{"id":11063,"date":"2022-04-27T15:03:04","date_gmt":"2022-04-27T09:03:04","guid":{"rendered":"https:\/\/dtasiagroup.com\/?p=11063"},"modified":"2022-04-27T15:10:27","modified_gmt":"2022-04-27T09:10:27","slug":"bao-ve-nguoi-dung-dac-quyen-voi-yubikey","status":"publish","type":"post","link":"https:\/\/dtasiagroup.com\/vi\/bao-ve-nguoi-dung-dac-quyen-voi-yubikey\/","title":{"rendered":"B\u1ea3o v\u1ec7 ng\u01b0\u1eddi d\u00f9ng \u0111\u1eb7c quy\u1ec1n v\u1edbi YubiKey"},"content":{"rendered":"

B\u1ea3o v\u1ec7 t\u00e0i s\u1ea3n qu\u00fd gi\u00e1 nh\u1ea5t c\u1ee7a t\u1ed5 ch\u1ee9c<\/strong><\/h2>\n

Ng\u00e0y nay, th\u00f4ng tin c\u0169ng \u0111\u01b0\u1ee3c coi l\u00e0 m\u1ed9t trong nh\u1eefng t\u00e0i s\u1ea3n quan tr\u1ecdng c\u1ee7a m\u1ed7i c\u00f4ng ty. Th\u00f4ng tin v\u1ec1 kh\u00e1ch h\u00e0ng, d\u1eef li\u1ec7u t\u00e0i ch\u00ednh, t\u00e0i li\u1ec7u quan tr\u1ecdng v\u00e0 b\u1ea3n thi\u1ebft k\u1ebf s\u1ea3n ph\u1ea9m l\u00e0 nh\u1eefng v\u00ed d\u1ee5 v\u1ec1 d\u1eef li\u1ec7u quan tr\u1ecdng v\u00e0 nh\u1ea1y c\u1ea3m ph\u1ea3i \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7 kh\u1ecfi s\u1ef1 truy c\u1eadp tr\u00e1i ph\u00e9p, duy tr\u00ec b\u1ea3o m\u1eadt. M\u1ed9t cu\u1ed9c kh\u1ea3o s\u00e1t v\u00e0o n\u0103m 2021 cho bi\u1ebft t\u1ed5ng chi ph\u00ed trung b\u00ecnh cho c\u00e1c v\u1ee5 vi ph\u1ea1m d\u1eef li\u1ec7u l\u00ean t\u1edbi 4,24 tri\u1ec7u $, trong \u0111\u00f3 80% vi ph\u1ea1m li\u00ean quan \u0111\u1ebfn th\u00f4ng tin x\u00e1c th\u1ef1c \u0111\u1eb7c quy\u1ec1n b\u1ecb x\u00e2m ph\u1ea1m d\u01b0\u1edbi d\u1ea1ng ng\u01b0\u1eddi d\u00f9ng, m\u1eadt kh\u1ea9u, token ho\u1eb7c ch\u1ee9ng ch\u1ec9.<\/p>\n

