Skip to content

為什麼端點防護要自動切換的安全規則?

理論上在確保資訊安全是簡單清楚的規則:IT 應確保只有經過核准的使用者,可以合法存取資訊系統。相信他們存取的原因是正當業務所需,並且假設開始使用也會做正確的操作。然而在實務上,安全的達成一直是安管人員在規則”拒絕” 的一系列靜態過程;「拒絕存取」是在使用者與工作所需的資源之間設置障礙。結果是靜態安全性規則,嚴重妨礙使用者工作效率,並降低組織主要業務處理速度。入侵企業盜竊破壞,甚至網路恐怖主義等風險,已經讓安全防護變成了一種動態的情境,需要採取更智慧的對策。

而COVID-19 大流行迫使組織,快速從完全在公司內辦公或混合辦公室/遠端辦公,轉向配置遠端工作環境。這一轉型最緊迫的挑戰之一是:組織必須面對端點設備安全的保護管理方式發生驟變。重要的是考慮遠端工作的員工,更可能將工作端點裝置同時用於購物、支付帳單和一般 Web 瀏覽活動。這會增加洩漏露公司資料的風險。當遇上網路釣魚郵件相關的事件時,組織的資料安全保護變得脆弱。

 

傳統規則的挑戰

看看網路極端點安全在目前的機制,通常以偵測威脅為應對措施主軸。在邊境建置防火牆控制網路進出,過濾流過的封包資料。當出現不好的事情時就做出針對回應,相對容易實施。但企業內部的幾個變化趨勢:機動工作、遠距工作的員工增加,和雲端服務的廣泛採用,使得傳統的外圍已不容易區分和防守。同樣,網路活動的”好”或”壞”就變得模糊不清。靜態規則就無法正確的適用在不同的情境。

讓我們用一個例子說明傳統規則的侷限性。Alvina 是一位資料分析專家,即將向經理報告研究成果。她嘗試望將簡報檔複製到 USB 儲存裝置上作為備份。傳統的防護規則是,阻擋儲存到USB 媒體上,並示警及稽核記錄。這在業務活動上造成了幾個困擾:

使用者方面

  • 影響使用者,讓Alvina 感到挫折,因為簡單的工作被阻止
  • Alvina 會找到另一種替代方案來解決她的問題
  • 資料保護系統使工作變得沒有效率

管理者影響

  • 管理者被迫需要追蹤事件與警報訊息
  • 過多的警報訊息淹沒安全管理團隊
  • 因為有太多警報,安全管理團隊調整或關閉 DLP 政策

現存於環境中的各種不同的工具和產品,利用不同的技術保護組織的資訊資料。雖然這些工具旨在執行相同資料保護工作,卻在實務上很難真正有效率的管理。這是因為使用靜態的、以威脅為中心的策略來管理存取作業,欠缺良好整合,只能各自提供獨立功能,沒法兼顧多種業務運作活動。

 

主動適應政策調整

為了解決靜態規則無法適當應對變動的環境,主動適應政策根據不同環境條件提前,建立不同對應行動計畫,可簡化團隊管理複雜度,並減低對使用者工作的干擾。建議的適應條件考量:

遠距工作

遠距工作者所使用的裝置,可能是公司的受控設備,也可能自攜帶裝置。工作的場所也可能是咖啡廳、自宅,所面臨的風險不一。依照工作形式切換必要的管理政策,防止不當連線或資源存取。

  • 以公司裝置利用VPN 存取公司的服務
  • 以自用裝置RDP 連入公司裝置。
  • 以公司裝置RDP 到另一台公司裝置。

 

所在地理區
不同國家、地區因基礎建設完善度不一,可能安全性不足等顧慮。

跨廠區工作
配合當地的安全管理政策。

應用程式執行或連線至重要網站
當指定應用程式被執行,或連結公司內部敏感站台時,安全層級對應調整。

使用者自決(User Override)
部分事件可由使用者自行決定放寬,變更後系統依據條件學習並自動處置。

管理者(主管)核准
除使用者自決外,部分事件變更須經過管理人員核准。

威脅等級變化
威脅等級升高,關閉部分功能,甚至凍結防止事態擴大。

 

結論

目前疫情尚未明朗,依賴遠端工作的環境可能會成為常態。通過識別遠距工作及威脅環境變更,主動適應性政策,變更對應資安等級的方式,並實施必要的行動來應對;組織將處於更有利、更具主動積極防禦的位置,從而維持業務連續保持競爭力。

 

About Version 2

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products. Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

