{"id":17167,"date":"2026-07-29T14:10:19","date_gmt":"2026-07-29T08:10:19","guid":{"rendered":"https:\/\/dtasiagroup.com\/agentless-security-for-ot-ics-networks-how-netflow-telemetry-covers-the-devices-you-cannot-touch\/"},"modified":"2026-08-28T12:07:49","modified_gmt":"2026-08-28T04:07:49","slug":"bao-mat-khong-can-tac-nhan-cho-mang-ot-ics-netflow-cung-cap-kha-nang-giam-sat-cac-thiet-bi-khong-the-can-thiep-nhu-the-nao","status":"publish","type":"post","link":"https:\/\/dtasiagroup.com\/vi\/bao-mat-khong-can-tac-nhan-cho-mang-ot-ics-netflow-cung-cap-kha-nang-giam-sat-cac-thiet-bi-khong-the-can-thiep-nhu-the-nao\/","title":{"rendered":"B\u1ea3o m\u1eadt kh\u00f4ng c\u1ea7n t\u00e1c nh\u00e2n cho m\u1ea1ng OT\/ICS: NetFlow cung c\u1ea5p kh\u1ea3 n\u0103ng gi\u00e1m s\u00e1t c\u00e1c thi\u1ebft b\u1ecb kh\u00f4ng th\u1ec3 can thi\u1ec7p nh\u01b0 th\u1ebf n\u00e0o"},"content":{"rendered":"\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/dtasiagroup.com\/wp-content\/uploads\/2026\/07\/image-137-1024x576.png\" alt=\"\" class=\"wp-image-16818\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1c m\u1ea1ng c\u00f4ng ngh\u1ec7 v\u1eadn h\u00e0nh (OT) v\u1ed1n kh\u00f4ng \u0111\u01b0\u1ee3c x\u00e2y d\u1ef1ng v\u1edbi m\u1ee5c ti\u00eau \u0111\u00e1p \u1ee9ng c\u00e1c y\u00eau c\u1ea7u b\u1ea3o m\u1eadt CNTT hi\u1ec7n \u0111\u1ea1i. Nh\u1eefng h\u1ec7 th\u1ed1ng v\u1eadn h\u00e0nh m\u00f4i tr\u01b0\u1eddng \u0111i\u1ec1u khi\u1ec3n c\u00f4ng nghi\u1ec7p, c\u01a1 s\u1edf s\u1ea3n xu\u1ea5t, h\u1ec7 th\u1ed1ng t\u1ef1 \u0111\u1ed9ng h\u00f3a t\u00f2a nh\u00e0 v\u00e0 c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng tr\u1ecdng y\u1ebfu \u0111\u1ec1u c\u00f3 chung m\u1ed9t h\u1ea1n ch\u1ebf quan tr\u1ecdng: kh\u00f4ng th\u1ec3 c\u00e0i \u0111\u1eb7t t\u00e1c nh\u00e2n b\u1ea3o m\u1eadt tr\u00ean c\u00e1c h\u1ec7 th\u1ed1ng n\u00e0y.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1c thi\u1ebft b\u1ecb n\u00e0y th\u01b0\u1eddng ch\u1ea1y ph\u1ea7n m\u1ec1m \u0111i\u1ec1u khi\u1ec3n \u0111\u1ed9c quy\u1ec1n, tu\u00e2n theo l\u1ecbch b\u1ea3o tr\u00ec nghi\u00eam ng\u1eb7t v\u00e0 trong nhi\u1ec1u tr\u01b0\u1eddng h\u1ee3p kh\u00f4ng th\u1ec3 c\u1eadp nh\u1eadt b\u1ea3n v\u00e1 ho\u1eb7c kh\u1edfi \u0111\u1ed9ng l\u1ea1i m\u00e0 kh\u00f4ng l\u00e0m gi\u00e1n \u0111o\u1ea1n ho\u1ea1t \u0111\u1ed9ng s\u1ea3n xu\u1ea5t. Vi\u1ec7c \u0111\u01b0a m\u1ed9t b\u1ed9 \u0111i\u1ec1u khi\u1ec3n ngo\u1ea1i tuy\u1ebfn c\u00f3 th\u1ec3 \u0111\u1ed3ng ngh\u0129a v\u1edbi vi\u1ec7c d\u1eebng to\u00e0n b\u1ed9 d\u00e2y chuy\u1ec1n s\u1ea3n xu\u1ea5t ho\u1eb7c l\u00e0m gi\u00e1n \u0111o\u1ea1n m\u1ed9t quy tr\u00ecnh v\u1eadn h\u00e0nh quan tr\u1ecdng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Th\u1ef1c t\u1ebf n\u00e0y ngay l\u1eadp t\u1ee9c lo\u1ea1i b\u1ecf nhi\u1ec1u c\u00f4ng c\u1ee5 b\u1ea3o m\u1eadt th\u01b0\u1eddng \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong m\u00f4i tr\u01b0\u1eddng CNTT doanh nghi\u1ec7p. Kh\u00f4ng th\u1ec3 tri\u1ec3n khai t\u00e1c nh\u00e2n ph\u00e1t hi\u1ec7n v\u00e0 \u1ee9ng ph\u00f3 tr\u00ean thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i (EDR), kh\u00f4ng c\u00f3 kh\u1ea3 n\u0103ng ghi nh\u1eadt k\u00fd d\u1ef1a tr\u00ean m\u00e1y ch\u1ee7 v\u00e0 c\u0169ng kh\u00f4ng th\u1ec3 s\u1eed d\u1ee5ng c\u00e1c c\u00f4ng c\u1ee5 qu\u00e9t l\u1ed7 h\u1ed5ng m\u1ed9t c\u00e1ch an to\u00e0n tr\u00ean nh\u1eefng h\u1ec7 th\u1ed1ng n\u00e0y. \u0110\u1ed1i v\u1edbi c\u00e1c \u0111\u1ed9i ng\u0169 b\u1ea3o m\u1eadt ch\u1ecbu tr\u00e1ch nhi\u1ec7m v\u1ec1 kh\u1ea3 n\u0103ng quan s\u00e1t m\u1ea1ng OT v\u00e0 H\u1ec7 th\u1ed1ng \u0110i\u1ec1u khi\u1ec3n C\u00f4ng nghi\u1ec7p (ICS), th\u00e1ch th\u1ee9c kh\u00f4ng n\u1eb1m \u1edf vi\u1ec7c l\u1ef1a ch\u1ecdn t\u00e1c nh\u00e2n b\u1ea3o m\u1eadt n\u00e0o \u0111\u1ec3 tri\u1ec3n khai tr\u00ean thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i, m\u00e0 l\u00e0 x\u00e1c \u0111\u1ecbnh nh\u1eefng d\u1eef li\u1ec7u gi\u00e1m s\u00e1t th\u1ee5 \u0111\u1ed9ng, kh\u00f4ng g\u00e2y \u1ea3nh h\u01b0\u1edfng n\u00e0o \u0111\u00e3 c\u00f3 s\u1eb5n t\u1eeb h\u1ea1 t\u1ea7ng xung quanh.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Trong h\u1ea7u h\u1ebft m\u00f4i tr\u01b0\u1eddng OT, c\u00e2u tr\u1ea3 l\u1eddi n\u1eb1m \u1edf ch\u00ednh m\u1ea1ng l\u01b0\u1edbi.