{"id":3008,"date":"2026-08-23T03:27:28","date_gmt":"2026-08-23T03:27:28","guid":{"rendered":"https:\/\/govelocks.com\/?p=3008"},"modified":"2026-08-24T03:27:58","modified_gmt":"2026-08-24T03:27:58","slug":"nist-special-publication-800-46","status":"publish","type":"post","link":"https:\/\/govelocks.com\/vi\/nist-special-publication-800-46\/","title":{"rendered":"T\u1eadp san \u0111\u1eb7c bi\u1ec7t c\u1ee7a NIST 800-46: L\u00e0m vi\u1ec7c t\u1eeb xa doanh nghi\u1ec7p"},"content":{"rendered":"<p><strong>T\u00e0i li\u1ec7u \u0110\u1eb7c bi\u1ec7t c\u1ee7a NIST 800-46<\/strong> cung c\u1ea5p cho c\u00e1c c\u01a1 quan li\u00ean bang v\u00e0 t\u1ed5 ch\u1ee9c th\u01b0\u01a1ng m\u1ea1i c\u00e1c khuy\u1ebfn ngh\u1ecb k\u1ef9 thu\u1eadt \u0111\u1ec3 b\u1ea3o v\u1ec7 c\u00f4ng ngh\u1ec7 l\u00e0m vi\u1ec7c t\u1eeb xa, ki\u1ebfn tr\u00fac truy c\u1eadp t\u1eeb xa v\u00e0 h\u1ec7 sinh th\u00e1i Bring-Your-Own-Device (BYOD).<\/p>\n<p>\u0110\u01b0\u1ee3c xu\u1ea5t b\u1ea3n b\u1edfi Vi\u1ec7n Ti\u00eau chu\u1ea9n v\u00e0 C\u00f4ng ngh\u1ec7 Qu\u1ed1c gia, h\u01b0\u1edbng d\u1eabn n\u00e0y thi\u1ebft l\u1eadp c\u00e1c y\u00eau c\u1ea7u b\u1ea3o m\u1eadt c\u01a1 b\u1ea3n \u0111\u1ec3 thi\u1ebft k\u1ebf, tri\u1ec3n khai v\u00e0 duy tr\u00ec c\u00e1c c\u00f4ng ngh\u1ec7 truy c\u1eadp t\u1eeb xa trong khi b\u1ea3o v\u1ec7 m\u1ea1ng n\u1ed9i b\u1ed9 c\u1ee7a doanh nghi\u1ec7p kh\u1ecfi c\u00e1c m\u1ed1i \u0111e d\u1ecda b\u1eaft ngu\u1ed3n t\u1eeb c\u00e1c \u0111i\u1ec3m cu\u1ed1i kh\u00f4ng qu\u1ea3n l\u00fd b\u00ean ngo\u00e0i.<\/p>\n<h2>T\u1ed5ng quan &amp; M\u1ee5c \u0111\u00edch c\u1ee7a NIST SP 800-46<\/h2>\n<p>C\u00f3 t\u00ean ch\u00ednh th\u1ee9c <em>H\u01b0\u1edbng d\u1eabn v\u1ec1 B\u1ea3o m\u1eadt l\u00e0m vi\u1ec7c t\u1eeb xa, Truy c\u1eadp t\u1eeb xa v\u00e0 Bring Your Own Device (BYOD) c\u1ee7a Doanh nghi\u1ec7p<\/em>, NIST SP 800-46 Phi\u00ean b\u1ea3n 2 \u0111\u00f3ng vai tr\u00f2 nh\u01b0 m\u1ed9t ti\u00eau chu\u1ea9n k\u1ef9 thu\u1eadt c\u1ed1t l\u00f5i \u0111\u1ec3 gi\u1ea3m thi\u1ec3u r\u1ee7i ro c\u1ee7a k\u1ebft n\u1ed1i m\u1ea1ng ngo\u00e0i tr\u1ee5 s\u1edf.<\/p>\n<p>T\u00e0i li\u1ec7u \u0111\u1ec1 c\u1eadp \u0111\u1ebfn m\u1ed9t s\u1ef1 thay \u0111\u1ed5i ki\u1ebfn tr\u00fac c\u01a1 b\u1ea3n: nh\u00e2n vi\u00ean l\u00e0m vi\u1ec7c t\u1eeb xa kh\u00f4ng c\u00f2n truy c\u1eadp c\u00e1c t\u00e0i nguy\u00ean t\u1eadp trung ch\u1ec9 qua c\u00e1c laptop ri\u00eang c\u1ee7a doanh nghi\u1ec7p qua c\u00e1c k\u1ebft n\u1ed1i \u0111i\u1ec3m-\u0111\u1ebfn-\u0111i\u1ec3m \u0111\u01a1n gi\u1ea3n.<\/p>\n<p>C\u00e1c tri\u1ec3n khai hi\u1ec7n \u0111\u1ea1i li\u00ean quan \u0111\u1ebfn ph\u1ea7n c\u1ee9ng kh\u00e1ch h\u00e0ng \u0111a d\u1ea1ng, \u0111i\u1ec7n tho\u1ea1i th\u00f4ng minh do nh\u00e2n vi\u00ean s\u1edf h\u1eefu, n\u1ec1n t\u1ea3ng l\u01b0u tr\u1eef \u0111\u00e1m m\u00e2y v\u00e0 truy c\u1eadp tr\u1ef1c ti\u1ebfp v\u00e0o \u1ee9ng d\u1ee5ng web.<\/p>\n<p>M\u1ee5c \u0111\u00edch ch\u00ednh c\u1ee7a \u1ea5n ph\u1ea9m l\u00e0 h\u1ed7 tr\u1ee3 c\u00e1c qu\u1ea3n tr\u1ecb vi\u00ean h\u1ec7 th\u1ed1ng, k\u1ef9 s\u01b0 an ninh v\u00e0 nh\u00e2n vi\u00ean tu\u00e2n th\u1ee7 trong vi\u1ec7c l\u1eadp k\u1ebf ho\u1ea1ch v\u00e0 tri\u1ec3n khai c\u00e1c ki\u1ec3m so\u00e1t k\u1ef9 thu\u1eadt tr\u00ean b\u1ed1n l\u0129nh v\u1ef1c ch\u00ednh:<\/p>\n<ul>\n<li>Ph\u00e1t tri\u1ec3n ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt l\u00e0m vi\u1ec7c t\u1eeb xa t\u1eadp trung c\u1ee7a doanh nghi\u1ec7p.<\/li>\n<li>T\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt cho c\u00e1c m\u00e1y ch\u1ee7 truy c\u1eadp t\u1eeb xa v\u00e0 \u0111\u1ecbnh v\u1ecb ch\u00fang m\u1ed9t c\u00e1ch an to\u00e0n trong ki\u1ebfn tr\u00fac m\u1ea1ng.<\/li>\n<li>Th\u1ef1c thi c\u00e1c ki\u1ec3m so\u00e1t b\u1ea3o m\u1eadt \u0111i\u1ec3m cu\u1ed1i tr\u00ean c\u00e1c thi\u1ebft b\u1ecb kh\u00e1ch h\u00e0ng thu\u1ed9c s\u1edf h\u1eefu c\u1ee7a doanh nghi\u1ec7p v\u00e0 BYOD.<\/li>\n<li>B\u1ea3o v\u1ec7 d\u1eef li\u1ec7u trong qu\u00e1 tr\u00ecnh truy\u1ec1n v\u00e0 d\u1eef li\u1ec7u l\u01b0u tr\u1eef kh\u1ecfi b\u1ecb ch\u1eb7n, tr\u1ed9m c\u1eafp th\u00f4ng tin x\u00e1c th\u1ef1c v\u00e0 ph\u01a1i nhi\u1ec5m tr\u00e1i ph\u00e9p.<\/li>\n<\/ul>\n<p>SP 800-46 \u0111\u01b0\u1ee3c ph\u00e2n lo\u1ea1i l\u00e0 h\u01b0\u1edbng d\u1eabn T\u00e0i li\u1ec7u \u0110\u1eb7c bi\u1ec7t thay v\u00ec quy \u0111\u1ecbnh li\u00ean bang b\u1eaft bu\u1ed9c ri\u00eang bi\u1ec7t.