{"id":34938,"date":"2024-07-05T09:43:07","date_gmt":"2024-07-05T02:43:07","guid":{"rendered":"https:\/\/ttud.com.vn\/?p=34938"},"modified":"2024-07-05T09:43:19","modified_gmt":"2024-07-05T02:43:19","slug":"kiem-dinh-an-toan-san-pham-cong-nghe-thong-tin-voi-phuong-phap-cspn","status":"publish","type":"post","link":"https:\/\/casta.ttud.com.vn\/index.php\/kiem-dinh-an-toan-san-pham-cong-nghe-thong-tin-voi-phuong-phap-cspn\/","title":{"rendered":"Ki\u1ec3m \u0111\u1ecbnh an to\u00e0n s\u1ea3n ph\u1ea9m c\u00f4ng ngh\u1ec7 th\u00f4ng tin v\u1edbi ph\u01b0\u01a1ng ph\u00e1p CSPN"},"content":{"rendered":"\n

CSPN l\u00e0 \u0111i\u1ec3n h\u00ecnh v\u1ec1 m\u1ed9t ph\u01b0\u01a1ng ph\u00e1p ki\u1ec3m \u0111\u1ecbnh an to\u00e0n th\u00f4ng tin (ATTT) linh ho\u1ea1t, hi\u1ec7u qu\u1ea3 v\u1edbi chi ph\u00ed th\u1ea5p cho c\u00e1c s\u1ea3n ph\u1ea9m c\u00f3 v\u00f2ng \u0111\u1eddi ng\u1eafn.<\/p>\n\n\n\n

Theo B\u1ed9 TT&TT, s\u1ef1 ph\u00e1t tri\u1ec3n m\u1ea1nh m\u1ebd c\u1ee7a c\u00e1c c\u00f4ng ngh\u1ec7 m\u1edbi nh\u01b0 Internet v\u1ea1n v\u1eadt (IoT), \u0111i\u1ec7n to\u00e1n \u0111\u00e1m m\u00e2y (cloud computing), blockchain, d\u1eef li\u1ec7u l\u1edbn (big data) \u0111ang \u0111em \u0111\u1ebfn nh\u1eefng \u0111\u1ed5i thay l\u1edbn cho doanh nghi\u1ec7p v\u00e0 ng\u01b0\u1eddi ti\u00eau d\u00f9ng (consumer). Nh\u1eefng \u1ee9ng d\u1ee5ng ph\u00e1t tri\u1ec3n t\u1eeb c\u00e1c c\u00f4ng ngh\u1ec7 n\u00e0y c\u0169ng ch\u1ee9a \u0111\u1ef1ng nhi\u1ec1u m\u1ed1i \u0111e d\u1ecda m\u1edbi v\u1ec1 an to\u00e0n th\u00f4ng tin (ATTT).<\/p>\n\n\n\n

Ti\u00eau chu\u1ea9n Common Criteria (ISO 15408) th\u01b0\u1eddng \u0111\u01b0\u1ee3c nh\u1eafc \u0111\u1ebfn nh\u01b0 m\u1ed9t ph\u01b0\u01a1ng ph\u00e1p ki\u1ec3m \u0111\u1ecbnh ATTT uy t\u00edn nh\u1ea5t. Tuy nhi\u00ean, ti\u00eau chu\u1ea9n n\u00e0y c\u00f3 nh\u01b0\u1ee3c \u0111i\u1ec3m l\u00e0 chi ph\u00ed cao v\u00e0 thi\u1ebfu \u0111\u1ed9 m\u1ec1m d\u1ebbo c\u1ea7n thi\u1ebft \u0111\u1ec3 tri\u1ec3n khai trong nh\u1eefng s\u1ea3n ph\u1ea9m c\u00f4ng ngh\u1ec7 m\u1edbi.<\/p>\n\n\n\n

