He aha te Kaupapa Whakahaere Whakaraeraetanga, ā, he aha koe i hiahia ai ki tētahi?
Hei noho matatau ki ngā tūmomo riri ipurangi e whanake haere ana, he mea nui kia te hoahoa i tētahi kaupapa whakahaere ngoikoretanga e tautuhi ana, e whakatau ana i ngā kaupapa matua, e whakaiti ana hoki i ngā mōrearea haumarutanga. Engari tera pea koe e whakaaro ana, he aha te kaupapa whakahaere ngoikoretanga?
He māmā noa iho, he tukanga hanganga te kaupapa whakahaere ngoikoretanga hei kimi, hei aromatawai, hei whakatika hoki i ngā ngoikoretanga puta noa i tō hanganga hangarau mōhiohio. Kei roto i tēnei tukanga te whakapau kaha tonu ki te pupuri i te haumaru me te pakari o ō pūnaha.
Heoi anō, mā te whakatinana i tētahi kaupapa pakari ka katihia ngā āputa haumarutanga i mua i te whakamahinga a ngā kaiwhakaeke. Nō reira, ka taea e tō whakahaere te tiaki i a ia anō mai i ngā takahi raraunga, ngā takahi ture, me ngā whakararuraru mahi. E ai ki te CISHe Aratohu Rauemi Whakahaere Whakaraerae, ko te whakahaere ngoikoretanga whai hua e whai ana i tētahi huringa tonu o te tautuhi i ngā rawa, te matawai i ngā ngoikoretanga, te whakarite i ngā kaupapa matua mō ngā mōrearea, me te whakamahi i ngā whakatikatika i te wā tika.
I roto i tēnei aratohu, ka tūhuratia e mātou me pēhea te hoahoa i tētahi kaupapa whakahaere ngoikoretanga mā te whakamahi i ngā mahi pai pēnei i te Te whakatauranga EPSS, tātaritanga āheinga, CI/CD te whakaurunga haumarutanga, me te whakatikatika aunoa. Hei tāpiri, ka matapakihia e mātou me pēhea te whakapakari i tō kaupapa mā te hono atu ki ngā anga haumarutanga tukutuku rerekē.
Ngā Wāhanga Matua hei Hoahoa i tētahi Kaupapa Whakahaere Whakaraerae me Xygeni
He maha ngā wāhanga e hono tahi ana i roto i te hoahoa i tētahi kaupapa whakahaere ngoikoretanga. He waimarie, kei a Xygeni ngā taputapu e hiahiatia ana hei tautoko i ia taahiraa. Nō reira, ka whai hua, ka aunoa, ka pakari hoki te tukanga. Me titiro tātou ki ēnei wāhanga matua, kia kite ai me pēhea te āwhina a Xygeni i a koe i ia taahiraa.
1. Te Kitea o ngā Rawa me te Rārangi Taonga
Ko te rarangi katoa o ō rawa te tūāpapa mō tētahi kaupapa whakahaere ngoikore angitu. Nā te mea, ki te kore koe e mōhio he aha ō rawa, e kore e taea e koe te tiaki i aua rawa.
- Hei tīmatanga, aunoatia te kimi rawa kia mau tonu ai tō rarangi taonga. Ka tautuhia aunoatia e Xygeni, ka whakarārangihia hoki ngā rawa, pērā i ngā putunga waehere, ngā whirihoranga hanganga, me ngā whakawhirinakitanga tuatoru.
- Muri iho, whakarōpūtia ō rawa mā te hiranga me te mahi pakihi. Mā tēnei ka āwhina i a koe ki te arotahi i ō mahi tiaki ki ngā wāhi e tino hiahiatia ana.
- Hei tāpiri, kia mau tonu te tirohanga puta noa on-premisengā taiao kapua, me ngā taiao ranuMā te rarangi taonga matua a Xygeni koe e hoatu he puna kotahi o te pono mō tō whenua katoa o ngā rawa.