Th\u00f4ng tin truy c\u1eadp c\u1ee7a t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n \u0111\u01b0\u1ee3c m\u00f4 t\u1ea3 l\u00e0 th\u00f4ng tin x\u00e1c th\u1ef1c cung c\u1ea5p quy\u1ec1n truy c\u1eadp v\u00e0 quy\u1ec1n n\u00e2ng cao gi\u1eefa c\u00e1c t\u00e0i kho\u1ea3n, \u1ee9ng d\u1ee5ng v\u00e0 h\u1ec7 th\u1ed1ng. Tr\u01b0\u1edbc \u0111\u00e2y t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n th\u01b0\u1eddng \u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh l\u00e0 qu\u1ea3n tr\u1ecb vi\u00ean CNTT nh\u01b0ng c\u00e1c \u0111\u1ecbnh ngh\u0129a v\u1ec1 ng\u01b0\u1eddi d\u00f9ng \u0111\u1eb7c quy\u1ec1n hi\u1ec7n \u0111ang \u0111\u01b0\u1ee3c m\u1edf r\u1ed9ng. S\u1eed d\u1ee5ng \u0111\u1ecbnh ngh\u0129a m\u1edbi, nh\u1eefng ng\u01b0\u1eddi d\u00f9ng ch\u00ednh trong c\u00f4ng ty nh\u01b0 HRD ho\u1eb7c Gi\u00e1m \u0111\u1ed1c t\u00e0i ch\u00ednh c\u0169ng c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c c\u1ea5p t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n. N\u00f3 th\u1eadm ch\u00ed c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c trao cho ai \u0111\u00f3 t\u1eeb b\u00ean ngo\u00e0i t\u1ed5 ch\u1ee9c, ch\u1eb3ng h\u1ea1n nh\u01b0 nh\u00e0 th\u1ea7u ho\u1eb7c nh\u00e2n vi\u00ean t\u1ea1m th\u1eddi\/h\u1ee3p \u0111\u1ed3ng, nh\u1eefng ng\u01b0\u1eddi \u0111\u01b0\u1ee3c ph\u00e9p truy c\u1eadp v\u00e0o d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m nh\u1ea5t trong m\u1ed9t khung th\u1eddi gian x\u00e1c \u0111\u1ecbnh. V\u1edbi s\u1ed1 l\u01b0\u1ee3ng ng\u01b0\u1eddi d\u00f9ng \u0111\u1eb7c quy\u1ec1n ng\u00e0y c\u00e0ng t\u0103ng, vi\u1ec7c qu\u1ea3n l\u00fd t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n c\u1ee7a t\u1ed5 ch\u1ee9c quan tr\u1ecdng h\u01a1n bao gi\u1edd h\u1ebft, v\u00ec nh\u1eefng ng\u01b0\u1eddi d\u00f9ng n\u00e0y l\u00e0 m\u1ee5c ti\u00eau ch\u00ednh c\u1ee7a t\u1ed9i ph\u1ea1m m\u1ea1ng. Yubikey \u0111\u1ea3m b\u1ea3o r\u1eb1ng t\u1ea5t c\u1ea3 ng\u01b0\u1eddi d\u00f9ng \u0111\u1eb7c quy\u1ec1n \u0111\u1ec1u \u0111\u01b0\u1ee3c b\u1ea3o m\u1eadt cao, b\u1ea3o v\u1ec7 c\u00f4ng ty kh\u1ecfi b\u1ecb chi\u1ebfm \u0111o\u1ea1t t\u00e0i kho\u1ea3n b\u1ea5t h\u1ee3p ph\u00e1p.<\/p>\n

C\u00e1ch thi\u1ebft l\u1eadp gi\u1ea3i ph\u00e1p Qu\u1ea3n l\u00fd Truy c\u1eadp \u0110\u1eb7c quy\u1ec1n\u00a0<\/strong><\/h3>\n

Qu\u1ea3n l\u00fd truy c\u1eadp \u0111\u1eb7c quy\u1ec1n l\u00e0 m\u1ed9t gi\u1ea3i ph\u00e1p \u0111\u1ea3m b\u1ea3o b\u1ea3o m\u1eadt d\u1eef li\u1ec7u b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng m\u1ed9t lo\u1ea1t c\u00e1c c\u00f4ng c\u1ee5 cho ph\u00e9p duy tr\u00ec quy\u1ec1n ki\u1ec3m so\u00e1t th\u00f4ng tin quan tr\u1ecdng. Ph\u01b0\u01a1ng ph\u00e1p t\u1ed1t nh\u1ea5t \u0111\u1ec3 t\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt truy c\u1eadp l\u00e0 th\u00eam c\u00e1c l\u1edbp b\u1ea3o m\u1eadt ngay c\u1ea3 v\u1edbi nh\u1eefng ng\u01b0\u1eddi d\u00f9ng c\u00f3 \u0111\u1eb7c quy\u1ec1n \u00edt nh\u1ea5t. Ng\u01b0\u1eddi d\u00f9ng ph\u1ea3i c\u00f3 c\u00e1c m\u1ee9c \u0111\u1eb7c quy\u1ec1n kh\u00e1c nhau d\u1ef1a tr\u00ean nh\u1eefng g\u00ec h\u1ecd y\u00eau c\u1ea7u: xem g\u00ec v\u00e0 l\u00e0m g\u00ec trong h\u1ec7 th\u1ed1ng.<\/p>\n

