Kāore i te maha ngā wā ka rahua ngā tīma haumarutanga nā te korenga o ngā raraunga. He maha ngā wā ka rahua rātou nā te mea ka whakatikahia e rātou ngā take hē i te tuatahi. Koia tonu te take i hangaia ai te Mōhiotanga Whakamahi-Kōwhiringa, te whakahaere ngoikoretanga e hangai ana ki te mōrearea, te Ture Manawanui Ipurangi, me te CISKua honoa inaianei tētahi Rārangi Ngāwaritanga Kua Mōhiotia kua Whakamahia kinotia ki roto i ngā rerengamahi AppSec hou.
I ia wiki, ka ripoatahia e ngā matawai he rau ngā ngoikoretanga. Heoi, he iti noa iho ngā ngoikoretanga ka whakamahia e ngā kaiwhakaeke. Nō reira, ko ngā tīma e whakatau ana i ngā mea matua me te kore e whakamahi i te horopaki ka moumou taima i te mea ka mawhiti ngā tūmomo riri tūturu. Ka kati te Mōhiotanga Whakamahi i taua āputa mā te whakaatu i ngā ngoikoretanga e whakamahia ana e ngā kaiwhakaeke, ehara i te mea ko ngā mea e ahua kino ana i runga i te pepa anake.
He aha te Maramarama e Mōhiotia ana
Mā te mātauranga whakamahi-mōhiotia ka tautuhia ngā ngoikoretanga e whakamahia kahatia ana e ngā kaiwhakaeke i roto i ngā taiao tūturu. Arā, ka wehea te mōrearea ariā mai i te whanonga whakaeke kua whakaūtia.
Engari i te pātai mēnā he ngoikoretanga taea kia whakamahia, ka taea e ngā tīma te pātai:
Kei te whakamahia kētia tēnei, ā, e pā ana ki taku hua?
He mea nui taua rerekētanga i roto i te mahi, ā, e piki haere ana, i roto i te ture.
He aha i pakaru ai te Whakatakotoranga Tuku Iho
Ko te nuinga o ngā tīma e whakawhirinaki tonu ana ki ngā tohu pūmau hei whakatairanga i te mōrearea.
Ko te tikanga, ka whakarōpūhia e rātou ngā ngoikoretanga mā te:
- Te kaha o te CVSS
- Te māia o te matawai
- Rongonui o te mōkihi
Ahakoa he āwhina ēnei tohu ki te whakaiti i te haruru, kotahi te mea nui e ngaro ana i a rātou: ko te whanonga a te kaiwhakaeke. Nō reira, he maha ngā wā ka tere ngā tīma ki te whakatika i ngā take tino kino kāore e whakamahia, me te ngaro hoki i ngā hapa iti iho e arohia ana e ngā kaiwhakaeke.
Mā tēnei āputa e whakamārama he aha i kore ai e tauinehia te whakatauranga pūmau.
He aha i whakarerekē ai te Ture Manawanui Ipurangi i ngā Ture
I raro i te Cyber Resilience Act, ka noho te tuku pūmanawa me ngā ngoikoretanga e mōhiotia ana ka taea te whakamahi hei take ture, ehara i te mea he āwangawanga haumarutanga anake.
E hiahiatia ana e te ture kia:
- Kaua ngā hua he āhuatanga matihiko e uru ki te mākete o te EU me ngā ngoikoretanga e mōhiotia ana ka taea te whakamahi.
- Ka whakatinanahia e ngā kaihanga ngā kēti whakahaere ngoikoretanga me te whakawātea
- He nui ake te taumaha o te whakamahinga kino i roto i ngā taiao tūturu i te kaha o te ariā
Nā reira, ka neke te whakatau kaupapa matua mai i ngā mahi pai rawa atu ki ngā herenga ture.
Koinei tonu te wāhi e hiranga ai te mōhiotanga tinihanga.
Cyber Resilience Act
te Cyber Resilience Act he ture a te Kotahitanga o Ūropi e whakatakoto ana i ngā whakaritenga haumarutanga tukutuku mō ngā hua he huānga mamati kei roto e hokona ana i te EU.
I roto i ngā kupu māmā noa iho, me hoahoa, me whakawhanake, me pupuri hoki e ngā kaihanga ngā pūmanawa kāore e kitea he ngoikoretanga ka taea te whakamahi i te wā tuku. Heoi anō, me aroturuki ngā kamupene i ngā ngoikoretanga i muri i te tukunga, me te ripoata i ngā take e whakamahia ana i roto i ngā wā tino pakari.
I tīmata te mana o te ture i te Hakihea 2024. Heoi, ka tīmata te whakatinanatanga katoa i te Hakihea 2027. Mai i te tau 2026, me ripoata e ngā kamupene ngā ngoikoretanga e whakamahia kaha ana ki ngā mana whakahaere o te EU i roto i ngā haora 24 o te kitenga.
Arā, mā te Ture Manawanui Ipurangi ka hurihia te whakahaere ngoikoretanga mai i te mahi pai hei whakaritenga urunga ki te mākete.
He aha ngā KEV e noho ana i te pokapū o te whakatutuki i ngā whakaritenga a te CRA
te CISHe Rārangi Ngāwaritanga Kua Mōhiotia E whakarārangihia ana ngā CVE kua whakamahia kētia e ngā kaiwhakaeke i te ngahere. Ka whakakorea e tēnei rarangi ingoa te koretake.
Engari mō te tautohetohe mō te mōrearea, ka taea e ngā tīma te whakawhirinaki ki ngā raraunga whakamahi kino kua manatokohia. Nō reira, ka noho ko ngā KEV te mea tino kaha hei whakaoho i ngā SLA whakaora me te aukati tuku.
