e92plus security plus spring 2012

Upload: e92plus

Post on 05-Apr-2018

218 views

Category:

Documents


0 download

TRANSCRIPT

  • 8/2/2019 e92plus Security Plus Spring 2012

    1/20

  • 8/2/2019 e92plus Security Plus Spring 2012

    2/20

    Aot|ndubaoc Rebu|atqYhurTfe hekdaoc rebu|atq mkckzaoe g|nm e1

  • 8/2/2019 e92plus Security Plus Spring 2012

    3/20

    Dner qnu| bnmykoq y|nberr b|edat bk|daogn|mktano wak k l|nsre|> Dktk hnrrg|nm tfegt n| hek`r( mkhsk|e kod Mko-ao-tfe-L|nsre| kttkb`r khh ng tfe |ar`raownhwed ao dehawe|aoc aogn|mktanotf|nucf sel l|nsre|r fkr hed tn tfedewehnymeot ng k sade |koce ng rebu|atqynhabaer tn kbfaewe YBA bnmyhakobe/ Eweoag qnu lehaewe qnu| n|ckoarktano arbnmyhakot( b|atabkh rebu|atq ckyr |emkao aotfe bu||eot rtkodk|d tebfonhncaer uredtn meet tfe |e{ua|emeotr/

    Ckyr ao Qnu| Eob|qyt anoYBA \e{ua|emeot 2 mkodktern|ckoarktanor murt y|ntebt rtn|edbk|dfnhde| dktk/ Eob|qytano ar tfey|ege||ed kod mnrt sadehq uredtebfonhncq gn| tfar |e{ua|emeot/Fnsewe|( ag qnu|e uraoc k sel-lkredy|nberraoc n| ykqmeot kyyhabktano( koqb|edat bk|d y|nberraoc bnodubted ao tfesel l|nsre| hekwer tfe dktk kt |ar`/ Khh

    tfe eob|qyted dktk ar uoeob|qyted sfeoatr |eode|ed ao tfe l|nsre| no tfeeodynaot kod ao ure/ Dktk bko |emkao aotfe sel l|nsre| bkbfe ao bhek| tevtgn|mkt( sfe|e at bko le ekrahq evt|kbtedlq eatfe| mkhsk|e n| eod ure|r/ Eweoramyhe( ewe|qdkq tkr`r rubf kr but( bnyq(

    ykrte kod rb|eeo bkytu|e yut reoratawedktk ao tfe rqrtem-sade bhaylnk|d( sfabfar khrn |eode|ed ao bhek| tevt gn|mkt kodekrahq kbberralhe( eweo kgte| tfe selrerrano fkr eoded/ Ao kddatano( rtn|edure| okmer kod ykrrsn|dr g|nm l|nsre|rerranor |emkao kwkahklhe ao tfekutfeotabktano bkbfe kod wuhoe|klhe tnmkhsk|e/

    Dner Qnu| Kot a -W a |ur Y|eweotMk hsk|e A o geb t a nor n | Zeur K t tkb`r>Eodynaot rebu|atq kod kotawa|ureggebtaweoerr k|e ko no-cnaoc delkte0fnsewe|( tfe ure ng kod |ecuhk| uydkter

    ng kotawa|ur rngtsk|e n| aote|oet rebu|atqy|nc|kmr tn y|eweot mkhsk|e aogebtanork|e rtahh k YBA |e{ua|emeot/ Ao tfea|

  • 8/2/2019 e92plus Security Plus Spring 2012

    4/20

    Atr tfe sn|hdr mnrt ynyuhk| mnlahe NRrebu| aoc dewaber no Kod|nad

    Fkwe qnu ewe| geht hnrt kgte| hekwaocqnu| rmk|tyfnoe kt fnme> Ag rn( tfeoqnu kh|ekdq `ons tfkt qnu| Kod|nad arsn|tf mubf mn|e tfko tfe rum ng atryk|tr/

    Tfar bnortkot bnmykoano `eeyr rnme ngqnu| mnrt amyn|tkot dktk kt qnu|gaoce|tayr/ Tfktr sfq qnu oeed tn ley|eyk|ed ao bkre qnu| dewabe ewe|hekwer qnu| fkodr/ Kgte| khh( qnu|rmk|tyfnoe mkq le |eyhkbeklhe( lutsfkt klnut atr bnotkbtr( merrkcer(yfntnr kod rkwed ykrrsn|dr>

    Hnbk t a no T|kb` a oc : A or tko t h qyaoynaot tfe dewaber hnbktano/Rek|bf gn| qnu| rmk|tyfnoe tfe rmk|tskq+ Kwa|k G|ee Kod|nad Rebu|atq bkohnbkte qnu| dewaber racokh kod daryhkqatr hnbktano no k Cnnche mky/

    \emnt e Hnb` : F ade qnu | r tu g g g |nm

    y|q a oc eqer/Rfaehd qnu| ye|rnokh aogn|mktano krrnno kr qnu tfao` qnu| dewabe armarraoc/ Hnb` qnu| yfnoe tn rebu|e atrbnoteotr kod daryhkq ryebakh aort|ubtanortn koqnoe sfn gaodr at/

    \emnt e Saye : Y |n teb t qnu | y | a wkbq (

    o n m k t t e | s f k t /Yfnoe rtnheo n| fnyeherrhq hnrt> Eweo aotfe sn|rt bkre( qnu| y|awkbq ar rkge kodrnuod/ Warat tfe Sel Bnornhe tn e|krekhh bnotkbtr( merrkcer( kyyr( yfntnr(hncao b|edeotakhr kod rettaocr/

    \emnt e Rb|ekm: Cawe qnu|re h g kfn h h e | +Bkot gaod qnu| yfnoe> Mkqle at arot gk|kskq n| on noe fkr ontabed kouoktteoded yfnoe/ Hnc ao tn qnu|kbbnuot kod t|acce| k hnud onare g|nmtfe dewabe( eweo ag atr ao raheot mnde/

    Nsoe| On t a g a bkt a no : Le | ekbfkl hes f e o q n u | y f n o e a r g n u o d /Leaoc k fe|n skr oewe| rn bnoweoaeot+Tfe ye|rno sfn gaodr qnu| hnb`ed yfnoebko bnotkbt qnu kt kontfe| oumle|ramyhq lq tkyyaoc k luttno no tfetnubfrb|eeo/

    Dew a be Kdmao a r t |k t a no : Mno a tn |

    l k t t e | q h a g e ko d m n | eg n | u y t n g a w edew aber /Bfeb` |emkaoaoc lktte|q hage kr sehh krdewabe ryebagabr rubf kr mndeh( bk||ae|kod Kod|nad we|rano/ Tfe|er eweo k|ebn|d ng yhkber k yfnoer hnbktano fkrleeo t|kb`ed( rb|ekmr t|acce|ed kod|emnte hnb`r.uohnb`r/

    Tfe gn|cntteo NR ao tfe sn|`yhkbe:dehawe|aoc rebu| atq no MkbrSatf ewe|q tebfonhncabkh kdwkobe( tfeMkbaotnrf yhktgn|m lebnmer eweo mn|ewe|rktahe kod eojnqklhe tn ure/ Atr onsnode| tfkt tfe ynyuhk|atq ng tfe Mkbbnotaouer tn rnk| kmnoc aodawadukhr kody|ngerranokhr hnn`aoc gn| b|ary c|kyfabr(uo|awkhed urklahatq kod rhab`

    ye|gn|mkobe/

    Uogn|tuoktehq( tfe Mkb ar khrn ktt|kbtaocmn|e ktteotano g|nm bqle|b|amaokhr/Kwa|k ar bnmmatted tn y|ere|waoc tferebu|atq ng tfe Mkbaotnrf yhktgn|m/Lkb`ed lq nwe|

