Xu hướng mới chống mất mát dữ liệu tại thiết bị đầu cuối

CON^55f?P^WWlffl fr^<br /> <br /> <br /> <br /> <br /> .«iffe|iPnilfB|fM»r*<br /> ThS. Nguyen Thi Van Aiih<br /> <br /> Ngiy nay, viee ngubi dimg tuong tie vbi dir Ueu G I Q I THIEU<br /> tten eie thidt hi di dbng vi luu trir cam tay ngiy Hien nay, cie td chirc, doarta nghiep dang ngiy<br /> cing ting; do db sii dung cac cbng cu de bao ve tii cing quan tim tbi viee chdng mat mat dii Ueu (DLP)<br /> san ciia minh (thbng tta, ngi dung dii lieu tten cac tai thiet bi dau cudi de xba di ke ho trong viee bao<br /> thiet bi niy) dang dugc rihieu ngubi quan tim. DLP ve dii Ueu. Mac dii phan lbn cic td chirc khi trien<br /> (Data loss prevention) tai thiet bi dau cudi li giai khai deu bit dau vol DLP tten he thdng mang de<br /> phip chdng mat mit dir Ueu bao tnim toin dien dat dugc pham vi bao ve rbng rtaat mbt cich nharta<br /> tai cac thiet bi dau cudi, cho phep khich bing tim nhat cb the, tuy nhien viec mat dii Ueu nhay cam<br /> kiem, kiem soit vi bao ve nhimg nbi dung quan vin xay ra. Va chu ydu li b phin doan tii ngubi sir<br /> ttgng a bat eit nai nio dii Ueu db duge luu trii hoic dung a xa ddn cic thidt bi luu trii cam tay, bbi cac<br /> su dung. thiet bi dau cudi niy khbng chi li noi luu tru thbng<br /> tin nhay cam quan ttgng ma cbn li noi ngubi su<br /> dung dinh rat nhieu thbi gian de truy nhip dii Ueu.<br /> Do db DLP tai thiet bi dau cudi cang ttb nen quan<br /> trgng hon.<br /> Tuy nhien, do nhitng ban chd vs bb xu ly vi bg<br /> rtab, ddng thbi cb rtaimg khic biet lbn giiia eie san<br /> pham ciing loai ve mat tirta nang vi hieu ning, cie<br /> giai phap DLP tai thidt bi dau cudi rat phong phu vi<br /> phire tap. Bdi viy de lira chgn dugc mbt giai phip<br /> phii hgp rtaat, dap img rtau cau ciia ban that khbng<br /> don gian.<br /> <br /> <br /> DONG LLTC THUC DAY T H I T R U O N G DLP<br /> T A I THIET B I DAU CUOI<br /> Trabc kia, eac td chirc, doarta nghlsp dubng rtau<br /> chi quan tim ddn DLP tten he thdng mang. Diy li<br /> <br /> <br /> <br /> TAP CHi CNTT&TT KY 2 (5.2010) 11<br />  CONG NGHE - GIAI PHAP<br /> <br /> <br /> mbt ebng eii eho phbp bao ve cie he thdng dugc nghia nbi dung thbng tta nio li quan ttgng vi itaay<br /> quan ly vi khbng duge quan ly; vibe trien khai nb cam, vi cb the tlm ra, rtaan dien, phan loai duge cac<br /> ttong mbt doarta nghiep tuong ddi dd ding vl ban dii Ueu db de bao ve ehung theo cac chinh sach dii<br /> khbng can phai gin ket tat ea eae miy tirta de bin li khi dii Ueu dang duge tmyen di qua mang hay<br /> vio miy chu. Ddng thbi eie giai phip niy cimg eb dang luu rtau d tten cac miy ttam.<br /> lgi the ve sd lugng vi Igai chirta sich bao ve nbi Trong db, DLP tten he thdng mang dugc su dung<br /> dung mi ban eb the trien khai, cich tieh hgp nb vbi de giam sit vi bao ve dir Ueu ttong trayen thbng<br /> thu dien tu cho ebng viec. Trong thbi didm db, vibe mang, vi tim kidm nbi dung dd xu ly dir Ueu ttong<br /> tlm kidm mbt giai phip DLP tai thidt bi dau cudi li luu trii. DLP tai thiet bi dau cudi, do nb cb kha nang<br /> rat khb. Tuy nhien, eimg vbi sir phit trien cua cbng quan ly luu lugng mang khi thiet bi dau eudi nam<br /> nghe, rtau cau cua khich hing vd DLP tai thiet hi tiong cac mang a xa, giam sit cae dii Ueu itaay cam<br /> dau cudi da gia ting rtaanh chbng vbi 2 rtau cau dugc luu trir tten thiet bi dau cudi, vi kiem soit cac<br /> ehinh: Tim kidm ngi dung ttbn thidt bi dau eudi vi sii dung khie, ching han rtau chuyen mbt tip tta<br /> kha nang chdng mat mit dii Ueu tten cic thidt bi den mbt thiet bi luu trii di dbng, hay ta an du Ueu.