<\/p>\n<p>Tuy nhi\u00ean, \u0111\u1ed1i v\u1edbi c\u00e1c c\u01a1 quan li\u00ean bang v\u00e0 nh\u00e0 th\u1ea7u ch\u1ecbu s\u1ef1 \u0111i\u1ec1u ch\u1ec9nh c\u1ee7a FISMA (\u0110\u1ea1o lu\u1eadt C\u1ea3i ti\u1ebfn An ninh Th\u00f4ng tin Li\u00ean bang), c\u00e1c ki\u1ec3m so\u00e1t k\u1ef9 thu\u1eadt chi ti\u1ebft trong SP 800-46 tr\u1ef1c ti\u1ebfp x\u00e1c nh\u1eadn c\u00e1c m\u1ee9c t\u1ed1i thi\u1ec3u b\u1eaft bu\u1ed9c \u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh trong NIST SP 800-53 (c\u1ee5 th\u1ec3 l\u00e0 gia \u0111\u00ecnh AC-17 Truy c\u1eadp t\u1eeb xa).<\/p>\n<p>\u0110\u1ed1i v\u1edbi c\u00e1c doanh nghi\u1ec7p th\u01b0\u01a1ng m\u1ea1i \u0111\u00e1nh gi\u00e1 c\u00e1c <a href=\"https:\/\/govelocks.com\/vi\/remote-access-vulnerabilities\/\">l\u1ed7 h\u1ed5ng truy c\u1eadp t\u1eeb xa<\/a>, t\u00e0i li\u1ec7u cung c\u1ea5p m\u1ed9t b\u1ea3n thi\u1ebft k\u1ebf \u0111\u00e1ng tin c\u1eady \u0111\u1ec3 c\u1ea5u tr\u00fac c\u00e1c l\u1edbp ph\u00f2ng th\u1ee7 tr\u01b0\u1edbc khi l\u01b0u l\u01b0\u1ee3ng kh\u00f4ng qu\u1ea3n l\u00fd x\u00e2m nh\u1eadp v\u00e0o c\u00e1c ph\u00e2n \u0111o\u1ea1n m\u1ea1ng \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7.<\/p>\n<p>NIST ti\u1ebfp t\u1ee5c c\u1eadp nh\u1eadt h\u01b0\u1edbng d\u1eabn truy c\u1eadp t\u1eeb xa th\u00f4ng qua c\u00e1c b\u1ea3n d\u1ef1 th\u1ea3o l\u1eb7p \u0111i l\u1eb7p l\u1ea1i (bao g\u1ed3m c\u00e1c \u00fd t\u01b0\u1edfng ban \u0111\u1ea7u c\u1ee7a SP 800-46 Phi\u00ean b\u1ea3n 3 v\u00e0 t\u00edch h\u1ee3p Zero Trust trong SP 800-207).<\/p>\n<p>Ngay c\u1ea3 khi ki\u1ebfn tr\u00fac ph\u00e1t tri\u1ec3n, c\u00e1c nguy\u00ean t\u1eafc qu\u1ea3n l\u00fd r\u1ee7i ro c\u01a1 b\u1ea3n \u0111\u01b0\u1ee3c \u0111\u1ec1 c\u1eadp trong Phi\u00ean b\u1ea3n 2 v\u1eabn l\u00e0 ti\u00eau chu\u1ea9n c\u01a1 s\u1edf cho k\u1ebft n\u1ed1i t\u1eeb xa an to\u00e0n.<\/p>\n<h2>Nguy\u00ean t\u1eafc B\u1ea3o m\u1eadt c\u1ed1t l\u00f5i cho L\u00e0m vi\u1ec7c t\u1eeb xa Doanh nghi\u1ec7p<\/h2>\n<p>NIST SP 800-46 x\u00e1c \u0111\u1ecbnh r\u1eb1ng c\u00e1c t\u1ed5 ch\u1ee9c ph\u1ea3i gi\u1ea3 \u0111\u1ecbnh r\u1eb1ng m\u00f4i tr\u01b0\u1eddng b\u00ean ngo\u00e0i v\u00e0 thi\u1ebft b\u1ecb kh\u00e1ch h\u00e0ng v\u1ed1n d\u0129 l\u00e0 th\u00f9 \u0111\u1ecbch.<\/p>\n<p>C\u00e1c m\u1ea1ng trung gian - ch\u1eb3ng h\u1ea1n nh\u01b0 Wi-Fi gia \u0111\u00ecnh, \u0111i\u1ec3m truy c\u1eadp c\u00f4ng c\u1ed9ng v\u00e0 nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 internet c\u1ee7a b\u00ean th\u1ee9 ba - kh\u00f4ng th\u1ec3 tin c\u1eady \u0111\u1ec3 cung c\u1ea5p t\u00ednh b\u1ea3o m\u1eadt, t\u00ednh to\u00e0n v\u1eb9n ho\u1eb7c x\u00e1c th\u1ef1c l\u1eabn nhau. \u0110\u1ec3 gi\u1ea3m thi\u1ec3u c\u00e1c \u0111i\u1ec1u ki\u1ec7n n\u00e0y, \u1ea5n ph\u1ea9m \u0111\u1ec1 c\u1eadp \u0111\u1ebfn n\u0103m nguy\u00ean t\u1eafc b\u1ea3o m\u1eadt n\u1ec1n t\u1ea3ng:<\/p>\n<ul>\n<li><strong>X\u00e2y d\u1ef1ng Ch\u00ednh s\u00e1ch B\u1ea3o m\u1eadt L\u00e0m vi\u1ec7c t\u1eeb xa To\u00e0n di\u1ec7n:<\/strong> C\u00e1c t\u1ed5 ch\u1ee9c ph\u1ea3i x\u00e1c \u0111\u1ecbnh r\u00f5 c\u00e1c quy t\u1eafc x\u00e1c \u0111\u1ecbnh ph\u01b0\u01a1ng th\u1ee9c truy c\u1eadp t\u1eeb xa \u0111\u01b0\u1ee3c ph\u00e9p, c\u00e1c c\u1ea5p \u0111\u1ed9 thi\u1ebft b\u1ecb kh\u00e1ch h\u00e0ng (thu\u1ed9c s\u1edf h\u1eefu doanh nghi\u1ec7p, nh\u00e0 th\u1ea7u ho\u1eb7c c\u00e1 nh\u00e2n), nh\u00f3m ng\u01b0\u1eddi d\u00f9ng \u0111\u01b0\u1ee3c ph\u00e9p, v\u00e0 c\u00e1c ph\u00e2n lo\u1ea1i d\u1eef li\u1ec7u c\u1ee5 th\u1ec3 \u0111\u01b0\u1ee3c ph\u00e9p tr\u00ean c\u00e1c \u0111i\u1ec3m cu\u1ed1i t\u1eeb xa.<\/li>\n<li><strong>Th\u1ef1c hi\u1ec7n Nguy\u00ean t\u1eafc \u00cdt quy\u1ec1n t\u1ed1i thi\u1ec3u:<\/strong> Ng\u01b0\u1eddi d\u00f9ng t\u1eeb xa n\u00ean ch\u1ec9 \u0111\u01b0\u1ee3c truy c\u1eadp v\u00e0o c\u00e1c ph\u00e2n m\u1ea1ng, d\u1ecbch v\u1ee5 \u1ee9ng d\u1ee5ng v\u00e0 kho d\u1eef li\u1ec7u t\u1ed1i thi\u1ec3u c\u1ea7n thi\u1ebft \u0111\u1ec3 th\u1ef1c hi\u1ec7n c\u00e1c ch\u1ee9c n\u0103ng \u0111\u01b0\u1ee3c giao. Vi\u1ec7c truy c\u1eadp l\u1edbp 3 to\u00e0n b\u1ed9 v\u00e0o m\u1ea1ng n\u1ed9i b\u1ed9 ph\u1ea3i \u0111\u01b0\u1ee3c h\u1ea1n ch\u1ebf th\u00f4ng qua c\u00e1c ki\u1ec3m so\u00e1t truy c\u1eadp trung gian.