Trong mot bai phat bieu quan trong tai Hoi nghi bao mat Hack in the Box dien ra tai Kuala Lampua (Malaysia) hoi thang truoc, Bruce Schneiver – truong phong cong nghe cua hang cung cap dich vu bao mat quan ly Counterpane Internet Security da xac dinh 10 khuynh huong tac dong den bao mat thong tin ngay nay. 1. Thong tin co gia tri hon. Amazon.com tin tuong vao thong tin de thuc hien mua ban sach truc tuyen de dang qua he thong mua ban “mot cu click”. Tuong tu, hoat dong kinh doanh cua Pets.com cung phat trien nhanh chong voi quan diem co so du lieu khach hang cua cong ty “la thu quy gia nhat ma ho co”, Bruce noi. Thong tin cung co gia tri trong dieu khien truy cap nhu cung cap chuc nang dang nhap don va tham dinh cho nguoi dung, buoc thuc thi cac dieu luat da quy dinh, su dung thong tin giup tim ra toi pham va thu thap chung cu. 2. Mang tro thanh co so ha tang then chot. Internet von khong duoc xay dung de tro thanh co so ha tang then chot. “Dieu nay chi moi xay ra gan day”. Cac he thong co tam quan trong cao khong ngung chuyen sang khung thiet ke cho Internet. Internet da giup cac cong ty van hanh hieu qua hon, de dang trong giao tuyep giua nguoi voi nguoi. Nhung cung co nhung moi nguy hiem kinh te de doa thuc su trong do. “Neu muc su dung Internet giam, hay mot bo phan cua Internet giam hieu suat, no thuc su anh huong rat lon toi nen kinh te”. 3. Nguoi dung khong tu kiem soat thong tin cua minh mot cach phu hop Chang han cac hang cung cap dich vu Internet kiem soat thong tin nguoi dung qua ban ghi luu lai tren website nguoi do ghe tham va thu dien tu gui - nhan cua ho. Cung nhu the mot so hang phan phoi di dong luu lai ban copy so dien thoai khach hang tren server cua ho. “Co nhieu gia tri trong thong tin ve ban. Nhung ban khong kiem soat duoc tinh bao mat cua no tham chi voi nhung thong tin ca nhan nguy hiem nhat”. 4. Hoat dong hacking mang tinh chat toi pham chuyen nghiep ngay cang tang Hacking khong con la hoat dong “doa ma” nua. Nhung cuoc tan cong mang tinh to chuc do toi pham chuyen nghiep dung dau ngay cang tang theo khuynh huong loi nhuan. “Tinh chat tu nhien cua cac cuoc tan cong da thay doi, vi doi thu chung nham toi dang thay doi”. Nhung cuoc khai thac lien quan den kieu tan cong DoS (denial of server) va phishing la hai vi du dien hinh cua hinh thuc tan cong toi pham. Hon nua, co han mot thi truong den cho cac cuoc khai thac, cho phep ke tan cong tham nhap vao cac he thong IT tong hop dau nao. 5. Tinh phuc tap la ke thu cua ban “Cac he thong ngay cang phuc tap hon thi muc an toan cang giam di”. Schneirer con goi Internet la “bo may phuc tap nhat chua tung duoc xay dung”. Tinh nang nang cao trong cong nghe bao mat don gian khong theo kip su phat trien cua Internet. “Bao mat ngay cang tot hon, nhung tinh phuc tap la nguyen nhan cho nhung dieu toi te nhat con phat trien nhanh hon”. 6. Tan cong nhanh hon va loi Cac lo hong va diem yeu bi khai thac duoc phat hien nhanh hon kha nang va loi cua cac nha san xuat. O nhung truong hop khac, cac lo hong trong he thong nhung nhu router cua Cisco System khong the duoc va loi, de lai lo hong nghiem trong cho cac cong ty. 7. Cac loai sau sinh ra tinh vi chua tung co Chung bao gom cac cong cu danh gia lo hong, ra soat cac hang rao bao ve tong hop de tim ra diem yeu, dung Google de thu thap thong tin mot cach thong minh. “Khuynh huong nay la ket qua cua cac sau dang chuyen minh thanh toi pham”. 8. Diem cuoi la lien ket yeu nhat “Se khong co van de gi doi voi ke hoach tham dinh cua ban neu chiec may tu xa khong dang tin cay”. Trong nhieu truong hop may tinh nam ngoai kha nang bao mat cua cong ty la mat xich yeu nhat. Cac may tinh nay thuong bi tan cong boi sau, phan mem gian diep… la co hoi cho nhung ke tan cong tan dung. 9. Nguoi dung cuoi co the la moi de doa Cac cong ty phat trien phan mem co xu huong bao ve chong nguoi dung cuoi ngay cang tang. Phan mem DRM (digital rights management) la mot vi du. “Nhu chung ta dang thay, bao mat khong bao ho nguoi dung ma la bao ve chong lai nguoi dung”. Mot vi du dien hinh la truong hop cua DRM, duoc cai dat boi Sony Corp. ma khong can su cho phep cua nguoi dung, phan mem tro thanh nguyen nhan de doa may tinh nguoi dung cuoi. “Nguyen tac va dieu le quanh van de nay la mot chien truong lon”, Schneiver con du doan cuoc chien nay se dien ra giua phan mem may tinh bao ve nguoi dung va phan mem duoc thiet ke de bao ve chong lai nguoi dung. 10. Cac dieu le se chuyen huong kiem soat bao mat Khong thieu nguyen tac chi dan mot cong ty nen dieu khien du lieu nhu the nao. Cac dieu luat nhu Sarbanes – Oxley Act se buoc moi nguoi phai tuan thu che do kiem soat bao mat tong hop. By T.Thu (Theo IDG) Article source http://w4rum.com/105.t
|