  • 8/2/2019 e92plus Security Plus Spring 2012

    5/20

    Tny ;9 Tayr gn| lette|AT Rebu|atq kod Bnmyhakobe

    Tfe gnhhnsaoc ;9 AT rebu|atq kodbnmyhakobe tayr ngge| bnrt eggebtawe kodeggabaeot skqr tn amy|nwe rebu|atqsatfnut uooeberrk|ahq aob|ekraoc tfesn|`hnkd no tfe AT deyk|tmeot/

    ;/ Ure Kot a -W a |ur kr Yk| t n g Qnu|

    De geobe- A o -Dey tf R t |k tecq

    Kota-Wa|ur sahh khskqr yhkq k |nhe aoeodynaot rebu|atq( on mktte| fns hnudhqrnme yuodatr y|nbhkam atr demare/ Kota-Wa|ur rfnuhd le ured kr k yk|t ng kdegeobe-ao-deytf rt|ktecq tfktbnmlaoer hkqe|r ng tebfonhncaer tnmaoamare |ar` kod evynru|e/

    < / Hewe |kce Kyy h a bkt a no Sf a t e h a rt a octn Ga h h tf e Ckyr

    Kota-Wa|ur kod kyyhabktano sfatehartaock|e tfe qaoc kod qkoc ng eodynaotrebu|atq/ Kota-Wa|ur lhnb`r tf|ektr lkred

    ao k lhkb`hart kyy|nkbf: ag ko evebutklhear no tfe hart( ag ar ont khhnsed tn |uo/ Notfe ntfe| fkod( sfatehartaoc sn|`r satfk t|urt-lkred kyy|nkbf tfkt degaoersfkt bko le t|urted kod y|eweotruoskoted . uot|urted evebutklher g|nm|uooaoc no tfe rqrtem/ Eweo ag qnu

    dnot tu|o no tfe lhnb`aoc gektu|e(sfatehartaoc cawer b|ubakh aotehhaceobe nosfkt kyyhabktanor k|e |uooaoc no qnu|eodynaotr/

    2 / Bno t |n h Qnu| Yn| t r

    Se#|e ont tkh`aoc klnut C|nuy Ynhabaertfkt jurt darklhe yn|tr( on| k|e setkh`aoc klnut chuaoc tfem rfut/ Tfemkjn|atq ng ure|r oeed tn yhuc dewaberaotn tfea| bnmyute|r tn cet luraoerrdnoe( kod lkooaoc |emnwklhe medak aon|de| tn lktthe tfe |ar`r krrnbakted satfatr ure faode|r dkahq luraoerr kbtawataer

    lq emyhnqeer/

    4/ Merf Bnm yh akobe s a tf Rebu| a t q

    Y|kb t a ber

    Tfe mnrt eggebtawe n|ckoarktanor ga|rtdete|maoe sfe|e tfea| luraoerr |ar`r hae(tfeo yut tebfonhncq kod y|nberrer aoyhkbe tn matackte tfnre |ar`r/ Tfeo tfeqgacu|e nut fns tfnre mekru|er rktargqbnmyhakobe nlhacktanor/ Sfeon|ckoarktanor cet tfkt ghnsbfk|tlkb`sk|drsfeo tfeq kbt ga|rt tn bfeb`tfe lnver tn guhgahh bnmyhakobe dutaertfeq teod tn hekwe bfao`r ao tfea|

    rebu|atq k|mnu|/ Ao kddatano( tfequrukhhq ryeod mn|e mnoeq lebkuretfeq |eaoweot tfe sfeeh satf duyhabktey|kbtaber( bfkraoc oes kbtawataer ewe|qtame k oes |ecuhktano bnmer nut/

    5/ Le \ekdq Tn Deyhnq Gaver [uab` hq

    Mkoq n|ckoarktanor murt skh` k gaoehaoe( lkhkobaoc facf-y|an|atq rngtsk|euydkter satf tfe oeed tn kwnad mkjn|dar|uytanor tn eod ure|r/ Bkyklahataerrubf kr sk`e-no-HKO kod ykqhnkdbkbfaoc khhns n|ckoarktanor tn ont nohqngge| k yuhh mndeh( lut khrn yurfyktbfer nutrade ng on|mkh luraoerrfnu|r/ Khrn( ao dart|aluted eowa|nomeotryktbf rtkcaoc khhnsr noe eodynaot ao krecmeot tn yuhh dnso k yktbf( sfahentfe| eodynaotr skat ao re{ueobe/

    7 / @ons Tfk t Fkb`e|r Hnwe Tf a |d -

    Yk| t q Kyyr

    Tfere dkqr( at aro#t jurt fete|nceoenurnye|ktaoc rqrtemr tfkt n|ckoarktanorfkwe tn sn||q klnut - tfe|e#r khrn tfeg|eoetab kyyhabktano eowa|nomeot/Kbbn|daoc tn 21% ng AT y|ngerranokhr(

    tfe ure ng tfa|d-yk|tq kyyhabktanor ar noeng tfe tny tf|ee gkbtn|r bkuraoc tfec|ektert |are ao AT |ar`r/ Sfeo tferekyyhabktanor k|e uoyktbfed kodaorebu|ehq bnogacu|ed( tfe kttkb`ru|gkbe c|ekthq aob|ekrer/ Ao gkbt(Rebuoak rkqr ,Ko 69% |edubtano ao |ar`

    bko le kbfaewed lq eatfe| yktbfaoc tfe;< mnrt b|atabkh n| tfe 23 mnrty|ewkheot y|nc|kmr ao k rkmyheyn|tgnhan/, &Rebuoak( Fkhg Qek| \eyn|t (Juhq

  • 8/2/2019 e92plus Security Plus Spring 2012

    6/20

    Sfktr qnu| yhko gn| mnlahe rebu|atq>Atr k bnmyhev y|nlhem tfkt |e{ua|er k

    fnhartab kyy|nkbf

    Mnlahatq ar fe|e/ Mnlahatq ar ons/ Mnlahatq&khnoc satf bhnud kod rnbakh medak! arnoe ng tfe tf|ee oes tebfonhncaer tfktl|aocr oes y|ndubtawatq nyyn|tuoataerkod krrnbakted rebu|atq |ar`r/ Kdd ao tfebnorume|arktano ng AT( ko evyhnrano ngbn|yn|kte kod ye|rnokh mnlahe dewaber(kod qnu fkwe noe ng tfe mkjn| ATrebu|atq rt|ktecq bfkhheocer ng Ar tfe cnkh tn y|nwademnlahe kbberr tn ureguh bn|yn|kte|ernu|ber rubf kr emkah( gahe re|waber(kod aot|koet kyyr> Ag rn( fkwaoc facfhqhamated( arnhkted mnlahe dewaber y|nwaderhatthe wkhue/ Ao n|de| tn y|nwade rebu|emnlahe kbberr tn tfere wkhuklhe|ernu|ber &sfabf ar tfe cnkh ng mnrtn|ckoarktanor!( qnu murt:

    ;/ Y|ntebt kbberred dktk tfkt ar onshnbkh tn tfe bhaeot dewabe( kod

  • 8/2/2019 e92plus Security Plus Spring 2012

    7/20

    Dewabe |ebnwe|q kod hnrr

    matacktano &aobhudaoc dewabet|kb`aoc( mkoukh.kutnmktab hnb`-nut( mkoukh.kutnmktab sayaoc ng khhn| rehebted dktk( kod ruyyn|t gn|dewabe-heweh lkb`uy kod |ertn|e

    Ruyyn|t kod re|wabe mkokcemeot -

    \emnte bnot|nh ar ureguh gn|tebfoabkh ruyyn|t( sfahe evyeorebnot|nh ar aoteoded tn mnde|kteurkce kod bnrtr &e/c/ |nkmaoc!

