{"id":1540,"date":"2013-10-17T07:00:04","date_gmt":"2013-10-17T05:00:04","guid":{"rendered":"http:\/\/preventista.sk\/info\/?p=1540"},"modified":"2014-02-05T18:25:13","modified_gmt":"2014-02-05T17:25:13","slug":"kyber-nieco","status":"publish","type":"post","link":"https:\/\/preventista.sk\/info\/kyber-nieco\/","title":{"rendered":"Kyber-nie\u010do"},"content":{"rendered":"
\n

\u201ePanta rhei\u201c\u00a0 je Plat\u00f3nova skr\u00e1ten\u00e1 interpret\u00e1cia tvrdenia antick\u00e9ho filozofa Herakleita o\u00a0tom, \u017ee v\u0161etko sa neust\u00e1le men\u00ed. Slovami \u201eEverything counts\u201c nie\u010do podobn\u00e9 kon\u0161tatuje i synthpopov\u00e1 skupina Depeche Mode, na ktorej hudbe sme mnoh\u00ed vyrastali.\u00a0 Ka\u017ed\u00fd odbor postupne prech\u00e1dza zmenami, \u010d\u00edm sa upres\u0148uje aj pou\u017e\u00edvan\u00e9 n\u00e1zvoslovie.\u00a0 A v\u00a0ka\u017edom odvetv\u00ed sa n\u00e1jdu odborn\u00e9 i\u00a0menej odborn\u00e9 vyjadrenia.\u00a0 Bolo by v\u0161ak treba nahlas poveda\u0165, \u017ee v\u00fdraz \u201ekybernetick\u00e1 bezpe\u010dnos\u0165\u201c je pri\u010dasto pou\u017e\u00edvan\u00fd v\u00a0nevhodnom kontexte.\u00a0 Sk\u00fasme sa na tento a s\u00favisiace v\u00fdrazy pozrie\u0165 podrobnej\u0161ie.<\/span><\/p>\n<\/div>\n

Prizn\u00e1vam, \u017ee to pseudomodern\u00e9 skres\u013eovanie n\u00e1zvoslovia prefixom „cyber“ mi pr\u00edde rovnako sprofanovan\u00e9, ako buzzwordy typu „euro-nie\u010do“, „e-nie\u010do“ a „eko-nie\u010do“. Kybernetika je veda o riaden\u00ed dynamick\u00fdch syst\u00e9mov. Prienik kybernetickej bezpe\u010dnosti s bezpe\u010dnos\u0165ou inform\u00e1cii s\u00edce jestvuje, ale nie je z\u00e1sadn\u00fd.<\/p>\n

Dovol\u00edm si v tomto duchu upriami\u0165 pozornos\u0165 na medzin\u00e1rodn\u00fa normu ISO\/IEC 27032:2012 Information technology — Security techniques — Guidelines for cybersecurity. <\/i>\u00a0Je to ISO norma radu 27000, ktor\u00e1 sa zaober\u00e1 jednotliv\u00fdmi procesmi informa\u010dnej bezpe\u010dnosti. \u00a0Konkr\u00e9tne v\u00a0technickej norme 27032 s\u00fa op\u00edsan\u00e9 procesy, t\u00fdkaj\u00face sa po\u017eadovan\u00e9ho stavu kybernetickej bezpe\u010dnosti v\u00a0porovnan\u00ed s\u00a0bezpe\u010dnos\u0165ou inform\u00e1ci\u00ed, bezpe\u010dnos\u0165ou siet\u00ed, internetovou bezpe\u010dnos\u0165ou a\u00a0ochranou kritickej infra\u0161trukt\u00fary. Ale najm\u00e4 vysvet\u013euje vz\u0165ahy medzi kybernetickou bezpe\u010dnos\u0165ou a ostatn\u00fdmi typmi bezpe\u010dnosti.<\/p>\n

<\/h1>\n

ISO vs. STN<\/h1>\n

Na \u00favod p\u00e1r slov o\u00a0ISO. Pod skratkou ISO sa ukr\u00fdva ozna\u010denie svetovej normaliza\u010dnej organiz\u00e1cie (International Organization for Standardization), ktor\u00e1 vznikla 23. febru\u00e1ra 1947 a ihne\u010f uviedla do platnosti celosvetovo platn\u00e9 pravidl\u00e1 du\u0161evn\u00e9ho vlastn\u00edctva a obchodn\u00fdch normat\u00edvov. S\u00eddlom organiz\u00e1cie je \u017deneva vo \u0160vaj\u010diarsku. Hoci je ISO mimovl\u00e1dna organiz\u00e1cia, normy a dokumenty vydan\u00e9 v p\u00f4sobnosti ISO maj\u00fa v\u010faka medzin\u00e1rodn\u00fdm zmluv\u00e1m a spolupr\u00e1ci s n\u00e1rodn\u00fdmi \u0161tandardiza\u010dn\u00fdmi \u00faradmi \u010dasto pr\u00e1vnu silu z\u00e1konov.<\/p>\n

