{"id":210,"date":"2019-10-17T20:25:20","date_gmt":"2019-10-17T20:25:20","guid":{"rendered":"https:\/\/x-theme.net\/avas-creative-agency\/?p=210"},"modified":"2022-03-25T14:15:53","modified_gmt":"2022-03-25T07:15:53","slug":"avas-multi-purpose-responsive-theme","status":"publish","type":"post","link":"https:\/\/dt-corp.com.vn\/?p=210","title":{"rendered":"B\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 li\u1ec1n m\u1ea1ch cho m\u00f4i tr\u01b0\u1eddng hybrid IT"},"content":{"rendered":"<h2>M\u00e1y ch\u1ee7 l\u00e0 khu v\u1ef1c ch\u00ednh c\u1ee7a b\u1ec1 m\u1eb7t t\u1ea5n c\u00f4ng doanh nghi\u1ec7p v\u1edbi c\u00e1c r\u1ee7i ro l\u1edbn nh\u1ea5t. N\u00f3 l\u01b0u tr\u1eef c\u00e1c th\u00f4ng tin v\u1ec1 s\u1ee9c kh\u1ecfe, th\u1ebb t\u00edn d\u1ee5ng v\u00e0 s\u1edf h\u1eefu tr\u00ed tu\u1ec7\u2026 T\u1ea5t c\u1ea3 c\u00e1c c\u00e1ch x\u1eed l\u00fd d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m \u0111\u1ec1u \u0111\u01b0\u1ee3c t\u00ecm th\u1ea5y tr\u00ean c\u00e1c m\u00e1y ch\u1ee7.<\/h2>\n<p>Nhi\u1ec1u t\u1ed5 ch\u1ee9c v\u1eabn ch\u01b0a th\u1ef1c hi\u1ec7n c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 ph\u00f9 h\u1ee3p. H\u1ecd v\u1eabn \u0111ang d\u1ef1a v\u00e0o c\u00e1c bi\u1ec7n ph\u00e1p ki\u1ec3m so\u00e1t b\u1ea3o m\u1eadt y\u1ebfu v\u00e0 kh\u00f4ng linh ho\u1ea1t ho\u1eb7c h\u1ecd s\u1eed d\u1ee5ng c\u00e1c c\u00f4ng c\u1ee5 b\u1ea3o m\u1eadt l\u1ed7i th\u1eddi kh\u00f4ng th\u00edch \u1ee9ng t\u1ed1t v\u1edbi m\u00f4i tr\u01b0\u1eddng l\u00e0m vi\u1ec7c ph\u00e2n t\u00e1n, \u0111\u00e1m m\u00e2y k\u1ebft h\u1ee3p.<\/p>\n<p>\u0110\u1ec3 \u0111\u00e1p \u1ee9ng c\u00e1c y\u00eau c\u1ea7u ng\u00e0y nay, b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 doanh nghi\u1ec7p \u0111\u00f2i h\u1ecfi m\u1ed9t gi\u1ea3i ph\u00e1p ph\u1ea7n m\u1ec1m hi\u1ec7n \u0111\u1ea1i, li\u1ec1n m\u1ea1ch.<\/p>\n<h3>C\u00e2u chuy\u1ec7n v\u1ec1 qu\u1ea3n tr\u1ecb vi\u00ean m\u00e1y ch\u1ee7<\/h3>\n<p>H\u00e3y l\u1ea5y John, m\u1ed9t qu\u1ea3n tr\u1ecb vi\u00ean m\u00e1y ch\u1ee7 m\u00e0 t\u00f4i \u0111\u00e3 t\u1eebng g\u1eb7p. L\u00e0m vi\u1ec7c t\u1ea1i nh\u00e0, anh \u1ea5y c\u1ea7n quy\u1ec1n truy c\u1eadp t\u1eeb xa v\u00e0o c\u00e1c m\u00e1y ch\u1ee7 Windows v\u00e0 Linux t\u1ea1i ch\u1ed7 c\u1ee7a c\u00f4ng ty m\u00ecnh c\u0169ng nh\u01b0 c\u00e1c m\u00e1y ch\u1ee7 t\u1ea1i AWS. \u0110\u1ec3 kh\u1eafc ph\u1ee5c s\u1ef1 c\u1ed1 m\u00e1y ch\u1ee7, anh \u1ea5y \u0111\u00f4i khi \u0111\u0103ng nh\u1eadp b\u1eb1ng thi\u1ebft b\u1ecb c\u1ee7a c\u00f4ng ty v\u00e0 \u0111\u00f4i khi b\u1eb1ng thi\u1ebft b\u1ecb c\u00e1 nh\u00e2n. Anh \u1ea5y s\u1eed d\u1ee5ng c\u00f9ng m\u1ed9t m\u1eadt kh\u1ea9u tr\u00ean t\u1ea5t c\u1ea3. Anh \u1ea5y d\u1ef1a v\u00e0o c\u00e1c ki\u1ec3m so\u00e1t truy c\u1eadp c\u00f3 ngu\u1ed3n g\u1ed1c t\u1eeb m\u00e1y ch\u1ee7, v\u00ec v\u1eady anh \u1ea5y \u0111\u0103ng nh\u1eadp v\u1edbi t\u01b0 c\u00e1ch l\u00e0 ng\u01b0\u1eddi d\u00f9ng c\u1ea5p cao.<\/p>\n<p>John c\u00f3 quy\u1ec1n truy c\u1eadp v\u00e0o m\u1ecdi th\u1ee9, v\u00ec v\u1eady m\u1ed9t t\u1ed9i ph\u1ea1m m\u1ea1ng x\u00e2m nh\u1eadp v\u00e0o m\u00f4i tr\u01b0\u1eddng m\u00e1y ch\u1ee7 c\u1ee7a anh \u1ea5y, c\u00e0i \u0111\u1eb7t c\u00e1c c\u00f4ng c\u1ee5 t\u1ea5n c\u00f4ng v\u00e0 tri\u1ec3n khai ransomware l\u00e0 \u0111i\u1ec1u kh\u00e1 d\u1ec5 d\u00e0ng. Ch\u00fang c\u00f3 th\u1ec3 n\u00e2ng cao quy\u1ec1n truy c\u1eadp, th\u1ef1c hi\u1ec7n c\u00e1c chuy\u1ec3n \u0111\u1ed9ng ngang qua c\u00e1c \u0111i\u1ec3m cu\u1ed1i c\u1ee7a m\u00e1y ch\u1ee7 v\u00e0 l\u1ea5y d\u1eef li\u1ec7u.<\/p>\n<p>B\u00e2y gi\u1edd, h\u00e3y t\u01b0\u1edfng t\u01b0\u1ee3ng\u2026<\/p>\n<p>John \u0111i v\u00e0o m\u1ed9t h\u1ec7 th\u1ed1ng trung t\u00e2m \u0111\u1ec3 ki\u1ec3m tra m\u1ed9t t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n cho ph\u00e9p anh ta ch\u1ec9 l\u00e0m nh\u1eefng g\u00ec anh ta c\u1ea7n l\u00e0m. Anh \u1ea5y \u0111\u00e3 \u0111\u01b0\u1ee3c c\u1ea5p m\u1ed9t danh t\u00ednh k\u1ef9 thu\u1eadt s\u1ed1 gi\u1ed1ng nhau tr\u00ean t\u1ea5t c\u1ea3 c\u00e1c thi\u1ebft b\u1ecb v\u00e0 t\u1ea5t c\u1ea3 c\u00e1c m\u00e1y ch\u1ee7, cho d\u00f9 ch\u00fang l\u00e0 Unix, Windows, t\u1ea1i ch\u1ed7 hay tr\u00ean \u0111\u00e1m m\u00e2y.<\/p>\n<p>Quy\u1ec1n truy c\u1eadp c\u1ee7a anh ta \u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh b\u1edfi m\u1ee9c \u0111\u1ed9 r\u1ee7i ro li\u00ean quan. Thay v\u00ec lu\u00f4n lu\u00f4n c\u00f3 quy\u1ec1n truy c\u1eadp v\u00e0o m\u1ecdi th\u1ee9 tr\u00ean m\u00e1y ch\u1ee7, quy\u1ec1n truy c\u1eadp c\u1ee7a anh ta \u0111\u01b0\u1ee3c n\u00e2ng l\u00ean \u0111\u00fang l\u00fac v\u1edbi c\u00e1c \u0111\u1eb7c quy\u1ec1n ph\u00f9 h\u1ee3p \u0111\u1ec3 th\u1ef1c hi\u1ec7n c\u00e1c nhi\u1ec7m v\u1ee5 kh\u1eafc ph\u1ee5c s\u1ef1 c\u1ed1 c\u1ee7a m\u00ecnh. Sau \u0111\u00f3, n\u00f3 h\u1ebft h\u1ea1n.<\/p>\n<p>Trong tr\u01b0\u1eddng h\u1ee3p n\u00e0y, ch\u00fang t\u00f4i \u0111\u00e3 t\u00e1ch x\u00e1c th\u1ef1c kh\u1ecfi \u1ee7y quy\u1ec1n. X\u00e1c th\u1ef1c x\u00e1c nh\u1eadn John l\u00e0 ng\u01b0\u1eddi m\u00e0 anh ta n\u00f3i l\u00e0 anh ta \u0111\u1ec3 anh ta c\u00f3 th\u1ec3 v\u00e0o t\u00f2a nh\u00e0. Vi\u1ec7c \u1ee7y quy\u1ec1n cho John quy\u1ec1n v\u00e0o m\u1ed9t c\u0103n ph\u00f2ng c\u1ee5 th\u1ec3.