{"id":2584,"date":"2022-08-14T18:29:52","date_gmt":"2022-08-14T16:29:52","guid":{"rendered":"https:\/\/stalo-se.cz\/?p=2584"},"modified":"2022-08-14T18:29:53","modified_gmt":"2022-08-14T16:29:53","slug":"penetracni-testy-aneb-hackeri-na-vasi-strane","status":"publish","type":"post","link":"https:\/\/stalo-se.cz\/?p=2584","title":{"rendered":"Penetra\u010dn\u00ed testy aneb hacke\u0159i na va\u0161\u00ed stran\u011b"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>K hackersk\u00fdm \u00fatok\u016fm doch\u00e1z\u00ed pr\u016fm\u011brn\u011b t\u00e9m\u011b\u0159 dvakr\u00e1t za minutu. Frekvence a promy\u0161lenost \u00fatok\u016f nav\u00edc ka\u017ed\u00fdm rokem strm\u011b vzr\u016fst\u00e1. Kybernetick\u00e1 bezpe\u010dnost po\u010d\u00edta\u010de a obecn\u011b bezpe\u010dnost IT syst\u00e9m\u016f tak hraj\u00ed st\u00e1le z\u00e1sadn\u011bj\u0161\u00ed roli. Jedn\u00edm ze zp\u016fsob\u016f, jak odhalit zranitelnosti v zabezpe\u010den\u00ed po\u010d\u00edta\u010d\u016f, p\u0159edstavuj\u00ed penetra\u010dn\u00ed testy nebo zkr\u00e1cen\u011b pentesty. P\u0159e\u010dt\u011bte si, jak v\u00e1m mohou pomoci.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Penetra\u010dn\u00ed testy p\u0159edstavuj\u00ed jakousi <strong>analogii hackersk\u00e9ho \u00fatoku<\/strong>. Jejich c\u00edlem v\u0161ak nen\u00ed z\u00edskat nebo ohrozit va\u0161e data. V\u00fdsledkem penetra\u010dn\u00edch test\u016f je podrobn\u00e1 <strong>anal\u00fdza bezpe\u010dnosti<\/strong> IT syst\u00e9m\u016f, resp. <strong>odhalen\u00ed jejich zranitelnost\u00ed<\/strong> a slab\u00fdch m\u00edst. Pentesty se v\u0161ak mohou t\u00fdkat i zabezpe\u010den\u00ed mobiln\u00edch syst\u00e9m\u016f, budov a dokonce va\u0161ich zam\u011bstnanc\u016f.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"typy-penetracnich-testu\">Typy penetra\u010dn\u00edch test\u016f<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Specializovan\u00e9 spole\u010dnosti obvykle nab\u00edzej\u00ed n\u011bkolik typ\u016f pentest\u016f. M\u016f\u017eeme je rozd\u011blit do t\u0159\u00ed z\u00e1kladn\u00edch kategori\u00ed:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>black-box pentest<\/strong> \u2013 tester simuluje hackersk\u00fd \u00fatok z&nbsp;pozice \u00fato\u010dn\u00edka, kter\u00fd nezn\u00e1 va\u0161e IT zabezpe\u010den\u00ed a nem\u00e1 \u017e\u00e1dn\u00e9 podrobn\u00e9 informace o va\u0161ich syst\u00e9mech. Tento typ penetra\u010dn\u00edho testu <strong>nejl\u00e9pe odpov\u00edd\u00e1 realit\u011b<\/strong> (skute\u010dn\u00e9mu hackersk\u00e9mu \u00fatoku). Mezi jeho slab\u0161\u00ed str\u00e1nky v\u0161ak pat\u0159\u00ed mo\u017en\u00e9 vynech\u00e1n\u00ed n\u011bkter\u00e9ho testovac\u00edho c\u00edle.<\/li><li><strong>white-box pentest<\/strong> \u2013 testerovi poskytnete v\u0161echny pot\u0159ebn\u00e9 informace o va\u0161em IT zabezpe\u010den\u00ed, infrastruktu\u0159e a architektu\u0159e va\u0161ich IT syst\u00e9m\u016f. Test sice p\u0159\u00edmo neodpov\u00edd\u00e1 re\u00e1ln\u00e9mu hackersk\u00e9mu \u00fatoku, ale obvykle <strong>je efektivn\u011bj\u0161\u00ed a jde v\u00edce do hloubky<\/strong>.