He rite tonu tēnei huarahi ki te whakahaere ngoikoretanga e hangai ana ki te mōrearea, nā te mea ka arotahi te mahi ki te wāhi e puta ai te kino tūturu.
He rerekē ngā mahi a te CVSS, EPSS, me ngā KEV
Ko te whakarite i ngā kaupapa matua whai hua me mārama ki ngā rerekētanga o ngā tohu.
- CVSS e whakaatu ana i te pānga pea
- EPSS te whakatau tata i te tūponotanga o te mahi kino
- te CISKua whakaūhia e te Rārangi Ngāwaritanga Kua Mōhiotia te Whakamahinga Hohe
Ki te whakamahia takitahi, ka whakapohehe ia tohu. Ki te whakamahia ngātahi, ka whakaratohia he horopaki. Ko taua huinga te tūāpapa o te whakahaere ngoikore e ahu mai ana i te mōrearea o ēnei rā.
Te Mahi a te Mātauranga Whakamahi Mōhiotia i roto i te Mahi
He mārama te raupapa o tētahi tauira whakatau kaupapa matua:
- Kitea ngā ngoikoretanga puta noa i te waehere me ngā whakawhirinakitanga
- Whakatauritea ngā kitenga ki ngā CISHe Rārangi Ngāwaritanga Kua Mōhiotia
- Arotakehia te tūponotanga whakamahi i te EPSS
- Manatokohia te āheinga ki te toro atu i roto i te tono, i te pipeline
- Whakamahia ngā ture whakaora i runga i te pānga me te tūranga o te hua
Nā reira, ka mutu te whakaaro o ngā tīma ki ngā rārangi ngoikore hei rārangi mahi tuturu, ka tīmata ki te whakaaro ki aua rārangi ngoikore hei mea kāore e taea te mahi.cisngota.
Te Huarahi i Hangaia ai e Mātou te Matauranga Whakamahi-Mōhiotia i Xygeni
I hangaia tēnei āhuatanga i muri i te kitenga i ngā tīma e whakatika ana i ngā take CVSS teitei i te wā i tae atu ai ngā ngoikoretanga kua whakamahia kia puta. Nā taua wheako i hanga te āhua o tā mātou hoahoa i te pūnaha.
ki te v5.36, Ka whakauruhia e Xygeni te matauranga whakamahi kino kua manatokohia ki roto i te miihini whakatau kaupapa matua.
He aha te mea ka tupu i raro i te taupoki
- Ka horomia tonutia e Xygeni ngā putumōhiotanga whakamahi pono pērā i a KEV me ētahi atu puna whakamahi tūmatanui.
- Ka whiwhi ia ngoikoretanga i ngā raraunga mō te aroaro o te whakamahinga kino
- Ka whakakotahi te hāneanea whakatau kaupapa matua i:
- Tūnga whakamahi kino e mōhiotia ana
- Tūponotanga EPSS
- Horopaki āheinga
- Te whakaraeraetanga o te waehere me te whakawhirinakitanga
Ka tatau te tūāpapa i tētahi kaute mōrearea o te ao tūturu
Engari mō te whakakapi i ngā tohu o nāianei, ka whakatikatikaina e tēnei tauira aua tohu.
Kimihia → Whakamahi Taurite → Taea te Tae atu → Whakatika
Ka akiakihia e tēnei rere ia deciskatote:
Ka kite tika ngā kaiwhakawhanake i te horopaki whakamahi kino i roto i pull requests. PipelineKa hanumi noa te poraka s ina tae atu ki ngā ngoikoretanga kua whakamahia e te waehere. Ka tūtohu tonu te whakatikatika aunoa i ngā whakapainga haumaru.
Kāore he hui. Kāore he matapae. Kāore he wā mataku.
He aha te Hiranga o tēnei i tua atu i te Whakatutukitanga
Ahakoa i ahu mai tēnei panonitanga i te Ture Manawanui Ipurangi, ka horapa atu anō ngā painga.
Ngā tīma e whakatairanga ana i te whakamahi i te matauranga whakamahi:
- Whakaitihia te ngenge mataara
- Whakapotohia te wā whakatikatika
- Āraia ngā huringa pātaki ohorere
- Tukuna he pūmanawa haumaru ake me te māia
Ka noho te tutuki i ngā whakaritenga hei pānga taha o te mahi i te tika mō te haumarutanga.
Ngā Whakaaro Whakamutunga: Me Whakahau te CRA i te Whakahaere Tūponotanga
Mā te Ture Manawanui Ipurangi ka whakamanahia ngā mea kua akohia e ngā tīma mātau. Kāore e rite te hiranga o ngā ngoikoretanga katoa.
te CISE whakaatu ana te Rārangi Ngāwari i Mōhiotia kua Whakamahia he aha ngā mea e whakamahia ana e ngā kaiwhakaeke i ēnei rā. E whakaatu ana te horopaki me te āheinga ki te toro atu mēnā ka pā ki a koe. Ka tautuhia ngātahitia e rāua ngā āhuatanga hou te whakahaere ngoikoretanga e hangai ana ki te mōrearea.
Ka whakamahia tonutia tēnei tauira e Xygeni, aunoa, me te wāhi e mahi ana ngā kaiwhakawhanake.
Mō te Kaituhi
tuhituhia e Fatima Said, Kaiwhakahaere Hokohoko Ihirangi he tohunga ki te Haumarutanga Taupānga i Xygeni Security. Ka hangaia e ia he ihirangi e aro ana ki ngā kaiwhakawhanake, e whakahaerehia ana e te rangahau i runga i te AppSec, ASPM, me DevSecOps, e whakamāori ana i ngā wero haumarutanga o te ao tūturu ki ngā aratohu mārama, ka taea te mahi.
