-17T13:42:18","modified_gmt":"2020-05-17T11:42:18","slug":"bezopasnost-i-subd-o-chyom-nado-pomnit-podbiraya-sredstva-zashhity","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/bezopasnost-i-subd-o-chyom-nado-pomnit-podbiraya-sredstva-zashhity","title":{"rendered":"Siguria dhe DBMS: \u00e7far\u00eb duhet t\u00eb mbani mend kur zgjidhni mjetet mbrojt\u00ebse","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<h1><img decoding=\"async\" alt=\"Siguria dhe DBMS: \u00e7far\u00eb duhet t\u00eb mbani mend kur zgjidhni mjetet mbrojt\u00ebse\" src=\"\/wp-content\/uploads\/2020\/05\/ac49253838e36336af127d71394139d8.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/h1>\n<p>\nM\u00eb quajn\u00eb Denis Rojkov, un\u00eb jam drejtor i zhvillimit t\u00eb software-it n\u00eb kompanin\u00eb \u00abGazinformservice\u00bb, n\u00eb ekipin e produktit <noindex><a rel=\"nofollow\" href=\"https:\/\/www.gaz-is.ru\/produkty\/inform-sistemy\/subd-jatoba.html\">Jatoba<\/a><\/noindex>. Legjislacioni dhe normat e korporatave vendosin k\u00ebrkesa t\u00eb caktuara p\u00ebr sigurin\u00eb e ruajtjes s\u00eb t\u00eb dh\u00ebnave. Askush nuk d\u00ebshiron q\u00eb pal\u00eb t\u00eb treta t\u00eb ken\u00eb qasje n\u00eb informacionin konfidencial, prandaj p\u00ebr \u00e7do projekt, pyetje t\u00eb tilla jan\u00eb t\u00eb r\u00ebnd\u00ebsishme: identifikimi dhe autentikimi, menaxhimi i qasjes s\u00eb t\u00eb dh\u00ebnave, sigurimi i integritetit t\u00eb informacionit n\u00eb sistem, regjistrimi i ngjarjeve t\u00eb siguris\u00eb. Prandaj, dua t\u00eb flas p\u00ebr disa momente interesante q\u00eb lidhen me sigurin\u00eb e SGBD. <br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nArtikulli \u00ebsht\u00eb p\u00ebrgatitur sipas nj\u00eb paraqitjeje n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/corp.mail.ru\/ru\/press\/events\/databases-1\/\">@Databases Meetup,<\/a><\/noindex> organizuar <noindex><a rel=\"nofollow\" href=\"https:\/\/mcs.mail.ru\/\">Zgjidhjet Cloud t\u00eb Mail.ru<\/a><\/noindex>. N\u00ebse nuk doni t\u00eb lexoni, mund ta shihni:<\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"n-54j9FHaMU\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/n-54j9FHaMU\/hqdefault.jpg\" alt=\"Luaj videon\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><br \/>\nArtikulli do t\u00eb ket\u00eb tre pjes\u00eb:<\/p>\n<ul>\n<li>Si t\u00eb mbrohet lidhjet.<\/li>\n<li>\u00c7far\u00eb \u00ebsht\u00eb auditi i veprimeve dhe si t\u00eb regjistrohet \u00e7far\u00eb ndodh nga ana e baz\u00ebs s\u00eb t\u00eb dh\u00ebnave dhe lidhjes s\u00eb saj.<\/li>\n<li>Si t\u00eb mbrohen t\u00eb dh\u00ebnat n\u00eb vet\u00eb baz\u00ebn e t\u00eb dh\u00ebnave dhe cilat teknologji ekzistojn\u00eb p\u00ebr k\u00ebt\u00eb.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Siguria dhe DBMS: \u00e7far\u00eb duhet t\u00eb mbani mend kur zgjidhni mjetet mbrojt\u00ebse\" src=\"\/wp-content\/uploads\/2020\/05\/fbdca7f4a925b9ceb78de06c6e245b23.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Tre komponent\u00ebt e siguris\u00eb s\u00eb SGBD: mbrojtja e lidhjeve, auditi i veprimeve dhe mbrojtja e t\u00eb dh\u00ebnave<\/i><\/p>\n<h2>Mbrojtja e lidhjeve<\/h2>\n<p>\nLidhja me baz\u00ebn e t\u00eb dh\u00ebnave mund t\u00eb b\u00ebhet si direkt ashtu edhe n\u00ebp\u00ebrmjet aplikacioneve web. N\u00eb p\u00ebrgjith\u00ebsi, p\u00ebrdoruesi nga ana e biznesit, dometh\u00ebn\u00eb nj\u00eb njeri q\u00eb punon me SGBD, nd\u00ebrvepron me t\u00eb jo drejtp\u00ebrdrejt.<\/p>\n<p>P\u00ebrpara se t\u00eb flasim p\u00ebr mbrojtjen e lidhjeve, duhet t\u00eb p\u00ebrgjigjemi n\u00eb pyetje t\u00eb r\u00ebnd\u00ebsishme, q\u00eb do t\u00eb determinojn\u00eb se si do t\u00eb nd\u00ebrtohen masat e siguris\u00eb:<\/p>\n<ul>\n<li>a \u00ebsht\u00eb ekuivalent nj\u00eb p\u00ebrdorues biznesi me nj\u00eb p\u00ebrdorues t\u00eb SGBD;<\/li>\n<li>a sigurohet akses n\u00eb t\u00eb dh\u00ebnat e SGBD vet\u00ebm p\u00ebrmes API-s\u00eb, e cila ju kontrolloni, apo ka akses n\u00eb tabela direkt;<\/li>\n<li>a \u00ebsht\u00eb SGBD e ndar\u00eb n\u00eb nj\u00eb segment t\u00eb ve\u00e7ant\u00eb t\u00eb mbrojtur, kush dhe si nd\u00ebrvepron me t\u00eb;<\/li>\n<li>a p\u00ebrdoret pooling\/proxy dhe shtresa nd\u00ebrmjet\u00ebse q\u00eb mund t\u00eb ndryshojn\u00eb informacionin p\u00ebr m\u00ebnyr\u00ebn se si \u00ebsht\u00eb nd\u00ebrtuar lidhja dhe kush p\u00ebrdor baz\u00ebn e t\u00eb dh\u00ebnave.<\/li>\n<\/ul>\n<p>\nTani le t\u00eb shohim se cilat mjete mund t\u00eb aplikojm\u00eb p\u00ebr t\u00eb mbrojtur lidhjet:<\/p>\n<ol>\n<li>P\u00ebrdorni zgjidhje t\u00eb klas\u00ebs database firewall. Nj\u00eb shtres\u00eb e shtuar mbrojtjeje, t\u00eb pakt\u00ebn do t\u00eb rrit\u00eb transparenc\u00ebn e asaj q\u00eb ndodh n\u00eb SGBD, maksimumi \u2014 do t\u00eb mund t\u00eb sigurosh mbrojtje t\u00eb shtuar p\u00ebr t\u00eb dh\u00ebnat.