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1c b\u1ed9 \u0111\u1ecbnh tuy\u1ebfn, thi\u1ebft b\u1ecb chuy\u1ec3n m\u1ea1ch v\u00e0 t\u01b0\u1eddng l\u1eeda n\u1eb1m gi\u1eefa c\u00e1c ph\u00e2n \u0111o\u1ea1n CNTT v\u00e0 OT li\u00ean t\u1ee5c xu\u1ea5t d\u1eef li\u1ec7u gi\u00e1m s\u00e1t lu\u1ed3ng m\u1ea1ng NetFlow v\u00e0 IPFIX. Khi d\u1eef li\u1ec7u lu\u1ed3ng n\u00e0y \u0111\u01b0\u1ee3c thu th\u1eadp, b\u1ed5 sung ng\u1eef c\u1ea3nh v\u00e0 chuy\u1ec3n ti\u1ebfp v\u00e0o h\u1ec7 th\u1ed1ng qu\u1ea3n l\u00fd th\u00f4ng tin v\u00e0 s\u1ef1 ki\u1ec7n b\u1ea3o m\u1eadt (SIEM), d\u1eef li\u1ec7u c\u00f3 th\u1ec3 cung c\u1ea5p kh\u1ea3 n\u0103ng quan s\u00e1t \u0111\u00e1ng k\u1ec3 \u0111\u1ed1i v\u1edbi ho\u1ea1t \u0111\u1ed9ng m\u1ea1ng m\u00e0 kh\u00f4ng c\u1ea7n b\u1ea5t k\u1ef3 s\u1ef1 t\u01b0\u01a1ng t\u00e1c n\u00e0o v\u1edbi c\u00e1c thi\u1ebft b\u1ecb OT.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">B\u00e0i vi\u1ebft n\u00e0y gi\u1ea3i th\u00edch v\u1ecb tr\u00ed c\u1ee7a NetFlow Optimizer (NFO) trong ki\u1ebfn tr\u00fac b\u1ea3o m\u1eadt OT\/ICS, nh\u1eefng th\u00f4ng tin m\u00e0 gi\u1ea3i ph\u00e1p c\u00f3 th\u1ec3 cung c\u1ea5p v\u00e0, quan tr\u1ecdng kh\u00f4ng k\u00e9m, nh\u1eefng gi\u1edbi h\u1ea1n c\u1ee7a gi\u1ea3i ph\u00e1p.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">T\u1ea1i sao c\u00e1c c\u00f4ng c\u1ee5 b\u1ea3o m\u1eadt truy\u1ec1n th\u1ed1ng kh\u00f4ng ph\u00f9 h\u1ee3p v\u1edbi OT<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00f4 h\u00ecnh Purdue v\u1eabn l\u00e0 khung ki\u1ebfn tr\u00fac ch\u1ee7 \u0111\u1ea1o \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 thi\u1ebft k\u1ebf m\u1ea1ng OT v\u00e0 ICS. M\u00f4 h\u00ecnh n\u00e0y ph\u00e2n t\u00e1ch h\u1ec7 th\u1ed1ng \u0111i\u1ec1u khi\u1ec3n c\u00f4ng nghi\u1ec7p kh\u1ecfi m\u1ea1ng CNTT doanh nghi\u1ec7p th\u00f4ng qua nhi\u1ec1u v\u00f9ng b\u1ea3o m\u1eadt v\u00e0 m\u1ed9t v\u00f9ng m\u1ea1ng phi qu\u00e2n s\u1ef1 (DMZ).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1c c\u1ea5p \u0111\u1ed9 t\u1eeb 0 \u0111\u1ebfn 2 bao g\u1ed3m quy tr\u00ecnh v\u1eadt l\u00fd v\u00e0 thi\u1ebft b\u1ecb c\u00f4ng nghi\u1ec7p, trong \u0111\u00f3 c\u00f3 PLC, DCS v\u00e0 SCADA. C\u1ea5p \u0111\u1ed9 3 \u0111\u1ea1i di\u1ec7n cho m\u1ea1ng v\u1eadn h\u00e0nh s\u1ea3n xu\u1ea5t. N\u1eb1m gi\u1eefa C\u1ea5p \u0111\u1ed9 3 v\u00e0 m\u1ea1ng doanh nghi\u1ec7p \u1edf C\u1ea5p \u0111\u1ed9 4 l\u00e0 DMZ CNTT\/OT, \u0111\u01b0\u1ee3c \u0111\u01b0a v\u00e0o c\u00e1c phi\u00ean b\u1ea3n sau c\u1ee7a M\u00f4 h\u00ecnh Purdue v\u00e0 \u0111\u01b0\u1ee3c quy \u0111\u1ecbnh ch\u00ednh th\u1ee9c trong ti\u00eau chu\u1ea9n IEC 62443.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">H\u1ea7u h\u1ebft c\u00e1c c\u00f4ng c\u1ee5 b\u1ea3o m\u1eadt doanh nghi\u1ec7p \u0111\u1ec1u gi\u1ea3 \u0111\u1ecbnh nh\u1eefng \u0111i\u1ec1u ki\u1ec7n \u0111\u01a1n gi\u1ea3n l\u00e0 kh\u00f4ng t\u1ed3n t\u1ea1i trong m\u00f4i tr\u01b0\u1eddng OT. C\u00e1c c\u00f4ng c\u1ee5 n\u00e0y y\u00eau c\u1ea7u thi\u1ebft b\u1ecb ph\u1ea3i c\u00f3 kh\u1ea3 n\u0103ng k\u1ebft n\u1ed1i IP, c\u00f3 c\u00e1c c\u1ed5ng qu\u1ea3n tr\u1ecb m\u1edf v\u00e0 c\u00f3 kh\u1ea3 n\u0103ng ch\u1ea1y ph\u1ea7n m\u1ec1m b\u1ea3o m\u1eadt.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1c thi\u1ebft b\u1ecb c\u00f4ng nghi\u1ec7p kh\u00f4ng \u0111\u00e1p \u1ee9ng b\u1ea5t k\u1ef3 gi\u1ea3 \u0111\u1ecbnh n\u00e0o trong s\u1ed1 n\u00e0y.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u1ed9t PLC \u0111i\u1ec1u khi\u1ec3n c\u01a1 s\u1edf x\u1eed l\u00fd n\u01b0\u1edbc, m\u1ed9t m\u00e1y ch\u1ee7 l\u01b0u tr\u1eef d\u1eef li\u1ec7u l\u1ecbch s\u1eed b\u00ean trong tr\u1ea1m bi\u1ebfn \u00e1p \u0111i\u1ec7n ho\u1eb7c m\u1ed9t HMI v\u1eadn h\u00e0nh d\u00e2y chuy\u1ec1n s\u1ea3n xu\u1ea5t \u0111\u1ec1u kh\u00f4ng th\u1ec3 ti\u1ebfp nh\u1eadn c\u00e1c t\u00e1c nh\u00e2n b\u1ea3o m\u1eadt tr\u00ean thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i. Nhi\u1ec1u thi\u1ebft b\u1ecb v\u1eabn ti\u1ebfp t\u1ee5c ch\u1ea1y c\u00e1c h\u1ec7 \u0111i\u1ec1u h\u00e0nh \u0111\u00e3 kh\u00f4ng \u0111\u01b0\u1ee3c c\u1eadp nh\u1eadt b\u1ea3n v\u00e1 trong nhi\u1ec1u n\u0103m \u2014 kh\u00f4ng ph\u1ea3i do th\u1ef1c h\u00e0nh b\u1ea3o m\u1eadt k\u00e9m, m\u00e0 b\u1edfi c\u00e1c th\u1ecfa thu\u1eadn h\u1ed7 tr\u1ee3 v\u1edbi nh\u00e0 cung c\u1ea5p ho\u1eb7c r\u1ee7i ro v\u1eadn h\u00e0nh li\u00ean quan \u0111\u1ebfn th\u1eddi gian ng\u1eebng ho\u1ea1t \u0111\u1ed9ng khi\u1ebfn vi\u1ec7c c\u1eadp nh\u1eadt b\u1ea3n v\u00e1 tr\u1edf n\u00ean kh\u00f4ng kh\u1ea3 thi.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Qu\u00e9t ch\u1ee7 \u0111\u1ed9ng l\u1ea1i t\u1ea1o ra m\u1ed9t th\u00e1ch th\u1ee9c kh\u00e1c.