- Chic kfi so (Digital signature)
4.3.2. Cdc bin phelp ca ban nhibn ant bdo an toan cho he thong TMDT
TMDT
Met se ding nghe ducic phat trien nham dam bao rang trong nei be mpg cila met doanh nghiep, cac hoat deng se duqc dam bao an toan khoi cac vu tan cong hoc xam pham tir ben ngoai, deng thori c6 chirc nang canh bao cac hoat Ong tan cong tir ben ngoai vao he thong mang.
- Thong hia:
TuOng lira la met thanh phan cua mang, gem phan mem hoc phan cong hoc ket hop ca phan mem va phan cimg, cho phdp nhttng nguoi sir dung mang may tinh cua met t6 chirc c6 the truy cap tai nguyen cua cac mang khac (vi du: mang Internet), nhung deng thoi ngan cam nhung nguoi sir dung khac, khong duoc phdp tir ben ngoai truy cap vao mpg may tinh ci'a to chirc. Met birc twang lira co nhttng d4c diem sau:
- Tat ca cac lueng thong tin tir ben trong man may tinh cua t6 chirc di ra ngoai va nguoc lai ceu phai di qua thiet bi hay phan mem nay;
- Chi cac lueng thong tin duorc phep va tub' thil dung quy dinh ye an toan mang may tinh cua to chirc, mai duqc pile') di qua;
Ve ca ban, Wong lira cho phep nhttng nguoi sir dung mang may tinh ben trong tuOng lira duoc bao ve nhung van co kha narig truy cap toan be cac dich vu ben ngoai mang; deng thoi ngari chin va chi cho phep met se cac truy cap tir ben ngoai vao mang tren ca so da kiem tra ten va mat khau
cua ngtrOi sir dung, dia chi IP hoac ten mien (domain name) ... Vi du, met nha san xuat chi cho phep nhang nguOi sir dung c6 ten mien thuec cac ding ty dei tac la khach hang lau nam, truy cap vao website cita he a mua hang. Nhu vay, cong viec cua birc tutmg lira la thiet lap met rao chan gicra trong va ngoai mang may tinh cita to chirc. TuOng lira bao va mang may tinh cua
to chirc tranh khoi nhang ten thucmg do nhcmg tin tac, nhang ngu6i to me tir ben ngoai tan ding. Tat ca mei thong dip dugc giri den va giri di deu dugc ttrimg lira kiem tra doi chieu von nhang quy dinh ve an toan do to chirc xac lap. Cac tuong lira phi') bien hien nay gem: Windows XP Personal firewall, Microsoft ISA server (da chirc nang), Checkpoint.
- Mang rieng do (VPN)
Khi ding ty muen tao ra met *rig dung B2B, cung cap cho cac nha cung cap, doi tac va nhang dei tueng khac guy& truy cap khong chi voi da
lieu d4t tren tang web ctia he, ma con ca quy'en truy cap dei van dir lieu
china trong cac tep khac (nhu tap Word, Excel, file di h9a, file am thanh, hinh anh...). Theo cach truyen thong, lien lac voi ding ty c6 the thuc hien thong qua met duemg truyen rieng hoac thong qua met d&mg quay se tai modem hoac ten met may chit truy cap tit xa (RAS — Remote Access Server) ma may chit nay cho phep ket not truc tier) tai mang LAN dm cong ty. IJu diem dm viec thue dung truyen rieng la giam thieu kha nang bi hacker nghe tem cac lien lac, tuy nhien chi phi tai cao. Do do, doanh nghiep co the tham khao met giai phap kirth to hcm do la sir dung mang rieng do. Mang rieng ao sir dung mang internet de truyen tai thong tin nhtmg van duy tri su bi mat bang cach sir dung thuat ma khoa (de ma giao dich, xac mink tinh chan thuc de dam bao rang thong tin khong bi truy xuat trai phep va thong tin den tir nhang nguen tin cay) va quan ly guy& truy cap a xac dinh danh tinh cita bat kY ai sir dung mang nay. Han nfra, met mang rieng ao ding co the dugc sir dung de ho trg nhang lien lac gicra cac chi nhanh va tru so cong ty va nhang lien lac gifra cac cong nhan ltm deng von trp so lam viec dm he. Se lugng cac doanh nghiep sir dung hinh thuc nay ngay cang tang, lieu nay the hien o doanh se cua thi tnrOng dich vu mang rieng ao toan the gioi, nam 2005 da dat mirc 23 ty USD vao nam 2005 va hira hen se tang them 22% trong vong 3 nam toi.