Te Whakamārama mō te Tīma Kikorangi Haumarutanga Ipurangi #
Ko te tīma kikorangi haumarutanga ipurangi he rōpū tohunga haumarutanga e whakahaere ana, e tiaki ana hoki i ngā pūnaha mōhiohio o tētahi whakahaere mai i ngā whakaekenga ipurangi, i ngā tūmomo riri rānei. He rerekē ki ngā tīma whero e whai ana ki te whai i ngā whanonga hoariri hei wero i te tūnga haumarutanga, ko ngā tīma kikorangi he kaitiaki e mahi ana ki te pupuri me te whakapai ake i te haumarutanga, te tautuhi i ngā mahi kino, me te whakautu ki ngā tūmomo riri. He mea nui te whakaaro o tētahi tīma kikorangi i roto i te haumarutanga ipurangi, ā, he mea tino nui hei maumahara mēnā kei te hiahia koe ki te hoahoa i ngā hanganga hauora (kaha me te pakari ki ngā tūmomo riri whai wāhi me ngā tūmomo riri kua arotahihia). Heoi anō, me tirotiro tātou he aha te tīma kikorangi i roto i te haumarutanga ipurangi, tōna tūranga me ōna mātāpono me ngā tikanga matua.
Tautuhinga:
He aha te Tīma Kahurangi i roto i te Haumarutanga Ipurangi me tana Tūranga #
He maha ngā mahi tiaki a te tīma kikorangi i roto i te haumarutanga ipurangi. Ko te arotahi o ēnei mahi katoa ko te tiaki, te aroturuki, me te whakaora i ngā pūnaha hangarau mōhiohio. Ki te tirohia ā rātou mahi matua, ka kitea e tātou: te aroturuki i ngā tūmomo mōrearea, te urupare ki ngā aituā, te whakahaere i ngā ngoikoretanga, te whakapakari i te haumarutanga, te tirotiro tūmatanui me te tātari i ngā take pūtake. Ko te tikanga haumarutanga ipurangi a te tīma kikorangi e whakawhirinaki nui ana ki te mōhio ki ngā āhuatanga, ki ngā tikanga tiaki hanganga, me te kaha ki te kite me te whakakore i ngā tūmomo mōrearea i mua i te pānga ki ngā whakahaere me ngā mahi.
Ngā Mātāpono Matua me ngā Tikanga
#
Ka mahi ngā tīma kikorangi haumarutanga ipurangi i raro i ngā mātāpono matua motuhake hei ārahi i ā rātou rautaki parepare:
- Te Parepare-Hōhonu: Ka whakatinanahia e rātou ngā paparanga maha o ngā mana whakahaere haumarutanga puta noa i te taiao
- Te Whakahoahoa Zero Trust: Kāore rātou e whakawhirinaki pūmau ki tētahi hinonga, ahakoa i roto, i waho rānei i te whatunga.
- Aroturuki Tonu: Ka whakamahia e rātou ngā pūnaha kimi wā-tūturu hei tautuhi i ngā whanonga rerekē
- Ngā Pūtake Haumarutanga me te Whakatinanatanga Kaupapahere: Ka whakatūria, ka pupuritia hoki e rātou ngā whirihoranga haumaru puta noa i ngā rawa katoa
Me tautokona ēnei tikanga katoa e ngā anga kua tautuhia pai, pērā i te NIST Cybersecurity Framework, MITER ATT&CK mō ngā mahere parepare, me te ISO/IEC 27001 standardmō te whakahaere haumarutanga mōhiohio.
He aha te Tīma Kahurangi i roto i te Haumarutanga Ipurangi me te Tīma Whero?
