Sanibonani nonke! Ngisebenzisa i-DataLine Cyber Defense Center. Amakhasimende eza kithi nomsebenzi wokuhlangabezana nezidingo ze-152-FZ emafini noma engqalasizinda ebonakalayo.
Cishe kuwo wonke amaphrojekthi kuyadingeka ukwenza umsebenzi wokufundisa ukuze kukhishwe izinganekwane kulo mthetho. Ngiqoqe imibono eyiphutha evamile kakhulu engaba nezindleko kusabelomali kanye nesistimu yezinzwa zomqhubi wedatha yomuntu siqu. Ngokushesha ngizokwenza ukubhuka ukuthi amacala amahhovisi kahulumeni (GIS) abhekene nezimfihlo zombuso, i-KII, njll. azohlala ngaphandle kwalesi sihloko.
Inganekwane 1. Ngafaka i-antivirus, i-firewall, futhi ngabiyela ama-racks ngocingo. Ngilandela umthetho?
I-152-FZ ayiphathelene nokuvikelwa kwezinhlelo namaseva, kodwa mayelana nokuvikelwa kwedatha yomuntu siqu yezihloko. Ngakho-ke, ukuhambisana ne-152-FZ akuqali nge-antivirus, kodwa ngenani elikhulu lamaphepha kanye nezindaba zenhlangano.
Umhloli oyinhloko, i-Roskomnadzor, ngeke abheke ubukhona nesimo sezindlela zobuchwepheshe zokuzivikela, kodwa ezisekelweni ezingokomthetho zokucubungula idatha yomuntu siqu (PD):
- uqoqela yiphi inhloso idatha yomuntu siqu;
- noma ngabe uqoqa okuningi kunalokho okudingayo ngezinjongo zakho;
- ugcina isikhathi esingakanani idatha yomuntu siqu;
- ingabe ikhona inqubomgomo yokucubungula idatha yomuntu siqu;
- Ingabe uqoqa imvume yokucubungula idatha yomuntu siqu, ukudluliswa kwemingcele, ukucutshungulwa ngabanye abantu, njll.
Izimpendulo zale mibuzo, kanye nezinqubo ngokwazo, kufanele zirekhodwe emibhalweni efanele. Nalu uhlu olude noluphelele lwalokho u-opharetha wedatha yomuntu siqu okudingeka akulungiselele:
- Ifomu lemvume elijwayelekile lokucutshungulwa kwedatha yomuntu siqu (lawa ngamashidi manje esiwasayina cishe yonke indawo lapho sishiya khona amagama ethu aphelele nemininingwane yepasipoti).
- Inqubomgomo yomsebenzisi mayelana nokucutshungulwa kwedatha yomuntu siqu ( kukhona izincomo zokuklama).
- Oda ekuqokweni komuntu onesibopho sokuhlela ukucutshungulwa kwedatha yomuntu siqu.
- Incazelo yomsebenzi yomuntu onesibopho sokuhlela ukucutshungulwa kwedatha yomuntu siqu.
- Imithetho yokulawula kwangaphakathi kanye (noma) nokuhlolwa kokuthotshelwa kokucubungula kwe-PD nezimfuneko zomthetho.
- Uhlu lwezinhlelo zolwazi lwedatha yomuntu siqu (ISPD).
- Imithetho yokuhlinzeka isihloko ngokufinyelela kudatha yakhe yomuntu siqu.
- Imithethonqubo yophenyo lwesigameko.
- Oda ekuvunyelweni kwabasebenzi ekucutshungulweni kwedatha yomuntu siqu.
- Imithethonqubo yokusebenzelana nabalawuli.
- Isaziso se-RKN, njll.
- Ifomu lemiyalo yokucubungula i-PD.
- Imodeli yosongo ye-ISPD.
Ngemva kokuxazulula lezi zinkinga, ungaqala ukukhetha izinyathelo ezithile nezindlela zobuchwepheshe. Iziphi ozidingayo zincike kumasistimu, izimo zazo zokusebenza, nezinsongo zamanje. Kodwa okuningi ngalokho kamuva.