M\u1ed9t d\u1ef1 \u00e1n tri\u1ec3n khai theo Common Criteria th\u01b0\u1eddng k\u00e9o d\u00e0i \u00edt nh\u1ea5t 6 th\u00e1ng, k\u1ebft h\u1ee3p c\u1ea3 ph\u01b0\u01a1ng ph\u00e1p ki\u1ec3m th\u1eed x\u00e2m nh\u1eadp (pentest) tr\u00ean s\u1ea3n ph\u1ea9m m\u1eabu v\u00e0 ph\u00e2n t\u00edch m\u1ed9t l\u01b0\u1ee3ng t\u00e0i li\u1ec7u l\u1edbn (conformity). \u0110\u1ed1i v\u1edbi c\u00e1c s\u1ea3n ph\u1ea9m c\u00f3 v\u00f2ng \u0111\u1eddi ng\u1eafn nh\u01b0 IoT, \u0111\u00e2y l\u00e0 th\u00e1ch th\u1ee9c r\u1ea5t \u0111\u00e1ng k\u1ec3 v\u00ec phi\u00ean b\u1ea3n s\u1ea3n ph\u1ea9m ki\u1ec3m \u0111\u1ecbnh xong r\u1ea5t c\u00f3 th\u1ec3 kh\u00f4ng c\u00f2n \u0111\u01b0\u1ee3c \u1ee9ng d\u1ee5ng. Ngo\u00e0i ra, Common Criteria c\u00f2n c\u00f3 \u0111i\u1ec3m y\u1ebfu v\u1ec1 qu\u1ea3n l\u00fd s\u1ef1 thay \u0111\u1ed5i (change management). M\u1ed9t thay \u0111\u1ed5i nh\u1ecf tr\u00ean s\u1ea3n ph\u1ea9m th\u01b0\u1eddng \u0111\u00f2i h\u1ecfi l\u01b0\u1ee3ng c\u00f4ng vi\u1ec7c \u0111\u00e1ng k\u1ec3 \u0111\u1ec3 gi\u1eef \u0111\u01b0\u1ee3c gi\u00e1 tr\u1ecb c\u1ee7a ch\u1ee9ng ch\u1ec9.<\/p>\n\n\n\n

\u0110\u00e1p \u1ee9ng v\u1edbi s\u1ef1 b\u00f9ng n\u1ed5 c\u1ee7a c\u00e1c \u1ee9ng d\u1ee5ng IoT v\u00e0 \u0111i\u1ec7n to\u00e1n \u0111\u00e1m m\u00e2y, c\u00e1c n\u01b0\u1edbc ch\u00e2u \u00c2u \u0111ang x\u00e2y d\u1ef1ng nhi\u1ec1u ph\u01b0\u01a1ng ph\u00e1p ki\u1ec3m \u0111\u1ecbnh ATTT linh ho\u1ea1t v\u1edbi chi ph\u00ed th\u1ea5p h\u01a1n. M\u1ed9t trong c\u00e1c ph\u01b0\u01a1ng ph\u00e1p th\u00e0nh c\u00f4ng nh\u1ea5t l\u00e0 Certification de S\u00e9curit\u00e9 de Premier Niveau (CSPN). Ph\u01b0\u01a1ng ph\u00e1p n\u00e0y \u0111\u01b0\u1ee3c tri\u1ec3n khai t\u1ea1i Ph\u00e1p t\u1eeb n\u0103m 2008 v\u00e0 \u0111ang \u0111\u01b0\u1ee3c c\u00e1c n\u01b0\u1edbc l\u00e2n c\u1eadn nh\u01b0 \u0110\u1ee9c, H\u00e0 Lan v\u00e0 T\u00e2y Ban Nha \u00e1p d\u1ee5ng.<\/p>\n\n\n\n

\"\"<\/p>\n\n\n\n

 \u1ea2nh minh ho\u1ea1.<\/em><\/h2>\n\n\n\n

M\u1ed9t d\u1ef1 \u00e1n CSPN th\u01b0\u1eddng kh\u00f4ng k\u00e9o d\u00e0i qu\u00e1 8 tu\u1ea7n, t\u1eadp trung v\u00e0o qu\u00e1 tr\u00ecnh pentest v\u00e0 gi\u1ea3m t\u1ed1i thi\u1ec3u c\u00f4ng \u0111o\u1ea1n ph\u00e2n t\u00edch t\u00e0i li\u1ec7u. V\u1ec1 chi ph\u00ed, kh\u1ed1i l\u01b0\u1ee3ng c\u00f4ng vi\u1ec7c chu\u1ea9n c\u1ee7a m\u1ed9t d\u1ef1 \u00e1n CSPN l\u00e0 25 ng\u00e0y (man-day), tr\u00ean th\u1ef1c t\u1ebf kh\u1ed1i l\u01b0\u1ee3ng n\u00e0y dao \u0111\u1ed9ng gi\u1eefa 15 v\u00e0 50 ng\u00e0y t\u00f9y theo \u0111\u1ed9 ph\u1ee9c t\u1ea1p c\u1ee7a s\u1ea3n ph\u1ea9m. Qu\u00e1 tr\u00ecnh qu\u1ea3n l\u00fd c\u00e1c phi\u00ean b\u1ea3n m\u1edbi c\u1ee7a s\u1ea3n ph\u1ea9m c\u0169ng linh ho\u1ea1t h\u01a1n, ph\u01b0\u01a1ng ph\u00e1p n\u00e0y s\u1ebd t\u1eadp trung v\u00e0o b\u01b0\u1edbc pentest thay \u0111\u1ed5i \u0111\u1ed1i v\u1edbi c\u00e1c ch\u1ee9c n\u0103ng an to\u00e0n c\u1ee7a s\u1ea3n ph\u1ea9m.<\/p>\n\n\n\n

