卿¸(shù)åç¶æ¿æµªæ½®å¸å·å ¨ççç¶ä¸ï¼æ¸(shù)æ(jù)å·²æçºç¹¼åå°ãåååãè³æ¬ãæè¡ä¹åç第äºå¤§çç¢è¦ç´ ãæ¸(shù)åç¶æ¿çè¬åç¼(fÄ)å±ï¼å¾äºè¨ç®ã大æ¸(shù)æ(jù)å°äººå·¥æºè½ãç©è¯(lián)ç¶²ï¼ç¡ä¸å»ºç«å¨æµ·éæ¸(shù)æ(jù)æµè½èèççåºç¤ä¹ä¸ãæ©éè風éªå¹¶åï¼æ¥çå´å³»çç¶²çµ¡æ»æãæ¸(shù)æ(jù)æ³é²ã系統(tÇng)ç±ççå®å ¨å¨è ï¼å¦åéæ©å 婿¯ä¹åï¼é«æ¸äºæ¸(shù)åä¸ççä¸ç©ºã卿¤èæ¯ä¸ï¼ä¿¡æ¯å®å ¨å·²ä¸å å æ¯æè¡å±¤é¢çé²è·ï¼æ´æ¯ä¿éåå®¶æ¸(shù)å主æ¬ãç¶æ¿å®å ¨å社æç©©(wÄn)å®çâåä¿¡ä¹ç¾âãèä½çºæ§çéé¢ç¾ççæ ¸å¿å·¥å ·èè¼é«ï¼ç¶²çµ¡èä¿¡æ¯å®å ¨è»ä»¶éç¼(fÄ)æ£å´èµ·çºæ¸(shù)åç¶æ¿ä¸è³ééè¦çç´°åè³½éã
ä¸ã æ¸(shù)åç¶æ¿çå®å ¨åºç³ï¼çºä½ä¿¡æ¯å®å ¨æ¯âåä¿¡ä¹ç¾âï¼
- ä¿éåå®¶æ¸(shù)å主æ¬èå®å ¨ï¼å¨æ¸(shù)å空éï¼ééµä¿¡æ¯åºç¤è¨æ½ï¼å¦è½æºãéèã交éãé信網絡ï¼å·²æçºåå®¶éè¡çå½èãéå°éäºè¨æ½çæ¡æç¶²çµ¡æ»æï¼å¯è½é æç½é£æ§åæï¼ç´æ¥å¨è åå®¶å®å ¨ãä¿¡æ¯å®å ¨æ¯ç¶è·åå®¶æ¸(shù)åçå宿´ã鲿¢æµå°å¢å滲éç ´å£çæ°(zhà n)ç¥å±éã
- è·èªæ¸(shù)åç¶æ¿ç¼(fÄ)å±ï¼æ¸(shù)åç¶æ¿ä¾è³´ä¿¡ä»»ãç¡è«æ¯é»åæ¯ä»ãå·¥æ¥(yè)äºè¯(lián)ç¶²ï¼éæ¯æ¿åæ¸(shù)ååï¼é½éè¦å®å ¨å¯é çç°(huán)å¢ãé »ç¹çå®å ¨äºä»¶æå´éææç¨æ¶ä¿¡å¿ï¼é»ç¤æè¡åµ(chuà ng)æ°è忥(yè)模å¼çè½å°ã強大çä¿¡æ¯å®å ¨è½åæ¯æ¸(shù)åç¶æ¿æ´»åå¾ä»¥é æ¢ãå¯ä¿¡éå±çå æ±ºæ¢ä»¶ã
- ä¿è·æ ¸å¿æ¸(shù)æ(jù)è³ç¢ï¼æ¸(shù)æ(jù)æ¯æ¸(shù)åç¶æ¿çâç³æ²¹âã伿¥(yè)ç忥(yè)ç§å¯ãå人çé±ç§ä¿¡æ¯ãåå®¶çæææ¸(shù)æ(jù)ï¼ä¸æ¦æ³é²æè¢«ç¯¡æ¹ï¼å°é æç¡æ³ä¼°éçç¶æ¿æå¤±åè²è½æå®³ãä¿¡æ¯å®å ¨çæ ¸å¿ä»»åä¹ä¸ï¼å°±æ¯ç¢ºä¿éäºæ ¸å¿æ¸(shù)æ(jù)è³ç¢çæ©å¯æ§ã宿´æ§åå¯ç¨æ§ã
