{"id":25124,"date":"2019-06-04T11:51:30","date_gmt":"2019-06-04T10:51:30","guid":{"rendered":"https:\/\/www.soitron.com\/?p=25124"},"modified":"2023-11-16T13:21:20","modified_gmt":"2023-11-16T12:21:20","slug":"pripravte-sa-na-buducnost-bez-hesiel","status":"publish","type":"post","link":"https:\/\/new.soitron.com\/sk\/pripravte-sa-na-buducnost-bez-hesiel\/","title":{"rendered":"PRIPRAVTE SA NA BUD\u00daCNOS\u0164 ,,BEZ HESIEL\u201c"},"content":{"rendered":"

Pod\u013ea spolo\u010dnosti Gartner do roku 2020 akceptuje 90 % organiz\u00e1ci\u00ed fakt, \u017ee ochrana privilegovan\u00fdch \u00fa\u010dtov pred kybernetick\u00fdmi hrozbami je z\u00e1kladn\u00fdm bezpe\u010dnostn\u00fdm pilierom. Pr\u00e1ve tieto \u00fa\u010dty, ktor\u00e9 pou\u017e\u00edvaj\u00fa preva\u017ene administr\u00e1tori, maj\u00fa \u010dasto neobmedzen\u00e9 pr\u00edstupov\u00e9 pr\u00e1va k citliv\u00fdm syst\u00e9mom a\u00a0\u00fadajom. Predstavuj\u00fa tak bezpe\u010dnostn\u00fa slabinu pre v\u00e4\u010d\u0161inu organiz\u00e1ci\u00ed.<\/strong><\/p>\n

\u00a0<\/strong><\/p>\n

ACHILLOVA P\u00c4TA BEZPE\u010cNOSTI<\/h2>\n

Napriek tomu si e\u0161te niektor\u00e9 firmy uchov\u00e1vaj\u00fa k\u013e\u00fa\u010dov\u00e9 inform\u00e1cie v textov\u00fdch s\u00faboroch alebo excelovsk\u00fdch tabu\u013ek\u00e1ch, hesl\u00e1 sa zdie\u013eaj\u00fa a preposielaj\u00fa bez zabezpe\u010denia. Je len ot\u00e1zkou \u010dasu, kedy sa cez kompromitovanie privilegovan\u00e9ho pr\u00edstupu otvor\u00ed cesta \u00fato\u010dn\u00edkom aj do zjavne zabezpe\u010den\u00e9ho syst\u00e9mu.<\/p>\n

\"\"<\/a><\/p>\n

\u00daniky d\u00e1t maj\u00fa \u010dasto \u201ena svedom\u00ed\u201c samotn\u00ed zamestnanci,\u00a0napr\u00edklad ukladan\u00edm s\u00faborov do cloudov\u00e9ho priestoru alebo posielan\u00edm inform\u00e1ci\u00ed cez osobn\u00fd e-mail, \u010d\u00edm ne\u00famyselne vystavuj\u00fa citliv\u00e9 \u00fadaje spolo\u010dnosti ve\u013ek\u00e9mu riziku.<\/p>\n

V roku 2015 bolo a\u017e 56 % vn\u00fatorn\u00fdch incidentov prip\u00edsan\u00fdch ne\u00famyseln\u00e9mu zneu\u017eitiu \u00fadajov<\/strong> a ka\u017ed\u00fdm rokom sa toto \u010d\u00edslo zvy\u0161uje. \u010eal\u0161ou hrozbou s\u00fa aj b\u00fdval\u00ed zamestnanci, respekt\u00edve zamestnanci, ktor\u00ed s\u00fa na odchode. Vedia, ako sa dosta\u0165 k\u00a0citliv\u00fdm inform\u00e1ci\u00e1m a\u00a0aj to, ako legit\u00edmne ob\u00eds\u0165 bezpe\u010dnostn\u00e9 opatrenia spolo\u010dnosti. Tieto pr\u00edpady predstavuj\u00fa s\u00edce len 26 % v\u0161etk\u00fdch incidentov, ale ich rie\u0161enie je \u010dasto n\u00e1kladnej\u0161ie.<\/p>\n