    Tae| < : Ruyy hemeo t k h Rebu| a t qMDM-n|aeoted rebu|atq bkyklahataer k|eko evbehheot rtk|taoc ynaot gn| k mnlaherebu|atq rt|ktecq/ Fnsewe|( kr mnlahekbberr rbeok|anr bnotaoue tn evykodkod tfe dewehnymeot ng mnlahe mkhsk|ebnotaouer tn kbbehe|kte &ao ntfe| sn|dr(kr wuhoe|klahataer( tf|ektr( kod |ar`r

    bnotaoue tn c|ns!( tfe eggebtaweoerr ngMDM gn| rebu|atq d|nyr hnse| kod hnse|/AT oeedr tn amyhemeot mekru|er tfktyab` uy sfe|e MDM hekwer ngg ao n|de|tn lnhrte| rebu|e kbberr( tf|ekty|ntebtano( kod dktk y|ntebtano/

    @eq tnyabr tn kdd|err aobhude rebu|e|emnte kbberr( tf|ekt y|ntebtano &sfktn|ckoazktanor oeed ar k |nlurt selrebu|atq bnb`tkah tfkt evkmaoerbnoteot g|nm ewe|q ynrralhe koche tndetebt oes tf|ektr! kod dktky|ntebtano/

    Tae| 2: Eme|caoc rebu|atq mekru|erTfar tfa|d tae| ng bnuote|mekru|er argka|hq oes tn tfe mk|`et( kod ar ngteobhkrragaed kr kdwkobed n| eme|caoc/

    Ek|hq kdnyte|r ngrubf tebfonhncaerteod tn fkwe k

    we|q hns tnhe|kobegn| |ar`( evt|emehq

    reoratawe dktk( n| gkbe we|q rt|abt|ecuhktn|q |e{ua|emeotr/

    Bfk|kb t e| ar t a br n g ko adek heo te |y | a re rn h u t a no

    On noe fkodr ao tfea| hkytny n| der`tnysfeo tfeq cet k rmk|tyfnoe( rnmnlahatq jurt kddr tn tfe bfkhheocer ngeote|y|are rebu|atq/ Tfar - kod ludcety|erru|er - d|awe tfe oeed gn|kdmaoart|ktawe eggabaeobq kod hns bnrt ngnsoe|rfay sfeo rehebtaoc mnlaherebu|atq rnhutanor/ Gn| tndkqrluraoerrer( adekh rnhutanor sahh le tfnretfkt k|e eote|y|are-bhkrr ao oktu|e kodtfkt `eey bnrtr dnso lq maoamaraoc tfeoumle| ng y|ndubtr kod weodn|r/

    Eote|y|are-bhkrr eq gektu|er tfktrfnuhd le k yk|t ng khh mnlahe rebu|atqrnhutanor tn gu|tfe| |edube bnrt kodamy|nwe eggebtaweoerr aobhude:beot|khared mkokcemeot( |nhe-lkredkdmaoart|ktano( da|ebtn|q aotec|ktano(

    c|nuy ynhabaer( ghevalhe |eyn|taoc( kodbnogacu|ktano kudat t|kahr/

    Meetaoc tfe n|ckoarktanor oeedr satf krmkhhe| ret ng y|ndubtr kod weodn|raowk|aklhq |eduber bnrt kod bnmyhevatqsfahe amy|nwaoc aotec|ktano kodeggebtaweoerr/ Tfar ar sfq AT.rebu|atqmkokce|r tqyabkhhq gkwnu| rnhutanoy|nwade|r tfkt ngge| tfe c|ektertyn|tgnhan ng bkyklahataer gn| tfe c|ektertoumle| ng dewaber tfeq aoteod tnruyyn|t/ Adekhhq( tfe kdwkobed tf|ektkod dktk y|ntebtano bkyklahataer oeededtn ruyyn|t mnlahe dewaber k|e kwkahklhe

    kr aotec|kh evteoranor ng tfe rnhutanorkh|ekdq leaoc ured tn y|nwade ramahk|bkyklahataer gn| tfe n|ckoarktanor gavedure|r.dewaber/

    Tfe oeed tn ruyyn| t m nl a h e dew a bera r fe |e kod ons

    Tfe bfkhheoce ar bnmyhabkted lq koumle| ng gkbtn|r( eryebakhhq: &k! tfedawe|ratq ng yhktgn|mr kod dewaber kodfns tfar amykbtr lntf tfe oeed gn|be|tkao bnot|nhr kod tfe kwkahklhernhutanor( kod &l! tfe dawe|ratq ngynteotakh nsoe|rfay( |eamlu|remeot(kod urkce rbeok|anr( kod fns tnmkaotkao k lkhkobe letseeo ure| kodbn|yn|kte evyebtktanor/

    Lebkure ng tfere bnmyhevataer( tfe|e aron rt|kacftgn|sk|d( noe-raze-gatr-khh|ebaye gn| rubberr sfeo at bnmer tnrnhwaoc tfe rebu|atq-gn|-mnlahatqy|nlhem/ Onoetfeherr( n|ckoarktanorrfnuhd:

    \emkao gnbured no tfe mnrt

    amyn|tkot nljebtawe eoru|aockde{ukte y|ntebtano ng mnlahedktk sfahe lkhkobaoc tfar satfoeed gn| k ynratawe ure|evye|aeobe kod |ekrnoklhe bnrtng nsoe|rfay

    Yu|rue k hkqe|ed kyy|nkbfsfe|e MDM-n|aeoted rebu|atqbkyklahataer k|e ruyyhemeoted lqtfe kdwkobed bnot|nhr derb|aledfe|eao gn| rebu|e kbberr( tf|ekty|ntebtano( kod( klnwe khh ehre(dktk y|ntebtano

    Gkwnu| rn h u t a nor tfkt dehawe| k

    facf dec|ee ng kdmaoart|ktaweeggabaeobq kod hns nwe|khh TBNlkred no tfea| bkykbatq gn|bnornhadktano kod aobn|yn|ktanong eote|y|are-bhkrr gektu|er( rubfkr beot|khared mkokcemeot(

    da|ebtn|q aotec|ktano( kod |nlurt|eyn|taoc

    Tf|ekt \ar`

    Hnrt n| rtnheo dewabe Uokutfn|ared kbberr tn hnbkh n| oetsn|`-lkred dktk0 dktk hnrr

    Hnrt n| rtnheo medak bk|d Hnbkh dktk hnrr

    Marure ng hnbkh bnmmr &e/c/( Lhuetnntf( A\! Bnmy|nmared.aogebted dewabe( dktk hnrr kod ynteotakhhq dec|kded nye|ktano

    Bnmy|nmared kyyr Dktk hnrr kod ynteotakhhq dec|kded nye|ktano

    Mkhsk|e Dktk hnrr kod ynteotakhhq dec|kded nye|ktano

    Sel.oetsn|`-lkred kttkb`r Dktk hnrr kod ynteotakhhq dec|kded nye|ktano

    Ree fns T\ATNO dehawe|r uoagaed sel( emkah kod dktk rebu|atq satf Selreore no R tkod G;9

  • 8/2/2019 e92plus Security Plus Spring 2012

    8/20

    Fnsdeo Jnaoe|q C|nuy rebu|er |emntekbberr satf Lk||kbudk Oetsn|`r

    Hk|ce oktanosade luraoerrer k|e mn|eha`ehq tn fkwe racoagabkot oumle|r ngreoan| rtkgg sfn k|e g|e{ueothq no tfemnwe/ Fnsdeor ar on dagge|eot( satfk|ek mkokce|r kod ntfe| reoan| rtkggryeodaoc mubf ng tfea| tame t|kwehhaocletseeo tfe bnmykoqr fuod|edr ngdeyntr kod tn tfea| burtnme|r ao tfeluahdaoc t|kde/Tn mkvamare tfea| y|ndubtawatq(Fnsdeor reoan| mkokcemeot oeed|ehaklhe |emnte kbberr tn tfea| emkahr/Gu|tfe|mn|e( tfeq fkwe tn eoru|e tfkttfar kbberr ar guhhq rebu|e( kod tfkt selkyyhabktanor rubf kr emkah k|e y|ntebtedg|nm mkhabanur kttkb`r( kod bko nohq lekbberred lq hecatamkte ure|r/