<\/li>\n<li><strong>Th\u1ef1c thi C\u1ee9ng h\u00f3a \u0110i\u1ec3m cu\u1ed1i b\u1eaft bu\u1ed9c:<\/strong> T\u1ea5t c\u1ea3 c\u00e1c thi\u1ebft b\u1ecb kh\u00e1ch h\u00e0ng k\u1ebft n\u1ed1i v\u00e0o t\u00e0i nguy\u00ean n\u1ed9i b\u1ed9 ph\u1ea3i \u0111\u00e1p \u1ee9ng c\u00e1c ti\u00eau chu\u1ea9n \u0111i\u1ec3m cu\u1ed1i \u0111\u00e3 x\u00e1c \u0111\u1ecbnh. \u0110\u1ed1i v\u1edbi thi\u1ebft b\u1ecb do doanh nghi\u1ec7p qu\u1ea3n l\u00fd, \u0111i\u1ec1u n\u00e0y y\u00eau c\u1ea7u c\u00e1c b\u1ea3n d\u1ef1ng h\u1ec7 \u0111i\u1ec1u h\u00e0nh ti\u00eau chu\u1ea9n, ph\u00e1t hi\u1ec7n v\u00e0 ph\u1ea3n h\u1ed3i \u0111i\u1ec3m cu\u1ed1i (EDR) ho\u1ea1t \u0111\u1ed9ng, t\u01b0\u1eddng l\u1eeda d\u1ef1a tr\u00ean m\u00e1y ch\u1ee7 c\u1ee5c b\u1ed9, qu\u1ea3n l\u00fd v\u00e1 l\u1ed7i t\u1ef1 \u0111\u1ed9ng v\u00e0 m\u00e3 h\u00f3a to\u00e0n \u0111\u0129a (FDE) \u0111\u1ec3 b\u1ea3o v\u1ec7 d\u1eef li\u1ec7u khi ngh\u1ec9, m\u1ea5t ho\u1eb7c b\u1ecb tr\u1ed9m ph\u1ea7n c\u1ee9ng.<\/li>\n<li><strong>Y\u00eau c\u1ea7u X\u00e1c th\u1ef1c \u0110a y\u1ebfu t\u1ed1 M\u1ea1nh m\u1ebd (MFA):<\/strong> M\u1eadt kh\u1ea9u \u0111\u01a1n thu\u1ea7n kh\u00f4ng \u0111\u1ee7 cho c\u00e1c phi\u00ean truy c\u1eadp t\u1eeb xa. C\u00e1c c\u01a1 ch\u1ebf x\u00e1c th\u1ef1c ph\u1ea3i t\u1eadn d\u1ee5ng c\u00e1c giao th\u1ee9c \u0111a y\u1ebfu t\u1ed1 - k\u1ebft h\u1ee3p token ph\u1ea7n c\u1ee9ng, th\u1ebb th\u00f4ng minh, kh\u00f3a m\u00e3 h\u00f3a ho\u1eb7c x\u00e1c th\u1ef1c ngo\u00e0i b\u0103ng t\u1ea7n - tr\u01b0\u1edbc khi c\u1ea5p ph\u00e9p truy c\u1eadp qua c\u1ed5ng.<\/li>\n<li><strong>M\u00e3 h\u00f3a T\u1ea5t c\u1ea3 D\u1eef li\u1ec7u Trong Qu\u00e1 tr\u00ecnh Truy\u1ec1n:<\/strong> C\u00e1c li\u00ean l\u1ea1c t\u1eeb xa v\u01b0\u1ee3t qua h\u1ea1 t\u1ea7ng c\u00f4ng c\u1ed9ng ph\u1ea3i s\u1eed d\u1ee5ng m\u00e3 h\u00f3a x\u00e1c th\u1ef1c FIPS h\u1ee3p l\u1ec7 (ch\u1eb3ng h\u1ea1n nh\u01b0 IPsec ho\u1eb7c TLS) \u0111\u1ec3 duy tr\u00ec t\u00ednh b\u1ea3o m\u1eadt v\u00e0 ph\u00f2ng ch\u1ed1ng c\u00e1c cu\u1ed9c ki\u1ec3m tra trung gian (MitM) ho\u1eb7c chi\u1ebfm quy\u1ec1n phi\u00ean.<\/li>\n<\/ul>\n<p>Vi\u1ec7c \u00e1p d\u1ee5ng c\u00e1c nguy\u00ean t\u1eafc n\u00e0y t\u1ea1o ra m\u1ed9t r\u00e0o c\u1ea3n v\u1eadn h\u00e0nh gi\u1eefa c\u00e1c bi\u00ean gi\u1edbi t\u1eeb xa kh\u00f4ng \u0111\u00e1ng tin c\u1eady v\u00e0 h\u1ea1 t\u1ea7ng doanh nghi\u1ec7p c\u1ed1t l\u00f5i, h\u1ed7 tr\u1ee3 c\u1ea5u tr\u00fac <a href=\"https:\/\/govelocks.com\/vi\/enterprise-access-control\/\">ki\u1ec3m so\u00e1t truy c\u1eadp doanh nghi\u1ec7p<\/a> b\u1ea3o v\u1ec7 t\u1ea1i m\u1ecdi \u0111i\u1ec3m truy c\u1eadp.<\/p>\n<h2>B\u1ea3o v\u1ec7 Ki\u1ebfn tr\u00fac Truy c\u1eadp T\u1eeb xa<\/h2>\n<p>M\u1ee5c 2.2 c\u1ee7a NIST SP 800-46 ph\u00e2n lo\u1ea1i c\u00e1c gi\u1ea3i ph\u00e1p truy c\u1eadp t\u1eeb xa th\u00e0nh b\u1ed1n ki\u1ebfn tr\u00fac k\u1ef9 thu\u1eadt ri\u00eang bi\u1ec7t. M\u1ed7i ph\u01b0\u01a1ng ph\u00e1p \u0111\u01b0a ra c\u00e1c \u0111\u00e1nh \u0111\u1ed5i c\u1ee5 th\u1ec3 v\u1ec1 kh\u1ea3 n\u0103ng hi\u1ec3n th\u1ecb m\u1ea1ng, \u0111\u1ed9 ph\u1ee9c t\u1ea1p tri\u1ec3n khai v\u00e0 r\u1ee7i ro \u0111i\u1ec3m cu\u1ed1i.<\/p>\n<h3>1. \u0110\u01b0\u1eddng h\u1ea7m (Ki\u1ebfn tr\u00fac VPN)<\/h3>\n<p>K\u00eanh tunneling truy c\u1eadp t\u1eeb xa bao b\u1ecdc c\u00e1c g\u00f3i m\u1ea1ng trong c\u00e1c giao th\u1ee9c b\u1ea3o m\u1eadt (th\u01b0\u1eddng l\u00e0 VPN d\u1ef1a tr\u00ean IPsec ho\u1eb7c TLS), thi\u1ebft l\u1eadp m\u1ed9t k\u1ebft n\u1ed1i \u1ea3o \u0111i\u1ec3m-\u0111\u1ebfn-\u0111i\u1ec3m gi\u1eefa thi\u1ebft b\u1ecb kh\u00e1ch h\u00e0ng v\u00e0 c\u1ed5ng doanh nghi\u1ec7p.<\/p>\n<p>Trong khi tunneling cung c\u1ea5p quy\u1ec1n truy c\u1eadp li\u1ec1n m\u1ea1ch \u1edf c\u1ea5p m\u1ea1ng cho c\u00e1c \u0111i\u1ec3m cu\u1ed1i \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd, n\u00f3 mang l\u1ea1i r\u1ee7i ro nghi\u00eam tr\u1ecdng n\u1ebfu m\u1ed9t thi\u1ebft b\u1ecb kh\u00f4ng \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd ho\u1eb7c nhi\u1ec5m b\u1ec7nh k\u1ebft n\u1ed1i qua tunnel, c\u00f3 th\u1ec3 l\u00e0m l\u1ed9 c\u00e1c m\u1ea1ng con n\u1ed9i b\u1ed9 cho s\u1ef1 di chuy\u1ec3n c\u1ee7a ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i theo chi\u1ec1u ngang.<\/p>\n<p>NIST khuy\u1ebfn ngh\u1ecb \u0111\u1eb7t c\u00e1c c\u1ed5ng VPN trung gian b\u00ean trong m\u1ed9t khu v\u1ef1c phi qu\u00e2n s\u1ef1 (DMZ) ri\u00eang bi\u1ec7t, s\u1eed d\u1ee5ng t\u01b0\u1eddng l\u1eeda ki\u1ec3m tra g\u00f3i tr\u1ea1ng th\u00e1i v\u00e0 ph\u00e2n \u0111o\u1ea1n n\u1ed9i b\u1ed9 \u0111\u1ec3 ki\u1ec3m tra v\u00e0 h\u1ea1n ch\u1ebf l\u01b0u l\u01b0\u1ee3ng tunnel tr\u01b0\u1edbc khi \u0111\u1ebfn c\u00e1c m\u1ea1ng con n\u1ed9i b\u1ed9.