關於精品科技
精品科技(FineArt Technology) 成立於1989年,由交大實驗室中,一群志同道合的學長學弟所組合而成的團隊,為一家專業的軟體研發公司。從國內第一套中文桌上排版系統開始,到投入手寫辨識領域,憑藉著程式最小、速度最快、辨識最準等優異特性,獲得許多國際大廠的合作與肯定。歷經二十個寒暑,精品科技所推出的產品,無不廣受客戶好評。

訊連科技「威力導演365 macOS版」隆重上市

威力導演首度支援macOS,提供強大、直覺的編輯工具及豐富特效

訂閱用戶更可享有無限擴充的影音素材庫

【2020年12月7日,台北訊】多媒體創作軟體領導廠商訊連科技(5203.TW)發表全新「威力導演365 macOS版」,將廣受Windows、Android及iOS用戶歡迎的威力導演首度移植至macOS平台。「威力導演365 macOS版」延續威力導演家族之優良傳統,提供強大功能、豐富的內建範本及特效,及簡易上手的介面,可協助各式用戶快速打造社群、生活紀錄、影音教學等多種影片。macOS用戶可於即日起至訊連科技官方網站進行購買或下載免費版本.

訊連科技「威力導演365 macOS版」隆重上市

威力導演自2000年發表以來,全球已累積超過2億用戶,於2014年、2019年陸續推出的Android及iOS版本亦已累積超過1.5億次的下載。針對macOS用戶,訊連首次將威力導演移植至macOS平台,提供豐富的剪輯工具,如專業級關鍵畫格、色度去背功能,以及遮罩、色調調節與文字設計師等,訂閱模式更讓用戶可享每月更新之訂閱戶專屬特效、背景音樂、音效等素材擴充。

「macOS向來深受專業內容創作者的愛用,近年蘋果除了中高階專業電腦外,亦推出MacBook Air、Mac mini等入門級產品,吸引更多家庭用戶、學生及業餘影音玩家進入macOS的世界。」訊連科技執行長黃肇雄表示:「感謝macOS用戶的長期等待,我們很榮幸宣布『威力導演365 macOS版』正式上市,無論是從初學者或專業內容創作者,都可透過macOS電腦輕鬆創作專業影片。」

PowerDirector365macOS功能特色

專業設計工具:

  • 視訊拼貼設計師
  • 覆疊工房
  • 標題設計師
  • 字幕工房
  • 逐格動畫、凍結畫格、平移與縮放
  • 混合模式
  • 遮罩設計師
  • 特效工房
  • 慢動作&快進特效
  • 關鍵畫格工房
  • 轉場特效工房

專業剪輯工具:

  • 影片預剪
  • 多重色度去背樣本
  • 圖片序列輸出
  • 鏡頭與色彩校正
  • 4K 高畫質預覽
  • 拖曳播放滑桿時偵測音訊
  • 媒體預覽視窗
  • 超大縮圖預覽
  • 調整時間軸軌道順序
  • 取消固定媒體庫&時間軸視窗

About Version 2

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products. Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

關於CyberLink
訊連科技創立於1996年,擁有頂尖視訊與音訊技術的影音軟體公司,專精於數位影音軟體及多媒體串流應用解決方案產品研發,並以「抓準技術板塊,擴大全球行銷布局」的策略,深根台灣、佈局全球,展現亮麗的成績。訊連科技以先進的技術提供完美的高解析影音播放效果、以尖端的科技提供完整的高解析度擷取、編輯、製片及燒錄功能且完整支援各種高解析度影片及音訊格式。產品包括:「威力導演」、「PowerDVD」、「威力製片」、「威力酷燒」等。

How to turn your smartphone into a document ...

IPEVO 的iDocCam 應用程式 改變了世界各地接受教育和遠距工作的機會。即使在這非常時期,iDocCam 應用程式讓教師仍然能夠即時分享影像,使課程不被中斷、持續進行。憑藉其為低視能族群設計的獨特功能,iDocCam 提供了包容性及無障礙的協同合作環境,融合教育和專業領域。

現在, iDocCam 應用程式搭配最新推出的IPEVO 多重角度手機支架,更能加強iDocCam的用途。

IPEVO多重角度手機支架

IPEVO Uplift 擁有堅固、靈活的懸臂支架,搭配 IPEVO iDocCam 應用程式時,可將智慧型手機變身功能強大的實物攝影機。請參考以下步驟:

  1. DownloadIPEVO Visualizer software至電腦。
  2. 下載IPEVO iDocCam app至手機,並連接電腦中的Visualizer軟體。
  3. 將IPEVO Uplift放在桌上最佳的位置。IPEVO Uplift 配備金屬底座,堅實穩固,其支架由鋁合金製成,移動方便,不小心觸碰到時亦不會造成搖晃。
  4. 將智慧型手機放入手機夾具中,夾具位於Uplift多關節懸臂的末端。請用手機的邊緣撐開一邊夾具,然後使用另一手向相反的方向小心拉開夾具另一邊。當夾具兩端距離足夠時,小心放入手機。確保手機鏡頭不會被Uplift的機身遮擋,並且鏡頭應背對機身。
  5. 若想要拍攝更大範圍,可將Uplift的支架調整成更為直立的姿勢,以增加鏡頭與桌面間的距離。IPEVO Uplift 可適用寬度7.0-9.8公分的智慧型手機。

Uplift的手機夾具底座可360°旋轉,讓使用者找到最適合的拍攝角度,並且隨時輕鬆切換方向。

實例分享

Ross Morrison McGill是英國 @TeacherToolkit 部落格創辦人,同時也是社群軟體上最受歡迎的教師。他認為IPEVO Uplift是更為便宜的視覺溝通工具替代品,也是「值得放在教室辦公桌上的工具」。請看 Ross 如何使用Uplift來強化課堂學習:

身為教育科技學家,Kathy Schrock 經常使用IPEVO Uplift和 iDocCam應用程式來示範科學實驗或籃球動作、建立定格動畫或錄製影片、以及展示書本或教科書的頁面。Kathy 表示,「IPEVO Uplift和 iDocCam是最佳完美拍檔!」

Kathy Shrock使用IPEVO Uplift和 iDocCam 應用程式,展示書本頁面。

About Version 2

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products. Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

關於IPEVO
IPEVO源自於PChome Online硬體事業部門,2007年7月正式獨立。自2004年於台灣營運Skype網絡電信服務,使台灣成為Skype全球發展中最成功的市場。2005年起以IPEVO品牌推出一系列Skype專屬硬件產品,將Skype虛擬服務轉化為使用者實質經驗。IPEVO以簡單、實際且具有價值的經驗為產品目標,其簡潔俐落的產品風格呼應著IPEVO的核心思考與產品精神。目前已研發之產品包括:Skype有線USB話機、Skype無線話機、Skype會議系統、Skype視訊設備、Stand-alone免電腦Skype話機。

Scale Computing Wins First Place in Trifecta of Customer Satisfaction Awards: 2021 Best Feature Set, Best Usability, and Best Customer Support From TrustRadius

Indianapolis – January 6, 2020 – Scale Computing, a market leader in edge computing, virtualization and hyperconverged solutions, announced today that TrustRadius has recognized the company with a 2021 Best Feature Set Award, a 2021 Best of Customer Support Award, and a 2021 Best Usability Award. This trifecta of awards highlights the few companies with outstanding feature sets that have gone above and beyond to delight their users. The company ranked first in all three categories.

To win the Best Customer Support Award, each nominated organization had to receive 10 TrustRadius reviews in the past year that featured specific mention of their product’s customer support. Winners also had to rank in the top three positions of their category in terms of what percentage of positive responses they earned this year. The feature award looks specifically at three feature sets, is limited to three winners per award, and winners are ranked 1-3. Additional vetting via textual review analysis was also performed by the TrustRadius research team. The same process was followed with the Best Feature Set Award and the Best Usability Award.

“We are excited to announce our first-ever “Best of” Award winners,” said TrustRadius CEO Vinay Bhagat. “Let’s face it: Not all products are created equal, and neither are all technology buyers. That’s why at TrustRadius we’re always looking for new ways to help buyers make great decisions. By highlighting products that have first-class feature sets, we can help more buyers navigate to products that will meet their unique needs.”

“When you win awards based on customer feedback it is the most gratifying because customer success is Scale Computing’s top priority. We engineer our IT infrastructure platform to be simple to manage and maintain while leveraging our patented self-healing technology to maintain maximum uptime for applications. This innovation is appreciated by customers at organizations of all sizes, in every vertical, and we are proud our customers have recognized us in TrustRadius,” said Jeff Ready, CEO and co-founder, Scale Computing.

This news follows exciting recent award wins for the company including:

  • Scale Computing is well positioned in the Gartner Magic Quadrant/Hyperconverged Infrastructure Software
  • The HE150, powered by Scale Computing’s HC3 Edge software platform, is a winner in the CRN 2020 Product of the Year Awards in the Internet of Things category
  • Cloud Computing Outlook has recognized Scale Computing as a Top Edge Computing Solution Provider
  • Scale Computing is listed in Inc’s 1000 Largest and Most Inspiring Private Companies
  • Winner in both the Edge Computing category, newly added this year, and the Converged/ HyperConverged Infrastructure category, of the 2020 CRN Annual Report Card (ARC) Awards. This is the second consecutive year Scale Computing has been recognized as a CRN ARC Award winner.

