Anda di halaman 1dari 36

An ninh, An ton v Bo mt trong ng dng CNTT

Vn An ton v bo mt mng v ang l mt ti ht sc nng bng.

h thng my tnh an ton trc mi him ha i hi ngi dng phi nghin cu, u t nhiu cng sc chnh sa t m tng thng s bo mt trong h thng mng ca mnh. Thc hin iu khng d cht no v khng ai dm t v ngc l bit tt c.

An ninh Mng l g?
C nhng lc, v d nh khi bn ri vn phng v nh khi kt thc ngy lm vic, bn s bt h thng cnh bo an ninh v ng ca bo v vn phng v thit b. Dng nh bn cng s c mt ngn cha an ton hoc kha t lu tr cc ti liu kinh doanh mt. Mng my tnh ca bn cng i hi cng mt mc bo v nh vy.

An ninh Mng l g?(tt)


Cc cng ngh An ninh Mng bo v mng ca bn trc vic nh cp v s dng sai mc ch thng tin kinh doanh b mt v chng li tn cng bng m c t vi rt v su my tnh trn mng Internet. Nu khng c An ninh Mng c trin khai, cng ty ca bn s gp ri ro trc xm nhp tri php, s ngng tr hot ng ca mng, s gin on dch v, s khng tun th quy nh v thm ch l cc hnh ng phm php na.

Mc tiu ca an ninh mng?


An ninh Mng khng ch da vo mt phng php m s dng mt tp hp cc ro cn bo v doanh nghip ca bn theo nhng cch khc nhau. Ngay c khi mt gii php gp s c th gii php khc vn bo v c cng ty v d liu ca bn trc a dng cc loi tn cng mng. Cc lp an ninh trn mng ca bn c ngha l thng tin c gi tr m bn da vo tin hnh kinh doanh l lun sn c i vi bn v c bo v trc cc tn cng. C th l, An ninh Mng: Bo v chng li nhng tn cng mng t bn trong v bn ngoi . Cc tn cng c th xut pht t c hai pha, t bn trong v t bn ngoi tng la ca doanh nghip ca bn. Mt h thng an ninh hiu qu s gim st tt c cc hot ng mng, cnh bo v nhng hnh ng vi phm v thc hin nhng phn ng thch hp.

Mc tiu ca an ninh mng?(tt)


m bo tnh ring t ca tt c cc lin lc, bt c u v vo bt c lc no .Nhn vin c th truy cp vo mng t nh hoc trn ng i vi s m bo rng hot ng truyn thng ca h vn c ring t v c bo v. Kim sot truy cp thng tin bng cch xc nh chnh xc ngi dng v h thng ca h .Cc doanh nghip c th t ra cc quy tc ca ring h v truy cp d liu. Ph duyt hoc t chi c th c cp trn c s danh tnh ngi dng, chc nng cng vic hoc cc tiu ch kinh doanh c th khc. Gip bn tr nn tin cy hn .Bi v cc cng ngh an ninh cho php h thng ca bn ngn chn nhng dng tn cng bit v thch ng vi nhng dng tn cng mi, nhn vin, khch hng v cc doanh nghip c th an tm rng d liu ca h c an ton.

Chng ta cn bo v nhng g ?
a. D liu: i vi d liu chng ta phi lu nhng yu t sau: Tnh bo mt: Ch ngi c quyn mi c truy nhp. Tnh ton vn: Khng b sa i, b hng. Tnh kp thi: Sn sng bt c lc no.

Chng ta cn bo v nhng g ?(tt)


b. Ti nguyn: Ti nguyn my c th b li dng bi Tin tc. Nu my tnh ca bn khng c d liu quan trng th bn cng ng ngh rng n khng cn c bo v, Tin tc c th t nhp v s dng n lm bn p cho cc cuc tn cng khc, lc th bn s lnh trch nhim l th phm!