<\/p>\n<h3>2. C\u1ed5ng \u1ee8ng d\u1ee5ng<\/h3>\n<p>C\u00e1c c\u1ed5ng \u1ee9ng d\u1ee5ng s\u1eed d\u1ee5ng reverse proxy v\u00e0 m\u00e1y ch\u1ee7 web b\u1ea3o m\u1eadt (HTTPS\/TLS) \u0111\u1ec3 ph\u01a1i b\u00e0y c\u00e1c \u1ee9ng d\u1ee5ng doanh nghi\u1ec7p d\u1ef1a tr\u00ean web c\u1ee5 th\u1ec3 cho kh\u00e1ch h\u00e0ng t\u1eeb xa m\u00e0 kh\u00f4ng c\u1ea5p quy\u1ec1n truy c\u1eadp m\u1ea1ng r\u1ed9ng h\u01a1n. Ng\u01b0\u1eddi d\u00f9ng t\u01b0\u01a1ng t\u00e1c v\u1edbi c\u00e1c \u1ee9ng d\u1ee5ng th\u00f4ng qua tr\u00ecnh duy\u1ec7t web ti\u00eau chu\u1ea9n, lo\u1ea1i b\u1ecf nhu c\u1ea7u c\u00e0i \u0111\u1eb7t ph\u1ea7n m\u1ec1m kh\u00e1ch h\u00e0ng.<\/p>\n<p>Ki\u1ebfn tr\u00fac n\u00e0y gi\u1ea3m \u0111\u00e1ng k\u1ec3 b\u1ec1 m\u1eb7t t\u1ea5n c\u00f4ng \u1edf c\u1ea5p m\u1ea1ng v\u00ec \u0111i\u1ec3m cu\u1ed1i kh\u00f4ng bao gi\u1edd thi\u1ebft l\u1eadp k\u1ebft n\u1ed1i l\u1edbp 3 v\u1edbi m\u1ea1ng n\u1ed9i b\u1ed9. Tuy nhi\u00ean, c\u00e1c c\u1ed5ng \u1ee9ng d\u1ee5ng \u0111\u00f2i h\u1ecfi ph\u1ea3i c\u1ee9ng h\u00f3a m\u00e1y ch\u1ee7 nghi\u00eam ng\u1eb7t, ki\u1ec3m so\u00e1t th\u1eddi gian h\u1ebft h\u1ea1n phi\u00ean m\u1ea1nh m\u1ebd v\u00e0 c\u00e1c bi\u1ec7n ph\u00e1p ph\u00f2ng v\u1ec7 b\u1ed9 nh\u1edb cache tr\u00ecnh duy\u1ec7t \u0111\u1ec3 ng\u0103n d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m c\u00f2n s\u00f3t l\u1ea1i tr\u00ean c\u00e1c thi\u1ebft b\u1ecb chia s\u1ebb ho\u1eb7c c\u00e1 nh\u00e2n.<\/p>\n<h3>3. Truy c\u1eadp M\u00e1y t\u00ednh T\u1eeb xa (VDI \/ M\u00e1y t\u00ednh \u0111\u1ec3 b\u00e0n \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef)<\/h3>\n<p>Ki\u1ebfn tr\u00fac m\u00e1y t\u00ednh t\u1eeb xa - bao g\u1ed3m H\u1ea1 t\u1ea7ng M\u00e1y t\u00ednh \u0111\u1ec3 b\u00e0n \u1ea2o (VDI) v\u00e0 D\u1ecbch v\u1ee5 Terminal - th\u1ef1c thi t\u1ea5t c\u1ea3 c\u00e1c \u1ee9ng d\u1ee5ng v\u00e0 x\u1eed l\u00fd d\u1eef li\u1ec7u tr\u1ef1c ti\u1ebfp tr\u00ean c\u00e1c m\u00e1y ch\u1ee7 trung t\u00e2m trong trung t\u00e2m d\u1eef li\u1ec7u c\u1ee7a doanh nghi\u1ec7p. Thi\u1ebft b\u1ecb kh\u00e1ch t\u1eeb xa ch\u1ec9 g\u1eedi t\u00edn hi\u1ec7u \u0111\u1ea7u v\u00e0o (ph\u00edm, s\u1ef1 ki\u1ec7n chu\u1ed9t) v\u00e0 nh\u1eadn c\u00e1c khung hi\u1ec3n th\u1ecb \u0111\u00e3 \u0111\u01b0\u1ee3c x\u1eed l\u00fd qua m\u1ed9t giao th\u1ee9c b\u1ea3o m\u1eadt.<\/p>\n<p>VDI mang l\u1ea1i l\u1ee3i \u00edch l\u1edbn v\u1ec1 ph\u00f2ng ng\u1eeba m\u1ea5t d\u1eef li\u1ec7u v\u00ec c\u00e1c t\u1ec7p th\u00f4 v\u00e0 c\u01a1 s\u1edf d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m kh\u00f4ng bao gi\u1edd l\u01b0u tr\u1eef tr\u00ean \u0111i\u1ec3m cu\u1ed1i t\u1eeb xa.<\/p>\n<p>NIST nh\u1ea5n m\u1ea1nh VDI l\u00e0 ki\u1ebfn tr\u00fac l\u00fd t\u01b0\u1edfng cho c\u00e1c t\u00ecnh hu\u1ed1ng c\u00f3 r\u1ee7i ro cao h\u01a1n, ch\u1eb3ng h\u1ea1n nh\u01b0 truy c\u1eadp c\u1ee7a nh\u00e0 th\u1ea7u b\u00ean th\u1ee9 ba ho\u1eb7c ph\u1ea7n c\u1ee9ng kh\u00e1ch kh\u00f4ng \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd, mi\u1ec5n l\u00e0 chia s\u1ebb clipboard c\u1ee5c b\u1ed9, chuy\u1ec3n h\u01b0\u1edbng t\u1ec7p v\u00e0 \u00e1nh x\u1ea1 \u1ed5 \u0111\u0129a b\u1ecb v\u00f4 hi\u1ec7u h\u00f3a nghi\u00eam ng\u1eb7t.<\/p>\n<h3>4. Truy c\u1eadp \u1ee8ng d\u1ee5ng Tr\u1ef1c ti\u1ebfp<\/h3>\n<p>Truy c\u1eadp \u1ee9ng d\u1ee5ng tr\u1ef1c ti\u1ebfp cho ph\u00e9p m\u1ed9t \u1ee9ng d\u1ee5ng kh\u00e1ch chuy\u00ean d\u1ee5ng tr\u00ean m\u00e1y ch\u1ee7 t\u1eeb xa giao ti\u1ebfp tr\u1ef1c ti\u1ebfp v\u1edbi m\u00e1y ch\u1ee7 \u1ee9ng d\u1ee5ng doanh nghi\u1ec7p qua internet m\u00e0 kh\u00f4ng c\u1ea7n tunnel VPN trung gian ho\u1eb7c proxy tr\u00ecnh duy\u1ec7t. V\u00ed d\u1ee5 bao g\u1ed3m c\u00e1c kh\u00e1ch h\u00e0ng email k\u1ebft n\u1ed1i qua c\u00e1c giao th\u1ee9c b\u1ea3o m\u1eadt ho\u1eb7c kh\u00e1ch h\u00e0ng c\u01a1 s\u1edf d\u1eef li\u1ec7u \u0111\u1ed3ng b\u1ed9 \u0111\u00e1m m\u00e2y.<\/p>\n<p>Trong khi ho\u1ea1t \u0111\u1ed9ng h\u1ee3p l\u00fd, ph\u01b0\u01a1ng ph\u00e1p n\u00e0y y\u00eau c\u1ea7u m\u1ed7i m\u00e1y ch\u1ee7 \u1ee9ng d\u1ee5ng ph\u1ea3i \u0111\u01b0\u1ee3c ph\u01a1i b\u00e0y tr\u1ef1c ti\u1ebfp ra m\u1ea1ng b\u00ean ngo\u00e0i. Do \u0111\u00f3, NIST y\u00eau c\u1ea7u c\u00e1c m\u00e1y ch\u1ee7 \u1ee9ng d\u1ee5ng ph\u1ea3i c\u1ee9ng h\u00f3a h\u1ec7 \u0111i\u1ec1u h\u00e0nh, theo d\u00f5i v\u00e1 l\u1ed7i li\u00ean t\u1ee5c v\u00e0 x\u00e1c th\u1ef1c m\u1eadt m\u00e3 l\u1eabn nhau \u0111\u1ec3 ch\u1ed1ng l\u1ea1i c\u00e1c n\u1ed7 l\u1ef1c khai th\u00e1c tr\u1ef1c ti\u1ebfp.