{"id":966,"date":"2021-03-14T06:02:30","date_gmt":"2021-03-14T06:02:30","guid":{"rendered":"http:\/\/cafe2sach.com\/?p=966"},"modified":"2021-03-14T06:09:53","modified_gmt":"2021-03-14T06:09:53","slug":"su-phat-trien-cua-mo-hinh-zero-trust-cho-an-ninh-mang","status":"publish","type":"post","link":"https:\/\/cafe2sach.com\/index.php\/2021\/03\/14\/su-phat-trien-cua-mo-hinh-zero-trust-cho-an-ninh-mang\/","title":{"rendered":"S\u1ef1 ph\u00e1t tri\u1ec3n c\u1ee7a M\u00f4 h\u00ecnh Zero Trust cho an ninh m\u1ea1ng"},"content":{"rendered":"\n<p>Ba m\u01b0\u01a1i n\u0103m tr\u01b0\u1edbc, m\u1ed9t nh\u00e0 nghi\u00ean c\u1ee9u \u0111\u00e3 vi\u1ebft m\u1ed9t ph\u1ea7n m\u1ec1m nh\u1ecf gi\u00fap c\u1ee9u c\u00f4ng ty c\u1ee7a anh ta kh\u1ecfi m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng b\u1edfi  sinh vi\u00ean \u0111\u1ea1i h\u1ecdc. Ph\u1ea7n m\u1ec1m \u0111\u00e3 ki\u1ec3m tra c\u00e1c g\u00f3i TCP g\u1eedi \u0111\u1ebfn cho ACK = 0, c\u00e1i m\u00e0 bi\u1ec3u th\u1ecb s\u1ef1 b\u1eaft \u0111\u1ea7u c\u1ee7a m\u1ed9t phi\u00ean. N\u1ebfu m\u1ed9t phi\u00ean m\u1edbi tr\u00f4ng kh\u00e1c th\u01b0\u1eddng v\u00ec b\u1ea5t k\u1ef3 l\u00fd do g\u00ec, th\u00ec g\u00f3i tin s\u1ebd b\u1ecb lo\u1ea1i b\u1ecf. \u0110\u1ecba ch\u1ec9 IP ngu\u1ed3n l\u1ea1 ho\u1eb7c c\u00e1c d\u1ecbch v\u1ee5 tr\u00e1i ph\u00e9p l\u00e0 nh\u1eefng l\u00fd do \u0111i\u1ec3n h\u00ecnh cho vi\u1ec7c kh\u00f4ng cho ph\u00e9p c\u00e1c g\u00f3i g\u1eedi \u0111\u1ebfn. M\u00e3 ngu\u1ed3n ch\u01b0\u01a1ng tr\u00ecnh \u0111\u01b0\u1ee3c vi\u1ebft t\u1ed1t v\u00e0 n\u00f3 ho\u1ea1t \u0111\u1ed9ng.<\/p>\n\n\n\n<p>T\u00e1c gi\u1ea3 ph\u1ea7n m\u1ec1m  l\u00e0 Bill Cheswick  v\u00e0 \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n t\u1ea1i Ph\u00f2ng th\u00ed nghi\u1ec7m Bell. Sinh vi\u00ean \u0111\u1ea1i h\u1ecdc l\u00e0 Bob Morris Jr v\u00e0 cu\u1ed9c t\u1ea5n c\u00f4ng c\u1ee7a anh ta l\u00e0 Internet Worm n\u0103m 1988. (Trong m\u1ed9t \u0111i\u1ec1u tr\u1edb tr\u00eau, Bob Morris Jr c\u00f3 m\u1ed9t ng\u01b0\u1eddi cha n\u1ed5i ti\u1ebfng c\u00f9ng t\u00ean, ng\u01b0\u1eddi \u0111\u00e3 gi\u00fap ph\u00e1t minh ra Unix t\u1ea1i Ph\u00f2ng th\u00ed nghi\u1ec7m Bell). V\u00e0 \u0111\u1ed1i v\u1edbi ph\u1ea7n m\u1ec1m nh\u1ecf \u0111\u01b0\u1ee3c vi\u1ebft b\u1edfi Bill Cheswick &#8211; n\u00f3 \u0111\u01b0\u1ee3c cho l\u00e0 t\u01b0\u1eddng l\u1eeda doanh nghi\u1ec7p ho\u1ea1t \u0111\u1ed9ng \u0111\u1ea7u ti\u00ean. (tuy nhi\u00ean, c\u00f4ng ty \u0111\u00e3 kh\u00f4ng c\u1ea5p b\u1eb1ng s\u00e1ng ch\u1ebf cho \u00fd t\u01b0\u1edfng n\u00e0y.)