    Fnsdeor fkd( gn| rnme tame(leeo uraoc k bnoteot gahte|aoc dewabe(emyhnqed kr k |ewe|re y|nvq re|we|( tny|ntebt atr selmkah kyyhabktanor g|nmmkhabanur evte|okh nohaoe kttkb`r/Khtfnucf tfar skr ceoe|khhq eggebtawe ktatr y|amk|q yu|ynre at skr gk| g|nmrktargkbtn|q( kr \u Ck|doe| ng FnsdeorRebu|atq Tekm evyhkaor/

    Nu| heckbq rqrtem dad tfe jnl ngy|ntebtaoc nu| Nuthnn` Sel Kyy g|nm

    tfe aot| urano ng mkhsk|e( lut at bkured

    ur k mkjn| mkokcemeot f ekdkbfe(rkqr Ck|deoe|/ [uate ramyhq( at skrwkrthq nwe|-eocaoee|ed gn| tfe jnl ng

    kbtaoc kr nu| sel kyyhabktano ga|eskhh(kod skr tnn bnrthq( bnmyhev kod tame-

    bnorumaoc tn m kokce kod bnogacu|e(

    eryebakhhq caweo tfe sade wk|aetq ngrmk|tyfnoer kod t klhetr se ure/

    Nu| luraoerr |ehaer no emkah( rndnsotam e ar uokbbeytklhe( kr |emnte

    sn|`e|r oeed tn le ao bnotkbt satfruyyhae|r kod burtnme|r kt khh tamer/

    Nu| emyhnqeer aob|ekraochq gnuod

    tfemrehwer uraoc k wa|t ukh y|awkte

    oetsn|` &WYO! tn kbberr tfea| emkahrebu|ehq no t fe cn( lut tfar |e{ua|ed

    rtkgg tn hnc ao ewe|q t ame tfeq skot ed tnbfeb` t fea| mkah( s fabf skr gk| g|nm

    adekh/ Mekosfahe( mkaotkaoaoc t fe

    rebu|atq ng tfe selmkah kyyhabktanor skrk bnortkot rt|kao no AT |ernu|ber kod

    tf|ekteoed tn lebnme uomkokceklhe/

    Tfe rn hu t ano: Sel Kyyh a bkt ano

    G a|es k h h g |nm Lk| |kbudk Oe ts n|`r

    Fnsdeor bfnre Lk||kbudk Oetsn|`rSel Kyyhabktano Ga|eskhh &SKG! gn| tfe

    jnl ng rebu|aoc atr selmkah g|nmevte|okh tf|ektr kod eoru|aoc tfkt nohqt|urted dewaber bnuhd kbberr bnmykoqrnohaoe emkah rqrtem/ Tfe bnmykoqaortkhhed tsn Lk||kbudk SKG 779kyyhakober: noe aortkhhed ao tfe y|amk|qkod noe ao tfe rebnodk|q dktkbeot|e/Tfere ga|eskhhr eoru|e tfkt khh aobnmaoct|kggab tn atr selmkah kyyhabktanor arrb|eeoed gn| mkhabanur kttkb`r( rubf krfkb`e|r kttemytaoc tn evyhnatwuhoe|klahataer tn rtekh reoratawe dktkbnotkaoed ao emkahr/

    Khh emkah t|kggab ykrraoc tf|nucf tfega|eskhhr urer tfe FTTYR y|ntnbnh(y|nwadaoc rebu|e( eob|qytedbnmmuoabktano letseeo |emntesn|`e|r kod tfea| selmkah re|we|r/ Tfekyyhakober fkodhe t|kggab g|nm k|nuod;79 emyhnqeer sfn ure tfe Nuthnn`

    Sel Kyy &NSK! tn kbberr emkahr g|nm|emnte der`tnyr( kod nwe| ;29 ure|r ngMab|nrngtr KbtaweRqob y|ntnbnh gn|fkodfehd dewaber( ured y|ednmaokothqlq reoan| mkokcemeot( k|ek mkokce|rkod AT rtkgg/

    Lk||kbudkr kyyhakober mnoatn| khht|kggab ykrraoc letseeo atr selkyyhabktanor kod |emnte dewaber( kr sehhkr y|nwadaoc |eyn|tr klnut kttkb`e|rkod kttkb` kttemytr/ K sfatehart ng khhrtkgg rmk|tyfnoer ar `eyt no tfe dewabertn eoru|e tfkt nohq |ebncoared kodkyy|nwed fk|dsk|e mkq rubberrguhhq

    bnooebt satf bnmykoq selmkahrqrtemr/

    Krru| a oc m nde|o ( mkokcekl he kodrebu|e m nl a h e emk a h

    Fnsdeor heckbq bnoteot gahte|aoc rqrtemskr nohq ewe| eggebtawe gn| hnccaoc notnNuthnn` Sel Kyy gn| selmkah( kod skrwe|q daggabuht tn bnogacu|e eggebtawehq gn|mnlahe dewaber uraoc KbtaweRqob/Lk||kbudkr ga|eskhh kyyhakober onseoru|e tfkt Fnsdeor mkokcemeot fkrrebu|e( |ehaklhe kbberr tn emkah(sfe|ewe| tfeq k|e kod on mktte| sfkt

    dewabe tfeq ure/

    Sfahe tfe krru|kobe tfkt emkah sahh lek |ehaklhe tnnh fkr leeo k lnno gn| tfe

    bnmykoqr gaehd sn|`e|r( tfe eggebt no

    AR rtkgg fkr khrn leeo racoagabkot satfc|ekthq |edubed bnmyhevatq ao lntf

    ruyyn|t kod mkaoteokobe y|nberrer(rkqr Ck|doe|/

    Atr k |ehaeg tn `ons tfkt se fkwe tfetebfonhncq ao yhkbe tn y|nt ebt selmkah

    kbberr no khh dewaber ured kb|nrr

    Fnsdeor nye|ktanor( fe bnotaouer/\ktfe| tfko leaoc k rnu|be ngnbbkranokh g|urt|ktano gn| reoan|

    mkokcemeot( kod tfe lkoe ng tfe ATdeyk|tmeot( |emnte emkah ar ons k

    t|urted kod |ehaklhe guobtano/

    Tfe Lk||kbudk ga|eskhhr aotuatawe( |ekh-tame aote|gkbe eoklher Fnsdeor AT rtkggtn mkokce kod mnoatn| emkah kbberrkb|nrr atr oetsn|`r0 kdd emkahguobtanokhatq tn koq oes mnlahe dewabesatfnut daggabuhtq0 kod eoru|e tfkt tfeqkhskqr ons tfkt hecatamkte dewaber k|e

    bnooebtaoc rkgehq satf tfe bnmykoqrselmkah/

    Tfe aortkhhktano y|nberr skr rmnntfkod {uab`( satf nu| oes Sel

    Kyyhabktano Ga|eskhhr yhuccaoc ramyhq

    aotn lntf nu| dkt kbeot|er( rkqrCk|doe|/ Se se|e khrn kyy|ebaktawe

    tfkt Lk||kbudk tnn` tfe tame tnuode|rtkod nu| oeedr0 |ebnmmeodedtebfonhncq tfkt s kr ye|gebthq ruated t n

    nu| |e{ua|emeotr0 kod y|nwaded evye|t(fehyguh kod g|aeodhq ruyyn|t sfeo

    |e{ua|ed/ Tfe bkyatkh nuthkq no

    Lk||kbudkr tebfonhncq ar {uab`hq ykqaocatrehg lkb` tf|nucf fuce |edubtanor aotam e AT rtkgg ryeod no mkokcaoc emkah

    rebu|atq( kr sehh kr tfe aob|ekred

    y|ndubtawatq gn| rtkgg sn|`aoc |emntehq/At fkr |edubed nu| |ehakobe no WYOr/

    Se oeeded k dedabktedga|eskhh tfkt skr ryebagabkhhqderacoed tn y|ntebt |emntekbberr tn nu| sel mkah0 noetfkt skr bnrt-eggebta we( ekrq tnmkokce kod rebu|e

