{"id":86707,"date":"2020-06-28T19:42:19","date_gmt":"2020-06-28T17:42:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/mobilnye-antivirusy-ne-rabotayut"},"modified":"2020-06-28T19:42:19","modified_gmt":"2020-06-28T17:42:19","slug":"mobilnye-antivirusy-ne-rabotayut","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/mobilnye-antivirusy-ne-rabotayut","title":{"rendered":"Antiviruset p\u00ebr pajisje mobile nuk funksionojn\u00eb","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Antiviruset p\u00ebr pajisje mobile nuk funksionojn\u00eb\" src=\"\/wp-content\/uploads\/2020\/06\/7a30335e22255a756f51f56ff21c9923.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<b>TL;DR<\/b> N\u00ebse pajisjet mobile t\u00eb kompanis\u00eb suaj kan\u00eb nevoj\u00eb p\u00ebr antivirus, do t\u00eb thot\u00eb se di\u00e7ka po b\u00ebhet gabim dhe antivirusi nuk do t\u2019ju ndihmoj\u00eb.<\/p>\n<p>Ky postim \u00ebsht\u00eb rezultat i debateve t\u00eb forta mbi pyetjen n\u00ebse nj\u00eb telefon mobil korporativ ka nevoj\u00eb p\u00ebr antivirus, n\u00eb cilat raste ai funksionon dhe kur \u00ebsht\u00eb i padobish\u00ebm. Artikulli analizon modelet e k\u00ebrc\u00ebnimeve nga t\u00eb cilat, n\u00eb teori, antivirusi duhet t\u00eb mbroj\u00eb.<\/p>\n<p>Shit\u00ebsit e antivirus\u00ebve shpesh arrijn\u00eb t\u2019i bindin klient\u00ebt korporativ\u00eb se antivirusi do ta rris\u00eb ndjesh\u00ebm sigurin\u00eb e tyre, por n\u00eb shumic\u00ebn e rasteve kjo \u00ebsht\u00eb nj\u00eb mbrojtje iluzore, q\u00eb vet\u00ebm ul vigjilenc\u00ebn si t\u00eb p\u00ebrdoruesve, ashtu edhe t\u00eb administrator\u00ebve.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Infrastruktura e duhur korporative<\/h2>\n<p>\nKur nj\u00eb kompani ka dhjet\u00ebra apo edhe mij\u00ebra punonj\u00ebs, konfigurimi manual i \u00e7do pajisjeje t\u00eb p\u00ebrdoruesit b\u00ebhet i pamundur. Cil\u00ebsimet mund t\u00eb ndryshojn\u00eb \u00e7do dit\u00eb, vijn\u00eb punonj\u00ebs t\u00eb rinj, nd\u00ebrsa telefonat mobil\u00eb dhe laptop\u00ebt e tyre prishen ose humbasin. Si rezultat, e gjith\u00eb puna e administrator\u00ebve do t\u00eb p\u00ebrb\u00ebhej nga vendosja e p\u00ebrditshme e konfigurimeve t\u00eb reja n\u00eb pajisjet e punonj\u00ebsve. <\/p>\n<p>N\u00eb kompjuter\u00ebt desktop, kjo \u00e7\u00ebshtje ka filluar t\u00eb zgjidhet prej koh\u00ebsh. N\u00eb bot\u00ebn e Windows, zakonisht, nj\u00eb menaxhim i till\u00eb b\u00ebhet me ndihm\u00ebn e Active Directory, sistemeve t\u00eb centralizuara t\u00eb autentifikimit (Single Sign In) etj. Por tani, p\u00ebrve\u00e7 kompjuter\u00ebve, t\u00eb gjith\u00eb punonj\u00ebsit kan\u00eb edhe smartfon\u00eb, ku zhvillohet nj\u00eb pjes\u00eb e konsiderueshme e proceseve t\u00eb pun\u00ebs dhe ruhen t\u00eb dh\u00ebna t\u00eb r\u00ebnd\u00ebsishme. Microsoft u p\u00ebrpoq t\u2019i bashkonte telefonat e vet me Windows Phone n\u00eb nj\u00eb ekosistem t\u00eb vet\u00ebm me Windows, por kjo ide vdiq bashk\u00eb me fundin zyrtar t\u00eb Windows Phone. Prandaj, n\u00eb mjedisin korporativ, n\u00eb \u00e7do rast duhet zgjedhur mes Android dhe iOS.<\/p>\n<p>Sot, n\u00eb mjedisin korporativ, p\u00ebr menaxhimin e pajisjeve t\u00eb punonj\u00ebsve, \u00ebsht\u00eb n\u00eb trend koncepti UEM (Unified endpoint management). Kjo \u00ebsht\u00eb nj\u00eb sistem i centralizuar p\u00ebr menaxhimin e pajisjeve mobile dhe kompjuter\u00ebve desktop.<br \/>\n<img decoding=\"async\" alt=\"Antiviruset p\u00ebr pajisje mobile nuk funksionojn\u00eb\" src=\"\/wp-content\/uploads\/2020\/06\/ab7222f33decfdb366538342defa9ceb.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nMenaxhimi i centralizuar i pajisjeve t\u00eb p\u00ebrdoruesve (Unified endpoint management)<\/p>\n<p>Administratori i sistemit UEM mund t\u00eb vendos\u00eb politika t\u00eb ndryshme p\u00ebr pajisjet e p\u00ebrdoruesve. P\u00ebr shembull, t\u2019i lejoj\u00eb p\u00ebrdoruesit kontroll m\u00eb t\u00eb madh ose m\u00eb t\u00eb kufizuar mbi pajisjen, instalimin e aplikacioneve nga burime t\u00eb pal\u00ebve t\u00eb treta etj. <\/p>\n<p><b>\u00c7far\u00eb mund t\u00eb b\u00ebj\u00eb UEM: <\/b><\/p>\n<p><b>T\u00eb menaxhoj\u00eb t\u00eb gjitha cil\u00ebsimet<\/b> \u2014 administratori mund t'ia ndaloj\u00eb plot\u00ebsisht p\u00ebrdoruesit ndryshimin e cil\u00ebsimeve n\u00eb pajisje dhe t\u2019i ndryshoj\u00eb ato n\u00eb distanc\u00eb. <\/p>\n<p><b>T\u00eb kontrollosh softuerin n\u00eb pajisje<\/b> \u2014 t\u00eb lejoj\u00eb instalimin e programeve n\u00eb pajisje dhe t\u2019i instaloj\u00eb automatikisht pa dijenin\u00eb e p\u00ebrdoruesit. Gjithashtu, administratori mund t\u00eb ndaloj\u00eb ose t\u00eb lejoj\u00eb instalimin e programeve nga dyqani i aplikacioneve ose nga burime t\u00eb pabesueshme (nga skedar\u00ebt APK n\u00eb rastin e Android).