{"id":11713,"date":"2023-12-26T16:29:40","date_gmt":"2023-12-26T08:29:40","guid":{"rendered":"https:\/\/starshot.tw\/?p=11713"},"modified":"2023-12-26T17:25:55","modified_gmt":"2023-12-26T09:25:55","slug":"plastic-industry-woodpecker-xvr","status":"publish","type":"post","link":"https:\/\/starshot.tw\/2023\/12\/plastic-industry-woodpecker-xvr\/","title":{"rendered":"\u5851\u81a0\u5de5\u696d\u6210\u529f\u5c0e\u5165 Woodpecker XVR\uff0c\u6253\u9020 OT \u7aef\u5168\u65b9\u4f4d\u7aef\u9ede\u9632\u79a6\uff01"},"content":{"rendered":"\n
\"\"<\/a><\/figure>\n\n\n\n

OVERVIEW<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

\u9019\u6bb5\u671f\u9593\u6211\u5011\u4e4b\u6240\u4ee5\u4e0d\u5e38\u807d\u5230\u5de5\u63a7\u7cfb\u7d71\u653b\u64ca\u7684\u65b0\u805e\uff0c\u662f\u56e0\u70ba\u9019\u985e\u653b\u64ca\u901a\u5e38\u4e0d\u6703\u5b8c\u5168\u516c\u958b\u5831\u5c0e\u3002\u800c\u9019\u80cc\u5f8c\u66f4\u6df1\u4e00\u5c64\u7684\u539f\u56e0\u662f\u2014\u2014\u5de5\u63a7\u7cfb\u7d71\u653b\u64ca\u901a\u5e38\u662f\u654f\u611f\u4e14\u91cd\u8981\u7684\u4e8b\u4ef6\uff0c\u8a31\u591a\u653b\u64ca\u53ef\u80fd\u88ab\u8996\u70ba\u570b\u5bb6\u5b89\u5168\u6216\u5546\u696d\u6a5f\u5bc6\u3002<\/p>\n\n\n\n

\u7136\u800c\uff0c\u6839\u64daClaroty \u65bc2023\u7684\u5831\u544a\uff0c\u5728\u904e\u53bb 12 \u500b\u6708\u4e2d\uff0c54%\u7684\u5de5\u696d\u4f01\u696d\u906d\u53d7\u4e86\u52d2\u7d22\u8edf\u9ad4\u653b\u64ca\uff0c\u5f71\u97ff\u4e86\u5176OT\u7cfb\u7d71\uff0c\u7121\u8ad6\u662f\u76f4\u63a5\u653b\u64caOT\u7cfb\u7d71\u6291\u6216\u53d7\u5230IT\u7cfb\u7d71\u653b\u64ca\u5f71\u97ff\u3002\u8207Claroty 2021 \u5e74\u7684\u5831\u544a\u76f8\u6bd4\uff0c\u5c0d OT \u7cfb\u7d71\u7684\u653b\u64ca\u5f71\u97ff\u986f\u8457\u589e\u52a0\uff0c\u7576\u6642 47% \u7684\u516c\u53f8\u53d7\u5230\u52d2\u7d22\u8edf\u9ad4\u5f71\u97ff\u5176\u904b\u71df\u3002<\/p>\n\n\n\n

\u6211\u5011\u53ef\u4ee5\u5f97\u77e5\u5de5\u63a7\u7cfb\u7d71\u53d7\u5230\u7684\u653b\u64ca\u548c\u5a01\u8105\u662f\u4e0d\u65b7\u589e\u52a0\u7684\u8da8\u52e2\u3002\u81ea\u5de5\u63a7\u7cfb\u7d71\u8b8a\u5f97\u66f4\u52a0\u9023\u63a5\u548c\u667a\u80fd\u5316\u4ee5\u4f86\uff0c\u653b\u64ca\u8005\u5c0d\u9019\u4e9b\u7cfb\u7d71\u7684\u8208\u8da3\u4e5f\u9010\u6f38\u589e\u52a0\u3002\u9019\u4e9b\u653b\u64ca\u53ef\u80fd\u5305\u62ec\u52d2\u7d22\u8edf\u9ad4\u653b\u64ca\u3001\u60e1\u610f\u8edf\u9ad4\u5165\u4fb5\u3001\u5de5\u696d\u9593\u8adc\u884c\u70ba\u7b49\u3002<\/p>\n\n\n\n

CHALLENGE<\/p>\n\n\n\n

\u5728\u672c\u6b21\u6848\u4f8b\u4e2d\uff0c\u5ba2\u6236\u4f5c\u70ba\u6df1\u8015\u53f0\u7063\u4e09\u5341\u9918\u5e74\u7684\u77f3\u5316\u7522\u696d\uff0c\u5176\u5ee0\u5340\u6563\u4f48\u5168\u53f0\u3001\u6a5f\u53f0\u8a2d\u5099\u8207\u4eba\u529b\u8cc7\u6e90\u66f4\u662f\u4e0d\u8a08\u5176\u6578\uff0c\u5176 CIM \u90e8\u9580\u7ba1\u7406\u4e86\u6240\u6709\u7684\u7aef\u9ede\u5305\u62ec\u500b\u4eba\u96fb\u8166\u3001Server\uff0c\u5982\u679c\u55ae\u4e00\u7aef\u9ede\u6210\u70ba\u7834\u53e3\uff0c\u90a3\u9ebc\u6574\u500b OT \u90e8\u9580\u7684\u71df\u904b\u90fd\u6703\u53d7\u5230\u5f71\u97ff\u3001\u751a\u81f3\u7834\u58de\uff0c\u56e0\u6b64\u5ba2\u6236\u5e0c\u671b\u80fd\u52a0\u5f37OT \u7aef\u8cc7\u5b89\u9632\u79a6\u80fd\u529b\u3002<\/p>\n\n\n\n