BUD\u00daCNOS\u0164 = PASSWORDLESS<\/h2>\n

L\u00edder v oblasti zabezpe\u010denia spr\u00e1vy a\u00a0riadenia pr\u00edstupov k\u00a0privilegovan\u00fdm \u00fa\u010dtom, spolo\u010dnos\u0165 CyberArk, usporiadala aj tento rok konferenciu Impact 2019<\/a> venovan\u00fa priamo tejto problematike. Prv\u00fdkr\u00e1t sme sa na nej z\u00fa\u010dastnili aj my zo Soitronu.<\/p>\n

\u201eMali sme mo\u017enos\u0165 diskutova\u0165 so sp\u00edkrami aj mimo ofici\u00e1lnych predn\u00e1\u0161ok.<\/em><\/strong>\u00a0<\/span>Zauj\u00edmalo n\u00e1s, ako bude vyzera\u0165 bud\u00facnos\u0165 v \u0161ir\u0161om horizonte. Odpove\u010f ka\u017ed\u00e9ho jedn\u00e9ho, \u010di u\u017e v\u00fdvoj\u00e1ra, architekta alebo mana\u017e\u00e9ra, bola jednozna\u010dn\u00e1. Bud\u00facnos\u0165 bude ,passwordless\u2018, teda bez hesiel.\u201c<\/em><\/strong>\u00a0<\/span><\/p>\n

Stanislav Smol\u00e1r<\/span>,<\/span> riadite\u013e div\u00edzie cyber security<\/a>, Soitron<\/span><\/p><\/blockquote>\n

HESLO, NA KTOR\u00c9 SA NED\u00c1 ZABUDN\u00da\u0164<\/h2>\n

Bez rie\u0161en\u00ed typu CyberArk firmy odovzd\u00e1vaj\u00fa hesl\u00e1 dod\u00e1vate\u013eom \u010di tret\u00edm stran\u00e1m. Nemaj\u00fa pod kontrolou, \u010do sa s nimi \u010falej deje. Takto sa kont\u00e1 m\u00f4\u017eu \u010dasto zneu\u017ei\u0165, nako\u013eko sa na ne zabudne a nepou\u017e\u00edvaj\u00fa sa.<\/p>\n

N\u00e1stroj Allero <\/strong>v\u0161ak dok\u00e1\u017ee prideli\u0165 unik\u00e1tny pr\u00edstup pre konkr\u00e9tnu identitu k ur\u010den\u00e9mu typu zariadenia a na vopred vyhraden\u00fd \u010dasov\u00fd r\u00e1mec. Je to ve\u013emi jednoduch\u00fd proces na princ\u00edpe Just in Time.<\/p>\n

\u201eDostanete e-mail s\u00a0QR k\u00f3dom, ktor\u00fd oskenujete. N\u00e1sledne nain\u0161talujete aplik\u00e1ciu, v\u00a0ktorej nastav\u00edte biometriu (scan tv\u00e1re, prsta…), a\u00a0a\u017e potom dostanete mo\u017enos\u0165 \"\"<\/a><\/strong>prihl\u00e1si\u0165 sa do infra\u0161trukt\u00fary, kde sa autorizujete pr\u00e1ve cez t\u00fato aplik\u00e1ciu. To doteraz nefungovalo. Samotn\u00fd pr\u00edstup na koncov\u00e9 syst\u00e9my prebieha cez be\u017en\u00fd prehliada\u010d. Tento model priniesol zmenu architekt\u00fary samotn\u00e9ho produktu. Cel\u00e9 je to, skr\u00e1tka, postaven\u00e9 na modernej\u0161\u00edch technol\u00f3gi\u00e1ch,\u201c<\/strong><\/em>\u00a0vysvet\u013euje S. Smol\u00e1r.<\/p>\n