Iqiniso: ukuhambisana nomthetho ukusungulwa nokuhambisana nezinqubo ezithile, okokuqala, futhi okwesibili kuphela - ukusetshenziswa kwezindlela zobuchwepheshe ezikhethekile.
Inganekwane 2. Ngigcina idatha yomuntu siqu efwini, isikhungo sedatha esihlangabezana nezidingo ze-152-FZ. Manje sebenomthwalo wemfanelo wokuqinisa umthetho
Uma ukhiphela ngaphandle ukugcinwa kwedatha yomuntu siqu kumnikezeli wamafu noma isikhungo sedatha, awuyeki ukuba ngu-opharetha wedatha yomuntu siqu.
Ake sibize incazelo evela emthethweni ukuze sithole usizo:
Ukucutshungulwa kwedatha yomuntu siqu - noma yisiphi isenzo (ukusebenza) noma isethi yezenzo (imisebenzi) eyenziwa kusetshenziswa amathuluzi ezishintshayo noma ngaphandle kokusebenzisa lezo zindlela ezinedatha yomuntu siqu, okuhlanganisa ukuqoqwa, ukurekhoda, ukuhlelwa kwesistimu, ukuqoqwa, ukugcinwa, ukucaciswa (ukuvuselela, ukushintsha), ukukhishwa, ukusetshenziswa, ukudlulisa (ukusatshalaliswa, ukuhlinzekwa, ukufinyelela), ukwenziwa komuntu siqu, ukuvimba, ukususwa, ukucekelwa phansi kwedatha yomuntu siqu.
Umthombo: isihloko 3,
Kuzo zonke lezi zenzo, umhlinzeki wesevisi unesibopho sokugcina nokubhubhisa idatha yomuntu siqu (lapho iklayenti linqamula isivumelwano naye). Konke okunye kunikezwa ngu-opharetha wedatha yomuntu siqu. Lokhu kusho ukuthi opharetha, hhayi umhlinzeki wesevisi, unquma inqubomgomo yokucubungula idatha yomuntu siqu, uthola izimvume ezisayiniwe zokucubungula idatha yomuntu siqu kumakhasimende akhe, uvimbela futhi uphenye amacala okuvuza kwedatha yomuntu siqu kubantu besithathu, njalonjalo.
Ngenxa yalokho, u-opharetha wedatha yomuntu siqu kusafanele aqoqe imibhalo ebalwe ngenhla futhi asebenzise izinyathelo zenhlangano nezobuchwepheshe ukuze avikele i-PDIS yakhe.
Ngokuvamile, umhlinzeki usiza isisebenzisi ngokuqinisekisa ukuthobelana nezidingo zomthetho ezingeni lengqalasizinda lapho kuzotholakala khona i-ISPD yesisebenzisi: ama-rack anezinto zokusebenza noma ifu. Ubuye aqoqe iphakethe lamadokhumenti, athathe izinyathelo zenhlangano nezobuchwepheshe zengqalasizinda yakhe ngokuhambisana ne-152-FZ.
Abanye abahlinzeki basiza ngamaphepha kanye nokuhlinzekwa kwezinyathelo zokuphepha zobuchwepheshe zama-ISDN ngokwawo, okungukuthi, ezingeni elingaphezu kwengqalasizinda. Umsebenzisi angaphinde anikeze le misebenzi ngaphandle, kodwa isibopho nezibopho ngaphansi komthetho azishabalali.
Iqiniso: Ngokusebenzisa izinsizakalo zomhlinzeki noma isikhungo sedatha, awukwazi ukudlulisela kuye izibopho zomsebenzisi wedatha yomuntu siqu futhi ukhiphe umthwalo wemfanelo. Uma umhlinzeki ekuthembisa lokhu, ngakho-ke, ukuyibeka kancane, uqamba amanga.
Inganekwane 3. Nginephakheji elidingekayo lemibhalo nezilinganiso. Ngigcina idatha yomuntu siqu nomhlinzeki othembisa ukuthobela i-152-FZ. Ingabe konke kuhamba ngohlelo?