<\/p>\n<p><b>Bllokim n\u00eb distanc\u00eb<\/b> \u2014 n\u00ebse telefoni humbet, administratori mund ta bllokoj\u00eb pajisjen ose t\u00eb fshij\u00eb t\u00eb dh\u00ebnat. Disa sisteme lejojn\u00eb gjithashtu t\u00eb caktohet fshirja automatike e t\u00eb dh\u00ebnave n\u00ebse telefoni nuk \u00ebsht\u00eb lidhur me serverin p\u00ebr m\u00eb shum\u00eb se N or\u00eb, p\u00ebr t\u00eb p\u00ebrjashtuar mund\u00ebsin\u00eb e tentativave p\u00ebr thyerje offline, kur sulmuesit kan\u00eb arritur t\u00eb heqin kart\u00ebn SIM p\u00ebrpara se nga serveri t\u00eb d\u00ebrgohej komanda p\u00ebr fshirjen e t\u00eb dh\u00ebnave. <\/p>\n<p><b>T\u00eb mbledh\u00ebsh statistika<\/b> \u2014 t\u00eb gjurmoj\u00eb aktivitetin e p\u00ebrdoruesit, koh\u00ebn e p\u00ebrdorimit t\u00eb aplikacioneve, vendndodhjen, nivelin e bateris\u00eb etj.<\/p>\n<h2>\u00c7far\u00eb llojesh UEM ekzistojn\u00eb<\/h2>\n<p>\nEkzistojn\u00eb dy qasje thelb\u00ebsisht t\u00eb ndryshme p\u00ebr menaxhimin e centralizuar t\u00eb smartfon\u00ebve t\u00eb punonj\u00ebsve: n\u00eb nj\u00ebrin rast, kompania blen p\u00ebr punonj\u00ebsit pajisje nga i nj\u00ebjti prodhues dhe zakonisht zgjedh nj\u00eb sistem menaxhimi nga i nj\u00ebjti furnizues. N\u00eb rastin tjet\u00ebr, punonj\u00ebsit p\u00ebrdorin pajisjet e tyre personale p\u00ebr pun\u00eb, dhe k\u00ebtu nis nj\u00eb mozaik sistemesh operative, versioneshe dhe platformash.<\/p>\n<p><b>BYOD<\/b> (Bring your own device, Sill pajisjen t\u00ebnde) \u2014 koncept n\u00eb t\u00eb cilin punonj\u00ebsit p\u00ebrdorin p\u00ebr pun\u00eb pajisjet dhe llogarit\u00eb e tyre personale. Disa sisteme t\u00eb menaxhimit t\u00eb centralizuar lejojn\u00eb shtimin e nj\u00eb llogarie t\u00eb dyt\u00eb pune dhe ndarjen e plot\u00eb t\u00eb t\u00eb dh\u00ebnave personale nga ato t\u00eb pun\u00ebs. <\/p>\n<p><img decoding=\"async\" alt=\"Antiviruset p\u00ebr pajisje mobile nuk funksionojn\u00eb\" src=\"\/wp-content\/uploads\/2020\/06\/e0ce66b2e436991174758bdd15b47d1b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/business.apple.com\/\">Apple Business Manager <\/a><\/noindex> \u2014 sistemi i integruar i menaxhimit t\u00eb centralizuar nga Apple. Mund t\u00eb menaxhoj\u00eb vet\u00ebm pajisje Apple, kompjuter\u00eb me macOS dhe telefona me iOS. Mb\u00ebshtet BYOD; krijohet nj\u00eb mjedis i dyt\u00eb i izoluar me nj\u00eb llogari tjet\u00ebr iCloud.<\/p>\n<p><img decoding=\"async\" alt=\"Antiviruset p\u00ebr pajisje mobile nuk funksionojn\u00eb\" src=\"\/wp-content\/uploads\/2020\/06\/5d0c0302f6e745078aa6844ed244348e.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/cloud.google.com\/identity\/em\">Google Cloud Endpoint Management<\/a><\/noindex> \u2014 lejon menaxhimin e telefonave me Android dhe Apple iOS, si edhe t\u00eb desktop\u00ebve me Windows 10. Deklarohet mb\u00ebshtetje p\u00ebr BYOD.<\/p>\n<p><img decoding=\"async\" alt=\"Antiviruset p\u00ebr pajisje mobile nuk funksionojn\u00eb\" src=\"\/wp-content\/uploads\/2020\/06\/7f253496eb84c74f7dce899d0ea1331d.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/partner.samsungknox.com\/uem\">Samsung Knox UEM<\/a><\/noindex> \u2014 mb\u00ebshtet vet\u00ebm pajisjet mobile Samsung. Megjithat\u00eb, menj\u00ebher\u00eb mund t\u00eb p\u00ebrdoret vet\u00ebm <noindex><a rel=\"nofollow\" href=\"https:\/\/www.samsung.com\/us\/business\/solutions\/services\/mobility-software\/knox-manage\/\">Samsung Mobile Management<\/a><\/noindex>.<\/p>\n<p>N\u00eb fakt, ka shum\u00eb m\u00eb tep\u00ebr ofrues UEM, por nuk do t\u2019i shqyrtojm\u00eb t\u00eb gjith\u00eb n\u00eb k\u00ebt\u00eb artikull. Gj\u00ebja kryesore q\u00eb duhet mbajtur parasysh \u00ebsht\u00eb se sisteme t\u00eb tilla tashm\u00eb ekzistojn\u00eb dhe i lejojn\u00eb administratorit t\u00eb konfiguroj\u00eb pajisjet e p\u00ebrdoruesve n\u00eb p\u00ebrputhje me modelin ekzistues t\u00eb k\u00ebrc\u00ebnimeve. <\/p>\n<h2>Modeli i k\u00ebrc\u00ebnimeve<\/h2>\n<p>\nPara se t\u00eb zgjidhni mjetet e mbrojtjes, duhet t\u00eb kuptoni nga \u00e7far\u00eb po mbrohemi dhe \u00e7far\u00eb \u00ebsht\u00eb skenari m\u00eb i keq q\u00eb mund t\u00eb ndodh\u00eb n\u00eb rastin ton\u00eb konkret. Me fjal\u00eb t\u00eb thjeshta: trupi yn\u00eb \u00ebsht\u00eb i cenuesh\u00ebm si ndaj plumbit, ashtu edhe ndaj nj\u00eb piruni me gozhd\u00eb, por ne nuk veshim jelek antiplumb sa her\u00eb dalim nga sht\u00ebpia. Prandaj, n\u00eb modelin ton\u00eb t\u00eb k\u00ebrc\u00ebnimeve nuk p\u00ebrfshihet rreziku p\u00ebr t\u2019u q\u00eblluar rrug\u00ebs p\u00ebr n\u00eb pun\u00eb, edhe pse statistikisht kjo nuk \u00ebsht\u00eb aq e pamundur. Nga ana tjet\u00ebr, n\u00eb kushte t\u00eb caktuara, mbajtja e jelekut antiplumb \u00ebsht\u00eb plot\u00ebsisht e justifikuar. <\/p>\n<p>N\u00eb kompani t\u00eb ndryshme, modelet e k\u00ebrc\u00ebnimeve ndryshojn\u00eb. Le t\u00eb marrim, p\u00ebr shembull, smartfonin e nj\u00eb korrieri q\u00eb po shkon t\u00eb dor\u00ebzoj\u00eb nj\u00eb pako te klienti. N\u00eb smartfonin e tij ka vet\u00ebm adres\u00ebn e dor\u00ebzimit aktual dhe itinerarin n\u00eb hart\u00eb. Gj\u00ebja m\u00eb e keqe q\u00eb mund t\u2019u ndodh\u00eb t\u00eb dh\u00ebnave t\u00eb tij \u00ebsht\u00eb rrjedhja e adresave t\u00eb dor\u00ebzimit t\u00eb pakove. <\/p>\n<p>Tani t\u00eb marrim smartfonin e nj\u00eb kontabilisti. Ai ka qasje n\u00eb rrjetin e korporat\u00ebs p\u00ebrmes VPN, ka t\u00eb instaluar aplikacionin e bank\u00ebs korporative dhe ruan dokumente me informacion me vler\u00eb. \u00cbsht\u00eb e qart\u00eb se vlera e t\u00eb dh\u00ebnave n\u00eb k\u00ebto dy pajisje ndryshon ndjesh\u00ebm dhe ato duhen mbrojtur n\u00eb m\u00ebnyra t\u00eb ndryshme. <\/p>\n<h2>A do t\u00eb na shp\u00ebtoj\u00eb antivirusi?