<\/li><li><strong>grey<\/strong>&#8211;<strong>box pentest<\/strong> \u2013 jedn\u00e1 se o <strong>kombinaci v\u00fd\u0161e uveden\u00fdch p\u0159\u00edstup\u016f<\/strong>, kdy testerovi poskytnete pouze \u010d\u00e1ste\u010dn\u00e9 informace a o dal\u0161\u00ed v\u00e1s po\u017e\u00e1d\u00e1, pokud b\u011bhem testov\u00e1n\u00ed najde podez\u0159en\u00ed na zranitelnost bezpe\u010dnosti syst\u00e9mu.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"prubeh-penetracnich-testu\">Pr\u016fb\u011bh penetra\u010dn\u00edch test\u016f<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A\u0165 u\u017e se rozhodnete pro jakoukoliv z&nbsp;v\u00fd\u0161e uveden\u00fdch variant, pr\u016fb\u011bh pentest\u016f je obvykle stejn\u00fd:<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li><strong>Sestaven\u00ed pentestu<\/strong> \u2013 jde o p\u0159\u00edpravnou f\u00e1zi, ve kter\u00e9 se s&nbsp;testerem dohodnete na rozsahu a c\u00edli testov\u00e1n\u00ed, pl\u00e1nu pr\u016fb\u011bhu a dal\u0161\u00edch parametrech.<\/li><li><strong>Testov\u00e1n\u00ed <\/strong>\u2013 tester zkoum\u00e1 ve vz\u00e1jemn\u011b dohodnut\u00fdch mantinelech bezpe\u010dnost syst\u00e9mu, aplikac\u00ed a za\u0159\u00edzen\u00ed. Obvykle se m\u016f\u017eete dohodnout na <strong>testov\u00e1n\u00ed za pln\u00e9ho provozu<\/strong> va\u0161\u00ed firmy.<\/li><li><strong>Report testov\u00e1n\u00ed<\/strong> \u2013 tester v\u00e1m p\u0159ed\u00e1 <strong>vyhodnocen\u00ed<\/strong> cel\u00e9ho penetra\u010dn\u00edho testu. To m\u00e1 obvykle podobu p\u00edsemn\u00e9 zpr\u00e1vy pro v\u00e1\u0161 management i IT odborn\u00edky. Ve zpr\u00e1v\u011b najdete konkr\u00e9tn\u00ed kroky pro <strong>odstran\u011bn\u00ed nebo zm\u00edrn\u011bn\u00ed<\/strong> pravd\u011bpodobnosti zneu\u017eit\u00ed nalezen\u00fdch zranitelnost\u00ed.<\/li><\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">\uf0ae <strong>Tip<\/strong>: P\u0159e\u010dt\u011bte si o tom, jak <a href=\"https:\/\/www.totalservice.cz\/novinky\/penetracni-testy-pomahaji-chranit-vase-podnikani-2021-12-10\">penetra\u010dn\u00ed testy chr\u00e1n\u00ed va\u0161e podnik\u00e1n\u00ed<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"efektivita-penetracnich-testu\">Efektivita penetra\u010dn\u00edch test\u016f<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">P\u0159edpokl\u00e1dejme, \u017ee jste si nechali pentest prov\u00e9st a dr\u017e\u00edte v&nbsp;rukou z\u00e1v\u011bre\u010dnou zpr\u00e1vu. Pokud se to v&nbsp;n\u00ed jenom hem\u017e\u00ed nejr\u016fzn\u011bj\u0161\u00edmi zranitelnostmi, set\u0159ete si nejsp\u00ed\u0161e studen\u00fd pot z&nbsp;\u010dela a urychlen\u011b se pust\u00edte do <strong>realizace doporu\u010den\u00fdch krok\u016f k&nbsp;n\u00e1prav\u011b<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Je ale d\u016fvodem k&nbsp;radosti <strong>zpr\u00e1va, kter\u00e1 nic neodhal\u00ed<\/strong>? Jak si ale m\u016f\u017eete b\u00fdt jist\u00ed, \u017ee tester\u016fm nic d\u016fle\u017eit\u00e9ho neuniklo? Byl test skute\u010dn\u011b <strong>d\u016fkladn\u00fd a efektivn\u00ed<\/strong>? V&nbsp;ka\u017ed\u00e9m p\u0159\u00edpad\u011b se \u0159i\u010fte t\u011bmito kroky:<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li><strong>Srovn\u00e1vac\u00ed anal\u00fdza<\/strong> \u2013 pokud jste u\u017e pentest v&nbsp;minulosti absolvovali, <strong>porovnejte ob\u011b z\u00e1v\u011bre\u010dn\u00e9 zpr\u00e1vy<\/strong>. Ov\u011b\u0159te, jestli jste napravili v\u0161echny n\u00e1lezy z&nbsp;p\u0159edchoz\u00ed zpr\u00e1vy a jestli n\u011bco nechyb\u00ed v&nbsp;rozsahu testu.