Cyber ​​​​security matanho ekudzivirira iyo Paris 2024 Olimpiki

NaPaolo Cecchi, Sales Director Mediterranean Dunhu reSentinelOne 

NeParis 2024 Summer Olympics yave kusvika, varongi vari mubishiwo negadziriro pacyber pamberi sezvo tiri kutaura nezve chiitiko chepasirese chinopa nzvimbo dzakakura dzekurwisa. MaOlympics e2024 neParalympics anotarisirwa kukwezva vataridzi 9,7 miriyoni munzvimbo makumi mana dzepamutemo uye, nepo France ichange iine chitarisiko chepasirese, zvese zvekuronga uye kuitisa Mitambo zvinoda kutariswa kuchengetedzwa kwecyber. Muchinyorwa chino tinoongorora kumwe kutyisidzira uye matekiniki anogona kukanganisa kuchengetedzwa kwedhijitari kweMitambo yegore rino.

Attack history

Kukwikwidzana kwevatambi kunoitika munhandare dzeOlympic, asi dambudziko riri pakati pevapambi nemapoka ezvokuchengetedza rinogona kuitika panguva imwe chete. Pave paine kutyisidzira kwakawanda kwecyber kwakaitika mumakore apfuura, heino mienzaniso kubva muzvinyorwa zvinomwe zvekupedzisira:

  • 2008 Summer Olympics (Beijing, China)

Mitambo iyi yakaunza chiitiko chekutanga cheyakaipa cyber chiitiko panguva yeOlympics, apo mushandirapamwe unozivikanwa se "Operation Shady Rat" wakanangana neInternational Olympic Committee (IOC) nemamwe makomiti eOlympic. Kuvhiya kwakashata kunobatsira kwakaitika, kusanganisira spear phishing campaigns.

  • 2012 Summer Olympics (London, UK)

Muna 2012, hackers vakawedzera kuoma kwekutyisidzira kwavo. Pamamiriyoni mazana maviri negumi nemaviri ekurwisa cyberattacks akaitwa panguva yechiitiko, kurwisa kukuru kweDDoS (Distributed Denial of Service) kwakatora maminetsi makumi mana kwakakonzera masisitimu emagetsi eOlympic Park kuenda haywire pazuva rechipiri reMitambo. 

  • 2014 Winter Olympics (Sochi, Russia)

Pamberi peSochi, zviratidzo zvakabuda zvakazivisa kuchengetedzwa kwemakomputa, uye pasina nguva, zvakava pachena kuti matsotsi akananga kumasangano akati wandei ane chekuita neOlympics. Dhipatimendi reUS State rakapa yambiro ichizivisa vafambi vekuUS nezve kutyisidzira kwecybersecurity. 

  • 2016 Summer Olympics (Rio de Janeiro, Brazil)

Kunyangwe zviziviso zvakaonekwa nezvikwata zvekuchengetedza Mitambo isati yatanga, masangano akabatana akatambura kwenguva yakareba (540 Gbps) DDoS kurwiswa mumwedzi inotungamira kuMitambo. Uyezve, mushandirapamwe wakaitwa neAPT28, boka rekupindira rakabatana neRussia Military Intelligence (GRU), yakaburitswazve mwedzi miviri mushure meMitambo. 

  • 2018 Winter Olympics (Pyeongchang, South Korea)

Mhemberero yekuvhurwa kweMitambo yakaona kurwiswa kwakakosha kwakakanganisa masisitimu emakomputa, kusanganisira Wi-Fi, hofisi yematikiti uye webhusaiti yepamutemo. 

  • 2021 Summer Olympics (Tokyo, Japan)

MaOlympics eTokyo, akarongwazve kwegore nekuda kweCCIDID-19 denda, aratidza chinangwa chine mubairo chekurwisa cyberattacks. Chiitiko ichi chakaona 450 miriyoni kutyisidzira kwecyber, nhamba yakapetwa kaviri nehafu kupfuura nhamba yekurwiswa kwakataurwa panguva ye2012 London Olympics. 

  • 2022 Winter Olympics (Beijing, China)

Pamberi peChando Olympics, FBI yakakurudzira kuti vatambi vashandise nharembozha dzenguva pfupi pachinzvimbo chemidziyo yavo, yambiro pamusoro pekushandiswa kwedata remunhu pamidziyo yenguva pfupi iyi.