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vi\u1ec7c g\u1eedi l\u01b0u l\u01b0\u1ee3ng th\u0103m d\u00f2 v\u00e0o m\u1ea1ng OT c\u00f3 th\u1ec3 g\u00e2y ra h\u00e0nh vi kh\u00f4ng mong mu\u1ed1n \u1edf nh\u1eefng thi\u1ebft b\u1ecb v\u1ed1n ch\u01b0a bao gi\u1edd \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 ti\u1ebfp nh\u1eadn c\u00e1c y\u00eau c\u1ea7u kh\u00f4ng \u0111\u01b0\u1ee3c y\u00eau c\u1ea7u tr\u01b0\u1edbc. M\u1ed9t s\u1ed1 giao th\u1ee9c c\u00f4ng nghi\u1ec7p c\u00f3 th\u1ec3 ph\u1ea3n h\u1ed3i l\u01b0u l\u01b0\u1ee3ng kh\u00f4ng quen thu\u1ed9c b\u1eb1ng c\u00e1ch ph\u00e1t sinh l\u1ed7i, kh\u1edfi \u0111\u1ed9ng l\u1ea1i ho\u1eb7c chuy\u1ec3n sang tr\u1ea1ng th\u00e1i d\u1eebng an to\u00e0n. Do \u0111\u00f3, nh\u1eefng c\u00f4ng c\u1ee5 m\u00e0 \u0111\u1ed9i ng\u0169 b\u1ea3o m\u1eadt CNTT th\u01b0\u1eddng xuy\u00ean s\u1eed d\u1ee5ng \u2014 ch\u1eb3ng h\u1ea1n nh\u01b0 c\u00f4ng c\u1ee5 qu\u00e9t l\u1ed7 h\u1ed5ng, c\u00f4ng c\u1ee5 l\u1eadp b\u1ea3n \u0111\u1ed3 m\u1ea1ng ho\u1eb7c c\u00f4ng c\u1ee5 truy v\u1ea5n SNMP h\u01b0\u1edbng tr\u1ef1c ti\u1ebfp \u0111\u1ebfn thi\u1ebft b\u1ecb OT \u2014 c\u00f3 th\u1ec3 t\u1ea1o ra r\u1ee7i ro th\u1ef1c s\u1ef1 \u0111\u1ed1i v\u1edbi ho\u1ea1t \u0111\u1ed9ng v\u1eadn h\u00e0nh.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110i\u1ec1u n\u00e0y khi\u1ebfn gi\u00e1m s\u00e1t th\u1ee5 \u0111\u1ed9ng tr\u1edf th\u00e0nh ph\u01b0\u01a1ng ph\u00e1p an to\u00e0n nh\u1ea5t.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Trong s\u1ed1 t\u1ea5t c\u1ea3 c\u00e1c ngu\u1ed3n d\u1eef li\u1ec7u th\u1ee5 \u0111\u1ed9ng hi\u1ec7n c\u00f3, d\u1eef li\u1ec7u gi\u00e1m s\u00e1t lu\u1ed3ng m\u1ea1ng \u0111\u01b0\u1ee3c xu\u1ea5t t\u1eeb h\u1ea1 t\u1ea7ng \u0111ang v\u1eadn chuy\u1ec3n l\u01b0u l\u01b0\u1ee3ng mang l\u1ea1i kh\u1ea3 n\u0103ng quan s\u00e1t phong ph\u00fa nh\u1ea5t \u0111\u1ed3ng th\u1eddi \u00edt g\u00e2y \u1ea3nh h\u01b0\u1edfng nh\u1ea5t.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">D\u1eef li\u1ec7u NetFlow c\u00f3 th\u1ec3 \u2014 v\u00e0 kh\u00f4ng th\u1ec3 \u2014 quan s\u00e1t \u0111\u01b0\u1ee3c g\u00ec trong m\u1ea1ng OT<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">NetFlow Optimizer (NFO) thu th\u1eadp d\u1eef li\u1ec7u lu\u1ed3ng m\u1ea1ng \u0111\u01b0\u1ee3c xu\u1ea5t b\u1edfi c\u00e1c b\u1ed9 \u0111\u1ecbnh tuy\u1ebfn, thi\u1ebft b\u1ecb chuy\u1ec3n m\u1ea1ch v\u00e0 t\u01b0\u1eddng l\u1eeda \u0111\u01b0\u1ee3c \u0111\u1eb7t t\u1ea1i nh\u1eefng v\u1ecb tr\u00ed quan tr\u1ecdng trong m\u00f4i tr\u01b0\u1eddng OT, bao g\u1ed3m ranh gi\u1edbi CNTT\/OT, DMZ v\u00e0 v\u00f9ng bi\u00ean c\u1ee7a c\u00e1c ph\u00e2n \u0111o\u1ea1n m\u1ea1ng OT. Vi\u1ec7c hi\u1ec3u r\u00f5 ph\u1ea1m vi thu th\u1eadp d\u1eef li\u1ec7u n\u00e0y l\u00e0 y\u1ebfu t\u1ed1 thi\u1ebft y\u1ebfu.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NFO thu th\u1eadp c\u00e1c b\u1ea3n ghi NetFlow v\u00e0 IPFIX t\u1eeb nh\u1eefng thi\u1ebft b\u1ecb h\u1ea1 t\u1ea7ng c\u00f3 kh\u1ea3 n\u0103ng xu\u1ea5t d\u1eef li\u1ec7u lu\u1ed3ng m\u1ea1ng. NFO kh\u00f4ng thu th\u1eadp th\u00f4ng tin tr\u1ef1c ti\u1ebfp t\u1eeb c\u00e1c thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i OT, c\u0169ng kh\u00f4ng th\u1ef1c hi\u1ec7n b\u1eaft g\u00f3i tin ho\u1eb7c ki\u1ec3m tra s\u00e2u g\u00f3i tin (DPI) \u0111\u1ed1i v\u1edbi c\u00e1c giao th\u1ee9c c\u00f4ng nghi\u1ec7p nh\u01b0 Modbus, DNP3 ho\u1eb7c EtherNet\/IP.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">D\u1eef li\u1ec7u lu\u1ed3ng t\u1eeb c\u00e1c thi\u1ebft b\u1ecb t\u1ea1i ranh gi\u1edbi cung c\u1ea5p nh\u1eefng g\u00ec<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>L\u01b0u l\u01b0\u1ee3ng \u0111i qua ranh gi\u1edbi c\u00e1c v\u00f9ng m\u1ea1ng<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u1ecdi k\u1ebft n\u1ed1i gi\u1eefa m\u00f4i tr\u01b0\u1eddng CNTT doanh nghi\u1ec7p v\u00e0 OT \u0111\u1ec1u \u0111i qua m\u1ed9t thi\u1ebft b\u1ecb t\u1ea1i ranh gi\u1edbi. C\u00e1c b\u1ea3n ghi lu\u1ed3ng m\u1ea1ng ghi nh\u1eadn ngu\u1ed3n, \u0111\u00edch, giao th\u1ee9c, c\u1ed5ng, s\u1ed1 byte v\u00e0 th\u1eddi l\u01b0\u1ee3ng phi\u00ean c\u1ee7a t\u1eebng phi\u00ean trao \u0111\u1ed5i tr\u00ean m\u1ea1ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>C\u00e1c thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i m\u1edbi ho\u1eb7c b\u1ea5t th\u01b0\u1eddng<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu m\u1ed9t thi\u1ebft b\u1ecb tr\u01b0\u1edbc \u0111\u00e2y ch\u01b0a t\u1eebng giao ti\u1ebfp ra ngo\u00e0i ph\u00e2n \u0111o\u1ea1n m\u1ea1ng c\u1ee7a m\u00ecnh \u0111\u1ed9t