- æå°åè¦(guÄ«)èç£(jiÄn)ç®¡è¦æ±ï¼é¨èã網絡å®å ¨æ³ãããæ¸(shù)æ(jù)å®å ¨æ³ãããå人信æ¯ä¿è·æ³ãçæ³å¾æ³è¦(guÄ«)çç¸ç¹¼åºèºèå®åï¼ä¿¡æ¯å®å ¨å·²æçºä¼æ¥(yè)å¿ é å±¥è¡çæ³å®ç¾©åãåè¦(guÄ«)é© åæ£è½è®?yÅu)éºå§¶è®æ°è¢é°åçî¨è¿çé¤è¢ I(yè)å 大å®å ¨æå ¥ã
äºã æ ¸å¿é© ååï¼ç¶²çµ¡èä¿¡æ¯å®å ¨è»ä»¶éç¼(fÄ)çè³½éå´èµ·
網絡èä¿¡æ¯å®å ¨è»ä»¶éç¼(fÄ)ï¼æ¯éç¨è»ä»¶å·¥ç¨æ¹æ³ï¼è¨è¨ãéç¼(fÄ)ãæ¸¬è©¦åç¶è·ç¨äºä¿è·è¨ç®æ©ç³»çµ±(tÇng)ãç¶²çµ¡ãæ¸(shù)æ(jù)å åæ»æãç ´å£ææªææ¬è¨ªåçå°ç¨è»ä»¶ãéä¸è³½éçè¬åç¼(fÄ)å±ï¼æºäºå¤éååå¯èï¼
- æè¡é© åï¼æ»æææ®µæ¥çé«ç´åã復éåï¼å¦APTæ»æãåç´¢è»ä»¶ã便鿻æï¼ï¼åé¼é²å¾¡æè¡ä¸æ·è¿ä»£ã人工æºè½ãæ©å¨å¸ç¿ãå¨è æ å ±ãé¶ä¿¡ä»»æ¶æ§ãäºåçå®å ¨çæ°æè¡èå ¥å®å ¨è»ä»¶ï¼æ¨åç¢åæºè½åãèªååèå¹³èºåç¼(fÄ)å±ã
- éæ±é© åï¼
- æ³å¨åéæ±ï¼æ¸(shù)ååçæ·±å ¥ä½¿å¾å¹¾ä¹ææè¡æ¥(yè)ãææè¦(guÄ«)模ççµç¹é½æçºæ½å¨ç®æ¨ï¼å®å ¨éæ±å¾å³çµ±(tÇng)ITãéèãé»ä¿¡åå¶é ãé«(yÄ«)çãæè²ãæ¿åºçå ¨è¡æ¥(yè)æ´æ£ã
- å ´æ¯åéæ±ï¼äºè¨ç®ãç§»åè¾¦å ¬ãç©è¯(lián)ç¶²ãå·¥æ¥(yè)äºè¯(lián)ç¶²çæ°å ´æ¯å¸¶ä¾äºå ¨æ°çå®å ¨ææ°(zhà n)ï¼å¦äºå®å ¨ã端é»å®å ¨ãå·¥æ§å®å ¨ã身份è訪å管çï¼ï¼å¬çäºç´°åé åçå°æ¥(yè)å®å ¨è»ä»¶å¸å ´ã
- åè¦(guÄ«)é© åï¼åå §å¤å´æ ¼çåè¦(guÄ«)è¦æ±ï¼ä½¿å¾å®å ¨è»ä»¶ï¼å¦æ¥å¿å¯©è¨ãæ¸(shù)æ(jù)è«æãé±ç§è¨ç®è»ä»¶ï¼æçºä¼æ¥(yè)âåéâç¢åã
- æ¿çèè³æ¬é© åï¼åå®¶å°ç¶²çµ¡å®å ¨æåå°åææªæçæ°(zhà n)ç¥é«åº¦ï¼ç¢æ¥(yè)æ¶ææ¿çé »åºãå®å ¨è³½éååè³æ¬å¸å ´éçï¼èè³æ´»èºï¼çºæè¡åµ(chuà ng)æ°åç¢åç ç¼(fÄ)æä¾äºå è¶³çâå½è¥âã
ä¸ã è³½é主è¦ç´°åé åè趨å¢
ç¶åï¼ç¶²çµ¡èä¿¡æ¯å®å ¨è»ä»¶éç¼(fÄ)已形æé¾å¤§ä¸ç´°åçå¸å ´æ ¼å±ï¼ä¸»è¦æ¶µèï¼
- åºç¤å®å ¨é²è·è»ä»¶ï¼é²ç«å¢»ãå ¥ä¾µæª¢æ¸¬/é²å¾¡ç³»çµ±(tÇng)ï¼IDS/IPSï¼ãé²ç æ¯è»ä»¶ãWebæç¨é²ç«å¢»ï¼WAFï¼çã