<br /> luu trii USB. Chirta vi the, cac cbng cu DLP tai thiet Nhta chung. cic chiic nang cua mbt cbng cu hay<br /> bi dau cudi bit dau duge quan tim. giai phip DLP tai thidt bi dau cudi cb the dugc phin<br /> Mbt dbng lue khic thuc day DLP tai thidt bi dau thirta bdn rtabm chtah:<br /> cudi li hd ttg eie chirta sich mang khi mbt he thdng - TUn kiem nbi dung: Qubt nbi dung dugc luu trir<br /> nim ngoii cdng doarta nghiep (corporate gateway). ttong vi pham chinh sich.<br /> Hien nay, do mbi trabng lim viec ning dbng vi tirta - Bao ve file he thdng: Giim sat vi thue thi eie<br /> luu dbng cua cbng viee ngiy cing cao nen viee hd boat dbng, thao tie ddi vbi tip tta khi ehimg xay ra.<br /> ttg eie chirta sich rtaat quin li rat can thiet. Thbng thubng, nb duge su dung de ngan chin sao<br /> Nhu cau tieh hgp DLP siu ban eimg vbi cich mbt ebbp nbi dung sang eie phuang tien tmyen thbng<br /> ngubi sti dung tuong tic vbi he thdng cua hg. Didu di dbng/USB.<br /> niy cb nghia li hd ttg eie chirta sich ehuyen sau - Bao ve mang: Glim sit vi thuc thi eic boat dbng<br /> ban de giam thieu mat mit dii Ueu do ma dbc. Vi du: mang. Cung cap su bao ve mong tu rtau DLP cdng<br /> Ban cb the ngan chan mbt sd nbi dung rtaat dirta khi mbt thidt bi dau eudi li ra khdi mang ebng ty.<br /> thoit khdi eie img dung rtaat dinh, nhu eie ebng Do phan lbn eie thiet bi dau eudi xu ly viec ta an vi<br /> cu ma hba. Nhimg ebng eurtau viy duge sti dimg de fax rtau mbt blrta thitc luu lugng mang, nen diy li<br /> ban chd cit/din, fax, hoic cho phbp bao mat mire noi thuc thi hau bet viee bao ve ta/fax.<br /> cao hon rtau ma hba tu dbng vi img dung quan ly<br /> - Bao ve phan edt 161 eua dii Ueu: Giim sat toin bg<br /> ban quyen sd DRM (Digital rights management).<br /> cie boat dgng, thao tic Uen quan den dir Ueu tiong<br /> cae kich ban sir dung, rtau eit /dan, ban che img<br /> DLP T A I THIET B I DAU CUOI dung vi min btrta ta.<br /> DLP li giai phip giiip eie ebng ty, td ehiic bao ve (!^e ehirc ning eua giai phap DLP tai thiet bi d^u<br /> dti Ueu mat hoic itaay cam cua mtah ttirta viec hi eudi bao quit hau bet eic boat dbng hing ngiy mi<br /> dinh cip, rb ri hoae khi dii Ueu hi vb y mat mit, that ngubi dimg cb the thuc hien tai cic noi mi nbi dung<br /> lae thi ben thii 3 khbng duge phbp citag khbng the eb nguy eo bi mat. Nb hoin toin phii hgp vbi nhimg<br /> dge duge da Ueu db. DLP cung cap cie cbng cu giup dbng luc chirta thiic day sir phit trien eiia DLP tai<br /> eic td ehirc thuc thi vi kiem soit duge ehinh sich thiet hi dau cudi li bao ve du Ueu hi eie thidt bi luu<br /> ve bao mat, an toin du Ueu. DLP cb kha nang dirta trii cam tay, bao ve cac he thdng khi ra khdi mang<br /> <br /> <br /> 12 TAP CHI CNTT & TT KY 2 (5.2010)<br />  CONG NGHE - GLM PHAP<br /> <br /> <br /> ebng ty vi hd ttg viee phat Men tten cae thiet bi se dugc bd sung them tinh ning ma hba dua tten<br /> dau cudi. nbi dung. Mae dii ehimg khbng eung cap day dii<br /> eac Chile nang DLP, itaung cae sin pham niy cimg<br /> rat hiiu ich ddi vbi cie ebng ty, td chirc nhd chi yeu<br /> Ll/A C H O N G I A I PHAP DLP T A I THIET<br /> cau bao ve mbt sd dii Ueu thiet yeu tten thiet bi<br /> BI DAU CUOI<br /> dau cudi, vi khbng mudn mat nhieu chi phi hoac<br /> Hien nay, tten thi trabng eic giai phap DLP tai<br /> tang tirta phiie tap eua mbt giai phap toin dien. Tuy<br /> thiet bi dau cudi dugc ehia lim ba loai:<br /> nhien, tdy ebon niy dan toi viee thieu giao quan ly<br /> • Mgt bb giai phip DLP toin dien (ket hgp DLP chuyen dung eho DLP, vi dieu db eb the gay rtaung<br /> tten toin he thdng mang, eic he thdng Imi trii vi phire tap trong xti U su cd.