Kunzwisisa geopolitical kupokana pakati pevatori vechikamu veOlympic

Geopolitical kusawirirana kwakaisa mumvuri pamusoro peMitambo yeOlympic, ichikurudzira zvakanyanya simba rechiitiko uye cybersecurity scenario, uye maOlympics anowanzova nhandare yehondo chaiyo. 

Mhedzisiro yehondo yeRussia muUkraine

Pakati pa2018 na2022, Russia yakatarisana nekurambidzwa kweOlympic izvo zvaitadzisa kupinda pasi pemureza wenyika nekuda kwenyaya yedoping yaitsigirwa nehurumende yaisanganisira vatambi vekuRussia panguva yemitambo yeSochi. Kurambidzwa uku kwakafanana nesarudzo yeIOC neWorld Anti-Doping Agency (WADA) yakaitwa muna 2014, iyo inoenderera mberi mukurambidzwa kwemitambo yeOlympics yeParis 2024 yakatemerwa Russia neBelarus zvichitevera kupinda kweUkraine muna 2022. Kumiswa kweOlympic Committee kweRussia kwakakonzerwa utariri masangano emitambo muna vakagarwa Ukrainian kumatunhu. Kunyange zvazvo vatambi veRussia neBelarusian vanobvumirwa neIOC kukwikwidza se "Neutral Individual Athletes," makakatanwa anomutsa kunetseka pamusoro pekugona kutsiva cyber operations. Uyezve, kutsigira kweFrance kuUkraine kunowedzera mukana wekuti Mitambo ichava chinangwa cheRussia uye / kana Belarusian cyber operations kukanganisa mukurumbira weFrance pasi rose.

Mhedzisiro yekukonana kwemuganhu pakati peAzerbaijan neArmenia

Kupindira kweFrance mugakava riri pakati peAzerbaijan neArmenia kwave kushorwa neAzerbaijan nekuda kwekurerekera kwairi kuita Armenia. Muna Mbudzi 2023, Vignium, muchengeti wedhijitari wenyika yeFrance, akabatanidza yambiro yekurwisa disinformation yeMitambo yeOlympic yeParis 2024 kune vanoshanda muAzerbaijan. 

Njodzi dzine chokuita neOlympic podium

Mitambo iri kuuya inogona kusimbisa mashandiro ecyber akawanda ane hutsinye, kubva pakumisa mishandirapamwe, kuburikidza nepesvedzero, malware uye kubiwa kwedata, kune avo vakatarisa kukanganisa nekurwiswa kweDDoS. MaHackers anobva ashandisa mukurumbira, achinangana nevakabatwa vakasiyana, kubva kuruzhinji kuenda kune vanobatana uye vanoronga. Mishandirapamwe inobhadhara inokwezva vataridzi ingangove ine hutsinye maapuro uye mawebhusaiti anoteedzera kutengesazve, matiketi kana kubheja mapuratifomu.

Ndedzipi mhinduro dzakagamuchirwa kuchengetedza Mitambo yeParis 2024?

Mhinduro dzakawanda dzakatoitwa, pakati peizvi, iyo IT kuchengetedza agency ANSSI ichabatana nemumwe wayo wekuJapan, iyo NISC (National Center of Incident Readiness uye Strategy yeCybersecurity) kukurudzira kuchinjana kwezivo uye kupindura kutenda kune zviitiko zvakawanikwa mune dzimwe. zviitiko zvemitambo mikuru.

Iyo COJO (Komisheni Inoronga yeMitambo yeOlympic) yakatangawo cybersecurity zano rakavakirwa pambiru ina: dzidzo, kudzidziswa, kutarisira uye kubatana. Zvimwe zvakakosha zvezvidziviriro zvakagamuchirwa ndezvi:

  • Zviitiko zvekuzivisa - Franz Regul, CISO yeParis 2024 Mitambo, inoratidza kuti misangano yekuzivisa nezve cyber iri kuitika kurwisa phishing, spam uye hutsotsi hwepamhepo inova nzira yekutanga yekukanganisa mu80% yecyberattacks.
  • Chengetedzo Operations Center (SOC) - Iyo ichangoburwa SOC inotarisisa ese maOlympic dijitari ecosystems. Kusvika pari zvino, ANSSI yagovera mamirioni gumi nemanomwe emaeuro kumasevhisi eSOC, ayo anotenderedza zviuru gumi nezviviri zvemabasa akagoverwa.
  • AI-yakavakirwa maturusi - Iyo SOC ichashandisa AI-yakavakirwa maturusi kuona fungidziro kana hutsinye chiitiko uye kuronga mhinduro yechiitiko.
  • Olympic Management System (OMS) - OMS inokwanisa kuwana zviitiko uye zvikumbiro zvese zvinoendeswa kuSevhisi National des Enquêtes Administratives de Sécurité (SNEAS) kuti itenderwe kwekupedzisira uye kuburitsa mabheji.
  • Olympic Diffusion System (ODS) - Iyo app yakatsaurirwa kuparadzira chaiyo-nguva ruzivo nemhedzisiro kune midhiya nevaoni kudzivirira nhema.
  • Mamiriro ekutengesa matikiti akavandudzwa - Mutengi ane maawa makumi mana nemasere chete ekutenga tikiti mushure mekusarudzwa nekudhirowa. Matikiti makumi matatu chete anogona kutengwa paakaundi uye zvese zvekutengesa zvinofanirwa kuitwa kuburikidza newebhusaiti yepamutemo kudzivirira manyepo. Matikiti 48% dhijitari uye anotumirwa kune vatengi mavhiki mashoma chiitiko chisati chaitwa.

Zvidzidzo zveCybersecurity zvakadzidzwa kubva kare

Kugadzirira kutyisidzira kwecybersecurity kunosanganisira nzira yakasarudzika inosanganisa kuchengetedzwa kwezvivakwa, kuchengetedza data uye kubatana.

Infrastructure kuchengetedza neAI-powered technologies

Kune network yakaoma yemasisitimu anotonga zvese kubva pakugova kusvika pakuchengeta nguva, kubva pakutepfenyura kusvika pakutenga matikiti. Kudzivirirwa kwezvivakwa kunoda kugamuchirwa kwepamusoro data kuchengetedza mhinduro, kusanganisira intrusion yekuona masisitimu, firewall uye chaiyo-nguva yekutarisisa maturusi kuburikidza nekuchengetedza mashandiro enzvimbo (SOCs). Makamera akabatanidzwa neAI achashandiswawo kutarisa nzvimbo dzeveruzhinji uye kunyevera zviremera kune zviratidzo zvekufungira chiitiko.

Dziviriro yedata uye kuvanzika uye mibatanidzwa yepasi rose

Kudzivirirwa kwedata, kuvanzika uye GDPR kwakakosha uye kunoda kuitwa kwematanho akasimba senge encryption yakasimba, kudzora kwekuwana uye kuongorora kwekutyora kwedata. Kudyidzana pakati pemasangano epasi rese akasiyana, anosanganisira makambani ekuchengetedza cybersecurity, masangano ehurumende uye masangano emitambo, kwakakosha zvakare. 

Simulation uye kuronga mhinduro

GICAT (Boka reFrench Industries for Defense and Land and Air Security) yakasimbisa bvunzo dzinosvika mabhiriyoni masere ecybersecurity. Aya masimulation anosanganisira kutevedzera cyber kurwiswa kuyedza kusimba kweiyo cybersecurity infrastructure. 

mhedziso

Iyo modhi yakagamuchirwa yeParis 2024 cybersecurity haingogumiri pakuchengetedza IT masisitimu asi inochengetedza musimboti wemweya weOlympic: kutamba kwakanaka, kukudzwa uye kubatana kwepasirese. Njodzi dzeCyber ​​​​hachisi dambudziko rekuita kweMitambo chete, asi zvakare kutyisidzira kuchengetedzeka uye kuvanzika kwevatori vechikamu nevaoni. 

SentinelOne inovimbwa nemakambani epasi rese nemasangano ane mutoro wekuchengetedza zviitiko zvakakura zvine zvinonetsa kuchengetedza zvinodiwa.

Nyorera kune yedu yemashoko!

Cyber ​​​​security matanho ekudzivirira iyo Paris 2024 Olimpiki