<\/p>\n\n\n\n<p>C\u00e1c t\u1ed5 ch\u1ee9c kh\u00e1c kh\u00f4ng ch\u1ea1y t\u01b0\u1eddng l\u1eeda s\u1edbm \u0111\u00e3 b\u1ecb nhi\u1ec5m s\u00e2u Morris v\u00ec h\u1ecd gi\u1ea3 \u0111\u1ecbnh c\u00e1i g\u1ecdi l\u00e0 m\u00f4 h\u00ecnh &#8220;full trust model&#8221;  gi\u1eefa c\u00e1c th\u1ef1c th\u1ec3 tr\u00ean Internet. Ch\u00fang ta nh\u1edb r\u1eb1ng khi Internet \u0111\u01b0\u1ee3c ph\u00e1t minh, gi\u1ea3 \u0111\u1ecbnh l\u00e0 di\u1ec5n \u0111\u00e0n m\u1edbi n\u00e0y ch\u1ec9 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 giao ti\u1ebfp v\u00e0 chia s\u1ebb \u0111\u00e1ng tin c\u1eady. C\u00e1c chu\u1ea9n m\u1ef1c h\u1ee3p t\u00e1c c\u01a1 b\u1ea3n \u0111\u00e3 t\u1ed3n t\u1ea1i tr\u00ean Internet s\u01a1 khai v\u00e0 \u0111\u01b0\u1ee3c c\u00e1c c\u00e1 nh\u00e2n, nh\u00f3m, c\u00f4ng ty v\u00e0 c\u00e1c t\u1ed5 ch\u1ee9c kh\u00e1c t\u00f4n tr\u1ecdng.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"441\" height=\"325\" src=\"http:\/\/cafe2sach.com\/wp-content\/uploads\/2021\/03\/image.png\" alt=\"\" class=\"wp-image-967\" srcset=\"https:\/\/cafe2sach.com\/wp-content\/uploads\/2021\/03\/image.png 441w, https:\/\/cafe2sach.com\/wp-content\/uploads\/2021\/03\/image-300x221.png 300w, https:\/\/cafe2sach.com\/wp-content\/uploads\/2021\/03\/image-80x60.png 80w\" sizes=\"(max-width: 441px) 100vw, 441px\" \/><\/figure>\n\n\n\n<p>Nh\u01b0ng v\u00e0o gi\u1eefa nh\u1eefng n\u0103m 1980, r\u00f5 r\u00e0ng l\u00e0 c\u00e1c ti\u00eau chu\u1ea9n t\u00f9y ch\u1ecdn v\u00e0 ki\u1ec3m so\u00e1t th\u1ee7 t\u1ee5c tr\u00ean Internet &#8211; th\u01b0\u1eddng \u0111\u01b0\u1ee3c c\u00e1c nh\u00e0 khai th\u00e1c m\u1ea1ng v\u00e0 qu\u1ea3n tr\u1ecb h\u1ec7 th\u1ed1ng t\u1ef1 nguy\u1ec7n tu\u00e2n theo &#8211; kh\u00f4ng \u0111\u1ee7 \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o s\u1ed1 l\u01b0\u1ee3ng ng\u00e0y c\u00e0ng t\u0103ng c\u00e1c ch\u1ee9c n\u0103ng quan tr\u1ecdng \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef tr\u00ean c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng to\u00e0n c\u1ea7u m\u1edbi n\u00e0y. . Hack c\u00e1 nh\u00e2n v\u00e0 nh\u00f3m nhanh ch\u00f3ng n\u1ed5i l\u00ean nh\u01b0 m\u1ed9t m\u1ed1i \u0111e d\u1ecda nghi\u00eam tr\u1ecdng &#8211; v\u00e0 Morris worm l\u00e0 v\u00ed d\u1ee5 v\u1ec1 hi\u1ec3m h\u1ecfa c\u1ee7a c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng \u0111\u00e3 \u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh r\u00f5 r\u00e0ng.