<br /> tai thiet bi dau cudi).<br /> So vbi hai loai tten, cac giai phip DLP tai thiet hi<br /> • Cie ttah nang DLP duge tich hgp ttong mbt san dau cudi ehuyen dung thubng eung cap nhieu chiic<br /> pham dau cudi khic (nhu kiem soit thiet bi di dbng nang hon. Tuy nhien, khb khin khi trien khai li<br /> hoae ma hba). phai ddi mat vbi rtaimg ring huge vd mat bleu nang<br /> • DLP tai thiet hi dau eudi ehuyen dung. cua eie thiet hi dau eudi vi chi phi trien khai.<br /> Dimg tren quan diem ve bao mat du Ueu, cie giai Trong thue td, eb su khie biet lbn ve chiic ning<br /> phip DLP toin dien eb rtaimg uu the nhat dirta, giiia cic san pham (giai phap) DLP tai thiet hi dau<br /> chimg eho phbp ban dinh rb mbt chirta sich duy cudi mi eae hang san xuat dua ra, rat It eie san<br /> rtaat, vi sau db ip dimg nb tten he thdng mang, he pham hd trg tat ca bdn chiic ning neu tren.<br /> thdng luu tru vi tai thidt bi dau eudi. Thay vl phai Viec quydt dirta lua chgn giai phip cbn tiiy thube<br /> dirta ro mgt quy tic bao ve dii Ueu ttong mbt cbng vio rtau eau bao ve dii Ueu cua ban cung rtau ngan<br /> cu bao ve cho EmaU vi sau db li mgt quy tic khic sich eho phbp. Cic giai phip DLP toin dien thubng<br /> trong mbt ebng eu bao ve cho thiet bi dau cudi, tat eb ehi phi cao nhat, itaung ciing vbi db thi pham vi<br /> ca dugc quan ly vbi mgt miy chu chinh sich duy bao ve citag lbn nhat. Ddi vbi rtaimg td chiic, doarta<br /> nhat. Viec xit U sir cd ciing dugc tip trung, do db ban nghiep cb ngan sich ban ehe mi ehi can rtaimg<br /> khbng can rihieu quan tri vien khac nhau de giai tirta ning DLP tai thidt hi dau eudi co ban nhat, tbi<br /> quyet cac van de ve bao mat khi su cd xay ra. Ngoii viee lira chgn mbt san pham thidt hi dau eudi cb tieh<br /> ra, su dung mbt glal phap toin dien thi pham vi hgp ttah nang DLP li hgp ly rtaat. Do db, mdi mbt<br /> hd ttg li lbn rtaat. Tuy nhien, eic giai phap niy cb doarta nghiep can xae dinh vi lua chgn eho mtah<br /> nhugc diem li thubng thidu cac chiie nang hiiu ieh mbt 0al phip tdt rtaat, phii hgp rtaat de bao mat dii<br /> khie, vi du ehimg eb the yeu hon ttong viec kiem Ueu tai cic thiet bi dau eudi, khbng chi tiong ngin<br /> soit tray rtaap USB. ban mi cbn trong dii ban khi eb the xay ra sir ed<br /> Khi mbt rtai cimg cap thiet bi khbng hdttgDLP mat mit dii Ueu.<br /> bd sung them cie ttah nang DLP, hg thubng bit dau<br /> vbi ViBC chi hd trg cie ttah nang ea ban rtaat hoae<br /> Tai lieu t h a m khao<br /> thiet lip trabc eie ranh de bd sung them tirta ning<br /> DLP vio cic chitc nang hien tai khi can thidt. Vi du, [1]. RICH MOGULL, WHERE DATA LIVES, Infonvation Searity<br /> <br /> mbt san pham kiem soit thiet hi di dbng se duge Magazine, February 2010.<br /> <br /> bd sung them tirta ning Igc eic tip tta ehuyen khi [2]. EncpointDLP Solutions, Symantec<br /> chuyen ehimg sang USB, hoac mbt ebng cu ma hba [3], Endpoint UP fills data protection gap, searchsecurity.<br /> techtargetcom<br /> <br /> <br /> <br /> <br /> TAP CHI CNTT & T T K Y 2 ( 5 . 2 0 1 0 ) | 13<br />