    \u Ck|doe|( FnsdeorRebu|a tq Tekm

    Atr k |ehaeg tn `ons tfkt sefkwe tfe tebfonhncq a o yhkbetn y|ntebt selmkah kbberr nokhh dewaber se ure/

    \u Ck|doe|( FnsdeorRebu|a tq Tekm

    Hek|o mn|e klnut fns Fnsdeor dehawe|ed rebu|e kbberr satf Lk| |kbudk no R tkod D;9

  • 8/2/2019 e92plus Security Plus Spring 2012

    9/20

    Sel Kyyhabktano Ga|eskhhr' YBA Bnm yh a kobe

    S f q k | e t f | e k t r t n s e l ra t e rd a g g e |eo t g |nm tfnre d a |ebted k t t fe

    o e t s n | ` >

    Bnmyk|ed satf tfe oetsn|` heweh( qnudnot oeed tn le facfhq r`ahhed tn ure tfeaote|oet/ Tfar ont nohq mk`er at ekrae| tnure hecatamktehq( lut khrn eobnu|kcer tfemkhabanur marure ng sel kyyhabktanor/ Aokddatano( tfe aote|oet khrn ngge|r mkoqynrralahataer gn| bnobekhmeot kod mk`aockbtano konoqmnur mekoaoc tfe |ar` gn|kttkb`e|r |emkaor |ehktawehq hns kod rndner tfe aofalatano tf|erfnhd gn| fkb`e|r/

    Mkoq sel kyyhabktanor tfkt k|e rtahhkbtawe tndkq se|e dewehnyed kt k tamesfeo ksk|eoerr gn| kyyhabktano rebu|atqao tfe aote|oet fkd ont qet leeo |kared/Tfe|e se|e fk|dhq koq tf|ekt rbeok|anrlebkure tfe kttkb`e|r gnbur skrda|ebted kt tfe aote|okh AT rt|ubtu|e ngtfe bnmykoaer/ Ao tfe ga|rt qek|r ng sel

    urkce ao yk|tabuhk|( y|ngerranokhrngtsk|e eocaoee|aoc skr ont k y|an|atq(rn sel kyyhabktanor urukhhq seot aotny|ndubtano satfnut bhek| rebu|atqrtkodk|dr/ Tfea| rebu|atq rtkodk|d skrlkred rnhehq no fns tfe aodawadukhdewehnye|r |kted tfar kryebt kod fns

    facf tfea| |eryebtawe onshedce skr/

    Tfe y|nlhem satf mn|e |ebeot selkyyhabktanor: Mkoq ngge|aocr demkod tfeaotec|ktano ng kddatanokh l|nsre| yhuc-aor kod kdd-nor ao n|de| tn gkbahatkte tfeaote|kbtano ao tfe ga|rt yhkbe n| tn mk`e atdqokmab/ Tfere aobhude( gn| evkmyhe(Kjkv kod JkwkRb|ayt/ Sfahe tfe l|nsre|skr n|acaokhhq nohq k ykrrawe tnnh gn|waesaoc sel rater( at fkr ons ewnhwedaotn ko kutnonmnur kbtawe ehemeot kodfkr kbtukhhq lebnme k aod ng nye|ktaocrqrtem gn| tfe yhuc-aor kod kdd-nor/ Luttfkt mk`er tfe l|nsre| kod atr tnnhr

    wuhoe|klhe/ Tfe kttkb`e|r ckao kbberr tntfe l|nsre| wak aogebted selkyyhabktanor kod kr rubf tn gu|tfe|rqrtemr kod tn tfea| nsoe|r n| ure|rreoratawe dktk/

    Rnme krrume tfkt ko uorebu|ed selkyyhabktano bkoont bkure koq dkmkce krhnoc kr at dner ont bnodubt koq rebu|atq-|ehewkot guobtanor n| y|nwade koqreoratawe dktk/ Tfe nyynrate ar tfe bkre/Noe raoche uorebu|ed sel kyyhabktanoeodkoce|r tfe rebu|atq ng gu|tfe|rqrtemr tfkt gnhhns no( rubf kr

    kyyhabktano n| dktklkre re|we|r/

    Sfktr s|noc satf jurt uraoc mqo e t s n | ` g a | e s k h h>

    Uoha`e t|kdatanokh oetsn|` ga|eskhhr n|aot|urano detebtano rqrtemr tfkt ramyhqykrr FTTY.R t|kggab( Sel KyyhabktanoGa|eskhhr y|nvq khh t|kggab kod aoruhkteSel re|we|r g|nm da|ebt kbberr lqkttkb`e|r/

    Sfkt dn Sel Kyy h a bk t a no Ga |es k h h r

    y |nw a de>

    Sel Kyyhabktano Ga|eskhhr y|ntebt selkyyhabktanor kod re|waber g|nm mkhabanurkttkb`r( kr sehh kr aob|ekraoc tfekyyhabktano ye|gn|mkobe kod rbkhklahatq/Bnmyk|ed tn t|kdatanokh oetsn|`ga|eskhhr( tfeq k|e deracoed tn y|ntebtkckaort facfhq tk|ceted( mkhabanurkttkb`r tfkt k|e da|ebted kckaort dktk

    kod oetsn|` kbberr faddeo lefaod e||n|rn| ghksr ao selrate bnde/

    Satf ko evyhnrano ng sel kyyhabktanor gn|mkoq luraoerr t|korkbtanor - g|nmBn|yn|kte Emkah tn Dnbumeot Rfk|aoc .Dart|alutano kod Rebu|e T|korkbtanor(

    tfe oeed tn rebu|e tfnre kyyhabktanorkckaort dktk n| gaokobakh hnrr aryk|kmnuot/

    Fns dn Sel Kyy h a bk t a no G a|es k h h r

    fe hy s a tf YBA Bnmy h a kobe>

    Ao |erynore tn tfe aob|ekre ao adeotatqtfegt kod rebu|atq l|ekbfer( mkjn| b|edatbk|d bnmykoaer bnhhkln|kted tn b|ektetfe Ykqmeot Bk|d Aodurt|q DktkRebu|atq Rtkodk|d &YBA DRR!/ YBA DRRy|nwader k lkrehaoe ng tebfoabkh kodnye|ktanokh |e{ua|emeotr deracoed tny|ntebt bk|dfnhde| dktk/ At kyyhaer tn khh

    eotataer aownhwed ao ykqmeot bk|dy|nberraoc aobhudaoc me|bfkotr(y|nberrn|r( kb{ua|e|r( arrue|r kodre|wabe y|nwade|r( kr sehh kr khh ntfe|eotataer tfkt rtn|e( y|nberr n| t|kormatbk|dfnhde| kbbnuot dktk/

    Tfar mekor tfkt koq n|ckoarktano tfktdekhr satf b|edat n| delat bk|daogn|mktano tf|nucf tfea| selrate( n|sfe|e tfkt dktk bko le kbberredtf|nucf tfe selrate( ar ruljebt tn k|koce ng hecarhktawe |e{ua|emeotr/