<\/h2>\n<p>\nFatkeq\u00ebsisht, pas sloganeve t\u00eb marketingut humbet kuptimi i v\u00ebrtet\u00eb i detyrave q\u00eb kryen antivirusi n\u00eb nj\u00eb pajisje mobile. Le ta shqyrtojm\u00eb n\u00eb detaje se \u00e7far\u00eb b\u00ebn antivirusi n\u00eb telefon. <\/p>\n<p><b>Auditimi i siguris\u00eb<\/b><\/p>\n<p>Shumica e antivirus\u00ebve modern\u00eb p\u00ebr pajisje mobile kryejn\u00eb auditim t\u00eb cil\u00ebsimeve t\u00eb siguris\u00eb n\u00eb pajisje. Ndonj\u00ebher\u00eb ky auditim quhet \u00abkontroll i reputacionit t\u00eb pajisjes\u00bb. Antivirus\u00ebt e konsiderojn\u00eb pajisjen t\u00eb sigurt n\u00ebse plot\u00ebsohen kat\u00ebr kushte:<\/p>\n<ul>\n<li>Pajisja nuk \u00ebsht\u00eb e komprometuar (root, jailbreak).<\/li>\n<li>N\u00eb pajisje \u00ebsht\u00eb vendosur nj\u00eb fjal\u00ebkalim.<\/li>\n<li>N\u00eb pajisje nuk \u00ebsht\u00eb lejuar debugimi p\u00ebrmes USB.<\/li>\n<li>N\u00eb pajisje nuk lejohet instalimi i aplikacioneve nga burime jo t\u00eb besueshme (sideloading).<\/li>\n<\/ul>\n<p>\nN\u00ebse si rezultat i kontrollit pajisja njihet si e pasigurt, antivirusi do ta njoftoj\u00eb pronarin p\u00ebr k\u00ebt\u00eb dhe do t\u00eb propozoj\u00eb \u00e7aktivizimin e funksionalitetit \u00abt\u00eb rreziksh\u00ebm\u00bb ose rikthimin e firmware-it t\u00eb fabrik\u00ebs n\u00ebse ka shenja t\u00eb root ose jailbreak.<\/p>\n<p>Sipas praktikave t\u00eb korporatave, nuk mjafton vet\u00ebm t\u00eb njoftohet p\u00ebrdoruesi. \u00cbsht\u00eb e nevojshme t\u00eb p\u00ebrjashtohen konfigurimet e pasigurta. P\u00ebr k\u00ebt\u00eb, me ndihm\u00ebn e sistemit UEM, duhet t\u00eb konfigurohen politika sigurie n\u00eb pajisjet mobile. Nd\u00ebrsa n\u00eb rast t\u00eb zbulimit t\u00eb root \/ jailbreak, duhet t\u00eb fshihen menj\u00ebher\u00eb t\u00eb dh\u00ebnat e korporat\u00ebs nga pajisja dhe t\u2019i bllokohet qasja n\u00eb rrjetin korporativ. Edhe kjo \u00ebsht\u00eb e mundur me ndihm\u00ebn e UEM. Vet\u00ebm pas k\u00ebtyre procedurave pajisja mobile mund t\u00eb konsiderohet e sigurt. <\/p>\n<p><b>K\u00ebrkimi dhe heqja e viruseve<\/b><\/p>\n<p>Ndryshe nga mendimi i p\u00ebrhapur se p\u00ebr iOS nuk ekzistojn\u00eb viruse, kjo nuk \u00ebsht\u00eb e v\u00ebrtet\u00eb. N\u00eb mjedisin real ende jan\u00eb t\u00eb p\u00ebrhapura exploit-et p\u00ebr versionet e vjetra t\u00eb iOS, t\u00eb cilat <noindex><a rel=\"nofollow\" href=\"https:\/\/googleprojectzero.blogspot.com\/2019\/08\/a-very-deep-dive-into-ios-exploit.html\">infektojn\u00eb pajisjet<\/a><\/noindex> n\u00ebp\u00ebrmjet shfryt\u00ebzimit t\u00eb cenueshm\u00ebrive n\u00eb shfletues. Megjithat\u00eb, p\u00ebr shkak t\u00eb arkitektur\u00ebs s\u00eb iOS, zhvillimi i antiviruseve p\u00ebr k\u00ebt\u00eb platform\u00eb \u00ebsht\u00eb i pamundur. Arsyeja kryesore \u00ebsht\u00eb se aplikacionet nuk mund t\u00eb marrin qasje n\u00eb list\u00ebn e aplikacioneve t\u00eb instaluara dhe kan\u00eb shum\u00eb kufizime n\u00eb qasjen te skedar\u00ebt. List\u00ebn e aplikacioneve t\u00eb instaluara n\u00eb iOS mund ta marr\u00eb vet\u00ebm UEM, por as UEM nuk mund t\u00eb marr\u00eb qasje te skedar\u00ebt. <\/p>\n<p>Me Android situata \u00ebsht\u00eb ndryshe. Aplikacionet mund t\u00eb marrin informacion p\u00ebr aplikacionet e instaluara n\u00eb pajisje. Ato madje mund t\u00eb marrin qasje edhe te distributiv\u00ebt e tyre (p\u00ebr shembull, Apk Extractor dhe analog\u00ebt e tij). Aplikacionet Android kan\u00eb gjithashtu mund\u00ebsi qasjeje te skedar\u00ebt (p\u00ebr shembull, Total Commander etj.). Aplikacionet Android mund t\u00eb dekompilohen.<\/p>\n<p>Me k\u00ebto mund\u00ebsi, algoritmi i m\u00ebposht\u00ebm antivirus duket plot\u00ebsisht logjik:<\/p>\n<ul>\n<li>Kontrolli i aplikacioneve<\/li>\n<li>Merrni list\u00ebn e aplikacioneve t\u00eb instaluara dhe shumat e kontrollit (KS) t\u00eb distributiv\u00ebve t\u00eb tyre.<\/li>\n<li>Kontrolloni aplikacionet dhe KS-t\u00eb e tyre fillimisht n\u00eb baz\u00ebn lokale, pastaj n\u00eb at\u00eb globale.<\/li>\n<li>N\u00ebse aplikacioni \u00ebsht\u00eb i panjohur, d\u00ebrgojeni distributivin e tij n\u00eb baz\u00ebn globale p\u00ebr analiz\u00eb dhe dekompilim.<\/li>\n<\/ul>\n<p><\/p>\n<ul>\n<li>Kontrolli i skedar\u00ebve, k\u00ebrkimi i n\u00ebnshkrimeve t\u00eb viruseve<\/li>\n<li>Kontrolloni KS-t\u00eb e skedar\u00ebve fillimisht n\u00eb baz\u00ebn lokale, m\u00eb pas n\u00eb at\u00eb globale.