\u73fe\u5728\u5e02\u9762\u4e0a\u7684 EDR\u3001NDR\u3001XDR \u7522\u54c1\u5927\u591a\u662f\u91dd\u5c0d IT \u7aef\uff0cOT \u7aef\u7684 SOC \u89e3\u6c7a\u65b9\u6848\u53ef\u4ee5\u8aaa\u662f\u5c11\u4e4b\u53c8\u5c11\u4e14\u50f9\u683c\u9ad8\u6602\uff0c\u4e14\u5ba2\u6236\u7684\u9700\u6c42\u4e0d\u53ea\u662f\u9700\u8981\u91dd\u5c0d\u7aef\u9ede\u9032\u884c\u9632\u79a6\u7ba1\u63a7\uff0c\u9084\u9700\u8981\u7d0d\u7ba1\u5176\u9ad8\u9054 30 \u500b\u5ee0\u5340\u3001\u4e0d\u540c\u5ee0\u724c\u70ba\u6578\u773e\u591a\u7684\u9632\u706b\u7246\u8cc7\u6599\u3002 \u5728\u9019\u6a23\u7684\u60c5\u6cc1\u4e0b\u9084\u9700\u8981\u505a\u5230\u65e5\u8a8c\u7ba1\u7406\uff0c\u5305\u62ec\u8a18\u9304\u7cfb\u7d71\u3001\u61c9\u7528\u7a0b\u5f0f\u6216\u7db2\u8def\u8a2d\u5099\u4e0a\u767c\u751f\u7684\u5404\u7a2e\u6d3b\u52d5\u3002\u7136\u800c\u9019\u4e9b\u9632\u706b\u7246\u5206\u5225\u70ba\u4e0d\u540c\u7684\u5ee0\u724c\uff0c\u5404\u81ea\u5206\u6790\u7684\u5e73\u53f0\u4e5f\u90fd\u4e0d\u540c\uff0c\u5047\u4f7f\u4f7f\u7528 SIEM \u5e73\u53f0\u5c0d\u6240\u6709\u9632\u706b\u7246\u9032\u884c LOG\u641c\u96c6\u518d\u9032\u884c\u8cc7\u6599\u5206\u6790\uff0c\u9019\u5c0d\u65bc CIM \u90e8\u9580\u4f86\u8aaa\u53c8\u6709\u4e9b\u6bba\u96de\u7109\u7528\u725b\u5200\u4e86\u5c0d\u5427\uff1f\u767c\u751f\u554f\u984c\u6642\u53c8\u96e3\u4ee5\u505a\u5230\u5373\u6642\u97ff\u61c9\uff0c\u6574\u9ad4\u7dad\u8b77\u6210\u672c\u53c8\u9ad8\u7684\u5687\u4eba\u2026\u2026<\/p>\n\n\n\n

SOLUTION<\/p>\n\n\n\n

\n
\n
\"\"<\/a>
\u9ede\u64ca\u9032\u5165\u7522\u54c1\u9801\u9762<\/figcaption><\/figure><\/div><\/div>\n\n\n\n
\n

\u5544\u6728\u79d1\u6280 (Woodpecker Technology)\u662f\u53f0\u7063\u65b0\u5275\u8cc7\u5b89\u516c\u53f8\uff0c\u7814\u767c\u7e3d\u90e8\u4f4d\u65bc\u65b0\u7af9\uff0c\u7531\u4e00\u7fa4\u8cc7\u5b89\u5c08\u5bb6\u6240\u7d44\u6210\uff0c\u70ba\u5354\u52a9\u5f9e\u50b3\u7d71\u7522\u696d\u5230\u79d1\u6280\u65b0\u5275\u7684\u5404\u7a2e\u4f01\u696d\uff0c\u5f37\u5316\u5176\u8cc7\u5b89\u5a01\u8105\u7375\u6355\u80fd\u529b\uff0c\u5168\u5fc3\u5168\u610f\u6295\u5165\u8cc7\u5b89\u9818\u57df\u3002<\/p>\n<\/div>\n<\/div>\n\n\n\n

\u661f\u64ca\u79d1\u6280\u4ee3\u7406\u7684 Woodpecker XVR \u662f\u4e00\u5957\u5efa\u69cbSOC(Security Operation Center)\u6838\u5fc3\u8edf\u9ad4\uff0c\u5305\u542b\u7db2\u8def\u9632\u8b77(NDR)\u3001\u7aef\u9ede\u9632\u8b77(EDR)\u3001\u4f7f\u7528\u8005\u884c\u70ba\u5206\u6790(UEBA)\u3001\u8207\u5b89\u5168\u8cc7\u8a0a\u4e8b\u4ef6\u7ba1\u7406(SIEM)\u7684\u57fa\u790e\u529f\u80fd\u3002\u540c\u6642\u662f\u5e02\u9762\u4e0a\u552f\u4e00\u63d0\u4f9b\u5b8c\u6574 MDR \u670d\u52d9\u7684\u512a\u826f\u7522\u54c1\uff01<\/strong><\/mark><\/p>\n\n\n\n