    Mkao tk a o k Rebu|e Oe ts n|`

    ;/ Aortkhh kod mkaotkao k ga|eskhhbnogacu|ktano tn y|ntebtbk|dfnhde| dktk

  • 8/2/2019 e92plus Security Plus Spring 2012

    10/20

    Sfkt kod sfn tn reekt A ognReb

  • 8/2/2019 e92plus Security Plus Spring 2012

    11/20

    Rtkod H75 Rtkod H75 Rtkod G;9

    Humeorano Rebu|atq( Aob/ ar k chnlkhhekde| ao eodynaot mkokcemeot kodrebu|atq( fehyaoc nwe| 5(999 burtnme|ry|ntebt tfea| watkh aogn|mktano kodmkokce b|atabkh |ar` kb|nrr oetsn|` kodeodynaot krretr/

    AognReb

  • 8/2/2019 e92plus Security Plus Spring 2012

    12/20

    Dehawe|aoc bnm yhete oetsn|` rebu| a tqsatf k raoche kyyhakobe

    Oetsn|` tebfonhncaer k|e dewehnyaocgkrt( lut kr mn|e kod mn|e eote|y|arerbnodubt luraoerr( y|nmnte tfemrehwerkod ure bhnud re|waber( rn bnme tfetf|ektr/ Nobe nohaoe( tfea| oetsn|`r gkbek wk|aetq ng tf|ektr |kocaoc g|nm oetsn|`kttkb`r( aot|urano kod rykm tn oume|nurwa|urer( sn|mr( T|njko fn|rer( DnR(DDnR( AY Rynngaoc kod yn|t rbkooaoc/Uogn|tuoktehq( mnrt RMLr dn ont fkweracoagabkot aowertmeot kwkahklhe tn aowertao eote|y|are rebu|atq rnhutanor( eryebakhhqsatf dagge|eot |e{ua|emeotr - g|nm tfega|eskhh tn |emnte kbberr tn nutlnuodbnoteot gahte|aoc - ngteo |e{ua|aocdedabkted rnhutanor/

    Tfe bfkocaoc oktu|e ng tfe sn|`gn|be fkrkhrn hed tn dagge|eot demkodr leaocyhkbed no tfe oetsn|`/ Tfe dawe|ragaeddart|alutano ng re|waber( aob|ekraocemyhnqee oumle|r n| |emnte rater fkrhed tn tfe beot|kh oetsn|` on hnoce|

    leaoc tfe nohq ye|amete|( lut rtahh tfebeot|kh ful gn| bn|yn|kte dktk kodkyyhabktanor/

    Tfere |emnte rtkgg kod nggaber oeedrebu|e kbberr tn tfe fekd nggabe( sfahertahh mkokcaoc tfea| nso oetsn|`r(

    rebu|atq ynhabaer kod ure|r/ ATdeyk|tmeotr |e{ua|e tfe klahatq tnkdmaoarte| tfe eota|e oetsn|` koddnmkao( aobhudaoc kbberr tn bnornhadkted|eyn|taoc( adekhhq g|nm k beot|kharedaote|gkbe/ Satf rubf k dawe|re oetsn|`kod ure| y|ngahe( ekre ng kdmaoart|ktanokod eogn|bemeot ng rebu|atq sfahemkvamaraoc y|ndubtawatq ar eq/

    Tfe rnhutano gn| mkoq n|ckoarktanor fkrleeo tn deyhnq k UTM kyyhakobe - kraoche dewabe y|nwadaoc Uoagaed Tf|ektMkokcemeot kod k |koce ng ruyyn|taocgektu|er/ Tfar aobhuder tfe t|kdatanokhoetsn|` ga|eskhh satf kddatanokh mnduhk|re|waber tfkt bko le kdded kr |e{ua|ed/

    Tfe Eudemno re|aer fkwe leeodewehnyed lq Fuksea gn| lntf RML kodeote|y|are ure|r/ Tfeq k|e khh ao noerebu|atq y|ndubtr luaht satf aodurt|q-hekdaoc rngtsk|e k|bfatebtu|e( ngge|aocguhh UTM rebu|atq bkyklahataer ng ga|eskhh(Kota-wa|ur( kota-DDnR( AYR &Aot|uranoY|eweotano Rqrtem!( nohaoe lefkwan|mkokcemeot( Kota-rykm( U\H gahte|aockod WYO rnhutano/ Tfeq y|nwadebnmy|efeorawe facf-ye|gn|mkoberebu|atq y|ntebtano kckaort khh rn|tr ngtf|ektr kt tfe ec|errer ng rmkhh kodmedaum-razed eote|y|arer( l|kobfer nghk|ce eote|y|arer( oetsn|`r gn| bnuotaer

    kod bataer kod aote|oet bkger etb/ Ekrq tndeyhnq kod mkaotkao( tfeq ont nohq luahdk facfhq |ehaklhe oetsn|` bnooebtano tn`eey luraoerr bnotaouatq lut khrn |eduberkdmaoart|ktano kod mkaoteokobe bnrtr/

    Tfe Eudemno re|aer bko re|we kr k

    fekd{uk|te|r oetsn|`aoc( l|kobf. hnbkhnggabe.|emnte rate ec|err ckteskq(y|nwadaoc dawe|ragaed WYO( ga|eskhh kodUTM rnhutanor satf 2C kod SaGaguobtanor/ Tfere bnmmuoabktanorgektu|er cawe n|ckoarktanor b|ubakh evt|k|erahaeobe - tfe klahatq tn ruyyn|t muhtayheaote|oet haoer &rubf kr KDRH kod 2C!eoru|e gkahnwe| ao tfe eweot ng k gkuhtqbnooebtano kt k racoagabkothq hnse| bnrttfko bnoweotanokh dedabkted haoer/

    Tfeq khrn ruyyn|t WYO kbberr kt koqtame kod koq yhkbe gn| emyhnqeer noluraoerr t|ayr tn amy|nwe sn|`aoc

    eggabaeobq kod hnse| bnmmuoabktanobnrtr/ Tfeq k|e klhe tn |ekhare WYOaote|bnooebtano letseeo l|kobfer kodfekd{uk|te|r( rkgecuk|daoc dktkt|kormarrano( gkbahatktaoc aote|okh|ernu|be rfk|aoc kod ngge|aoc facf-ye|gn|mkobe WYO fk|dsk|e eob|qytano tnrktargq rate-tn-rate WYO |e{ua|emeotr/

    K oetsn|` wuhoe|klhe tn tf|ektr kod |ar`rar ha`ehq tn rskmy luraoerr satf fucedarkrte|r kod aogn|mktano hek`r( satfluraoerr aote||uyted kod eweolko`|uytbq kr k |eruht/ K |ehaklheoetsn|` ar kt tfe bn|e ng kwnadaoc rubf

    ynteotakh rkgetq fkzk|dr/ Tfe EudemnoUTM re|aer k|e adekh rebu|atq y|ntebtanodewaber gn| rmkhh kod medaum-razedeote|y|are oetsn|`r tn eoru|e luraoerrbnorarteobq kod y|ndubtawatq/

    Ree k demnort|ktano ng oevt ceoe|ktano UTM tebfonhncq satf Fuks e a no Rtkod H75

    Fuksea ar k hekdaoc chnlkh y|nwade| ngbnmme|bakh tehebnm oetsn|`r kod atar bu||eothq re|waoc 45 ng tfe sn|hd#rtny 59 tehebnm nye|ktn|r/ Tf|nucfbnotaounur burtnme|-beot|abaoonwktano( Fuksea |erynodr {uab`hqtn burtnme|r# oeedr satf k

    bnmy|efeorawe( burtnmared ret ngngge|aocr/

    Ao

  • 8/2/2019 e92plus Security Plus Spring 2012

    13/20

    Bnorume|arktano( tfe t|eod tnsk|drtfe ure ng emyhnqee-nsoed dewabergn| sn|`-|ehkted kbtawataer( bnotaoueratr aoevn|klhe |are/ Ao gkbt( nwe| ;99oes tklhetr se|e hkuobfed ao

