Kev ruaj ntseg digital tau nyuam qhuav tau txais cov cai tshiab, thiab cov tuam txhab ua cov ntaub ntawv daim npav yuav tsum tau hloov kho. Nrog rau kev tuaj txog ntawm version 4.0 ntawm Payment Card Industry Data Security Standard (PCI DSS), tsim los ntawm PCI Security Standards Council (PCI SSC), cov kev hloov pauv tseem ceeb thiab cuam tshuam ncaj qha rau kev tiv thaiv cov neeg siv khoom cov ntaub ntawv thiab yuav ua li cas cov ntaub ntawv them nyiaj khaws cia, ua tiav, thiab xa mus. Tab sis dab tsi tiag tiag hloov?
Qhov kev hloov pauv tseem ceeb yog qhov xav tau rau qib siab dua ntawm kev ruaj ntseg digital. Cov tuam txhab yuav tsum tau nqis peev rau hauv cov thev naus laus zis xws li kev ruaj ntseg encryption thiab ntau qhov kev lees paub tseeb. Txoj kev no yuav tsum muaj tsawg kawg yog ob yam pov thawj los lees paub tus neeg siv tus kheej ua ntej tso cai rau kev nkag mus rau cov tshuab, kev siv, lossis kev lag luam, ua rau hacking nyuaj dua, txawm tias cov neeg ua txhaum cai nkag mus rau tus password lossis cov ntaub ntawv tus kheej.
Ntawm cov authentication yam uas siv yog:
- Qee yam uas tus neeg siv paub : passwords, PINs, lossis cov lus teb rau cov lus nug txog kev nyab xeeb.
- Qee yam uas tus neeg siv muaj : lub cev tokens, SMS nrog cov lej pov thawj, cov ntawv pov thawj (xws li Google Authenticator), lossis daim ntawv pov thawj digital.
- Qee tus neeg siv yog : digital, ntsej muag, lub suab lossis iris paub txog biometrics.
"Cov txheej txheem kev tiv thaiv no ua rau kev nkag mus tsis tau yooj yim dua thiab ua kom muaj kev ruaj ntseg ntau dua rau cov ntaub ntawv rhiab," nws piav qhia.
"Hauv luv luv, peb yuav tsum ntxiv dag zog rau kev tiv thaiv cov neeg siv khoom los ntawm kev siv cov kev ntsuas ntxiv los tiv thaiv kev nkag mus tsis tau," piav qhia Wagner Elias, CEO ntawm Conviso, tus tsim tawm ntawm daim ntawv thov kev ruaj ntseg daws teeb meem. "Nws tsis yog ib qho teeb meem ntawm 'kev hloov kho thaum tsim nyog,' tab sis ntawm kev tiv thaiv kev tiv thaiv," nws hais ntxiv.
Raws li txoj cai tshiab, kev siv tau tshwm sim nyob rau hauv ob theem: thawj, nrog 13 qhov kev xav tau tshiab, muaj lub sijhawm kawg ntawm lub Peb Hlis 2024. Qhov thib ob, xav tau ntau dua, suav nrog 51 qhov kev xav tau ntxiv thiab yuav tsum tau ua kom tiav los ntawm Lub Peb Hlis 31, 2025. Hauv lwm lo lus, cov uas tsis npaj yuav raug nplua hnyav.
Txhawm rau hloov mus rau qhov yuav tsum tau ua tshiab, qee qhov kev ua haujlwm tseem ceeb suav nrog: kev siv cov phab ntsa thiab cov txheej txheem tiv thaiv zoo; siv encryption hauv cov ntaub ntawv xa mus thiab khaws cia; tsis tu ncua saib xyuas thiab taug qab qhov tsis txaus ntseeg nkag mus thiab ua haujlwm; tas li sim cov txheej txheem thiab cov txheej txheem los txheeb xyuas qhov tsis zoo; thiab tsim thiab tswj kom nruj cov ntaub ntawv kev ruaj ntseg txoj cai.
Wagner hais ntxiv tias, hauv kev xyaum, qhov no txhais tau tias txhua lub tuam txhab uas tswj hwm daim npav them nyiaj yuav tsum tau tshuaj xyuas nws tag nrho cov qauv kev ruaj ntseg digital. Qhov no suav nrog kev hloov kho cov tshuab, ntxiv dag zog rau cov kev cai sab hauv, thiab pab pawg cob qhia kom txo qis kev pheej hmoo. "Piv txwv li, lub tuam txhab e-lag luam yuav tsum tau ua kom ntseeg tau tias cov neeg siv khoom cov ntaub ntawv yog qhov kawg-rau-kawg encrypted thiab tsuas yog cov neeg siv tau tso cai nkag tau cov ntaub ntawv rhiab heev. Ib lub khw muag khoom, ntawm qhov tod tes, yuav tsum tau siv cov txheej txheem los saib xyuas kom tsis tu ncua rau kev dag ntxias thiab cov ntaub ntawv xau," nws piav qhia.