<\/li>\n<li>Kontrolloni pranin\u00eb e p\u00ebrmbajtjes s\u00eb pasigurt n\u00eb skedar\u00eb (skripte, exploit-e etj.) sipas baz\u00ebs lokale, pastaj asaj globale.<\/li>\n<li>N\u00ebse zbulohet malware, duhet t\u00eb njoftohet p\u00ebrdoruesi dhe\/ose t\u2019i bllokohet p\u00ebrdoruesit qasja te malware dhe\/ose informacioni t\u00eb d\u00ebrgohet n\u00eb UEM. D\u00ebrgimi i informacionit n\u00eb UEM \u00ebsht\u00eb i nevojsh\u00ebm, sepse antivirusi nuk mund ta heq\u00eb vet\u00eb malware nga pajisja.<\/li>\n<\/ul>\n<p>\nShqet\u00ebsimin m\u00eb t\u00eb madh e shkakton mund\u00ebsia e d\u00ebrgimit t\u00eb shp\u00ebrndarjeve t\u00eb programeve nga pajisja n\u00eb nj\u00eb server t\u00eb jasht\u00ebm. Pa k\u00ebt\u00eb nuk mund t\u00eb zbatohet \u00abanaliza e sjelljes\u00bb q\u00eb prodhuesit e antiviruseve pretendojn\u00eb, sepse n\u00eb pajisje nuk \u00ebsht\u00eb e mundur t\u00eb ekzekutohet aplikacioni n\u00eb nj\u00eb \u00absandbox\u00bb t\u00eb ve\u00e7ant\u00eb ose t\u00eb b\u00ebhet dekompilimi i tij (sa efektiv \u00ebsht\u00eb kjo n\u00eb rastin e p\u00ebrdorimit t\u00eb obfuscation \u00ebsht\u00eb nj\u00eb \u00e7\u00ebshtje m\u00eb vete dhe komplekse). Nga ana tjet\u00ebr, n\u00eb pajisjet mobile t\u00eb punonj\u00ebsve mund t\u00eb jen\u00eb t\u00eb instaluara aplikacione korporative q\u00eb antivirusi nuk i njeh, sepse ato nuk gjenden n\u00eb Google Play. K\u00ebto aplikacione mobile mund t\u00eb p\u00ebrmbajn\u00eb t\u00eb dh\u00ebna sensitive, p\u00ebr shkak t\u00eb t\u00eb cilave nuk publikohen n\u00eb dyqanin publik. D\u00ebrgimi i k\u00ebtyre shp\u00ebrndarjeve te prodhuesi i antivirusit duket i pap\u00ebrshtatsh\u00ebm nga pik\u00ebpamja e siguris\u00eb. Ka kuptim q\u00eb ato t\u00eb shtohen te p\u00ebrjashtimet, por deri tani nuk kam dijeni p\u00ebr ekzistenc\u00ebn e nj\u00eb mekanizmi t\u00eb till\u00eb.<\/p>\n<h3>Malware pa privilegje root mund t\u00eb<\/h3>\n<p>\n<b>1. T\u00eb vendos\u00eb mbi aplikacion nj\u00eb dritare t\u00eb vet\u00ebn t\u00eb padukshme<\/b> ose t\u00eb injektoj\u00eb tastier\u00ebn e vet p\u00ebr t\u00eb kopjuar t\u00eb dh\u00ebnat q\u00eb fut p\u00ebrdoruesi \u2013 kredencialet e llogarive, t\u00eb dh\u00ebnat e kartave bankare etj. Nj\u00eb shembull i fundit \u00ebsht\u00eb cenueshm\u00ebria <noindex><a rel=\"nofollow\" href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2020-0096\">CVE-2020-0096<\/a><\/noindex>, me ndihm\u00ebn e s\u00eb cil\u00ebs \u00ebsht\u00eb e mundur t\u00eb z\u00ebvend\u00ebsohet ekrani aktiv i aplikacionit dhe k\u00ebshtu t\u00eb merret qasje n\u00eb t\u00eb dh\u00ebnat q\u00eb fut p\u00ebrdoruesi. P\u00ebr p\u00ebrdoruesin, kjo n\u00ebnkupton mund\u00ebsin\u00eb e vjedhjes s\u00eb llogaris\u00eb Google me qasje te kopja rezerv\u00eb e pajisjes dhe te t\u00eb dh\u00ebnat e kartave bankare. P\u00ebr organizat\u00ebn, nga ana e saj, \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb mos humbas\u00eb t\u00eb dh\u00ebnat e veta. N\u00ebse t\u00eb dh\u00ebnat ndodhen n\u00eb memorien private t\u00eb aplikacionit dhe nuk p\u00ebrfshihen n\u00eb kopjen rezerv\u00eb t\u00eb Google, at\u00ebher\u00eb malware nuk do t\u00eb mund t\u00eb marr\u00eb qasje tek ato.<\/p>\n<p><b>2. T\u00eb marr\u00eb qasje n\u00eb t\u00eb dh\u00ebnat n\u00eb drejtorit\u00eb publike<\/b> \u2013 shkarkime, dokumente, galeri. N\u00eb k\u00ebto drejtori nuk rekomandohet t\u00eb ruhen informacione me vler\u00eb p\u00ebr kompanin\u00eb, sepse \u00e7do aplikacion mund t\u00eb marr\u00eb qasje n\u00eb to. Madje edhe vet\u00eb p\u00ebrdoruesi gjithmon\u00eb do t\u00eb mund t\u00eb ndaj\u00eb nj\u00eb dokument konfidencial p\u00ebrmes \u00e7do aplikacioni t\u00eb disponuesh\u00ebm.<\/p>\n<p><b>3. T\u00eb bezdis\u00eb p\u00ebrdoruesin me reklama, t\u00eb minoj\u00eb bitkoin\u00eb, t\u00eb jet\u00eb pjes\u00eb e nj\u00eb botnet-i etj.<\/b>. Kjo mund t\u00eb ndikoj\u00eb negativisht n\u00eb funksionimin e p\u00ebrdoruesit dhe\/ose t\u00eb pajisjes, por nuk do t\u00eb p\u00ebrb\u00ebj\u00eb k\u00ebrc\u00ebnim p\u00ebr t\u00eb dh\u00ebnat e korporat\u00ebs.<\/p>\n<p>Malware me privilegje root teorikisht mund t\u00eb b\u00ebj\u00eb pothuajse gjith\u00e7ka. Ato hasen rrall\u00eb, sepse komprometimi i pajisjeve moderne Android p\u00ebrmes nj\u00eb aplikacioni \u00ebsht\u00eb praktikisht i pamundur. Her\u00ebn e fundit q\u00eb u zbulua nj\u00eb dob\u00ebsi e till\u00eb ishte n\u00eb vitin 2016. B\u00ebhet fjal\u00eb p\u00ebr Dirty COW, t\u00eb cilit iu caktua numri <noindex><a rel=\"nofollow\" href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=cve-2016-5195\">CVE-2016-5195<\/a><\/noindex>. Thelb\u00ebsorja k\u00ebtu \u00ebsht\u00eb se, sapo t\u00eb zbulohen shenja komprometimi, klienti UEM do t\u00eb fshij\u00eb t\u00eb gjith\u00eb informacionin e korporat\u00ebs nga pajisja, prandaj gjasat p\u00ebr vjedhje t\u00eb suksesshme t\u00eb t\u00eb dh\u00ebnave me ndihm\u00ebn e malware t\u00eb tilla n\u00eb mjedisin korporativ jan\u00eb t\u00eb ul\u00ebta.