<\/p>\n<p>Trong khi tunneling m\u1ea1ng k\u1ef9 thu\u1eadt s\u1ed1 m\u00e3 h\u00f3a qu\u00e1 tr\u00ecnh truy\u1ec1n d\u1eef li\u1ec7u h\u1ee3p l\u00fd qua c\u00e1c \u0111i\u1ec3m cu\u1ed1i t\u1eeb xa, c\u00e1c khu v\u1ef1c bi\u00ean gi\u1edbi v\u1eadt l\u00fd v\u00e0 h\u1ea1 t\u1ea7ng quan tr\u1ecdng c\u1ea7n c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o v\u1ec7 ph\u1ea7n c\u1ee9ng b\u1ed5 sung, ch\u1eb3ng h\u1ea1n nh\u01b0 <a href=\"https:\/\/govelocks.com\/vi\/tunnel-special-safety-lock\/\">kh\u00f3a an to\u00e0n \u0111\u1eb7c bi\u1ec7t c\u1ee7a tunnel<\/a>, \u0111\u1ec3 ki\u1ec3m so\u00e1t v\u00e0 c\u00f4 l\u1eadp c\u00e1c c\u01a1 s\u1edf nh\u1ea1y c\u1ea3m.<\/p>\n<h2>So s\u00e1nh c\u00e1c Gi\u1ea3i ph\u00e1p Truy c\u1eadp T\u1eeb xa<\/h2>\n<p>Ph\u01b0\u01a1ng ph\u00e1p ki\u1ebfn tr\u00fac m\u00e0 t\u1ed5 ch\u1ee9c tri\u1ec3n khai \u1ea3nh h\u01b0\u1edfng tr\u1ef1c ti\u1ebfp \u0111\u1ebfn r\u1ee7i ro r\u00f2 r\u1ec9 d\u1eef li\u1ec7u v\u00e0 x\u00e1c \u0111\u1ecbnh m\u1ee9c \u0111\u1ed9 ki\u1ec3m so\u00e1t \u0111i\u1ec3m cu\u1ed1i c\u1ea7n thi\u1ebft. B\u1ea3ng sau so s\u00e1nh b\u1ed1n gi\u1ea3i ph\u00e1p ch\u00ednh \u0111\u01b0\u1ee3c \u0111\u1ecbnh ngh\u0129a trong NIST SP 800-46 Phi\u00ean b\u1ea3n 2:<\/p>\n<table>\n<thead>\n<tr>\n<th>Ph\u01b0\u01a1ng Th\u1ee9c Truy C\u1eadp<\/th>\n<th>Tr\u01b0\u1eddng h\u1ee3p s\u1eed d\u1ee5ng ch\u00ednh<\/th>\n<th>C\u00e1c xem x\u00e9t v\u1ec1 An ninh c\u1ee7a NIST<\/th>\n<th>R\u1ee7i ro r\u00f2 r\u1ec9 d\u1eef li\u1ec7u<\/th>\n<th>Y\u00eau c\u1ea7u ki\u1ec3m so\u00e1t \u0111i\u1ec3m cu\u1ed1i<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Tunnel (IPsec \/ TLS VPN)<\/strong><\/td>\n<td>Laptop qu\u1ea3n l\u00fd doanh nghi\u1ec7p y\u00eau c\u1ea7u truy c\u1eadp \u0111\u1ea7y \u0111\u1ee7 v\u00e0o c\u00e1c \u1ee9ng d\u1ee5ng n\u1ed9i b\u1ed9 \u0111a t\u1ea7ng.<\/td>\n<td>Y\u00eau c\u1ea7u \u0111\u1eb7t t\u1ea1i DMZ c\u1ee7a gateway m\u1ed9t c\u00e1ch nghi\u00eam ng\u1eb7t, l\u1ecdc egress, v\u00e0 h\u1ea1n ch\u1ebf chia t\u00e1ch tunnel \u0111\u1ec3 ng\u0103n ch\u1eb7n c\u1ea7u n\u1ed1i m\u1ea1ng.<\/td>\n<td>Cao (t\u1ec7p v\u00e0 b\u1ed9 nh\u1edb cache n\u1eb1m c\u1ee5c b\u1ed9 tr\u00ean \u0111i\u1ec3m cu\u1ed1i).<\/td>\n<td>Cao (b\u1eaft bu\u1ed9c m\u00e3 h\u00f3a to\u00e0n b\u1ed9 \u0111\u0129a, EDR qu\u1ea3n l\u00fd, thi\u1ebft l\u1eadp c\u01a1 s\u1edf c\u1ea5u h\u00ecnh).<\/td>\n<\/tr>\n<tr>\n<td><strong>C\u1ed5ng \u1ee9ng d\u1ee5ng (HTTPS)<\/strong><\/td>\n<td>C\u00f4ng c\u1ee5 doanh nghi\u1ec7p d\u1ef1a tr\u00ean web (intranets, ERP, CRM) truy c\u1eadp t\u1eeb c\u00e1c \u0111i\u1ec3m cu\u1ed1i \u0111a d\u1ea1ng.<\/td>\n<td>Y\u00eau c\u1ea7u c\u1ee7ng c\u1ed1 reverse proxy, b\u1ed9 suite m\u00e3 h\u00f3a TLS nghi\u00eam ng\u1eb7t, v\u00e0 v\u00f4 hi\u1ec7u h\u00f3a b\u1ed9 nh\u1edb cache tr\u00ecnh duy\u1ec7t.<\/td>\n<td>Trung b\u00ecnh (b\u1ed9 nh\u1edb cache c\u00f2n l\u1ea1i, t\u1ea3i xu\u1ed1ng t\u1ec7p kh\u00f4ng m\u00e3 h\u00f3a).<\/td>\n<td>Th\u1ea5p \u0111\u1ebfn Trung b\u00ecnh (t\u01b0\u01a1ng th\u00edch tr\u00ecnh duy\u1ec7t v\u00e0 v\u1ec7 sinh b\u1ea3n v\u00e1).<\/td>\n<\/tr>\n<tr>\n<td><strong>Remote Desktop \/ VDI<\/strong><\/td>\n<td>Truy c\u1eadp c\u1ee7a nh\u00e0 th\u1ea7u, m\u00f4i tr\u01b0\u1eddng BYOD, v\u00e0 x\u1eed l\u00fd d\u1eef li\u1ec7u ph\u00e2n lo\u1ea1i ho\u1eb7c d\u1eef li\u1ec7u c\u00f3 t\u00e1c \u0111\u1ed9ng cao.<\/td>\n<td>Ph\u1ea3i v\u00f4 hi\u1ec7u h\u00f3a \u00e1nh x\u1ea1 \u1ed5 \u0111\u0129a t\u1eeb xa, chia s\u1ebb clipboard, chuy\u1ec3n h\u01b0\u1edbng USB, v\u00e0 in \u1ea5n c\u1ee5c b\u1ed9.<\/td>\n<td>Th\u1ea5p (d\u1eef li\u1ec7u v\u1eabn n\u1eb1m trong trung t\u00e2m d\u1eef li\u1ec7u; ch\u1ec9 truy\u1ec1n pixel).<\/td>\n<td>Th\u1ea5p (th\u1ef1c thi m\u00e1y ch\u1ee7 x\u1ea3y ra ph\u00eda m\u00e1y ch\u1ee7; y\u00eau c\u1ea7u t\u00ednh to\u00e0n v\u1eb9n c\u1ee7a h\u1ec7 \u0111i\u1ec1u h\u00e0nh kh\u00e1ch h\u00e0ng c\u01a1 b\u1ea3n).<\/td>\n<\/tr>\n<tr>\n<td><strong>Truy c\u1eadp \u1ee8ng d\u1ee5ng Tr\u1ef1c ti\u1ebfp<\/strong><\/td>\n<td>C\u00e1c \u1ee9ng d\u1ee5ng m\u00e1y kh\u00e1ch-m\u00e1y ch\u1ee7 ri\u00eang bi\u1ec7t (v\u00ed d\u1ee5: nh\u1eafn tin doanh nghi\u1ec7p, d\u1ecbch v\u1ee5 \u0111\u00e1m m\u00e2y).