<\/li>\n<li>P\u00ebrdorni politikat e fjal\u00ebkalimeve. Zbatimi i tyre varet nga m\u00ebnyra se si \u00ebsht\u00eb nd\u00ebrtuar arhitektura juaj. N\u00eb \u00e7do rast, nj\u00eb fjal\u00ebkalim n\u00eb skedarin e konfigurimit t\u00eb aplikacionit web q\u00eb lidhet me DBMS \u00ebsht\u00eb i pamjaftuesh\u00ebm p\u00ebr mbrojtje. Ekzistojn\u00eb nj\u00eb s\u00ebr\u00eb mjetesh DBMS q\u00eb lejojn\u00eb monitorimin e k\u00ebrkes\u00ebs p\u00ebr azhurnimin e p\u00ebrdoruesit dhe fjal\u00ebkalimit.\n<p>Lexoni m\u00eb shum\u00eb rreth funksionaliteteve t\u00eb vler\u00ebsimit t\u00eb p\u00ebrdoruesve. <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.cloud.oracle.com\/en-us\/iaas\/data-safe\/doc\/user-assessment-reports.html\">k\u00ebtu<\/a><\/noindex>, gjithashtu mund t\u00eb m\u00ebsoni p\u00ebr MS SQL Vulnerability Assessment. <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.microsoft.com\/en-us\/sql\/relational-databases\/security\/sql-vulnerability-assessment?view=sql-server-ver15\">k\u00ebtu<\/a><\/noindex>.\u00a0<\/li>\n<li>Pasuroni kontekstin e sesionit me informacionin e nevojsh\u00ebm. N\u00ebse sesioni \u00ebsht\u00eb i paqart\u00eb, nuk kuptoni se kush po punon brenda tij n\u00eb DBMS, mund t\u00eb shtoni informacion rreth asaj q\u00eb b\u00ebn, kush \u00ebsht\u00eb dhe p\u00ebrse, gjat\u00eb operacionit t\u00eb kryer. Ky informacion mund t\u00eb shihet n\u00eb audit.<\/li>\n<li>Konfiguroni SSL-n\u00eb, n\u00ebse nuk keni ndarje rrjeti nd\u00ebrmjet DBMS-s\u00eb dhe p\u00ebrdoruesve t\u00eb fundit, q\u00eb nuk \u00ebsht\u00eb n\u00eb nj\u00eb VLAN t\u00eb ve\u00e7ant\u00eb. N\u00eb k\u00ebto raste, \u00ebsht\u00eb domosdoshm\u00ebrisht t\u00eb mbroni kanalin nd\u00ebrmjet konsumatorit dhe vet\u00eb DBMS-s\u00eb. Ekzistojn\u00eb mjete mbrojt\u00ebse gjithashtu edhe n\u00eb mes open source.<\/li>\n<\/ol>\n<p><\/p>\n<h3>Si do t\u00eb ndikoj\u00eb kjo n\u00eb performanc\u00ebn e DBMS-s\u00eb?<\/h3>\n<p>\nLe t\u00eb shohim shembujt e PostgreSQL, si SSL ndikon n\u00eb ngarkes\u00ebn e CPU, rritjen e koh\u00ebve dhe zvog\u00eblimin e TPS, a do t\u00eb harxhohen shum\u00eb burime n\u00ebse aktivizohet.<\/p>\n<p>Ngarkohet PostgreSQL duke p\u00ebrdorur pgbench \u2014 kjo \u00ebsht\u00eb nj\u00eb program i thjesht\u00eb p\u00ebr t\u00eb ekzekutuar teste performance. Ai p\u00ebrs\u00ebrit nj\u00eb sekuenc\u00eb komandash disa her\u00eb, ndoshta n\u00eb seanca paralele t\u00eb baz\u00ebs s\u00eb t\u00eb dh\u00ebnave, dhe m\u00eb pas llogarit shpejt\u00ebsin\u00eb mesatare t\u00eb transaksioneve.<\/p>\n<p><strong>Test 1 pa SSL dhe duke p\u00ebrdorur SSL<\/strong> \u2014 lidhja vendoset n\u00eb \u00e7do transaksion:<\/p>\n<pre><code class=\"plaintext\">pgbench.exe --connect -c 10 -t 5000 \"host=192.168.220.129 dbname=taskdb user=postgres sslmode=require\nsslrootcert=rootCA.crt sslcert=client.crt sslkey=client.key\"<\/code><\/pre>\n<p>\n<strong>ndaj<\/strong><\/p>\n<pre><code class=\"plaintext\">pgbench.exe --connect -c 10 -t 5000 \"host=192.168.220.129 dbname=taskdb user=postgres\"<\/code><\/pre>\n<p>\n<strong>Test 2 pa SSL dhe duke p\u00ebrdorur SSL<\/strong> \u2014 t\u00eb gjitha transaksionet kryhen n\u00eb nj\u00eb lidhje:<\/p>\n<pre><code class=\"plaintext\">pgbench.exe -c 10 -t 5000 \"host=192.168.220.129 dbname=taskdb user=postgres sslmode=require\nsslrootcert=rootCA.crt sslcert=client.crt sslkey=client.key\"<\/code><\/pre>\n<p>\n<strong>ndaj<\/strong><\/p>\n<pre><code class=\"plaintext\">pgbench.exe -c 10 -t 5000 \"host=192.168.220.129 dbname=taskdb user=postgres\"<\/code><\/pre>\n<p>\n<strong>Cil\u00ebsime t\u00eb tjera<\/strong>:<\/p>\n<pre><code class=\"plaintext\">scaling factor: 1\nquery mode: simple\nnumber of clients: 10\nnumber of threads: 1\nnumber of transactions per client: 5000\nnumber of transactions actually processed: 50000\/50000<\/code><\/pre>\n<p>\n<strong>Rezultatet e testimit<\/strong>:<\/p>\n<p>\u00a0<br \/>\n<strong>PA SSL<\/strong><br \/>\n<strong>SSL<\/strong><\/p>\n<p><strong>Vendoset lidhja n\u00eb \u00e7do transaksion<\/strong><\/p>\n<p>mesatarja e vones\u00ebs<br \/>\n171.915 ms<br \/>\n187.695 ms<\/p>\n<p>tps duke p\u00ebrfshir\u00eb vendosjen e lidhjeve<br \/>\n58.168112<br \/>\n53.278062<\/p>\n<p>tps duke p\u00ebrjashtuar lidhjet e vendosura<br \/>\n64.084546<br \/>\n58.725846<\/p>\n<p>CPU<br \/>\n24%<br \/>\n28%<\/p>\n<p><strong>T\u00eb gjitha transaksionet kryhen n\u00eb nj\u00eb lidhje<\/strong><\/p>\n<p>mesatarja e vones\u00ebs<br \/>\n6.722 ms<br \/>\n6.342 ms<\/p>\n<p>tps p\u00ebrfshir\u00eb vendosjen e lidhjeve<br \/>\n1587.657278<br \/>\n1576.792883<\/p>\n<p>tps duke p\u00ebrjashtuar lidhjet e vendosura<br \/>\n1588.380574<br \/>\n1577.694766<\/p>\n<p>CPU<br \/>\n17%<br \/>\n21%<\/p>\n<p>\nN\u00eb ngarkesa t\u00eb vogla, ndikimi i SSL \u00ebsht\u00eb i krahasuesh\u00ebm me gabimin e matjes. N\u00ebse v\u00ebllimi i t\u00eb dh\u00ebnave t\u00eb transferuara \u00ebsht\u00eb shum\u00eb i madh, situata mund t\u00eb jet\u00eb ndryshe. N\u00ebse ne vendosim nj\u00eb lidhje p\u00ebr \u00e7do transaksion (kjo ndodh rrall\u00eb, zakonisht lidhjet ndahen nd\u00ebrmjet p\u00ebrdoruesve), keni nj\u00eb num\u00ebr t\u00eb madh lidhjesh\/\u00e7lirimesh, ndikimi mund t\u00eb jet\u00eb pak m\u00eb i madh. Pra, ka rreziqe p\u00ebr nj\u00eb ulje t\u00eb performanc\u00ebs, megjithat\u00eb, dallimi nuk \u00ebsht\u00eb aq i madh sa t\u00eb mos p\u00ebrdoret mbrojtja.