nhi\u00ean xu\u1ea5t hi\u1ec7n trong c\u00e1c b\u1ea3n ghi lu\u1ed3ng m\u1ea1ng, thi\u1ebft b\u1ecb \u0111\u00f3 s\u1ebd ngay l\u1eadp t\u1ee9c tr\u1edf n\u00ean d\u1ec5 nh\u1eadn bi\u1ebft. NFO cung c\u1ea5p \u0111\u1ecba ch\u1ec9 IP ngu\u1ed3n, \u0111\u1ecba ch\u1ec9 IP \u0111\u00edch, c\u1ed5ng \u0111\u00edch v\u00e0 l\u01b0u l\u01b0\u1ee3ng d\u1eef li\u1ec7u, cho ph\u00e9p h\u1ec7 th\u1ed1ng SIEM ho\u1eb7c chuy\u00ean vi\u00ean ph\u00e2n t\u00edch b\u1ea3o m\u1eadt x\u00e1c \u0111\u1ecbnh li\u1ec7u ho\u1ea1t \u0111\u1ed9ng n\u00e0y c\u00f3 n\u1eb1m trong d\u1ef1 ki\u1ebfn hay kh\u00f4ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Sai l\u1ec7ch v\u1ec1 giao th\u1ee9c v\u00e0 c\u1ed5ng<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u1ea1ng OT c\u00f3 t\u00ednh d\u1ef1 \u0111o\u00e1n r\u1ea5t cao. C\u00e1c h\u1ec7 th\u1ed1ng th\u01b0\u1eddng giao ti\u1ebfp v\u1edbi c\u00f9ng nh\u1eefng \u0111\u00edch \u0111\u1ebfn b\u1eb1ng c\u00f9ng c\u00e1c giao th\u1ee9c v\u00e0 c\u1ed5ng m\u1ed7i ng\u00e0y. Khi m\u00f4 h\u00ecnh n\u00e0y thay \u0111\u1ed5i \u2014 v\u00ed d\u1ee5, m\u1ed9t m\u00e1y ch\u1ee7 l\u01b0u tr\u1eef d\u1eef li\u1ec7u l\u1ecbch s\u1eed \u0111\u1ed9t nhi\u00ean kh\u1edfi t\u1ea1o c\u00e1c k\u1ebft n\u1ed1i HTTPS ra b\u00ean ngo\u00e0i t\u1edbi m\u1ed9t \u0111\u1ecba ch\u1ec9 IP b\u00ean ngo\u00e0i, ho\u1eb7c m\u1ed9t thi\u1ebft b\u1ecb n\u1eb1m g\u1ea7n PLC b\u1eaft \u0111\u1ea7u giao ti\u1ebfp th\u00f4ng qua m\u1ed9t c\u1ed5ng b\u1ea5t th\u01b0\u1eddng \u2014 nh\u1eefng sai l\u1ec7ch n\u00e0y c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c nh\u1eadn bi\u1ebft th\u00f4ng qua d\u1eef li\u1ec7u lu\u1ed3ng m\u1ea1ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>B\u1ea5t th\u01b0\u1eddng v\u1ec1 l\u01b0u l\u01b0\u1ee3ng<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vi\u1ec7c l\u01b0u l\u01b0\u1ee3ng t\u0103ng \u0111\u1ed9t bi\u1ebfn t\u1eeb m\u1ed9t ph\u00e2n \u0111o\u1ea1n OT \u0111i t\u1edbi m\u1ea1ng doanh nghi\u1ec7p ho\u1eb7c m\u1ed9t \u0111\u00edch \u0111\u1ebfn b\u00ean ngo\u00e0i c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n ch\u1ec9 b\u1eb1ng th\u00f4ng tin v\u1ec1 l\u01b0u l\u01b0\u1ee3ng, ngay c\u1ea3 khi kh\u00f4ng c\u00f3 kh\u1ea3 n\u0103ng quan s\u00e1t n\u1ed9i dung th\u1ef1c t\u1ebf c\u1ee7a c\u00e1c g\u00f3i tin.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>L\u01b0u l\u01b0\u1ee3ng ngang trong c\u00e1c ph\u00e2n \u0111o\u1ea1n c\u00f3 kh\u1ea3 n\u0103ng quan s\u00e1t<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Trong tr\u01b0\u1eddng h\u1ee3p c\u00e1c thi\u1ebft b\u1ecb chuy\u1ec3n m\u1ea1ch c\u00f3 xu\u1ea5t NetFlow ho\u1eb7c IPFIX (m\u1eb7c d\u00f9 kh\u00f4ng ph\u1ea3i t\u1ea5t c\u1ea3 thi\u1ebft b\u1ecb chuy\u1ec3n m\u1ea1ch OT \u0111\u1ec1u h\u1ed7 tr\u1ee3), NFO c\u0169ng cung c\u1ea5p kh\u1ea3 n\u0103ng quan s\u00e1t c\u00e1c ho\u1ea1t \u0111\u1ed9ng giao ti\u1ebfp ngang gi\u1eefa c\u00e1c thi\u1ebft b\u1ecb di\u1ec5n ra b\u00ean trong nh\u1eefng ph\u00e2n \u0111o\u1ea1n m\u1ea1ng \u0111\u00f3.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/dtasiagroup.com\/wp-content\/uploads\/2026\/07\/image-138-1024x576.png\" alt=\"\" class=\"wp-image-16820\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">D\u1eef li\u1ec7u lu\u1ed3ng m\u1ea1ng kh\u00f4ng cung c\u1ea5p nh\u1eefng g\u00ec<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>N\u1ed9i dung giao th\u1ee9c c\u00f4ng nghi\u1ec7p<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1c b\u1ea3n ghi lu\u1ed3ng m\u1ea1ng kh\u00f4ng th\u1ec3 cho bi\u1ebft m\u00e3 ch\u1ee9c n\u0103ng Modbus, l\u1ec7nh DNP3, t\u1ea3i d\u1eef li\u1ec7u EtherNet\/IP ho\u1eb7c b\u1ea5t k\u1ef3 n\u1ed9i dung n\u00e0o kh\u00e1c c\u1ee7a giao th\u1ee9c c\u00f4ng nghi\u1ec7p. Vi\u1ec7c ki\u1ec3m tra ho\u1ea1t \u0111\u1ed9ng giao ti\u1ebfp \u1edf c\u1ea5p \u0111\u1ed9 giao th\u1ee9c \u0111\u00f2i h\u1ecfi m\u1ed9t n\u1ec1n t\u1ea3ng b\u1ea3o m\u1eadt OT chuy\u00ean d\u1ee5ng \u0111\u01b0\u1ee3c k\u1ebft n\u1ed1i th\u00f4ng qua SPAN ho\u1eb7c TAP, c\u00f3 kh\u1ea3 n\u0103ng th\u1ef1c hi\u1ec7n ki\u1ec3m tra s\u00e2u g\u00f3i tin.