Yebo, uma ukhumbula ukusayina i-oda. Ngokomthetho, u-opharetha angaphathisa ukucutshungulwa kwedatha yomuntu siqu komunye umuntu, isibonelo, umhlinzeki wesevisi ofanayo. I-oda liwuhlobo lwesivumelwano esibala lokho umhlinzeki wesevisi angakwenza ngedatha yomuntu siqu yomsebenzisi.
Umsebenzisi unelungelo lokuphathisa ukucutshungulwa kwedatha yomuntu siqu komunye umuntu ngemvume yesihloko sedatha yomuntu siqu, ngaphandle uma kuhlinzekwe ngenye indlela yi-Federal Law, ngesisekelo sesivumelwano esenziwa nalo muntu, okubandakanya inkontileka yezwe noma kamasipala, noma ngokwamukela isenzo esifanele wumbuso noma umgwamanda kamasipala (okuzobizwa ngawo njengomqhubi womsebenzi). Umuntu ocubungula idatha yomuntu siqu egameni lomsebenzisi unesibopho sokuthobela izimiso nemithetho yokucubungula idatha yomuntu siqu ehlinzekwe yilo Mthetho Wombuso.
Source:
Isibopho somhlinzeki sokugcina ubumfihlo bedatha yomuntu siqu futhi siqinisekise ukuphepha kwayo ngokuhambisana nezidingo ezishiwo futhi siyasungulwa:
I-oda lika-opharetha kufanele lichaze uhlu lwezenzo (imisebenzi) enedatha yomuntu siqu ezokwenziwa ngumuntu ocubungula idatha yomuntu siqu kanye nezinjongo zokucubungula, isibopho salowo muntu kufanele sisungulwe ukugcina ubumfihlo bedatha yomuntu siqu futhi uqinisekise ukuthi ukuphepha kwedatha yomuntu siqu ngesikhathi sokucutshungulwa kwayo, kanye nezidingo zokuvikela idatha yomuntu siqu ecutshunguliwe kufanele zicaciswe ngokuhambisana nayo yalesi Federal Law.
Source:
Kulokhu, umhlinzeki unesibopho ku-opharetha, hhayi esihlokweni sedatha yomuntu siqu:
Uma u-opharetha ephathisa ukucutshungulwa kwedatha yomuntu siqu komunye umuntu, u-opharetha unesibopho esihlokweni sedatha yomuntu siqu ngezenzo zomuntu othile. Umuntu ocubungula idatha yomuntu siqu egameni lika-opharetha unesibopho ku-opharetha.
Source: .
Kubalulekile futhi ukubeka ngokulandelana isibopho sokuqinisekisa ukuvikelwa kwedatha yomuntu siqu:
Ukuphepha kwedatha yomuntu siqu lapho kusetshenzwa ohlelweni lolwazi kuqinisekiswa ngu-opharetha walolu hlelo, ocubungula idatha yomuntu siqu (ngemuva kwalokhu ebizwa ngokuthi opharetha), noma ngumuntu ocubungula idatha yomuntu siqu egameni lika-opharetha ngesisekelo isivumelwano esiphethwe nalo muntu (ozobizwa kamuva njengomuntu ogunyaziwe). Isivumelwano phakathi komqhubi nomuntu ogunyaziwe kufanele sihlinzekele isibopho somuntu ogunyaziwe sokuqinisekisa ukuphepha kwedatha yomuntu siqu lapho kusetshenzwa ohlelweni lolwazi.
Source:
Iqiniso: Uma unikeza idatha yomuntu siqu kumhlinzeki, bese usayina i-oda. Ku-oda, bonisa imfuneko yokuqinisekisa ukuvikelwa kwedatha yomuntu siqu yezifundo. Uma kungenjalo, awuhambisani nomthetho ophathelene nokudluliselwa komsebenzi wokucubungula idatha yomuntu siqu kumuntu wesithathu, futhi umhlinzeki akakukweleti lutho mayelana nokuhambisana ne-152-FZ.
Inganekwane 4. I-Mossad iyangihlola, noma ngine-UZ-1 nakanjani
Amanye amakhasimende aqinisekisa ngokuqhubekayo ukuthi ane-ISPD yeleveli yokuphepha 1 noma 2. Imvamisa lokhu akunjalo. Masikhumbule ihadiwe ukuthola ukuthi kungani lokhu kwenzeka.
