Hukumar Tsaro ta Yanar Gizo da Tsaro ta Lantarki (CISA) ta kira "rashin sa ido kan hanyar sadarwa na ciki" daya daga ciki 10 mafi yawan sabawa tsarin hanyar sadarwa wannan shekara. Hakika, Binciken cibiyar sadarwa da ganuwa (NAV) ya kasance kalubale na dindindin. Yayin da iyakokin da ke kewaye da hanyar sadarwar gargajiya ke ɓacewa kuma yanayin barazanar aiki ya zama mafi rikitarwa, kamfanoni suna buƙatar sabbin hanyoyi da mafita don kare ayyukansu, tsaro, da ci gaba.

Shi ke inda MITER ATT & CK Tsarin ya shigo ciki. Dabarun abokan gaba da dabarun da yake tattarawa suna taimaka mana fahimta da magance barazanar yanar gizo kamar ransomware, da kuma barazanar ci gaba (APTs) waɗanda burinsu shine haifar da lahani mai yuwuwa ga kamfani. Ta hanyar neman sanannun dabaru da dabaru na sanannun ƙungiyoyin APT, Ƙungiyoyin tsaro na yanar gizo na iya dakile barazanar kafin su koma kai hare-hare masu nasara.

Da zarar an gano ransomware, yawanci hanya ta yi latti don hana lalacewa. Wannan yana jaddada buƙatar cikakkiyar kulawa da ci gaba da hanyar sadarwa, fahimtar dabarun rigakafi, da kuma damar da ba za a iya gani ba don gano abubuwan da ba su da kyau wanda ba wai kawai ya ƙunshi zirga-zirgar "arewa-kudu" tsakanin cibiyar bayanai da abokan ciniki ba, amma "gabas-yamma" zirga-zirga. tsakanin sabobin kuma.

Fahimtar Tsarin Kasa na Barazana da hanyar sadarwar ku

Yayin da cikakken hangen nesa na cibiyar sadarwa shine makasudin ƙarshen, hakan yana da sauƙin faɗi fiye da aikatawa. Ƙungiyoyi suna buƙatar cikakke ganuwa a fadin yanayin yanayin isar da sabis. Kula da ayyukan cibiyar sadarwa don bin diddigin zirga-zirgar ababen hawa da amfani da aikace-aikacen yana da mahimmanci. Bugu da kari, dole ne ku wuce ganuwa na kasuwanci gabaɗaya don aiwatar da ingantaccen aiki mai fa'ida da dabarun samuwa wanda ya ƙunshi ba kawai hedkwatar ba, ofisoshin nesa, da cibiyoyin bayanan masu zaman kansu, har ma da cibiyoyin launi, cibiyoyin sadarwar jama'a, gajimare na jama'a, da mahallin SaaS.

Bugu da ƙari, kiyaye manyan ayyuka na dijital a cikin haɓakar yanayin gajimare masu rarraba yana da mahimmanci ga ƙungiyoyin IT na kasuwanci. Tare da ƙarin yanayi da aka rarraba ya zo da sababbin ƙalubale wajen samar da abokan ciniki da ma'aikata masu haɗaka tare da aminci, amintaccen damar shiga da wadatar aikace-aikacen kasuwanci da ayyuka. A wasu lokuta, sarrafa ingantacciyar aiki a sakamakon ci gaban zirga-zirgar ababen hawa a cikin hanyoyin haɗin SD-WAN, mahimman hanyoyin Intanet, ƙofofin VPN, da gajimare masu haɗaka sun ƙaura daga ƙalubalen aiki zuwa fifiko-mahimmancin kasuwanci.

Misali, kamfanoni da yawa a yau sun matsar da dubunnan ma'aikata zuwa aiki-daga-gida da yanayin gajimare a lokacin cutar da kuma bayan cutar. Kamar yadda kamfanoni suka canza zuwa matasan ma'aikata da sifili amintattun samfuran, Ƙungiyoyin NetOps sun fahimci cewa suna buƙatar kayan aiki mafi kyau don gano ko SD-WAN bandwidth na iya ɗaukar nauyin haɓaka a cikin hanyoyin sadarwa na nesa da ke da alaka da dubban masu amfani da nesa. A lokaci guda, ƙungiyoyin SecOps suna buƙatar wannan matakin hangen nesa don gano barazanar da kuma tabbatar da cewa manufofin cibiyar sadarwar sifili suna aiki kamar yadda aka tsara.