<\/p>\n\n\n\n<p>Nh\u1eefng v\u1ea5n \u0111\u1ec1 b\u1ea3o m\u1eadt nh\u01b0 v\u1eady \u0111\u00e3 m\u1edf ra k\u1ef7 nguy\u00ean c\u1ee7a m\u1ea1ng chu vi (primeter networking) . \u0110\u00f3 l\u00e0, ngay sau \u0111\u00f3 m\u1ecdi t\u1ed5 ch\u1ee9c tr\u00ean th\u1ebf gi\u1edbi \u0111\u00e3 t\u1ea1o ra m\u1ed9t boongke d\u1ef1a tr\u00ean t\u01b0\u1eddng l\u1eeda, cung c\u1ea5p m\u1ed9t m\u00f4 h\u00ecnh tin c\u1eady m\u1ed9t ph\u1ea7n gi\u1eefa c\u00e1c th\u1ef1c th\u1ec3 b\u00ean trong v\u00e0 b\u00ean ngo\u00e0i doanh nghi\u1ec7p. Do \u0111\u00f3, n\u1ebfu m\u1ed9t th\u1ef1c th\u1ec3 \u0111\u01b0\u1ee3c \u0111\u1eb7t b\u00ean trong t\u01b0\u1eddng l\u1eeda, th\u00ec n\u00f3 c\u00f3 th\u1ec3 tin c\u1eady b\u1ea5t k\u1ef3 th\u1ef1c th\u1ec3 n\u00e0o kh\u00e1c trong v\u00f2ng ngo\u00e0i &#8211; ng\u01b0\u1eddi d\u00f9ng, m\u00e1y t\u00ednh \u0111\u1ec3 b\u00e0n, m\u00e1y ch\u1ee7, m\u00e1y in, \u1ee9ng d\u1ee5ng, v.v. Tuy nhi\u00ean, n\u1ebfu m\u1ed9t th\u1ef1c th\u1ec3 \u1edf b\u00ean ngo\u00e0i, th\u00ec n\u00f3 kh\u00f4ng \u0111\u00e1ng tin c\u1eady.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"401\" height=\"336\" src=\"http:\/\/cafe2sach.com\/wp-content\/uploads\/2021\/03\/image-1.png\" alt=\"\" class=\"wp-image-968\" srcset=\"https:\/\/cafe2sach.com\/wp-content\/uploads\/2021\/03\/image-1.png 401w, https:\/\/cafe2sach.com\/wp-content\/uploads\/2021\/03\/image-1-300x251.png 300w\" sizes=\"(max-width: 401px) 100vw, 401px\" \/><\/figure>\n\n\n\n<p>M\u00f4 h\u00ecnh \u1ee7y th\u00e1c m\u1ed9t ph\u1ea7n n\u00e0y \u0111\u00e3 th\u00fac \u0111\u1ea9y b\u1ea3o m\u1eadt doanh nghi\u1ec7p trong ba th\u1eadp k\u1ef7. Tuy nhi\u00ean, nh\u1eefng nh\u01b0\u1ee3c \u0111i\u1ec3m nghi\u00eam tr\u1ecdng c\u1ee7a n\u00f3 \u0111\u00e3 s\u1edbm tr\u1edf n\u00ean r\u00f5 r\u00e0ng. \u0110\u1ea7u ti\u00ean, m\u1ed9t th\u1ef1c th\u1ec3 c\u00f3 th\u1ec3 \u1edf b\u00ean trong t\u01b0\u1eddng l\u1eeda, nh\u01b0ng c\u0169ng c\u00f3 th\u1ec3 ch\u1ee9a \u0111\u1ea7y ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i ho\u1eb7c kh\u00f4ng h\u00e0i l\u00f2ng. Th\u1ee9 hai, n\u1ebfu m\u1ed9t th\u1ef1c th\u1ec3 mu\u1ed1n k\u1ebft n\u1ed1i v\u1edbi th\u1ebf gi\u1edbi, th\u00ec chu vi c\u1ea7n thi\u1ebft \u0111\u1ec3 cho ph\u00e9p email, truy c\u1eadp t\u1eeb xa v\u00e0 web &#8211; t\u1ea5t c\u1ea3 \u0111\u1ec1u m\u1edf ra c\u00e1nh c\u1eeda cho vi\u1ec7c hack. V\u00e0 th\u1ee9 ba, b\u1ea5t k\u1ef3 thi\u1ebft b\u1ecb di \u0111\u1ed9ng n\u00e0o \u0111\u01b0\u1ee3c k\u1ebft n\u1ed1i kh\u00f4ng d\u00e2y \u0111\u1ec1u c\u00f3 th\u1ec3 v\u01b0\u1ee3t qua b\u1ea5t k\u1ef3 t\u01b0\u1eddng l\u1eeda doanh nghi\u1ec7p n\u00e0o.