  • 8/2/2019 e92plus Security Plus Spring 2012

    14/20

    Oesr g|nmAognRebu| atq

    \edubed Bnrt n g Ns oe|rf ay

    Ure|r bko {uab`hq le c|koted n|deoaed kbberr tn dewaber lkred noKbtawe Da|ebtn|q memle|rfay ekrahqkhhnsaoc dewaber tn le rfk|ed0

    ykrrsn|d bfkocer.|eretr tk`e eggebtammedaktehq ao KD

    Eofko bed Rqr tem Rebu| a t q -

    Kutfeotabkter tfe ure|r kbberr|acftr kckaort RER kod tfea|b|edeotakh kckaort Kbtawe Da|ebtn|qlegn|e tfe NR lnntr kod legn|e tfeoetsn|` eob|qytano eq lebnmerwuhoe|klhe tn kttkb`r

    A my |nwed Ure| Evye| a eobe -

    Y|nwader raoche-raco no satfSaodnsr b|edeotakhr( on skat tame tnkbberr dktk no ntfe| bn|yn|ktedewaber sfabf tfe ure| fkr leeoc|koted kbberr tn( {uab` kod ekrqykrrsn|d |eret/ YLBnooev ar kruye|an| oetsn|` kod dewabeeob|qytano rqrtem

    Kr k bnmykoq luaht no aoonwktano(SaoMkcab ar bnmm atted tn t fe bnortkot

    amy|nwemeot ng nu| y|ndubtr( sfetfe|

    tf|nucf oes gektu|er n| lkrabeofkobemeotr tfkt amy|nwe t fe nwe|khh

    ure| evye|aeobe kod A T mkokcemeotbkyklahataer( rkad Tfa Ocuqeo-Fuu( BENng SaoMkcab Aob/ Satf tfe kddatano ngSa|eherr YLBnooev( Rebu|eDnb NRK kod

    \emnwklhe Medak Bnotkaoe| Eob|qytano(Rebu|eDnb 5/2 nobe kckao |karer tfe

    eob|qytano lk| ao t e|mr ng aob|ekraoc

    y|ndubtawatq( |edubaoc AT mkokcemeotkod y|nwadaoc k rekmherr ure|

    evye|aeobe/ Se k|e evbated tn le klhetn dem nort|kte tfere hktert aoonwktanor

    kt AognReb/

    Dehawe|aoc tfe uhtamkte ao eob|qytano

    Ao [;

  • 8/2/2019 e92plus Security Plus Spring 2012

    15/20

    Tklhetr kod rm k| tyfnoer:Bfkhheoce n| nyyn|tuoatq>

    Tkl hetr ' rmk| tyf noer

    k |e bnm aoc - a r qnu |

    o et s n | ` | e kd q >

    Tfe y|nhage|ktano ng rmk|tyfnoer kodtklhetr ao tfe bnorume| rykbe ar {uab`hqsn|`aoc atr skq aotn eote|y|areoetsn|`r/ Ure|r k|e gkhhaoc ao hnwe satftfea| mnlahe dewaber kod k|e yurfaoc tnl|aoc tfe bnoweoaeobe kod y|ndubtawatqtfere dewaber y|nwade aotn tfe sn|`yhkbe/ Hkytny rfaymeotr fkwe ru|ykrredder`tny rfaymeotr( rmk|tyfnoe

    rfaymeotr fkwe ru|ykrred hkytnyrfaymeotr( kod tfe oumle| ng tklhetrfaymeotr ar evyebted tn c|ns ;(;99%nwe| tfe oevt tf|ee qek|r/ Ao rfn|t(ure|r skot mnlahe dewaber/

    Mnrt racoagabkothq( tfeq skot tfea| nso -kod tfeq skot bn|yn|kte oetsn|`kbberr/ 35% ng eote|y|arer kh|ekdq fkwek l|aoc qnu| nso dewabe ynhabq ao yhkbe&mkoq aobhude tklhetr! kbbn|daoc tnKle|deeo C|nuy( kod Ck|toe| y|edabtedtfkt lq

  • 8/2/2019 e92plus Security Plus Spring 2012

    16/20

    L|aocaoc tfe ynse| ng tfe bhnud tnTsn Gkbtn| Kutfeotabktano

    Adeotatq tfegt ar k lac sn||q gn| khhn|ckoarktanor kod aodawadukhr kod satfuytk`e ng tklhetr kod rmk|tyfnoerevyhndaoc kod dktk t|kggab c|nsaoc kt koevynoeotakh |kte( ar ons tfe |acft tametn kdnyt kggn|dklhe( kutnmkted( bhnud-lkred tsn-gkbtn| kutfeotabktano>

    Tfe aob|ekred kcahatq tfkt mnlahebnmyutaoc kod tfe bhnud l|aoc k|ebnmme|bakhhq snode|guh( lut tfeq mk`ekutfeotabktano ng ure|r fk|de|/ Tfktr kre|anur y|nlhem( lebkure g|kud kodadeotatq tfegt k|e mkjn| tf|ektr tn ewe|qn|ckoarktano kod aodawadukh ons/ At arcettaoc tn tfe rtkce sfe|e tsn-gkbtn|kutfeotabktano ar ko erreotakh |ktfe|tfko k oabe-tn-fkwe/

    At fkr gkhheo aotn tfe hktte| bktecn|q gn|mkoq BANr ao tfe ykrt lebkure at skrye|beawed kr leaoc tnn daggabuht kod

    evyeorawe/ Tfktr ramyhq ont tfe bkretndkq/ Tsn-gkbtn| kutfeotabktano arekrq( bko le dehawe|ed kr RkkR( kod atrtntkhhq kutnmkted kod kggn|dklhe/ Ag qnufkwe ont hnn`ed kt at kckao |ebeothq(mkqle atr tame qnu dad>

    Qnu dnot oeed tn le k waranok|q tn ree

    sfq atr oeeded/ Sfeo khh dacatkhaogn|mktano skr rtn|ed ao noe yhkbe(satfao tfe dktk beot|e( at skr |ehktawehqrt|kacftgn|sk|d/ Qnu ramyhq yut k |aoc ngrteeh k|nuod tfkt |ernu|be( deyhnqed kWYO kod eoru|ed tfkt on-noe sfn skr

    ont y|nye|hq kutfn|ared bnuhd cet ao/Fnsewe|( tfe sadery|ekd kdnytano ngRkkR kod bhnud kyyhabktanor( rubf krRkhergn|be( mqRKY( Cnnche Dnbr kodMab|nrngt Nggabe 275 kod ntfe|r( mekortfkt( khh ng k ruddeo( qnu| aotehhebtukhy|nye|tq ar ao mkoq dagge|eot yhkber/

    Ure|r k|e kbberraoc dktk g|nm mkoqdagge|eot hnbktanor kod no k sade|krrn|tmeot ng dewaber sfabf tfeq k|edemkodaoc tfe |acft tn ure tn kbberrbn|yn|kte dktk/ Kyyhe aYfnoer kodaYkdr( Kod|nad rmk|tyfnoer kod tklhetYBr mn|e ure|r hnccaoc aotn tfe dktkbeot|e g|nm yulhab yhkber g|nm ka|yn|thnuocer( ao bnggee lk|r kod no t|kaor/ Atar cettaoc mubf fk|de| tn y|ntebt dacatkhadeotataer/

