鍙橀潻涔嬩笅锛屸€滃ぇ鏁版嵁瀹夊叏鈥濇垚鏁板瓧鍖栬浆鍨嬧€滃繀绛旈鈥?/h4>

2020-06-28 16:23:16  鏉ユ簮锛氱綉鏄撶鎶€

銆€銆€濡傛灉璇达紝鏁板瓧鍖栬浆鍨嬫槸鍏ㄧ悆鍙橀潻鐨勮秼鍔匡紝閭d箞“澶ф暟鎹畨鍏?rdquo;灏辨槸鏁板瓧鍖栬浆鍨嬬殑“蹇呯瓟棰?rdquo;銆?ldquo;鏁版嵁”浣滀负褰撲粖淇℃伅鍖栨椂浠g殑閲嶈杞戒綋涓庡伐鍏凤紝鍏跺畨鍏ㄦ€ф槸鐩存帴鍐冲畾鏈潵鍏ㄧ悆鏁板瓧鍖栬浆鍨嬫垚鍔熶笌鍚︾殑鍏抽敭鍛介銆?
 
銆€銆€鍓嶆鏃堕棿锛屾嵁澶栧獟鎶ラ亾锛歋AP鏃椾笅浜у搧ASE鏁版嵁搴撴湇鍔″櫒琚洕瀛樺湪6涓珮鍗辨紡娲烇紝鍏朵腑涔嬩竴鐨凜VE-2020-6248濞佽儊璇勫垎绔熼珮杈?.1(婊″垎10鍒?!鎹倝锛屾敾鍑昏€呭彲鍒╃敤璇ョ粍婕忔礊鍦ㄤ綆鏉冮檺鐘舵€佷笅锛屽湪鐩爣绯荤粺涓婃墽琛屼换鎰忎唬鐮侊紝鐩磋嚦瀹屽叏鎺у埗鐩爣鏁版嵁搴撶敋鑷冲簳灞傛搷浣滅郴缁熴€傞壌浜嶴AP涓哄叏鐞冪煡鍚嶄紒涓氳蒋浠朵緵搴斿晢锛屼笖ASE鏈嶅姟鑼冨洿鐢氬箍锛屾晠鑰屾娆℃紡娲炰簨浠舵尝鍙婅寖鍥存垨璁告瘮棰勬兂鐨勮繕瑕佹繁杩溿€傝€屽綋鎴戜滑灏嗘浜嬬疆浜庡叏鐞冩暟瀛楀寲杞瀷鐨勮儗鏅笅閲嶆柊瀹¤鏃讹紝鍙戠幇濞佽儊缁濅笉姝簬鏁版嵁搴撳畨鍏紝鍏惰儗鍚庤繕娼滆棌鐫€鏇存繁灞傛鐨勬暟瀛楁椂浠e畨鍏ㄥ舰鎬侊細“鏁版嵁”浣滀负褰撲粖淇℃伅鍖栨椂浠g殑閲嶈杞戒綋涓庡伐鍏凤紝鍏跺畨鍏ㄦ€ф槸鐩存帴鍐冲畾鏈潵鍏ㄧ悆鏁板瓧鍖栬浆鍨嬫垚鍔熶笌鍚︾殑鍏抽敭鍛介銆?/div>
 
銆€銆€SAP(SystemApplications and Products)鍏徃锛氭垚绔嬩簬1972骞达紝鏄叏鐞冪煡鍚嶇殑浼佷笟绠$悊鍜屽崗鍚屽寲鍟嗗姟瑙e喅鏂规渚涘簲鍟嗭紝鍦ㄥ叏鐞?90澶氫釜鍥藉鍜屽湴鍖烘嫢鏈夎秴杩?35000涓鎴枫€?/div>
 
銆€銆€灏ゅ叾鍊煎緱娉ㄦ剰鐨勬槸锛岃鍏徃鏃椾笅鐨勬槑鏄熶骇鍝丄SE(Adaptive Server Enterprise)鏁版嵁鏈嶅姟鍣ㄤ韩瑾夊叏鐞冿紝涓栫晫鑼冨洿鍐呰繎90%鐨勯摱琛屽法澶村拰瀹夊叏鍏徃锛?0000澶氬浼佷笟缁勭粐閮藉湪浣跨敤瀹冦€?/div>
 
