DLP-nkqubo - ntoni na? Ukukhetha DLP-nkqubo

Kule mihla, uyakwazi Sisoloko sisiva nobuchwepheshe ezifana DLP-nkqubo. Yintoni na kwaye kuyo kusetyenziswa phi? Le software wenzelwe ukukhusela ulahleko lwe data by uzingela ezazinokuphazamisa xa uthumela kunye nama. Ngaphezulu, iinkonzo ezinjalo esweni, ucupho kunye uvimba lolwazi oluyimfihlo xa besebenzisa oko, intshukumo (kwenethiwekhi), kwakunye yokugcina.

Ngokuqhelekileyo, le ukuvuza data eyimfihlo kungenxa ukusebenza ubuchule lwabasebenzisi ongenamava, okanye kubangelwa izenzo ngolunya. Ezo ulwazi ngokohlobo ulwazi yabucala okanye corporate, bepropathi enomgangatho ophezulu wokuqonda (IP), iinkcukacha zemali okanye zonyango, credit card kunye nemfuneko ezifana ukomeleza amanyathelo ukhuseleko ukuba kunika ingcaciso advanced technology.

"Ilahleko Data" yaye "ukuvuza data" magama ezinxulumene kwaye adla magama, nangona zahluke kancinane. Ukuba ulahlekelwe ulwazi ajikwa ukuvuza yayo xa umthombo equlethe ulwazi oluyimfihlo ilahlekile kamva kubonakala kwi iqela engagunyaziswanga. Noko ke, ukuvuza data kunokwenzeka ngaphandle ilahleko.

DLP isigaba

iindlela zeteknoloji ukuze kunqandwe ukuvuza kwedatha lungohlulwa lube zezi ntlobo zilandelayo: engaqingqwanga ukhuseleko, amanyathelo yengqondo (advanced), ulawulo ukufikelela kunye encryption, kwakunye abazahluleleyo DLP-nkqubo (yintoni na - ichazwe ngokwenkcukacha ngezantsi).

imilinganiselo eqingqiweyo

La manyathelo standard zokhuseleko ezifana firewalls, iinkqubo intrusion detection (AIDS), kunye software unqulo ke iindlela yesiqhelo ekhoyo ukukhusela iikhompyutha ukusuka ulikheswa kunye ngaphakathi nokuhlaselwa. Connection Firewall, umzekelo, ukuvimbela ukufikelela kwinethiwekhi yangaphakathi ngabantu abangagunyaziswanga, kunye nenkqubo intrusion detection ibhaqa amalinge bangenele. yokuhlaselwa yangaphakathi ingathintelwa ngokujonga Antivirus yokuhlola Trojans, ezifakwe kwi-PC ukuba uthumele inkcazelo eyimfihlo, ngokunjalo ngokusetyenziswa weenkonzo zisebenza bokwakha umxhasi-server ngaphandle nayiphi na idata yobuqu okanye ezibuthathaka egcinwe kwi computer.

amanyathelo ukuphepha

amanyathelo okhuseleko ezongeziweyo kusetyenziswa iinkonzo kakhulu ezizodwa kanye ubuchule yethutyana ukubhaqa ukufikelela engaqhelekanga data (okt. E. zedata okanye iinkqubo zengcaciso retrieval) okanye aziqhelekanga e-mail exchange. Ukongeza, ezi kubuchwepheshe ulwazi mihla ibonisa inkqubo kunye nezicelo ezivela iinjongo ngolunya, kwaye aphumeze uhlolo enzulu yeenkqubo zekhompyutha (umzekelo, ukuqatshelwa nemiba keystroke okanye izandi). Ezinye zezi nkonzo angakwazi esweni umsebenzi umsebenzisi ukubona ukufikelela data engaqhelekanga.

Yenzelwe DLP-nkqubo - ntoni na?

Eyenzelwe ukukhusela ulwazi DLP-izisombululo zisetyenziswa ukubhaqa nokuthintela iinzame olungagunyaziswanga ukukopa okanye udlulise ulwazi olubuthathaka (ngabom okanye bengenzi ngabom) ngaphandle kwemvume okanye ukufikelela, njengoko umthetho, yi abasebenzisi ukufikelela idatha eyimfihlo.

Ukuze lokuhlela ulwazi oluthile kwaye ukulawula ukufikelela kuyo, ezi nkqubo basebenzisa iindlela ezifana ukufanisa ngqo data, fingerprinting ezilungiselelweyo, iindlela zamanani, imithetho ulwamkelo kunye namazwi rhoqo, upapasho lwe khowudi amabinzana, iinkcazelo sengqiqo amagama. Iintlobo kunye Uthelekiso DLP-nkqubo angamelwa ngolu hlobo.

DLP Network (eyaziwa ngokuba uhlalutyo lwe data sindululo okanye ukufiphala)

Ngokuqhelekileyo, oko isisombululo hardware okanye kwisoftwe efakwe kwi amanqaku uthungelwano, yasondela kuYesu lokubiyela. It ihlaziya kwenethiwekhi ukuba ukubona iinkcukacha eziyimfihlelo wathumela nokunyhashwa nkqubo yokhuseleko ulwazi.

Sokugcina DLP (data elisebenzayo )

Ezi nkqubo usebenza workstations abasebenzisi isiphelo okanye abancedisi kwimibutho eyahlukeneyo.