<\/p>\n<p>Skedar\u00ebt keqdash\u00ebs mund t\u00eb d\u00ebmtojn\u00eb si pajisjen mobile, ashtu edhe sistemet e korporat\u00ebs n\u00eb t\u00eb cilat ajo ka qasje. Le t\u2019i shqyrtojm\u00eb k\u00ebta skenar\u00eb m\u00eb n\u00eb detaje.<\/p>\n<p>D\u00ebm ndaj pajisjes mobile mund t\u00eb shkaktohet, p\u00ebr shembull, n\u00ebse n\u00eb t\u00eb shkarkohet nj\u00eb imazh q\u00eb, kur hapet ose kur provohet t\u00eb vendoset si sfond, e kthen pajisjen n\u00eb nj\u00eb \u201ctull\u00eb\u201d ose e rinis at\u00eb. Me shum\u00eb gjasa kjo do t\u00eb d\u00ebmtoj\u00eb pajisjen ose p\u00ebrdoruesin, por nuk do t\u00eb ndikoj\u00eb te konfidencialiteti i t\u00eb dh\u00ebnave. Edhe pse ka edhe p\u00ebrjashtime.<\/p>\n<p>S\u00eb fundmi u diskutua dob\u00ebsia <noindex><a rel=\"nofollow\" href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2020-8899\">CVE-2020-8899<\/a><\/noindex>. U pretendua se me ndihm\u00ebn e saj mund t\u00eb merrej qasje n\u00eb konsol\u00ebn e pajisjeve mobile Samsung p\u00ebrmes nj\u00eb imazhi t\u00eb infektuar, t\u00eb d\u00ebrguar me email, mesazher ose MMS. Edhe pse qasja n\u00eb konsol\u00eb n\u00ebnkupton mund\u00ebsi qasjeje vet\u00ebm te t\u00eb dh\u00ebnat n\u00eb drejtorit\u00eb publike, ku nuk duhet t\u00eb ket\u00eb informacion konfidencial, konfidencialiteti i t\u00eb dh\u00ebnave personale t\u00eb p\u00ebrdoruesve vihet gjithsesi n\u00eb rrezik, dhe kjo i frik\u00ebsoi p\u00ebrdoruesit. Megjithat\u00eb, n\u00eb praktik\u00eb pajisjet mund t\u00eb sulmohen vet\u00ebm me ndihm\u00ebn e MMS. Dhe p\u00ebr nj\u00eb sulm t\u00eb suksessh\u00ebm duhet t\u00eb d\u00ebrgohen nga 75 deri n\u00eb 450 (!) mesazhe. Antivirusi k\u00ebtu, p\u00ebr fat t\u00eb keq, nuk do t\u00eb ndihmoj\u00eb, sepse nuk ka qasje n\u00eb regjistrin e mesazheve. P\u00ebr t\u2019u mbrojtur nga kjo, ka vet\u00ebm dy mund\u00ebsi. T\u00eb p\u00ebrdit\u00ebsohet OS ose t\u00eb bllokohet MMS. Opsionin e par\u00eb mund ta pres\u00ebsh gjat\u00eb dhe t\u00eb mos e marr\u00ebsh fare, sepse prodhuesit e pajisjeve nuk nxjerrin p\u00ebrdit\u00ebsime p\u00ebr t\u00eb gjitha pajisjet. \u00c7aktivizimi i pranimit t\u00eb MMS n\u00eb k\u00ebt\u00eb rast \u00ebsht\u00eb shum\u00eb m\u00eb i thjesht\u00eb.<\/p>\n<p>D\u00ebm p\u00ebr sistemet korporative mund t\u00eb shkaktojn\u00eb skedar\u00ebt q\u00eb transferohen nga pajisjet mobile. P\u00ebr shembull, n\u00eb nj\u00eb pajisje mobile mund t\u00eb ket\u00eb nj\u00eb skedar t\u00eb infektuar q\u00eb nuk i b\u00ebn d\u00ebm vet\u00eb pajisjes, por mund t\u00eb infektoj\u00eb nj\u00eb kompjuter Windows. P\u00ebrdoruesi ia d\u00ebrgon k\u00ebt\u00eb skedar me email kolegut t\u00eb tij. Ky i fundit e hap n\u00eb PC dhe k\u00ebshtu mund ta infektoj\u00eb pajisjen. Por n\u00eb rrug\u00ebn e k\u00ebtij vektori sulmi q\u00ebndrojn\u00eb t\u00eb pakt\u00ebn dy antiviruse: nj\u00eb n\u00eb serverin e emailit dhe tjetri n\u00eb PC-n\u00eb e marr\u00ebsit. Shtimi i nj\u00eb antivirusi t\u00eb tret\u00eb n\u00eb pajisjen mobile n\u00eb k\u00ebt\u00eb zinxhir duket m\u00eb shum\u00eb si paranoj\u00eb.<\/p>\n<p>Si\u00e7 shihet, k\u00ebrc\u00ebnimin m\u00eb t\u00eb madh n\u00eb bot\u00ebn dixhitale korporative e p\u00ebrb\u00ebn malware pa privilegje root. Nga mund t\u00eb vij\u00eb ai n\u00eb nj\u00eb pajisje mobile?<\/p>\n<p>M\u00eb shpesh ato instalohen p\u00ebrmes sideloading, adb ose dyqaneve t\u00eb pal\u00ebve t\u00eb treta, t\u00eb cilat duhet t\u00eb jen\u00eb t\u00eb ndaluara n\u00eb pajisjet mobile me qasje n\u00eb rrjetin korporativ. Mbeten dy rrug\u00eb p\u00ebr dep\u00ebrtimin e malware: p\u00ebrmes Google Play ose p\u00ebrmes UEM.<\/p>\n<p>Para publikimit n\u00eb Google Play, t\u00eb gjitha aplikacionet i n\u00ebnshtrohen verifikimit t\u00eb detyruesh\u00ebm. Por p\u00ebr aplikacionet me num\u00ebr t\u00eb vog\u00ebl instalimesh, kontrolli zakonisht kryhet pa p\u00ebrfshirje njer\u00ebzore, vet\u00ebm n\u00eb m\u00ebnyr\u00eb automatike. Prandaj, ndonj\u00ebher\u00eb malware dep\u00ebrton edhe n\u00eb Google Play, megjith\u00ebse jo shpesh. Nj\u00eb antivirus, bazat e t\u00eb cilit p\u00ebrdit\u00ebsohen n\u00eb koh\u00eb, do t\u00eb jet\u00eb n\u00eb gjendje t\u00eb zbuloj\u00eb aplikacionet me malware n\u00eb pajisje m\u00eb her\u00ebt se Google Play Protect, i cili aktualisht mbetet prapa p\u00ebr nga shpejt\u00ebsia e p\u00ebrdit\u00ebsimit t\u00eb bazave antivirus.<\/p>\n<p>UEM mund t\u00eb instaloj\u00eb n\u00eb pajisjen mobile \u00e7do aplikacion, p\u00ebrfshir\u00eb malware, ndaj \u00e7do aplikacion duhet t\u00eb verifikohet paraprakisht. Aplikacionet mund t\u00eb kontrollohen si gjat\u00eb zhvillimit t\u00eb tyre me mjete t\u00eb analiz\u00ebs statike dhe dinamike, ashtu edhe menj\u00ebher\u00eb para shp\u00ebrndarjes duke p\u00ebrdorur \u201csandbox\u201d t\u00eb specializuara dhe\/ose zgjidhje antivirus. E r\u00ebnd\u00ebsishme \u00ebsht\u00eb q\u00eb n\u00eb k\u00ebt\u00eb rast aplikacioni verifikohet vet\u00ebm nj\u00eb her\u00eb, p\u00ebrpara se t\u00eb ngarkohet n\u00eb UEM. P\u00ebr rrjedhoj\u00eb, edhe n\u00eb k\u00ebt\u00eb rast antivirusi n\u00eb pajisjen mobile nuk \u00ebsht\u00eb i nevojsh\u00ebm.