Chng ta cn bo v nhng g ?(tt)


c. Danh ting: Nh trn ni Tin tc c th dng my ca ngi s dng tn cng ni khc, gy tn tht v uy tn ca ngi s dng .

C nhng kiu tn cng no ?


C rt nhiu cch tn cng bit cng nh cha bit, tuy nhin hin nay c th chia lm 4 loi chnh: a. Tn cng trc tip Phn ln s tn cng l trc tip, tc l dng mt my tnh tn cng trc tip my tnh khc.

C nhng kiu tn cng no ?(tt)


D tm User name v Password, bng cch th vi mt s t thng dng nh "xin chao", ""hello", dng tn ngi thn, ngy sinh, s in thoi... V vy bn nn trnh vic t mt khu qu n gin hoc thuc nhng kiu k trn.

C nhng kiu tn cng no ?(tt)


Dng chng trnh gii m cc file cha mt khu trn my tm ra mt khu, thng nhng mt khu t qu ngn s b pht hin bng cch ny. Bn nn t mt khu ca mnh ti thiu l 6 k t, cng di cng tt..

C nhng kiu tn cng no ?(tt)


Dng li ca chng trnh ng dng hay h iu hnh lm cho cc ng dng hay h iu hnh b t lit. iu ny cng ging nh gt chn a-sin ca con ngi vy, r rng c th coi l im yu ca c th con ngi, nu b li dng n s gy ra nhng tc hi khn lng. Phn mm cng th, cng c nhng im yu c th l v tnh hay hu , ni Tin tc c th li dng tn cng.

C nhng kiu tn cng no ?(tt)


b. Nghe trm Khng dng my trc tip m thng qua cc dch v mng, bng cch ny Tin tc c th nghe c nhng thng tin c truyn qua li trn mng, nh phn gii thiu cp, nu c cp knh "s" th bn s thy vic nghe trm nh th qu l rt d dng. Hy hn ch "ni" nhng g quan trng i vi bn trn mng. Nghe trm password. Cng vi cch nh trn, Tin tc c th ly c mt khu ca ngi s dng, sau chng truy nhp mt cch chnh quy vo h thng, n cng ging nh l ly c cha kho, sau ng hong m ca v khun ra.

C nhng kiu tn cng no ?(tt)


c. Gi mo a ch Thng th cc mng my tnh ni vi Internet u c bo v bi Bc tng la, Bc tng la c th coi nh ci ca duy nht m ngi i vo nh hay i ra khi cng u bt buc phi qua (nh ca khu sn bay). Nh vy nhng ngi trong nh (trong mng) s c s tin tng ln nhau, tc l c php dng tt c mi th trong nh (dng mi dch v trong mang). Cn nhng ngi bn ngoi s b hn ch ti a vic s dng c trong nh . Vic ny lm c nh Bc tng la.

C nhng kiu tn cng no ?(tt)


Gi mo a ch l ngi bn ngoi (my tnh ca tin tc) s gi mo mnh l mt ngi trong nh (t t a ch IP ca mnh trng vi mt a ch no mng bn trong). Nu lm c iu th n s c i x nh mt ngi (my) bn trong, tc l c lm mi th, t tn cng, ly trm, ph hu thng tin...

C nhng kiu tn cng no ?(tt)


d. V hiu ho cc dch v Lm t lit mt s dch v no . Thng cch tn cng ny c gi l DoS (Denial of Service) hay "t chi dch v". Cch tn cng ny li dng mt s li ca phn mm, Tin tc ra lnh cho my tnh ca chng a nhng yu cu "d dng" ti nhng my server trn mng. Vi yu cu "d dng" nh vy cc server tip nhn yu cu s b t lit. C th v nh vic bn M mn la tr con bng nhng li ngon ngt, cn nn nhn th cha ln hiu nhng th on v t nguyn i theo chng. Nu cc chu nh c ngi ln ch cho bit nhng th on th chc chng s wocj bo v, iu ny cng nh vic dng Bc tng la bo v mng my tnh.