<\/p>\n\n\n\n<p>\u0110\u1ec3 gi\u1ea3i quy\u1ebft nh\u1eefng \u0111i\u1ec3m y\u1ebfu n\u00e0y, c\u00e1c nh\u00f3m b\u1ea3o m\u1eadt doanh nghi\u1ec7p \u0111\u00e3 thi\u1ebft k\u1ebf l\u1ea1i ho\u00e0n to\u00e0n kh\u00e1i ni\u1ec7m chu vi ban \u0111\u1ea7u, ch\u1ecdn m\u1ed9t m\u00f4 h\u00ecnh m\u1edbi k\u1ebft h\u1ee3p c\u00e1c ch\u1ee7 \u0111\u1ec1 hi\u1ec7n \u0111\u1ea1i tuy\u1ec7t v\u1eddi ng\u00e0y nay &#8211; \u0111\u00f3 l\u00e0 \u0111\u00e1m m\u00e2y, t\u00ednh di \u0111\u1ed9ng v\u00e0 \u1ee9ng d\u1ee5ng. M\u00f4 h\u00ecnh m\u1edbi n\u00e0y d\u1ef1a tr\u00ean \u00fd t\u01b0\u1edfng v\u1ec1 c\u00e1c thi\u1ebft b\u1ecb di \u0111\u1ed9ng truy c\u1eadp c\u00e1c \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef tr\u00ean \u0111\u00e1m m\u00e2y m\u00e0 kh\u00f4ng c\u1ea7n chu vi. Ho\u1ea1t \u0111\u1ed9ng k\u1ebft qu\u1ea3 t\u1eeb thi\u1ebft b\u1ecb t\u1edbi \u0111\u00e1m m\u00e2y \u0111\u00e3 t\u1ea1o ra m\u1ed9t c\u00e1i g\u00ec \u0111\u00f3 b\u00e2y gi\u1edd \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 m\u00f4 h\u00ecnh kh\u00f4ng tin c\u1eady.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"414\" height=\"324\" src=\"http:\/\/cafe2sach.com\/wp-content\/uploads\/2021\/03\/image-2.png\" alt=\"\" class=\"wp-image-969\" srcset=\"https:\/\/cafe2sach.com\/wp-content\/uploads\/2021\/03\/image-2.png 414w, https:\/\/cafe2sach.com\/wp-content\/uploads\/2021\/03\/image-2-300x235.png 300w\" sizes=\"(max-width: 414px) 100vw, 414px\" \/><\/figure>\n\n\n\n<p>\u0110\u1ec3 tri\u1ec3n khai an ninh m\u1ea1ng b\u1eb1ng kh\u00f4ng tin c\u1eady, \u0111\u01b0\u1ee3c th\u1ec3 hi\u1ec7n b\u1eb1ng c\u00e1c v\u00f2ng tr\u00f2n nh\u1ecf xung quanh m\u1ed7i th\u1ef1c th\u1ec3 trong h\u00ecnh 3, c\u1ea7n c\u00f3 b\u1ed1n th\u00e0nh ph\u1ea7n: Thi\u1ebft b\u1ecb, ph\u01b0\u01a1ng ti\u1ec7n truy\u1ec1n t\u1ea3i, \u0111\u00e1m m\u00e2y v\u00e0 \u1ee9ng d\u1ee5ng. Ch\u00fang ta h\u00e3y xem x\u00e9t vai tr\u00f2 c\u1ee7a t\u1eebng th\u1ee9 trong b\u1ed1i c\u1ea3nh tri\u1ec3n khai doanh nghi\u1ec7p hi\u1ec7n \u0111\u1ea1i, \u0111i\u1ec3n h\u00ecnh:<\/p>\n\n\n\n<p>C\u00e1c thi\u1ebft b\u1ecb. C\u00e1c ngh\u0129a v\u1ee5 b\u1ea3o m\u1eadt \u0111\u1ed1i v\u1edbi ng\u01b0\u1eddi qu\u1ea3n l\u00fd thi\u1ebft b\u1ecb trong m\u00f4i tr\u01b0\u1eddng kh\u00f4ng tin c\u1eady li\u00ean quan \u0111\u1ebfn vi\u1ec7c \u0111\u1ea3m b\u1ea3o x\u00e1c th\u1ef1c