<\/p>\n<h2>Mbrojtja e rrjetit<\/h2>\n<p>\nSi pjes\u00eb e mbrojtjes s\u00eb rrjetit, n\u00eb var\u00ebsi t\u00eb prodhuesit t\u00eb antivirusit, mund t\u00eb ofrohen nj\u00eb ose disa nga funksionet e m\u00ebposhtme.<\/p>\n<p><b>Filtrimi i URL p\u00ebrdoret p\u00ebr k\u00ebto q\u00ebllime:<\/b><\/p>\n<ul>\n<li><b>Bllokimin e trafikut sipas kategorive t\u00eb burimeve.<\/b> P\u00ebr shembull, p\u00ebr t\u00eb ndaluar shikimin e lajmeve ose p\u00ebrmbajtjeve t\u00eb tjera jo-korporative para drek\u00ebs, kur punonj\u00ebsi \u00ebsht\u00eb m\u00eb produktiv. N\u00eb praktik\u00eb, bllokimi zakonisht funksionon me shum\u00eb kufizime \u2014 prodhuesit e antiviruseve jo gjithmon\u00eb arrijn\u00eb t\u00eb p\u00ebrdit\u00ebsojn\u00eb n\u00eb koh\u00eb direktorit\u00eb e kategorive t\u00eb burimeve, duke pasur parasysh ekzistenc\u00ebn e shum\u00eb \u00abpasqyrave\u00bb. P\u00ebr m\u00eb tep\u00ebr, ka anonimizues dhe Opera VPN, ndaj t\u00eb cil\u00ebve bllokimi zakonisht nuk zbatohet.<\/li>\n<li><b>Mbrojtje nga phishing-u ose z\u00ebvend\u00ebsimi i hosteve t\u00eb synuara.<\/b> P\u00ebr k\u00ebt\u00eb, URL-t\u00eb te t\u00eb cilat lidhet pajisja kontrollohen paraprakisht sipas baz\u00ebs s\u00eb t\u00eb dh\u00ebnave t\u00eb antivirusit. Lidhjet, si dhe burimet ku ato \u00e7ojn\u00eb (duke p\u00ebrfshir\u00eb ridrejtimet e mundshme t\u00eb shum\u00ebfishta), verifikohen sipas baz\u00ebs s\u00eb faqeve t\u00eb njohura phishing. Gjithashtu krahasohen emri i domenit, certifikata dhe adresa IP midis pajisjes celulare dhe serverit t\u00eb besuar. N\u00ebse klienti dhe serveri marrin t\u00eb dh\u00ebna t\u00eb ndryshme, at\u00ebher\u00eb kemi ose MITM (\u00abnjeriu n\u00eb mes\u00bb, man in the middle), ose bllokim t\u00eb trafikut me an\u00eb t\u00eb t\u00eb nj\u00ebjtit antivirus ose llojeve t\u00eb ndryshme t\u00eb proxy-ve dhe filtrave web n\u00eb rrjetin ku \u00ebsht\u00eb lidhur pajisja celulare. T\u00eb thuhet me siguri se ka dik\u00eb n\u00eb mes \u00ebsht\u00eb e v\u00ebshtir\u00eb.<\/li>\n<\/ul>\n<p>\nP\u00ebr t\u00eb marr\u00eb qasje n\u00eb trafikun celular, antivirusi ose krijon nj\u00eb VPN, ose p\u00ebrdor mund\u00ebsit\u00eb e Accessibility API (API p\u00ebr aplikacione t\u00eb destinuara p\u00ebr persona me aft\u00ebsi t\u00eb kufizuara). Funksionimi i nj\u00ebkohsh\u00ebm i disa VPN-ve n\u00eb nj\u00eb pajisje celulare \u00ebsht\u00eb i pamundur, ndaj mbrojtja e rrjetit nga antiviruse q\u00eb krijojn\u00eb VPN-n\u00eb e tyre nuk \u00ebsht\u00eb e zbatueshme n\u00eb mjedisin korporativ. VPN-ja e antivirusit thjesht nuk do t\u00eb funksionoj\u00eb s\u00eb bashku me VPN-n\u00eb korporative, e cila p\u00ebrdoret p\u00ebr qasje n\u00eb rrjetin e kompanis\u00eb.<\/p>\n<p>Dh\u00ebnia e aksesit t\u00eb antivirusit te Accessibility API sjell nj\u00eb rrezik tjet\u00ebr. Qasja n\u00eb Accessibility API n\u00eb praktik\u00eb do t\u00eb thot\u00eb t'i lejohet t\u00eb b\u00ebj\u00eb pothuajse gjith\u00e7ka n\u00eb em\u00ebr t\u00eb p\u00ebrdoruesit \u2014 t\u00eb shoh\u00eb at\u00eb q\u00eb sheh p\u00ebrdoruesi, t\u00eb kryej\u00eb veprime me aplikacionet n\u00eb vend t\u00eb p\u00ebrdoruesit etj. Duke pasur parasysh se p\u00ebrdoruesi duhet t'ia jap\u00eb shprehimisht k\u00ebt\u00eb akses antivirusit, ka shum\u00eb t\u00eb ngjar\u00eb q\u00eb ai t\u00eb refuzoj\u00eb. Ose, n\u00ebse detyrohet, do t\u00eb blej\u00eb nj\u00eb telefon tjet\u00ebr pa antivirus.<\/p>\n<h3>Firewall<\/h3>\n<p>\nN\u00ebn k\u00ebt\u00eb em\u00ebrtim t\u00eb p\u00ebrgjithsh\u00ebm fshihen tri funksione:<\/p>\n<ul>\n<li>Mbledhja e statistikave t\u00eb p\u00ebrdorimit t\u00eb rrjetit me ndarje sipas aplikacioneve dhe llojit t\u00eb rrjetit (Wi-Fi, operator celular). Shumica e prodhuesve t\u00eb pajisjeve Android i ofrojn\u00eb k\u00ebto t\u00eb dh\u00ebna n\u00eb aplikacionin \u00abCil\u00ebsimet\u00bb. Dublikimi i tyre n\u00eb nd\u00ebrfaqen e antivirusit mobil duket i tep\u00ebrt. Interes mund t\u00eb paraqes\u00eb informacioni i p\u00ebrmbledhur p\u00ebr t\u00eb gjitha pajisjet. K\u00ebto t\u00eb dh\u00ebna mblidhen dhe analizohen me sukses nga sistemet UEM.<\/li>\n<li>Kufizimi i trafikut mobil \u2013 vendosja e nj\u00eb limiti dhe njoftimi kur ai arrihet. P\u00ebr p\u00ebrdoruesit e shumic\u00ebs s\u00eb pajisjeve Android, k\u00ebto funksione jan\u00eb t\u00eb disponueshme n\u00eb aplikacionin \u00abCil\u00ebsimet\u00bb. Konfigurimi i centralizuar i kufizimeve \u00ebsht\u00eb detyr\u00eb e UEM, jo e antivirusit.<\/li>\n<li>N\u00eb thelb, ekranimi i rrjetit (firewall). Ose, th\u00ebn\u00eb ndryshe, bllokimi i aksesit te adresa dhe porta t\u00eb caktuara IP. Duke marr\u00eb parasysh DDNS n\u00eb t\u00eb gjitha burimet e njohura dhe nevoj\u00ebn p\u00ebr t\u00eb aktivizuar p\u00ebr k\u00ebt\u00eb q\u00ebllim VPN, i cili, si\u00e7 u p\u00ebrmend m\u00eb sip\u00ebr, nuk mund t\u00eb funksionoj\u00eb nj\u00ebkoh\u00ebsisht me VPN kryesor, ky funksion duket i pazbatuesh\u00ebm n\u00eb praktik\u00ebn korporative.