    Mnrt BANr sahh `ons khh tnn sehh tfktykrrsn|dr jurt k|eot cnnd eonucf kr kgn|m ng y|ntebtano/ Qnu bko fkwe tfe

    we|q lert kotawa|ur rngtsk|e( ga|eskhhrkod aot|urano y|eweotano kod detebtanorqrtemr ao yhkbe( lut tfeq k|e ont cnaoctn le eggebtawe ag rnmenoe `onsr fns tncet aotn tfe rqrtem kod khh tfequrukhhq oeed ar k bu||eot wkhad ure| ADkod ykrrsn|d0 tfkt aogn|mktano ar(

    uogn|tuoktehq( we|q ekrq tn nltkao/

    Eweo ag qnu eogn|be gka|hq rt|abt ynhaberkod mk`e ure|r bfkoce tfem no k|ecuhk| lkrar( ykrrsn|dr y|nwade nohq ktemyn|k|q gn|m ng |erartkobe kckaort

    koq fkb`e| satf tfe |acft tnnhr/ Rn sfqdn rn mkoq n|ckoarktanor bnotaoue tn|ehq no tfem> Sehh( tfeq mkq ont geehtfeq fkwe koq |ekh bfnabe/ Tfeq mkqfkwe hnn`ed kt tsn-gkbtn| kutfeotabktano sfabf y|nwader noe-tame-ure( oewe|-tn-le-|eyekted ykrrsn|d kbberr gn|ure|r lut darmarred no bnrt n|bnmyhevatq c|nuodr/

    Lut khh tfktr bfkoced/ Kutfeotabktano arons ramyhe( ekrq tn amyhemeot kodmkokce &at bko le eota|ehq kutnmkted aogkbt!( kod we|q bnrt-eggebtawe tqyabkhhq(at sahh bnrt on mn|e tfko tfe y|abe ng kbuy ng bnggee( ye| ure|( ye| mnotf/ At ardehawe|ed kr k RkkR kyyhabktano rn tfe|ear on oeed gn| evyeorawe kod daggabuht uy-g|not bkyatkh aowertmeot/ Noe-tame-ure

    ykrrsn|dr bko le dehawe|ed tn hkytnyrn| tklhetr n| tn rmk|tyfnoer( rn tfe|e aron oeed tn yu|bfkre fk|d tn`eor n|bk|d |ekde|r kod tfe re|wabe ar guhhqkutnmkted tn tfe|e ar on oeed tn tae uywkhuklhe AT |ernu|ber no lkb`-|nnmmkokcemeot ng y|nberrer/

    Gn| k demnort|ktano no fns qnu bkoure B|qytnbk|dr uoa{ue bhnud yhktgn|mtn deyhnq ;(999r ng ure|r ao 29 maouter(warat tfe B|qytnbk|d Rtkod B69/

    Tfe uoagaed kyy|nkbf tn oetsn|` rebu| atq:tfe eod ng tfe muhtayhe rnhutanor e|k

    Hek|o mn|e klnut rebu|aoc qnu| l|nsre| satf B|q yt nbk|d no R tkod B69

    At#r ;ym ao tfe kgte|onno kod qnu|ebeawe k bkhh g|nm qnu| nggabe tfkt tfeoetsn|` ar dnso/ At oeedr gavaoc( lut kttfar y|ebare mnmeot( qnu warukhaze kok||kq ng kyyhakober( oekthq hklehhedGa|eskhh( Ckteskq Kotawa|ur( Kota-rykm' Kota-Ryqsk|e( Aot|urano Detebtano kodY|eweotano( Bnoteot Gahte|aoc kod WYO(khh rattaoc ao k |ns satf bklher sn|maocao kod nut ng tfem/ Hnrt ao tfar mkze ngoetsn|`aoc( qnu hnn` tf|nucf wk|anur|eyn|tr tn gacu|e nut sfkt fkr kbtukhhqfkyyeoed/

    Muhtayhe rnhutanor k|e tqyabkhhqdewehnyed kod mkokced lq dagge|eotweodn|r( sfabf bko ynre k bfkhheoce

    sfeo at bnmer tn aote|nye|klahatq/ Tferebu|atq aog|krt|ubtu|e/ Tfe rnhutanobnmer g|nm UTM kyyhakober( dehawe|aocbnmy|efeorawe rebu|atq ao k raochey|ndubt/ Tfeq hewe|kce k fnrt ng tacfthqaotec|kted rebu|atq rnhutanor tfkt sn|`ao tkodem rqrtemktabkhhq tn y|nwadebnmy|efeorawe oetsn|` rebu|atq( satf kraoche beot|khared yhktgn|m tfkt khhnsrkdmaoart|ktn|r tn mnoatn| kod mkokcetfea| oetsn|` rebu|atq eggebtawehq/

    Fnsewe|( mnrt UTM kyyhakober

    bu||eothq no tfe mk|`et gnbur nohq no AYkdd|err-lkred |eyn|taoc kod bnot|nhr rnse `ons sfe|e oetsn|` kbtawatq arnbbu||aoc( lut se#|e rtahh ont ru|e sfn

    tfe kbtukh ure| ar/ Kr aote|okh kodevte|okh tf|ektr bnotaoue tn ewnhwe( at#reweo mn|e amyn|tkot tn `ons sfn arkbberraoc gaher kod |ebeawaoc mkhabanurrykm sfn ar ynraoc k tf|ekt tn qnu|oetsn|` rebu|atq>

    Adeotatq-lkred UTM rnhutanor kdd|errtfar mk|`et bfkhheoce( y|nwadaoc tfeaote|nye|klahatq kod nye|ktanokhghevalahatq tfkt khh n|ckoarktanor demkod/

    Tkh` tn e1

  • 8/2/2019 e92plus Security Plus Spring 2012

    17/20

    A r WD A t f e g u t u | e ( n | a r at f e | e o n s >

    FY |ebeothq ry|ekd dnult no tfe gutu|eng tfe YB ao tfea| n|ckoarktano( kod ALMckwe at tfe hkrt |ater/ Re|we|wa|tukharktano ar ons k mkaort|ekmtebfonhncq( eweo gn| RMLr( kod tfetame gn| der`tny wa|tukharktano ar fe|e/

    Tfar ar mkaohq dabtkted lq yu|ehq|ktanokh gkbtn|r: ebnonmab(n|ckoarktanokh ///kod raobe ( lut at tk`er cnndtebfo a bkh kod lur aoerr uode|r tkod aoc tn kr` s f k t d n q nu s k o t t nkbf aewe>

    Kt e1

  • 8/2/2019 e92plus Security Plus Spring 2012

    18/20

    Kr rmkhh luraoerrer krrerr tfe gkhh nut ngtfe Eu|nznoe b|arar kod ynode| no tfehnoc te|m waklahatq ng tfe U@ ebnonmq(mkoq luraoerrer k|e rtk|taoc k oesgaokobakh qek| kod dewehnyaoc k luraoerryhko tn ruyyn|t c|nstf ao daggabuht tamer/Gn| rnme( aowertaoc ao tebfonhncq sahh lek `eq c|nstf rt|ktecq gn|

  • 8/2/2019 e92plus Security Plus Spring 2012

    19/20

    < Gkbtn| Kutfeotabktano

    Kota-Yfarfaoc

    Kota-Rykm

    Kota-Ryqsk|e

    Kota-Wa|ur

    Lkb`uy ' Darkrte| \ebnwe|q

    L|nsre| Rebu|atq

    Luraoerr Bnotaouatq

    Bhnud . RkkR Rebu| a t q

    Bnoteot Gahte|aoc

    Bnoteot Rebu|atq

    Bnotaounur Dktk Y|ntebtano

    Dktk Hnrr Y|eweot ano

    Der`tny Wa|tukharktano . WDA

    Emkah K|bfawaoc

    Emkah Bnoteot Gahte|aoc

    Eodynaot Hnb`dnso ' Y|ntebtano

    Eob|qy t ano gn | Fk|d D ar`r ' \emnwkl he Med ak

    Ga|eskhhr

    Adeotatq ' Aogn|mktano \acftr Mkokcemeot

    AM ' Y

  • 8/2/2019 e92plus Security Plus Spring 2012

    20/20