Nō reira, ka taea e koe te whakahaere i ngā ngoikoretanga me te māia me te tika. Hei tāpiri, mā tēnei tirohanga whānui koe e āwhina ki te mārama ki te mahi a tētahi kaupapa whakahaere ngoikoretanga i roto i te mahi.
2. Te Matawai i te Whakaraeraetanga Tonu
Ka puta ake ngā ngoikoretanga hou i ia rā, i ia rā. Nō reira, he mea nui te matawai tonu hei hanga i tētahi kaupapa whakahaere ngoikoretanga e mau tonu ana ki ēnei tūmomo riri e whanake haere ana.
- Whakauruhia ngā matawai ki roto i tō CI/CD pipelines hei kite i ngā ngoikoretanga i te wā whakawhanake me te whakatinanatanga. Ka mahi tahi a Xygeni me ō taputapu DevOps, ka hopu wawe i ngā ngoikoretanga.
- karapa Hanganga hei Waehere (IaC) tātauira hei ārai i ngā whirihoranga hē kei tae atu ki te whakaputanga.
- Arotakehia ngā hua o te matawai i te wā tonu me te whakarite i ngā ngoikoretanga mōrearea nui hei mahi wawe tonu.
Hei tāpiritanga, mā te matawai wā-tūturu a Xygeni ka whakaitihia ngā whakaroa, ā, ka whakarite kia noho haumaru, kia tere hoki tō tukanga whanaketanga, he mea nui tēnei mō te angitu o te kaupapa whakahaere ngoikoretanga.
3. Te Whakatairanga i ngā Whakaraeraetanga ki te EPSS, CVSS, me te Tātari Taenga
I te nui o ngā ngoikoretanga, he mea nui kia arotahi ki ngā mea e tino mōrearea ana. Mā te whakarite i ngā kaupapa matua whai hua ka whakarite kia tohaina ō rauemi ki te whakaaro nui, ā, ka tautoko i te whāinga o te kaupapa whakahaere ngoikoretanga.
- whakamahi EPSS (Pūnaha Kaute Matapae Whakamahi) hei matapae i te tūponotanga ka whakamahia kinotia tētahi ngoikoretanga.
- huanga CVSS (Pūnaha Tohu Whakaraerae Whakaraerae) hei aromatawai i te kaha me te pānga o ia ngoikoretanga.
- Whakauruhia te tātaritanga taea te toro atu hei whakatau mēnā ka taea te whakamahi kino i tētahi ngoikoretanga i roto i tō taiao wā whakahaere.
Ka whakakotahi a Xygeni i ēnei tikanga hei tuku i ngā awa whakarōpū hihiri. Nō reira, ka arotahi koe ki ngā ngoikoretanga he mea nui, he mea ka taea hoki te whakamahi, e tino rite ana ki te āhua o te hoahoa i tētahi kaupapa whakahaere ngoikoretanga.
4. Te Whakaora Aunoa
Ka taea e te whakatikatika ā-ringa te ngāwari ki te hapa, ā, ka roa hoki te wā. Nō reira, mā te aunoa ka taea e tō kaupapa whakahaere ngoikoretanga te aro atu ki ngā ngoikoretanga i te tere me te auau.
- Whakatakoto aunoa i te papaki i roto i to CI/CD ngā tukanga mahi hei whakatau wawe i ngā ngoikoretanga.
- Whakaritea ngā kaupapa here whakatikatika kia rite ki te manawanui mōrearea o tō whakahaere me ngā hiahia pakihi.
Mā Xygeni, ka noho te whakatikatika aunoa hei wāhanga pai o tō tukanga whanaketanga. Nō reira, ka taea e tō rōpū te arotahi ki te auahatanga kaua ki ngā mahi haumarutanga noa, ā, ka māmā ake te hanga i tētahi kaupapa whakahaere ngoikoretanga e tino whai hua ana.