<\/li>\n<\/ul>\n<p><\/p>\n<h2>Verifikimi i besueshm\u00ebris\u00eb s\u00eb Wi-Fi<\/h2>\n<p>\nAntiviruset mobile mund t\u00eb vler\u00ebsojn\u00eb sigurin\u00eb e rrjeteve Wi-Fi me t\u00eb cilat lidhet pajisja mobile. Mund t\u00eb supozohet se kontrollohen prania dhe q\u00ebndrueshm\u00ebria e enkriptimit. Nd\u00ebrkoh\u00eb, t\u00eb gjitha programet moderne p\u00ebrdorin enkriptim p\u00ebr transmetimin e t\u00eb dh\u00ebnave sensitive. Prandaj, n\u00ebse nj\u00eb program \u00ebsht\u00eb i cenuesh\u00ebm n\u00eb nivelin e kanalit, at\u00ebher\u00eb ai \u00ebsht\u00eb po aq i rreziksh\u00ebm p\u00ebr t\u2019u p\u00ebrdorur p\u00ebrmes \u00e7do kanali interneti, dhe jo vet\u00ebm p\u00ebrmes Wi-Fi publik. <br \/>\nPrandaj, Wi-Fi publik, p\u00ebrfshir\u00eb edhe pa enkriptim, nuk \u00ebsht\u00eb as m\u00eb i rreziksh\u00ebm dhe as m\u00eb pak i sigurt se \u00e7do kanal tjet\u00ebr i pabesuesh\u00ebm i transmetimit t\u00eb t\u00eb dh\u00ebnave pa enkriptim.<\/p>\n<h2>Mbrojtje nga spam-i<\/h2>\n<p>\nMbrojtja, si rregull, reduktohet n\u00eb filtrimin e thirrjeve hyr\u00ebse sipas nj\u00eb liste t\u00eb p\u00ebrcaktuar nga p\u00ebrdoruesi ose sipas nj\u00eb baze t\u00eb spamuesve t\u00eb njohur, q\u00eb bezdisin pa pushim me sigurime, kredi dhe ftesa n\u00eb teat\u00ebr. Edhe pse gjat\u00eb vet\u00ebizolimit nuk telefonojn\u00eb, s\u00eb shpejti do t\u00eb rifillojn\u00eb. Filtrimit i n\u00ebnshtrohen vet\u00ebm thirrjet. Mesazhet n\u00eb versionet aktuale t\u00eb Android nuk filtrohen. Duke pasur parasysh ndryshimin e rregullt t\u00eb numrave nga spamuesit dhe pamund\u00ebsin\u00eb p\u00ebr t\u00eb mbrojtur kanalet tekstuale (SMS, mesazher\u00eb), ky funksionalitet ka m\u00eb shum\u00eb karakter marketingu sesa vler\u00eb praktike.<\/p>\n<h2>Mbrojtje kund\u00ebr vjedhjes<\/h2>\n<p>\nKryerja e veprimeve n\u00eb distanc\u00eb me pajisjen mobile n\u00eb rast humbjeje ose vjedhjeje. Alternativ\u00eb ndaj sh\u00ebrbimeve Find My iPhone dhe Find My Device nga Apple dhe Google. Ndryshe nga zgjidhjet e tyre analoge, sh\u00ebrbimet e prodhuesve t\u00eb antivirus\u00ebve nuk mund t\u00eb bllokojn\u00eb pajisjen n\u00ebse keqb\u00ebr\u00ebsi ka arritur ta rikthej\u00eb n\u00eb cil\u00ebsimet e fabrik\u00ebs. Por n\u00ebse kjo ende nuk ka ndodhur, me pajisjen mund t\u00eb b\u00ebhen n\u00eb distanc\u00eb veprimet e m\u00ebposhtme:<\/p>\n<ul>\n<li>T\u00eb bllokohet. Mbrojtje ndaj nj\u00eb hajduti jo fort t\u00eb aft\u00eb, sepse anashkalohet leht\u00ebsisht duke e rikthyer pajisjen n\u00eb cil\u00ebsimet e fabrik\u00ebs p\u00ebrmes recovery.<\/li>\n<li>T\u00eb zbulohen koordinatat e pajisjes. E dobishme kur pajisja \u00ebsht\u00eb humbur s\u00eb fundmi.<\/li>\n<li>T\u00eb aktivizohet nj\u00eb sinjal i fort\u00eb zanor, q\u00eb pajisja t\u00eb gjendet sipas tij edhe n\u00ebse n\u00eb t\u00eb \u00ebsht\u00eb aktivizuar modaliteti pa z\u00eb.<\/li>\n<li>T\u00eb rikthehet pajisja n\u00eb cil\u00ebsimet e fabrik\u00ebs. Ka kuptim kur p\u00ebrdoruesi e ka pranuar se pajisja \u00ebsht\u00eb humbur pa kthim, por nuk d\u00ebshiron q\u00eb t\u00eb dh\u00ebnat e ruajtura n\u00eb t\u00eb t\u00eb zbulohen.<\/li>\n<li>T\u00eb b\u00ebhet nj\u00eb foto. T\u00eb fotografohet keqb\u00ebr\u00ebsi n\u00ebse e mban telefonin n\u00eb duar. Funksionaliteti m\u00eb i dyshimt\u00eb: gjasat q\u00eb keqb\u00ebr\u00ebsi t\u00eb jet\u00eb duke par\u00eb telefonin n\u00eb drit\u00eb t\u00eb mir\u00eb jan\u00eb t\u00eb ul\u00ebta. Nd\u00ebrsa prania n\u00eb pajisje e nj\u00eb aplikacioni q\u00eb mund t\u00eb kontrolloj\u00eb fshehurazi kamer\u00ebn e smartphone-it, t\u00eb b\u00ebj\u00eb foto dhe t\u2019i d\u00ebrgoj\u00eb ato n\u00eb serverin e vet, ngjall shqet\u00ebsim t\u00eb arsyesh\u00ebm.<\/li>\n<\/ul>\n<p>\nEkzekutimi i komandave n\u00eb distanc\u00eb \u00ebsht\u00eb funksionalitet baz\u00eb n\u00eb \u00e7do sistem UEM. Aty mungon vet\u00ebm fotografimi n\u00eb distanc\u00eb. Kjo \u00ebsht\u00eb rruga m\u00eb e sigurt q\u00eb p\u00ebrdoruesit, pas p\u00ebrfundimit t\u00eb orarit t\u00eb pun\u00ebs, t\u2019u heqin baterit\u00eb telefonave dhe t\u2019i vendosin n\u00eb nj\u00eb qese Faraday. <\/p>\n<p>Funksionet kund\u00ebr vjedhjes n\u00eb antivirus\u00ebt mobil\u00eb jan\u00eb t\u00eb disponueshme vet\u00ebm p\u00ebr Android. N\u00eb iOS k\u00ebto veprime mund t\u2019i kryej\u00eb vet\u00ebm UEM. N\u00eb nj\u00eb pajisje iOS mund t\u00eb ket\u00eb vet\u00ebm nj\u00eb UEM \u2014 kjo \u00ebsht\u00eb nj\u00eb ve\u00e7ori arkitekturore e iOS.<\/p>\n<h2>P\u00ebrfundimet<\/h2>\n<p><\/p>\n<ol>\n<li>Situata n\u00eb t\u00eb cil\u00ebn p\u00ebrdoruesi mund t\u00eb instaloj\u00eb nj\u00eb program t\u00eb d\u00ebmsh\u00ebm n\u00eb telefon \u00ebsht\u00eb E PAPRANUESHME.