<\/p>\n<p>Kujdes \u2014 ka nj\u00eb dallim t\u00eb madh n\u00ebse krahasohen modet e funksionimit: brenda nj\u00eb seance punoni ose n\u00eb t\u00eb ndryshme. Kjo \u00ebsht\u00eb e qart\u00eb: krijimi i \u00e7do lidhjeje k\u00ebrkon burime.<\/p>\n<p>Kemi nj\u00eb rast kur lidh\u00ebm Zabbix n\u00eb modin besnik, dometh\u00ebn\u00eb nuk e kontrollonim md5, nuk kishte nevoj\u00eb p\u00ebr autentifikim. M\u00eb pas, klienti k\u00ebrkoi t\u00eb aktivizohej modi i autentifikimit md5. Kjo shkaktoi nj\u00eb ngarkes\u00eb t\u00eb madhe n\u00eb CPU, performanca ra. Nisi nj\u00eb k\u00ebrkim p\u00ebr mund\u00ebsi optimizimi. Nj\u00eb nga zgjidhjet e mundshme p\u00ebr problemin \u2014 t\u00eb zbatohet nj\u00eb kufizim rrjeti, t\u00eb krijohen VLAN t\u00eb ve\u00e7anta p\u00ebr DBMS, t\u00eb shtohen konfigurime p\u00ebr t\u00eb b\u00ebr\u00eb t\u00eb qart\u00eb se kush dhe nga ku lidhet dhe t\u00eb hiqet autentifikimi. Gjithashtu, mund t\u00eb optimizohen parametrat e autentifikimit p\u00ebr t\u00eb ulur kostot gjat\u00eb aktivizimit t\u00eb autentifikimit, por n\u00eb p\u00ebrgjith\u00ebsi, p\u00ebrdorimi i metodave t\u00eb ndryshme t\u00eb autentifikimit ndikon n\u00eb performanc\u00eb dhe duhet t\u00eb merret parasysh k\u00ebto faktor\u00eb gjat\u00eb projektimit t\u00eb kapaciteteve kompjuterike t\u00eb server\u00ebve (harduerit) p\u00ebr DBMS.<\/p>\n<p>P\u00ebrfundimi: n\u00eb disa zgjidhje, madje edhe nuanca t\u00eb vogla n\u00eb autentifikim mund t\u00eb ndikojn\u00eb ndjesh\u00ebm n\u00eb projekt dhe \u00ebsht\u00eb keq kur kjo kuptohet vet\u00ebm gjat\u00eb zbatimit n\u00eb prodhim.<\/p>\n<h2>Auditi i veprimeve<\/h2>\n<p>\nAuditi nuk \u00ebsht\u00eb vet\u00ebm p\u00ebr SGBD. Auditi \u00ebsht\u00eb marrja e informacionit mbi at\u00eb q\u00eb ndodh n\u00eb segmente t\u00eb ndryshme. Kjo mund t\u00eb jet\u00eb edhe nj\u00eb firewall database, edhe sistemi operativ mbi t\u00eb cilin \u00ebsht\u00eb nd\u00ebrtuar SGBD.<\/p>\n<p>N\u00eb SGBD komerciale t\u00eb nivelit Enterprise, auditi \u00ebsht\u00eb i mir\u00eb, por n\u00eb open source \u2014 jo gjithmon\u00eb. K\u00ebtu \u00ebsht\u00eb \u00e7far\u00eb ka n\u00eb PostgreSQL:<\/p>\n<ul>\n<li>log default \u2014 logimi i nd\u00ebrtuar;<\/li>\n<li>ekstensionet: pgaudit \u2014 n\u00ebse ju mungon logimi standard, mund t\u00eb p\u00ebrdorni konfigurime t\u00eb ve\u00e7anta q\u00eb zgjidhin disa probleme.<\/li>\n<\/ul>\n<p>\n<b>Shtes\u00eb p\u00ebr raportin n\u00eb video:<\/b><\/p>\n<p>\u00abRegjistrimi fillestar i operator\u00ebve mund t\u00eb sigurohet nga nj\u00eb mjet standard i regjistrimit me log_statement = all.<\/p>\n<p>Kjo \u00ebsht\u00eb e pranueshme p\u00ebr monitorim dhe p\u00ebrdorime t\u00eb tjera, por nuk siguron nivelin e detajeve q\u00eb \u00ebsht\u00eb zakonisht i nevojsh\u00ebm p\u00ebr auditet.<\/p>\n<p>Nuk mjafton t\u00eb kesh nj\u00eb list\u00eb t\u00eb t\u00eb gjitha operacioneve q\u00eb kryhen me baz\u00ebn e t\u00eb dh\u00ebnave.<\/p>\n<p>Duhet gjithashtu t\u00eb ket\u00eb mund\u00ebsin\u00eb p\u00ebr t\u00eb gjetur afirmatat specifike q\u00eb jan\u00eb t\u00eb r\u00ebnd\u00ebsishme p\u00ebr auditorin.<\/p>\n<p>Mjeti i standardit t\u00eb regjistrimit tregon at\u00eb q\u00eb k\u00ebrkoi p\u00ebrdoruesi, nd\u00ebrsa pgAudit fokusohet n\u00eb detajet e asaj q\u00eb ndodhi kur baza e t\u00eb dh\u00ebnave kryente k\u00ebrkes\u00ebn.<\/p>\n<p>P\u00ebr shembull, nj\u00eb auditor mund t\u00eb d\u00ebshiroj\u00eb t\u00eb siguroj\u00eb q\u00eb nj\u00eb tavolin\u00eb specifike t\u00eb jet\u00eb krijuar n\u00eb nj\u00eb dritare sh\u00ebrbimi t\u00eb dokumentuar.<\/p>\n<p>Kjo mund t\u00eb duket si nj\u00eb detyr\u00eb e thjesht\u00eb p\u00ebr nj\u00eb audit t\u00eb bazuar dhe grep, por \u00e7far\u00eb n\u00ebse ju paraqitet di\u00e7ka si ky shembull (me q\u00ebllim t\u00eb nd\u00ebrlikuar):<\/p>\n<p>DO $$<br \/>\nFILLIM<br \/>\n EXECUTE 'CREATE TABLE import' || 'ant_table (id INT)';<br \/>\nEND $$;<\/p>\n<p>Mbajtja e standardit t\u00eb regjistrit do t'ju jap\u00eb k\u00ebt\u00eb:<\/p>\n<p>LOG: statement: DO $$<br \/>\nFILLIM<br \/>\n EXECUTE 'CREATE TABLE import' || 'ant_table (id INT)';<br \/>\nEND $$;<\/p>\n<p>Duket se p\u00ebr t\u00eb gjetur tavolin\u00ebn e interesit mund t\u00eb k\u00ebrkohet disa njohuri p\u00ebr kodin n\u00eb raste kur tavolinat jan\u00eb krijuar dinamikisht.<\/p>\n<p>Kjo nuk \u00ebsht\u00eb ideale, pasi do t\u00eb ishte e preferueshme t\u00eb k\u00ebrkoni thjesht sipas emrit t\u00eb tavolin\u00ebs.<\/p>\n<p>K\u00ebtu \u00ebsht\u00eb ku do t\u00eb jet\u00eb e dobishme pgAudit.<\/p>\n<p>P\u00ebr t\u00eb nj\u00ebjt\u00ebn hyrje ai do t\u00eb jap\u00eb k\u00ebt\u00eb dalje n\u00eb regjist\u00ebr:<\/p>\n<p>AUDIT: SESSION,33,1,FUNCTION,DO,,,\u00abDO $$<br \/>\nFILLIM<br \/>\n EXECUTE 'CREATE TABLE import' || 'ant_table (id INT)';<br \/>\nEND $$;<br \/>\nAUDIT: SESSION,33,2,DDL,CREATE TABLE,TABLE,public.important_table,CREATE TABLE important_table (id INT)<\/p>\n<p>Regjistrohet jo vet\u00ebm blloku DO, por edhe teksti i plot\u00eb CREATE TABLE me llojin e operatorit, llojin e objektit dhe emrin e plot\u00eb, duke leht\u00ebsuar k\u00ebrkimin.