<\/p>\n<p>V\u1edbi c\u00e1ch ti\u1ebfp c\u1eadn b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 n\u00e0y, ngay c\u1ea3 khi nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng x\u00e2m nh\u1eadp v\u00e0o m\u00f4i tr\u01b0\u1eddng c\u1ee7a b\u1ea1n, b\u1ea1n c\u00f3 th\u1ec3 ng\u0103n ch\u1eb7n ch\u00fang ngay t\u1eeb \u0111\u1ea7u. H\u1ecd kh\u00f4ng th\u1ec3 di chuy\u1ec3n sang b\u00ean ho\u1eb7c n\u00e2ng cao quy\u1ec1n truy c\u1eadp. Ngo\u00e0i m\u1ed9t vault c\u1ea5p th\u00f4ng tin \u0111\u0103ng nh\u1eadp t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n, quy tr\u00ecnh n\u00e0y c\u0169ng bao g\u1ed3m c\u00e1c ki\u1ec3m tra b\u1ea3o m\u1eadt t\u1ef1 \u0111\u1ed9ng d\u1ecdc theo \u0111\u01b0\u1eddng d\u1eabn truy c\u1eadp, nh\u01b0 quy tr\u00ecnh c\u00f4ng vi\u1ec7c ph\u00ea duy\u1ec7t v\u00e0 x\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1. C\u00e1c bi\u1ec7n ph\u00e1p ki\u1ec3m so\u00e1t b\u1ea3o m\u1eadt n\u00e0y ki\u1ec3m tra danh t\u00ednh v\u00e0 \u0111\u1eb7c quy\u1ec1n c\u1ee7a John tr\u01b0\u1edbc khi m\u1edf kh\u00f3a quy\u1ec1n truy c\u1eadp v\u00e0o c\u00e1c h\u1ec7 th\u1ed1ng m\u1ee5c ti\u00eau.<\/p>\n<p>C\u00e2u chuy\u1ec7n c\u1ee7a John \u0111\u00e3 quen thu\u1ed9c v\u1edbi nhi\u1ec1u doanh nghi\u1ec7p \u0111ang ph\u00e1t tri\u1ec3n. M\u00f4i tr\u01b0\u1eddng CNTT hi\u1ec7n \u0111\u1ea1i v\u00e0 c\u00e1c y\u00eau c\u1ea7u kinh doanh thay \u0111\u1ed5i nhanh ch\u00f3ng \u0111ang ph\u00e1 v\u1ee1 c\u00e1c m\u00f4 h\u00ecnh b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 c\u0169.<\/p>\n<p>H\u00e3y c\u00f9ng t\u00ecm hi\u1ec3u l\u00fd do t\u1ea1i sao l\u1ea1i nh\u01b0 v\u1eady v\u00e0 ng\u00e0y nay, c\u00e1c gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt hi\u1ec7n \u0111\u1ea1i \u0111ang bi\u1ebfn t\u1ea7m nh\u00ecn v\u1ec1 t\u01b0\u01a1ng lai c\u1ee7a John th\u00e0nh hi\u1ec7n th\u1ef1c nh\u01b0 th\u1ebf n\u00e0o.<\/p>\n<h3>Nh\u1eefng th\u00e1ch th\u1ee9c v\u1ec1 b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 c\u1ee7a doanh nghi\u1ec7p hi\u1ec7n \u0111\u1ea1i<\/h3>\n<p>M\u00f4i tr\u01b0\u1eddng CNTT doanh nghi\u1ec7p \u0111\u00e3 tr\u1edf n\u00ean \u0111a d\u1ea1ng v\u00e0 ph\u00e2n t\u00e1n. H\u1ea7u h\u1ebft c\u00e1c t\u1ed5 ch\u1ee9c v\u1eabn duy tr\u00ec m\u1ed9t s\u1ed1 m\u00e1y ch\u1ee7 trong m\u00f4i tr\u01b0\u1eddng c\u1ee5c b\u1ed9, t\u1ea1i ch\u1ed7. Trong khi \u0111\u00f3, c\u00e1c d\u1ef1 \u00e1n chuy\u1ec3n \u0111\u1ed5i \u0111\u00e1m m\u00e2y \u0111ang t\u0103ng t\u1ed1c, v\u1edbi c\u00e1c lo\u1ea1i m\u00e1y ch\u1ee7 m\u1edbi xu\u1ea5t hi\u1ec7n, bao g\u1ed3m kh\u1ed1i l\u01b0\u1ee3ng c\u00f4ng vi\u1ec7c \u0111\u00e1m m\u00e2y, v\u00f9ng ch\u1ee9a v\u00e0 d\u1ecbch v\u1ee5 vi m\u00f4, thi\u1ebft b\u1ecb l\u01b0u tr\u1eef, m\u00e1y \u1ea3o, v.v. C\u00e1c phi\u00ean b\u1ea3n n\u00e0y c\u00f3 th\u1ec3 \u1edf nhi\u1ec1u n\u1ec1n t\u1ea3ng \u0111\u00e1m m\u00e2y \u2014 AWS, Google v\u00e0 Azure.<\/p>\n<p>Trong khi \u0111\u00f3, s\u1ed1 l\u01b0\u1ee3ng ng\u01b0\u1eddi c\u00f3 quy\u1ec1n truy c\u1eadp v\u00e0o m\u00e1y ch\u1ee7 \u0111\u00e3 t\u0103ng l\u00ean theo c\u1ea5p s\u1ed1 nh\u00e2n. Thay v\u00ec m\u1ed9t s\u1ed1 qu\u1ea3n tr\u1ecb vi\u00ean m\u00e1y ch\u1ee7 SQL v\u00e0 Unix \u0111\u00e1ng tin c\u1eady l\u00e0m vi\u1ec7c tr\u01b0\u1edbc \u0111\u00f3, gi\u1edd \u0111\u00e2y b\u1ea1n c\u00f3 c\u00e1c nh\u00e0 ph\u00e1t tri\u1ec3n t\u1ea1o ra c\u00e1c phi\u00ean b\u1ea3n tr\u00ean \u0111\u00e1m m\u00e2y. Truy c\u1eadp t\u1eeb xa an to\u00e0n v\u00e0o c\u00e1c m\u00e1y ch\u1ee7 tr\u00ean \u0111\u00e1m m\u00e2y \u0111\u00e3 tr\u1edf th\u00e0nh \u0111i\u1ec1u b\u1eaft bu\u1ed9c.<\/p>\n<p>Qu\u1ea3n tr\u1ecb vi\u00ean m\u00e1y ch\u1ee7 l\u00e0m vi\u1ec7c qu\u00e1 s\u1ee9c v\u00e0 c\u00f3 \u00edt th\u1eddi gian \u0111\u1ec3 qu\u1ea3n l\u00fd b\u1ea3o m\u1eadt th\u1ee7 c\u00f4ng. V\u00e0 \u0111\u00f3 l\u00e0 l\u00fac sai l\u1ea7m x\u1ea3y ra\u2026<\/p>\n<p>C\u00e1c t\u00ednh ch\u1ea5t c\u1ee7a cloud r\u1ea5t kh\u00e1c v\u1edbi trung t\u00e2m d\u1eef li\u1ec7u c\u0169. M\u00f4i tr\u01b0\u1eddng m\u00e1y ch\u1ee7 ph\u00e2n t\u00e1n, \u0111a d\u1ea1ng kh\u00f3 qu\u1ea3n l\u00fd v\u00e0 b\u1ea3o m\u1eadt h\u01a1n. B\u1ea1n c\u00f3 nhi\u1ec1u h\u1ec7 \u0111i\u1ec1u h\u00e0nh v\u00e0 \u1ee9ng d\u1ee5ng v\u1edbi c\u00e1c c\u1ea5u h\u00ecnh r\u1ee7i ro kh\u00e1c nhau. Th\u00f4ng th\u01b0\u1eddng, m\u1ed7i m\u00e1y ch\u1ee7 \u0111\u00e1m m\u00e2y \u0111\u01b0\u1ee3c \u0111i\u1ec1u ch\u1ec9nh b\u1edfi c\u00e1c ch\u00ednh s\u00e1ch kh\u00e1c nhau, thay v\u00ec m\u1ed9t khu\u00f4n kh\u1ed5 b\u1ea3o m\u1eadt nh\u1ea5t qu\u00e1n gi\u1eefa c\u00e1c nh\u00f3m, khu v\u1ef1c \u0111\u1ecba l\u00fd v\u00e0 \u0111\u01a1n v\u1ecb kinh doanh.<\/p>\n<p>Qu\u1ea3n tr\u1ecb vi\u00ean m\u00e1y ch\u1ee7 nh\u01b0 John l\u00e0m vi\u1ec7c qu\u00e1 s\u1ee9c, c\u0103ng th\u1eb3ng v\u00e0 c\u00f3 \u00edt th\u1eddi gian \u0111\u1ec3 qu\u1ea3n l\u00fd b\u1ea3o m\u1eadt th\u1ee7 c\u00f4ng. Sai l\u1ea7m x\u1ea3y ra v\u00e0 l\u00e0m t\u0103ng r\u1ee7i ro. Ch\u00fang t\u00f4i c\u1ea7n l\u00e0m cho cu\u1ed9c s\u1ed1ng c\u1ee7a h\u1ecd d\u1ec5 d\u00e0ng h\u01a1n c\u0169ng nh\u01b0 an to\u00e0n h\u01a1n.<\/p>\n<h3>C\u00e1c vect\u01a1 t\u1ea5n c\u00f4ng \u0111i\u1ec3n h\u00ecnh v\u00e0o m\u00e1y ch\u1ee7<\/h3>\n<p>Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 ba c\u00e1ch ph\u1ed5 bi\u1ebfn \u0111\u1ec3 truy c\u1eadp v\u00e0o m\u1ed9t m\u00e1y ch\u1ee7, m\u1ed9t s\u1ed1 d\u1ec5 khai th\u00e1c h\u01a1n nh\u1eefng c\u00e1ch kh\u00e1c, t\u00f9y thu\u1ed9c v\u00e0o ho\u00e0n c\u1ea3nh. M\u1ed7i tuy\u1ebfn c\u00f3 \u00fd ngh\u0129a kh\u00e1c nhau \u0111\u1ed1i v\u1edbi b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7.<\/p>\n<h4>Con \u0111\u01b0\u1eddng t\u1ea5n c\u00f4ng 1: T\u1ea5n c\u00f4ng m\u00e1y ch\u1ee7 th\u00f4ng qua c\u00e1c m\u00e1y tr\u1ea1m c\u1ee7a ng\u01b0\u1eddi d\u00f9ng.