C nhng kiu tn cng no ?(tt)


Tn cng t chi dch v cng c th hon ton l nhng yu cu hp ln. V d nh virus my tnh c ci t chc nng tn cng nh ni ti trong phn v virus, ti mt thi im t hng triu my tnh trn mng, tt c ng thi yu cu mt server phc v, v d cng vo trang web ca Nh Trng. Nhng yu cu ny l hon ton hp l, nhng ti cng mt thi im c qu nhiu yu cu nh vy, th server

Mt v d v tn cng dch v nguy him nht hin nay l Flash DDOS

C nhng kiu tn cng no ?(tt)


e. Yu t con ngi K tn cng gi v lin lc vi ngi qun tr mng yu cu i mt khu ca User no , nu ngi qun tr mng lm theo th v tnh tip tay cho tin tc (v khng nhn thy mt, nn anh ta c tng y chnh l ngi s dng hp php). V vy nu bn l qun tr mng phi tuyt i cn thn, khng nhn cc yu cu qua in thoi.

C nhng kiu tn cng no ?(tt)


Tng t k tn cng c th yu cu qun tr mng thay i cu hnh h thng tip chng c th tin hnh c cc cuc tn cng. My mc khng th chng c kiu tn cng ny, ch c s cnh gic v bin php gio dc mi c th gii quyt c. Nh vy yu t con ngi lun l im yu nht trong cc h thng bo mt.

Nhng k tn cng l ai ? Hacker hay Tin tc


C rt nhiu k tn cng trn mng Internet, kh m phn loi y c, tuy nhin c th chia ra nh sau: a. Ngi qua ng Nhng k bun chn vi cng vic hng ngy, mun gii tr bng cch t nhp vo cc h thng mng. Chng thch th khi t nhp c vo my tnh ca ngi khc m khng c php. Bn ny khng ch nh ph hoi, nhng nhng hnh vi xm nhp v vic chng xo du vt khi rt lui c th v tnh lm cho h thng b trc trc.

Nhng k tn cng l ai ? Hacker hay Tin tc(tt)

b. K ph hoi Chng ch nh ph hoi h thng, vui th khi ph hoi ngi khc. Gy ra nhng tc hi ln, rt may trn th gii khng nhiu k nh th.

c. K ghi im Nhng k mun khng nh mnh qua nhng kiu tn cng mi, s lng h thng chng thm nhp... Chng thch t nhp nhng ni ni ting, canh phng cn mt.

Nhng k tn cng l ai ? Hacker hay Tin tc(tt)

Nhng k tn cng l ai ? Hacker hay Tin tc(tt)


d. Gin ip Truy nhp n cp ti liu phc v nhng mc ch khc nhau, mua bn, trao i... Vy cn Tin tc (Hacker) l g? chng thng chnh l nhng nhm ngi k trn, ngoi ra cn bao gm nhng k to ra virus, b kho phn mm. Tin tc thng l nhng ngi tng i am hiu h thng, tuy nhin cng c nhng Tin tc khng hiu bit nhiu v h thng, chng ch n thun l dng nhng cng c c sn t nhp h thng, b kho phn mm, to ra virus... Tu chung li chng l mt s nhi c kin thc nhng li em kin thc phc v cho nhng mc ch xu v chng cn phi b ln n. Ngoi ra hn ch s pht trin ca Tin tc, nht thit phi dng ti php lut nghim minh v bin php gio dc nhng ngi tr tui trong ngnh CNTT ngay khi cn trn gh nh trng.

Cc chin lc an ton thng tin


Bn c th thy Internet mt an ton th no, v vy cn tuyt i tun theo cc quy tc sau khi xy dng h thng, nht l nhng h thng mng ln, quan trng: a. Quyn hn ti thiu Ch nn cp nhng quyn nht nh cn c vi cng vic tng ng v ch nh vy. Tt c cc i tng: ngi s dng, chng trnh ng dng, h iu hnh... u nn tun theo nguyn tc ny.

b. n gin H thng phi n gin d hiu v t mc li. D hiu: S gip cho d dng nm c n hot ng nh th no, c nh mong mun hay khng. t mc li: Cng phc tp th cng nhiu li c th xy ra. ==> chnh v vy m Firewall thng chy trn cc h thng loi b ht nhng g khng cn thit.