#
Ki te hiahia koe ki te mōhio he aha te tīma kikorangi i roto i te haumarutanga ipurangi, ko te huarahi pai ki te whakamārama ko te whakataurite i a ia ki tōna hoariri, te tīma whero. E ai ki tā tātou i kōrero ake nei, kei te whai ngā tīma whero i te "hoariri" ki te kimi i ngā poka pea i roto i te pūnaha mōhiohio, ko te tīma kikorangi ia kei te whawhai ki te hoariri. He maha ngā wā ka whakaritea tēnei whanaungatanga hoariri mā te whakamahi i ngā mahi tīma papura, e mahi tahi ai ngā tīma whero me te kikorangi ki te whakarei ake i ngā pareparenga haumarutanga o tētahi whakahaere. Ko te hua: he porowhita urupare pai, me ia mahi a te tīma whero e whakarato ana i ngā tirohanga hou ki ngā tīma kikorangi mō ngā ngoikoretanga o te pūnaha me ngā ngoikoretanga i roto i te kimi. Tirohia te ripanga i raro nei:
| āhuatanga | Tīma Kahurangi (Parepare) | Tīma Whero (Whakaeke) |
|---|---|---|
| Te Mahi Matua | Tiakina ngā pūnaha, kitea me te urupare ki ngā whakaeke | Whakatauirahia ngā whakaeke, whakamātautauhia ngā parepare |
| Aronga | Te parepare matatau me te parepare tauhohe | Whakaeke, e whai ana i ngā tūmomo riri o te ao tūturu |
| ngohe | Te aroturuki, te urupare ki ngā aituā, te whakapakeketanga o te pūnaha | Whakamātautau urunga, hangarau pāpori |
| Utauta | SIEM, IDS, pareā ahi, taputapu aroturuki | Ngā mahi tinihanga ritenga, ngā anga whakaeke |
| Hua | Whakapakari i ngā parepare, whakaiti i ngā tūmomo mōrearea | Tāutuhia ngā ngoikoretanga me ngā ngoikoretanga |
Ngā Pūkenga me ngā Utauta a ngā Tohunga o te Rōpū Kahurangi #
He maha ngā pūkenga hangarau me ngā pūkenga tātari kei ngā mema o te tīma tiaki ipurangi. Me whai pūkenga ēnei kia taea ai e rātou te mahi tika i ā rātou mahi. Ko ētahi o ngā pūkenga ko:
- Te matatau ki ngā tūāpapa SIEM
- Te mōhio ki ngā pūnaha kite urutomo (IDS) me ngā pūnaha ārai urutomo (IPS)
- Te māramatanga hohonu ki ngā pūnaha whakahaere me ngā kawa whatunga
- He wheako ki ngā taputapu tuhinga me te aunoatanga (Python, PowerShell)
- Te mōhiotanga ki ngā tūāpapa matauranga mōrearea me te tātaritanga rangitaki
Ko te whai huatanga o tētahi tīma kikorangi i roto i te haumarutanga ipurangi e whakawhirinaki ana ki tō rātou kaha ki te hono i ngā kaupapa, ki te kite i ngā tohu o te takahi ture (IOC), me te urupare tere me te tika.
Te whakaurunga ki a DevSecOps me Software Supply Chain Security #
I te nekehanga o ngā whakahaere ki ngā mahi whanaketanga hou, taketake i te kapua, me toro atu te tūranga o te tīma kikorangi ki roto i te mekameka tuku pūmanawa me DevSecOps pipelines. Ka whakamanahia e Xygeni ngā tīma kikorangi mā te te whakauru tika ki roto CI/CD rerengamahi. Ka whakaratohia he tirohanga ā-wā-tūturu me te kimi mōrearea aunoa puta noa i ia wāhanga o te huringa ora whanaketanga, me te maha atu anō hoki.
- Kimihia me te whakatika i ngā whirihoranga hē i roto i Hanganga hei Waehere (IaC)
- Aroturuki i ngā taiao wā-oma mō ngā whanonga rerekē
- Whakahohe SBOM Te whakaputa (Pūrongo Rauemi Pūmanawa) mō te māramatanga katoa o ngā wāhanga
- Tāutuhia ngā whakawhirinakitanga kino, kua takahia rānei i mua i te whakatinanatanga
- Whakatinanahia ngā kaupapa here haumarutanga me te kore e whakaroa i te tukunga pipelines
Mā te whakauru i a Xygeni ki roto i ngā mahi a DevSecOps, ka noho matatau te haumarutanga, ka haere tonu, ā, ka tino hono ki te tere o te whanaketanga.
Te Hiranga o te Whakahaere Whakatutukitanga me te Whakahaere Mōrearea mō te Haumarutanga Ipurangi o te Tīma Kahurangi #
#
He mea nui te noho mai o tētahi tīma kikorangi i roto i ngā mahi haumarutanga ipurangi kia tutuki ai ngā whakaritenga ture. Ka tautoko tika ā rātou mahi i ngā whakaritenga i roto i ngā anga pēnei i:
- GDPR – Ture Tiaki Raraunga Whānui
- HIPAA – Ture Kawe me te Haepapa Inihua Hauora
- PCI-DSS – Haumarutanga Raraunga o te Ahumahi Kāri Utu Standard
Mā te pupuri i ngā rangitaki arotake, te whakatinana i ngā mana whakahaere haumarutanga, me te whakamana i ngā mahi whakatikatika, ka āwhina ngā tīma kikorangi haumarutanga ipurangi i ngā whakahaere ki te whakatutuki i ngā herenga ture me te whakaiti i te tūponotanga ki ngā whiu me te kino ki te ingoa pai.