<\/h4>\n<p>V\u1edbi vi\u1ec7c nh\u00e2n vi\u00ean l\u00e0m vi\u1ec7c t\u1eeb xa v\u00e0 c\u00e1c t\u1ed5 ch\u1ee9c s\u1eed d\u1ee5ng nhi\u1ec1u d\u1ecbch v\u1ee5 \u0111\u00e1m m\u00e2y h\u01a1n \u0111\u1ec3 h\u1ed7 tr\u1ee3 h\u1ecd, b\u1ec1 m\u1eb7t t\u1ea5n c\u00f4ng n\u00e0y l\u1edbn h\u01a1n bao gi\u1edd h\u1ebft. B\u1ea5t k\u1ef3 cu\u1ed9c t\u1ea5n c\u00f4ng n\u00e0o gi\u00e0nh \u0111\u01b0\u1ee3c quy\u1ec1n truy c\u1eadp v\u00e0o m\u00e1y tr\u1ea1m c\u1ee7a ng\u01b0\u1eddi d\u00f9ng (l\u1eeba \u0111\u1ea3o v\u1eabn l\u00e0 ph\u01b0\u01a1ng ph\u00e1p \u0111\u01b0\u1ee3c nhi\u1ec1u ng\u01b0\u1eddi bi\u1ebft \u0111\u1ebfn) s\u1ebd mang l\u1ea1i cho k\u1ebb \u0111e d\u1ecda m\u1ed9t ch\u1ed7 \u0111\u1ee9ng v\u1eefng ch\u1eafc v\u00e0 l\u00e0 b\u01b0\u1edbc \u0111\u1ec7m v\u00e0o m\u1ea1ng m\u00e1y ch\u1ee7.<\/p>\n<p>Th\u1ef1c ti\u1ec5n x\u1ea5u ph\u1ed5 bi\u1ebfn l\u00e0 c\u1ea5p cho ng\u01b0\u1eddi d\u00f9ng quy\u1ec1n truy c\u1eadp t\u00e0i kho\u1ea3n qu\u1ea3n tr\u1ecb c\u1ee5c b\u1ed9 (\u0111\u1ec3 c\u00e0i \u0111\u1eb7t \u1ee9ng d\u1ee5ng, m\u00e1y in, v.v.) s\u1ebd r\u01a1i v\u00e0o tay k\u1ebb t\u1ea5n c\u00f4ng. V\u1edbi t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n n\u00e0y, k\u1ebb t\u1ea5n c\u00f4ng s\u1edf h\u1eefu m\u00e1y tr\u1ea1m v\u00e0 c\u00f3 th\u1ec3 khai th\u00e1c t\u1ed1i \u0111a. N\u1ebfu kh\u00f4ng c\u00f3 c\u00e1c bi\u1ec7n ph\u00e1p ki\u1ec3m so\u00e1t b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 th\u00edch h\u1ee3p, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 c\u00e0i \u0111\u1eb7t c\u00e1c c\u00f4ng c\u1ee5 hack v\u00e0 di chuy\u1ec3n theo chi\u1ec1u d\u1ecdc t\u1eeb m\u00e1y tr\u1ea1m \u0111\u1ebfn m\u00e1y ch\u1ee7.<\/p>\n<h4>Con \u0111\u01b0\u1eddng t\u1ea5n c\u00f4ng 2: T\u1ea5n c\u00f4ng m\u00e1y ch\u1ee7 th\u00f4ng qua m\u1ed9t kho m\u1eadt kh\u1ea9u c\u1ea5p ng\u01b0\u1eddi d\u00f9ng.<\/h4>\n<p>M\u1ed9t s\u1ed1 t\u1ed5 ch\u1ee9c d\u1ef1a v\u00e0o kho m\u1eadt kh\u1ea9u y\u1ebfu, c\u1ea5p \u0111\u1ed9 ng\u01b0\u1eddi d\u00f9ng mang l\u1ea1i c\u1ea3m gi\u00e1c an to\u00e0n sai. Tuy nhi\u00ean, kh\u00f4ng ph\u1ea3i t\u1ea5t c\u1ea3 c\u00e1c vault \u0111\u1ec1u \u0111\u01b0\u1ee3c t\u1ea1o ra nh\u01b0 nhau. N\u1ebfu m\u1ed9t vault kh\u00f4ng \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7 \u0111\u00fang c\u00e1ch v\u00e0 m\u1ed9t ng\u01b0\u1eddi d\u00f9ng b\u1ecb l\u1eeba \u0111\u1ea3o ho\u1eb7c m\u1ed9t k\u1ebb n\u1ed9i gi\u00e1n tr\u1edf th\u00e0nh k\u1ebb l\u1eeba \u0111\u1ea3o, th\u00ec t\u00e1c nh\u00e2n \u0111e d\u1ecda c\u00f3 th\u1ec3 gi\u00e0nh \u0111\u01b0\u1ee3c ch\u1ed7 \u0111\u1ee9ng tr\u00ean m\u1ed9t m\u00e1y ch\u1ee7. N\u1ebfu k\u1ebb t\u1ea5n c\u00f4ng v\u01b0\u1ee3t qua vault, ch\u00fang c\u0169ng s\u1ebd b\u1ecf qua c\u00e1c ki\u1ec3m so\u00e1t truy c\u1eadp d\u1ef1a tr\u00ean vault v\u00e0 kh\u1ea3 n\u0103ng ghi phi\u00ean. \u0110i\u1ec1u \u0111\u00f3 khi\u1ebfn ph\u00e1p y (forensics) kh\u00f3 t\u00ecm ra ngu\u1ed3n g\u1ed1c c\u1ee7a v\u1ee5 t\u1ea5n c\u00f4ng h\u01a1n.<\/p>\n<h4>Con \u0111\u01b0\u1eddng t\u1ea5n c\u00f4ng 3: T\u1ea5n c\u00f4ng tr\u1ef1c ti\u1ebfp v\u00e0o m\u00e1y ch\u1ee7<\/h4>\n<p>C\u00e1c nh\u00e2n vi\u00ean b\u1ea5t m\u00e3n c\u00f3 th\u1ec3 d\u1ec5 d\u00e0ng b\u1ecf qua c\u00e1c m\u00e1y tr\u1ea1m c\u1ee7a ng\u01b0\u1eddi d\u00f9ng cu\u1ed1i v\u00e0 \u0111i th\u1eb3ng \u0111\u1ebfn m\u00e1y ch\u1ee7, cho d\u00f9 m\u00e1y ch\u1ee7 \u0111\u00f3 \u1edf tr\u00ean \u0111\u00e1m m\u00e2y hay on-prem. M\u1ed9t t\u00e1c nh\u00e2n \u0111e d\u1ecda \u0111\u00e3 \u1edf tr\u00ean m\u1ea1ng v\u00e0 c\u00f3 c\u00e1c \u0111\u1eb7c quy\u1ec1n ch\u00ednh x\u00e1c s\u1ebd c\u1ed1 g\u1eafng di chuy\u1ec3n ngang t\u1eeb m\u00e1y ch\u1ee7 n\u00e0y sang m\u00e1y ch\u1ee7 kh\u00e1c \u0111\u1ec3 gi\u00e0nh quy\u1ec1n truy c\u1eadp v\u00e0o d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m v\u00e0 l\u1ea5y \u0111i ho\u1eb7c m\u00e3 h\u00f3a d\u1eef li\u1ec7u \u0111\u00f3 \u0111\u1ec3 \u0111\u00f2i ti\u1ec1n chu\u1ed9c.<\/p>\n<h3>T\u1ea7m quan tr\u1ecdng c\u1ee7a qu\u1ea3n l\u00fd truy c\u1eadp \u0111\u1eb7c quy\u1ec1n \u0111\u1ed1i v\u1edbi b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7<\/h3>\n<p>Nh\u01b0 b\u1ea1n c\u00f3 th\u1ec3 th\u1ea5y t\u1eeb c\u00e1c vect\u01a1 t\u1ea5n c\u00f4ng ph\u1ed5 bi\u1ebfn \u0111\u01b0\u1ee3c n\u00eau \u1edf tr\u00ean, c\u00e1c t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n l\u00e0 c\u1ed1t l\u00f5i \u0111\u1ed1i v\u1edbi ch\u1ee9c n\u0103ng c\u1ee7a m\u00e1y ch\u1ee7. Con ng\u01b0\u1eddi, \u1ee9ng d\u1ee5ng v\u00e0 d\u1ecbch v\u1ee5 s\u1eed d\u1ee5ng t\u00e0i kho\u1ea3n v\u00e0 c\u00e1c vai tr\u00f2 v\u00e0 quy\u1ec1n li\u00ean quan c\u1ee7a h\u1ecd \u0111\u1ec3 \u0111\u0103ng nh\u1eadp v\u00e0o c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng m\u00e1y ch\u1ee7 v\u00e0 ch\u1ea1y c\u00e1c t\u00e1c v\u1ee5 \u0111\u1eb7c quy\u1ec1n. Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1ng c\u0169ng v\u1eady, nh\u01b0ng kh\u00f4ng ph\u1ea3i v\u00ec nh\u1eefng l\u00fd do t\u01b0\u01a1ng t\u1ef1.<\/p>\n<p>Do \u0111\u00f3, kh\u00eda c\u1ea1nh quan tr\u1ecdng nh\u1ea5t c\u1ee7a b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 l\u00e0 b\u1ea3o m\u1eadt t\u00e0i kho\u1ea3n v\u00e0 quy\u1ec1n c\u1ee7a h\u1ecd \u0111\u1ec3 \u0111\u0103ng nh\u1eadp v\u00e0o m\u00e1y v\u00e0 ch\u1ea1y c\u00e1c l\u1ec7nh v\u00e0 \u1ee9ng d\u1ee5ng \u0111\u1eb7c quy\u1ec1n. N\u1ebfu c\u00e1c t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n n\u00e0y r\u01a1i v\u00e0o tay k\u1ebb x\u1ea5u, h\u1ec7 th\u1ed1ng v\u00e0 d\u1eef li\u1ec7u c\u1ee7a b\u1ea1n s\u1ebd g\u1eb7p r\u1ee7i ro. Ch\u1ec9 c\u1ea7n m\u1ed9t t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n b\u1ecb x\u00e2m ph\u1ea1m \u0111\u1ec3 t\u00e1c \u0111\u1ed9ng \u0111\u1ebfn h\u00e0ng tri\u1ec7u ng\u01b0\u1eddi. \u0110\u00e2y c\u00f3 th\u1ec3 l\u00e0 h\u00e0ng tri\u1ec7u ng\u01b0\u1eddi li\u00ean quan \u0111\u1ebfn danh t\u00ednh b\u1ecb \u0111\u00e1nh c\u1eafp, t\u00e0i s\u1ea3n s\u1edf h\u1eefu tr\u00ed tu\u1ec7, gi\u00e1 tr\u1ecb c\u1ed5 \u0111\u00f4ng, chi ph\u00ed \u0111i\u1ec1u tra v\u00e0 d\u1ecdn d\u1eb9p, ti\u1ec1n ph\u1ea1t theo quy \u0111\u1ecbnh v\u00e0 ti\u1ec1n chu\u1ed9c.