銆€銆€SAP ASE鏁版嵁鏈嶅姟鍣ㄨ鏇濋珮鍗辨紡娲?/strong>
 
銆€銆€鏀诲嚮鑰呭彲瀹屽叏鎺у埗鐩爣鏁版嵁搴?/strong>
 
銆€銆€杩戞棩锛屽浗澶栧畨鍏ㄧ爺绌跺憳鍙戝竷鎶ュ憡锛岄噸纾呮姭闇蹭簡SAP ASE鏁版嵁鏈嶅姟鍣ㄤ腑6涓珮鍗辨紡娲炵殑鎶€鏈粏鑺傦紝骞惰鍛婄О锛氭敾鍑昏€呭彲鍒╃敤璇ョ粍婕忔礊鍦ㄤ綆鏉冮檺鐘舵€佷笅锛屽湪鐩爣绯荤粺涓婃墽琛屼换鎰忎唬鐮侊紝鐢氳嚦瀹屽叏鎺у埗鐩爣鏁版嵁搴撲互鍙婂簳灞傛搷浣滅郴缁熴€?/div>
 
銆€銆€6涓珮鍗辨紡娲炰富瑕佷俊鎭涓嬶細
 
銆€銆€CVE-2020-6248锛氬▉鑳佽瘎鍒嗛珮杈?.1(婊″垎10)锛岃婕忔礊婧愪簬缂轰箯瀹夊叏妫€鏌ワ紝鏃犳硶鍦ㄦ暟鎹簱澶囦唤鎿嶄綔鏈熼棿瑕嗙洊鍏抽敭閰嶇疆鏂囦欢銆備换浣曞彲浠ヨ繍琛孌UMP鍛戒护鐨勪綆鏉冮檺鐢ㄦ埛閮藉彲浠ラ€氳繃鍙戦€佹崯鍧忕殑閰嶇疆鏂囦欢浠ユ帴绠℃暟鎹簱銆?/div>
銆€銆€CVE-2020-6252锛氬瓨鍦ˋSE鏈嶅姟鍣ㄧ殑灏忓瀷杈呭姪鏁版嵁搴?SqlAnywhere)涓紝浠讳綍涓€涓繍琛學indows绯荤粺鐨勬敾鍑昏€呯殕鍙€氳繃姝ゆ紡娲烇紝鐧诲綍杈呭姪鏁版嵁搴撲互“鏈湴绯荤粺”鏉冮檺鎵ц浠绘剰浠g爜銆?/div>
銆€銆€CVE-2020-6241锛氬瓨鍦ㄤ簬ASE 16鐨勫叏灞€涓存椂琛ㄤ腑锛屾槸鍏稿瀷鐨凷QL娉ㄥ叆婕忔礊锛屽彲琚敤浜庢彁鍗囩郴缁熸潈闄愩€?/div>
銆€銆€CVE-2020-6253锛氬瓨鍦ㄤ簬ASE鐨刉ebServices澶勭悊浠g爜涓紝鏀诲嚮鑰呭彲鍊熸杩涜绯荤粺鏉冮檺鎻愬崌銆?/div>
銆€銆€CVE-2020-6243锛歑P Server婕忔礊锛岀粡杩囪韩浠介獙璇佺殑Windows鏀诲嚮鑰呭彲鍊熸杩炴帴鍒癝AP ASE锛屽苟浠?ldquo;鏈湴绯荤粺”鐨勬潈闄愭墽琛屼换鎰忎唬鐮併€?/div>
銆€銆€CVE-2020-6250锛氫笌瀹夊叏鏃ュ織涓嚭鐜版槑鏂囧瘑鐮佹湁鍏筹紝鍗曠嫭浣跨敤鏃朵粎褰卞搷Linux/UNIX绯荤粺锛屼絾鑻ヤ笌鍏朵粬婕忔礊缁勫悎浣跨敤锛屾垨鍙鑷碨AP ASE鏈嶅姟鍣ㄥ畬鍏ㄧ槴鐥€?/div>
 
