Siyaqhubeka nokukwethula emhlabeni olwisana nobugebengu bokweba imininingwane ebucayi, ofunda izisekelo zobunjiniyela bezenhlalo futhi ungakhohlwa ukuqeqesha abasebenzi bawo. Namuhla isivakashi sethu siwumkhiqizo we-Phishman. Lona omunye wozakwethu be-TS Solution, ohlinzeka ngohlelo oluzenzakalelayo lokuhlola nokuqeqesha abasebenzi. Kafushane ngomqondo wayo:
-
Ukuhlonza izidingo zokuqeqeshwa zabasebenzi abathile.
-
Izifundo ezisebenzayo nezethiyori zabasebenzi ngokusebenzisa ingosi yokuqeqesha.
-
Isistimu ye-automation eguquguqukayo yokusebenza kwesistimu.
Isingeniso Somkhiqizo
Firm Kusukela ngo-2016, ubelokhu ethuthukisa isofthiwe ehlobene nohlelo lokuhlola nokuqeqeshwa kwabasebenzi bezinkampani ezinkulu emkhakheni we-cybersecurity. Phakathi kwamakhasimende kukhona abameleli abahlukahlukene bezimboni: ezezimali, umshuwalense, ukuhweba, izinto zokusetshenziswa kanye nama-giants wezimboni - kusukela ku-M.Video kuya eRosatom.
Izixazululo Eziphakanyisiwe
UPhishman usebenzisana nezinkampani ezahlukene (kusukela emabhizinisini amancane kuya ezinkampanini ezinkulu), ekuqaleni kwanele ukuba nabasebenzi abayi-10. Ake sicabangele inqubomgomo yentengo nelayisensi:
-
Okwamabhizinisi amancane:
A) - inguqulo yomkhiqizo kusuka kubasebenzi abayi-10 kuye kwangama-249 ngentengo yokuqala yelayisense kusuka kuma-ruble angama-875. Iqukethe amamojula ayinhloko: ukuqoqwa kolwazi (ukuhlola ukuthunyelwa kwama-imeyili obugebengu bokweba imininingwane ebucayi), ukuqeqeshwa (izifundo ezi-3 eziyisisekelo zokuvikeleka kolwazi), okuzenzakalelayo (ukusetha imodi yokuhlola evamile).
B) - inguqulo yomkhiqizo kusuka kubasebenzi abayi-10 kuye ku-999 ngentengo yokuqala yelayisense kusuka kuma-ruble ayi-1120. Ngokungafani nenguqulo ye-Lite, inamandla okuvumelanisa neseva yakho ye-AD yebhizinisi; imojula yokuqeqesha iqukethe izifundo ezi-5.
-
Okwamabhizinisi amakhulu:
A) - kulesi sixazululo inani labasebenzi alinqunyelwe; lihlinzeka ngenqubo ebanzi yokuqwashisa abasebenzi emkhakheni wokuphepha kolwazi ezinkampanini zanoma yimuphi usayizi ezinekhono lokujwayela izifundo nezidingo zekhasimende nebhizinisi. Ukuvumelanisa ne-AD, SIEM, DLP izinhlelo kuyatholakala ukuze kuqoqwe ulwazi mayelana nabasebenzi nokuhlonza abasebenzisi abadinga ukuqeqeshwa. Kukhona ukusekelwa kokuhlanganiswa nohlelo olukhona lokufunda amabanga (i-DLS), okubhaliselwe ngokwako kuqukethe izifundo eziyisi-7 eziyisisekelo ze-IS, ezi-4 ezithuthukisiwe nezingu-3 zegeyimu. Inketho ethokozisayo yokuhlaselwa kokuqeqeshwa usebenzisa amadrayivu e-USB (amakhadi e-flash) nayo iyasekelwa.
B) - inguqulo ebuyekeziwe ihlanganisa zonke izinketho ze-Enterpise, kungenzeka ukuthi uzenzele izixhumi nemibiko yakho (ngosizo lonjiniyela be-Phishman).