<\/p>\n<p>S\u1ef1 t\u1eadp trung c\u1ee7a ng\u00e0nh b\u1ea3o m\u1eadt v\u00e0o c\u00e1c t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n hi\u1ec7n \u0111ang l\u1edbn h\u01a1n bao gi\u1edd h\u1ebft, v\u00ec m\u1ed9t s\u1ed1 l\u00fd do:<\/p>\n<ul>\n<li>C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng ransomware v\u00e0 chu\u1ed7i cung \u1ee9ng (ch\u1eb3ng h\u1ea1n nh\u01b0 SolarWinds v\u00e0 Colonial Pipeline) \u0111ang ng\u00e0y c\u00e0ng nh\u1eafm m\u1ee5c ti\u00eau v\u00e0 khai th\u00e1c c\u00e1c t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n.<\/li>\n<li>C\u00e1c quy \u0111\u1ecbnh v\u00e0 h\u01b0\u1edbng d\u1eabn trong ng\u00e0nh \u0111ang t\u1ea1o ra nhi\u1ec1u \u00e1p l\u1ef1c h\u01a1n \u0111\u1ed1i v\u1edbi c\u00e1c doanh nghi\u1ec7p trong vi\u1ec7c qu\u1ea3n l\u00fd v\u00e0 ki\u1ec3m so\u00e1t t\u1ed1t h\u01a1n vi\u1ec7c truy c\u1eadp t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n v\u00e0o m\u00e1y ch\u1ee7.<\/li>\n<li>B\u1ea3o hi\u1ec3m m\u1ea1ng y\u00eau c\u1ea7u c\u00e1c c\u00f4ng ty th\u1ef1c hi\u1ec7n ki\u1ec3m so\u00e1t truy c\u1eadp, x\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 v\u00e0 c\u00e1c lo\u1ea1i b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 b\u1ed5 sung nh\u01b0 m\u1ed9t \u0111i\u1ec1u ki\u1ec7n ti\u00ean quy\u1ebft \u0111\u1ec3 c\u1ea5p ch\u00ednh s\u00e1ch.<\/li>\n<li>C\u00e1c nh\u00f3m b\u1ea3o m\u1eadt \u0111ang ng\u00e0y c\u00e0ng l\u00e0m vi\u1ec7c \u0111\u1ec3 \u0111i\u1ec1u ch\u1ec9nh b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 v\u1edbi c\u00e1c ph\u01b0\u01a1ng ph\u00e1p hay nh\u1ea5t nh\u01b0 Zero Trust v\u00e0 zero standing privileges, \u0111\u00f2i h\u1ecfi quy\u1ec1n truy c\u1eadp \u0111\u1eb7c quy\u1ec1n ph\u1ea3i \u0111\u01b0\u1ee3c gi\u1edbi h\u1ea1n v\u00e0 qu\u1ea3n l\u00fd c\u1ea9n th\u1eadn.<\/li>\n<\/ul>\n<p>\u0110i\u1ec1u g\u00ec c\u1ea3n tr\u1edf vi\u1ec7c \u0111\u1ea1t \u0111\u01b0\u1ee3c b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 hi\u1ec7u qu\u1ea3? T\u1ea1i sao c\u00e1c ph\u01b0\u01a1ng ph\u00e1p qu\u1ea3n l\u00fd \u0111\u1eb7c quy\u1ec1n m\u00e0 h\u1ea7u h\u1ebft c\u00e1c c\u00f4ng ty s\u1eed d\u1ee5ng ng\u00e0y nay kh\u00f4ng hi\u1ec7u qu\u1ea3?<\/p>\n<p>C\u00f3 hai l\u00fd do khi\u1ebfn c\u00e1c doanh nghi\u1ec7p ph\u1ea3i v\u1eadt l\u1ed9n v\u1edbi b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7: Th\u1ee9 nh\u1ea5t, b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 g\u1ed1c l\u00e0 kh\u00f4ng \u0111\u1ee7. Th\u1ee9 hai, c\u00e1c c\u00f4ng c\u1ee5 truy\u1ec1n th\u1ed1ng kh\u00f4ng th\u1ec3 th\u00edch \u1ee9ng v\u1edbi c\u00e1c y\u00eau c\u1ea7u ng\u00e0y nay v\u1ec1 b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 tr\u00ean \u0111\u00e1m m\u00e2y. Ch\u00fang ta h\u00e3y xem x\u00e9t t\u1eebng l\u00fd do trong s\u1ed1 nh\u1eefng l\u00fd do n\u00e0y m\u1ed9t c\u00e1ch s\u00e2u s\u1eafc.<\/p>\n<h4>L\u00fd do 1: B\u1ea3o m\u1eadt g\u1ed1c cho m\u00e1y ch\u1ee7 kh\u00f4ng \u0111\u1ee7<\/h4>\n<p>Windows servers<\/p>\n<p>M\u1eb7c d\u00f9 c\u00e1c m\u00e1y ch\u1ee7 Windows \u0111\u01b0\u1ee3c t\u00edch h\u1ee3p t\u00ednh n\u0103ng qu\u1ea3n l\u00fd ch\u00ednh s\u00e1ch t\u1eadp trung v\u00e0 th\u1ef1c thi c\u1ee5c b\u1ed9, ch\u00fang ch\u1ee7 y\u1ebfu d\u1ef1a v\u00e0o Active Directory (AD) \u0111\u1ec3 t\u1ea1o v\u00e0 qu\u1ea3n l\u00fd c\u00e1c ch\u00ednh s\u00e1ch ki\u1ec3m so\u00e1t truy c\u1eadp. C\u01a1 ch\u1ebf t\u1ea1o ra AD r\u1ea5t ph\u1ee9c t\u1ea1p v\u00e0 d\u1ec5 h\u01b0 h\u1ecfng. Nh\u00f3m qu\u1ea3n tr\u1ecb vi\u00ean Windows c\u00f3 c\u00e1c nhi\u1ec7m v\u1ee5 qu\u1ea3n l\u00fd quy\u1ec1n v\u00e0 vai tr\u00f2 ph\u1ee9c t\u1ea1p. H\u1ecd kh\u00f4ng mu\u1ed1n ch\u1ea1m v\u00e0o AD v\u00ec s\u1ee3 l\u00e0m h\u1ecfng n\u00f3. V\u00ec v\u1eady, c\u00e1c quy t\u1eafc v\u00e0 c\u01a1 ch\u1ebf ph\u00e1t tri\u1ec3n theo th\u1eddi gian.<\/p>\n<p>M\u1ed9t s\u1ed1 t\u1ed5 ch\u1ee9c c\u00f3 Windows\/AD s\u1eed d\u1ee5ng Kerberos \u0111\u1ec3 ki\u1ec3m so\u00e1t truy c\u1eadp v\u00e0 qu\u1ea3n l\u00fd x\u00e1c th\u1ef1c, \u0111\u0103ng nh\u1eadp m\u1ed9t l\u1ea7n v\u00e0 chia s\u1ebb t\u1ec7p. M\u1eb7c d\u00f9 \u0111i\u1ec1u \u0111\u00f3 th\u1eadt tuy\u1ec7t, nh\u01b0ng Kerberos kh\u00f4ng \u00e1p d\u1ee5ng cho Linx\/Unix. Trong m\u00f4i tr\u01b0\u1eddng m\u00e1y ch\u1ee7 h\u1ed7n h\u1ee3p v\u1edbi c\u00e1c h\u1ec7 \u0111i\u1ec1u h\u00e0nh kh\u00e1c nhau, m\u00f4 h\u00ecnh n\u00e0y s\u1ebd kh\u00f4ng m\u1edf r\u1ed9ng quy m\u00f4.<\/p>\n<p>Linux\/Unix servers<\/p>\n<p>Linux\/Unix lu\u00f4n l\u00e0 v\u1ea5n \u0111\u1ec1 l\u1edbn nh\u1ea5t \u0111\u1ed1i v\u1edbi b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7. Gi\u1edd \u0111\u00e2y, \u0111\u00e2y l\u00e0 h\u1ec7 \u0111i\u1ec1u h\u00e0nh \u01b0a th\u00edch cho c\u00e1c nh\u00f3m DevOps, nh\u1eefng ng\u01b0\u1eddi \u0111ang t\u1eadn d\u1ee5ng c\u00e1c m\u00e1y ch\u1ee7 trong \u0111\u00e1m m\u00e2y, r\u1ee7i ro c\u00f2n l\u1edbn h\u01a1n. B\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 Linux\/Unix b\u1ea3n \u0111\u1ecba r\u1ea5t h\u1ea1n ch\u1ebf v\u00e0 kh\u00f4ng c\u00f3 kh\u1ea3 n\u0103ng d\u1ef1a v\u00e0o AD cho c\u00e1c ch\u00ednh s\u00e1ch trung t\u00e2m. Theo truy\u1ec1n th\u1ed1ng, c\u00e1c m\u00e1y ch\u1ee7 Unix\/Linux \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd tr\u00ean c\u01a1 s\u1edf t\u1eebng m\u00e1y, kh\u00f4ng t\u1eadp trung.