m\u1ea1nh m\u1ebd cho thi\u1ebft b\u1ecb, b\u1ea3o v\u1ec7 h\u1ec7 \u0111i\u1ec1u h\u00e0nh thi\u1ebft b\u1ecb di \u0111\u1ed9ng v\u00e0 m\u00f4i tr\u01b0\u1eddng \u1ee9ng d\u1ee5ng kh\u1ecfi ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i v\u00e0 thi\u1ebft l\u1eadp \u0111i\u1ec3m kh\u1edfi ch\u1ea1y an to\u00e0n \u0111\u1ec3 k\u1ebft n\u1ed1i v\u1edbi c\u00e1c \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef tr\u00ean \u0111\u00e1m m\u00e2y.<\/p>\n\n\n\n<p>V\u1eadn chuy\u1ec3n. C\u00e1c ngh\u0129a v\u1ee5 b\u1ea3o m\u1eadt \u0111\u1ed1i v\u1edbi c\u00e1c nh\u00e0 cung c\u1ea5p c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng giao th\u00f4ng trong m\u00f4i tr\u01b0\u1eddng kh\u00f4ng tin c\u1eady li\u00ean quan \u0111\u1ebfn vi\u1ec7c duy tr\u00ec th\u00f4ng tin li\u00ean l\u1ea1c c\u00f3 t\u00ednh kh\u1ea3 d\u1ee5ng cao, v\u00ec c\u00e1c d\u1ecbch v\u1ee5 t\u1eeb thi\u1ebft b\u1ecb \u0111\u1ebfn \u0111\u00e1m m\u00e2y l\u00e0 x\u01b0\u01a1ng s\u1ed1ng m\u1edbi cho m\u1ee5c \u0111\u00edch kinh doanh v\u00e0 c\u00e1 nh\u00e2n, \u0111\u1ed3ng th\u1eddi h\u1ed7 tr\u1ee3 c\u00e1c ph\u01b0\u01a1ng ti\u1ec7n linh ho\u1ea1t \u0111\u1ec3 b\u1ea3o v\u1ec7 m\u1ea1ng kh\u1ecfi c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng nh\u01b0 DDOS.<\/p>\n\n\n\n<p>\u0110\u00e1m m\u00e2y. C\u00e1c ngh\u0129a v\u1ee5 b\u1ea3o m\u1eadt \u0111\u1ed1i v\u1edbi nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 l\u01b0u tr\u1eef \u0111\u00e1m m\u00e2y [1] trong m\u00f4i tr\u01b0\u1eddng kh\u00f4ng tin c\u1eady li\u00ean quan \u0111\u1ebfn vi\u1ec7c cung c\u1ea5p ph\u00e2n \u0111o\u1ea1n vi m\u00f4 cho kh\u1ed1i l\u01b0\u1ee3ng c\u00f4ng vi\u1ec7c, c\u0169ng nh\u01b0 h\u1ed7 tr\u1ee3 c\u00e1c y\u00eau c\u1ea7u tu\u00e2n th\u1ee7 quy \u0111\u1ecbnh v\u00e0 b\u1ea3o m\u1eadt \u0111\u01b0\u1ee3c \u00e1p d\u1ee5ng \u0111\u1ed1i v\u1edbi b\u1ea5t k\u1ef3 d\u1ecbch v\u1ee5 l\u01b0u tr\u1eef b\u00ean ngo\u00e0i n\u00e0o c\u1ee7a c\u00e1c \u1ee9ng d\u1ee5ng doanh nghi\u1ec7p quan tr\u1ecdng. \u0110\u00e1m m\u00e2y c\u0169ng ph\u1ea3i h\u1ed7 tr\u1ee3 k\u1ebft n\u1ed1i thi\u1ebft b\u1ecb an to\u00e0n v\u00e0 ki\u1ec3m so\u00e1t truy c\u1eadp m\u1ea1ng.