<\/li>\n<li>Nj\u00eb UEM i konfiguruar si\u00e7 duhet n\u00eb nj\u00eb pajisje korporative e eliminon nevoj\u00ebn p\u00ebr antivirus.<\/li>\n<li>N\u00eb rast t\u00eb p\u00ebrdorimit t\u00eb cenueshm\u00ebrive 0-day n\u00eb sistemin operativ, antivirusi \u00ebsht\u00eb i padobish\u00ebm. Ai mund vet\u00ebm t\u2019i tregoj\u00eb administratorit se pajisja \u00ebsht\u00eb e cenueshme.<\/li>\n<li>T\u00eb p\u00ebrcaktoj\u00eb n\u00ebse dob\u00ebsia po shfryt\u00ebzohet, antivirusi nuk mundet. Po ashtu, nuk mund t\u00eb l\u00ebshoj\u00eb p\u00ebrdit\u00ebsim p\u00ebr nj\u00eb pajisje p\u00ebr t\u00eb cil\u00ebn prodhuesi nuk publikon m\u00eb p\u00ebrdit\u00ebsime sigurie. M\u00eb s\u00eb shumti, kjo zgjat nj\u00eb ose dy vjet.<\/li>\n<li>N\u00ebse l\u00ebm\u00eb m\u00ebnjan\u00eb k\u00ebrkesat e rregullator\u00ebve dhe marketingun, antivirus\u00ebt mobil\u00eb korporativ\u00eb nevojiten vet\u00ebm n\u00eb pajisjet Android, ku p\u00ebrdoruesit kan\u00eb qasje n\u00eb Google Play dhe n\u00eb instalimin e programeve nga burime t\u00eb pal\u00ebve t\u00eb treta. N\u00eb t\u00eb gjitha rastet e tjera, efektiviteti i p\u00ebrdorimit t\u00eb antivirus\u00ebve nuk \u00ebsht\u00eb m\u00eb shum\u00eb se nj\u00eb placebo.<\/li>\n<\/ol>\n<p>\n<img decoding=\"async\" alt=\"Antiviruset p\u00ebr pajisje mobile nuk funksionojn\u00eb\" src=\"\/wp-content\/uploads\/2020\/06\/3478264393af0279446852caee66f1ac.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/508408\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>TL;DR \u0435\u0441\u043b\u0438 \u043d\u0430 \u0432\u0430\u0448\u0438\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043d\u0443\u0436\u0435\u043d \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441, \u0437\u043d\u0430\u0447\u0438\u0442 \u0432\u044b \u0434\u0435\u043b\u0430\u0435\u0442\u0435 \u0432\u0441\u0435 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0438 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441 \u0432\u0430\u043c \u043d\u0435 \u043f\u043e\u043c\u043e\u0436\u0435\u0442. \u042d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442 \u2014 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u0436\u0430\u0440\u043a\u0438\u0445 \u0441\u043f\u043e\u0440\u043e\u0432 \u043d\u0430 \u0442\u0435\u043c\u0443 \u0442\u043e\u0433\u043e, \u043d\u0443\u0436\u0435\u043d \u043b\u0438 \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0435 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441, \u0432 \u043a\u0430\u043a\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043e\u043d \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442, \u0430 \u0432 \u043a\u0430\u043a\u0438\u0445 \u0431\u0435\u0441\u043f\u043e\u043b\u0435\u0437\u0435\u043d. \u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u044e\u0442\u0441\u044f \u043c\u043e\u0434\u0435\u043b\u0438 \u0443\u0433\u0440\u043e\u0437, \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432 \u0442\u0435\u043e\u0440\u0438\u0438 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":86708,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-86707","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"TL;DR \u0435\u0441\u043b\u0438 \u043d\u0430 \u0432\u0430\u0448\u0438\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/mobilnye-antivirusy-ne-rabotayut\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u044b \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"TL;DR \u0435\u0441\u043b\u0438 \u043d\u0430 \u0432\u0430\u0448\u0438\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/mobilnye-antivirusy-ne-rabotayut\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-28T17:42:19+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-28T17:42:19+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Antivirus\u00ebt mobil\u00eb nuk funksionojn\u00eb | ProHoster","description":"TL;DR n\u00ebse n\u00eb pajisjet tuaja mobile korporative.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/mobilnye-antivirusy-ne-rabotayut","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u044b \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 | ProHoster","og:description":"TL;DR \u0435\u0441\u043b\u0438 \u043d\u0430 \u0432\u0430\u0448\u0438\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/mobilnye-antivirusy-ne-rabotayut","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-28T17:42:19+00:00","article:modified_time":"2020-06-28T17:42:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86707","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:09:17","updated":"2022-09-30 07:15:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/86707","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=86707"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/86707\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/86708"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=86707"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=86707"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=86707"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}