Zauj\u00edmav\u00fdm rie\u0161en\u00edm je aj Endpoint Privileged Manager<\/strong>, ktor\u00fd zabezpe\u010d\u00ed, \u017ee pou\u017e\u00edvate\u013e dostane len tak\u00e9 pr\u00e1va, ktor\u00e9 nevyhnutne potrebuje na\u00a0svoju pr\u00e1cu. Ak by potreboval vy\u0161\u0161ie pr\u00e1va, pridelia sa jednorazovo alebo len na ur\u010dit\u00fd \u010das.<\/p>\n

Syst\u00e9my mana\u017ementu hesiel<\/strong> sa dnes st\u00e1vaj\u00fa nevyhnutn\u00fdmi na zv\u00fd\u0161enie a posilnenie bezpe\u010dnosti jednotliv\u00fdch informa\u010dn\u00fdch n\u00e1strojov, ako aj n\u00e1strojov na zabezpe\u010denie legislat\u00edvnej zhody v oblasti auditovania pr\u00edstupov. Ako s\u00fa na tom va\u0161e hesl\u00e1?<\/p>\n

Zdroj: Veracomp<\/em><\/p>\n

\u00a0<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

Pod\u013ea spolo\u010dnosti Gartner do roku 2020 akceptuje 90 % organiz\u00e1ci\u00ed fakt, \u017ee ochrana privilegovan\u00fdch \u00fa\u010dtov pred kybernetick\u00fdmi hrozbami je z\u00e1kladn\u00fdm bezpe\u010dnostn\u00fdm pilierom. Pr\u00e1ve tieto \u00fa\u010dty, ktor\u00e9 pou\u017e\u00edvaj\u00fa preva\u017ene administr\u00e1tori, maj\u00fa \u010dasto neobmedzen\u00e9 pr\u00edstupov\u00e9 pr\u00e1va k citliv\u00fdm syst\u00e9mom a\u00a0\u00fadajom. Predstavuj\u00fa tak bezpe\u010dnostn\u00fa slabinu pre v\u00e4\u010d\u0161inu organiz\u00e1ci\u00ed. \u00a0 ACHILLOVA P\u00c4TA BEZPE\u010cNOSTI Napriek tomu si e\u0161te niektor\u00e9 firmy […]<\/p>\n","protected":false},"author":34,"featured_media":25212,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[33],"tags":[],"news_categories":[370],"class_list":["post-25124","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-clanky","news_categories-bezpecnost"],"acf":[],"yoast_head":"\nPripravte sa na bud\u00facnos\u0165 ,,bez hesiel\u201c - IT Security | Soitron<\/title>\n<meta name=\"description\" content=\"Syst\u00e9my mana\u017ementu hesiel sa st\u00e1vaj\u00fa nevyhnutn\u00fdmi na zv\u00fd\u0161enie a posilnenie bezpe\u010dnosti jednotliv\u00fdch informa\u010dn\u00fdch n\u00e1strojov.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"sk_SK\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Pripravte sa na bud\u00facnos\u0165 ,,bez hesiel\u201c - IT Security | Soitron\" \/>\n<meta property=\"og:description\" content=\"Syst\u00e9my mana\u017ementu hesiel sa st\u00e1vaj\u00fa nevyhnutn\u00fdmi na zv\u00fd\u0161enie a posilnenie bezpe\u010dnosti jednotliv\u00fdch informa\u010dn\u00fdch n\u00e1strojov.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/new.soitron.com\/sk\/pripravte-sa-na-buducnost-bez-hesiel\/\" \/>\n<meta property=\"og:site_name\" content=\"Soitron\" \/>\n<meta property=\"article:published_time\" content=\"2019-06-04T10:51:30+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-11-16T12:21:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/new.soitron.com\/wp-content\/uploads\/2019\/07\/iStock-610855316-1024x682.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"682\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Natalia Jurakova\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Autor\" \/>\n\t<meta name=\"twitter:data1\" content=\"Natalia Jurakova\" \/>\n\t<meta name=\"twitter:label2\" content=\"Predpokladan\u00fd \u010das \u010d\u00edtania\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 min\u00faty\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Pripravte sa na bud\u00facnos\u0165 ,,bez hesiel\u201c - IT Security | Soitron","description":"Syst\u00e9my mana\u017ementu hesiel sa st\u00e1vaj\u00fa nevyhnutn\u00fdmi na zv\u00fd\u0161enie a posilnenie bezpe\u010dnosti jednotliv\u00fdch informa\u010dn\u00fdch n\u00e1strojov.