<\/p>\n\n\n\n<p>\u1ee8ng d\u1ee5ng. C\u00e1c ngh\u0129a v\u1ee5 b\u1ea3o m\u1eadt \u0111\u1ed1i v\u1edbi c\u00e1c \u1ee9ng d\u1ee5ng trong m\u00f4i tr\u01b0\u1eddng m\u00f4 h\u00ecnh kh\u00f4ng tin c\u1eady li\u00ean quan \u0111\u1ebfn vi\u1ec7c h\u1ed7 tr\u1ee3 m\u00e3 b\u1ea3o m\u1eadt cao, t\u00edch h\u1ee3p tr\u00ecnh k\u1ebft n\u1ed1i b\u1ea3o m\u1eadt \u0111\u1ec3 cung c\u1ea5p ph\u00e9p \u0111o t\u1eeb xa cho c\u00e1c c\u00f4ng c\u1ee5 \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef tr\u00ean \u0111\u00e1m m\u00e2y nh\u01b0 SIEM, h\u1ed7 tr\u1ee3 k\u1ebft n\u1ed1i thi\u1ebft b\u1ecb an to\u00e0n v\u00e0 th\u1ef1c hi\u1ec7n qu\u1ea3n l\u00fd truy c\u1eadp th\u00edch h\u1ee3p v\u00e0 b\u1ea3o m\u1eadt d\u1eef li\u1ec7u cho m\u1ecdi th\u00f4ng tin nh\u1ea1y c\u1ea3m \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef .<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"631\" height=\"265\" src=\"http:\/\/cafe2sach.com\/wp-content\/uploads\/2021\/03\/image-3.png\" alt=\"\" class=\"wp-image-970\" srcset=\"https:\/\/cafe2sach.com\/wp-content\/uploads\/2021\/03\/image-3.png 631w, https:\/\/cafe2sach.com\/wp-content\/uploads\/2021\/03\/image-3-600x252.png 600w, https:\/\/cafe2sach.com\/wp-content\/uploads\/2021\/03\/image-3-300x126.png 300w\" sizes=\"(max-width: 631px) 100vw, 631px\" \/><\/figure>\n\n\n\n<p>M\u1ed9t v\u00ed d\u1ee5 tuy\u1ec7t v\u1eddi v\u1ec1 vi\u1ec7c tri\u1ec3n khai b\u1eb1ng kh\u00f4ng l\u00e0 kh\u00e1i ni\u1ec7m Google BeyondCorp \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng cho m\u1ea1ng doanh nghi\u1ec7p t\u1ea1i c\u00f4ng ty. [2] M\u1ee5c ti\u00eau trong thi\u1ebft k\u1ebf doanh nghi\u1ec7p an to\u00e0n c\u1ee7a Google l\u00e0 lo\u1ea1i b\u1ecf s\u1ef1 ph\u1ee5 thu\u1ed9c v\u00e0o chu vi c\u1ee7a n\u00f3. Thay v\u00e0o \u0111\u00f3, k\u1ebf ho\u1ea1ch gi\u1eefa thi\u1ebft b\u1ecb v\u1edbi doanh nghi\u1ec7p s\u1eed d\u1ee5ng quy\u1ec1n truy c\u1eadp thi\u1ebft b\u1ecb do c\u00f4ng ty c\u1ea5p v\u00e0o c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng m\u1ea1ng c\u1ee7a Google \u0111\u1ec3 truy c\u1eadp an to\u00e0n v\u00e0o c\u00e1c \u1ee9ng d\u1ee5ng doanh nghi\u1ec7p c\u1ea7n thi\u1ebft. D\u01b0\u1edbi \u0111\u00e2y l\u00e0 c\u00e1c kh\u00eda c\u1ea1nh n\u1ed5i b\u1eadt c\u1ee7a thi\u1ebft k\u1ebf n\u00e0y:<\/p>\n\n\n\n<p>Truy c\u1eadp d\u1ef1a tr\u00ean th\u00f4ng tin \u0111\u0103ng nh\u1eadp. Trong BeyondCorp, quy\u1ec1n truy c\u1eadp tr\u1ef1c ti\u1ebfp ch\u1ec9 \u0111\u01b0\u1ee3c ph\u00e9p \u0111\u1ed1i v\u1edbi c\u00e1c thi\u1ebft b\u1ecb do Google mua s\u1eafm v\u00e0 qu\u1ea3n l\u00fd. Kho\u1ea3ng kh\u00f4ng qu\u1ea3ng c\u00e1o thi\u1ebft b\u1ecb \u0111\u01b0\u1ee3c theo d\u00f5i v\u00e0 c\u00e1c thay \u0111\u1ed5i c\u1ea5u h\u00ecnh \u0111\u1ed1i v\u1edbi thi\u1ebft b\u1ecb \u0111\u01b0\u1ee3c duy tr\u00ec trong m\u1ed9t kho