銆€銆€浠?.1鐨勫▉鑳佽瘎绾у埌鏉冮檺鎭舵剰鎻愬崌鍐嶅埌鏈嶅姟鍣ㄨ嚧鐦紝涓婅堪婕忔礊鐨勭牬鍧忓姏涓嶈█鑰屽柣銆傝€屾洿鍏抽敭鐨勬槸锛屼紒涓氶€氬父浼氬皢鍏抽敭淇℃伅瀛樺偍鍦ㄦ暟鎹簱涓紝鑰屾暟鎹簱鍙堝父澶勪簬涓嶅彈淇′换鎴栧叕寮€鐨勭幆澧冧笅锛岃繖涓€瓒嬪娍鏇存槸缁欎簡婕忔礊鏀诲嚮鍙箻涔嬫満銆?/div>
 
銆€銆€鍥犳锛屼竴鏃︽暟鎹簱瀹夊叏闃茬嚎澶卞畧锛屼笉姝㈡満瀵嗕俊鎭細鍙楀埌褰卞搷锛屾鍦ㄨ繍琛岀殑涓绘満涔熷皢闈复鍓嶆墍鏈湁鐨勫▉鑳併€傛櫤搴撳湪姝ゆ彁閱掔浉鍏崇鐞嗗憳锛屽姟蹇呭強鏃朵慨琛ョ郴缁熸紡娲烇紝淇濋殰绯荤粺瀹夊叏杩愯銆?/div>
 
銆€銆€鏈嶅姟鍣ㄥけ瀹堣儗鍚庢殫钘忔洿澶ч殣鎮?/strong>
 
銆€銆€澶ф暟鎹畨鍏ㄥ嵄灞€涓€瑙﹀嵆鍙?/strong>
 
銆€銆€鑰屽湪SAP ASE瀛樺湪楂樺嵄婕忔礊杩欎竴浜嬩欢涓紝闇€瑕佹垜浠叧娉ㄧ殑涓嶅彧鏄紡娲炵殑淇ˉ涓庡惁锛屾洿閲嶈璀︽儠鐨勬槸鍏惰儗鍚庢綔钘忕殑鍗辨満锛氭暟鎹畨鍏ㄤ竴鏃﹀け瀹堬紝鏁板瓧鍖栬浆鍨嬪繀灏嗗叏绾挎簝璐ャ€?/div>
 
銆€銆€灏ゅ叾闅忕潃鍏抽敭鍩虹璁炬柦鐨勯珮搴︽暟瀛楀寲锛屼互宸ヤ笟浜掕仈缃戙€?G銆佷汉宸ユ櫤鑳戒负浠h〃鐨勬柊鎶€鏈负澶ф暟鎹彁渚涜偉娌冨彂灞曞湡澹ょ殑鍚屾椂锛屼篃缁欐暟鎹畨鍏ㄥ甫鏉ヤ簡鍓嶆墍鏈湁鐨勬寫鎴橈紝鍏惰儗鍚庨潰涓寸殑缃戠粶濞佽儊涔熸棩娓愬嚫鏄俱€?/div>
 
銆€銆€鍏朵竴銆佸唴閮ㄨ剢寮遍毦浠ラ伩鍏嶏紝鏁版嵁搴撴湰韬殑瀛樺偍瀛樺湪璇稿瀹夊叏闅愭偅
 
銆€銆€鐢变笂鏂囧彲鐭ワ紝SAP ASE鏈嶅姟鍣ㄤ腑瀛樺湪鐨勮繖缁勬紡娲炴瀬鍏风牬鍧忓姏锛岃€岃繖杩樹粎浠呮槸鏁版嵁搴撴湇鍔″櫒婕忔礊鐨勫啺灞变竴瑙掋€傜浉鍏虫暟鎹樉绀猴紝鎴2019骞?2鏈?CVE鍙戝竷鐨勮纭鐨勫浗闄呬富娴佹暟鎹簱婕忔礊澶氳140涓?
 
