3 giải pháp quản lý an ninh thông tin (SIM)

1 r • BiiB .^<br /> i i a i a i a i o i B i 4 ' • n t a aoi<br /> <br /> <br /> GlAl PHAP QUAN Lf ^^->^<br /> fl/v /vi/vH THONG TIN (SIM)<br /> <br /> cac edng nghd dupe quan ly an ninh thong tin thieu mdt sd tuy ehpn eho viec trien khai edng nghe<br /> (SIM- Security Information Management) nham 0ai SIM. Ddng thm dua ra nhiing g0 y tham khao 0up<br /> quyet cac van de thudng gap trong khi trien khai cac td chitc va doanh nghiep cd the lua ehpn mdt<br /> nhieu he thdng bao mat cung nhu cho cac img dung 0ai phap chien lupc trien khai cdng nghe SIM tdi<br /> dang chay ben trong mang eiia mdt td chitc. uu nhat.<br /> Mac dii hien nay, ed rat nhieu cdng nghe de trien<br /> khai SIM. Tuy nhien, nhu cau ve bao mat thong tin NHU'NG THACH THLTC CHUNG D O I V O I<br /> cua cac doanh nghiep va td ehue la khac nhau, do CONG NGHE S I M<br /> dd, lira ehpn edng nghe nao eho phu hpp va hieu Cdng nghe SIM thuc hien viec thu thap, phan tieh<br /> qua la mpt bai toan khong don 0an. Bai bao 0 0 va bao eao ve du lieu tu cac 0ai phap da diem. Mdi<br /> thanh phan trong he thdng deu ed su phue tap rieng<br /> ciing nhu eae van de trong boat ddng, nen se la hpp<br /> ly khi hpp nhat thong tin cua cac thanh phan dd<br /> VOT cac thach thue dang tdn tai cua cac he thdng<br /> SIM. Do dd, mpt each tdng quat ed the phan loai cac<br /> thach thirc dd thanh ba mang:<br /> + Nhung thach thirc bd sung<br /> + Qua tai thdng tin<br /> + Nhiing van de bat ngd trong quan ly<br /> Nhu'ng thach thuTc bo sung<br /> Dti lieu dupe cung cap bi nhieu ngudn he thdng<br /> <br /> <br /> 3 8 I TAP CHI CNTT & TT KY 2 (1.2011)<br />  CONG NGHE - GIAI PHAP<br /> <br /> <br /> dupe danh 0a. Mae dii cac nha cung cap SIM se<br /> khang dinh nhiing tieu chuan nguyen tac co sd ciia<br /> bp ed the quet het tat ca cac tinh hudng. Nhung nhu<br /> eau eiia cac nha quan tri he thdng lai can xu ly tinh<br /> hudng VOT cac quy tac da dupe dieu chuih. Chinh vi<br /> vay su cd san eae chuyen 0a cua cac td ehiie la yeu<br /> td dupe can nhac dau tien; Ching ban nhu voi cac<br /> 0ai phap On-Demand thi viec ed sSn mpt bp quy<br /> tac rpng, cho phep tu 0eu ehinh cac quy tac se 0up<br /> mang ciia ban cd the can bang su cung cap vdi 10<br /> nhuan tdt nhat.<br /> khac nhau, ma nhiing ngudn nay dua ra du lieu rat<br /> ngau nhien. Ngoai ra cdn phai quan tam den cac Qua tai thong tin<br /> mire mang. Do vay de thue thi mdt he thdng SIM Tinh trang qua tai thong tin la mpt thach thirc<br /> ddi hdi phai lap ke hoach can than nham dam bao khac ddi v0 tuih hieu qua eiia SIM. cae img dung<br /> thanh cdng eho viec cai dat va eau hinh. Cu the, bao mat cd the tao ra mpt lupng Idn dti Ueu va su<br /> can quan tam cac van de sau: : kien can luu 0ti. Tuy nhien, trong cac hoat ddng<br /> + Dii Ueu se dupe thu thap tii eae he thdng ngudn quan tri mang va quan ly be thdng thi viec sit dung<br /> nhu the nao? du lieu tho dupe 0di ban. Trong cac boat ddng nay,<br /> + Du Ueu dupe thu thap thudng xuyen nhu the nao? thay vi dupe nhan cac du lieu da xit ly thi chiing<br /> phai nhan du lieu tho, cung cap thong tin ve cac su<br /> + Lieu ed the can bang nhu cau cap nhat kip thm<br /> kien muc eao ddng thOT dua ra cac phan img phii<br /> he thdng SIM vdi cac ban che ve bang thong va tai<br /> hpp vdi cac su: kien dd.<br /> nguyen mang khac khong?