<\/p>\n<p>Me regjistrimin e operator\u00ebve SELECT dhe DML, pgAudit mund t\u00eb konfiguroni p\u00ebr t\u00eb regjistruar nj\u00eb hyrje t\u00eb ve\u00e7ant\u00eb p\u00ebr \u00e7do marr\u00ebdh\u00ebnie q\u00eb referohet n\u00eb operator.<\/p>\n<p>Nuk k\u00ebrkohet nj\u00eb analiz\u00eb sintaksore p\u00ebr t\u00eb gjetur t\u00eb gjith\u00eb operator\u00ebt q\u00eb lidhen me nj\u00eb tabel\u00eb t\u00eb caktuar,<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/pgaudit\/pgaudit\/blob\/master\/README.md\">*<\/a><\/noindex>)\u00bb.<\/p>\n<h3>Si do t\u00eb ndikoj\u00eb kjo n\u00eb performanc\u00ebn e DBMS-s\u00eb?<\/h3>\n<p>\nLe t\u00eb kryejm\u00eb testime me p\u00ebrfshirjen e auditit t\u00eb plot\u00eb dhe t\u00eb shohim \u00e7far\u00eb do t\u00eb ndodh\u00eb me performanc\u00ebn e PostgreSQL. Do t\u00eb aktivizojm\u00eb maksimalin e regjistrimit t\u00eb DB sipas t\u00eb gjitha parametrave.<\/p>\n<p>Nuk b\u00ebjm\u00eb pothuajse asnj\u00eb ndryshim n\u00eb skedarin e konfigurimit, nga t\u00eb r\u00ebnd\u00ebsishmet \u2014 aktivizojm\u00eb rejimin debug5 p\u00ebr t\u00eb marr\u00eb maksimumin e informacionit.<\/p>\n<p>postgresql.conf<\/p>\n<p>log_destination = 'stderr'<br \/>\nlogging_collector = on<br \/>\nlog_truncate_on_rotation = on<br \/>\nlog_rotation_age = 1d<br \/>\nlog_rotation_size = 10MB<br \/>\nlog_min_messages = <strong>debug5<\/strong><br \/>\nlog_min_error_statement = <strong>debug5<\/strong><br \/>\nlog_min_duration_statement = 0<br \/>\ndebug_print_parse = on<br \/>\ndebug_print_rewritten = on<br \/>\ndebug_print_plan = on<br \/>\ndebug_pretty_print = on<br \/>\nlog_checkpoints = on<br \/>\nlog_connections = on<br \/>\nlog_disconnections = on<br \/>\nlog_duration = on<br \/>\nlog_hostname = on<br \/>\nlog_lock_waits = on<br \/>\nlog_replication_commands = on<br \/>\nlog_temp_files = 0<br \/>\nlog_timezone = 'Europe\/Moscow'<\/p>\n<p>\nN\u00eb SGBD PostgreSQL me parametrat 1 CPU, 2.8 GHz, 2 GB RAM, 40 GB HDD, realizojm\u00eb tre teste ngarkese, duke p\u00ebrdorur komandat:<\/p>\n<pre><code class=\"plaintext\">$ pgbench -p 3389 -U postgres -i -s 150 benchmark\n$ pgbench -p 3389 -U postgres -c 50 -j 2 -P 60 -T 600 benchmark\n$ pgbench -p 3389 -U postgres -c 150 -j 2 -P 60 -T 600 benchmark<\/code><\/pre>\n<p>\n<strong>Rezultatet e testimit:<\/strong><\/p>\n<p><strong>Pa regjistrim<\/strong><br \/>\n<strong>Me regjistrim<\/strong><\/p>\n<p>Koha totale e mbushjes s\u00eb DB<br \/>\n43.74 sek<br \/>\n53.23 sek<\/p>\n<p>RAM<br \/>\n24%<br \/>\n40%<\/p>\n<p>CPU<br \/>\n72%<br \/>\n91%<\/p>\n<p><strong>Testi 1 (50 lidhje)<\/strong><\/p>\n<p>Numri i transaksioneve p\u00ebr 10 minuta<br \/>\n74169<br \/>\n32445<\/p>\n<p>Transaksione\/sek<br \/>\n123<br \/>\n54<\/p>\n<p>Vonesa mesatare<br \/>\n405 ms<br \/>\n925 ms<\/p>\n<p><strong>Testi 2 (150 lidhje t\u00eb mundshme 100)<\/strong><\/p>\n<p>Numri i transaksioneve p\u00ebr 10 minuta<br \/>\n81727<br \/>\n31429<\/p>\n<p>Transaksione\/sek<br \/>\n136<br \/>\n52<\/p>\n<p>Vonesa mesatare<br \/>\n550 ms<br \/>\n1432 ms<\/p>\n<p><strong>P\u00ebrmasat<\/strong><\/p>\n<p>Madh\u00ebsia e DB<br \/>\n2251 MB<br \/>\n2262 MB<\/p>\n<p>Madh\u00ebsia e logjeve t\u00eb DB<br \/>\n0 MB<br \/>\n4587 MB<\/p>\n<p>\nN\u00eb fund: auditimi i plot\u00eb nuk \u00ebsht\u00eb shum\u00eb i mir\u00eb. T\u00eb dh\u00ebnat e auditimit do t\u00eb jen\u00eb n\u00eb v\u00ebllim si t\u00eb dh\u00ebnat n\u00eb vet\u00eb baz\u00ebn e t\u00eb dh\u00ebnave, madje edhe m\u00eb shum\u00eb. Ky v\u00ebllim i regjistrimit, i cili gjenerohet n\u00eb pun\u00ebn me DBMS, \u00ebsht\u00eb nj\u00eb problem i zakonsh\u00ebm n\u00eb prodhim.<\/p>\n<p>Shikojm\u00eb parametrat e tjer\u00eb:<\/p>\n<ul>\n<li>Shpejt\u00ebsia nuk ndryshon shum\u00eb: pa regjistrim \u2014 43,74 sek, me regjistrim \u2014 53,23 sek.<\/li>\n<li>Performanca n\u00eb RAM dhe CPU do t\u00eb bjer\u00eb, pasi duhen krijuar skedar\u00ebt me auditimin. Kjo \u00ebsht\u00eb gjithashtu e dukshme n\u00eb prodhim.<\/li>\n<\/ul>\n<p>\nMe rritjen e numrit t\u00eb lidhjeve, natyrisht, rezultatet do t\u00eb p\u00ebrkeq\u00ebsohen pak.<\/p>\n<p>N\u00eb korporata me auditim \u00ebsht\u00eb akoma m\u00eb e komplikuar:<\/p>\n<ul>\n<li>t\u00eb dh\u00ebnat jan\u00eb t\u00eb shumta;<\/li>\n<li>auditimi nevojitet jo vet\u00ebm p\u00ebrmes syslog n\u00eb SIEM, por edhe n\u00eb skedar\u00eb: p\u00ebrndryshe n\u00ebse ndodhi di\u00e7ka me syslog, duhet t\u00eb ket\u00eb nj\u00eb skedar af\u00ebr baz\u00ebs, ku do t\u00eb ruhen t\u00eb dh\u00ebnat;<\/li>\n<li>p\u00ebr auditimin nevojitet nj\u00eb raft i ve\u00e7ant\u00eb, p\u00ebr t\u00eb mos r\u00ebn\u00eb n\u00eb I\/O t\u00eb disqeve, pasi ai z\u00eb shum\u00eb hap\u00ebsir\u00eb;<\/li>\n<li>ka raste kur punonj\u00ebsit e siguris\u00eb k\u00ebrkojn\u00eb m\u00ebkat\u00ebsi, ato k\u00ebrkojn\u00eb identifikim t\u00eb akredituar.<\/li>\n<\/ul>\n<p><\/p>\n<h2>Kufizimi i aksesit n\u00eb t\u00eb dh\u00ebna<\/h2>\n<p>\nLe t\u00eb shohim teknologjit\u00eb q\u00eb p\u00ebrdoren p\u00ebr t\u00eb mbrojtur t\u00eb dh\u00ebnat dhe qasjen n\u00eb to n\u00eb sistemet komerciale t\u00eb menaxhimit t\u00eb t\u00eb dh\u00ebnave dhe open source.