Amasistimu amaningi e-IT anomthetho oyimpoqo wokushintsha amagama ayimfihlo ngezikhathi ezithile. Lokhu mhlawumbe kuyisidingo esizondwa kakhulu nesingenamsebenzi kakhulu sezinhlelo zokuphepha. Abanye abasebenzisi bamane bashintshe inombolo ekugcineni njengendlela yokugenca impilo.

Lo mkhuba wadala umonakalo omkhulu. Nokho, abantu kwadingeka bakhuthazele, ngoba lokhu ngenxa yokuphepha. Manje lesi seluleko asisasebenzi nhlobo. NgoMeyi 2019, ngisho neMicrosoft ekugcineni yasisusa isidingo sokushintsha kwephasiwedi ngezikhathi ezithile ukusuka ezingeni eliyisisekelo lezidingo zokuphepha zezinguqulo zomuntu siqu nezeseva Windows 10: lapha isitatimende sebhulogi esisemthethweni ngohlu lwezinguquko enguqulweni Windows 10 v 1903 (qaphela umusho Ukulahla izinqubomgomo zokuphelelwa yisikhathi kwephasiwedi ezidinga izinguquko zephasiwedi ngezikhathi ezithile). Imithetho ngokwayo kanye nezinqubomgomo zesistimu Windows 10 Inguqulo 1903 kanye ne-Windows Server 2019 Baseline Security kufakwe kukhithi I-Microsoft Security Compliance Toolkit 1.0.

Ungabonisa la madokhumenti kubaphathi bakho bese uthi: izikhathi zishintshile. Izinguquko zephasiwedi eziphoqelekile zingokwakudala, manje sezicishe zibe ngokusemthethweni. Ngisho nokuhlolwa kwezokuphepha ngeke kusabheka le mfuneko (uma isuselwe emithethweni esemthethweni yokuvikela okuyisisekelo kwamakhompyutha e-Windows).


Ucezu lohlu olunezinqubomgomo zokuphepha eziyisisekelo ze-Windows 10 v1809 kanye nezinguquko ngo-1903, lapho izinqubomgomo ezihambisanayo zokuphelelwa yisikhathi kwephasiwedi zingasasebenzi. Nokho, enguqulweni entsha, ama-akhawunti omlawuli kanye nesivakashi nawo akhanselwa ngokuzenzakalelayo

IMicrosoft ichaza ngokudumile eposini lebhulogi ukuthi kungani ishiye umthetho wokushintsha iphasiwedi oyimpoqo: “Ukuphelelwa yisikhathi kwephasiwedi ngezikhathi ezithile kuvikela kuphela ukuthi igama eliyimfihlo (noma i-hashi) lizontshontshwa ngesikhathi sokuphila kwalo futhi lisetshenziswe umuntu ongagunyaziwe. Uma iphasiwedi ingantshontshwa, asikho isidingo sokuyishintsha. Futhi uma unobufakazi bokuthi igama eliyimfihlo lintshontshiwe, ngokusobala uzofuna ukwenza okuthile ngokushesha kunokuba ulinde kuze kuphele isikhathi ukuze ulungise inkinga."

I-Microsoft iqhubeka nokuchaza ukuthi endaweni yanamuhla akufaneleki ukuvikela ukwebiwa kwephasiwedi usebenzisa le ndlela: “Uma kwaziwa ukuthi iphasiwedi ingase yebiwe, zingaki izinsuku eziyisikhathi esamukelekayo sokuvumela isela sebenzisa leyo phasiwedi eyebiwe? Inani elizenzakalelayo yizinsuku ezingama-42. Ingabe lokho akubonakali njengesikhathi eside ngokuhlekisayo? Ngempela, lesi yisikhathi eside kakhulu, kodwa isisekelo sethu samanje sasibekwe ezinsukwini ezingu-60 - futhi ngaphambili ezinsukwini ezingu-90 - ngoba ukuphoqa ukuphelelwa yisikhathi njalo kuveza izinkinga zakho. Futhi uma iphasiwedi ingantshontshwa ngempela, kusho ukuthi uthola lezi zinkinga ngaphandle kwenzuzo. Ngaphandle kwalokho, uma abasebenzisi bakho bezimisele ukudayisa igama-mfihlo likaswidi, ayikho inqubomgomo yokuphelelwa yisikhathi ezosiza.”

Okunye

I-Microsoft ibhala ukuthi izinqubomgomo zayo zokuphepha eziyisisekelo zenzelwe ukusetshenziswa amabhizinisi aphethwe kahle, aqaphela ukuphepha. Zihloselwe futhi ukunikeza isiqondiso kubacwaningi mabhuku. Uma inhlangano enjalo isebenzise uhlu lwamaphasiwedi avinjelwe, ukuqinisekiswa kwezinto eziningi, ukutholwa kwe-password brute force attack, kanye nokutholwa komzamo wokungena ngendlela exakile, ingabe kudingeka ukuphelelwa yisikhathi kwephasiwedi ngezikhathi ezithile? Futhi uma bengakasebenzisi izindlela zokuphepha zesimanje, ingabe ukuphelelwa yisikhathi kwephasiwedi kuzobasiza?

I-logic ye-Microsoft iyakholisa ngokumangalisayo. Sinezinketho ezimbili:

1. Inkampani isebenzise izindlela zokuphepha zesimanje.
2. Firm hhayi yethule izindlela zokuphepha zesimanje.

Esimweni sokuqala, ukushintsha iphasiwedi ngezikhathi ezithile akuhlinzeki ngezinzuzo ezengeziwe.

Esimweni sesibili, ukushintsha iphasiwedi ngezikhathi ezithile akusizi.

Ngakho-ke, esikhundleni sosuku lokuphelelwa yisikhathi kwephasiwedi, udinga ukusebenzisa, okokuqala, ukuqinisekiswa kwezinto eziningi. Izinyathelo zokuphepha ezengeziwe zibalwe ngenhla: izinhlu zamagama ayimfihlo angavunyelwe, ukutholwa kwamandla anonya kanye neminye imizamo yokungena engaqondakali.

«Ukuphelelwa yisikhathi kwephasiwedi ngezikhathi ezithile kuyisinyathelo sokuphepha sakudala nesiphelelwe yisikhathi", i-Microsoft iphetha ngokuthi, "futhi asikholelwa ukuthi kukhona inani elithile okufanele silisebenzise ezingeni lethu lokuvikela lesisekelo. Ngokuyisusa kusisekelo sethu, izinhlangano zingakhetha okuzifanela kangcono izidingo ezicatshangelwayo ngaphandle kokungqubuzana nezincomo zethu.”

isiphetho

Uma inkampani namuhla iphoqa abasebenzisi ukuthi bashintshe amagama abo ayimfihlo ngezikhathi ezithile, umuntu obukele angacabangani?

1. Inikezwe: inkampani isebenzisa indlela yokuzivikela yakudala.
2. Ukuqagela: inkampani ayizange isebenzise izindlela zokuvikela zesimanje.
3. Isiphetho: lawa maphasiwedi kulula ukuwathola nokusebenzisa.

Kuvele ukuthi ukushintsha amaphasiwedi ngezikhathi ezithile kwenza inkampani ibe ithagethi ekhangayo yokuhlaselwa.

Source: www.habr.com