<br /> Nhiing van de nay cd the dd dang dupe quan ly Van de qua nhieu du Ueu va khong dii thong tin<br /> ddi VOT nhiing td ehue ma ed san ngudn luc va nhiing cd the xay ra khi cac quy tac la qua chung chung.<br /> nhan vien chuyen 0a trong Unh vuc SIM. Trong khi Vi du, luu 0u va bao cao thong tin quet tren tat ca<br /> ddi vol cac td chitc khac thi mpt dich vu thue ngoai<br /> (Outsourced) hoac theo yeu eau (On-Demand) cd<br /> the dupe cho la da cung cap cac kien thitc bao mat<br /> can thiet.<br /> Ngoai chitc nang phdi hpp vdi cac he thdng<br /> ngudn thong tin, cac nha quan tri he thdng SIM se<br /> phai dieu ehinh cac quy tac cho viee phan tieh du<br /> lieu dua tren mdt dau vao. Hieu suat be thdng bi can<br /> trd bOT tinh thieu hieu qua trong co sd nguyen tac,<br /> ma ddi lire ddi hdi phai eo cau lai theo cac muc dp<br /> khac nhau. Chang han, mdt tap hpp eae quy tac chi<br /> cd the ap dung neu eae dieu kien nhat dinh dupe<br /> dap img, trong tmdng hpp ly tudng nhiing dieu kien<br /> dd dupe danh 0a chi mpt lan, va neu chung khong<br /> dap img dupe thi cac quy dinh lien quan se khong<br /> <br /> <br /> <br /> TAP CHI CNTT & T r K Y 2 (1.2011) 39<br />  CONG NGHE - GIAI PHAP<br /> <br /> <br /> cac edng vanh dai mang se cung cap qua nhieu dti<br /> Ueu. Trong khi dd, neu chu y den eae edng ma cd<br /> nhieu nguOT sit dung se thu dupe eo sd du Ueu hiiu<br /> ich hon nhieu. Dac biet, neu dit Ueu dd ed the tuong<br /> quan v0 cac su kien khac ma e 0 ra mdt muc tieu<br /> tan cdng nham vao co sd du Udu cua may chu. Mat<br /> trm cua van de nay cd the lam 0am sd lupng thdng<br /> tin dupe tao ra.<br /> Quy tac xac dinh trong pham vi hep cd the tianh<br /> tmh trang qua tat thdng tin nhung rat ed the bd la<br /> eae mau quan trpng tiong luu lupng va lorn tni eae<br /> thong Un hiiu ich. Mue dich la thu thap eang nhieu<br /> den nhiing thay ddi ve luu lupng mang va cac su<br /> eae thdng tui ed Uen quan den mdt su Men eang tdt,<br /> kien Uen quan. Do dd ddi hoi he thdng SIM phai cai<br /> de cung cap thong tin chi tiet va hpp nhat thong tin<br /> tien hon niia.<br /> dd nham 0am thOT 0an va nd liie can thiet ciia mdt<br /> nhan vien quan tri mang tiong viec tuong quan cac Nhu vay, ed rat nhieu thach thiic, khd khan ma<br /> phan rieng biet eiia thong tin. cac doanh nghiep hay td ehue da, dang va se trien<br /> khai edng nghe quan ly an ninh thong tin phai ddi<br /> Tdm lai, eae van de qua tai thdng tin, Ipe dti Ueu<br /> mat. Nhung it nhat tai th0 0em nay, hp cd nhieu<br /> va ehung eat du Udu ed Uen quan de tao thanh cac<br /> Ilia ehpn de 0ai quyet nhiing van de dd.<br /> thdng tin hiiu diing la nhirng thach thuc ma eae nha<br /> quan tri SIM se Uen mc phai ddi mat.<br /> Nhu'ng van de bat ngd trong quan ly CAC G I A I PHAP CONG NGHE TRONG<br /> QUAN LY AN N I N H THONG T I N<br /> Nhirng thach thue ky thuat ve an ninh la kha dd<br /> 0eu, hoac it nhat la du doan dupe. Nhung nhiing cac 0ai phap dupe dua ra de thiie 0en SIM bao<br /> van de trong quan ly ma eae doanh nghiep va td gdm: 0ai phap tu lam (in-house), 0ai phap thue<br /> ehue dua ra ma khong phai liic nao cung ro rang, ngoai (outsource) va 0ai phap theo yeu eau (on-<br /> cac rao can ky thuat dupe mo ta tmdc day 0 kem demand).