Ngakho-ke, umkhiqizo ungenziwa ngendlela evumelana nezimo ukuze uvumelane nemisebenzi yebhizinisi elithile futhi uhlanganiswe ezinhlelweni ezikhona zokuqeqesha ukuphepha kolwazi.
Ukwazi uhlelo
Ukuze sibhale lesi sihloko, sisebenzise isakhiwo esinezici ezilandelayo:
-
Ubuntu Server kusuka kunguqulo 16.04.
-
4 GB RAM, 50 GB yesikhala se-hard drive, iphrosesa enefrikhwensi yewashi engu-1 GHz noma ngaphezulu.
-
Iseva yeWindows enezindima ze-DNS, AD, MAIL.
Ngokuvamile, isethi ijwayelekile futhi ayidingi izinsiza eziningi, ikakhulukazi ngokucabangela ukuthi, njengomthetho, usuvele unayo iseva ye-AD. Lapho kuthunyelwa, kuzofakwa isiqukathi se-Docker, esizomisa ngokuzenzakalelayo ukufinyelela kuphothali yokuphatha nokufunda.
Ngezansi kwe-spoiler kunomdwebo wenethiwekhi ojwayelekile noFishman
Umdwebo wenethiwekhi ojwayelekile
Okulandelayo, sizojwayelana nesixhumi esibonakalayo sesistimu, amandla okuphatha kanye, vele, nemisebenzi.
Ngena ngemvume kuphothali yabaphathi
Ingosi yokuphatha yakwaPhishman isetshenziselwa ukuphatha uhlu lweminyango yenkampani nabasebenzi. Iqala ukuhlasela ngokuthumela ama-imeyili obugebengu bokweba imininingwane ebucayi (njengengxenye yokuqeqeshwa), futhi imiphumela ihlanganiswa ibe imibiko. Ungafinyelela kuyo usebenzisa ikheli le-IP noma igama lesizinda olicacisayo lapho uphakela uhlelo.
Ukugunyazwa kuphothali ye-Phishman
Ekhasini eliyinhloko uzokwazi ukufinyelela amawijethi alula anezibalo zabasebenzi bakho:
Ikhasi lasekhaya le-portal ye-Phishman
Ukwengeza abasebenzi ukusebenzisana
Kusukela kumenyu enkulu ungaya esigabeni "Abasebenzi", lapho kunohlu lwazo zonke izisebenzi zenkampani ezihlukaniswa ngomnyango (ngesandla noma nge-AD). Iqukethe amathuluzi okuphatha idatha yabo; kungenzeka ukwakha isakhiwo ngokuhambisana nabasebenzi.
Iphaneli Yokulawula UmsebenzisiIkhadi lokudala abasebenzi
Ongakukhetha: Ukuhlanganiswa ne-AD kuyatholakala, okukuvumela ukuthi wenze ngokuzenzakalelayo inqubo yokuqeqesha abasebenzi abasha futhi ugcine izibalo ezijwayelekile.
Ukwethulwa kokuqeqeshwa kwabasebenzi
Uma usungeze imininingwane ngabasebenzi benkampani, uba nethuba lokubathumela ezifundweni zokuqeqesha. Lapho kungase kube usizo:
-
isisebenzi esisha;
-
ukuqeqeshwa okuhleliwe;
-
inkambo ephuthumayo (kukhona okuphakelayo kolwazi, udinga ukuxwayisa).
Ukurekhoda kutholakalela umsebenzi ngamunye kanye nawo wonke umnyango.
Ukwakhiwa kwesifundo sokuqeqesha
Zikuphi izinketho:
-
akha iqembu lokufunda (hlanganisa ndawonye abasebenzisi);
-
ukukhetha inkambo yokuqeqeshwa (inani kuye ngelayisensi);
-
ukufinyelela (unomphela noma okwesikhashana nezinsuku ezikhonjiwe).