\u0110\u1eb7c bi\u1ec7t, ph\u01b0\u01a1ng ph\u00e1p CSPN cho ph\u00e9p ki\u1ec3m \u0111\u1ecbnh c\u00f9ng l\u00fac m\u1ed9t nh\u00f3m s\u1ea3n ph\u1ea9m c\u00f3 nhi\u1ec1u ch\u1ee9c n\u0103ng gi\u1ed1ng nhau, nh\u01b0 c\u00e1c s\u1ea3n ph\u1ea9m c\u00f3 c\u00f9ng ph\u1ea7n c\u1ee9ng nh\u01b0ng ph\u1ea7n m\u1ec1m ch\u1ee9a nh\u1eefng ch\u1ee9c n\u0103ng ph\u1ee5c v\u1ee5 th\u1ecb tr\u01b0\u1eddng kh\u00e1c nhau. Ho\u1eb7c nh\u00f3m s\u1ea3n ph\u1ea9m c\u00f3 ph\u1ea7n c\u1ee9ng ch\u1ec9 kh\u00e1c nhau \u1edf nh\u1eefng b\u1ed9 ph\u1eadn kh\u00f4ng li\u00ean quan \u0111\u1ebfn an to\u00e0n th\u00f4ng tin. C\u00e1c s\u1ea3n ph\u1ea9m trong c\u00f9ng nh\u00f3m c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c ki\u1ec3m \u0111\u1ecbnh v\u00e0 c\u1ea5p ch\u1ee9ng ch\u1ec9 trong c\u00f9ng l\u00fac cho ph\u00e9p ti\u1ebft ki\u1ec7m th\u1eddi gian v\u00e0 chi ph\u00ed.<\/p>\n\n\n\n

C\u0169ng nh\u01b0 c\u00e1c ph\u01b0\u01a1ng ph\u00e1p ki\u1ec3m \u0111\u1ecbnh \u0111\u1ed9c l\u1eadp kh\u00e1c, vi\u1ec7c tri\u1ec3n khai CSPN \u0111\u00f2i h\u1ecfi s\u1ef1 ph\u1ed1i h\u1ee3p nhu\u1ea7n nhuy\u1ec5n c\u1ee7a ba \u0111\u01a1n v\u1ecb: c\u01a1 quan ph\u00e1p tri\u1ec3n s\u1ea3n ph\u1ea9m (Vendor), c\u01a1 quan ki\u1ec3m \u0111\u1ecbnh (ITSEF) v\u00e0 c\u01a1 quan Nh\u00e0 n\u01b0\u1edbc ph\u1ee5 tr\u00e1ch tr\u1ef1c ti\u1ebfp c\u1ea5p ch\u1ee9ng ch\u1ec9 (ANSSI).<\/p>\n\n\n\n

C\u01a1 quan ph\u00e1t tri\u1ec3n s\u1ea3n ph\u1ea9m:<\/strong> C\u01a1 quan n\u00e0y ch\u1ecbu tr\u00e1ch nhi\u1ec7m l\u1eadp h\u1ed3 s\u01a1 \u0111\u0103ng k\u00fd ki\u1ec3m \u0111\u1ecbnh v\u00e0 cung c\u1ea5p c\u00e1c th\u00f4ng tin \u0111\u1ea7u v\u00e0o c\u1ea7n thi\u1ebft cho d\u1ef1 \u00e1n, \u0111\u1ed3ng th\u1eddi s\u1ebd ch\u1ecbu to\u00e0n b\u1ed9 chi ph\u00ed ki\u1ec3m \u0111\u1ecbnh v\u00e0 c\u00f3 quy\u1ec1n d\u1eebng d\u1ef1 \u00e1n CSPN t\u1ea1i b\u1ea5t k\u1ef3 th\u1eddi \u0111i\u1ec3m n\u00e0o.<\/p>\n\n\n\n

