Bảo vệ dữ liệu phi cấu trúc - Triển khai phương thức tiếp cận hiệu quả

AN TOAN - BAO MAT<br /> <br /> <br /> <br /> <br /> BAO VE DU LIEU<br /> PHICAUTRUC-<br /> Tri^n khai phuong thuc ti^p c$n hi$u qua<br /> DUf LIEU PHI CAU TRUC VA NHQNG Ueu phi cau triic khdng chi la mdt trong nhiing nhan<br /> T H A C H THLtC td chinh lam tang chi phi luu tru CNTT, ma cdn la<br /> Hien nay, dir Ueu dien tir cd mat trong hau nhu nguyen nhan chu chdt lam nay sinh nhung thach<br /> mpi qua trinh kinh doanh cua cac td ehire, doanh thiic ve bao mat va kinh doanh. Nd dang chiu su tan<br /> nghiep (DN) dich vu tai chinh. Du lieu nay ddng vai cong manh me tii cac Vuus va cac phan mem ddc<br /> trd quan trpng trong cac boat ddng hang ngay, tuy hai (Malware).<br /> nhien nhiing rui ro lien quan den nd van chua dupe Cau chuyen Hacker dimg Virus va cac Malware<br /> xem xet, danh 0a va 0ai quyet mdt each tdng the. tan cong he thdng mang may tinh va cac thiet bi<br /> Nhiing dii lieu nhay cam nhu thong tin nhan dang truy nhap dau cudi khdng cdn mdi la nua. Nhiing tac<br /> ea nhan, bao eao tai ehinh dang tiem an nhieu riii ro hai ma chimg gay ra thi that khdn ludng, tang theo<br /> eho cac td chirc. Van de nay ngay cang trd nen phirc cap sd nhan cung vdi vai trd quan trpng cua thdng<br /> tap khi phan Idn cac tin, du Ueu va tdc dp<br /> dii lieu DN, tai 80% tin hpe hoa trong cac<br /> 1ml<br /> (theo IDC), la phi cau Flash III boat ddng san xuat<br /> tnic. E-maU ciia khach fMmaUon kinh doanh cua doanh<br /> hang, cac trudng dang nghiep. Nd cang nguy<br /> van ban nam trong he hiem hon khi mpi hoat<br /> thdng quan ly quan dpng cua td chirc,<br /> hd khach hang (CRM) doanh nghiep ngay<br /> la nhitng thong tin cang gan bd mat thiet<br /> thudc ve dii Ueu phi Database VOT may tinh va mang<br /> cau true. Mat khac, Content may tinh hon. Vdi su<br /> cac kdt qua nghien phat tnen cac img<br /> cim cung eho thay du dung tren Intemet, tdi<br /> Du li$u phi cau true tr6n mOt trang web<br /> <br /> <br /> <br /> TAP CHI CNTT & TT KY 2 ( 1 . 2 0 1 1, |27|<br />  AN TOAN - BAO MAT<br /> <br /> <br /> pham mang ngay cang mang tinh khdng bien 0 0 , Ueu. Viee quyet dinh mdi trudng thich hpp cho luu<br /> va cdng tac phdng chdng su tan cdng eua virus va trii dii Ueu nhay cam va mdi trudng nao duac coi la<br /> malware eang phirc tap, khd khan hon. " truy cap mo" de chi luu tru thdng tin edng cdng la<br /> Cac td chitc thudng gap khd khan tiong viee tia 10 rat quan tipng.<br /> mpt sd cau hdi Uen quan den dit Ueu phi cau nhu: - Truy cap khdng thich hpp, dugc dinh nghia<br /> - Nhiing dii Ueu nao la nhay cam VOT td ehue, DN? la viee nguOT dimg truy cap vao dii Ueu nhay cam<br /> - Dii Ueu nay dupe luu tru d dau? ma khdng duac su cho phep cua chu DN, lam tang<br /> nguy co rd ri dti Ueu nhay cam. Viec truy cap dii Ueu<br /> - Ai ed quyen truy cap vao dii Ueu nay, va lu0 truy<br /> thudng dupe cap quyen, nhung ed the bi thu hdi.<br /> cap nao la thich hpp?<br /> Theo thOT 0an, viec thuc thi nay dan den mdt sd<br /> 40% nguOT tham 0 a vao cude khao sat ve an ninh lupng qua Idn nguOT dimg khdng can thiet cd quyen<br /> thong tin toan cau Ernst & Young eho biet viec thue truy c$p dti Ueu. Cac cdng nghe mm cho phep 0am<br /> thi hay cai tien cac cdng nghe chdng mat mat dii b 0 sd lu0 truy cap bing each su dung phuong<br /> Ueu se la uu tien thir hai cua hp tiong nam 2010. phap thdng ke de thu hdi quyen truy cap eae tai<br /> Tuy nhien, nhiing nd luc bao ve du Ueu chi thue su nguyen ma mdt nguOT diing cu the su dung khdng<br /> thanh cdng khi td chiic, DN kiem soat dupe tat ca hieu qua. Cac khuyen nghi cho 0am truy cap ciing<br /> eae rui ro Uen quan den dii Ueu phi eau tnic cd the dupe xac 0nh tiong qua trinh xem xet quyen,<br /> XAC DINH CAC VAN DE LIEN QUAN DEN tiong dd phat hien va loai bd cac trudng hpp truy<br /> DU" LIEU PHI CAU TRUC cap khong phu hpp khac.