Kubalulekile!
Lapho sibhalisa okokuqala ngqa izifundo, umsebenzi uzothola i-imeyili enolwazi lokungena ku-Training Portal. Isixhumi esibonakalayo sesimemo siyisifanekiso, esitholakalayo ukuze silungiswe ngokubona kweKhasimende.
Incwadi eyisampula yesimemo sokufunda
Uma ulandela isixhumanisi, umsebenzi uzoyiswa kuphothali yokuqeqesha, lapho ukuqhubeka kwakhe kuzoqoshwa ngokuzenzakalelayo futhi kuboniswe kwizibalo zomlawuli we-Phishman.
Isibonelo sesifundo esiqaliswe umsebenzisi
Ukusebenza ngamaphethini okuhlasela
Izifanekiso zikuvumela ukuthi uthumele ama-imeyili obugebengu bokweba imininingwane ebucayi ahlosiwe ngokugxila kubunjiniyela bezenhlalo.
Isigaba "Izifanekiso"
Izifanekiso zitholakala phakathi kwezigaba, isibonelo:
Sesha ithebhu yezifanekiso ezakhelwe ngaphakathi ezivela ezigabeni ezahlukahlukene
Kukhona ulwazi mayelana nesifanekiso ngasinye esenziwe ngomumo, okuhlanganisa ulwazi ngokusebenza ngempumelelo.
Isibonelo sesifanekiso se-Twitter Newsletter
Kuyafaneleka futhi ukusho ikhono elikahle lokudala izifanekiso zakho: vele ukopishe umbhalo ovela encwadini futhi uzoguqulwa ngokuzenzakalelayo ube ikhodi ye-HTML.
Qaphela:
uma ubuyela kokuqukethwe , bese kufanele sikhethe mathupha isifanekiso ukuze silungiselele ukuhlasela kobugebengu bokweba imininingwane ebucayi. Isixazululo se-Phishman Enterprise sinenani elikhulu lezifanekiso ezihlanganisiwe, futhi kukhona ukusekelwa kwamathuluzi alula okudala awakho. Ngaphezu kwalokho, umthengisi usekela amakhasimende ngenkuthalo futhi angasiza ekwengezeni izifanekiso ezihlukile, esikholelwa ukuthi zisebenza kangcono kakhulu.
Ukusetha okujwayelekile kanye nosizo
Esigabeni esithi "Izilungiselelo", amapharamitha wesistimu ye-Phishman ayashintsha kuye ngezinga lokufinyelela lomsebenzisi wamanje (ngenxa yemikhawulo yesakhiwo, abengatholakali kithi ngokugcwele).
Isixhumi esibonakalayo sesigaba sokuthi "Izilungiselelo".
Ake sibhale kafushane izinketho zokumisa:
-
imingcele yenethiwekhi (ikheli leseva ye-imeyili, imbobo, ukubethela, ukufakazela ubuqiniso);
-
ukukhetha kohlelo lokuqeqesha (ukuhlanganisa nezinye i-LMS kuyasekelwa);
-
ukuhlela ukuhambisa kanye nezifanekiso zokuqeqesha;
-
uhlu oluvinjelwe lwamakheli e-imeyili (ithuba elibalulekile lokukhipha ukuhlanganyela ekuthumeleni i-phishing, isibonelo, kubaphathi bezinkampani);
-
ukuphathwa komsebenzisi (ukudala, ukuhlela ama-akhawunti okufinyelela);
-
buyekeza (buka isimo nohlelo).
Abalawuli bazothola isigaba esithi “Usizo” siwusizo; inokufinyelela kumanuwali yomsebenzisi ngokuhlaziywa okuningiliziwe kokusebenza no-Phishman, ikheli lesevisi yosekelo, nolwazi olumayelana nesimo sesistimu.