Cc chin lc an ton thng tin(tt)

Cc chin lc an ton thng tin(tt)


c. Bo v theo chiu su Nn p dng nhiu ch an ton khc nhau. Nhiu lp an ton khc nhau, chia thnh cc vng bo v bao ly nhau, mun tn cng vo bn trong th phi ln lt qua cc lp bo v bn ngoi --> bo v ln nhau.

Cc chin lc an ton thng tin(tt)


d. Nt tht Bt buc mi thng tin phi i qua mt ca khu hp m ta qun l c --> k c k tn cng. Ging nh ca khu quc t, ti nhn vin ca khu s kim sot c nhng th a ra v vo. Nt tht s v dng nu c mt con ng khc na.

Cc chin lc an ton thng tin(tt)


e. Tnh ton cc Phi quan tm ti tt c cc my trong mng, v mi my u c th l bn p tn cng t bn trong. Bn thn mt my c th khng lu tr nhng thng tin hay dch v quan trng, nhng n b t nhp th nhng my tnh khc trong mng cng d dng b tn cng t trong ra.

Cc chin lc an ton thng tin(tt)


f. Tnh a dng Nu tt c cng dng mt h iu hnh hay mt loi phn mm duy nht th s c th b tn cng ng lot v khng c kh nng hi phc ngay (v d nh tt c cc my cng dng WindowsXP, n mt ngy no ngi ta pht hin c th lm cho WindowsXP xo d liu trn my mt cch bt hp php, lc Microsoft cng cha c bn sa li, th bn ch cn cch l tt ht cc my trn mng ca mnh i v ch n khi no Microsoft a ra bn sa li). Nu dng nhiu loi h iu hnh cng nh phn mm ng dng th hng ci ny, ta cn ci khc.

Bc tng la - Firewall
L k thut c tch hp vo mng chng li s truy cp tri php, nhm bo v ngun thng tin ni b, hn ch xm nhp. Internet Firewall l thit b (phn cng, mm) nm gia mng ni b Intranet (cng ty, t chc, quc gia..) v Internet. Thc hin vic bo mt thng tin ca Intranet t th gii Internet bn ngoi. Thng c xy dng trn h thng mnh, chu li cao.

V d c bn v firewall

Bc tng la Firewall(tt)
Tm li, qua nhng phn trc bn bit chng ta c nhng nguy c g, cn chng nhng g. Firewall chnh l thit b (c phn cng v mm) nhm thc thi nhng iu , tuy nhin khng phi l tt c. T tng c bn ca Firewall l: t cu hnh mng sao cho tt c cc thng tin vo ra mng u phi i qua mt my c ch nh, v chnh l Firewall, y Firewall s quyt nh cho nhng g i qua v cm nhng g m bo an ton.

Cui cng l 10 li khuyn v bo mt c c kt trong nhiu ti liu


1. Khuyn khch hoc yu cu nhn vin chn mt khu khng qu r rng. 2. Yu cu nhn vin thay i mt khu sau 90 ngy. 3. m bo rng chng trnh qut virus ca bn l mi nht 4. Hng dn nhn vin v hu qu bo mt thng qua vic gi mail 5. Thc thi gii php bo mt mng y v ton din 6. nh gi tnh hnh bo mt mt cch thng xuyn 7. Khi mt nhn vin khng cn lm vic ti cng ty, hy xo b quyn truy cp mng ca anh ta 8. Nu nhn vin lm vic ti nh, hy cung cp dch v qun l bo mt tp trung 9. Cp nht phn mm Web Server ca cng ty mt cch thng xuyn 10.Khng thc thi nhng dch v mng cha cn thit

Anda mungkin juga menyukai