مديريت ريسك امنيتي در تجهيزات سخت افزاري

Security Risks Management in Hardware

دﻧﯿﺎي ﺷﮕﻔﺖ اﻧﮕﯿﺰ ﺗﮑﻨﻮﻟﻮژي در ﻋﺼﺮ ﻓﻌﻠﯽ ﻓﻮاﯾﺪ و ﺗﻬﺪﯾﺪات ﺧﺎص ﻣﺮﺑﻮط ﺑﻪ ﺧﻮد را دارا اﺳﺖ. ﺗﻼش ﻣﺘﺨﺼﺼﯿﻦ در ﻋﺮﺻﻪ آي ﺗﯽ ﺑﻬﺮه وري ﻣﻔﯿﺪ ﺗﻮام ﺑﺎ ﺗﻬﺪﯾﺪات ﻣﺴﺘﻘﯿﻢ و ﻏﯿﺮ ﻣﺴﺘﻘﯿﻢ ﻣﯽ ﺑﺎﺷﺪ. ﺳﻌﯽ آﻧﻬﺎ در اﻣﺎن ﻣﺎﻧﺪن از ﺗﻬﺪﯾﺪات ﻣﻮﺟﻮد و ﺑﺎﻻ ﺑﺮدن ﺿﺮﯾﺖ اﻣﻨﯿﺘﯽ در ﺳﯿﺴﺘﻢ ﻫﺎ اﺳﺖ. آﻧﻬﺎ ﻣﯽ داﻧﻨﺪ ﻋﻼوه ﺑﺮ ﺗﻤﻬﯿﺪات اﻣﻨﯿﺘﯽ در زﻣﯿﻨﻪ ﻫﺎي ﻧﺮم اﻓﺰاري و ﺳﺨﺖ اﻓﺰاري ﻧﻘﺶ ﻋﻮاﻣﻞ اﻧﺴﺎﻧﯽ ﻧﯿﺰ ﻧﻘﺶ ﺑﺴﺰاﺋﯽ در ﺣﻔﻆ اﻃﻼﻋﺎت و ﺻﺤﺖ آﻧﻬﺎ داراﺳﺖ. ﺑﺮاي ﺗﺎﻣﯿﻦ اﻣﻨﯿﺖ ﺑﺮ روي ﯾﮏ ﺷﺒﮑﻪ، ﯾﮑﯽ از ﺑﺤﺮاﻧﯽ ﺗﺮﯾﻦ و ﺧﻄﯿﺮﺗﺮﯾﻦ ﻣﺮاﺣﻞ، ﺗﺎﻣﯿﻦ اﻣﻨﯿﺖ دﺳﺘﺮﺳﯽ و ﮐﻨﺘﺮل ﺗﺠﻬﯿﺰات ﺷﺒﮑﻪ اﺳﺖ. ﺗﺠﻬﯿﺰاﺗﯽ ﻫﻤﭽﻮن ﻣﺴﯿﺮﯾﺎب، ﺳﻮﺋﯿﭻ ﯾﺎ ﻓﺎﯾﺮوال و ...، ﺑﺎ ﺗﻮﺟﻪ ﺑﻪ اﯾﻨﮑﻪ ﺗﺠﻬﯿﺰات ﺳﺨﺖ اﻓﺰاري ﻣﺘﻨﻮع ﻣﯽ ﺑﺎﺷﺪ. در اﯾﻦ ﻣﻘﺎﻟﻪ ﺳﻌﯽ ﺑﺮ آﺷﻨﺎﯾﯽ ﺑﺎ ﯾﮑﺴﺮي از ﺳﯿﺴﺘﻢ ﻫﺎ و ماژول هي سخت افزاري و انواع ريسك در آنها و نحوه برخورد با اين ريسك در آنها و نحوه برخورد با اين ريسك ها است. در اين مقاله ما تنها به بررسي ماژول اﻣﻨﯿﺘﯽ ﺳﺨﺖ اﻓﺰار، دﺳﺘﮕﺎه ﺧﻮدﭘﺮداز، ﻣﺤﺪوده اﻣﻨﯿﺘﯽ و ﻣﺪﯾﺮﯾﺖ ﯾﮑﭙﺎرﭼﻪ ﺗﻬﺪﯾﺪﺧﻮاﻫﯿﻢ ﭘﺮداﺧﺖ.

The amazing world of technology in the present age has its own specific benefits and threats. Experts' efforts in the field of IT are a useful tool for dealing with direct and indirect threats. They try to stay safe from existing threats and increase security in systems. They know that in addition to security measures in hardware and software, the role of human factors is also crucial in maintaining information and accuracy. To ensure security on a network, one of the most critical steps is to provide security of access and control of network equipment. Equipment such as routers, switches or firewalls, etc., due to the variety of hardware equipment. In this study, we will try to introduce a number of hardware systems and modules and types of risks in them and how to deal with these risks. In this study, we will only address Hardware security module, Automated Teller Machine, Demilitarized Zone and Unified threat management.