Njengoko kwezinye iinkqubo womnatha, lo sokugcina ingajoliswa ku zombini uqhagamshelo zangaphakathi nangaphandle kwaye, ngenxa yoko, ingasetyenziswa ukulawula ukuhanjiswa kolwazi phakathi kweendidi okanye amaqela abasebenzisi (ezifana "firewalls"). Kwakhona ukwazi esweni i-imeyile kunye uthunyelo lomyalezo olukhawulezileyo. Oko ngolu hlobo lulandelayo - phambi kokuba imiyalezo ikotshelwa kwisixhobo, yokuba zitshekishwe inkonzo, yaye xa umxholo kubo, bavimba isicelo esibi. Ngenxa yoko, azikho ziyaxhonywa zize abekho phantsi imigaqo ukugcinwa data kwisixhobo.

DLP-system (technology) esinokusibambisa ukuba bangajonga ukulawula ukungena uhlobo ngecebo elibonakalayo (umzekelo, izixhobo mobile nge zenzeko yokugcina), kwaye ngamanye amaxesha ukufikelela inkcazelo phambi kokuba encryption.

Ezinye iinkqubo zisebenza isiseko iingongoma ukuphela kwakhona ukunika ulawulo isicelo iinzame block ukudlulisa ulwazi oluyimfihlo, nokunika ingxelo ngoko nangoko umsebenzisi. Noko ke, baya kuba luncedo ukuba kufuneka ifakwe yokusebenzela ngalinye kwi-network, kwaye azinakusetyenziswa kwizixhobo mobile (ezifana cell phones kunye PDA) okanye apho azikwazi kusebenza ifakwe (umzekelo kwi wedesktop kwi-intanethi). Oku kufuneka ithathelwe ingqalelo xa kusenziwa ukhetho DLP-nkqubo ukwenzela nayiphina injongo.

data yesazisi

DLP-nkqubo iquka iindlela ezininzi ezijolise yokuchonga iinkcukacha ezibuthathaka okanye oluyimfihlo. Oku bedidekile ngamanye amaxesha kunye umbhalo. Noko ke, ukuqatshelwa data yinkqubo apho imibutho sebenzisa iteknoloji DLP ukuze abone ukuba bakhangele (kwisenzeko, xa uphumle okanye ukusetyenziswa).

Le data ubalwa njengoko ecwangciselweyo okanye efan. Uhlobo lokuqala ligcinwa emasimini ezisisigxina ngaphakathi ifayile (umzekelo, ngokohlobo spreadsheets), ngelixa efan libhekisela ezamahala uhlobo lwetekisi (ngohlobo lwe amaxwebhu okubhaliweyo okanye iifayile-PDF).

Ngokutsho kweengcali,-80% yazo zonke data - efan. Ngako oko, 20% - wakhiwe. yokuhlela ulwazi lusekelwe uhlalutyo umxholo, nomntu nelungiselelwe inkcazelo enemveliso hlahlelo lomxholo. Yenziwe kwindawo ekudalweni isicelo okanye nenkqubo nesuka idatha. Ngoko ke, impendulo yombuzo «DLP-nkqubo -? Yintoni" Iya kusebenza njengoko inkcazo uhlalutyo algorithm kolwazi.

iindlela ezisetyenzisiweyo

uchaze iindlela isiqulatho ezibuthathaka namhlanje baninzi. Bangakwazi zingahlulwa ngokweendidi ezimbini: ngqo kunye inexact.

iindlela ngqo - abo bahlobene uhlalutyo lomxholo nangokusebenzayo kwiqanda iimpendulo okungamanga nezicelo.

Zonke ezinye engacacanga kwaye ziquka: izichazi-magama, amagama, amabinzana rhoqo, amabinzana eyandisiweyo rhoqo, meta-tags, uhlalutyo Bayesian, uhlalutyo lwamanani, etc ...

Uhlalutyo ukusebenza kuxhomekeke ichanile. DLP-hlelo isikali phezulu, kukho namaziko asebenza kwizinga eliphezulu ukuba parameter elinikiweyo. Ukuchaneka DLP lokwazisa kubalulekile ukuphepha positives zobuxoki kunye neziphumo ezibi. Ukuchaneka ixhomekeke kwiimeko ezininzi, ezinye esenokuba lwemeko okanye inkqubo. uvavanyo Ukuchaneka ukuqinisekisa ukuthembeka DLP-iinkqubo - phantse zero positives bobuxoki.

Efumanisa nokunqanda ukuvuza ulwazi

Ngamanye amaxesha umthombo lonikezelo data yenza ulwazi zabucala ezifumanekayo amaqela esithathu. Emva kwexesha elithile inxalenye kusenokwenzeka ukuba zingabonakaliyo kwindawo engagunyaziswanga (umz, kwi-intanethi okanye kwi laptop omnye umsebenzisi). DLP-nkqubo, ixabiso enika abasunguli on-yimfuno kwaye eziqalela elinesibini ezimbalwa ukuya amawaka ambalwa, kufuneka emva koko ukuhlola indlela iinkcukacha avuza - liZiko elinye okanye nangaphezulu amaqela wesithathu, nokuba uzimele nganye ezinye, ukuba ukuvuza zazilungiselelwe kakimi- ezinye iindlela, njalo njalo. d.

Idatha e abanye

"Idatha nokuphumla" libhekisela data yokugcina endala egcinwe kwi nayiphi na PC client hard drive kwi server ifayile yobekelo kude, lo diski NAS. Kwakhona, le nkcazo usebenza idatha egcinwe kwinkqubo backup (kwi flash drive okanye kwi-CD-ROM). Olu lwazi umdla enkulu kumashishini nee-arhente zikarhulumente kuba nje ixabiso elikhulu data equlethwe izixhobo inkumbulo ezingasetyenziswanga, kwaye kusenokwenzeka ukuba ukufikelela kubo zingafunyanwa ngabantu abangagunyaziswanga ngaphandle kwenethiwekhi.