<\/li><li><strong>Bu\u010fte aktivn\u00ed <\/strong>\u2013 pokud si nebudete jist\u00ed, <strong>ptejte se<\/strong>. V\u0161em nalezen\u00fdm rizik\u016fm byste m\u011bli rozum\u011bt, v\u010detn\u011b pravd\u011bpodobnost\u00ed zneu\u017eit\u00ed zranitelnost\u00ed. Prodiskutujte s&nbsp;testery ka\u017ed\u00e9 zji\u0161t\u011bn\u00ed a ujist\u011bte se, zda nen\u00ed fale\u0161n\u011b pozitivn\u00ed.<\/li><li><strong>Bu\u010fte flexibiln\u00ed <\/strong>\u2013 u\u010dte se a spolupracujte s&nbsp;va\u0161\u00edm IT bezpe\u010dnostn\u00edm t\u00fdmem. Sna\u017ete se porozum\u011bt v\u00fdsledk\u016fm i zaveden\u00ed n\u00e1pravn\u00fdch opat\u0159en\u00ed.<\/li><\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Pokud to s&nbsp;kybernetickou bezpe\u010dnost\u00ed mysl\u00edte v\u00e1\u017en\u011b, m\u011bli byste proveden\u00ed penetra\u010dn\u00edch test\u016f p\u0159inejmen\u0161\u00edm zv\u00e1\u017eit. Stejn\u011b jako by v\u00e1s nejsp\u00ed\u0161 ani nenapadlo u\u0161et\u0159it firemn\u00ed prost\u0159edky vynech\u00e1n\u00edm povinn\u00fdch reviz\u00ed elektrick\u00fdch spot\u0159ebi\u010d\u016f nebo hasic\u00edch p\u0159\u00edstroj\u016f, <strong>na firemn\u00ed data pohl\u00ed\u017eejte podobn\u011b<\/strong>. Nen\u00ed n\u00e1hodou, \u017ee data hacke\u0159i naz\u00fdvaj\u00ed \u201eropa 22. stolet\u00ed\u201c. Odhalte, kde v\u00e1\u0161 \u201eropn\u00fd vrt\u201c snadno nap\u00edchnou \u00fato\u010dn\u00edci, ne\u017e to d\u0159\u00edve \u010di pozd\u011bji ud\u011blaj\u00ed.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>K hackersk\u00fdm \u00fatok\u016fm doch\u00e1z\u00ed pr\u016fm\u011brn\u011b t\u00e9m\u011b\u0159 dvakr\u00e1t za minutu. Frekvence a promy\u0161lenost \u00fatok\u016f nav\u00edc ka\u017ed\u00fdm&hellip;<\/p>\n","protected":false},"author":1,"featured_media":2585,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sitemap_exclude":false,"_sitemap_priority":"","_sitemap_frequency":"","footnotes":""},"categories":[4],"tags":[],"class_list":["post-2584","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zpravy"],"amp_enabled":false,"_links":{"self":[{"href":"https:\/\/stalo-se.cz\/index.php?rest_route=\/wp\/v2\/posts\/2584","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/stalo-se.cz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/stalo-se.cz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/stalo-se.cz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/stalo-se.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2584"}],"version-history":[{"count":0,"href":"https:\/\/stalo-se.cz\/index.php?rest_route=\/wp\/v2\/posts\/2584\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/stalo-se.cz\/index.php?rest_route=\/wp\/v2\/media\/2585"}],"wp:attachment":[{"href":"https:\/\/stalo-se.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2584"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/stalo-se.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2584"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/stalo-se.cz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2584"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}