<\/p>\n<p>\u00c7far\u00eb mund t\u00eb p\u00ebrdoret n\u00eb p\u00ebrgjith\u00ebsi:<\/p>\n<ol>\n<li>Kriptimi dhe obfuskimi i procedurave dhe funksioneve (Wrapping) - pra, vegla dhe utilitetet t\u00eb ve\u00e7anta q\u00eb e b\u00ebjn\u00eb kodin e lexuesh\u00ebm t\u00eb pap\u00ebrshkuesh\u00ebm. Megjithat\u00eb, m\u00eb von\u00eb nuk mund ta ndryshosh ose ta riparosh p\u00ebrs\u00ebri. Ky qasje ndonj\u00ebher\u00eb k\u00ebrkohet minimalisht n\u00eb an\u00ebn e DBMS - logjika e kufizimeve t\u00eb licenc\u00ebs ose logjika e autorizimit \u00ebsht\u00eb e koduar sakt\u00ebsisht n\u00eb nivelin e procedur\u00ebs dhe funksionit.<\/li>\n<li>Kufizimi i dukshm\u00ebris\u00eb s\u00eb t\u00eb dh\u00ebnave sipas rreshtave (RLS) - \u00ebsht\u00eb kur p\u00ebrdorues t\u00eb ndrysh\u00ebm shohin nj\u00eb tabel\u00eb, por p\u00ebrb\u00ebrja e ndryshme e rreshtave n\u00eb t\u00eb, do t\u00eb thot\u00eb se dikujt di\u00e7ka nuk mund t'i tregohet n\u00eb nivelin e rreshtave.<\/li>\n<li>Editimi i t\u00eb dh\u00ebnave t\u00eb shfaqura (Masking) - \u00ebsht\u00eb kur p\u00ebrdoruesit n\u00eb nj\u00eb kolon\u00eb tabelar shohin ose t\u00eb dh\u00ebna, ose vet\u00ebm yje, pra p\u00ebr disa p\u00ebrdorues informacioni do t\u00eb jet\u00eb i mbyllur. Teknologjia p\u00ebrcakton se \u00e7far\u00eb duhet t'i tregosh \u00e7do p\u00ebrdoruesi duke marr\u00eb parasysh nivelin e aksesit.<\/li>\n<li>Ndara e qasjes Security DBA\/Application DBA\/DBA \u2014 n\u00eb fakt, kjo lidhet me kufizimin e qasjes n\u00eb vet\u00eb DBMS-n\u00eb, dmth punonj\u00ebsit e siguris\u00eb mund t\u00eb ndahen nga administrator\u00ebt e database dhe administrator\u00ebt e aplikacioneve. N\u00eb teknologjit\u00eb open source ka pak t\u00eb tilla, nd\u00ebrsa n\u00eb DBMS-t\u00eb komerciale ka mjaftuesh\u00ebm. Ato jan\u00eb t\u00eb nevojshme kur ka shum\u00eb p\u00ebrdorues me qasje n\u00eb vet\u00eb serverat.<\/li>\n<li>Kufizimi i qasjes n\u00eb skedar\u00eb n\u00eb nivele t\u00eb sistemit t\u00eb skedar\u00ebve. Mund t\u00eb jepen t\u00eb drejta, privilegje qasje n\u00eb katalog\u00eb, n\u00eb m\u00ebnyr\u00eb q\u00eb \u00e7do administrator t\u00eb ket\u00eb qasje vet\u00ebm n\u00eb t\u00eb dh\u00ebnat e nevojshme.<\/li>\n<li>Qasja e mandatuar dhe pastrimi i memories \u2014 k\u00ebto teknologji p\u00ebrdoren rrall\u00eb.<\/li>\n<li>Kriptimi end-to-end direkt n\u00eb DBMS \u2014 kjo \u00ebsht\u00eb kriptimi n\u00eb an\u00ebn e klientit me menaxhim t\u00eb \u00e7elsave n\u00eb an\u00ebn e serverit.<\/li>\n<li>Kriptimi i t\u00eb dh\u00ebnave. P\u00ebr shembull, kriptimi kolonash \u2014 kur p\u00ebrdorni mekanizmin q\u00eb kripton nj\u00eb kolon\u00eb t\u00eb ve\u00e7ant\u00eb t\u00eb baz\u00ebs.<\/li>\n<\/ol>\n<p><\/p>\n<h3>Si ndikon kjo n\u00eb performanc\u00ebn e DBMS?<\/h3>\n<p>\nLe t\u00eb shohim nj\u00eb shembull t\u00eb enkriptimit n\u00eb kolona n\u00eb PostgreSQL. Ka nj\u00eb modul pgcrypto, q\u00eb lejon ruajtjen e fusha t\u00eb zgjedhura n\u00eb m\u00ebnyr\u00eb t\u00eb enkriptuar. Kjo \u00ebsht\u00eb e dobishme kur vet\u00ebm disa t\u00eb dh\u00ebna kan\u00eb vler\u00eb. P\u00ebr t\u00eb lexuar fushat e enkriptuara, klienti kalon \u00e7el\u00ebsin e dekriptimit, serveri dekriptojn\u00eb t\u00eb dh\u00ebnat dhe i kthen ato klientit. Pa \u00e7el\u00ebsin, askush nuk mund t\u00eb b\u00ebj\u00eb asgj\u00eb me t\u00eb dh\u00ebnat tuaja.<\/p>\n<p><strong>Le t\u00eb b\u00ebjm\u00eb nj\u00eb test me pgcrypto<\/strong>. Do t\u00eb krijojm\u00eb nj\u00eb tabel\u00eb me t\u00eb dh\u00ebna t\u00eb enkriptuara dhe me t\u00eb dh\u00ebna t\u00eb zakonshme. M\u00eb posht\u00eb jan\u00eb komandat p\u00ebr krijimin e tabelave, n\u00eb rreshtin e par\u00eb \u00ebsht\u00eb nj\u00eb komand\u00eb e dobishme \u2014 krijimi i vet\u00eb zgjerimit me regjistrimin e DBMS:<\/p>\n<pre><code class=\"plaintext\">CREATE EXTENSION pgcrypto;\nCREATE TABLE t1 (id integer, text1 text, text2 text);\nCREATE TABLE t2 (id integer, text1 bytea, text2 bytea);\nINSERT INTO t1 (id, text1, text2)\nVALUES (generate_series(1,10000000), generate_series(1,10000000)::text, generate_series(1,10000000)::text);\nINSERT INTO t2 (id, text1, text2) VALUES (\ngenerate_series(1,10000000),\nencrypt(cast(generate_series(1,10000000) AS text)::bytea, 'key'::bytea, 'bf'),\nencrypt(cast(generate_series(1,10000000) AS text)::bytea, 'key'::bytea, 'bf'));<\/code><\/pre>\n<p>\nM\u00eb pas, do t\u00eb p\u00ebrpiqemi t\u00eb marrim t\u00eb dh\u00ebna nga secila tabel\u00eb dhe t\u00eb shohim koh\u00ebt e ekzekutimit.<\/p>\n<p><strong>K\u00ebtu \u00ebsht\u00eb k\u00ebrkesa nga tabela pa funksionin e enkriptimit<\/strong>:<\/p>\n<pre><code class=\"plaintext\">psql -c \"timing\" -c \"select * from t1 limit 1000;\" \"host=192.168.220.129 dbname=taskdb\nuser=postgres sslmode=disable\" &gt; 1.txt<\/code><\/pre>\n<p>\nKronometri \u00ebsht\u00eb aktivizuar.