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"sk_SK","og_type":"article","og_title":"Pripravte sa na bud\u00facnos\u0165 ,,bez hesiel\u201c - IT Security | Soitron","og_description":"Syst\u00e9my mana\u017ementu hesiel sa st\u00e1vaj\u00fa nevyhnutn\u00fdmi na zv\u00fd\u0161enie a posilnenie bezpe\u010dnosti jednotliv\u00fdch informa\u010dn\u00fdch n\u00e1strojov.","og_url":"https:\/\/new.soitron.com\/sk\/pripravte-sa-na-buducnost-bez-hesiel\/","og_site_name":"Soitron","article_published_time":"2019-06-04T10:51:30+00:00","article_modified_time":"2023-11-16T12:21:20+00:00","og_image":[{"width":1024,"height":682,"url":"https:\/\/new.soitron.com\/wp-content\/uploads\/2019\/07\/iStock-610855316-1024x682.jpg","type":"image\/jpeg"}],"author":"Natalia Jurakova","twitter_card":"summary_large_image","twitter_misc":{"Autor":"Natalia Jurakova","Predpokladan\u00fd \u010das \u010d\u00edtania":"3 min\u00faty"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/new.soitron.com\/sk\/pripravte-sa-na-buducnost-bez-hesiel\/#article","isPartOf":{"@id":"https:\/\/new.soitron.com\/sk\/pripravte-sa-na-buducnost-bez-hesiel\/"},"author":{"name":"Natalia Jurakova","@id":"https:\/\/new.soitron.com\/#\/schema\/person\/da4bfcbfdc7cb1175aef5d403061c986"},"headline":"PRIPRAVTE SA NA BUD\u00daCNOS\u0164 ,,BEZ HESIEL\u201c","datePublished":"2019-06-04T10:51:30+00:00","dateModified":"2023-11-16T12:21:20+00:00","mainEntityOfPage":{"@id":"https:\/\/new.soitron.com\/sk\/pripravte-sa-na-buducnost-bez-hesiel\/"},"wordCount":635,"publisher":{"@id":"https:\/\/new.soitron.com\/#organization"},"image":{"@id":"https:\/\/new.soitron.com\/sk\/pripravte-sa-na-buducnost-bez-hesiel\/#primaryimage"},"thumbnailUrl":"https:\/\/new.soitron.com\/wp-content\/uploads\/2019\/07\/iStock-610855316.jpg","articleSection":["\u010cl\u00e1nky"],"inLanguage":"sk-SK"},{"@type":"WebPage","@id":"https:\/\/new.soitron.com\/sk\/pripravte-sa-na-buducnost-bez-hesiel\/","url":"https:\/\/new.soitron.com\/sk\/pripravte-sa-na-buducnost-bez-hesiel\/","name":"Pripravte sa na bud\u00facnos\u0165 ,,bez hesiel\u201c - IT Security | Soitron","isPartOf":{"@id":"https:\/\/new.soitron.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/new.soitron.com\/sk\/pripravte-sa-na-buducnost-bez-hesiel\/#primaryimage"},"image":{"@id":"https:\/\/new.soitron.com\/sk\/pripravte-sa-na-buducnost-bez-hesiel\/#primaryimage"},"thumbnailUrl":"https:\/\/new.soitron.com\/wp-content\/uploads\/2019\/07\/iStock-610855316.jpg","datePublished":"2019-06-04T10:51:30+00:00","dateModified":"2023-11-16T12:21:20+00:00","description":"Syst\u00e9my mana\u017ementu hesiel sa st\u00e1vaj\u00fa nevyhnutn\u00fdmi na zv\u00fd\u0161enie a posilnenie bezpe\u010dnosti jednotliv\u00fdch informa\u010dn\u00fdch