<\/p>\n<p>H\u1ec7 th\u1ed1ng t\u1ec7p\/th\u01b0 m\u1ee5c cho m\u00e1y ch\u1ee7 Linux\/Unix ch\u1ec9 cho ph\u00e9p ba c\u1ea5p \u0111\u1ed9 truy c\u1eadp ti\u00eau chu\u1ea9n (ch\u1ee7 s\u1edf h\u1eefu, nh\u00f3m v\u00e0 th\u1ebf gi\u1edbi). M\u1ed7i c\u00f3 quy\u1ec1n \u0111\u1ecdc\/ghi\/th\u1ef1c thi. \u0110\u00f3 l\u00e0 n\u00f3. Ch\u1ee7 s\u1edf h\u1eefu \u2014 ng\u01b0\u1eddi \u0111\u00e3 t\u1ea1o t\u1ec7p \u2014 c\u00f3 th\u1ec3 l\u00e0m b\u1ea5t c\u1ee9 \u0111i\u1ec1u g\u00ec h\u1ecd mu\u1ed1n. Quy\u1ec1n truy c\u1eadp kh\u00f4ng ph\u1ea3i l\u00e0 chi ti\u1ebft. N\u00f3 kh\u00f4ng gi\u1edbi h\u1ea1n th\u1eddi gian. Kh\u00f4ng c\u00f3 y\u00eau c\u1ea7u v\u00e0 quy tr\u00ecnh ph\u00ea duy\u1ec7t. K\u1ebft qu\u1ea3 l\u00e0, m\u1ecdi ng\u01b0\u1eddi \u0111\u01b0\u1ee3c \u0111\u1eb7c quy\u1ec1n qu\u00e1 m\u1ee9c v\u00e0 c\u00f3 nh\u1eefng \u0111\u1eb7c quy\u1ec1n th\u01b0\u1eddng tr\u1ef1c nguy hi\u1ec3m.<\/p>\n<p>Quay l\u1ea1i ng\u01b0\u1eddi b\u1ea1n John c\u1ee7a ch\u00fang ta tr\u01b0\u1edbc \u0111\u00f3: Gi\u1ea3 s\u1eed anh \u1ea5y c\u1ea7n quy\u1ec1n truy c\u1eadp v\u00e0o m\u00e1y ch\u1ee7 A. \u0110\u1ec3 \u0111\u0103ng nh\u1eadp v\u00e0 gi\u1ea3i quy\u1ebft m\u1ed9t helpdesk ticket, anh ta t\u1ea1o m\u1ed9t t\u00e0i kho\u1ea3n c\u1ee5c b\u1ed9 \u2014 m\u1ed9t t\u00e0i kho\u1ea3n g\u1ed1c. N\u1ebfu John c\u1ea7n quy\u1ec1n truy c\u1eadp v\u00e0o 10 m\u00e1y, anh \u1ea5y s\u1ebd t\u1ea1o 10 t\u00e0i kho\u1ea3n c\u1ee5c b\u1ed9. \u0110\u00f3 l\u00e0 r\u1ea5t nhi\u1ec1u chi ph\u00ed c\u1ea7n qu\u1ea3n l\u00fd v\u00e0 r\u1ea5t d\u1ec5 b\u1ecb m\u1ea5t d\u1ea5u. Ch\u00ednh s\u00e1ch kh\u00f4ng nh\u1ea5t qu\u00e1n v\u00e0 t\u00e0i kho\u1ea3n kh\u00f4ng \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd l\u00e0m t\u0103ng nguy c\u01a1 b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7. John c\u00f3 kh\u1ea3 n\u0103ng s\u1eed d\u1ee5ng c\u00f9ng m\u1ed9t m\u1eadt kh\u1ea9u \u0111\u1ec3 gi\u00fap cu\u1ed9c s\u1ed1ng c\u1ee7a anh \u1ea5y d\u1ec5 d\u00e0ng h\u01a1n. Anh ta c\u00f3 th\u1ec3 c\u00f3 h\u00e0ng t\u00e1 t\u00e0i kho\u1ea3n c\u00e1 nh\u00e2n ho\u1eb7c t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n d\u00f9ng chung tr\u00ean c\u00e1c h\u1ec7 th\u1ed1ng n\u00e0y. M\u1ed7i c\u00e1i \u0111\u1ea1i di\u1ec7n cho m\u1ed9t vect\u01a1 t\u1ea5n c\u00f4ng, l\u00e0m t\u0103ng b\u1ec1 m\u1eb7t m\u1ed1i \u0111e d\u1ecda.<\/p>\n<h4>L\u00fd do 2:\u00a0<a href=\"https:\/\/www.vietsunshine.com.vn\/product\/delinea\/\">Qu\u1ea3n l\u00fd quy\u1ec1n truy c\u1eadp \u0111\u1eb7c quy\u1ec1n c\u0169 (PAM)<\/a>\u00a0kh\u00f4ng th\u1ec3 th\u00edch \u1ee9ng<\/h4>\n<p>C\u00e1c t\u1ed5 ch\u1ee9c th\u01b0\u1eddng tri\u1ec3n khai gi\u1ea3i ph\u00e1p PAM \u0111\u1ec3 gi\u1ea3i quy\u1ebft v\u1ea5n \u0111\u1ec1 b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7. V\u1ea5n \u0111\u1ec1 l\u00e0, nhi\u1ec1u ng\u01b0\u1eddi v\u1eabn \u0111ang s\u1eed d\u1ee5ng c\u00e1c h\u1ec7 th\u1ed1ng \u0111\u01b0\u1ee3c x\u00e2y d\u1ef1ng c\u00e1ch \u0111\u00e2y m\u1ed9t th\u1eadp k\u1ef7 cho c\u00e1c trung t\u00e2m d\u1eef li\u1ec7u, n\u01a1i m\u1ecdi th\u1ee9 \u0111\u1ec1u n\u1eb1m tr\u00ean c\u00f9ng m\u1ed9t m\u1ea1ng. C\u00e1c s\u1ea3n ph\u1ea9m n\u00e0y kh\u00f4ng \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 x\u1eed l\u00fd m\u00f4i tr\u01b0\u1eddng m\u00e1y ch\u1ee7 ng\u00e0y nay m\u00e0 kh\u00f4ng t\u1ed1n nhi\u1ec1u c\u00f4ng s\u1ee9c v\u00e0 chi ph\u00ed, ngay c\u1ea3 khi \u0111\u01b0\u1ee3c \u201ccloudwashed\u201d \u2014ch\u1ea1y ph\u1ea7n m\u1ec1m c\u0169 trong phi\u00ean b\u1ea3n \u0111\u00e1m m\u00e2y.<\/p>\n<p>Nhi\u1ec1u d\u1ecbch v\u1ee5 PAM \u0111\u00e3 c\u0169 k\u1ef9 v\u1edbi kh\u1ea3 n\u0103ng t\u1ef1 \u0111\u1ed9ng h\u00f3a t\u1ed1i thi\u1ec3u. Vi\u1ec7c qu\u1ea3n tr\u1ecb th\u1ee7 c\u00f4ng m\u00e0 h\u1ecd y\u00eau c\u1ea7u \u0111\u1ed1i v\u1edbi b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 g\u00e2y ra s\u1ef1 c\u1ed1 c\u00f3 th\u1ec3 \u1ea3nh h\u01b0\u1edfng nghi\u00eam tr\u1ecdng \u0111\u1ebfn c\u00e1c nh\u00f3m c\u00f3 ngu\u1ed3n l\u1ef1c h\u1ea1n ch\u1ebf c\u0169ng nh\u01b0 \u00e1p l\u1ef1c v\u1ec1 th\u1eddi h\u1ea1n v\u00e0 s\u1ef1 nhanh nh\u1eb9n.<\/p>\n<p>H\u00e3y th\u1eb3ng th\u1eafn. C\u01a1 s\u1edf h\u1ea1 t\u1ea7ng PAM ph\u1ea3i x\u1eed l\u00fd nhi\u1ec1u b\u1ed9 ph\u1eadn chuy\u1ec3n \u0111\u1ed9ng, k\u1ebft h\u1ee3p c\u00e1c th\u01b0 m\u1ee5c v\u00e0 m\u00e1y v\u1edbi nhau \u0111\u01b0\u1ee3c tri\u1ec3n khai t\u1ea1i ch\u1ed7 v\u00e0 m\u00e1y ch\u1ee7 trong \u0111\u00e1m m\u00e2y, trong DMZ, nhi\u1ec1u \u0111\u00e1m m\u00e2y ri\u00eang \u1ea3o v\u00e0 tr\u00ean c\u00e1c nh\u00e0 cung c\u1ea5p \u0111\u00e1m m\u00e2y. \u0110i\u1ec1u n\u00e0y \u0111\u1eb7c bi\u1ec7t kh\u00f3 kh\u0103n n\u1ebfu \u201cgi\u1ea3i ph\u00e1p\u201d PAM c\u1ee7a b\u1ea1n bao g\u1ed3m nhi\u1ec1u c\u00f4ng c\u1ee5 v\u00e0 ph\u1ea7n m\u1ec1m k\u1ebf th\u1eeba t\u1eeb c\u00e1c nh\u00e0 cung c\u1ea5p kh\u00e1c nhau, d\u1eabn \u0111\u1ebfn vi\u1ec7c tri\u1ec3n khai d\u1ec5 d\u00e0ng \u0111\u00f2i h\u1ecfi nhi\u1ec1u ch\u0103m s\u00f3c v\u00e0 cung c\u1ea5p.