<br /> Co ba mdi quan tam ehinh khi de cap den dii Ueu Xay dung mpt mdt chuong trinh bao ve du Ueu<br /> phi cau tnic, dd la mite dp nhay cam cua dii Ueu, vi tri can nam ro cac riii ro Uen quan den ba van de nay,<br /> du Ueu nhay cam va cac lu0 truy cap khdng phu hpp. nham thiet lap viee xac dinh quyen sd hiiu dii Ueu<br /> Nim ro va xac dinh dupe ba van de tien la nhung budc va xay dung mpt chuong trinh bao ve dti Ueu ben<br /> dau tien hudng tOT thuc thi thanh edng mdt chuong viing. Khi tat ea eae van de nay duac kiem soat tdt,<br /> trinh bao ve du Ueu phi eau tnic. vide ap dung mdt tiep can hpp ly de kiem soat truy<br /> - Muc dd nhay cam cua dii Ueu la mdt tiong nhiing nhap, xay dung cac quy trinh tiiuc tiii phu hpp VOT<br /> van de quen thudc Uen quan den cac riii ro eua dii moi trudng cua tiing td chiic, DN la rat can thidt.<br /> Ueu phi eau tnic. Cac td ehiie, DN can xac dinh dau la AP DUNG MOT P H U O N G PHAP HOP LY<br /> eae dii Ueu nhay cam sao cho phu hpp vm moi trudng DE KIEM SOAT TRUY CAP<br /> phap ly eua minh, kha nang chap nhan riii ro va van<br /> Mpt tiong nhiing budc dau tidn la xac dinh chu sd<br /> hda DN. Viec can bang 0u:a tiai nghiem nguOT su dung<br /> hiiu du Ueu DN phu hpp va tao ra mdt mdi tmdng<br /> va thiic thi mpt ehinh sach ve dii Ueu phi eau tnic can<br /> kiem soat ben viing. Chu sd huu dii Ueu cua DN la<br /> phai dupe xem xet ky ludng. Vi du MAC la mpt phuong<br /> nguOT nam dupe cac dii Ueu nhay cam va cd quyen<br /> thue de ban ehe truy cap tOT cac ddi tupng dua vao<br /> quyet dinh nguOT sir dimg nao ed the truy cap vao<br /> muc dp nhay cam eua dii Ueu dupe chira tiong cac<br /> du Ueu. Cac ehiic nang CNTT cd kha nang kiem soat<br /> ddi tupng va quyen ban ( vi dti: su cho phep sir dung<br /> truy cap, nhung tiiudng thieu tiidng tin cantiiietdd<br /> thdng tin bi mat mat - Clearance) eua cac chit the de<br /> dua ra quyet dinh tiny cap phu hop. Cac cdng nghd<br /> truy cap thong tin nhay cam<br /> mOT tiong quan tri dii Udu cd thd thue day qua trinh<br /> - Vi tri dii Ueu nhay cam la mdt thanh phan quan xac dinh chu sd hiiu dii Udu DN va tao ra mdt mdi<br /> tipng tiong chinh sach bao ve dii Ueu phi cau tnic. tiudng chia se tap tin dupe kiem soat. Su ket hpp cua<br /> Nd ciing cho phep viec xac dinh quyen sd hiiu dii eae cdng nghd mai, eae md hmh hda thdng kd, phii<br /> <br /> <br /> 2 8 I TAP CHI CNTT & TT KY 2 (1.2011)<br />  AN TOAN - BAO MAT<br /> <br /> <br /> hop VOT mdt moi trudng phap ly phirc tap cd the day cam. Huy bd kip thdi la rat quan tipng ddi vdi du Ueu<br /> nhanh qua trinh xac dinh chu so hiiu du Ueu DN. Sau phi cau tnic do nhieu du Ueu cd the cu ngay sau khi<br /> dd, chu doanh nghiep ed the thue hien danh 0a truy dupe khOT tao. Dieu chinh eae quy trinh hien tm cho<br /> cap dinh ky, nham 0am sd lupng truy cap qua nhieu cung cap truy rihap, quan ly dii Ueu va phan lorn du<br /> vao kho tap tin, chap nhan hoac tii ehdi yeu cau truy Ueu eho phep viee truy xuat dii Ueu se it 0an doan<br /> cap chuyen tiep. Cimg VOT vide danh 0a truy cap dinh hon khi ed eae yeu eau truy nhap dm, hoac thieu minh<br /> ky, tat ca se 0up kiem soat viee truy cap va ngan chan bach xung quanh viec nhiing ai truy nhap vao tm<br /> nhiing truy nhap khdng can thiet. nguyen 0.