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Danh m\u1ee5c thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i OT<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NFO s\u1eed d\u1ee5ng SNMP \u0111\u1ec3 truy v\u1ea5n \u0111\u1ecbnh k\u1ef3 ch\u1ec9 c\u00e1c thi\u1ebft b\u1ecb h\u1ea1 t\u1ea7ng m\u1ea1ng. NFO kh\u00f4ng ph\u00e1t hi\u1ec7n ho\u1eb7c l\u1eadp danh m\u1ee5c c\u00e1c thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i OT. C\u00e1c t\u1ed5 ch\u1ee9c c\u1ea7n kh\u1ea3 n\u0103ng ph\u00e1t hi\u1ec7n v\u00e0 l\u1eadp danh m\u1ee5c t\u00e0i s\u1ea3n OT to\u00e0n di\u1ec7n s\u1ebd c\u1ea7n s\u1eed d\u1ee5ng c\u00e1c n\u1ec1n t\u1ea3ng qu\u1ea3n l\u00fd t\u00e0i s\u1ea3n OT chuy\u00ean d\u1ee5ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Kh\u1ea3 n\u0103ng quan s\u00e1t c\u00e1c ph\u00e2n \u0111o\u1ea1n OT b\u1ecb c\u00f4 l\u1eadp<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu m\u1ed9t ph\u00e2n \u0111o\u1ea1n OT c\u00e1ch ly ho\u00e0n to\u00e0n v\u1edbi b\u00ean ngo\u00e0i \u0111\u01b0\u1ee3c ph\u1ee5c v\u1ee5 b\u1edfi c\u00e1c thi\u1ebft b\u1ecb chuy\u1ec3n m\u1ea1ch kh\u00f4ng xu\u1ea5t NetFlow ho\u1eb7c IPFIX, NFO s\u1ebd kh\u00f4ng c\u00f3 kh\u1ea3 n\u0103ng quan s\u00e1t ph\u1ea7n m\u1ea1ng \u0111\u00f3. \u0110\u00e2y v\u1eabn l\u00e0 m\u1ed9t h\u1ea1n ch\u1ebf ph\u1ed5 bi\u1ebfn t\u1ea1i C\u1ea5p \u0111\u1ed9 0 v\u00e0 C\u1ea5p \u0111\u1ed9 1 c\u1ee7a M\u00f4 h\u00ecnh Purdue.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">NFO n\u1eb1m \u1edf \u0111\u00e2u trong ki\u1ebfn tr\u00fac b\u1ea3o m\u1eadt OT<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">L\u01b0u l\u01b0\u1ee3ng \u0111i qua l\u1ea1i gi\u1eefa m\u00f4i tr\u01b0\u1eddng doanh nghi\u1ec7p v\u00e0 OT s\u1ebd \u0111i qua c\u00e1c thi\u1ebft b\u1ecb t\u1ea1i ranh gi\u1edbi. Nh\u1eefng thi\u1ebft b\u1ecb n\u00e0y g\u1ea7n nh\u01b0 lu\u00f4n l\u00e0 thi\u1ebft b\u1ecb m\u1ea1ng c\u1ea5p doanh nghi\u1ec7p c\u00f3 kh\u1ea3 n\u0103ng xu\u1ea5t NetFlow ho\u1eb7c IPFIX theo ti\u00eau chu\u1ea9n.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Tri\u1ec3n khai NFO \u0111\u1ec3 thu th\u1eadp d\u1eef li\u1ec7u t\u1eeb t\u01b0\u1eddng l\u1eeda, thi\u1ebft b\u1ecb chuy\u1ec3n m\u1ea1ch l\u1edbp 3 v\u00e0 b\u1ed9 \u0111\u1ecbnh tuy\u1ebfn t\u1ea1i ranh gi\u1edbi n\u00e0y gi\u00fap \u0111\u1ed9i ng\u0169 b\u1ea3o m\u1eadt c\u00f3 kh\u1ea3 n\u0103ng quan s\u00e1t m\u1ecdi ho\u1ea1t \u0111\u1ed9ng giao ti\u1ebfp gi\u1eefa c\u00e1c v\u00f9ng m\u00e0 kh\u00f4ng c\u1ea7n ti\u1ebfp x\u00fac v\u1edbi b\u1ea5t k\u1ef3 thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i OT n\u00e0o.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NFO b\u1ed5 sung ng\u1eef c\u1ea3nh cho d\u1eef li\u1ec7u lu\u1ed3ng m\u1ea1ng, gi\u00fap d\u1eef li\u1ec7u tr\u1edf n\u00ean c\u00f3 gi\u00e1 tr\u1ecb s\u1eed d\u1ee5ng trong h\u1ec7 th\u1ed1ng SIEM:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Th\u00f4ng tin b\u1ed5 sung<\/strong><\/td><td><strong>NetFlow th\u00f4 hi\u1ec3n th\u1ecb<\/strong><\/td><td><strong>NFO b\u1ed5 sung<\/strong><\/td><\/tr><tr><td>Danh t\u00ednh ng\u01b0\u1eddi d\u00f9ng<\/td><td>IP ngu\u1ed3n: 10.4.1.15<\/td><td>Ng\u01b0\u1eddi d\u00f9ng: ops-engineer@company.com (\u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh t\u1eeb AD\/Entra ID)<\/td><\/tr><tr><td>Th\u00f4ng tin t\u00ecnh b\u00e1o m\u1ed1i \u0111e d\u1ecda<\/td><td>IP \u0111\u00edch: 185.220.101.1<\/td><td>\u0110i\u1ec3m nguy hi\u1ec3m: \u0111\u1ed9c h\u1ea1i \/ Ph\u00e2n lo\u1ea1i: h\u1ea1 t\u1ea7ng C2 \u0111\u00e3 \u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh<\/td><\/tr><tr><td>Ng\u1eef c\u1ea3nh \u1ee9ng d\u1ee5ng<\/td><td>C\u1ed5ng: 502<\/td><td>\u1ee8ng d\u1ee5ng: Modbus (th\u00f4ng qua danh m\u1ee5c \u1ee9ng d\u1ee5ng c\u1ee7a NFO)<\/td><\/tr><tr><td>Lu\u1ed3ng hai chi\u1ec1u<\/td><td>C\u00e1c b\u1ea3n ghi v\u00e0o\/ra ri\u00eang bi\u1ec7t<\/td><td>M\u1ed9t b\u1ea3n ghi \u0111\u01b0\u1ee3c li\u00ean k\u1ebft, cung c\u1ea5p \u0111\u1ea7y \u0111\u1ee7 ng\u1eef c\u1ea3nh c\u1ee7a phi\u00ean giao ti\u1ebfp<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">D\u1eef li\u1ec7u gi\u00e1m s\u00e1t \u0111\u01b0\u1ee3c b\u1ed5 sung ng\u1eef c\u1ea3nh v\u00e0 tu\u00e2n th\u1ee7 CIM n\u00e0y s\u1ebd \u0111\u01b0\u1ee3c \u0111\u01b0a v\u00e0o Splunk ES, Sentinel, Exabeam ho\u1eb7c b\u1ea5t k\u1ef3 h\u1ec7 th\u1ed1ng SIEM \u0111\u00edch n\u00e0o kh\u00e1c, n\u01a1i \u0111\u1ed9i ng\u0169 b\u1ea3o m\u1eadt \u0111\u00e3 x\u00e2y d\u1ef1ng c\u00e1c quy t\u1eafc ph\u00e1t hi\u1ec7n. Ho\u1ea1t \u0111\u1ed9ng ph\u00e1t hi\u1ec7n, c\u1ea3nh b\u00e1o v\u00e0 \u0111i\u1ec1u tra \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n trong h\u1ec7 th\u1ed1ng SIEM. NFO cung c\u1ea5p l\u1edbp d\u1eef li\u1ec7u n\u1ec1n t\u1ea3ng m\u00e0 c\u00e1c quy tr\u00ecnh n\u00e0y ph\u1ee5 thu\u1ed9c v\u00e0o.