5. Te Aroturuki Tonu me te Kitenga i ngā Āhuatanga Kāore i te Tika
Ahakoa te matawai pakari me te whakatikatika, ka puta pea ngā tūmomo riri hou i te kore e tūmanakohia. Nō reira, mā te aroturuki tonu ka noho tonu koe i mua i ngā mahi tinihanga pea—he mātāpono matua o te kaupapa whakahaere ngoikoretanga. Mā te pupuri tonu i te mataara, ka taea e koe te tautuhi me te whakaiti i ngā tūmomo riri i mua i te pikinga ake hei aituā haumarutanga nui.
- Matamua e te rahi, aroturuki i ngā pūnaha matua mō ngā huringa kāore i whakamanahia, ngā whirihoranga hē, ngā mahi whakapae rānei. Mā tēnei ka taea te tautuhi wawe i ngā mōrearea pea.
- I tua atu, whakamahi te kitenga anomaly kia kitea ai ngā rerekētanga mai i ngā tauira whanonga noa. Nō reira, ka taea e koe te wehewehe wawe i waenga i ngā mahi o ia rā me ngā tūmomo mōrearea pea.
- I tua atu, whakatūria ngā whakatūpato wā-tūturu ki te whakamōhio tonu atu ki tō rōpū mō ngā raruraru pea. Mā te mahi pēnā, ka whakaitihia te wā urupare, ā, ka whakaitihia hoki ngā mōrearea.
I te katoa, mā te kimi i ngā āhuatanga rerekē i te wā tūturu a Xygeni ka whakaratohia he paparanga parepare matatau. Mā te tautuhi wawe i ngā mahi rerekē, ka taea e koe te urupare wawe me te ārai i ngā aituā haumarutanga. Nō reira, ka whakapakari ake tēnei huarahi i te whai huatanga o tō kaupapa whakahaere ngoikoretanga, ā, ka whakarite kia noho haumaru, kia pakari hoki ō pūnaha.
Kei te hiahia koe ki te ako atu mō te noho ki mua i ngā tūmomo mōrearea i te wā tonu?
Tikiake i tā mātou pepa mā, 'Whakatūpato Moata: Te Kitenga Tūkino me te Whakaritenga Matua i te Wā Tuturu,' ka kitea me pēhea te tiaki i tō mekameka tuku pūmanawa.
Ngā Anga Haumarutanga Ipurangi mō te Whakahaere i te Whakaraeraetanga
Kāore he kaupapa whakahaere ngoikoretanga kua pai te hanganga e tū motuhake ana. Engari, ka tupu pai ina honoa ki ngā mea kua whakatūria. ngā anga haumarutanga tukutuku. Mā ēnei anga e whakarato he aratohu mārama me ngā mahi pai hei āwhina i ngā whakahaere ki te hanga tukanga pūnaha, whai hua hoki mō te whakahaere i ngā ngoikoretanga.
He aha te Hiranga o ngā Anga Whakahaere Whakaraeraetanga
Ina whakamahia e koe ngā anga haumarutanga tukutuku, he maha ngā huarahi e whai hua ai koe. Hei tauira, mā ngā anga ka whakarite kia rite, kia whānui hoki ō mahi whakahaere ngoikoretanga. Ka āwhina hoki ēnei i a koe:
- Me whakarite he tiakitanga whānui mō āu rawa me āu pūnaha.
- Whakatairanga i te pumau i roto i ngā mahi haumaru puta noa i ngā tīma.
- Whakapai ake i te whakahaere mōrearea mā te tuku i ngā huarahi hanganga.
- Kia mau ki te hanganga ture me ngā ture ahumahi me standards.
Hei tāpiri atu, mā te whakauru i ēnei anga mahi ka taea e koe te urupare atu ki ngā tūmomo riri me te karo hoki i te wareware i ngā ngoikoretanga nui. Me titiro tata atu tātou ki ngā anga mahi matua e whā ka taea te whakapai ake i tō kaupapa whakahaere ngoikoretanga.