C\u01a1 quan ki\u1ec3m \u0111\u1ecbnh:<\/strong> C\u01a1 quan ki\u1ec3m \u0111\u1ecbnh ch\u1ecbu tr\u00e1ch nhi\u1ec7m th\u1ef1c hi\u1ec7n c\u00e1c b\u01b0\u1edbc ki\u1ec3m \u0111\u1ecbnh theo ph\u01b0\u01a1ng ph\u00e1p CSPN. \u0110\u1ec3 th\u1ef1c hi\u1ec7n \u0111\u01b0\u1ee3c ki\u1ec3m \u0111\u1ecbnh, c\u01a1 quan n\u00e0y ph\u1ea3i c\u00f3 \u0111\u1ee7 c\u00e1c k\u1ef9 n\u0103ng c\u1ea7n thi\u1ebft \u0111\u1ec3 ki\u1ec3m \u0111\u1ecbnh s\u1ea3n ph\u1ea9m, \u0111\u1eb7c bi\u1ec7t l\u00e0 c\u00e1c k\u1ef9 n\u0103ng pentest. Y\u00eau c\u1ea7u n\u00e0y d\u1eabn t\u1edbi vi\u1ec7c m\u1ed7i c\u01a1 quan ki\u1ec3m \u0111\u1ecbnh th\u01b0\u1eddng ch\u1ec9 \u0111\u01b0\u1ee3c c\u00f4ng nh\u1eadn tr\u00ean m\u1ed9t s\u1ed1 l\u0129nh v\u1ef1c s\u1ea3n ph\u1ea9m nh\u1ea5t \u0111\u1ecbnh. \u0110\u1ec3 \u0111\u01b0\u1ee3c c\u00f4ng nh\u1eadn ch\u00ednh th\u1ee9c, c\u01a1 quan ki\u1ec3m \u0111\u1ecbnh ph\u1ea3i v\u01b0\u1ee3t qua c\u00e1c k\u1ef3 ki\u1ec3m tra (audit) do ANSSI t\u1ed5 ch\u1ee9c hai n\u0103m m\u1ed9t l\u1ea7n.<\/p>\n\n\n\n

C\u01a1 quan c\u1ea5p ch\u1ee9ng ch\u1ec9:<\/strong> ANSSI \u2013 c\u01a1 quan \u0111\u1eb7c tr\u00e1ch v\u1ec1 an to\u00e0n th\u00f4ng tin c\u1ee7a ch\u00ednh ph\u1ee7 Ph\u00e1p ch\u1ecbu tr\u00e1ch nhi\u1ec7m x\u00e2y d\u1ef1ng v\u00e0 c\u1eadp nh\u1eadt ph\u01b0\u01a1ng ph\u00e1p CSPN c\u0169ng nh\u01b0 c\u1ea5p ch\u1ee9ng ch\u1ec9 cho c\u00e1c s\u1ea3n ph\u1ea9m \u0111\u00e1p \u1ee9ng \u0111\u1ee7 ti\u00eau chu\u1ea9n an to\u00e0n. ANSSI c\u0169ng \u0111\u1ea3m \u0111\u01b0\u01a1ng ch\u1ee9c n\u0103ng ki\u1ec3m tra v\u00e0 c\u00f4ng nh\u1eadn nh\u1eefng c\u01a1 quan c\u00f3 \u0111\u1ee7 kh\u1ea3 n\u0103ng ki\u1ec3m \u0111\u1ecbnh ATTT (ITSEF accreditation).<\/p>\n\n\n\n

CSPN l\u00e0 m\u1ed9t \u0111i\u1ec3n h\u00ecnh v\u1ec1 m\u1ed9t ph\u01b0\u01a1ng ph\u00e1p ki\u1ec3m \u0111\u1ecbnh ATTT linh ho\u1ea1t, hi\u1ec7u qu\u1ea3 v\u1edbi chi ph\u00ed th\u1ea5p cho c\u00e1c s\u1ea3n ph\u1ea9m c\u00f3 v\u00f2ng \u0111\u1eddi ng\u1eafn nh\u01b0 IoT. M\u1ed7i n\u0103m c\u00f3 h\u00e0ng tr\u0103m d\u1ef1 \u00e1n ki\u1ec3m \u0111\u1ecbnh v\u00e0 \u0111\u01b0\u1ee3c c\u1ea5p ch\u1ee9ng ch\u1ec9. \u0110i\u1ec1u n\u00e0y \u0111\u00f3ng g\u00f3p quan tr\u1ecdng v\u00e0o vi\u1ec7c c\u1ea3i thi\u1ec7n \u0111\u1ed9 tin c\u1eady c\u1ee7a ng\u01b0\u1eddi d\u00f9ng t\u1ea1i ch\u00e2u \u00c2u.<\/p>\n\n\n\n