<br /> v0 chi phi ed the dd dang bi danh 0a khdng dimg Giai phap "In-House"<br /> miic. Dac biet la tmdng hpp Uen quan den thiic thi VOT mpt 0ai phap "In-house", cac doanh nghiep<br /> SIM, ma nguyen nhan la do ehinh ban ehe ve kinh dam nhan toan bd trach nhiem tir viec thuc thi, cau<br /> nghiem ddi v0 viee dieu ehinh cac tac vu va chinh 0nh va duy tii he tiidng SIM. Dieu nay ddi hdi cac<br /> sach ngan chan qua tai thong tin eua cac td ehiic. td Chile phai Uiue hoac tu phat trien chuyen 0 a eho<br /> cac van de bat ngd trong quan ly eiing anh hudng minh hoac sit dung tu van de ho tip toan bd chu<br /> den chi p 0 tiong 0ai doan trien khai ban dau. trinh cua SIM.<br /> Ngoai ra do mpt sd nhan vien ed Unh vuc chuyen L0 the cua viec tu phat trien chuyen 0 a la cac<br /> mdn khac nhau cd the dupe yeu eau eimg chan nhan vien se ed dupe kien thue ve moi tmdng kinh<br /> doan van de, 0eu e0nh cac quy tac va phan tieh doanh va eo sd ha tang. Dac biet, nhitng kien tiiiic<br /> dau ra ciing la nguyen nhan dua den eae van de bat nay ed the htm ich ddi v0 viec 0eu chinh va phan<br /> ngd tiong quan ly. Trong cac boat ddng kinh doanh tich cac dau ra ciia he thdng SIM. Nhupe diem eua<br /> thi viee thay ddi dich vu va cau hinh mang se dan phuong phap nay la can them tii0 0an va chi phi<br /> <br /> <br /> <br /> 4 0 I TAP CHI CNTT & TT KY 2 (1.2011)<br />  CONG NGHE - GIAI PHAP<br /> <br /> de phat tiien chuyen 0a ve SIM. Thdi 0an de dao<br /> mpt 0ai phap SIM tipn vpn hi vide eau hinh su<br /> tao cd the lam cham viee trien khai va lam cho<br /> dung, xay dung eo sd quy tic den viee duy tri kiem<br /> mang dd cd nguy co bi tdn thuong. soat CO sd ha tang eae 0ch vu co ban va phan tich<br /> cac nha tu van ed the hd trp de cung cap chuyen 0am sat cae mdt de dpa. Mo hinh nay boat dpng tdt<br /> mdn nghiep vu ma khdng gay ra su cham tie tiong eho nhiing khach hang mudn cd mdt 0ai phap cWa<br /> viec dao tao. Tat nhien, ngay ea vdi nhung nhan khda tiao tay va khdng yeu eau cae quy tic va ehinh<br /> vien dupe dao tao bm ban thi cd mdt sd 0eu hpe sach rieng eho nhan vien eua hp.<br /> dupe bang kinh nghiem van tdt hon. Cae nha tu<br /> Giai phap "On-Demand"<br /> van cd the' dua ra nhirng bm hpc kiiih nghiem rat<br /> khd gap phai tiong nhiing tinh hudng tmdc dd. Tuy cae 0ai phap "On-Demand" tuong tu nhu 0m<br /> nhidn, nhupe 0dm eua eae chuyen 0a tu van la phap "Outsourced" dd la ea sd ha tang dupe quan<br /> khong ed kien thiie chuyen sau ve doanh nghiep ly bOT nha cung cap. Nhung ddi VOT 0ai phap "On-<br /> cua ban. Ngoai ra, td chirc hay doanh nghiep eua Demand" thi khach hang dupe kiem soat tdt hon<br /> ban phai tia them cac khoan chi phi ma rat ed the qua ehinh sach, quy tic thue thi va dupe sir dung<br /> cac khoan chi phi nay se phat trien nhanh chdng bOT he thdng SIM. Mo hinh nay boat ddng tdt eho<br /> VOT eae cam ket md rdng. nhung khach hang mudn thue nha quan ly co sd ha<br /> tang ben ngom trong khi 0u lai quyen kiem soat<br /> Giai phap "Outsourced" ddi VOT eae quyet 0nh mire cao hon ve cac ehinh<br /> Cung cap cac img dung CNTT nhu mpt 0ch vu la sach va quy tic cua SIM. Nhiing 10 the cua mpt mo<br /> mdt mP hinh ngay cang phd bien. Ngay nay, cac hinh "On-Demand" bao gdm kha nang sin sang md<br /> doanh nghiep ed thd thue cae dich vu khac nhau tii rdng va thuc hien nhanh chdng. Cac nha cung cap<br /> nha quan ly quan hp khach hang (CRM- Customer 0ch vu da quan ly mdt co sd ha tang dich vu vi<br /> Relationship Management) va cac img dung co sd vay de trien khai cac boat ddng SIM tai mdt