ki\u1ec3m k\u00ea si\u00eau. Ch\u1ee9ng ch\u1ec9 \u0111\u01b0\u1ee3c c\u1ea5p v\u00e0 l\u01b0u tr\u1eef trong ph\u1ea7n c\u1ee9ng m\u00f4-\u0111un n\u1ec1n t\u1ea3ng \u0111\u00e1ng tin c\u1eady (TPM) tr\u00ean c\u00e1c thi\u1ebft b\u1ecb v\u00e0 \u0111\u01b0\u1ee3c tham chi\u1ebfu trong c\u01a1 s\u1edf d\u1eef li\u1ec7u h\u00e0ng t\u1ed3n kho. Quy tr\u00ecnh ki\u1ec3m \u0111\u1ecbnh x\u00e1c \u0111\u1ecbnh xem thi\u1ebft b\u1ecb \u0111i\u1ec3m cu\u1ed1i c\u00f3 \u0111\u1ee7 an to\u00e0n \u0111\u1ec3 truy c\u1eadp hay kh\u00f4ng.<\/p>\n\n\n\n<p>Truy c\u1eadp v\u00e0 M\u00e3 h\u00f3a. Qu\u1ea3n l\u00fd quy\u1ec1n truy c\u1eadp l\u00e0 ch\u1ee9c n\u0103ng trung t\u00e2m c\u1ee7a thi\u1ebft k\u1ebf BeyondCorp v\u00e0 \u0111\u01b0\u1ee3c tri\u1ec3n khai d\u1ef1a tr\u00ean c\u00e1c thu\u1ed9c t\u00ednh c\u1ee7a ng\u01b0\u1eddi d\u00f9ng y\u00eau c\u1ea7u, m\u1ecdi th\u00e0nh vi\u00ean nh\u00f3m c\u00f3 li\u00ean quan v\u00e0 c\u00e1c ch\u1ee9c n\u0103ng c\u00f4ng vi\u1ec7c li\u00ean quan \u0111\u1ebfn nh\u00e2n s\u1ef1 hi\u1ec7n h\u00e0nh. \u0110\u0103ng nh\u1eadp m\u1ed9t l\u1ea7n (SSO) \u0111\u01b0\u1ee3c h\u1ed7 tr\u1ee3 b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng c\u00e1c m\u00e3 th\u00f4ng b\u00e1o t\u1ed3n t\u1ea1i trong th\u1eddi gian ng\u1eafn \u0111\u01b0\u1ee3c t\u1ea1o \u0111\u1ec3 s\u1eed d\u1ee5ng trong c\u00e1c phi\u00ean. T\u1ea5t c\u1ea3 c\u00e1c phi\u00ean b\u1eaft ngu\u1ed3n t\u1eeb m\u1ed9t thi\u1ebft b\u1ecb \u0111\u01b0\u1ee3c c\u1ea5p ph\u00e9p c\u0169ng \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a.<\/p>\n\n\n\n<p>M\u1ea1ng kh\u00f4ng tin c\u1eady. Google \u0111i\u1ec1u h\u00e0nh m\u1ed9t m\u1ea1ng kh\u00f4ng \u0111\u1eb7c quy\u1ec1n \u0111\u1ec3 truy c\u1eadp thi\u1ebft b\u1ecb v\u1ec1 c\u01a1 b\u1ea3n l\u00e0 c\u00f4ng khai, nh\u01b0ng m\u1ea1ng \u0111\u00f3 n\u1eb1m trong kh\u00f4ng gian \u0111\u1ecba ch\u1ec9 ri\u00eang t\u01b0 c\u1ee7a Google. Ch\u1ec9 c\u00f3 k\u1ebft n\u1ed1i b\u00ean ngo\u00e0i t\u1ed1i thi\u1ec3u \u0111\u01b0\u1ee3c bao g\u1ed3m tr\u00ean m\u1ea1ng n\u00e0y v\u1edbi DNS, NTP, DHCP v\u00e0 Puppet. RADIUS \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 cung c\u1ea5p s\u1ef1 \u0111i\u1ec1u ph\u1ed1i ki\u1ec3m so\u00e1t truy c\u1eadp m\u1ea1ng (NAC) cho VLAN mong mu\u1ed1n \u0111\u1ec3 truy c\u1eadp v\u00e0o \u1ee9ng d\u1ee5ng Google \u0111ang \u0111\u01b0\u1ee3c y\u00eau c\u1ea7u.