α4j ־ ջ , Ƹ ذῡ ɸ ȴ. ̴ åڵ鿡Դ ȸ ִ. ϸ ̴.
[ȴ ] ܳ ̹ ǾȰ ִ. 濵鵵 Ű , ȿ Ը ÷ ֱ ϴ. ֱ Ʈʰ ٿ ũ , ϰ ִ 濵 Ÿ. 鼭 濵 ȸǿ η ʰ ִµ, Ƿ νİ 忡 ӿ Ű ϴ о߷μ ʰ ִٴ ִ.
ֱ ū Ÿ α4j(Log4j) ߰ߵ ̴. ̴ ܼ 濵 ø ؾ ƴϴ. α4j ذ ̹ ȿ ʿ Ѵ. ڿ ġ ϴ ذå ־ Ѵٴ ̴. ?
α4j ¼ҽ ڵ ̺귯, Ŀ ̰ ƹ ڵ峪 ϴ ְ ȴ. ø̼ǵ η ħϴ ͵ ϴ. α4(Log4Shell)̶ Ҹµ, ̴ ʷ ߰ߵ ̰, ⼭ Ļ ٸ 鵵 Ѵ. ̱ CISA ġ϶ ǰ Ҵ. FTA ġ ʴ Ƽ ް ̶ ߴ.
CISA ڿ åڰ ˾Ƽ óص ̴. FTA ü å ڴٰ ٸ . ̰ 濵 α4j Ѵ. FTC α4j Ŀ ͽ÷ ϰ Ǹ , ǰ ʿġ ظ ִ١ ̷ ¸ ּ ϴ μ ϡ̶ õ߾.
濵鿡 α4j ͽ÷̶ ߸ ũ Ǿȴ. ̱ FTC ü ̴. Դٰ ̷ ǥص ̱ Ǹ ij ϴ, ̱ ƴ ̴. ⼭ 濵 ִ ϱ? 濵 ȸ CISO ȸ ̺ ̴. ִ. ̹ ҵ Ⱓ ȭ ۾ ĥ ģ ̶ ̴. α4j 濵 ȽɽŰ ̴. ̸ ƹ ǽ Ƶδٸ 濵 å̴.
ٸ CISO 濵 ȸ ڸ ؾ ұ? ϴ ڽϴ١ ؾ ƴմϴ١ ְ ̴. CISO ˾Ƽ ̱ ϴ. α4j CISO ̷. Ÿ м Žϰ ġؾ ο ٹ ʿ Ѵ١ . Ϲ 濵鿡Դ ̴. ο ٹ ϸ ȸ ü ȭ ʿ Ѵ١ ༭ ־ Ѵ. α4j ¸ ü ȭ CISO ʿϴ.
α4j ߿伺 Ű
̻ IT о߷ ѵ . ̴ κ 濵 Dz̶ ִ ̴. α4j ¸ ȭ CISO ó Ȱ 濵 輺 ʿ ̴. ٸ ٰ ؼ ᵵ Ǵ ƴϴ. Ϲ ִ ¸ ǥ ־ Ѵ. ʰ õȴ. ٽ α4j Ʈũ ʹ ϰ ϰ ڸ ־ ãƳ ° ð ʿϴ١ ̴.
濵 ƹ ȿ 뿡, ó κб ʴ´. ̵ ü ñ ۿ . ü ִٴ ε ִ( Ȳ ǥ ִ).
IT 濵̶ ̸ ̷ ۷ι 鵵 ϰ , ̷ źġ ʴٰ ϴ ͵ ظ ´. Ƹ, Ŭ, ý, IBM, VM α4j ġ ۾ ߿ ִ.
α4j ִ. ǰ ָ ƴٴϴ ÷ Żͱ ̴. α4j ٸ α4j ε ֱ ǥ鿡 ̴ α4j ϳ ãҴٰ ؼ ã ƴϴ. ȿ ٸ α4j ְ, ȿ ٸ α4j ִ. þ Ʈīó ȿ ݺؼ ִ ̴. þ Ʈī ϸ鼭 α4j ص .
α4j ãƳ ġѴٴ ɸ ̶ иϴ. Ƹ CISO̶ ϰ ̴. CISA ƴ϶ FTA 鿡 й ϰ ִ ̶ ؽѾ Ѵ. ̸ ִ ذ ¥ ָ ̴.
̷ α4j ϸ, ü ȭ ʿϴٴ CISO ο ұ? ڴ Ŵ´.
1) å Ȥ å ΰ?
2) α4j 츮 ĥ ϰ ִ°?
3) ڹ ø̼ǵ鿡 ü Ȯϰ ִ°? Ƿ ִ ͵ Ը ľϰ ִ°?
4) ¸ ذ ڿ, , Ȯϰ ִ°?
5) ִ°? ó ȹ ִ°?
6) ȹ ִ°? 鼭 Ӽ Ȯ ִ°?
¼ 濵鿡 . CISO ̸ 鿡 Ȯϰ ־ Ѵ. ؾ ϵ鿡 ܱ ȹ θ ο ξ Ѵ.
̹ ڵ α4j ǿϱ ͷ ϰ ִ. Ƹ 츮 ϸ α4j ͽ÷ Ӱ ߵǴ ̴. ڵ Ʈũ Ǽ ε װ .
α4j ذ ƴϴ. ¼ о ذ 䱸ϴ ִ. ͽ÷ , ִ 츮 ľ ϰ ִ. ü ȭ ʿϴ. α4j ذϴ Ʊ ̴. ν ġ åڿ α4j ¼ ȸ ִ.
: ũ(Liran Tancman), CEO, Rezilion
ó: ȴ [ (
globoan@boannews.com)]
https://www.boannews.com/media/view.asp?idx=104763