<\/p>\n<p>\u00a0\u00a0id\u00a0 | teksti1 | teksti2<br \/>\n------+------+------<br \/>\n 1 | 1 \u00a0 \u00a0 | 1<br \/>\n 2 | 2 \u00a0 \u00a0 | 2<br \/>\n 3 | 3 \u00a0 \u00a0 | 3<br \/>\n\u2026<br \/>\n997 | 997 \u00a0 | 997<br \/>\n998 | 998 \u00a0 | 998<br \/>\n999 | 999 \u00a0 | 999<br \/>\n1000 | 1000\u00a0 | 1000<br \/>\n(1000 rreshta)<\/p>\n<p>Koha: 1.386 ms<\/p>\n<p><strong>Most\u00ebr nga tabela me funksionin e enkriptimit:<\/strong><\/p>\n<pre><code class=\"plaintext\">psql -c \"timing\" -c \"select id, decrypt(text1, 'key'::bytea, 'bf'),\ndecrypt(text2, 'key'::bytea, 'bf') from t2 limit 1000;\"\n\"host=192.168.220.129 dbname=taskdb user=postgres sslmode=disable\" &gt; 2.txt<\/code><\/pre>\n<p>\nKronometri \u00ebsht\u00eb aktivizuar.<\/p>\n<p>\u00a0\u00a0id\u00a0 |\u00a0 dekryptim \u00a0 |\u00a0 dekryptim<br \/>\n------+--------+------<br \/>\n 1 | x31 \u00a0 | x31<br \/>\n 2 | x32 \u00a0 | x32<br \/>\n 3 | x33 | x33<br \/>\n\u2026<br \/>\n999 | x393939 \u00a0 | x393939<br \/>\n1000 | x31303030 | x31303030<br \/>\n(1000 rreshta)<\/p>\n<p>Koha: 50.203 ms<\/p>\n<p><strong>Rezultatet e testimit<\/strong>:<\/p>\n<p>\u00a0<br \/>\n<strong>Pa enkriptim<\/strong><br \/>\n<strong>Pgcrypto (dekryptim)<\/strong><\/p>\n<p>Most\u00ebr 1000 rreshta<br \/>\n1.386 ms<br \/>\n50.203 ms<\/p>\n<p>CPU<br \/>\n15%<br \/>\n35%<\/p>\n<p>RAM<br \/>\n\u00a0<br \/>\n+5%<\/p>\n<p>\nEnkriptimi ka nj\u00eb ndikim t\u00eb fort\u00eb n\u00eb performanc\u00eb. \u00cbsht\u00eb e dukshme se koha \u00ebsht\u00eb rritur, pasi operacionet e dekryptimit t\u00eb t\u00eb dh\u00ebnave t\u00eb enkriptuara (dhe dekryptimi zakonisht \u00ebsht\u00eb i mb\u00ebshtjell\u00eb n\u00eb logjik\u00ebn tuaj) k\u00ebrkojn\u00eb burime t\u00eb konsiderueshme. K\u00ebshtu, ideja p\u00ebr t\u00eb enkriptuar t\u00eb gjitha kolonat q\u00eb p\u00ebrmbajn\u00eb disa t\u00eb dh\u00ebna \u00ebsht\u00eb e rrezikshme p\u00ebr uljen e performanc\u00ebs.<\/p>\n<p>Megjithat\u00eb, enkriptimi nuk \u00ebsht\u00eb nj\u00eb plumb argjendi q\u00eb zgjidh t\u00eb gjitha problemet. T\u00eb dh\u00ebnat e dekryptuara dhe \u00e7el\u00ebsi i dekryptimit gjat\u00eb procesit t\u00eb dekryptimit dhe transmetimit t\u00eb t\u00eb dh\u00ebnave ndodhen n\u00eb server. Prandaj, \u00e7el\u00ebsat mund t\u00eb kapen nga ata q\u00eb kan\u00eb qasje t\u00eb plot\u00eb n\u00eb serverin e baz\u00ebs s\u00eb t\u00eb dh\u00ebnave, si\u00e7 jan\u00eb administrator\u00ebt e sistemit.<\/p>\n<p>Kur p\u00ebr t\u00eb gjith\u00eb p\u00ebrdoruesit \u00ebsht\u00eb nj\u00eb \u00e7el\u00ebs p\u00ebr t\u00ebr\u00eb kolon\u00ebn (edhe n\u00ebse jo p\u00ebr t\u00eb gjith\u00eb, por p\u00ebr klient\u00ebt e nj\u00eb grupi t\u00eb kufizuar), \u2014 kjo nuk \u00ebsht\u00eb gjithmon\u00eb e mir\u00eb dhe e sakt\u00eb. Pik\u00ebrisht p\u00ebr k\u00ebt\u00eb arsye filluam t\u00eb b\u00ebjm\u00eb enkriptim end-to-end, n\u00eb DBMS po shqyrtojm\u00eb opsione p\u00ebr enkriptimin e t\u00eb dh\u00ebnave nga klienti dhe serveri, u shfaq\u00ebn ato t\u00eb famshme depozita t\u00eb key-vault - produkte t\u00eb ve\u00e7anta q\u00eb ofrojn\u00eb menaxhimin e \u00e7el\u00ebsave n\u00eb an\u00ebn e DBMS.<\/p>\n<p><img decoding=\"async\" alt=\"Siguria dhe DBMS: \u00e7far\u00eb duhet t\u00eb mbani mend kur zgjidhni mjetet mbrojt\u00ebse\" src=\"\/wp-content\/uploads\/2020\/05\/cbaa7b9579a65963518ba3cec6114842.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/docs.mongodb.com\/manual\/core\/security-client-side-encryption\/\"><i>Shembulli i till\u00eb i enkriptimit n\u00eb MongoDB<\/i><\/a><\/noindex><\/p>\n<h2>Mjetet e siguris\u00eb n\u00eb DBMS komerciale dhe open source<\/h2>\n<p><\/p>\n<p><strong>Funksionet<\/strong><br \/>\n<strong>Tipo<\/strong><br \/>\n<strong>Politika e Fjal\u00ebkalimeve<\/strong><br \/>\n<strong>Auditimi<\/strong><br \/>\n<strong>Mbrojtja e kodit burimor t\u00eb procedurave dhe funksioneve<\/strong><br \/>\n<strong>RLS<\/strong><br \/>\n<strong>Enkriptimi<\/strong><\/p>\n<p><strong>Oracle<\/strong><br \/>\nKomerciale<br \/>\n+<br \/>\n+<br \/>\n+<br \/>\n+<br \/>\n+<\/p>\n<p><strong>MsSql<\/strong><br \/>\nKomerciale<br \/>\n+<br \/>\n+<br \/>\n+<br \/>\n+<br \/>\n+<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.gaz-is.ru\/produkty\/inform-sistemy\/subd-jatoba.html\"><strong>Jatoba<\/strong><\/a><\/noindex><br \/>\nKomerciale<br \/>\n+<br \/>\n+<br \/>\n+<br \/>\n+<br \/>\nzgjerimet<\/p>\n<p><strong>PostgreSQL<\/strong><br \/>\nFal\u00eb<br \/>\nzgjerimet<br \/>\nzgjerimet<br \/>\n&#8212;<br \/>\n+<br \/>\nzgjerimet<\/p>\n<p><strong>MongoDb<\/strong><br \/>\nFal\u00eb<br \/>\n&#8212;<br \/>\n+<br \/>\n&#8212;<br \/>\n&#8212;<br \/>\nI disponuesh\u00ebm vet\u00ebm n\u00eb MongoDB Enterprise<\/p>\n<p>\nTabela nuk \u00ebsht\u00eb aspak e plot\u00eb, por situata \u00ebsht\u00eb k\u00ebshtu: n\u00eb produktet komerciale, detyrat e siguris\u00eb jan\u00eb zgjidhur prej koh\u00ebsh, n\u00eb open source, zakonisht p\u00ebrdoren ndonj\u00eb shtes\u00eb p\u00ebr sigurin\u00eb, shum\u00eb funksione mungojn\u00eb, ndonj\u00ebher\u00eb duhet t\u00eb shtosh di\u00e7ka vet\u00eb. P\u00ebr shembull, politikat e fjal\u00ebkalimeve \u2014 n\u00eb PostgreSQL ka shum\u00eb zgjerime t\u00eb ndryshme (<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/postgres\/postgres\/tree\/master\/contrib\/passwordcheck\">1<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ykrysko\/passwordcheck\">2<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/michaelpq\/pg_plugins\/tree\/master\/passwordcheck_extra\">3<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/devrimgunduz\/passwordcheck_cracklib\">4<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/asio\/password\">5<\/a><\/noindex>), q\u00eb realizojn\u00eb politikat e fjal\u00ebkalimeve, por nevojat e sektorit korporativ vendas, sipas mendimit tim, asnj\u00eb nuk i mbulon.