Daga ƙarshe, ta hanyar fahimtar yanayin barazanar cibiyar sadarwa a cikin wannan misalin, gudanarwar IT na iya ƙara fahimta da gano inda "kayan ado na kambi" kamar manyan sabobin, aikace-aikace, da bayanan bayanai ke zama. Ta wannan hanyar, lokacin da barazanar ta faru, halayen da ba su da kyau sun fi bayyana ga ƙungiyoyin NetOps da SecOps.

A cikin faɗuwar yanayin gefen sabis na yau, hangen nesa mai nisa ƙwarewar mai amfani a cikin mahallin cibiyar sadarwar multitier da mahallin masu siyarwa yana da mahimmanci don ware matsaloli cikin sauri da samar da ganuwa a duk matakan MITER ATT&CK.

Tabbatar da Ganuwa na hanyar sadarwa duka na ciki ne da na waje

Ƙungiyoyin IT suna buƙata ganin karshen-zuwa-karshe a duk hanyar sadarwar kasuwancin su, daga SD-WAN da ofisoshi masu nisa, zuwa ga mahalli / multicloud, zuwa co-los da cibiyoyin bayanai. Lokacin da rashin hangen nesa, ƙungiyoyin SecOps ba su da isasshen haske game da duk matakan MITER ATT&CK.

Yanayin aminci na zamani yana ɗauka cewa an riga an keta hanyar sadarwar. Wato, matakan farko na MITER ATT&CK - bincike, haɓaka albarkatun, da samun damar farko - sun riga sun faru. Ganuwa cibiyar sadarwa ta Arewa-kudu kadai yanzu bai isa ba don bin diddigin motsi na cikin gida na maharin, wanda a yanzu yana ci gaba ta hanyar aiwatar da MITER ATT&CK daga baya, dagewa, haɓaka gata, gujewa tsaro, samun damar shaida, ganowa, motsi ta gefe, da tattarawa.

Don kama kutse a waɗannan matakan, ƙungiyoyin SecOps suna buƙatar ganin zirga-zirga gabas-yamma. Tare da wannan matakin ganuwa a cikin sadarwar uwar garken-uwar garke, ƙungiyoyin SecOps za su iya gano halayen zirga-zirgar ababen hawa game da sabar kambin su. A yayin harin fansa, da yawa daga cikin dabarun MITER ATT&CK da dabaru sun rigaye ainihin ɓarna da ɓoye bayanan.

Hare-hare na wannan yanayin yana nuna buƙatar ci gaba da sa ido kan hanyar sadarwa, fahimtar dabarun rigakafin, da iyawar gani da ba a hana su ba don gano abubuwan da ba su dace ba waɗanda ke tattare da zirga-zirgar ababen hawa daga kowane bangare. Ta hanyar yin amfani da duka-cikin-fuskanci da mafita na waje, IT, NetOps, da ƙungiyoyin SecOps na iya aiwatar da mafi kyawun-na-duniya-duniya aikin saka idanu.

Yin amfani da bayanan da aka samo daga nau'ikan nau'ikan fakitin hanyar sadarwa yana taimakawa wajen magance matsalolin warewa a cikin mahalli da mahalli masu nisa. Ana buƙatar haɗin haɗin haɗin yanar gizo na arewa-kudu da gabas-maso-yamma don matakan ƙarshe na MITER ATT&CK - umarni da sarrafawa, haɓakawa, da tasiri.

• Ƙunshin Ƙarfafa SEO & Rarraba PR. Samun Girma a Yau.
• PlatoData.Network Tsaye Generative Ai. Karfafa Kanka. Shiga Nan.
• PlatoAiStream. Web3 Mai hankali. Ilmi Ya Faru. Shiga Nan.
• PlatoESG. Carbon, CleanTech, Kuzari, Muhalli, Solar, Gudanar da Sharar gida. Shiga Nan.
• PlatoHealth. Biotech da Clinical Trials Intelligence. Shiga Nan.
• Source: https://www.darkreading.com/cybersecurity-operations/using-east-west-network-visibility-detect-threats-mitre-attck