I-LO, noma izinga lokuvikeleka, linquma ukuthi uzovikela ini idatha yakho yomuntu siqu.
Izinga lokuvikeleka lithintwa amaphuzu alandelayo:
- uhlobo lwedatha yomuntu siqu (ekhethekile, i-biometric, etholakala esidlangalaleni nokunye);
- umnikazi wedatha yomuntu siqu - abasebenzi noma abangebona abasebenzi bomqhubi wedatha yomuntu siqu;
- inombolo yezifundo zedatha yomuntu siqu - ngaphezulu noma ngaphansi kwezinkulungwane eziyi-100.
- izinhlobo zezinsongo zamanje.
Isitshela ngezinhlobo zezinsongo . Nansi incazelo yalokho ngakunye nokuhumusha kwami kwamahhala ngolimi lwabantu.
Izinsongo zohlobo loku-1 zibalulekile ohlelweni lolwazi uma izinsongo ezihlobene nokuba khona kwamakhono angabhaliwe (angadalulwanga) kusofthiwe yesistimu esetshenziswa ohlelweni lolwazi nazo zibalulekile kulo.
Uma uqaphela lolu hlobo lokusabisa njengolufanele, khona-ke ukholelwa ngokuqinile ukuthi abenzeli be-CIA, MI6 noma i-MOSSAD babeke ibhukhimakhi kusistimu yokusebenza ukuze bantshontshe idatha yomuntu siqu yezihloko ezithile ku-ISPD yakho.
Izinsongo zohlobo lwesi-2 zibalulekile ohlelweni lolwazi uma izinsongo ezihlobene nokuba khona kwamakhono angabhaliwe (angadalulwanga) kusofthiwe yohlelo lokusebenza esetshenziswa ohlelweni lolwazi nazo zibalulekile kulo.
Uma ucabanga ukuthi izinsongo zohlobo lwesibili ziyicala lakho, bese ulala futhi ubone ukuthi ama-ejenti afanayo e-CIA, MI6, MOSSAD, isigebengu esikhohlakele esiyedwa noma iqembu libeke amabhukumaka kwelinye iphakethe lesoftware yehhovisi ukuze lizingele ngqo. idatha yakho yomuntu siqu. Yebo, kukhona isofthiwe engabazekayo yohlelo lokusebenza njenge-μTorrent, kodwa ungenza uhlu lwesofthiwe evunyelwe ukufakwa futhi usayine isivumelwano nabasebenzisi, unganikezi abasebenzisi amalungelo omlawuli wendawo, njll.
Izinsongo zohlobo lwe-3 zibalulekile ohlelweni lolwazi uma izinsongo ezingahlobene nokuba khona kwamakhono angabhaliwe (angadalulwanga) ohlelweni kanye nesofthiwe yohlelo lokusebenza esetshenziswa ohlelweni lolwazi ihambisana nayo.
Izinsongo zezinhlobo 1 no-2 azikufanelanga, ngakho-ke lena yindawo yakho.
Silungise izinhlobo zezinsongo, manje ake sibheke ukuthi i-ISPD yethu izoba naliphi izinga lokuphepha.
Ithebula elisekelwe ezincwadini ezibalulwe ku .
Uma sikhethe uhlobo lwesithathu lwezinsongo zangempela, khona-ke ezimweni eziningi sizoba ne-UZ-3. Okuwukuphela kokuhlukile, lapho izinsongo zezinhlobo 1 no-2 zingafaneleki, kodwa izinga lokuphepha lisazoba phezulu (UZ-2), izinkampani ezicubungula idatha yomuntu siqu ekhethekile yabangewona abasebenzi ngenani elingaphezu kuka-100. isibonelo, izinkampani ezibambe iqhaza ekuxilongweni kwezokwelapha kanye nokuhlinzekwa kwezinsizakalo zezokwelapha.
Kukhona futhi i-UZ-4, futhi itholakala ikakhulukazi ezinkampanini ibhizinisi labo elingahlobene nokucutshungulwa kwedatha yomuntu siqu yabangewona abasebenzi, okungukuthi amaklayenti noma osonkontileka, noma izisekelo zedatha yomuntu siqu zincane.