<\/p>\n<p><strong>\u00c7far\u00eb t\u00eb b\u00ebjm\u00eb n\u00ebse nuk ka asgj\u00eb q\u00eb na nevojitet<\/strong>? \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0445\u043e\u0447\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u0443\u044e \u0421\u0423\u0411\u0414, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a.<\/p>\n<p>At\u00ebher\u00eb mund t\u00eb p\u00ebrdorni zgjidhje t\u00eb jashtme q\u00eb punojn\u00eb me sisteme t\u00eb ndryshme DB, si \"Kripto BD\" ose \"Garda BD\". N\u00ebse flasim p\u00ebr zgjidhje nga sektori vendas, atje dihet m\u00eb shum\u00eb p\u00ebr standartet GOST se sa n\u00eb open source.<\/p>\n<p>Varianti i dyt\u00eb \u00ebsht\u00eb t\u00eb shkruani vet\u00eb at\u00eb q\u00eb ju nevojitet, t\u00eb realizoni n\u00eb nivelin e procedurave aksesin n\u00eb t\u00eb dh\u00ebna dhe enkriptimin n\u00eb aplikacion. E v\u00ebrteta \u00ebsht\u00eb se me GOST-it do t\u00eb jet\u00eb m\u00eb e v\u00ebshtir\u00eb. Por n\u00eb p\u00ebrgjith\u00ebsi, ju mund t\u00eb fshihni t\u00eb dh\u00ebnat si\u00e7 duhet, t'i ruani n\u00eb DB dhe pastaj t'i nxirrni dhe t'i dekriptoni si\u00e7 duhet, direkt n\u00eb nivelin e aplikacionit. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, mendoni se si do t'i mbroni k\u00ebto algoritme n\u00eb aplikacion. Sipas mendimit ton\u00eb, kjo duhet b\u00ebr\u00eb n\u00eb nivelin e DB, sepse do t\u00eb funksionoj\u00eb m\u00eb shpejt.<\/p>\n<p>Ky raport u shp\u00ebrnda p\u00ebr her\u00eb t\u00eb par\u00eb n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/corp.mail.ru\/ru\/press\/events\/databases-1\/\">@Databases Meetup<\/a><\/noindex> nga Mail.ru Cloud Solutions. Shikoni<noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/redirect?q=https%3A%2F%2Fbit.ly%2F2U57FAd&amp;redir_token=XNWSBN1AKQA2sjhdReDAv6VnkOV8MTU4OTAxNjMwMEAxNTg4OTI5OTAw&amp;v=wigSv2_zWBU&amp;event=video_description\"> video <\/a><\/noindex>prezantime t\u00eb tjera dhe abonohuni p\u00ebr njoftimet mbi ngjarjet n\u00eb Telegram <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/k8s_mail\">Rreth Kubernetes n\u00eb Mail.ru Group<\/a><\/noindex>.<\/p>\n<p><strong>\u00c7far\u00eb tjet\u00ebr t\u00eb lexoni n\u00eb k\u00ebt\u00eb tem\u00eb<\/strong>:<\/p>\n<ol>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/mailru\/blog\/472694\/\">M\u00eb shum\u00eb se Ceph: ruajtja e bllokut t\u00eb MCS<\/a><\/noindex>.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/mcs.mail.ru\/blog\/kakuyu-bazu-dannyh-vybrat-dlya-proekta-chtoby-ne-oshibitsya\">Si t\u00eb zgjidhni nj\u00eb baz\u00eb t\u00eb dh\u00ebnash p\u00ebr projektin, p\u00ebr t\u00eb mos zgjedhur p\u00ebrs\u00ebri<\/a><\/noindex>.<\/li>\n<\/ol>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/mailru\/blog\/500708\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041c\u0435\u043d\u044f \u0437\u043e\u0432\u0443\u0442 \u0414\u0435\u043d\u0438\u0441 \u0420\u043e\u0436\u043a\u043e\u0432, \u044f \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u00ab\u0413\u0430\u0437\u0438\u043d\u0444\u043e\u0440\u043c\u0441\u0435\u0440\u0432\u0438\u0441\u00bb, \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 Jatoba. \u0417\u0430\u043a\u043e\u043d\u043e\u0434\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043d\u043e\u0440\u043c\u044b \u043d\u0430\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445. \u041d\u0438\u043a\u0442\u043e \u043d\u0435 \u0445\u043e\u0447\u0435\u0442, \u0447\u0442\u043e\u0431\u044b \u0442\u0440\u0435\u0442\u044c\u0438 \u043b\u0438\u0446\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0434\u043b\u044f \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432\u0430\u0436\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b: \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430\u043c\u0438 \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":81885,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-81884","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041c\u0435\u043d\u044f \u0437\u043e\u0432\u0443\u0442 \u0414\u0435\u043d\u0438\u0441 \u0420\u043e\u0436\u043a\u043e\u0432, \u044f \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u00ab\u0413\u0430\u0437\u0438\u043d\u0444\u043e\u0440\u043c\u0441\u0435\u0440\u0432\u0438\u0441\u00bb, \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 Jatoba. \u0417\u0430\u043a\u043e\u043d\u043e\u0434\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043d\u043e\u0440\u043c\u044b \u043d\u0430\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445. \u041d\u0438\u043a\u0442\u043e \u043d\u0435 \u0445\u043e\u0447\u0435\u0442, \u0447\u0442\u043e\u0431\u044b \u0442\u0440\u0435\u0442\u044c\u0438 \u043b\u0438\u0446\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0434\u043b\u044f \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432\u0430\u0436\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b: \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430\u043c\u0438 \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/bezopasnost-i-subd-o-chyom-nado-pomnit-podbiraya-sredstva-zashhity\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438 \u0421\u0423\u0411\u0414: \u043e \u0447\u0451\u043c \u043d\u0430\u0434\u043e \u043f\u043e\u043c\u043d\u0438\u0442\u044c, \u043f\u043e\u0434\u0431\u0438\u0440\u0430\u044f \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041c\u0435\u043d\u044f \u0437\u043e\u0432\u0443\u0442 \u0414\u0435\u043d\u0438\u0441 \u0420\u043e\u0436\u043a\u043e\u0432, \u044f \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u00ab\u0413\u0430\u0437\u0438\u043d\u0444\u043e\u0440\u043c\u0441\u0435\u0440\u0432\u0438\u0441\u00bb, \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 Jatoba. \u0417\u0430\u043a\u043e\u043d\u043e\u0434\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043d\u043e\u0440\u043c\u044b \u043d\u0430\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445. \u041d\u0438\u043a\u0442\u043e \u043d\u0435 \u0445\u043e\u0447\u0435\u0442, \u0447\u0442\u043e\u0431\u044b \u0442\u0440\u0435\u0442\u044c\u0438 \u043b\u0438\u0446\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0434\u043b\u044f \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432\u0430\u0436\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b: \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430\u043c\u0438 \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/bezopasnost-i-subd-o-chyom-nado-pomnit-podbiraya-sredstva-zashhity\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-05-17T11:42:18+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-05-17T11:42:18+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Siguria dhe DBMS: \u00e7far\u00eb duhet t\u00eb mbani mend, duke zgjedhur mjetet e mbrojtjes | ProHoster","description":"Un\u00eb quhem Denis Ro\u017ekov, jam kryeshefi i zhvillimit t\u00eb softuerit n\u00eb kompanin\u00eb \u00abGazinformservice\u00bb, n\u00eb ekipin e produktit Jatoba. Legjislacioni dhe normat korporative imponojn\u00eb k\u00ebrkesa t\u00eb caktuara p\u00ebr sigurin\u00eb e ruajtjes s\u00eb t\u00eb dh\u00ebnave. Askush nuk d\u00ebshiron q\u00eb pal\u00ebt e treta t\u00eb ken\u00eb qasje n\u00eb informacionin konfidencial, prandaj p\u00ebr \u00e7do projekt jan\u00eb t\u00eb r\u00ebnd\u00ebsishme k\u00ebto \u00e7\u00ebshtje: identifikimi dhe autentifikimi, menaxhimi i aksesit n\u00eb t\u00eb dh\u00ebna, sigurimi i integritetit t\u00eb informacionit n\u00eb","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/bezopasnost-i-subd-o-chyom-nado-pomnit-podbiraya-sredstva-zashhity","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438 \u0421\u0423\u0411\u0414: \u043e \u0447\u0451\u043c \u043d\u0430\u0434\u043e \u043f\u043e\u043c\u043d\u0438\u0442\u044c, \u043f\u043e\u0434\u0431\u0438\u0440\u0430\u044f \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b | ProHoster","og:description":"\u041c\u0435\u043d\u044f \u0437\u043e\u0432\u0443\u0442 \u0414\u0435\u043d\u0438\u0441 \u0420\u043e\u0436\u043a\u043e\u0432, \u044f \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u00ab\u0413\u0430\u0437\u0438\u043d\u0444\u043e\u0440\u043c\u0441\u0435\u0440\u0432\u0438\u0441\u00bb, \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 Jatoba. \u0417\u0430\u043a\u043e\u043d\u043e\u0434\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043d\u043e\u0440\u043c\u044b \u043d\u0430\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445. \u041d\u0438\u043a\u0442\u043e \u043d\u0435 \u0445\u043e\u0447\u0435\u0442, \u0447\u0442\u043e\u0431\u044b \u0442\u0440\u0435\u0442\u044c\u0438 \u043b\u0438\u0446\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0434\u043b\u044f \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432\u0430\u0436\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b: \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430\u043c\u0438 \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/bezopasnost-i-subd-o-chyom-nado-pomnit-podbiraya-sredstva-zashhity","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-17T11:42:18+00:00","article:modified_time":"2020-05-17T11:42:18+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"81884","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:48:24","updated":"2022-10-05 02:01:28"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/81884","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=81884"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/81884\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/81885"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=81884"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=81884"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=81884"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}