<br /> Du Ueu ddng vaitidtrung tam tiong cac td chiie, DN,<br /> XAY D U N G CHU'ONG TRINH BAO VE DQ 0up dap img cac yeu eau quan ly mai va. thiet lap eae<br /> LIEU P H I CAU TRUC DLTA TREN CAC QUY quan 0em ve tangtiudng.Trong khi bao ve du Ueu tii<br /> TRINH HIEN T i \ I lau da la uu tien hang dau, tuy nhien cac nd luc mai<br /> Cac td chiic can than trpng khi trien khai mdt chi tap trung vao cac du Ueu cd eau trite. Hien nay, eae<br /> chuong trinh bao ve du Ueu phi cau tnic ed quy cong nghe mai 0up nam bat, xac dinh sd lupng va<br /> md to Idn. Tuy nhien, cd mpt sd chien thuat ed the quan ly du Ueu phi eau tnic dd dang hon. Dupe thue<br /> lam 0am tac ddng cua nd luc nay. Cac quy trinh day bOT su tang trudng nhanh chdng eua cac dti Ueu<br /> va cdng nghe hien cd cd the va nen dupe ke thiia, phi cau tnic va chi phi luu tru CNTT 0a tang, cac edng<br /> nham 0am b 0 nd luc can thiet de 0ai quyet van de ty dang mong mudn 0ai quyet nhiing thach thiic ve<br /> bao ve du Ueu phi cau tnic. VOT cac nen tang luu trii du Ueu phi cau tnic.<br /> dii Ueu thdng minh nhu Symantec Enterprise VauU VOT mpt chuong tiinh bao ve cautiucdii Ueu tm chd,<br /> 8.0, cac td chitc DN cd the eat 0am chi phi luu trii cac td chitc, DN se dat dupe su tin cay xung quanh<br /> du: lieu phi eau tnic tOT hon 60% nhd su ket hpp eiia nhiing du Ueu nhay cam, noi du Ueu nay dupe luu va<br /> nhung cai tien ve chdng triing lap dii Ueu ciing VOT nhiing ngudi cd quyen truy cap vao nd. Bang each xay<br /> tinh nang tim kiem dien tit; va nhd tiet kiem chi phi dung mdt each tiep can tdng the de quan ly cac nil ro<br /> nang lupng Uen quan. Nd cho phep cac td chiie luu Uen quan du Ueu phi eau tnic, can bang tiach nhiem<br /> trii, quan ly va tim kidm thdng tin tren toan doanh Mnh doanh va xay dung dua tien eae quy trinh hien<br /> nghiep, trd thanh edng cu luu trii ehinh eho nhiing cd, cac td chiic, DN cd the bao ve du Ueu phi cau tiiie<br /> thdng tin phi cau tnic. hi y tudng den hien thue.<br /> Hidn nay, eae td chitc dich vu tai chinh thudng ap<br /> KET LUAN<br /> dung chinh sach kiem soat truy nhap dua tren mdt<br /> ydu cdu truy cap dii Ueu va quy trinh phe duyet. Viec trien khai mdt phuong thitc tiep can hieu qua<br /> Bang each chuye'n cac quyet dinh truy nhap VOT cac 0iip bao ve du Ueu phi eau tiuc mdi khi dupe truyen<br /> chu sd hiiu du Ueu DN, truy cap cd the bi 0 0 han d dan va dupe luu tru d bat cir noi dau la rat can thiet<br /> mdt sd ngu0. Ngoai ra nen cd mdt quy trinh danh ddi vdi eae td chirc, DN. Tuy nhien, phuong thirc tiep<br /> 0a truy cap eho cac img dung cd nguy co eao. Bang can nay phai dam bao cac tieu chi nhu: cat 0am chi<br /> each md rdng quy trinh nay den chia se tap tin, dac phi luutill,may chu vatieuthu nang lupng, ddng thdi<br /> bidt la nhiing img dung ehita dti lieu nhay cam, thi 0up don 0an hoa va tu ddng hoa quy tiuih tim kiem<br /> nguy co rd ri dii heu nhay cam se 0am. thdng tin phue vu eae mue 0ch kmh doanh, phap ly<br /> va quy che<br /> Cudi cimg, eae ehinh sach va thu tuc quan ly vdng<br /> d0 dir Udu cua td ehiic cd the dupe sua ddi, bao gdm Trong Tdm, Manh Himg<br /> huy bd va khPng sit dung dti Ueu phi cau tiuc nhay (Theo: Network.sasia.net)<br /> <br /> <br /> <br /> TAP CHi CNTT&TT KY 2 (1.2011) 29<br />