n\u00e1strojov.","breadcrumb":{"@id":"https:\/\/new.soitron.com\/sk\/pripravte-sa-na-buducnost-bez-hesiel\/#breadcrumb"},"inLanguage":"sk-SK","potentialAction":[{"@type":"ReadAction","target":["https:\/\/new.soitron.com\/sk\/pripravte-sa-na-buducnost-bez-hesiel\/"]}]},{"@type":"ImageObject","inLanguage":"sk-SK","@id":"https:\/\/new.soitron.com\/sk\/pripravte-sa-na-buducnost-bez-hesiel\/#primaryimage","url":"https:\/\/new.soitron.com\/wp-content\/uploads\/2019\/07\/iStock-610855316.jpg","contentUrl":"https:\/\/new.soitron.com\/wp-content\/uploads\/2019\/07\/iStock-610855316.jpg","width":3865,"height":2576,"caption":"Hacker spy your data file"},{"@type":"BreadcrumbList","@id":"https:\/\/new.soitron.com\/sk\/pripravte-sa-na-buducnost-bez-hesiel\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/new.soitron.com\/"},{"@type":"ListItem","position":2,"name":"PRIPRAVTE SA NA BUD\u00daCNOS\u0164 ,,BEZ HESIEL\u201c"}]},{"@type":"WebSite","@id":"https:\/\/new.soitron.com\/#website","url":"https:\/\/new.soitron.com\/","name":"Soitron","description":"Soitron je IT firma s viac ako 30 ro\u010dnou trad\u00edciou.","publisher":{"@id":"https:\/\/new.soitron.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/new.soitron.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"sk-SK"},{"@type":"Organization","@id":"https:\/\/new.soitron.com\/#organization","name":"Soitron","url":"https:\/\/new.soitron.com\/","logo":{"@type":"ImageObject","inLanguage":"sk-SK","@id":"https:\/\/new.soitron.com\/#\/schema\/logo\/image\/","url":"https:\/\/new.soitron.com\/wp-content\/uploads\/2016\/10\/Soitron_logo.png","contentUrl":"https:\/\/new.soitron.com\/wp-content\/uploads\/2016\/10\/Soitron_logo.png","width":224,"height":56,"caption":"Soitron"},"image":{"@id":"https:\/\/new.soitron.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/new.soitron.com\/#\/schema\/person\/da4bfcbfdc7cb1175aef5d403061c986","name":"Natalia Jurakova","image":{"@type":"ImageObject","inLanguage":"sk-SK","@id":"https:\/\/new.soitron.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/1acd0f0b322c56059c32d84e222e637666ee594f4a6dde61c2fc4ac19b571a9c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1acd0f0b322c56059c32d84e222e637666ee594f4a6dde61c2fc4ac19b571a9c?s=96&d=mm&r=g","caption":"Natalia Jurakova"},"url":"https:\/\/new.soitron.com\/sk\/author\/naty\/"}]}},"_links":{"self":[{"href":"https:\/\/new.soitron.com\/sk\/wp-json\/wp\/v2\/posts\/25124","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/new.soitron.com\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/new.soitron.com\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/new.soitron.com\/sk\/wp-json\/wp\/v2\/users\/34"}],"replies":[{"embeddable":true,"href":"https:\/\/new.soitron.com\/sk\/wp-json\/wp\/v2\/comments?post=25124"}],"version-history":[{"count":1,"href":"https:\/\/new.soitron.com\/sk\/wp-json\/wp\/v2\/posts\/25124\/revisions"}],"predecessor-version":[{"id":54084,"href":"https:\/\/new.soitron.com\/sk\/wp-json\/wp\/v2\/posts\/25124\/revisions\/54084"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/new.soitron.com\/sk\/wp-json\/wp\/v2\/media\/25212"}],"wp:attachment":[{"href":"https:\/\/new.soitron.com\/sk\/wp-json\/wp\/v2\/media?parent=25124"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/new.soitron.com\/sk\/wp-json\/wp\/v2\/categories?post=25124"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/new.soitron.com\/sk\/wp-json\/wp\/v2\/tags?post=25124"},{"taxonomy":"news_categories","embeddable":true,"href":"https:\/\/new.soitron.com\/sk\/wp-json\/wp\/v2\/news_categories?post=25124"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}