Nous apprenons dans la presse qu’un employ\u00e9 de la mairie de Paris s’est vu d\u00e9rober dans le train son PC portable ainsi que des cl\u00e9s USB contenant des donn\u00e9es sensibles li\u00e9es \u00e0 la s\u00e9curit\u00e9 des Jeux Olympiques.<\/p>\n\n\n\n
Ce fait divers est un concentr\u00e9 de ce qu’il convient de ne pas faire, mais que nous voyons trop souvent.<\/p>\n\n\n\n
Comment peut-on, dans une structure telle que la mairie de Paris, encore utiliser des cl\u00e9s USB comme m\u00e9dia de stockage? Avec le risque de perte\/vol, un acc\u00e8s libre \u00e0 tous le contenu, la fiabilit\u00e9 toute relative, une cl\u00e9 usb est sans doute le m\u00e9dia le moins recommand\u00e9 pour faire transiter des donn\u00e9es sensibles. Pour transf\u00e9rer quelques documentations publiques d’une machine \u00e0 l’autre oui, mais pas pour des donn\u00e9es sensibles.<\/p>\n\n\n\n
Aussi lorsqu’on prend les transports en commun il faut \u00eatre vigilent. Si une grosse valide contenant un PC portable passera inaper\u00e7u, un sacoche informatique n’\u00e9chappe pas au regard des passagers malveillants alors il parait insconscient de laisser la sacoche de PC portable sans surveillance.<\/p>\n\n\n\n
Esp\u00e9rons au moins que le PC portable est dot\u00e9 d’un mot de passe robuste et d’un cryptage de son disque.<\/p>\n\n\n\n
Malheureusement ces failles de s\u00e9curit\u00e9 sont courantes. Souvent la s\u00e9curit\u00e9 est mise en place sur une structure dans son ensemble mais avec trop de comportements dangereux \u00e0 la marge. Et bien entendu les failles concernent toujours ces exceptions, qui sont des portes d’entr\u00e9e faciles. Un logiciel qui n\u00e9cessite que l’utilisateurs ait les droits d’administration, un logiciel qui n\u00e9cessite que le firewall soit d\u00e9sactiv\u00e9, un utilisateur qui ne maitrise pas les outils en place et pr\u00e9f\u00e8re utiliser une cl\u00e9 usb, un copieur qui n’est pas compatible double authentification et n\u00e9cessite une boite mail avec un simple mot de passe sont autant de comportements\/situations \u00e0 banir pour la s\u00e9curit\u00e9 de l’ensemble de la structure.<\/p>\n","protected":false},"excerpt":{"rendered":"
Nous apprenons dans la presse qu’un employ\u00e9 de la mairie de Paris s’est vu d\u00e9rober dans le train son PC portable ainsi que des cl\u00e9s USB contenant des donn\u00e9es sensibles li\u00e9es \u00e0 la s\u00e9curit\u00e9 des Jeux Olympiques. Ce fait divers est un concentr\u00e9 de ce qu’il convient de ne pas faire, mais que nous voyons […]<\/p>\n","protected":false},"author":1,"featured_media":97,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"","ocean_second_sidebar":"","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"","ocean_custom_header_template":"","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"","ocean_menu_typo_font_family":"","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"on","ocean_gallery_id":[],"footnotes":""},"categories":[4],"tags":[],"class_list":["post-96","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-securite","entry","has-media"],"_links":{"self":[{"href":"https:\/\/actus.cd-systems.fr\/index.php\/wp-json\/wp\/v2\/posts\/96","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/actus.cd-systems.fr\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/actus.cd-systems.fr\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/actus.cd-systems.fr\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/actus.cd-systems.fr\/index.php\/wp-json\/wp\/v2\/comments?post=96"}],"version-history":[{"count":1,"href":"https:\/\/actus.cd-systems.fr\/index.php\/wp-json\/wp\/v2\/posts\/96\/revisions"}],"predecessor-version":[{"id":98,"href":"https:\/\/actus.cd-systems.fr\/index.php\/wp-json\/wp\/v2\/posts\/96\/revisions\/98"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/actus.cd-systems.fr\/index.php\/wp-json\/wp\/v2\/media\/97"}],"wp:attachment":[{"href":"https:\/\/actus.cd-systems.fr\/index.php\/wp-json\/wp\/v2\/media?parent=96"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/actus.cd-systems.fr\/index.php\/wp-json\/wp\/v2\/categories?post=96"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/actus.cd-systems.fr\/index.php\/wp-json\/wp\/v2\/tags?post=96"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}