Isixhumi esibonakalayo sesigaba esithi "Usizo".Ulwazi lwesimo sesistimu
Ukuhlasela nokuqeqeshwa
Ngemva kokubuyekeza izinketho eziyisisekelo nezilungiselelo zesistimu, sizokwenza ukuhlasela kokuqeqeshwa; kulokhu sizovula isigaba "sokuhlasela".
Isixhumi esibonakalayo sephaneli yokulawula
Kuyo singakwazi ukuzijwayeza ngemiphumela yokuhlaselwa osekuqalisiwe, ukudala okusha, njll. Ake sichaze izinyathelo zokuqalisa umkhankaso.
Iqala ukuhlasela
1) Masibize ukuhlasela okusha ngokuthi “ukuvuza kwedatha”.
Ake sichaze izilungiselelo ezilandelayo:
Kuphi:
Umthumeli → isizinda sokuposa siyakhonjiswa (ngokuzenzakalelayo kumthengisi).
Amafomu obugebengu bokweba imininingwane ebucayi → asetshenziswa kuzifanekiso ukuzama ukuthola idatha kubasebenzisi, kuyilapho kuphela iqiniso lokufakwayo lirekhodwa, idatha ayilondolozwa.
Ukudlulisa ikholi → ukuqondisa kabusha ekhasini kukhonjiswa ngemuva kokuthi umsebenzisi ezulazule.
I-2) Esigabeni sokusabalalisa, imodi yokusakaza yokuhlasela ikhonjisiwe
Kuphi:
Uhlobo lokuhlasela → ikhombisa ukuthi ukuhlasela kuyokwenzeka kanjani futhi ngasiphi isikhathi. (inketho ihlanganisa imodi yokusabalalisa engalingani, njll.)
Isikhathi sokuqala sokuposa → isikhathi sokuqala sokuthumela imiyalezo sikhonjisiwe.
3) Esigabeni esithi "Izinjongo", abasebenzi baboniswa umnyango noma ngabanye
4) Ngemuva kwalokho sibonisa amaphethini okuhlasela esesivele sawathinta:
Ngakho, ukuze siqalise ukuhlasela sasidinga:
a) dala iphethini yokuhlasela;
b) khombisa indlela yokusabalalisa;
c) ukukhetha imigomo;
d) thola isifanekiso se-imeyili sobugebengu bokweba imininingwane ebucayi.
Ukuhlola imiphumela yokuhlasela
Ekuqaleni sine:
Ngasohlangothini lomsebenzisi, umlayezo we-imeyili omusha uyabonakala:
Uma uyivula:
Uma ulandela isixhumanisi, uzocelwa ukuthi ufake imininingwane yakho ye-imeyili:
Ngesikhathi esifanayo, ake sibheke izibalo zokuhlasela:
Kubalulekile!
Inqubomgomo kaPhishman ilandela ngokuqinile izindinganiso zokulawula nezokuziphatha, ngakho-ke idatha efakwe umsebenzisi ayigcinwa noma kuphi, kuphela iqiniso lokuvuza elirekhodwayo.
Imibiko
Konke okwenziwa ngenhla kufanele kusekelwe izibalo ezihlukahlukene nolwazi olujwayelekile mayelana nezinga lokulungela kwabasebenzi. Kunesigaba esihlukile esithi "Imibiko" sokuqapha.
Kuhlanganisa:
-
Umbiko wokuqeqeshwa obonisa ulwazi ngemiphumela yokuqeda isifundo phakathi nesikhathi sokubika.
-
Umbiko wokuhlasela obonisa imiphumela yokuhlaselwa kobugebengu bokweba imininingwane ebucayi (inombolo yezigameko, ukusatshalaliswa kwesikhathi, njll.).
-
Umbiko wenqubekelaphambili yoqeqesho okhombisa ukuqhubeka kwabasebenzi bakho.
-
Bika mayelana nokuguquguquka kobungozi bobugebengu bokweba imininingwane ebucayi (ulwazi olufingqiwe lwezehlakalo).