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Tri\u1ec3n khai m\u1ea1ng c\u00e1ch ly v\u00e0 kh\u00f4ng cho ph\u00e9p d\u1eef li\u1ec7u tho\u00e1t ra ngo\u00e0i<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1c m\u00f4i tr\u01b0\u1eddng OT trong l\u0129nh v\u1ef1c c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng tr\u1ecdng y\u1ebfu, qu\u1ed1c ph\u00f2ng v\u00e0 c\u00e1c ng\u00e0nh ch\u1ecbu s\u1ef1 qu\u1ea3n l\u00fd nghi\u00eam ng\u1eb7t th\u01b0\u1eddng kh\u00f4ng cho ph\u00e9p b\u1ea5t k\u1ef3 d\u1eef li\u1ec7u n\u00e0o r\u1eddi kh\u1ecfi ph\u1ea1m vi m\u1ea1ng. \u0110\u1ec3 \u0111\u00e1p \u1ee9ng c\u00e1c y\u00eau c\u1ea7u n\u00e0y, NFO l\u00e0 gi\u1ea3i ph\u00e1p ch\u1ec9 s\u1eed d\u1ee5ng ph\u1ea7n m\u1ec1m, \u0111\u01b0\u1ee3c tri\u1ec3n khai ho\u00e0n to\u00e0n t\u1ea1i ch\u1ed7 v\u00e0 kh\u00f4ng c\u00f3 d\u1eef li\u1ec7u tho\u00e1t ra ngo\u00e0i.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vi\u1ec7c x\u00e1c \u0111\u1ecbnh danh t\u00ednh ng\u01b0\u1eddi d\u00f9ng \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n th\u00f4ng qua Active Directory ho\u1eb7c Entra ID t\u1ea1i ch\u1ed7, trong khi c\u00e1c danh m\u1ee5c \u1ee9ng d\u1ee5ng t\u00f9y ch\u1ec9nh \u0111\u01b0\u1ee3c duy tr\u00ec c\u1ee5c b\u1ed9.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1c ngu\u1ed3n d\u1eef li\u1ec7u t\u00ecnh b\u00e1o m\u1ed1i \u0111e d\u1ecda v\u00e0 c\u01a1 s\u1edf d\u1eef li\u1ec7u GeoIP \u0111\u01b0\u1ee3c c\u1eadp nh\u1eadt t\u1eeb c\u00e1c ngu\u1ed3n b\u00ean ngo\u00e0i theo l\u1ecbch c\u00f3 th\u1ec3 c\u1ea5u h\u00ecnh. Sau \u0111\u00f3, NFO l\u01b0u b\u1ed9 nh\u1edb \u0111\u1ec7m d\u1eef li\u1ec7u t\u1ea1i ch\u1ed7. To\u00e0n b\u1ed9 qu\u00e1 tr\u00ecnh b\u1ed5 sung ng\u1eef c\u1ea3nh \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n c\u1ee5c b\u1ed9 b\u1eb1ng th\u00f4ng tin \u0111\u00e3 l\u01b0u trong b\u1ed9 nh\u1edb \u0111\u1ec7m trong qu\u00e1 tr\u00ecnh x\u1eed l\u00fd lu\u1ed3ng m\u1ea1ng. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ki\u1ebfn tr\u00fac n\u00e0y \u0111\u1eb7c bi\u1ec7t quan tr\u1ecdng trong m\u00f4i tr\u01b0\u1eddng OT, n\u01a1i ngay c\u1ea3 m\u1ed9t k\u1ebft n\u1ed1i t\u1edbi d\u1ecbch v\u1ee5 \u0111\u00e1m m\u00e2y \u1edf l\u1edbp qu\u1ea3n tr\u1ecb c\u0169ng c\u00f3 th\u1ec3 l\u00e0m ph\u00e1t sinh c\u00e1c v\u1ea5n \u0111\u1ec1 v\u1ec1 tu\u00e2n th\u1ee7.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NFO \u0111\u00e3 \u0111\u01b0\u1ee3c tri\u1ec3n khai trong c\u00e1c m\u00f4i tr\u01b0\u1eddng li\u00ean bang v\u00e0 B\u1ed9 Qu\u1ed1c ph\u00f2ng Hoa K\u1ef3 (DoD) s\u1eed d\u1ee5ng m\u1ea1ng c\u00e1ch ly ho\u00e0n to\u00e0n t\u1eeb n\u0103m 2016. C\u00f9ng m\u1ed9t ki\u1ebfn tr\u00fac \u0111\u00e1p \u1ee9ng c\u00e1c y\u00eau c\u1ea7u b\u1ea3o m\u1eadt nghi\u00eam ng\u1eb7t \u0111\u00f3 c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c tri\u1ec3n khai tr\u1ef1c ti\u1ebfp v\u00e0o c\u00e1c m\u1ea1ng H\u1ec7 th\u1ed1ng \u0110i\u1ec1u khi\u1ec3n C\u00f4ng nghi\u1ec7p (ICS) c\u00e1ch ly ho\u00e0n to\u00e0n m\u00e0 kh\u00f4ng c\u1ea7n s\u1eeda \u0111\u1ed5i.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1c t\u1ed5 ch\u1ee9c \u0111ang h\u01b0\u1edbng t\u1edbi tu\u00e2n th\u1ee7 CMMC ho\u1eb7c ho\u1ea1t \u0111\u1ed9ng theo c\u00e1c khu\u00f4n kh\u1ed5 FISMA c\u0169ng c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng NFO \u0111\u1ec3 h\u1ed7 tr\u1ee3 thu th\u1eadp b\u1eb1ng ch\u1ee9ng cho c\u00e1c y\u00eau c\u1ea7u ghi nh\u1eadt k\u00fd lu\u1ed3ng m\u1ea1ng m\u00e0 kh\u00f4ng t\u1ea1o ra s\u1ef1 ph\u1ee5 thu\u1ed9c v\u00e0o d\u1eef li\u1ec7u b\u00ean ngo\u00e0i. Nh\u01b0 \u0111\u00e3 \u0111\u1ec1 c\u1eadp trong c\u00e1c b\u00e0i vi\u1ebft \u201cThe Unsung Hero of CMMC Compliance\u201d v\u00e0 \u201cOMB M-21-31 and Network Flow Logging\u201d, d\u1eef li\u1ec7u gi\u00e1m s\u00e1t lu\u1ed3ng m\u1ea1ng l\u00e0 m\u1ed9t y\u00eau c\u1ea7u b\u1eb1ng ch\u1ee9ng c\u1ee5 th\u1ec3 trong c\u1ea3 hai khu\u00f4n kh\u1ed5. NFO cung c\u1ea5p quy tr\u00ecnh thu th\u1eadp, b\u1ed5 sung ng\u1eef c\u1ea3nh v\u00e0 chuy\u1ec3n ti\u1ebfp d\u1eef li\u1ec7u c\u1ea7n thi\u1ebft \u0111\u1ec3 h\u1ed7 tr\u1ee3 \u0111\u00e1p \u1ee9ng c\u00e1c y\u00eau c\u1ea7u n\u00e0y.