khach<br /> dti lieu de bao mat va quan ly mang. Tham chi cd hang mdi c 0 la mpt sir thay ddi d bien. Trong khi dd<br /> the mua dich vu bao mat rieng diia tren cae yeu cau VOT 0ai phap "In-House" se phai thuc hien day dii<br /> CO ban, ching han nhu tinh nang quet kha nang quy mo. Nen 0ai phap "On-Demand" tiet kiem chi<br /> dd tdn thuang. phi thuc hien cho khach hang. Ngoai ra, mo hinh<br /> Giai phap "outsource" la 0ai phap trong dd mdt nay cung ed quy mo thich hpp de dap img nhu cau<br /> nha cung cap dich vu dam nhiem vide cung cap<br /> <br /> So sSnh cac dac tinh cua cac giai pliap thuc hien SIM<br /> <br /> Cac d$c tinh SIM In-House Outsoorccd On-Demand<br /> Mii^ phi quan ty co so ha • •<br /> tSng cho l^dch hang<br /> Khich Mng k i ^ so&t djch • / •<br /> vvi thdng qua cac chinh sach<br /> vi quy dinh<br /> Phan tich so li^u quan ly ,^ •<br /> khach hing<br /> Khach hang xkc 4nh cac • •<br /> muc tiioa tfau$n dich v\i<br /> (SLA)<br /> Giim ski khich hing qua •/ •/<br /> h^ tfa^g cinh bio SIM<br /> <br /> <br /> <br /> <br /> TAP CHI CNTT&TT KY 2 ( 1 . 2 0 1 1 ) 41<br />  CONG NGHE - GIAI PHAP<br /> <br /> <br /> <br /> <br /> khach hang VOT chi phi hieu qua bon so VOT mpt 0ai - Yeu td ngudn nhan luc va trinh dd: eae nhan<br /> phap "In-house". vien trong doanh nghiep ed dap img dupe ve mat<br /> Viec tra tien de sir dung mo hinh phd bien trong th0 0an va kien thue ky thuat de eau hinh va dieu<br /> cac phan mem ching ban nhu mpt 0ch vu cung ehinh mpt he thdng SIM hay khong?.<br /> cho phep tang nhu cau chi phi du doan va 0am - cae van de quan ly ching ban nhu Ueu doanh<br /> nhu eau chi phi dau tu don 0an de bit dau mpt du nghiep ed thoai mai khi lam vide VOT mpt mo hinh<br /> an SIM. Mpt 10 the cua cac 0ai phap "On-Demand" cung cap dich vu.<br /> la tiep can v0 cae chuyen 0a, nhiing ngudi cd the - Cae van de can den kinh nghiem vi du nhu kinh<br /> dieu chinh va 0up phan tich du lieu SIM. nghiem eua dpi ngu quan ly trong doanh nghiep<br /> Mdi mdt 0ai phap cdng nghe de trien khai SIM trong vide dam phan SLAs.<br /> deu cd nhiing uu, nhupe diem. Van de quan trpng Thudng thi cac 0ai phap cdng nghe cd su thoa<br /> la eae nha cung cap cd dupe nhieu liia ehpn tiong hiep. Trong trudng hpp eua he thdng SIM, dieu quan<br /> trien khai SIM de 0 dd lua ehpn 0ai phap phii hpp trpng la phai xem xet ea van de ky thuat, de dam bao<br /> va tdi uu nhat. Chinh dieu nay da cho phep hp xac 0ai phap lua ehpn phai dap img yeu cau bao mat<br /> dinh cac mdi de dpa va thuc hien quy tie SIM de va cung cap mpt 0ai phap ben viing nhim hd trp<br /> he thdng ciia bp canh tranh dupe ve ea tdc dd, cung eho cae boat ddng kinh doanh eua doanh nghiep.<br /> nhu tam nhin. Phuong phap "On-Demand" cung cap nhirng 10 tiie<br /> cua ea mo hinh "Outsourced" va "In-House", ddng<br /> MOT SO KHUYEN NGHI K H I Ll/A CHON<br /> th0 ed the cung cap phuong phap phu hpp nhat<br /> G I A I PHAP THliC T H I S I M<br /> eho cac doanh nghiep ma mudn 0 u Im mdt sd kiem<br /> Su Ilia ehpn 0tia mpt 0ai phap trong nha va cung cap<br /> soat qua he thdng SIM eua hp ma khong tang them<br /> mdtdichvuedthedupcquyet0nhduatrennbieuyeutd:<br /> ganh nang ddi v0 quan ly co sd ha tang.<br /> - Ngan sach ching ban nhu eae quy vdn ed sin<br /> de thuc hien mdt quy md day du. Thu Thuy<br /> (Nguon RealTimepublishers)<br /> <br /> <br /> <br /> TAP CHI CNTT & TT KY 2 (1.2011)<br />