Sp\u00f4sobov, ako uplatni\u0165 ISO normu na Slovensku je nieko\u013eko.\u00a0 Ak je pr\u00edslu\u0161n\u00e1 technick\u00e1 norma dostato\u010dne zauj\u00edmav\u00e1 a\u00a0jestvuje opr\u00e1vnen\u00fd predpoklad, \u017ee norma n\u00e1jde \u0161ir\u0161ie uplatnenie v\u00a0slovenskej praxi, je prevzat\u00e1 do s\u00fastavy Slovensk\u00fdch technick\u00fdch noriem vo forme \u00fapln\u00e9ho prekladu do sloven\u010diny. To je najzlo\u017eitej\u0161\u00ed z mo\u017en\u00fdch sp\u00f4sobov,\u00a0 preto\u017ee preklad normy je n\u00e1ro\u010dn\u00e1 \u010dinnos\u0165, podliehaj\u00faca ist\u00fdm pravidl\u00e1m. V\u00a0skupine odborn\u00edkov, \u010dlenov technickej komisie, ktor\u00ed ju dostan\u00fa na preklad, sa mus\u00ed predov\u0161etk\u00fdm n\u00e1js\u0165 \u00fapln\u00e1 zhoda v\u00a0preklade n\u00e1zvoslovia. A\u00a0po preklade jednotliv\u00fdch kapitol e\u0161te cel\u00fd n\u00e1vrh prekladu podlieha povinnej oponent\u00fare na jazykovednom \u00fastave, \u010do mnohokr\u00e1t vr\u00e1ti cel\u00fd preklad na sam\u00fd za\u010diatok.<\/p>\n

Jednoduch\u0161\u00edm sp\u00f4sobom, ako uplatni\u0165 technick\u00fa normu na Slovensku je jej prevzatie do s\u00fastavy STN bez prekladu, len s\u00a0tzv. n\u00e1rodn\u00fdm predhovorom. V\u00a0takomto pr\u00edpade zostane text samotnej normy v\u00a0origin\u00e1li, teda v\u00a0angli\u010dtine a\u00a0k\u00a0norme je pridan\u00e1 \u0161peci\u00e1lna \u201eko\u0161ie\u013eka\u201c. Slovensk\u00fd \u00fastav technickej normaliz\u00e1cie (S\u00daTN) v\u0161ak u\u017e na tak\u00fato prevzat\u00fa normu nazer\u00e1, ako keby ju vydal on s\u00e1m.<\/p>\n

Tret\u00ed sp\u00f4sob je za\u010da\u0165 jednoducho bezodkladne uplat\u0148ova\u0165 po\u017eiadavky pr\u00edslu\u0161nej origin\u00e1lnej technickej normy – nez\u00e1visle od toho, \u010di je prevzat\u00e1 do s\u00fastavy STN. Ve\u010f Slovensko je predsa jedn\u00fdm z\u00a0hlasuj\u00facich \u010dlenov\u00a0 svetovej normaliza\u010dnej organiz\u00e1cie. Obava, \u017ee by S\u00daTN vydal normu, ktor\u00e1 by bola v\u00a0rozpore s\u00a0niektorou platnou ISO normou je zbyto\u010dn\u00e1, preto\u017ee na to, aby\u00a0 sa nie\u010do tak\u00e9 prihodilo aj ne\u00famyselne,\u00a0 jestvuj\u00fa funguj\u00face mechanizmy.<\/p>\n

 <\/p>\n

Syst\u00e9m riadenia informa\u010dnej bezpe\u010dnosti<\/h1>\n

Ke\u010f\u017ee v\u00a0tomto \u010dl\u00e1nku diskutovan\u00e1 norma je s\u00fa\u010das\u0165ou rady noriem ISO 27 00x, na tomto mieste by bolo vhodn\u00e9 k\u00a0nim poveda\u0165 nieko\u013eko slov.\u00a0 A\u00a0naozaj len nieko\u013eko, preto\u017ee ISO 27000 je (a bude) t\u00e9ma na samostatn\u00fd \u010dl\u00e1nok. \u00a0ISO\/IEC 27000 je rad noriem, \u00a0ktor\u00fdm s\u00fa definovan\u00e9 po\u017eiadavky na syst\u00e9m riadenia bezpe\u010dnosti inform\u00e1ci\u00ed.\u00a0 ISO 27001 je samostatn\u00e1 \u0161pecifik\u00e1cia syst\u00e9mu bezpe\u010dnosti inform\u00e1ci\u00ed \u00a0(tzv. Information Security Management System – ISMS). \u00a0ISO 27002 s\u00fa odpor\u00fa\u010dania pre implement\u00e1ciu ISMS.<\/p>\n