<\/td>\n<td>Y\u00eau c\u1ea7u m\u1edf c\u00e1c c\u1ed5ng m\u00e1y ch\u1ee7 ra b\u00ean ngo\u00e0i; \u0111\u00f2i h\u1ecfi x\u00e1c th\u1ef1c mutual TLS v\u00e0 x\u00e1c th\u1ef1c \u1edf c\u1ea5p \u0111\u1ed9 \u1ee9ng d\u1ee5ng.<\/td>\n<td>Trung b\u00ecnh \u0111\u1ebfn Cao (l\u01b0u tr\u1eef d\u1eef li\u1ec7u c\u1ee5c b\u1ed9 ph\u1ee5 thu\u1ed9c v\u00e0o \u1ee9ng d\u1ee5ng).<\/td>\n<td>Trung b\u00ecnh (phi\u00ean b\u1ea3n ph\u1ea7n m\u1ec1m kh\u00e1ch h\u00e0ng v\u00e0 ki\u1ec3m so\u00e1t l\u01b0u tr\u1eef x\u00e1c th\u1ef1c).<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>L\u1ef1a ch\u1ecdn ki\u1ebfn tr\u00fac li\u00ean quan \u0111\u1ebfn m\u1ed1i quan h\u1ec7 ngh\u1ecbch \u0111\u1ea3o gi\u1eefa \u0111\u1ed9 tin c\u1eady c\u1ee7a \u0111i\u1ec3m cu\u1ed1i v\u00e0 c\u00e1ch ly ph\u00eda m\u00e1y ch\u1ee7: khi ki\u1ec3m so\u00e1t \u0111i\u1ec3m cu\u1ed1i th\u1ea5p (nh\u01b0 v\u1edbi BYOD), c\u00e1c t\u1ed5 ch\u1ee9c ph\u1ea3i tri\u1ec3n khai ki\u1ebfn tr\u00fac tr\u00ecnh b\u00e0y ho\u1eb7c reverse-proxy (VDI ho\u1eb7c C\u1ed5ng \u1ee8ng d\u1ee5ng) thay v\u00ec tunnel m\u1ea1ng l\u1edbp 3.<\/p>\n<h2>Ch\u00ednh s\u00e1ch An ninh BYOD v\u00e0 C\u00e1c Bi\u1ec7n ph\u00e1p K\u1ef9 thu\u1eadt<\/h2>\n<p>NIST SP 800-46 Phi\u00ean b\u1ea3n 2 \u0111\u1eb7t tr\u1ecdng t\u00e2m \u0111\u00e1ng k\u1ec3 v\u00e0o c\u00e1c r\u1ee7i ro c\u1ee7a Vi\u1ec7c Mang Thi\u1ebft b\u1ecb c\u1ee7a Ch\u00ednh b\u1ea1n (BYOD). C\u00e1c laptop c\u00e1 nh\u00e2n, m\u00e1y t\u00ednh b\u1ea3ng v\u00e0 \u0111i\u1ec7n tho\u1ea1i th\u00f4ng minh do nh\u00e2n vi\u00ean ho\u1eb7c nh\u00e0 th\u1ea7u v\u1eadn h\u00e0nh gi\u1edbi thi\u1ec7u c\u00e1c vector \u0111e d\u1ecda kh\u00f4ng \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd, bao g\u1ed3m vi\u1ec7c s\u1eed d\u1ee5ng c\u00e1 nh\u00e2n v\u00e0 doanh nghi\u1ec7p pha tr\u1ed9n, m\u1ee9c \u0111\u1ed9 v\u00e1 l\u1ed7i ch\u01b0a x\u00e1c minh, \u1ee9ng d\u1ee5ng c\u00e0i \u0111\u1eb7t tr\u00e1i ph\u00e9p v\u00e0 truy c\u1eadp chung trong gia \u0111\u00ecnh.<\/p>\n<h3>H\u1ea1n ch\u1ebf K\u1ef9 thu\u1eadt c\u1ee7a Ph\u1ea7n c\u1ee9ng Kh\u00f4ng \u0111\u01b0\u1ee3c Qu\u1ea3n l\u00fd<\/h3>\n<p>M\u1ed9t doanh nghi\u1ec7p kh\u00f4ng th\u1ec3 th\u1ef1c thi c\u00f9ng m\u1ee9c \u0111\u1ed9 hi\u1ec3n th\u1ecb ho\u1eb7c quy\u1ec1n qu\u1ea3n tr\u1ecb \u0111\u1ed1i v\u1edbi thi\u1ebft b\u1ecb c\u00e1 nh\u00e2n nh\u01b0 \u0111\u1ed1i v\u1edbi ph\u1ea7n c\u1ee9ng do c\u00f4ng ty ph\u00e1t h\u00e0nh. Vi\u1ec7c b\u1eaft bu\u1ed9c c\u00e0i \u0111\u1eb7t l\u1ea1i h\u1ec7 \u0111i\u1ec1u h\u00e0nh, gi\u00e1m s\u00e1t li\u00ean t\u1ee5c x\u00e2m ph\u1ea1m v\u00e0 x\u00f3a t\u1eeb xa to\u00e0n b\u1ed9 thi\u1ebft b\u1ecb g\u00e2y ra nh\u1eefng th\u00e1ch th\u1ee9c ph\u00e1p l\u00fd, v\u1eadn h\u00e0nh v\u00e0 quy\u1ec1n ri\u00eang t\u01b0 nghi\u00eam tr\u1ecdng khi \u00e1p d\u1ee5ng cho thi\u1ebft b\u1ecb do nh\u00e2n vi\u00ean s\u1edf h\u1eefu.<\/p>\n<h3>Containerization v\u00e0 Qu\u1ea3n l\u00fd Thi\u1ebft b\u1ecb Di \u0111\u1ed9ng (MDM)<\/h3>\n<p>\u0110\u1ec3 thi\u1ebft l\u1eadp gi\u1edbi h\u1ea1n ki\u1ec3m so\u00e1t m\u00e0 kh\u00f4ng l\u00e0m \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn quy\u1ec1n ri\u00eang t\u01b0 c\u00e1 nh\u00e2n, NIST \u0111\u1ec1 xu\u1ea5t s\u1eed d\u1ee5ng c\u00f4ng ngh\u1ec7 containerization v\u00e0 Qu\u1ea3n l\u00fd Thi\u1ebft b\u1ecb Di \u0111\u1ed9ng (MDM) ho\u1eb7c Qu\u1ea3n l\u00fd \u1ee8ng d\u1ee5ng Di \u0111\u1ed9ng (MAM). C\u00e1c bi\u1ec7n ph\u00e1p ki\u1ec3m so\u00e1t n\u00e0y \u0111\u1ea1t \u0111\u01b0\u1ee3c c\u00e1c b\u1ea3o v\u1ec7 sau:<\/p>\n<ul>\n<li><strong>C\u00f4 l\u1eadp M\u00e3 h\u00f3a:<\/strong> C\u00e1c \u1ee9ng d\u1ee5ng doanh nghi\u1ec7p v\u00e0 d\u1eef li\u1ec7u doanh nghi\u1ec7p n\u1eb1m trong m\u1ed9t sandbox \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a, c\u00e1ch ly kh\u1ecfi c\u00e1c \u1ee9ng d\u1ee5ng v\u00e0 t\u1ec7p c\u00e1 nh\u00e2n.<\/li>\n<li><strong>X\u00f3a t\u1eeb xa c\u00f3 ch\u1ecdn l\u1ecdc:<\/strong> N\u1ebfu thi\u1ebft b\u1ecb BYOD b\u1ecb m\u1ea5t, b\u1ecb \u0111\u00e1nh c\u1eafp ho\u1eb7c nh\u00e2n vi\u00ean ngh\u1ec9 vi\u1ec7c, qu\u1ea3n tr\u1ecb vi\u00ean c\u00f3 th\u1ec3 k\u00edch ho\u1ea1t x\u00f3a c\u00f3 ch\u1ecdn l\u1ecdc sandbox doanh nghi\u1ec7p m\u00e0 kh\u00f4ng l\u00e0m thay \u0111\u1ed5i ph\u01b0\u01a1ng ti\u1ec7n, t\u00e0i li\u1ec7u ho\u1eb7c c\u1ea5u h\u00ecnh h\u1ec7 \u0111i\u1ec1u h\u00e0nh c\u00e1 nh\u00e2n.