Scale Computing believes that it is the top choice over its competitors for many customers due to the simplicity, efficiency and innovation of Scale Computing HC3. Specifically:

  • Simplicity – Scale Computing customers rave about how simple it is to implement and deploy HC3. The simplicity of the self-healing platform, driven by automation and machine intelligence, allows Scale Computing customers to focus on other strategic projects rather than infrastructure maintenance.
  • Efficiency – Scale Computing HC3 software eliminates the need for traditional virtualization software, disaster recovery software, servers, and shared storage, replacing these with a fully integrated, highly available system for running applications.
  • Innovation – Using patented HyperCore™ technology, the HC3 self-healing platform automatically identifies, mitigates, and corrects problems in the infrastructure in real-time, enabling applications to achieve maximum uptime even when local IT resources and staff are scarce. This innovation makes HC3 simple for IT teams to manage and administer.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Scale Computing 
Scale Computing is a leader in edge computing, virtualization, and hyperconverged solutions. Scale Computing HC3 software eliminates the need for traditional virtualization software, disaster recovery software, servers, and shared storage, replacing these with a fully integrated, highly available system for running applications. Using patented HyperCore™ technology, the HC3 self-healing platform automatically identifies, mitigates, and corrects infrastructure problems in real-time, enabling applications to achieve maximum uptime. When ease-of-use, high availability, and TCO matter, Scale Computing HC3 is the ideal infrastructure platform. Read what our customers have to say on Gartner Peer Insights, Spiceworks, TechValidate and TrustRadius.

About TrustRadius:
TrustRadius helps technology buyers make better decisions and helps vendors tell their unique story, improve conversion, engage high-intent buyers, and gain customer insights. Each month over 1 million B2B technology buyers, over 50% from large enterprises, use verified reviews and ratings on TrustRadius.com to make informed purchasing decisions. Headquartered in Austin, TX, TrustRadius was founded by successful entrepreneurs and is backed by Mayfield Fund, LiveOak Venture Partners and Next Coast Ventures.

請留意 ! 假藉包裹遞送的快閃釣魚郵件攻擊

在台灣有不少企業與個人在2020/12/14這天,都收到一個主旨為「Last Reminder: Your package could not be delivered on 14.12.2020」的釣魚郵件,郵件的發送源來自俄羅斯的虛擬主機。
釣魚郵件的內容宣稱,郵務包裹因為未付稅金而無法在今天送抵,並且郵件中附上數個超連結連往 hxxp://tw-inforedirect.com/ 的轉址頁面,經轉址後來到一個假的釣魚刷卡頁面:hxxps://post-tw.info。



tw-inforedirect.com 與 post-tw.info 註冊日期都是 2020/12/14,攻擊也是在 2020/12/14 開始發動,也就是說,這是一個針對信用卡帳號、到期日與安全碼的快閃釣魚行動。若您收到這類釣魚郵件,千萬不要遵照著郵件內的指示至釣魚頁面進行刷卡動作,以防信用卡相關資訊外洩。



面對未知的郵件攻擊,我們還是要呼籲,當收到與自己無關的郵件,建議直接忽略並刪除;若不太確定需要進一步查證,建議一定不要直接使用可疑郵件附帶的網址或電話進行查證,而是親自查出合法官網、官方電話再進行查證動作。

About Version 2

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products. Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

關於中華數位科技 Softnext Technologies Corp.
創立於2000年8月。
秉持著【We Secure Your Content】的服務理念,以提供企業資訊應用管理服務及打造資訊內容安全防護為宗旨。專精於提供網路應用服務技術,根據市場需求推出多款資訊內容安全的解決方案及應用服務,能夠協助企業透過符合資安管理規範並遵循法規的方式進行資訊內容安全管理,以維護員工的生產力、提升企業經營績效。

關於 ASRC 垃圾訊息研究中心
ASRC 垃圾訊息研究中心 (Asia Spam-message Research Center),長期與中華數位科技合作,致力於全球垃圾郵件、惡意郵件、網路攻擊事件等相關研究事宜,並運用相關數據統計、調查、趨勢分析、學術研究、跨業交流、研討活動..等方式,促成產官學界共同致力於淨化網際網路之電子郵件使用環境。更多資訊請參考 www.asrc-global.com .