PAM y\u00eau c\u1ea7u t\u00e1ch c\u00e1c c\u00e1 nh\u00e2n c\u00f3 quy\u1ec1n truy c\u1eadp \u0111\u1eb7c quy\u1ec1n v\u00e0o m\u1ed9t kho l\u01b0u tr\u1eef an to\u00e0n. Sau khi b\u1ecb c\u00f4 l\u1eadp, nh\u1eefng ng\u01b0\u1eddi d\u00f9ng \u0111\u1eb7c quy\u1ec1n n\u00e0y \u0111\u01b0\u1ee3c y\u00eau c\u1ea7u \u0111i qua h\u1ec7 th\u1ed1ng PAM \u0111\u1ec3 l\u1ea5y quy\u1ec1n truy c\u1eadp v\u00e0o th\u00f4ng tin x\u00e1c th\u1ef1c – th\u00eam m\u1ed9t l\u1edbp b\u1ea3o m\u1eadt cho m\u1eadt kh\u1ea9u. \u0110\u1ec3 hi\u1ec3u r\u00f5 h\u01a1n v\u1ec1 c\u00e1ch th\u1ee9c ho\u1ea1t \u0111\u1ed9ng, b\u1ea1n c\u00f3 th\u1ec3 xem h\u00ecnh minh h\u1ecda b\u00ean d\u01b0\u1edbi. Trong m\u1ed7i b\u01b0\u1edbc, th\u00f4ng tin x\u00e1c th\u1ef1c v\u00e0 th\u00f4ng tin x\u00e1c th\u1ef1c n\u00e2ng cao \u0111\u01b0\u1ee3c th\u00eam v\u00e0o.<\/p>\n

\"\"<\/p>\n

Ng\u0103n ch\u1eb7n l\u1eeba \u0111\u1ea3o v\u00e0 chi\u1ebfm \u0111o\u1ea1t t\u00e0i kho\u1ea3n\u00a0<\/strong><\/h3>\n

PAM th\u01b0\u1eddng d\u1ef1a v\u00e0o IAM \u0111\u1ec3 x\u00e1c th\u1ef1c, v\u00e0 y\u00eau c\u1ea7u nhi\u1ec1u h\u01a1n so v\u1edbi m\u1eadt kh\u1ea9u ho\u1eb7c MFA k\u1ebf th\u1eeba. M\u1eb7c d\u00f9 \u0111\u00e3 th\u00eam v\u00e0o m\u1ed9t l\u1edbp b\u1ea3o m\u1eadt nh\u01b0ng l\u01b0u \u00fd quan tr\u1ecdng l\u00e0 kh\u00f4ng ph\u1ea3i t\u1ea5t c\u1ea3 c\u00e1c MFA \u0111\u1ec1u \u0111\u01b0\u1ee3c t\u1ea1o nh\u01b0 nhau. C\u00e1c ph\u01b0\u01a1ng ph\u00e1p x\u00e1c th\u1ef1c k\u1ebf th\u1eeba s\u1eed d\u1ee5ng t\u00ean ng\u01b0\u1eddi d\u00f9ng, m\u1eadt kh\u1ea9u v\u00e0 x\u00e1c th\u1ef1c d\u1ef1a tr\u00ean thi\u1ebft b\u1ecb di \u0111\u1ed9ng nh\u01b0 SMS, OTP v\u00e0 th\u00f4ng b\u00e1o (push notification) v\u1eabn d\u1ec5 b\u1ecb l\u1eeba \u0111\u1ea3o v\u00e0 chi\u1ebfm \u0111o\u1ea1t t\u00e0i kho\u1ea3n. Lo\u1ea1i ph\u01b0\u01a1ng th\u1ee9c x\u00e1c th\u1ef1c n\u00e0y s\u1ebd d\u1ec5 d\u00e0ng b\u1ecb vi ph\u1ea1m b\u1edfi c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o, ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i, t\u1ea5n c\u00f4ng trung gian, ho\u00e1n \u0111\u1ed5i SIM, v.v.<\/p>\n