<\/li>\n<li><strong>Ng\u0103n ch\u1eb7n R\u00f2 r\u1ec9 D\u1eef li\u1ec7u:<\/strong> Ch\u00ednh s\u00e1ch h\u1ea1n ch\u1ebf c\u00e1c thao t\u00e1c sao ch\u00e9p d\u00e1n d\u1eef li\u1ec7u, ch\u1ee5p m\u00e0n h\u00ecnh c\u1ee5c b\u1ed9 v\u00e0 xu\u1ea5t t\u00e0i li\u1ec7u t\u1eeb container doanh nghi\u1ec7p v\u00e0o b\u1ed9 nh\u1edb c\u00e1 nh\u00e2n kh\u00f4ng \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd.<\/li>\n<\/ul>\n<p>Duy tr\u00ec ranh gi\u1edbi k\u1ef9 thu\u1eadt r\u00f5 r\u00e0ng gi\u1eefa m\u00f4i tr\u01b0\u1eddng c\u00e1 nh\u00e2n v\u00e0 c\u00e1c \u1ee9ng d\u1ee5ng doanh nghi\u1ec7p h\u1ed7 tr\u1ee3 vi\u1ec7c tu\u00e2n th\u1ee7 thi\u1ebft b\u1ecb r\u1ed9ng h\u01a1n, ph\u00f9 h\u1ee3p v\u1edbi <a href=\"https:\/\/govelocks.com\/vi\/global-smart-lock-security-standards-for-enterprise-iot\/\">ti\u00eau chu\u1ea9n an ninh kh\u00f3a th\u00f4ng minh to\u00e0n c\u1ea7u cho IoT doanh nghi\u1ec7p<\/a> v\u00e0 ph\u1ea7n c\u1ee9ng bi\u00ean gi\u1edbi c\u1ee7a c\u00e1c c\u01a1 s\u1edf k\u1ebft n\u1ed1i.<\/p>\n<h2>C\u00e1ch ph\u00f9 h\u1ee3p An ninh T\u1ed5 ch\u1ee9c v\u1edbi NIST CSF<\/h2>\n<p>Vi\u1ec7c th\u1ef1c hi\u1ec7n c\u00e1c khuy\u1ebfn ngh\u1ecb c\u1ee7a NIST SP 800-46 tr\u1ef1c ti\u1ebfp h\u1ed7 tr\u1ee3 c\u00e1c ch\u1ee9c n\u0103ng c\u1ed1t l\u00f5i c\u1ee7a Khung An ninh m\u1ea1ng NIST (CSF 2.0 \/ 1.1). Thay v\u00ec ho\u1ea1t \u0111\u1ed9ng nh\u01b0 m\u1ed9t h\u01b0\u1edbng d\u1eabn k\u1ef9 thu\u1eadt ri\u00eang bi\u1ec7t, SP 800-46 cung c\u1ea5p c\u00e1c ph\u01b0\u01a1ng ph\u00e1p th\u1ef1c thi chi\u1ebfn thu\u1eadt \u0111\u00e1p \u1ee9ng c\u00e1c k\u1ebft qu\u1ea3 c\u1ee7a khung r\u1ed9ng h\u01a1n.<\/p>\n<h3>1. Nh\u1eadn di\u1ec7n (ID)<\/h3>\n<p>SP 800-46 y\u00eau c\u1ea7u duy tr\u00ec m\u1ed9t danh m\u1ee5c ch\u00ednh x\u00e1c t\u1ea5t c\u1ea3 c\u00e1c t\u00e0i s\u1ea3n l\u00e0m vi\u1ec7c t\u1eeb xa, c\u00e1c m\u00e1y ch\u1ee7 truy c\u1eadp t\u1eeb xa \u0111\u01b0\u1ee3c ph\u00e9p v\u00e0 c\u00e1c \u0111i\u1ec3m cu\u1ed1i BYOD \u0111\u00e3 \u0111\u0103ng k\u00fd. Ph\u00e2n lo\u1ea1i c\u00e1c \u0111i\u1ec3m cu\u1ed1i theo lo\u1ea1i s\u1edf h\u1eefu v\u00e0 vai tr\u00f2 v\u1eadn h\u00e0nh ph\u00f9 h\u1ee3p tr\u1ef1c ti\u1ebfp v\u1edbi c\u00e1c danh m\u1ee5c Qu\u1ea3n l\u00fd T\u00e0i s\u1ea3n (ID.AM) v\u00e0 \u0110\u00e1nh gi\u00e1 R\u1ee7i ro (ID.RA) c\u1ee7a CSF.<\/p>\n<h3>2. B\u1ea3o v\u1ec7 (PR)<\/h3>\n<p>C\u1ed1t l\u00f5i c\u1ee7a SP 800-46 ph\u00f9 h\u1ee3p v\u1edbi c\u00e1c ch\u1ee9c n\u0103ng B\u1ea3o v\u1ec7 c\u1ee7a CSF, \u0111\u1eb7c bi\u1ec7t l\u00e0 Qu\u1ea3n l\u00fd Danh t\u00ednh, X\u00e1c th\u1ef1c v\u00e0 Ki\u1ec3m so\u00e1t Truy c\u1eadp (PR.AC) v\u00e0 B\u1ea3o m\u1eadt D\u1eef li\u1ec7u (PR.DS).<\/p>\n<p>Th\u1ef1c thi x\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 tr\u00ean c\u00e1c c\u1ed5ng t\u1eeb xa, c\u00f4 l\u1eadp c\u00e1c m\u1ea1ng kh\u00f4ng \u0111\u00e1ng tin c\u1eady qua DMZ, h\u1ea1n ch\u1ebf chia t\u00e1ch \u0111\u01b0\u1eddng truy\u1ec1n v\u00e0 m\u00e3 h\u00f3a d\u1eef li\u1ec7u khi ngh\u1ec9 v\u00e0 khi truy\u1ec1n t\u1ea3i \u0111\u00e1p \u1ee9ng c\u00e1c ki\u1ec3m so\u00e1t tr\u1ef1c ti\u1ebfp ph\u00f9 h\u1ee3p v\u1edbi y\u00eau c\u1ea7u n\u1ec1n t\u1ea3ng c\u1ee7a NIST SP 800-53 (nh\u01b0 AC-17 cho truy c\u1eadp t\u1eeb xa v\u00e0 SC-8 cho b\u1ea3o m\u1eadt truy\u1ec1n t\u1ea3i).<\/p>\n<p>C\u00e1c t\u1ed5 ch\u1ee9c th\u01b0\u1eddng m\u1edf r\u1ed9ng c\u00e1c ki\u1ec3m so\u00e1t danh t\u00ednh v\u00e0 truy c\u1eadp n\u00e0y t\u1eeb h\u1ea1 t\u1ea7ng CNTT h\u1ee3p l\u00fd sang c\u00e1c c\u01a1 s\u1edf v\u1eadt ch\u1ea5t v\u1eadt l\u00fd b\u1eb1ng c\u00e1ch <a href=\"https:\/\/govelocks.com\/vi\/electronic-access-control-locks\/\">kh\u00f3a ki\u1ec3m so\u00e1t truy c\u1eadp \u0111i\u1ec7n t\u1eed<\/a> \u0111\u1ec3 th\u1ed1ng nh\u1ea5t qu\u1ea3n tr\u1ecb truy c\u1eadp tr\u00ean c\u00e1c bi\u00ean gi\u1edbi k\u1ef9 thu\u1eadt s\u1ed1 v\u00e0 v\u1eadt l\u00fd.<\/p>\n<h3>3. Ph\u00e1t hi\u1ec7n (DE)<\/h3>\n<p>Theo SP 800-46, t\u1ea5t c\u1ea3 c\u00e1c m\u00e1y ch\u1ee7 truy c\u1eadp t\u1eeb xa, b\u1ed9 t\u1eadp trung VPN v\u00e0 proxy \u1ee9ng d\u1ee5ng ph\u1ea3i t\u1ea1o ra c\u00e1c nh\u1eadt k\u00fd ki\u1ec3m tra an ninh t\u1eadp trung.