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u0110i\u1ec3m kh\u1edfi \u0111\u1ea7u th\u1ef1c t\u1ebf<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">H\u1ea7u h\u1ebft c\u00e1c t\u1ed5 ch\u1ee9c mu\u1ed1n c\u1ea3i thi\u1ec7n kh\u1ea3 n\u0103ng quan s\u00e1t m\u1ea1ng OT kh\u00f4ng b\u1eaft \u0111\u1ea7u b\u1eb1ng vi\u1ec7c tri\u1ec3n khai m\u1ed9t n\u1ec1n t\u1ea3ng b\u1ea3o m\u1eadt OT chuy\u00ean d\u1ee5ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Thay v\u00e0o \u0111\u00f3, h\u1ecd b\u1eaft \u0111\u1ea7u v\u1edbi nh\u1eefng g\u00ec m\u00ecnh \u0111\u00e3 c\u00f3: c\u00e1c thi\u1ebft b\u1ecb m\u1ea1ng t\u1ea1i ranh gi\u1edbi CNTT\/OT v\u1ed1n \u0111\u00e3 xu\u1ea5t d\u1eef li\u1ec7u lu\u1ed3ng m\u1ea1ng, c\u00f9ng v\u1edbi h\u1ec7 th\u1ed1ng SIEM m\u00e0 \u0111\u1ed9i ng\u0169 v\u1eadn h\u00e0nh an ninh \u0111ang s\u1eed d\u1ee5ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NFO thu th\u1eadp d\u1eef li\u1ec7u lu\u1ed3ng m\u1ea1ng hi\u1ec7n c\u00f3, b\u1ed5 sung ng\u1eef c\u1ea3nh v\u00e0 chuy\u1ec3n d\u1eef li\u1ec7u t\u1edbi h\u1ec7 th\u1ed1ng SIEM theo \u0111\u1ecbnh d\u1ea1ng c\u00f3 th\u1ec3 t\u00edch h\u1ee3p v\u1edbi c\u00e1c n\u1ed9i dung ph\u00e1t hi\u1ec7n hi\u1ec7n c\u00f3.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">K\u1ebft qu\u1ea3 l\u00e0 kh\u1ea3 n\u0103ng quan s\u00e1t \u0111\u01b0\u1ee3c c\u1ea3i thi\u1ec7n \u0111\u00e1ng k\u1ec3 m\u00e0 kh\u00f4ng c\u1ea7n t\u00e1c \u0111\u1ed9ng \u0111\u1ebfn b\u1ea5t k\u1ef3 thi\u1ebft b\u1ecb OT n\u00e0o, kh\u00f4ng c\u1ea7n tri\u1ec3n khai t\u00e1c nh\u00e2n tr\u00ean thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i, kh\u00f4ng c\u1ea7n c\u00e0i \u0111\u1eb7t th\u00eam c\u1ea3m bi\u1ebfn trong m\u1ea1ng OT v\u00e0 kh\u00f4ng y\u00eau c\u1ea7u \u0111\u1ed9i ng\u0169 v\u1eadn h\u00e0nh an ninh ph\u1ea3i qu\u1ea3n l\u00fd m\u1ed9t n\u1ec1n t\u1ea3ng ho\u1eb7c giao di\u1ec7n \u0111i\u1ec1u khi\u1ec3n OT ri\u00eang bi\u1ec7t.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ed1i v\u1edbi c\u00e1c t\u1ed5 ch\u1ee9c c\u00f3 y\u00eau c\u1ea7u b\u1ea3o m\u1eadt nghi\u00eam ng\u1eb7t h\u01a1n v\u00e0 ng\u00e2n s\u00e1ch d\u00e0nh cho c\u00e1c c\u00f4ng c\u1ee5 OT chuy\u00ean d\u1ee5ng, NFO b\u1ed5 sung gi\u00e1 tr\u1ecb cho nh\u1eefng kho\u1ea3n \u0111\u1ea7u t\u01b0 n\u00e0y b\u1eb1ng c\u00e1ch cung c\u1ea5p n\u1ec1n t\u1ea3ng d\u1eef li\u1ec7u \u1edf l\u1edbp m\u1ea1ng m\u00e0 c\u00e1c gi\u1ea3i ph\u00e1p \u0111\u00f3 kh\u00f4ng bao ph\u1ee7. NFO thu th\u1eadp d\u1eef li\u1ec7u lu\u1ed3ng m\u1ea1ng t\u1eeb nhi\u1ec1u nh\u00e0 cung c\u1ea5p kh\u00e1c nhau tr\u00ean to\u00e0n b\u1ed9 h\u1ea1 t\u1ea7ng m\u1ea1ng, b\u1ed5 sung ng\u1eef c\u1ea3nh v\u00e0 chuy\u1ec3n d\u1eef li\u1ec7u t\u1edbi h\u1ec7 th\u1ed1ng SIEM, qua \u0111\u00f3 m\u1edf r\u1ed9ng kh\u1ea3 n\u0103ng quan s\u00e1t tr\u00ean m\u00f4i tr\u01b0\u1eddng doanh nghi\u1ec7p v\u00e0 c\u00e1c m\u00f4i tr\u01b0\u1eddng k\u1ebft n\u1ed1i v\u1edbi \u0111\u00e1m m\u00e2y \u2014 nh\u1eefng ph\u1ea1m vi m\u00e0 c\u00e1c n\u1ec1n t\u1ea3ng t\u1eadp trung v\u00e0o OT kh\u00f4ng \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 x\u1eed l\u00fd.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">T\u00f3m l\u1ea1i<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">B\u1ea3o m\u1eadt OT v\u00e0 ICS b\u1eaft \u0111\u1ea7u t\u1eeb vi\u1ec7c ch\u1ea5p nh\u1eadn m\u1ed9t h\u1ea1n ch\u1ebf mang t\u00ednh n\u1ec1n t\u1ea3ng: kh\u00f4ng th\u1ec3 c\u00e0i \u0111\u1eb7t t\u00e1c nh\u00e2n tr\u00ean c\u00e1c thi\u1ebft b\u1ecb n\u00e0y.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110i\u1ec1u b\u1ea1n c\u00f3 th\u1ec3 l\u00e0m l\u00e0 thu th\u1eadp, b\u1ed5 sung ng\u1eef c\u1ea3nh v\u00e0 chuy\u1ec3n ti\u1ebfp d\u1eef li\u1ec7u lu\u1ed3ng m\u1ea1ng t\u1eeb h\u1ea1 t\u1ea7ng xung quanh c\u00e1c thi\u1ebft b\u1ecb \u0111\u00f3. NFO bi\u1ebfn d\u1eef li\u1ec7u lu\u1ed3ng m\u1ea1ng th\u00e0nh th\u00f4ng tin b\u1ea3o m\u1eadt c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng \u0111\u1ec3 h\u00e0nh \u0111\u1ed9ng m\u00e0 kh\u00f4ng c\u1ea7n t\u00e1c \u0111\u1ed9ng \u0111\u1ebfn c\u00e1c thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i OT, kh\u00f4ng \u0111\u01b0a d\u1eef li\u1ec7u ra ngo\u00e0i l\u00ean \u0111\u00e1m m\u00e2y v\u00e0 kh\u00f4ng b\u1ed5 sung th\u00eam m\u1ed9t giao di\u1ec7n \u0111i\u1ec1u khi\u1ec3n m\u00e0 \u0111\u1ed9i ng\u0169 v\u1eadn h\u00e0nh an ninh ph\u1ea3i qu\u1ea3n l\u00fd.