銆€銆€鑰岃繎骞存潵锛屽€熷姪鏁版嵁搴撴湇鍔″櫒婕忔礊锛屽埄鐢⊿QL娉ㄥ叆銆佹彁鏉冦€佺紦鍐插尯婧㈠嚭鐧绘敾鍑绘柟寮忥紝閽堝鏁版嵁涓績鍙戣捣鐨勯珮绾у埆缃戠粶鍏ヤ镜鏃舵湁鍙戠敓锛岀敱姝ゅ鑷寸殑澶ц妯℃暟鎹硠婕忎簨浠舵洿鏄瘮姣旂殕鏄€?/div>
 
銆€銆€鏍规嵁Risk Based Security鍙戝竷鐨勬暟鎹樉绀猴紝浠呭湪2020骞寸涓€瀛e害锛屾硠闇茬殑鏁版嵁鎬婚噺鐚涘鑷?4浜匡紝涓?019骞寸涓€瀛e害鐩告瘮澧為暱浜?73%锛屽垱涓嬭嚦灏戣嚜2005骞磋缁嗘姤鍛婂紑濮嬩互鏉ョ殑鍚屾湡璁板綍銆?/div>
 
銆€銆€鍏朵簩銆佸閮ㄥ▉鑳侀槻涓嶈儨闃诧紝楂樼骇鍒獳PT銆佸嫆绱㈣蒋浠剁瓑鍚勭被鏀诲嚮灞傚嚭涓嶇┓
 
銆€銆€鍦ㄦ暟鎹唴閮ㄨ剢寮辨€ч毦浠ラ伩鍏嶇殑鑳屾櫙涓嬶紝閽堝鎬х殑楂樼骇鍒綉缁滄敾鍑绘棩鐩婄寲鐛楋紝浼犵粺鐨勯槻寰℃墜娈靛凡鏃犳硶鏈夋晥闃绘APT绛夐珮绾ф敾鍑伙紝鑰屾暟鎹畨鍏ㄩ槻绾夸竴鏃﹁鏀荤牬锛屽悇绫绘湁鍏冲浗瀹躲€佺ぞ浼氥€佷紒涓氬拰涓汉鐨勬捣閲忓ぇ鏁版嵁灏嗚缃簬鍓嶆墍鏈湁鐨勫▉鑳佷箣涓嬨€?/div>
 
銆€銆€浠ユ渶杩戝彂鐢熺殑鏁拌捣鏁版嵁鏀诲嚮妗堜欢涓轰緥锛?/div>
 
銆€銆€2020骞?鏈堬紝缇庡浗寰峰厠钀ㄦ柉宸炵殑鑸┖鏈嶅姟渚涘簲鍟嗗湥涓滃畨灏煎ゥ鑸┖鑸ぉ鍏徃(VT SAA)閬亣鍕掔储杞欢鏀诲嚮锛岃鍏徃鍖呮嫭璐㈠姟鏁版嵁銆佹彁妗堛€佷繚瀵嗗崗璁湪鍐呯殑1.5TB鏁版嵁鎯ㄩ伃绐冨彇;
 
銆€銆€2020骞?鏈堬紝娉板浗鏈€澶х殑铚傜獫缃戠粶AIS鐤戜技閬粦瀹㈡敾鍑伙紝鑷村叾鏁版嵁搴撹劚鏈猴紝80浜垮疄鏃朵簰鑱旂綉璁板綍鎯ㄩ伃娉勯湶;
 
銆€銆€2020骞?鏈?鏃ワ紝澶栧獟鎶ラ亾绉帮紝缇庡浗闃查儴鎵垮寘鍟嗛伃閬嘙aze鍕掔储杞欢鏀诲嚮锛岃嚧鍏跺弬涓庣淮鎶ゆ敮鎸佺殑缇庡浗娲查檯寮归亾瀵煎脊“姘戝叺-3“绯诲垪鍐涗簨鏁版嵁闄峰叆鍗卞眬;
 
銆€銆€妗╂々浠朵欢锛岀殕鏄潰鍚戞暟鎹畨鍏ㄦ尟鑱嬪彂鑱╃殑瀹夊叏璀﹂搩銆?/div>
 
銆€銆€鍏朵笁銆佸鍩熷簲鐢ㄥ満鏅笅锛屾暟鎹畨鍏ㄧ壍涓€鍙戣€屽姩鍏ㄨ韩
 
銆€銆€闅忕潃鍏ㄧ悆鏁板瓧鍖栨垬鐣ヨ繋鏉ュ墠鎵€鏈湁涔嬫柊鍙樺眬锛屽悇浜т笟閾句腑锛屾暟鎹簲鐢ㄥ満鏅繀灏嗗憟鐜颁簳鍠峰紡澧為暱銆傝€屽湪杩欎竴瓒嬪娍涓嬶紝鏁版嵁閲囬泦銆佹暟鎹暣鍚堛€佹暟鎹彁鐐笺€佹暟鎹寲鎺樸€佹暟鎹彂甯冭繖涓€閾炬潯涓殑浠讳綍涓€涓幆鑺傝鏀荤牬锛岄兘灏嗗鑷?ldquo;鐗典竴鍙戣€屽姩鍏ㄨ韩“鐨勫▉鑳佹晥鏋溿€?/div>
 