- 身份è訪å管çï¼IAMï¼ï¼çµ±(tÇng)ä¸èº«ä»½èªèãå®é»ç»éãæ¬é管çãå¤å ç´ èªèè»ä»¶çã
- æ¸(shù)æ(jù)å®å ¨è»ä»¶ï¼æ¸(shù)æ(jù)å å¯ãæ¸(shù)æ(jù)è«æãæ¸(shù)æ(jù)庫å®å ¨ãæ¸(shù)æ(jù)鲿³æ¼ï¼DLPï¼ãé±ç§è¨ç®å¹³èºçã
- å®å ¨åæèé¿æï¼å®å ¨ä¿¡æ¯åäºä»¶ç®¡çï¼SIEMï¼ãå®å ¨ç·¨æèªååèé¿æï¼SOARï¼ãå¨è æ å ±å¹³èºã網絡æµéåæï¼NTAï¼è»ä»¶çã
- äºå®å ¨èå·¥æ§å®å ¨è»ä»¶ï¼äºå·¥ä½è² è¼ä¿è·å¹³èºï¼CWPPï¼ãäºå®å ¨æ (tà i)å¢ç®¡çï¼CSPMï¼ãå·¥æ¥(yè)é²ç«å¢»ãå·¥æ§å ¥ä¾µæª¢æ¸¬ç³»çµ±(tÇng)çã
- æ°èé åï¼DevSecOpså·¥å ·éãè»ä»¶ä¾æéå®å ¨è»ä»¶ãéåå®å ¨å å¯è»ä»¶çã
ç¼(fÄ)å±è¶¨å¢åç¾(xià n)以ä¸ç¹é»ï¼
1. å¾âç¢åå çâå°âå¹³èºæ´åâï¼ä¼æ¥(yè)å¾åäºéç¨éæåº¦é«ãè½å¤ çµ±(tÇng)ä¸ç®¡çåè¯(lián)åçå®å
¨å¹³èºï¼èéå¤ç«çå®å
¨ç¢åã
2. âå®å
¨å·¦ç§»âèâåçå®å
¨âï¼å®å
¨è½å被èå
¥å°è»ä»¶éç¼(fÄ)çå
¨çå½å¨æï¼DevSecOpsï¼åäºåçæ¶æ§çåºå±¤ï¼å¯¦ç¾(xià n)å
§çå®å
¨ã
3. æºè½åèèªååï¼å©ç¨AI/MLé²è¡å¨è
é æ¸¬ãç°å¸¸æª¢æ¸¬åèªååé¿æï¼ä»¥æå°äººåçç¼ºåæ»æéåº¦çææ°(zhà n)ã
4. æååï¼å®å
¨å³æåï¼ï¼é¨èäºåæ®åï¼ä»¥è¨é±æ¨¡å¼æä¾çå®å
¨è½åï¼å¦MSSPãSASEï¼æ£æçºéè¦äº¤ä»å½¢å¼ã
åã ææ°(zhà n)è屿
ç¡ç®¡åæ¯å»£éï¼è³½éä¹é¢è¨ææ°(zhà n)ï¼æè¡äººæçç¼ºãæ»é²æè¡å¿«éæ¼é²å¸¶ä¾çç¢åè¿ä»£å£åãç¨æ¶å®å ¨æå ¥èèªç¥æ°´å¹³ä¸åãåéç«¶çè便éå®å ¨é¢¨éªçã
網絡èä¿¡æ¯å®å ¨è»ä»¶éç¼(fÄ)ä½çºâåä¿¡ä¹ç¾âçéé è»éï¼å ¶æ°(zhà n)ç¥å¹å¼å°æç¼(fÄ)å¸é¡¯ãå®ä¸å æ¯æ¸(shù)åç¶æ¿å¥åº·ç¼(fÄ)å±çâè·èªå¡âï¼æ´æ¯å家卿¸(shù)åæä»£ç¶åç«¶çåçéè¦é«ç¾(xià n)ã坿æçº(xù)å 大åµ(chuà ng)æ°æå ¥ï¼çªç ´é鵿 ¸å¿æè¡ï¼å¹é¤(yÇng)å°æ¥(yè)人æï¼æ§å»ºèµ·èªä¸»å¯æ§ã主åå ç«çå®å ¨è»ä»¶é«ç³»ï¼æè½éå°±å ä¸å¯æ§çæ¸(shù)åå®å ¨é²ç·ï¼çºæ¸(shù)åä¸åçå®åèåå¥ å®å å¯¦æ ¹åºã