-
Umbiko wokuhlaziya (ukusabela kwesisebenzi ezenzakalweni zangaphambi/ngemuva).
Ukusebenza ngombiko
1) Yenza "Khiqiza umbiko".
2) Cacisa umnyango/abasebenzi abazokhipha umbiko.
3) Khetha isikhathi
4) Sizokhombisa izifundo onentshisekelo kuzo
5) Khiqiza umbiko wokugcina
Ngakho, imibiko isiza ukubonisa izibalo ngendlela efanelekile futhi iqaphe imiphumela yengosi yokuqeqeshwa, kanye nokuziphatha kwabasebenzi.
I-automation yokuqeqeshwa
Kuyafaneleka futhi ukusho ikhono lokudala imithetho ezenzakalelayo ezosiza abalawuli ukuhlela i-logic ye-Phishman.
Ukubhala umbhalo ozenzakalelayo
Ukuze ulungiselele, udinga ukuya engxenyeni ethi "Imithetho". Sinikezwa:
1) Cacisa igama bese usetha isikhathi sokuhlola isimo.
2) Dala umcimbi ngokusekelwe komunye wemithombo (Ubugebengu bokweba imininingwane ebucayi, Ukuqeqeshwa, Abasebenzisi), uma kukhona ezimbalwa zazo, ungasebenzisa u-opharetha onengqondo (FUTHI / NOMA).
Esibonelweni sethu, sidale umthetho olandelayo: “Uma umsebenzisi achofoza isixhumanisi esinonya kusuka kokunye kokuhlaselwa kwethu kobugebengu bokweba imininingwane ebucayi, uzobhaliswa ngokuzenzekelayo esifundweni sokuqeqeshwa, ngokufanelekile, uzothola isimemo nge-imeyili, futhi ukuqhubeka kuzoqala. ukulandelwa.
Ongakukhetha:
-> Kukhona ukusekelwa kokudala imithetho ehlukahlukene ngomthombo (i-DLP, i-SIEM, i-Antivirus, izinsizakalo ze-HR, njll.).
Isimo: “Uma umsebenzisi ethumela ulwazi olubucayi, i-DLP irekhoda umcimbi futhi ithumele idatha ku-Phishman, lapho umthetho uqaliswa khona: yabela isisebenzi isifundo sokusebenza ngolwazi oluyimfihlo.”
Ngakho, umlawuli anganciphisa ezinye zezinqubo ezijwayelekile (ukuthumela abasebenzi ukuze baqeqeshwe, benze ukuhlasela okuhleliwe, njll.).
Esikhundleni isiphetho
Namuhla siye sajwayelana nesixazululo saseRussia sokuzenzakalela inqubo yokuhlola nokuqeqesha abasebenzi. Kuyasiza ekulungiseleleni inkampani ukuthi ihambisane ne-Federal Law 187, PCI DSS, ISO 27001. Izinzuzo zokuqeqeshwa nge-Phishman zihlanganisa:
-
Isifundo ngokwezifiso - ikhono lokushintsha okuqukethwe kwezifundo;
-
Ukumaketha - ukudala inkundla yedijithali ngokuvumelana nezindinganiso zakho zebhizinisi;
-
Sebenza ungaxhunyiwe ku-inthanethi - ukufakwa kuseva yakho;
-
Automation - ukudala imithetho (izimo) kubasebenzi;
-
Ukubika - izibalo zezenzakalo ezithakaselwayo;
-
Ukuvumelana nezimo zelayisensi - usekelo oluvela kubasebenzisi abayi-10.
Uma unentshisekelo kulesi sixazululo, ungaxhumana njalo , sizosiza ekuhleleni umshayeli wendiza futhi seluleke kanye nabamele Phishman. Yilokho kuphela okwanamuhla, zifundele futhi uqeqeshe abasebenzi bakho, sibonane ngokuzayo!
Source: www.habr.com