<\/p>\n\n\n\n<p>Tr\u1ea3i nghi\u1ec7m ng\u01b0\u1eddi d\u00f9ng t\u1eeb xa v\u00e0 c\u1ee5c b\u1ed9 gi\u1ed1ng h\u1ec7t nhau. K\u1ebft qu\u1ea3 ho\u1ea1t \u0111\u1ed9ng c\u1ee7a BeyondCorp l\u00e0 tr\u1ea3i nghi\u1ec7m phi\u00ean \u0111\u1ed1i v\u1edbi ng\u01b0\u1eddi d\u00f9ng truy c\u1eadp \u1ee9ng d\u1ee5ng Google c\u1ee5c b\u1ed9 v\u1ec1 c\u01a1 b\u1ea3n gi\u1ed1ng nh\u01b0 \u0111\u1ed1i v\u1edbi ng\u01b0\u1eddi d\u00f9ng truy c\u1eadp c\u00f9ng \u1ee9ng d\u1ee5ng t\u1eeb xa. B\u1eb1ng c\u00e1ch n\u00e0y, BeyondCorp lo\u1ea1i b\u1ecf m\u1ed9t c\u00e1ch thanh l\u1ecbch nhu c\u1ea7u v\u1ec1 chu vi doanh nghi\u1ec7p, \u0111i\u1ec1u n\u00e0y ng\u1ee5 \u00fd t\u1ea5t c\u1ea3 c\u00e1c l\u1ee3i \u00edch ho\u1ea1t \u0111\u1ed9ng v\u00e0 b\u1ea3o m\u1eadt c\u1ee7a m\u00f4i tr\u01b0\u1eddng m\u00e1y t\u00ednh kh\u00f4ng tin c\u1eady.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>Source: https:\/\/www.hstoday.us\/subject-matter-areas\/information-technology\/perspective-evolution-of-the-zero-trust-model-for-cybersecurity\/<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Ba m\u01b0\u01a1i n\u0103m tr\u01b0\u1edbc, m\u1ed9t nh\u00e0 nghi\u00ean c\u1ee9u \u0111\u00e3 vi\u1ebft m\u1ed9t ph\u1ea7n m\u1ec1m nh\u1ecf gi\u00fap c\u1ee9u c\u00f4ng ty c\u1ee7a anh [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":970,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[251],"tags":[],"class_list":["post-966","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-an-ninh-mang-cyber-security"],"_links":{"self":[{"href":"https:\/\/cafe2sach.com\/index.php\/wp-json\/wp\/v2\/posts\/966","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cafe2sach.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cafe2sach.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cafe2sach.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cafe2sach.com\/index.php\/wp-json\/wp\/v2\/comments?post=966"}],"version-history":[{"count":2,"href":"https:\/\/cafe2sach.com\/index.php\/wp-json\/wp\/v2\/posts\/966\/revisions"}],"predecessor-version":[{"id":972,"href":"https:\/\/cafe2sach.com\/index.php\/wp-json\/wp\/v2\/posts\/966\/revisions\/972"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cafe2sach.com\/index.php\/wp-json\/wp\/v2\/media\/970"}],"wp:attachment":[{"href":"https:\/\/cafe2sach.com\/index.php\/wp-json\/wp\/v2\/media?parent=966"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cafe2sach.com\/index.php\/wp-json\/wp\/v2\/categories?post=966"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cafe2sach.com\/index.php\/wp-json\/wp\/v2\/tags?post=966"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}