Qu\u1ea3n l\u00fd truy c\u1eadp \u0111\u1eb7c quy\u1ec1n (PAM) r\u1ea5t quan tr\u1ecdng v\u00ec ng\u01b0\u1eddi d\u00f9ng c\u00f3 \u0111\u1eb7c quy\u1ec1n l\u00e0 m\u1ee5c ti\u00eau ch\u00ednh c\u1ee7a t\u1ed9i ph\u1ea1m m\u1ea1ng (h\u1ecd s\u1edf h\u1eefu th\u00f4ng tin nh\u1ea1y c\u1ea3m). YubiKey \u0111\u1ea3m b\u1ea3o cho t\u1ea5t c\u1ea3 ng\u01b0\u1eddi d\u00f9ng \u0111\u1eb7c quy\u1ec1n \u0111\u1ec1u \u0111\u00e1p \u1ee9ng m\u1ee9c \u0111\u1ed9 b\u1ea3o m\u1eadt cao h\u01a1n, t\u1eeb \u0111\u00f3 b\u1ea3o v\u1ec7 c\u00e1c t\u1ed5 ch\u1ee9c kh\u1ecfi b\u1ecb chi\u1ebfm \u0111o\u1ea1t t\u00e0i kho\u1ea3n. B\u1eb1ng c\u00e1ch tri\u1ec3n khai MFA ch\u1ed1ng l\u1eeba \u0111\u1ea3o nh\u01b0 YubiKey, b\u1ea1n s\u1ebd c\u00f3 kh\u1ea3 n\u0103ng b\u1ea3o v\u1ec7 360 \u0111\u1ed9. So v\u1edbi c\u00e1c ph\u01b0\u01a1ng ph\u00e1p kh\u00e1c, YubiKey ng\u0103n ch\u1eb7n 100% vi\u1ec7c chi\u1ebfm \u0111o\u1ea1t t\u00e0i kho\u1ea3n, bao g\u1ed3m c\u1ea3 c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o c\u00f3 m\u1ee5c ti\u00eau v\u00e0 h\u00e0ng lo\u1ea1t.<\/p>\n

\"\"<\/p>\n

T\u1ea1i sao YubiKey l\u00e0 s\u1ea3n ph\u1ea9m \u0111\u00f3n \u0111\u1ea7u kh\u00f3a b\u1ea3o m\u1eadt cho MFA?<\/strong><\/h3>\n

YubiKey ho\u1ea1t \u0111\u1ed9ng r\u1ea5t t\u1ed1t c\u1ea3 trong c\u00e1c giao th\u1ee9c x\u00e1c th\u1ef1c k\u1ebf th\u1eeba v\u00e0 hi\u1ec7n \u0111\u1ea1i nh\u01b0 FIDO U2F v\u00e0 FIDO, c\u0169ng nh\u01b0 OTP, Smartcard v\u00e0 OpenPGP. YubiKey c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng l\u00e0m c\u1ea7u n\u1ed1i gi\u1eefa h\u1ec7 th\u1ed1ng x\u00e1c th\u1ef1c k\u1ebf th\u1eeba v\u00e0 hi\u1ec7n \u0111\u1ea1i, gi\u00fap b\u1ea1n b\u1ea3o m\u1eadt t\u00e0i kho\u1ea3n c\u1ee7a m\u00ecnh d\u1ec5 d\u00e0ng h\u01a1n m\u00e0 kh\u00f4ng c\u1ea7n ph\u1ea3i s\u1eed d\u1ee5ng qu\u00e1 nhi\u1ec1u kh\u00f3a. S\u1ea3n ph\u1ea9m c\u0169ng ho\u1ea1t \u0111\u1ed9ng t\u1ed1t v\u1edbi c\u00e1c gi\u1ea3i ph\u00e1p IAM v\u00e0 PAM h\u00e0ng \u0111\u1ea7u, c\u00f3 th\u1ec3 d\u1ec5 d\u00e0ng t\u00edch h\u1ee3p v\u1edbi h\u1ec7 th\u1ed1ng c\u1ee7a b\u00ean th\u1ee9 3, bao g\u1ed3m Axiad, Duo, Google Cloud, Microsoft Azure Active Directory, Okta Workforce Identity, PingID, RSA SecurID Suite v\u00e0 CyberArk.<\/p>\n