Kungani kubaluleke kakhulu ukuthi ungayidluli ngezinga lokuphepha? Kulula: isethi yezinyathelo nezindlela zokuvikela zokuqinisekisa ukuthi leli zinga lokuphepha lizoncika kulokhu. Uma izinga lolwazi liphakeme, kuningi okuzodingeka kwenziwe ngokwemigomo yenhlangano kanye nezobuchwepheshe (funda: imali eyengeziwe kanye nezinzwa kuzodingeka zisetshenziswe).
Lapha, isibonelo, ukuthi isethi yezinyathelo zokuphepha ishintsha kanjani ngokuvumelana ne-PP-1119 efanayo.
Manje ake sibone ukuthi, kuye ngezinga elikhethiwe lokuphepha, uhlu lwezinyathelo ezidingekayo lushintsha ngokuhambisana Kunesithasiselo eside salo mbhalo, esichaza izinyathelo ezidingekayo. Kunezingu-109 sezizonke, ku-KM ngayinye izinyathelo eziyisibopho ziyachazwa futhi zimakwe ngophawu “+” - zibalwa ngokunembile kuthebula elingezansi. Uma ushiya kuphela lezo ezidingekayo ku-UZ-3, uthola ezi-4.
Iqiniso: uma ungaziqoqi izivivinyo noma ama-biometrics kumakhasimende, awudideki mayelana namabhukhimakhi ohlelweni nesofthiwe yohlelo lokusebenza, ngakho-ke kungenzeka ukuthi une-UZ-3. Inohlu oluphusile lwezinyathelo zenhlangano nezobuchwepheshe ezingase zisetshenziswe.
Inganekwane 5. Zonke izindlela zokuvikela idatha yomuntu siqu kufanele ziqinisekiswe yi-FSTEC yaseRussia
Uma ufuna noma kudingeka ukuthi unikeze isitifiketi, khona-ke cishe kuzodingeka usebenzise izinto zokuvikela eziqinisekisiwe. Isitifiketi sizokwenziwa ngumnikazi welayisensi we-FSTEC yaseRussia, othi:
- unentshisekelo yokuthengisa izisetshenziswa zokuvikela ulwazi eziqinisekisiwe;
- uzosaba ukuthi ilayisensi izohoxiswa umlawuli uma kukhona okungahambi kahle.
Uma ungasidingi isitifiketi futhi ulungele ukuqinisekisa ukuthobelana nezidingo ngenye indlela, eshiwo kuyo "Ukuhlola ukusebenza kwezinyathelo ezisetshenziswa ngaphakathi kohlelo lokuvikela idatha yomuntu siqu ukuze kuqinisekiswe ukuvikeleka kwedatha yomuntu siqu," lapho-ke amasistimu olwazi aqinisekisiwe awadingeki kuwe. Ngizozama ukuchaza kafushane isizathu.
В ithi kuyadingeka ukuthi kusetshenziswe izinto zokuzivikela ezidlule inqubo yokuhlola ukuhambisana ngokuhambisana nenqubo emisiwe.:
Ukuqinisekisa ukuvikeleka kwedatha yomuntu siqu kufinyelelwa, ikakhulukazi:
[…] 3) ukusetshenziswa kokuphepha kolwazi kusho ukuthi abaphumelele inqubo yokuhlola ukuthobela imithetho ngokuhambisana nenqubo emisiwe.
В Kukhona nemfuneko yokusebenzisa amathuluzi okuvikela ulwazi aphumelele inqubo yokuhlola ukuthobelana nezidingo zomthetho:
[…] ukusetshenziswa kwamathuluzi okuvikela ulwazi adlulise inqubo yokuhlola ukuhambisana nezidingo zomthetho we-Russian Federation emkhakheni wokuphepha kolwazi, ezimeni lapho ukusetshenziswa kwalezo zindlela kudingekile ukuze kuncishiswe izinsongo zamanje.
empeleni iphinda ipharagrafu PP-1119:
Izinyathelo zokuqinisekisa ukuvikeleka kwedatha yomuntu siqu ziyenziwa, phakathi kokunye, ngokusebenzisa amathuluzi okuvikela imininingwane ohlelweni lolwazi oluphumelele inqubo yokuhlola ukuhambisana ngokuhambisana nenqubo emisiwe, ezimeni lapho ukusetshenziswa kwalawo mathuluzi kuyadingeka ukuze nciphisa izinsongo zamanje ekuvikelekeni kwedatha yomuntu siqu.