\u0110\u1ed1i v\u1edbi n\u01b0\u1edbc ta, CSPN ho\u00e0n to\u00e0n c\u00f3 th\u1ec3 l\u00e0 l\u1ef1a ch\u1ecdn t\u1ed1i \u01b0u cho m\u1ed9t s\u01a1 \u0111\u1ed3 ki\u1ec3m \u0111\u1ecbnh ATTT hi\u1ec7u qu\u1ea3. Ph\u01b0\u01a1ng ph\u00e1p CSPN c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c tri\u1ec3n khai t\u1eebng b\u01b0\u1edbc, \u01b0u ti\u00ean c\u00e1c m\u1ea3ng s\u1ea3n ph\u1ea9m thi\u1ebft y\u1ebfu nh\u01b0 ph\u1ea7n m\u1ec1m VPN, \u1ee9ng d\u1ee5ng ng\u00e2n h\u00e0ng \u0111i\u1ec7n t\u1eed, thi\u1ebft b\u1ecb nh\u00e0 th\u00f4ng minh (nh\u01b0 camera gi\u00e1m s\u00e1t)\u2026.<\/p>\n\n\n\n

Tri\u1ec3n khai ph\u01b0\u01a1ng ph\u00e1p CSPN s\u1ebd \u0111\u00f3ng g\u00f3p \u0111\u00e1ng k\u1ec3 v\u00e0o vi\u1ec7c n\u00e2ng cao k\u1ef9 n\u0103ng an to\u00e0n th\u00f4ng tin cho doanh nghi\u1ec7p trong n\u01b0\u1edbc, t\u1eeb c\u01a1 quan ki\u1ec3m \u0111\u1ecbnh \u0111\u1ebfn c\u00e1c doanh nghi\u1ec7p ph\u00e1t tri\u1ec3n s\u1ea3n ph\u1ea9m, \u0111\u1ed3ng th\u1eddi b\u1ea3o v\u1ec7 ng\u01b0\u1eddi ti\u00eau d\u00f9ng Vi\u1ec7t Nam tr\u01b0\u1edbc c\u00e1c s\u1ea3n ph\u1ea9m c\u00f3 \u0111\u1ed9 an to\u00e0n th\u1ea5p.<\/p>\n\n\n\n

B\u1ea3o L\u00e2m<\/strong><\/p>\n\n\n\n

https:\/\/vietq.vn\/kiem-dinh-an-toan-san-pham-cong-nghe-thong-tin-voi-phuong-phap-cspn-d222985.html<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

CSPN l\u00e0 \u0111i\u1ec3n h\u00ecnh v\u1ec1 m\u1ed9t ph\u01b0\u01a1ng ph\u00e1p ki\u1ec3m \u0111\u1ecbnh an to\u00e0n th\u00f4ng tin (ATTT) linh ho\u1ea1t, hi\u1ec7u qu\u1ea3 v\u1edbi chi ph\u00ed th\u1ea5p cho c\u00e1c s\u1ea3n ph\u1ea9m c\u00f3 v\u00f2ng \u0111\u1eddi ng\u1eafn. Theo B\u1ed9 TT&TT, s\u1ef1 ph\u00e1t tri\u1ec3n m\u1ea1nh m\u1ebd c\u1ee7a c\u00e1c c\u00f4ng ngh\u1ec7 m\u1edbi nh\u01b0 Internet v\u1ea1n v\u1eadt (IoT), \u0111i\u1ec7n to\u00e1n \u0111\u00e1m m\u00e2y (cloud computing), […]<\/p>\n","protected":false},"author":26,"featured_media":34939,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[47],"tags":[],"class_list":["post-34938","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc"],"_links":{"self":[{"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/posts\/34938","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/users\/26"}],"replies":[{"embeddable":true,"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/comments?post=34938"}],"version-history":[{"count":1,"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/posts\/34938\/revisions"}],"predecessor-version":[{"id":34940,"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/posts\/34938\/revisions\/34940"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/media\/34939"}],"wp:attachment":[{"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/media?parent=34938"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/categories?post=34938"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/tags?post=34938"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}