銆€銆€鏇翠负涓ラ噸鐨勬槸锛岃嫢浠ュけ鐪熺殑鏁版嵁鏉ヨ缁冪缁忕綉缁滅幇璞★紝灏嗗鑷翠粠鍐崇瓥閿欒鍒版暣涓暟鎹腑蹇冨畷鏈虹瓑涓€浜涘垪閲嶅ぇ瀹夊叏闂銆?/div>
 
銆€銆€鐭瘎
 
銆€銆€褰撳墠锛屾柊鍩哄缓娴疆涔嬩笅锛屽ぇ鏁版嵁涓嶄粎鏄暟瀛楀寲杞瀷鐨勯噸瑕侀┍鍔ㄥ姏锛屾洿鏄浆鍨嬩箣鍚庡悇琛屽悇涓氭暟瀛楀寲鍙戝睍鐨勯噸瑕佽浇浣撳拰宸ュ叿銆?/div>
 
銆€銆€涓庢鍚屾椂锛屼即闅忎竾鐗╀簰閫氫簰鑱旓紝“澶ф暟鎹畨鍏?rdquo;涔熶笉鍐嶆槸铏氭嫙涓栫晫鐨勫▉鑳侊紝鏇存槸鐜板疄涓栫晫鐨勫欢灞曘€傛暟鎹簱鐨勬毚闇插彲鑳藉鍥藉瀹夊叏銆佺ぞ浼氬畨鍏ㄣ€佷釜浜哄畨鍏ㄩ€犳垚涓嶅彲閫嗙殑褰卞搷銆?/div>
 
銆€銆€浠婂勾涓や細鏈熼棿锛?60钁d簨闀垮吋CEO鍛ㄩ缚绁庢彁鍑虹殑鍥涚偣寤鸿涓紝鍏朵腑绗笁鏉′篃鏇炬彁鍒拌寮哄寲澶ф暟鎹钩鍙板畨鍏紝瀹炵幇瀹夊叏鐨勫ぇ鏁版嵁鍗忓悓璁$畻銆傝冻瑙侊紝鍦ㄥ叏鐞冩暟瀛楀寲杞瀷鐨勫綋涓嬶紝“澶ф暟鎹畨鍏?rdquo;淇ㄧ劧鏃╁凡鎴愪负缃戠粶瀹夊叏鐨?ldquo;蹇呯瓟棰?rdquo;锛屼繚闅?ldquo;澶ф暟鎹畨鍏?rdquo;鎴愪负鎴戜滑鍙戝睍鏂板熀寤洪伩涓嶅紑鐨勯噸瑕佷竴鐜€?/div>
 
銆€銆€鑰屽湪搴斿涔嬬瓥涓婏紝涓庡簲瀵规柊鍨嬬綉缁滅┖闂村▉鑳佸悓鐞嗭紝鍦ㄧ淮鎶?ldquo;澶ф暟鎹畨鍏?rdquo;涓婏紝鎴戜滑鍚屾牱瑕佹敼鍙樺崟涓€銆佷紶缁熺殑缃戠粶闃叉姢鎬濈淮鍜屾墜娈碉紝灏芥棭鏋勫缓浠ユ暟鎹畨鍏ㄤ负瀵煎悜鐨勫叏鏂扮綉缁滈槻鎶や綋绯绘潵搴斿褰撳墠鐨勭綉缁滃▉鑳併€?/div>
绗笁鍗佸眾CIO鐝嫑鐢?/a>
娉曞浗甯冮浄鏂壒鍟嗗闄㈢澹彮鎷涚敓
鍖楄揪杞疎XIN缃戠粶绌洪棿涓嶪T瀹夊叏鍩虹璁よ瘉鍩硅
鍖楄揪杞疎XIN DevOps Professional璁よ瘉鍩硅
璐g紪锛歾hangwenwen