<\/p>\n<h3>PAM hi\u1ec7n \u0111\u1ea1i cho ph\u00e9p m\u00e1y ch\u1ee7 c\u1ee7a b\u1ea1n t\u1ef1 b\u1ea3o v\u1ec7<\/h3>\n<p>PAM hi\u1ec7n \u0111\u1ea1i cho b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 k\u1ebft h\u1ee3p vault truy\u1ec1n th\u1ed1ng qu\u1ea3n l\u00fd ki\u1ec3m so\u00e1t truy c\u1eadp r\u1ed9ng, v\u1edbi c\u00e1c kh\u1ea3 n\u0103ng linh ho\u1ea1t, k\u1ecbp th\u1eddi \u0111\u1ec3 n\u00e2ng cao ng\u01b0\u1eddi d\u00f9ng. C\u00e1ch ti\u1ebfp c\u1eadn n\u00e0y cho ph\u00e9p c\u00e1c m\u00e1y ch\u1ee7 t\u1ef1 b\u1ea3o v\u1ec7 v\u00e0 ng\u0103n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng ti\u1ebfn tri\u1ec3n. N\u00f3i c\u00e1ch kh\u00e1c, PAM hi\u1ec7n \u0111\u1ea1i bao g\u1ed3m m\u1ed9t vault c\u1ed9ng v\u1edbi n\u00e2ng c\u1ea5p \u0111\u1eb7c quy\u1ec1n tr\u00ean m\u1ed7i \u0111i\u1ec3m cu\u1ed1i m\u00e1y ch\u1ee7, c\u1ea3 t\u1ea1i ch\u1ed7 v\u00e0 tr\u00ean \u0111\u00e1m m\u00e2y.<\/p>\n<p>C\u00e1ch \u0111\u1eb7c quy\u1ec1n gi\u00fap m\u00e1y ch\u1ee7 t\u1ef1 b\u1ea3o v\u1ec7<\/p>\n<p>Thay v\u00ec cung c\u1ea5p cho ng\u01b0\u1eddi d\u00f9ng to\u00e0n quy\u1ec1n truy c\u1eadp, nguy\u00ean t\u1eafc v\u1ec1 \u0111\u1eb7c quy\u1ec1n \u00edt nh\u1ea5t n\u00f3i r\u1eb1ng ch\u1ec9 cung c\u1ea5p m\u1ee9c \u0111\u1eb7c quy\u1ec1n th\u1ea5p nh\u1ea5t c\u00f3 th\u1ec3. B\u1eb1ng c\u00e1ch \u0111\u00f3, n\u1ebfu ng\u01b0\u1eddi d\u00f9ng b\u1ecb l\u1eeba \u0111\u1ea3o, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 l\u00e0m \u0111\u01b0\u1ee3c r\u1ea5t \u00edt \u0111i\u1ec1u v\u1edbi t\u00e0i kho\u1ea3n \u0111\u00f3.<\/p>\n<p>Trong m\u00f4 h\u00ecnh b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 n\u00e0y, b\u1ea5t c\u1ee9 khi n\u00e0o ng\u01b0\u1eddi d\u00f9ng \u2013 danh t\u00ednh con ng\u01b0\u1eddi ho\u1eb7c m\u00e1y m\u00f3c \u2013 y\u00eau c\u1ea7u c\u00e1c \u0111\u1eb7c quy\u1ec1n b\u1ed5 sung \u0111\u1ec3 ch\u1ea1y c\u00e1c \u1ee9ng d\u1ee5ng ho\u1eb7c l\u1ec7nh, c\u00e1c \u0111\u1eb7c quy\u1ec1n ng\u01b0\u1eddi d\u00f9ng c\u1ee7a h\u1ecd c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c n\u00e2ng cao v\u1edbi s\u1ef1 ki\u1ec3m so\u00e1t v\u00e0 gi\u00e1m s\u00e1t th\u00edch h\u1ee3p. H\u1ecd nh\u1eadn \u0111\u01b0\u1ee3c \u0111\u1eb7c quy\u1ec1n v\u1eeba \u0111\u1ee7 \u0111\u01b0\u1ee3c c\u1ea5p \u0111\u00fang l\u00fac, trong m\u1ed9t th\u1eddi gian gi\u1edbi h\u1ea1n.<\/p>\n<p>Ng\u01b0\u1eddi d\u00f9ng ch\u1ec9 c\u00f3 th\u1ec3 y\u00eau c\u1ea7u c\u00e1c quy\u1ec1n gia t\u0103ng m\u00e0 h\u1ecd c\u1ea7n cho nhi\u1ec7m v\u1ee5 hi\u1ec7n c\u00f3 \u2014 th\u01b0\u1eddng \u1edf m\u1eb7t sau c\u1ee7a help desk ticket. N\u1ebfu \u0111\u01b0\u1ee3c c\u1ea5p, ng\u01b0\u1eddi d\u00f9ng c\u00f3 th\u1ec3 th\u1ef1c hi\u1ec7n t\u00e1c v\u1ee5 v\u1edbi t\u00f9y ch\u1ecdn \u00e1p d\u1ee5ng MFA \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o danh t\u00ednh b\u1ed5 sung. Khi c\u00f4ng vi\u1ec7c tr\u00ean m\u00e1y ch\u1ee7 ho\u00e0n t\u1ea5t, gi\u1ea3i ph\u00e1p PAM s\u1ebd t\u1ef1 \u0111\u1ed9ng lo\u1ea1i b\u1ecf c\u00e1c quy\u1ec1n \u0111\u00f3 \u0111\u1ec3 tr\u00e1nh c\u00e1c \u0111\u1eb7c quy\u1ec1n th\u01b0\u1eddng tr\u1ef1c.<\/p>\n<p>B\u1eb1ng c\u00e1ch n\u00e0y, b\u1ea1n c\u00f3 th\u1ec3 qu\u1ea3n l\u00fd t\u1eadp trung c\u00e1c ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 cho quy\u1ec1n truy c\u1eadp, \u0111\u1eb7c quy\u1ec1n v\u00e0 MFA, v\u00ec v\u1eady ch\u00fang nh\u1ea5t qu\u00e1n tr\u00ean t\u1ea5t c\u1ea3 c\u00e1c lo\u1ea1i m\u00e1y ch\u1ee7, b\u1ea5t k\u1ec3 h\u1ec7 \u0111i\u1ec1u h\u00e0nh n\u00e0o, b\u1ea5t k\u1ec3 ch\u00fang \u1edf \u0111\u00e2u.<\/p>\n<h3>Ki\u1ebfn tr\u00fac PAM \u0111\u01b0\u1ee3c x\u00e2y d\u1ef1ng \u0111\u1ec3 t\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt, t\u00ednh linh ho\u1ea1t v\u00e0 quy m\u00f4<\/h3>\n<p>M\u00e1y ch\u1ee7 c\u1ee7a b\u1ea1n c\u00f3 th\u1ec3 n\u1eb1m trong trung t\u00e2m d\u1eef li\u1ec7u, DMZ, m\u1ed9t ho\u1eb7c h\u00e0ng ch\u1ee5c \u0111\u00e1m m\u00e2y \u1ea3o ri\u00eang t\u01b0 ho\u1eb7c tr\u1ea3i r\u1ed9ng tr\u00ean nhi\u1ec1u nh\u00e0 cung c\u1ea5p \u0111\u00e1m m\u00e2y. Ki\u1ebfn tr\u00fac c\u1ee7a b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 hi\u1ec7n \u0111\u1ea1i bao tr\u00f9m c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng CNTT ph\u00e2n t\u00e1n n\u00e0y b\u1eb1ng c\u00e1ch \u0111\u1eb7t c\u00e1c \u0111i\u1ec1u khi\u1ec3n\u00a0<a href=\"https:\/\/www.vietsunshine.com.vn\/product\/delinea\/\">qu\u1ea3n l\u00fd truy c\u1eadp \u0111\u1eb7c quy\u1ec1n (PAM)<\/a>\u00a0\u1edf trung t\u00e2m c\u0169ng nh\u01b0 \u1edf c\u1ea5p m\u00e1y ch\u1ee7.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-10536 lazyloaded\" src=\"https:\/\/www.vietsunshine.com.vn\/wp-content\/uploads\/2022\/03\/Bao-mat-may-chu-lien-mach-cho-moi-truong-hybrid-IT.jpg.webp\" sizes=\"auto, (max-width: 902px) 100vw, 902px\" srcset=\"https:\/\/www.vietsunshine.com.vn\/wp-content\/uploads\/2022\/03\/Bao-mat-may-chu-lien-mach-cho-moi-truong-hybrid-IT.jpg.webp 902w, https:\/\/www.vietsunshine.com.vn\/wp-content\/uploads\/2022\/03\/Bao-mat-may-chu-lien-mach-cho-moi-truong-hybrid-IT-300x239.jpg.webp 300w, https:\/\/www.vietsunshine.com.vn\/wp-content\/uploads\/2022\/03\/Bao-mat-may-chu-lien-mach-cho-moi-truong-hybrid-IT-768x613.jpg.webp 768w, https:\/\/www.vietsunshine.com.vn\/wp-content\/uploads\/2022\/03\/Bao-mat-may-chu-lien-mach-cho-moi-truong-hybrid-IT-50x40.jpg.webp 50w, https:\/\/www.vietsunshine.com.vn\/wp-content\/uploads\/2022\/03\/Bao-mat-may-chu-lien-mach-cho-moi-truong-hybrid-IT-150x120.jpg.webp 150w\" alt=\"B\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 li\u1ec1n m\u1ea1ch cho m\u00f4i tr\u01b0\u1eddng hybrid IT\" width=\"902\" height=\"720\" data-lazy-src-webp=\"https:\/\/www.vietsunshine.com.vn\/wp-content\/uploads\/2022\/03\/Bao-mat-may-chu-lien-mach-cho-moi-truong-hybrid-IT.jpg.webp\" data-lazy-srcset-webp=\"https:\/\/www.vietsunshine.com.vn\/wp-content\/uploads\/2022\/03\/Bao-mat-may-chu-lien-mach-cho-moi-truong-hybrid-IT.jpg.webp 