YubiKey t\u1ea1o ra c\u1ea3 kh\u00f3a b\u00ed m\u1eadt v\u00e0 kh\u00f3a c\u00f4ng khai, kh\u00f3a b\u00ed m\u1eadt \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef trong ph\u1ea7n t\u1eed b\u1ea3o m\u1eadt tr\u00ean thi\u1ebft b\u1ecb. Ph\u01b0\u01a1ng ph\u00e1p n\u00e0y \u0111\u1ea3m b\u1ea3o b\u1ea3o v\u1ec7 \u0111\u1ea7y \u0111\u1ee7 cho c\u1ea3 ng\u01b0\u1eddi d\u00f9ng \u0111\u1eb7c quy\u1ec1n v\u00e0 d\u1eef li\u1ec7u. YubiKey c\u0169ng y\u00eau c\u1ea7u s\u1ef1 hi\u1ec7n di\u1ec7n c\u1ee7a ng\u01b0\u1eddi d\u00f9ng \u0111\u1ec3 x\u00e1c nh\u1eadn r\u1eb1ng ng\u01b0\u1eddi \u0111\u00f3 th\u1ef1c s\u1ef1 \u0111ang ki\u1ec3m so\u00e1t chi\u1ebfc ch\u00eca kh\u00f3a. Ch\u1ec9 v\u1edbi m\u1ed9t l\u1ea7n ch\u1ea1m v\u00e0 s\u1eed d\u1ee5ng \u0111\u01a1n gi\u1ea3n, YubiKey mang \u0111\u1ebfn tr\u1ea3i nghi\u1ec7m nhanh ch\u00f3ng v\u00e0 t\u1ed1t nh\u1ea5t cho ng\u01b0\u1eddi d\u00f9ng.<\/p>\n

\"\"<\/p>\n

T\u00ecm hi\u1ec3u th\u00eam c\u00e1ch th\u1ee9c YubiKey gi\u00fap b\u1ea3o v\u1ec7 t\u00e0i kho\u1ea3n truy c\u1eadp \u0111\u1eb7c quy\u1ec1n t\u1ea1i \u0111\u00e2y<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

B\u1ea3o v\u1ec7 c\u00e1c t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n l\u00e0 m\u1ed9t vi\u1ec7c l\u00e0m t\u1ed1i quan tr\u1ecdng. V\u00e0 s\u1eed d\u1ee5ng YubiKey s\u1ebd gi\u00fap t\u1ed5 ch\u1ee9c \u0111\u1ea1t \u0111\u01b0\u1ee3c m\u1ee9c \u0111\u1ed9 b\u1ea3o m\u1eadt cao nh\u1ea5t \u0111\u1ed1i v\u1edbi truy c\u1eadp \u0111\u1eb7c quy\u1ec1n.<\/p>\n","protected":false},"author":8,"featured_media":11034,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[66],"tags":[],"class_list":["post-11063","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-vi"],"_links":{"self":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts\/11063","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/comments?post=11063"}],"version-history":[{"count":0,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts\/11063\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/media\/11034"}],"wp:attachment":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/media?parent=11063"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/categories?post=11063"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/tags?post=11063"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}