Lawa mafomu afana ngani? Kulungile - azidingi ukusetshenziswa kwemishini yokuvikela eqinisekisiwe. Iqiniso liwukuthi kunezinhlobo eziningana zokuhlola ukuhambisana (isitifiketi sokuzithandela noma esiyisibopho, isimemezelo sokuvumelana). Isitifiketi singesinye sazo. Umsebenzisi angase asebenzise imikhiqizo engaqinisekisiwe, kodwa uzodinga ukukhombisa umlawuli lapho ehlolwa ukuthi wenze uhlobo oluthile lwenqubo yokuhlola ukuhambisana.
Uma opharetha enquma ukusebenzisa imishini yokuvikela eqinisekisiwe, khona-ke kuyadingeka ukukhetha uhlelo lokuvikela ulwazi ngokuhambisana nokuvikelwa kwe-ultrasound, okuchazwe ngokucacile :
Izinyathelo zobuchwepheshe zokuvikela idatha yomuntu siqu zisetshenziswa ngokusebenzisa amathuluzi okuvikela ulwazi, okuhlanganisa amathuluzi esofthiwe (hardware) asetshenziswa kuwo, anemisebenzi yokuphepha edingekayo.
Lapho usebenzisa amathuluzi okuvikela ulwazi aqinisekisiwe ngokuya ngezidingo zokuphepha kolwazi ezinhlelweni zolwazi:
Iqiniso: Umthetho awudingi ukusetshenziswa okuyimpoqo kwemishini yokuvikela eqinisekisiwe.
Inganekwane 6. Ngidinga ukuvikelwa kwe-crypto
Kukhona ama-nuances ambalwa lapha:
- Abantu abaningi bakholelwa ukuthi i-cryptography iyisibopho kunoma iyiphi i-ISPD. Eqinisweni, kufanele zisetshenziswe kuphela uma opharetha engaziboni ezinye izindlela zokuzivikela ngaphandle kokusebenzisa i-cryptography.
- Uma ungeke ukwazi ukwenza ngaphandle kwe-cryptography, kuzomele usebenzise i-CIPF egunyazwe yi-FSB.
- Isibonelo, unquma ukusingatha i-ISPD efwini lomhlinzeki wesevisi, kodwa awuyithembi. Uchaza okukukhathazayo ngemodeli esongelayo kanye nesigebengu. Unedatha yomuntu siqu, ngakho-ke unqume ukuthi i-cryptography ukuphela kwendlela yokuzivikela: uzobethela imishini ebonakalayo, wakhe iziteshi ezivikelekile usebenzisa ukuvikelwa kwe-cryptographic. Kulokhu, kuzodingeka usebenzise i-CIPF egunyazwe yi-FSB yaseRussia.
- I-CIPF eqinisekisiwe ikhethwa ngokuhambisana nezinga elithile lokuphepha ngokusho .
Nge-ISPDn nge-UZ-3, ungasebenzisa i-KS1, KS2, KS3. I-KS1, isibonelo, i-C-Terra Virtual Gateway 4.2 yokuvikela iziteshi.
I-KC2, i-KS3 imelwe kuphela isofthiwe nezinhlelo zehadiwe, njengalezi: Umxhumanisi we-ViPNet, i-APKSH "Izwekazi", i-S-Terra Gateway, njll.
Uma une-UZ-2 noma 1, uzodinga izindlela zokuvikela i-cryptographic zekilasi KV1, 2 kanye ne-KA. Lawa ama-software athile kanye nezinhlelo ze-hardware, kunzima ukusebenza, futhi izici zabo zokusebenza zinesizotha.
Iqiniso: Umthetho awukuphoqi ukusetshenziswa kwe-CIPF egunyazwe yi-FSB.
Source: www.habr.com