902w, https:\/\/www.vietsunshine.com.vn\/wp-content\/uploads\/2022\/03\/Bao-mat-may-chu-lien-mach-cho-moi-truong-hybrid-IT-300x239.jpg.webp 300w, https:\/\/www.vietsunshine.com.vn\/wp-content\/uploads\/2022\/03\/Bao-mat-may-chu-lien-mach-cho-moi-truong-hybrid-IT-768x613.jpg.webp 768w, https:\/\/www.vietsunshine.com.vn\/wp-content\/uploads\/2022\/03\/Bao-mat-may-chu-lien-mach-cho-moi-truong-hybrid-IT-50x40.jpg.webp 50w, https:\/\/www.vietsunshine.com.vn\/wp-content\/uploads\/2022\/03\/Bao-mat-may-chu-lien-mach-cho-moi-truong-hybrid-IT-150x120.jpg.webp 150w\" data-ll-status=\"loaded\" \/><\/p>\n<p>C\u00f3 hai y\u1ebfu t\u1ed1 ch\u00ednh c\u1ee7a ki\u1ebfn tr\u00fac PAM hi\u1ec7n \u0111\u1ea1i \u0111\u1ec3 b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 \u2013 central management plane v\u00e0 control plane.<\/p>\n<ul>\n<li>Central management plane ch\u1ee9a vault an to\u00e0n v\u00e0 t\u1eadp trung c\u00e1c ch\u00ednh s\u00e1ch v\u1ec1 danh t\u00ednh v\u00e0 qu\u1ea3n l\u00fd th\u00f4ng tin x\u00e1c th\u1ef1c.<\/li>\n<li>Control plane bao g\u1ed3m t\u1ea5t c\u1ea3 c\u00e1c \u0111i\u1ec3m cu\u1ed1i, bao g\u1ed3m c\u1ea3 m\u00e1y ch\u1ee7, m\u00e1y kh\u00e1ch lightweight PAM, th\u00f4ng minh \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t tr\u00ean m\u1ed7i h\u1ec7 th\u1ed1ng c\u1ee5c b\u1ed9.<\/li>\n<\/ul>\n<p>M\u1ed7i client trong control plane enroll v\u1edbi management plane, t\u1ea1o ra m\u1ed9t m\u1ed1i quan h\u1ec7 tin c\u1eady l\u1eabn nhau. Ch\u00fang c\u00f3 \u0111\u01b0\u1ee3c m\u1ed9t nh\u1eadn d\u1ea1ng m\u00e1y duy nh\u1ea5t \u0111\u1ec3 x\u00e1c th\u1ef1c l\u1eabn nhau v\u00e0 x\u00e1c th\u1ef1c c\u00e1c ch\u00ednh s\u00e1ch.<\/p>\n<p>L\u1ee3i \u00edch c\u1ee7a vi\u1ec7c s\u1eed d\u1ee5ng m\u00e1y kh\u00e1ch PAM th\u00f4ng minh (intelligent PAM clients) tr\u00ean m\u00e1y ch\u1ee7 l\u00e0 r\u1ea5t nhi\u1ec1u:<\/p>\n<ul>\n<li>Tr\u00e1nh r\u1ee7i ro v\u1ec1 c\u00e1c t\u00e0i kho\u1ea3n qu\u1ea3n tr\u1ecb vi\u00ean backdoor, \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 cung c\u1ea5p c\u00e1c t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n c\u1ee5c b\u1ed9 m\u1edbi cho m\u1ed7i phi\u00ean \u0111\u0103ng nh\u1eadp.<\/li>\n<li>N\u00f3 th\u1ef1c thi nguy\u00ean t\u1eafc \u00edt \u0111\u1eb7c quy\u1ec1n nh\u1ea5t b\u1eb1ng c\u00e1ch ch\u1ec9 cho ph\u00e9p \u0111\u0103ng nh\u1eadp v\u00e0 n\u00e2ng c\u1ea5p cho nh\u1eefng ng\u01b0\u1eddi d\u00f9ng \u0111\u00e3 \u0111\u01b0\u1ee3c x\u00e1c minh. N\u00f3 c\u00f3 th\u1ec3 x\u00e1c th\u1ef1c c\u00e1c ch\u00ednh s\u00e1ch \u0111\u00f3 l\u00e0 t\u1eeb ngu\u1ed3n \u0111\u00e1ng tin c\u1eady th\u1ef1c thi MFA khi \u0111\u0103ng nh\u1eadp v\u00e0 n\u00e2ng cao \u0111\u1eb7c quy\u1ec1n \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o danh t\u00ednh b\u1ed5 sung.<\/li>\n<li>N\u00f3 c\u00f3 th\u1ec3 th\u1ef1c thi c\u00e1c ch\u00ednh s\u00e1ch d\u1ef1a tr\u00ean quy tr\u00ecnh l\u00e0m vi\u1ec7c \u0111\u1ec3 ki\u1ec3m so\u00e1t truy c\u1eadp JIT (Understanding just-in-time) v\u00e0 n\u00e2ng cao \u0111\u1eb7c quy\u1ec1n JIT \u1edf c\u1ea5p \u0111\u1ed9 m\u1ed7i l\u1ec7nh v\u00e0 m\u1ed7i \u1ee9ng d\u1ee5ng.<\/li>\n<li>N\u00f3 ghi l\u1ea1i t\u1ea5t c\u1ea3 ho\u1ea1t \u0111\u1ed9ng c\u1ee5c b\u1ed9 \u1edf c\u1ea5p m\u00e1y ch\u1ee7, thay v\u00ec d\u1ef1a v\u00e0o c\u00f4ng c\u1ee5 ghi phi\u00ean trung t\u00e2m.<\/li>\n<\/ul>\n<p>T\u00f9y thu\u1ed9c v\u00e0o c\u00e1c tr\u01b0\u1eddng h\u1ee3p, gi\u1ea3i ph\u00e1p PAM \u0111\u1ec3 b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 c\u1ee7a b\u1ea1n c\u00f3 th\u1ec3 t\u1eadp trung c\u00e1c ch\u1ee9c n\u0103ng n\u00e2ng cao \u0111\u1eb7c quy\u1ec1n trong Active Directory ho\u1eb7c n\u1ec1n t\u1ea3ng SaaS. V\u00ed d\u1ee5: n\u1ebfu b\u1ea1n d\u1ef1a nhi\u1ec1u v\u00e0o Active Directory \u0111\u1ec3 qu\u1ea3n l\u00fd v\u00e0 b\u1ea3o v\u1ec7 c\u00e1c m\u00e1y ch\u1ee7 Windows t\u1ea1i ch\u1ed7 v\u00e0 b\u1ea1n c\u00f3 h\u1ec7 \u0111i\u1ec1u h\u00e0nh Linux v\u00e0 UNIX (* NIX) t\u1ea1i ch\u1ed7 m\u1ea1nh m\u1ebd, v\u1edbi AD b\u1eafc c\u1ea7u gi\u1ea3i ph\u00e1p PAM c\u1ee7a b\u1ea1n c\u00f3 th\u1ec3 \u0111\u01b0a h\u1ec7 th\u1ed1ng * NIX v\u00e0o Windows fold. Sau \u0111\u00f3, b\u1ea1n c\u00f3 th\u1ec3 qu\u1ea3n l\u00fd t\u1eadp trung c\u00e1c ch\u00ednh s\u00e1ch PAM to\u00e0n c\u1ea7u cho c\u1ea3 m\u00e1y ch\u1ee7 Windows v\u00e0 * NIX, d\u01b0\u1edbi m\u1ed9t m\u00e1i nh\u00e0. B\u1ea1n c\u0169ng c\u00f3 th\u1ec3 m\u1edf r\u1ed9ng c\u00e1c d\u1ecbch v\u1ee5 Active Directory tr\u01b0\u1edbc \u0111\u00e2y ch\u1ec9 c\u00f3 s\u1eb5n cho c\u00e1c \u0111i\u1ec3m cu\u1ed1i c\u1ee7a Windows, ch\u1eb3ng h\u1ea1n nh\u01b0 \u0111\u0103ng nh\u1eadp v\u00e0o h\u1ec7 th\u1ed1ng * NIX b\u1eb1ng th\u00f4ng tin \u0111\u0103ng nh\u1eadp Active Directory, x\u00e1c th\u1ef1c Kerberos v\u00e0 \u0111\u0103ng nh\u1eadp m\u1ed9t l\u1ea7n c\u0169ng nh\u01b0 qu\u1ea3n l\u00fd v\u00e0 th\u1ef1c thi ch\u00ednh s\u00e1ch nh\u00f3m.<\/p>\n<p>Ngo\u00e0i ra, n\u1ebfu b\u1ea1n \u0111ang chuy\u1ec3n \u0111\u1ed5i c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng sang \u0111\u00e1m m\u00e2y v\u00e0 chuy\u1ec3n sang c\u00e1c th\u01b0 m\u1ee5c \u0111\u00e1m m\u00e2y nh\u01b0 Okta, Azure AD ho\u1eb7c Ping \u0111\u1ec3 x\u00e1c th\u1ef1c ng\u01b0\u1eddi d\u00f9ng, th\u00ec qu\u1ea3n l\u00fd ch\u00ednh s\u00e1ch PAM t\u1eadp trung trong n\u1ec1n t\u1ea3ng SaaS s\u1ebd th\u00edch h\u1ee3p h\u01a1n \u0111\u1ec3 gi\u1ea3i quy\u1ebft v\u1ea5n \u0111\u1ec1 b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 tr\u00ean \u0111\u00e1m m\u00e2y.