1. Anga Haumarutanga Ipurangi NIST (CSF)
Ka aro ki:
Tāutuhia, Tiakina, Kitea, Urupare, Whakaora.
Me pehea te awhina:
te Anga Haumarutanga Ipurangi NIST (CSF) e whakarato ana i tētahi huarahi hanganga hei whakahaere i ngā mōrearea haumarutanga tukutuku. E whakanui ana i ngā mahi matua e rima, ina whakakotahihia, ka waihangahia he rautaki haumarutanga whānui.
- te Tautuhia Mā te mahi nei koe e āwhina ki te mārama me te whakarārangi i ō rawa me ngā ngoikoretanga e pā ana.
- te Tiakina Ko te arotahi a te mahi he tiaki i ēnei rawa mā te whakamahi i ngā mahi ārai.
- te E kite mā te mahi nei ka aroturuki tonu kia kitea wawe ai ngā tūmomo mōrearea.
- te Whakautu a Whakaora Mā ngā mahi koe e ārahi ki te whakatika i ngā aituā me te whakahoki mai i ngā mahi o mua.
Mā te whakauru i te NIST CSF ki roto i ō mahi whakahaere ngoikoretanga ka whakarite kia whai hua te huarahi ki te whakaiti i te mōrearea. Hei tauira, ko te whakauru i te matawai tonu me te whakaora aunoa ka tino rite ki ngā mahi Tiaki me te Kimi.
2. Anga MITRE ATT&CK
Ka aro ki:
Ngā rautaki me ngā tikanga whawhai.
Me pehea te awhina:
te MITER ATT & CK Anga Ka āwhina i a koe ki te mārama ki ngā rautaki me ngā tikanga e whakamahia ana e ngā kaiwhakaeke o te ao tūturu. Nō reira, ka taea e koe te mahere i ngā ngoikoretanga ki ngā tūmomo riri motuhake, me te whakarite i ngā whakatikatika e tika ana.
- Mā te tautuhi i ngā ngoikoretanga e pā ana ki ngā tikanga hoariri e mōhiotia ana, ka taea e koe aro atu ki ngā momo whakaeke tino tūpono.
- I tua atu, ka whakarei ake tēnei anga i ō āheinga ki te kimi me te whakautu i ngā tūmomo riri.
Hei tauira, mēnā ka tūpono ō pūnaha ki ngā tikanga urunga tuatahi noa i tētahi ngoikoretanga, ka taea e koe te whakarite i te whakatikatika kia kore ai e taea e ngā kaiwhakaeke te whai tūranga. Mā tēnei whakaritenga ka whai hua ake tō kaupapa whakahaere ngoikoretanga, ā, ka mōhio hoki ki ngā tūmomo mōrearea.
3. Ngā OWASP Top 10
Ka aro ki:
Ngā mōrearea haumarutanga noa o ngā taupānga tukutuku.
Me pehea te awhina:
Ngā OWASP Top 10 he anga nui mō te whakahaere i ngā ngoikoretanga o ngā taupānga tukutuku. E whakaatu ana i ngā mōrearea haumarutanga tino nui, pērā i Ngā Hapa Werohanga, te Motuhēhēnga Pakaru, me ngā Whirihoranga Hē Haumarutanga.
- Te whakataurite i ō matawai me ngā mahi whakatikatika me te OWASP Top 10 ka whakarite kia aro atu koe ki ngā ngoikoretanga tino kitea me ngā ngoikoretanga kino.
- Ano, mā te whakauru i ngā mahi waehere haumaru ki roto i ō rerengamahi whanaketanga ka āwhina i te aukati i ēnei raruraru kei puta.
Hei tauira, mā te whakamahi i ngā taputapu matawai a Xygeni i roto i tō CI/CD pipelineKa taea e ngā s te hopu i ngā hapa werohanga, i ngā whirihoranga hē rānei i te tīmatanga o te tukanga whakawhanake. Nō reira, ka whakaitihia e koe te tūponotanga o te whakatinanatanga o ngā taupānga kāore i te haumaru.