Cov tsev txhab nyiaj thiab fintechs tseem yuav xav tau ntxiv dag zog rau lawv cov txheej txheem kev lees paub, nthuav dav kev siv thev naus laus zis xws li biometrics thiab ntau qhov kev lees paub tseeb. "Lub hom phiaj yog ua kom kev lag luam muaj kev nyab xeeb dua yam tsis muaj kev cuam tshuam rau cov neeg siv khoom. Qhov no yuav tsum muaj kev sib npaug ntawm kev tiv thaiv thiab kev siv tau, qee yam kev lag luam nyiaj txiag tau txhim kho nyob rau xyoo tas los no," nws hais ntxiv.
Tab sis vim li cas qhov kev hloov no tseem ceeb heev? Nws tsis yog qhov exaggeration los hais tias kev dag ntxias digital tau dhau los ua qhov nyuaj. Cov ntaub ntawv ua txhaum cai tuaj yeem ua rau ntau lab daus las hauv kev poob thiab kev puas tsuaj rau cov neeg siv khoom tsis txaus ntseeg.
Wagner Elias ceeb toom: "Muaj ntau lub tuam txhab tseem tau txais kev rov ua dua tshiab, tsuas yog txhawj xeeb txog kev ruaj ntseg tom qab muaj kev tawm tsam. Qhov kev coj cwj pwm no yog kev txhawj xeeb, vim tias kev ua txhaum cai ntawm kev ruaj ntseg tuaj yeem ua rau poob nyiaj txiag tseem ceeb thiab kev puas tsuaj rau lub koom haum lub koob npe nrov, uas tuaj yeem zam nrog kev tiv thaiv kev tiv thaiv."
Nws hais ntxiv tias kom tsis txhob muaj cov kev pheej hmoo no, tus yuam sij yog yuav tsum tau txais kev coj ua Kev Nyab Xeeb Kev Nyab Xeeb los ntawm qhov pib ntawm daim ntawv thov kev txhim kho tshiab, kom ntseeg tau tias txhua theem ntawm kev txhim kho software twb muaj kev tiv thaiv. Qhov no ua kom muaj kev tiv thaiv kev tiv thaiv nyob rau txhua theem ntawm software lifecycle, uas yog tus nqi ntau dua li kev kho kev puas tsuaj tom qab muaj xwm txheej. "
Nws yog ib nqi sau cia hais tias qhov no yog ib tug loj zuj zus mus thoob ntiaj teb. Daim ntawv thov kev lag luam kev nyab xeeb, uas muaj nqis txog $ 11.62 nphom hauv 2024, xav tias yuav ncav cuag $ 25.92 nphom los ntawm 2029, raws li Mordor Intelligence.
Wagner piav qhia tias cov kev daws teeb meem zoo li DevOps tso cai rau txhua kab ntawm cov cai tsim nrog kev coj ua nyab xeeb, ntxiv rau cov kev pabcuam xws li kev nkag mus rau kev sim thiab txo qhov tsis zoo. "Kev soj ntsuam kev ruaj ntseg txuas ntxiv thiab kev sim automation tso cai rau cov tuam txhab ua raws li cov cai yam tsis muaj kev cuam tshuam txog kev ua haujlwm," nws hais ntxiv.
Tsis tas li ntawd, cov kev pabcuam tshwjxeeb yog ib qho tseem ceeb hauv cov txheej txheem no, pab cov tuam txhab hloov mus rau PCI DSS 4.0 tshiab cov cai. "Ntawm cov kev pabcuam uas xav tau tshaj plaws yog Kev Ntsuas Kev Ntsuas, Pab Pawg Liab, thiab kev ntsuas kev nyab xeeb thib peb, uas pab txheeb xyuas thiab kho qhov tsis zoo ua ntej lawv tuaj yeem siv los ntawm cov neeg ua phem," nws piav qhia.
Nrog rau kev dag ntxias digital dhau los ua qhov nyuaj, tsis quav ntsej cov ntaub ntawv kev ruaj ntseg tsis yog ib qho kev xaiv ntxiv lawm. "Cov tuam txhab lag luam uas nqis peev hauv kev tiv thaiv kev tiv thaiv kom muaj kev tiv thaiv ntawm lawv cov neeg siv khoom thiab ntxiv dag zog rau lawv txoj haujlwm ua lag luam. Kev ua raws li cov lus qhia tshiab yog, qhov tseem ceeb tshaj plaws, ib kauj ruam tseem ceeb rau kev tsim kom muaj kev nyab xeeb thiab txhim khu kev qha nyiaj txiag ib puag ncig," nws xaus lus.