<\/p>\n<h3>T\u1ef1 \u0111\u1ed9ng h\u00f3a \u0111\u1ec3 t\u0103ng n\u0103ng su\u1ea5t CNTT<\/h3>\n<p>H\u00e3y nh\u1edb ng\u01b0\u1eddi b\u1ea1n c\u1ee7a ch\u00fang ta John, qu\u1ea3n tr\u1ecb vi\u00ean m\u00e1y ch\u1ee7? Ng\u01b0\u1eddi b\u1ecb c\u0103ng th\u1eb3ng v\u00e0 l\u00e0m vi\u1ec7c qu\u00e1 s\u1ee9c?<\/p>\n<p>\u0110\u1ec3 gi\u00fap anh \u1ea5y tham gia v\u00e0o vi\u1ec7c s\u1eed d\u1ee5ng PAM hi\u1ec7n \u0111\u1ea1i c\u00f3 ngh\u0129a l\u00e0 b\u1ea1n ph\u1ea3i \u0111\u1ea3m b\u1ea3o an ninh m\u00e1y ch\u1ee7 li\u1ec1n m\u1ea1ch, v\u1edbi nh\u1eefng va ch\u1ea1m ho\u1ea1t \u0111\u1ed9ng t\u1ed1i thi\u1ec3u. T\u1ef1 \u0111\u1ed9ng h\u00f3a \u0111\u01b0\u1ee3c t\u00edch h\u1ee3p trong c\u00e1c gi\u1ea3i ph\u00e1p PAM hi\u1ec7n \u0111\u1ea1i gi\u00fap gi\u1ea3m \u0111\u1ed9 ph\u1ee9c t\u1ea1p v\u00e0 t\u0103ng hi\u1ec7u qu\u1ea3.<\/p>\n<p>V\u00ed d\u1ee5: PAM hi\u1ec7n \u0111\u1ea1i c\u00f3 th\u1ec3 t\u1ef1 \u0111\u1ed9ng kh\u00e1m ph\u00e1 c\u00e1c phi\u00ean b\u1ea3n m\u00e1y ch\u1ee7 m\u1edbi, kh\u1ed1i l\u01b0\u1ee3ng c\u00f4ng vi\u1ec7c \u0111\u00e1m m\u00e2y, t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n v\u00e0 kh\u00f3a SSH v\u00e0 \u0111\u01b0a ch\u00fang v\u00e0o qu\u1ea3n l\u00fd t\u1eadp trung. \u0110i\u1ec1u n\u00e0y \u0111\u1eb7t ra m\u1ed9t kho\u1ea3ng tr\u1ed1ng l\u1edbn trong chi ph\u00ed ho\u1ea1t \u0111\u1ed9ng v\u00e0 gi\u00fap b\u1ea1n tr\u00e1nh \u0111\u01b0\u1ee3c c\u00e1c l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt do shadow IT.<\/p>\n<p>\u0110\u01b0a c\u00e1c phi\u00ean b\u1ea3n m\u1edbi \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n v\u00e0o qu\u1ea3n l\u00fd PAM bao g\u1ed3m t\u1ef1 \u0111\u1ed9ng cung c\u1ea5p c\u00e1c \u1ee9ng d\u1ee5ng kh\u00e1ch PAM \u0111\u0103ng k\u00fd m\u00e1y ch\u1ee7 v\u00e0o n\u1ec1n t\u1ea3ng PAM, g\u00e1n danh t\u00ednh m\u00e1y duy nh\u1ea5t \u0111\u1ec3 x\u00e1c th\u1ef1c l\u1eabn nhau, thi\u1ebft l\u1eadp ngu\u1ed3n g\u1ed1c tin c\u1eady v\u1edbi n\u1ec1n t\u1ea3ng v\u00e0 t\u00edch tr\u1eef c\u00e1c t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n \u0111\u01b0\u1ee3c chia s\u1ebb c\u1ee5c b\u1ed9.<\/p>\n<h3>L\u1ef1a ch\u1ecdn m\u1ed9t gi\u1ea3i ph\u00e1p PAM ph\u00f9 h\u1ee3p cho t\u01b0\u01a1ng lai<\/h3>\n<p>M\u1ed9t gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 t\u1eeb m\u1ed9t nh\u00e0 cung c\u1ea5p duy nh\u1ea5t, v\u1edbi n\u1ec1n t\u1ea3ng PAM-as-a-Service hi\u1ec7n \u0111\u1ea1i, gi\u00fap gi\u1ea3m thi\u1ec3u c\u00e1c n\u1ed7 l\u1ef1c th\u1ee7 c\u00f4ng v\u00e0 s\u1ef1 ph\u1ee9c t\u1ea1p, cu\u1ed1i c\u00f9ng l\u00e0 gi\u1ea3m chi ph\u00ed. Gi\u1ea3i ph\u00e1p PAM l\u00e0 m\u1ed9t y\u1ebfu t\u1ed1 th\u00fac \u0111\u1ea9y kinh doanh khi n\u00f3 \u0111\u1ea3m b\u1ea3o c\u00e1c d\u1ef1 \u00e1n chuy\u1ec3n \u0111\u1ed5i \u0111\u00e1m m\u00e2y v\u00e0 c\u00e1c m\u00f4 h\u00ecnh m\u1edbi cho c\u00f4ng vi\u1ec7c t\u1eeb xa.<\/p>\n<p>\u0110\u1ec3 li\u00ean t\u1ee5c gi\u1ea3m thi\u1ec3u r\u1ee7i ro, PAM ph\u1ea3i ph\u00e1t tri\u1ec3n v\u00e0 tr\u01b0\u1edfng th\u00e0nh theo t\u1eebng b\u01b0\u1edbc v\u1edbi doanh nghi\u1ec7p c\u1ee7a b\u1ea1n. H\u00e3y c\u1ea9n th\u1eadn v\u1edbi c\u00e1c gi\u1ea3i ph\u00e1p PAM kh\u00f4ng c\u00f3 kh\u1ea3 n\u0103ng \u0111\u1ec3 h\u1ed7 tr\u1ee3 s\u1ef1 ph\u00e1t tri\u1ec3n \u0111\u00f3. Ch\u00fa \u00fd \u0111\u1ebfn vi\u1ec7c bao g\u1ed3m t\u1ea5t c\u1ea3 c\u00e1c c\u01a1 s\u1edf PAM (th\u00f4ng tin x\u00e1c th\u1ef1c v\u00e0 secret vault, qu\u1ea3n l\u00fd phi\u00ean, n\u00e2ng cao \u0111\u1eb7c quy\u1ec1n, MFA v\u00e0 ph\u00e2n t\u00edch v\u00e0 ghi phi\u00ean), v\u1edbi m\u1ed9t ki\u1ebfn tr\u00fac h\u1ed7 tr\u1ee3 c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng ph\u00e2n t\u00e1n v\u00e0 \u0111\u01b0\u1ee3c x\u00e2y d\u1ef1ng tr\u00ean n\u1ec1n t\u1ea3ng SaaS hi\u1ec7n \u0111\u1ea1i.<\/p>\n<p>B\u1ea3o m\u1eadt m\u00e1y ch\u1ee7 y\u00eau c\u1ea7u m\u1ed9t ph\u01b0\u01a1ng ph\u00e1p PAM hi\u1ec7n \u0111\u1ea1i \u0111\u01b0\u1ee3c x\u00e2y d\u1ef1ng cho t\u01b0\u01a1ng lai.<\/p>\n<p>Ngu\u1ed3n:\u00a0<a href=\"https:\/\/delinea.com\/blog\/server-security\">Seamless server security for a hybrid IT environment, VSS<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p class=\"tx-excerpt\">M\u00e1y ch\u1ee7 l\u00e0 khu v\u1ef1c ch\u00ednh c\u1ee7a b\u1ec1 m\u1eb7t t\u1ea5n c\u00f4ng doanh nghi\u1ec7p v\u1edbi c\u00e1c r\u1ee7i ro l\u1edbn nh\u1ea5t. N\u00f3 l\u01b0u tr\u1eef c\u00e1c th\u00f4ng tin v\u1ec1 s\u1ee9c kh\u1ecfe, th\u1ebb t\u00edn d\u1ee5ng v\u00e0 s\u1edf","protected":false},"author":1,"featured_media":796,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[13],"tags":[],"class_list":["post-210","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/dt-corp.com.vn\/wp-content\/uploads\/2019\/10\/Bao-mat-may-chu-lien-mach-cho-moi-truong-hybrid-IT_banner.jpg.webp","_links":{"self":[{"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=\/wp\/v2\/posts\/210","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=210"}],"version-history":[{"count":2,"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=\/wp\/v2\/posts\/210\/revisions"}],"predecessor-version":[{"id":797,"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=\/wp\/v2\/posts\/210\/revisions\/797"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=\/wp\/v2\/media\/796"}],"wp:attachment":[{"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=210"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=210"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dt-corp.com.vn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=210"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}