Popis ucelen\u00e9ho radu noriem 27k n\u00e1jdete napr\u00edklad na adrese:\u00a0 www.iso27001security.com<\/a><\/p>\n

 <\/p>\n

<\/h1>\n

ISO 27032 \u2013 kybernetick\u00e1 bezpe\u010dnos\u0165<\/h1>\n

ISO\/IEC 27032:2012 Information technology — Security techniques — Guidelines for cybersecurity\u00a0 znamen\u00e1 v\u00a0preklade \u00a0\u201eInforma\u010dn\u00e9 technol\u00f3gie — Bezpe\u010dnostn\u00e9 techniky — \u00a0N\u00e1vody pre kybernetick\u00fa bezpe\u010dnos\u0165 \u201e<\/p>\n

Ako u\u017e z\u00a0n\u00e1zvu vypl\u00fdva,\u00a0 dokument je ur\u010den\u00fd ved\u00facim a riadiacim zamestnancom, \u0161pecialistom a odborn\u00edkom pracuj\u00facim v\u00a0oblasti bezpe\u010dnosti informa\u010dn\u00fdch syst\u00e9mov, ako odborn\u00e1 publik\u00e1cia,\u00a0 obsahuj\u00faca interpret\u00e1ciu pr\u00edstupu k zachovaniu d\u00f4vernosti, integrity a dostupnosti inform\u00e1ci\u00ed v kybernetickom priestore.\u00a0 Pri\u010dom kybernetick\u00fd priestor \u00a0(cyberspace)<\/b> je definovan\u00fd ako\u00a0 komplexn\u00e9 virtu\u00e1lne prostredie, vypl\u00fdvaj\u00face z interakcie \u013eud\u00ed, softv\u00e9ru a slu\u017eieb na internete vykon\u00e1vanej pomocou technol\u00f3gi\u00ed, zariaden\u00ed a siet\u00ed k nemu pripojen\u00fdch, nez\u00e1visle od ich fyzickej formy.<\/p>\n

Zd\u00e1 sa V\u00e1m to m\u00e4t\u00face? Nie je to a\u017e tak\u00e9 nepochopite\u013en\u00e9, ak si jednotliv\u00e9 formul\u00e1cie nakresl\u00edte vo forme vz\u00e1jomn\u00e9ho prieniku jednotliv\u00fdch dom\u00e9n informa\u010dnej bezpe\u010dnosti. Nasleduj\u00faci obr\u00e1zok vz\u0165ahu medzi kybernetickou bezpe\u010dnos\u0165ou a\u00a0ostatn\u00fdmi dom\u00e9nami bezpe\u010dnosti je uveden\u00fd aj v\u00a0citovanej norme.<\/p>\n

 <\/p>\n

\"kyber_nieco\"<\/a><\/p>\n

 <\/p>\n

Z\u00e1ver<\/h1>\n

Kybernetick\u00e1 bezpe\u010dnos\u0165 je jednou zo \u0161pecifick\u00fdch subdom\u00e9n informa\u010dnej bezpe\u010dnosti.<\/p>\n

Odborn\u00e1 discipl\u00edna informa\u010dn\u00e1 bezpe\u010dnos\u0165 sa <\/b>zaober\u00e1 ot\u00e1zkou zaru\u010denia d\u00f4vernosti, integrity, dostupnosti a sledovate\u013enosti informa\u010dn\u00fdch akt\u00edv v\u0161eobecne, zatia\u013e \u010do kybernetick\u00e1 bezpe\u010dnos\u0165 <\/b>\u00a0sa venuje bezpe\u010dnosti iba ur\u010ditej \u010dasti informa\u010dn\u00fdch akt\u00edv, konkr\u00e9tne t\u00fdch, ktor\u00e9 s\u00fa\u00a0 sprac\u00favan\u00e9 vo virtu\u00e1lnom priestore, zvanom kybernetick\u00fd priestor<\/b>.<\/p>\n

 <\/p>\n

Ivan Makat\u00fara<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

\u201ePanta rhei\u201c\u00a0 je Plat\u00f3nova skr\u00e1ten\u00e1 interpret\u00e1cia tvrdenia antick\u00e9ho filozofa Herakleita o\u00a0tom, \u017ee v\u0161etko sa neust\u00e1le men\u00ed. Slovami \u201eEverything counts\u201c nie\u010do […]<\/p>\n","protected":false},"author":8,"featured_media":1981,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[4],"tags":[32,96,98,97],"class_list":["post-1540","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-itbezp","tag-bezpecnost","tag-iso","tag-kybernetika","tag-stn"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t