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ranh gi\u1edbi m\u1ea1ng c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c quan s\u00e1t. C\u00e1c ho\u1ea1t \u0111\u1ed9ng giao ti\u1ebfp \u0111i qua ranh gi\u1edbi \u0111\u00f3 \u0111\u01b0\u1ee3c ghi nh\u1eadn. NFO b\u1ed5 sung ng\u1eef c\u1ea3nh \u0111\u1ec3 bi\u1ebfn nh\u1eefng b\u1ea3n ghi n\u00e0y th\u00e0nh th\u00f4ng tin t\u00ecnh b\u00e1o b\u1ea3o m\u1eadt c\u00f3 gi\u00e1 tr\u1ecb h\u00e0nh \u0111\u1ed9ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>V\u1ec1 DT Asia<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">DT Asia \u0111\u01b0\u1ee3c th\u00e0nh l\u1eadp n\u0103m 2007 v\u1edbi s\u1ee9 m\u1ec7nh \u0111\u01b0a c\u00e1c gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt CNTT ti\u00ean phong kh\u00e1c nhau t\u1eeb Hoa K\u1ef3, Ch\u00e2u \u00c2u v\u00e0 Israel gia nh\u1eadp th\u1ecb tr\u01b0\u1eddng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Hi\u1ec7n t\u1ea1i, DT Asia l\u00e0 m\u1ed9t nh\u00e0 ph\u00e2n ph\u1ed1i gi\u00e1 tr\u1ecb gia t\u0103ng trong khu v\u1ef1c \u0111\u1ed1i v\u1edbi c\u00e1c gi\u1ea3i ph\u00e1p an ninh m\u1ea1ng, cung c\u1ea5p c\u00f4ng ngh\u1ec7 ti\u00ean ti\u1ebfn cho c\u00e1c t\u1ed5 ch\u1ee9c ch\u00ednh ph\u1ee7 tr\u1ecdng y\u1ebfu c\u0169ng nh\u01b0 c\u00e1c kh\u00e1ch h\u00e0ng t\u01b0 nh\u00e2n l\u1edbn bao g\u1ed3m c\u00e1c ng\u00e2n h\u00e0ng to\u00e0n c\u1ea7u v\u00e0 c\u00e1c c\u00f4ng ty trong danh s\u00e1ch Fortune 500. V\u1edbi c\u00e1c v\u0103n ph\u00f2ng v\u00e0 \u0111\u1ed1i t\u00e1c r\u1ed9ng kh\u1eafp trong khu v\u1ef1c Ch\u00e2u \u00c1 Th\u00e1i B\u00ecnh D\u01b0\u01a1ng, ch\u00fang t\u00f4i hi\u1ec3u r\u00f5 h\u01a1n v\u1ec1 th\u1ecb tr\u01b0\u1eddng v\u00e0 t\u1eeb \u0111\u00f3 mang \u0111\u1ebfn nh\u1eefng gi\u1ea3i ph\u00e1p b\u1ea3n \u0111\u1ecba h\u00f3a ph\u00f9 h\u1ee3p v\u1edbi t\u1eebng qu\u1ed1c gia, t\u1eebng t\u1ed5 ch\u1ee9c.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ch\u00fang t\u00f4i h\u1ed7 tr\u1ee3 nh\u01b0 th\u1ebf n\u00e0o<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu b\u1ea1n mu\u1ed1n t\u00ecm hi\u1ec3u th\u00eam v\u1ec1 B\u1ea3o m\u1eadt kh\u00f4ng c\u1ea7n t\u00e1c nh\u00e2n cho m\u1ea1ng OT\/ICS: NetFlow cung c\u1ea5p kh\u1ea3 n\u0103ng gi\u00e1m s\u00e1t c\u00e1c thi\u1ebft b\u1ecb kh\u00f4ng th\u1ec3 can thi\u1ec7p nh\u01b0 th\u1ebf n\u00e0o, b\u1ea1n \u0111\u00e3 t\u00ecm \u0111\u00fang n\u01a1i.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">DTA l\u00e0 nh\u00e0 ph\u00e2n ph\u1ed1i c\u1ee7a NetFlow Logic, \u0111\u1eb7c bi\u1ec7t t\u1ea1i Singapore v\u00e0 khu v\u1ef1c ch\u00e2u \u00c1. \u0110\u1ed9i ng\u0169 k\u1ef9 thu\u1eadt c\u1ee7a ch\u00fang t\u00f4i c\u00f3 nhi\u1ec1u kinh nghi\u1ec7m chuy\u00ean s\u00e2u v\u1ec1 s\u1ea3n ph\u1ea9m v\u00e0 c\u00e1c c\u00f4ng ngh\u1ec7 li\u00ean quan, gi\u00fap kh\u00e1ch h\u00e0ng c\u00f3 th\u1ec3 tin t\u01b0\u1edfng khi tri\u1ec3n khai gi\u1ea3i ph\u00e1p.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u00fang t\u00f4i cung c\u1ea5p gi\u1ea3i ph\u00e1p tr\u1ecdn g\u00f3i cho s\u1ea3n ph\u1ea9m, bao g\u1ed3m t\u01b0 v\u1ea5n, tri\u1ec3n khai v\u00e0 d\u1ecbch v\u1ee5 b\u1ea3o tr\u00ec.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">T\u00ecm hi\u1ec3u th\u00eam t\u1ea1i:<a href=\"https:\/\/dtasiagroup.com\/netflowlogic\/\">https:\/\/dtasiagroup.com\/netflowlogic\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>C\u00e1c m\u1ea1ng c\u00f4ng ngh\u1ec7 v\u1eadn h\u00e0nh (OT) v\u1ed1n kh\u00f4ng \u0111\u01b0\u1ee3c x\u00e2y d\u1ef1ng v\u1edbi m\u1ee5c ti\u00eau \u0111\u00e1p \u1ee9ng c\u00e1c y\u00eau c\u1ea7u b\u1ea3o m\u1eadt CNTT hi\u1ec7n \u0111\u1ea1i. Nh\u1eefng h\u1ec7 th\u1ed1ng v\u1eadn h\u00e0nh m\u00f4i tr\u01b0\u1eddng \u0111i\u1ec1u khi\u1ec3n c\u00f4ng nghi\u1ec7p, c\u01a1 s\u1edf s\u1ea3n xu\u1ea5t, h\u1ec7 th\u1ed1ng t\u1ef1 \u0111\u1ed9ng h\u00f3a t\u00f2a nh\u00e0 v\u00e0 c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng tr\u1ecdng y\u1ebfu \u0111\u1ec1u c\u00f3 chung m\u1ed9t h\u1ea1n ch\u1ebf quan tr\u1ecdng: kh\u00f4ng th\u1ec3 c\u00e0i \u0111\u1eb7t t\u00e1c nh\u00e2n b\u1ea3o m\u1eadt tr\u00ean c\u00e1c h\u1ec7 th\u1ed1ng n\u00e0y.<\/p>\n","protected":false},"author":11,"featured_media":16819,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[79,63],"tags":[],"class_list":["post-17167","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bai-viet","category-announcements-vi"],"_links":{"self":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts\/17167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/comments?post=17167"}],"version-history":[{"count":8,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts\/17167\/revisions"}],"predecessor-version":[{"id":17178,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts\/17167\/revisions\/17178"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/media\/16819"}],"wp:attachment":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/media?parent=17167"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/categories?post=17167"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/tags?post=17167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}