Ngā Utauta Matua mā ngā Tīma Kahurangi hei Tiaki i te Mekameka Tuku Pūmanawa #
I te nuinga o te wā, kāore i te kitea ngā āhuatanga uaua o te mekameka tuku pūmanawa i roto i ngā taputapu haumarutanga tuku iho. Hei whakatika i tēnei, ka whakawhirinaki ngā tīma kikorangi o ēnei rā ki ngā otinga motuhake kua whakaritea hei tiaki i ngā taiao whakawhanake pūmanawa tere o ēnei rā. Ko ēnei otinga ko:
- CI/CD Pipeline Te Matawai Viknerability – Te tautuhi i ngā ngoikoretanga i te wā tūturu puta noa i ngā pūnaha hanga, ngā whakawhirinakitanga, me ngā wāhanga tuatoru
- Aroturuki i te Pono o te Waehere – Te whakarite kia whakamanahia ngā huringa waehere, me te kite i ngā tohu o te takahi ture
- Pipeline Tātari Whēnga – Te aro turuki i ngā rerengamahi DevOps hei kimi i ngā tauira, i ngā whanonga rerekē rānei e tohu ana i te takahi ture
- Hanganga Kapua me te Whakahaere Tūnga – Te whakamana i ngā whirihoranga haumaru puta noa i a Kubernetes, ngā mahi kore tūmau, me ngā tūāpapa kapua ranu
- Whakamutunga-ki-Whakamutunga Aroturuki – Te whakarato i tētahi ara arotake katoa mai i te kaiwhakawhanake commit ki te whakatinanatanga, e āhei ai te tātaritanga tirotiro tere me te whakamana i ngā whakaritenga
Mā te whakamahi i ēnei āheinga, ka taea e ngā tīma kikorangi te neke atu i te urupare urupare ki te tiaki i te mekameka tuku matatau, kia mōhio ai kei te tutuki te waehere me tōna tukunga. pipeline kia noho haumaru, kia mārama, kia pakari hoki.
Te mahi tahi me te whakapai tonu #
Kāore ngā tīma kikorangi whai hua e mahi takitahi. Ko te mahi tahi puta noa i ngā tari, inā koa me ngā tīma whakawhanake me ngā tīma whakahaere, ka whakarei ake i te mōhiotanga ki ngā āhuatanga me ngā āheinga urupare ki ngā aituā. Ko te whakangungu i runga i te tēpu auaucisHe mea nui ngā mahi a ngā hōia, ngā whakauru a te tīma whero, me ngā arotake i muri i te matenga ki te whakapai ake i ngā rautaki parepare.
Heoi anō, mā ngā kaupapa rapu riri ka āwhina i ngā tīma kikorangi kia neke atu i te kimi puku ki tētahi parepare kaha ake. Mā te whakapae i ngā ara whakaeke pea me te rapu taunakitanga mō te takahi ture, ka taea e ngā tīma kikorangi te tautuhi i ngā riri e karo ana i ngā taputapu haumarutanga tuku iho.
Nō reira, koinei te pou tuarā o te parenga ipurangi? #
He mea nui te mārama ki te tīma kikorangi i roto i te haumarutanga ipurangi mō tētahi whakahaere e whai ana ki te tiaki i ōna hanganga. I tēnei rā, nui atu i mua me te ngā ngoikoretanga mutunga kore, me whai parepare atamai ake tātou Nō reira, kua piki haere te hiranga o te tūranga o ngā tohunga o te tīma kikorangi haumarutanga ipurangi ki te tiaki i ngā pūnaha, te pupuri i ngā ture, me te whakahohe i te huringa mamati haumaru.
E ai ki tā tātou i kite ai, ko ngā tīma kikorangi ngā rārangi mua o te parepare ipurangi, e whakamahi ana i ō rātou pūkenga, taputapu, me te mahi tahi ki te kimi me te whakakore i ngā tūmomo riri i mua i te huri hei takahi angitu. Mō ngā kaiārahi haumarutanga, CISE ngā tīma Os, me DevSecOps, ko te hanga i tētahi tīma kikorangi whānui ehara i te mea he whakaritenga hangarau anake; he mea rautaki hoki.
Mena kei te hiahia tō whakahaere ki te whakapakari i ana software supply chain security ā, whakamanahia tana tīma kikorangi ki te tirohanga me te mana whakahaere puta noa i DevSecOps pipelines, koinei te wā ki te tūhura i ngā otinga hou. Tirohia ā mātou Ataata Ataata or Tīmatahia he Whakamātautau Koreutu i Tēnei Rā.