4. Ture Manawanui Mahi Mamati (DORA)
Ka aro ki:
Te manawanui mō ngā hinonga pūtea.
Me pehea te awhina:
Dora he anga ture e aro ana ki te whakapakari i te manawanui whakahaere o ngā whakahaere pūtea. E whakahau ana kia aromatawaihia ngā ngoikoretanga i ia wā, me te whakatika i ngā hapa i te wā tika kia tino mōhio ai te whakahaere mōrearea tonu.
- Mā te hono atu ki a DORA, ka taea e ngā hinonga pūtea te whakatutuki i ngā whakaritenga ture me te whakapai ake i tō rātou tūnga haumarutanga whānui.
- I tua atu, e whakanui ana te anga i te manawanui ki ngā whakararuraru hangarau mōhiohio, he mea nui hoki mō te pupuri i te haere tonu o ngā pakihi.
Hei tauira, mā te whakahaere aunoa i ngā mahi whakatikatika me te aroturuki tonu me Xygeni ka tutuki i a koe ngā whakaritenga a DORA. Nā reira, ka noho haumaru, ka tutuki hoki i tō whakahaere ngā whakaritenga.
Whakakotahitia Katoa
Ko te mārama ki te kaupapa whakahaere ngoikoretanga, ko te mōhio ehara i te mea ko te tautuhi i ngā ngoikoretanga anake—engari ko te waihanga i tētahi rautaki haumarutanga pakari, matatau hoki e whanake ana i runga i ngā hiahia o tō whakahaere. Mā te whakahāngai i tō kaupapa ki ngā anga pēnei i a NIST CSF, MITRE ATT&CK, OWASP Top 10, me DORA, ka whakarite koe he pūnaha, he whai hua, he tutuki hoki ngā whakaritenga.
- Pūnaha i roto i tana huarahi.
- Whakaaetanga i roto i āna mahi.
- Whakamama me te ahumahi standards.
- Te ririwiri ki nga whakawehi e tipu haere ana.
He aha a Xygeni te Hoa Tika hei Hoahoa i tētahi Kaupapa Whakahaere Whakaraeraetanga
Ka whakamanahia tō whakahaere e Xygeni mā te tuku i ngā taputapu e hiahiatia ana e koe hei:
- Kimihia, ka whakarārangihia hoki ngā rawa puta noa i ngā taiao katoa.
- Whakauruhia te matawai tonu ki roto ki a koutou CI/CD pipelines.
- Whakaraupapahia ngā ngoikoretanga mā te whakamahi i te EPSS, CVSS, me te tātari taea te toro atu.
- Whakaora aunoa kia tere ai te whakatau i ngā take.
- Aroturuki tonu mō ngā āhuatanga rerekē me ngā tūmomo mōrearea.
Ara, ehara i te mea ko ngā ngoikoretanga anake te āwhina a Xygeni i a koe ki te whakahaere – engari ka āwhina anō hoki i a koe kia noho ki mua i aua ngoikoretanga. Mā te whakamahi i ēnei rautaki, ka whakaitihia e koe te mōrearea, ā, ka hoatu ki ō tīma te māia ki te mahi haumaru me te tūpato. Pānuihia atu anō mōna!
Kua rite koe ki te hoahoa i tētahi kaupapa whakahaere ngoikoretanga?
Kaua e tukua ngā ngoikoretanga kia whakararu i tō pakihi. Me mahi i te taahiraa e whai ake nei ki te he kaupapa whakahaere ngoikoretanga matatau, aunoa, ā, pakari hoki.
???? Whakapā atu ki a Xygeni i tēnei rā mō tētahi whakaaturanga or Whakamātauria Inaianei mō te Koreutu kia kite ai me pēhea mātou e āwhina ai i a koe ki te hanga i tētahi kaupapa hei pupuri i te haumaru, i te kaha hoki o tō whakahaere.