<\/p>\n<p>Ghi nh\u1eadt k\u00fd c\u00e1c l\u1ea7n c\u1ed1 g\u1eafng k\u1ebft n\u1ed1i t\u1eeb xa, th\u1eddi gian phi\u00ean, \u0111\u1ecba ch\u1ec9 IP ngu\u1ed3n v\u00e0 c\u00e1c th\u1ea5t b\u1ea1i x\u00e1c th\u1ef1c \u0111\u00e1p \u1ee9ng c\u00e1c ch\u1ee9c n\u0103ng Ph\u00e1t hi\u1ec7n Anomalies v\u00e0 S\u1ef1 ki\u1ec7n (DE.AE) v\u00e0 Gi\u00e1m s\u00e1t An ninh Li\u00ean t\u1ee5c (DE.CM), gi\u00fap nh\u00f3m v\u1eadn h\u00e0nh an ninh x\u00e1c \u0111\u1ecbnh c\u00e1c c\u1ed1 g\u1eafng t\u1ea5n c\u00f4ng brute-force v\u00e0 c\u00e1c m\u1eabu truy c\u1eadp b\u1ea5t th\u01b0\u1eddng trong th\u1eddi gian th\u1ef1c.<\/p>\n<h3>4. Ph\u1ea3n h\u1ed3i (RS) &amp; Kh\u00f4i ph\u1ee5c (RC)<\/h3>\n<p>Ch\u00ednh s\u00e1ch l\u00e0m vi\u1ec7c t\u1eeb xa r\u00f5 r\u00e0ng ph\u1ea3i bao g\u1ed3m c\u00e1c quy tr\u00ecnh \u1ee9ng ph\u00f3 s\u1ef1 c\u1ed1 cho c\u00e1c \u0111i\u1ec3m cu\u1ed1i t\u1eeb xa b\u1ecb x\u00e2m ph\u1ea1m. Khi ph\u00e1t hi\u1ec7n ho\u1ea1t \u0111\u1ed9ng b\u1ea5t th\u01b0\u1eddng, c\u00e1c ki\u1ec3m so\u00e1t t\u1ef1 \u0111\u1ed9ng ho\u1eb7c th\u1ee7 c\u00f4ng ph\u1ea3i cho ph\u00e9p ch\u1ea5m d\u1ee9t phi\u00ean ngay l\u1eadp t\u1ee9c, thu h\u1ed3i ch\u1ee9ng ch\u1ec9 x\u00e1c th\u1ef1c v\u00e0 c\u00f4 l\u1eadp thi\u1ebft b\u1ecb nghi ng\u1edd, tr\u1ef1c ti\u1ebfp \u0111\u00e1p \u1ee9ng c\u00e1c m\u1ee5c ti\u00eau Ph\u1ea3n h\u1ed3i Gi\u1ea3m thi\u1ec3u c\u1ee7a CSF (RS.MI).<\/p>\n<h2>C\u00e1c b\u01b0\u1edbc ti\u1ebfp theo \u0111\u1ec3 chu\u1ea9n b\u1ecb tu\u00e2n th\u1ee7 doanh nghi\u1ec7p<\/h2>\n<p>\u0110\u1ea1t \u0111\u01b0\u1ee3c s\u1ef1 ph\u00f9 h\u1ee3p v\u1edbi NIST SP 800-46 \u0111\u00f2i h\u1ecfi ph\u1ea3i d\u1ecbch c\u00e1c khuy\u1ebfn ngh\u1ecb k\u1ef9 thu\u1eadt th\u00e0nh m\u1ed9t \u0111\u00e1nh gi\u00e1 c\u00f3 c\u1ea5u tr\u00fac v\u1ec1 h\u1ea1 t\u1ea7ng m\u1ea1ng hi\u1ec7n c\u00f3 v\u00e0 ch\u00ednh s\u00e1ch qu\u1ea3n tr\u1ecb. C\u00e1c t\u1ed5 ch\u1ee9c chu\u1ea9n b\u1ecb cho c\u00e1c cu\u1ed9c ki\u1ec3m tra tu\u00e2n th\u1ee7 ho\u1eb7c mu\u1ed1n c\u1ee7ng c\u1ed1 ho\u1ea1t \u0111\u1ed9ng t\u1eeb xa n\u00ean theo m\u1ed9t quy tr\u00ecnh chu\u1ea9n b\u1ecb c\u00f3 h\u1ec7 th\u1ed1ng:<\/p>\n<ol>\n<li><strong>Xem x\u00e9t v\u00e0 C\u1eadp nh\u1eadt Ch\u00ednh s\u00e1ch L\u00e0m vi\u1ec7c t\u1eeb xa:<\/strong> \u0110\u00e1nh gi\u00e1 l\u1ea1i c\u00e1c t\u00e0i li\u1ec7u hi\u1ec7n c\u00f3 \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o c\u00e1c \u0111\u1ecbnh ngh\u0129a r\u00f5 r\u00e0ng v\u1ec1 ph\u01b0\u01a1ng th\u1ee9c truy c\u1eadp t\u1eeb xa \u0111\u01b0\u1ee3c ph\u00e9p, c\u00e1c c\u1ea5p \u0111\u1ed9 thi\u1ebft b\u1ecb, vi\u1ec7c s\u1eed d\u1ee5ng BYOD ch\u1ea5p nh\u1eadn \u0111\u01b0\u1ee3c v\u00e0 c\u00e1c ti\u00eau chu\u1ea9n b\u1ea3o m\u1eadt \u0111i\u1ec3m cu\u1ed1i b\u1eaft bu\u1ed9c.<\/li>\n<li><strong>Ki\u1ec3m tra Ki\u1ebfn tr\u00fac C\u1ed5ng t\u1eeb xa:<\/strong> X\u00e1c minh r\u1eb1ng t\u1ea5t c\u1ea3 c\u00e1c b\u1ed9 t\u1eadp trung VPN, c\u1ed5ng m\u00e1y t\u00ednh \u0111\u1ec3 b\u00e0n t\u1eeb xa v\u00e0 c\u1ed5ng \u1ee9ng d\u1ee5ng n\u1eb1m trong c\u00e1c DMZ \u0111\u01b0\u1ee3c ph\u00e2n \u0111o\u1ea1n \u0111\u00fang c\u00e1ch, v\u1edbi c\u00e1c quy t\u1eafc t\u01b0\u1eddng l\u1eeda v\u00e0o ra h\u1ea1n ch\u1ebf l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp \u0111\u1ebfn c\u00e1c \u0111\u00edch n\u1ed9i b\u1ed9 c\u1ea7n thi\u1ebft.<\/li>\n<li><strong>Th\u1ef1c thi X\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 tr\u00ean t\u1ea5t c\u1ea3 c\u00e1c c\u1ed5ng:<\/strong> Lo\u1ea1i b\u1ecf c\u00e1c \u0111i\u1ec3m truy c\u1eadp legacy x\u00e1c th\u1ef1c \u0111\u01a1n y\u1ebfu t\u1ed1 v\u00e0 th\u1ef1c thi MFA ch\u1ed1ng l\u1eeba \u0111\u1ea3o tr\u00ean t\u1ea5t c\u1ea3 c\u00e1c d\u1ecbch v\u1ee5 truy c\u1eadp t\u1eeb xa m\u00e0 kh\u00f4ng ngo\u1ea1i l\u1ec7.<\/li>\n<li><strong>\u0110\u00e1nh gi\u00e1 R\u1ee7i ro BYOD:<\/strong> \u0110\u00e1nh gi\u00e1 xem c\u00e1c thi\u1ebft b\u1ecb c\u00e1 nh\u00e2n hi\u1ec7n c\u00f3 truy c\u1eadp t\u00e0i s\u1ea3n n\u1ed9i b\u1ed9 qua VPN l\u1edbp 3 hay kh\u00f4ng. N\u1ebfu c\u00f3, chuy\u1ec3n c\u00e1c \u0111i\u1ec3m cu\u1ed1i n\u00e0y sang c\u00e1c phi\u00ean VDI c\u00f4 l\u1eadp ho\u1eb7c c\u1ed5ng \u1ee9ng d\u1ee5ng ch\u1ee9a trong container \u0111\u1ec3 gi\u1ea3m thi\u1ec3u r\u1ee7i ro r\u00f2 r\u1ec9 d\u1eef li\u1ec7u.<\/li>\n<li><strong>\u0110\u1ed1i chi\u1ebfu v\u1edbi c\u00e1c c\u00f4ng c\u1ee5 \u0111\u00e1nh gi\u00e1 c\u00f3 c\u1ea5u tr\u00fac:<\/strong> Th\u1ef1c hi\u1ec7n ph\u00e2n t\u00edch kho\u1ea3ng c\u00e1ch ch\u00ednh th\u1ee9c b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng c\u00f4ng c\u1ee5 \u0111\u00e1nh gi\u00e1 tu\u00e2n th\u1ee7 doanh nghi\u1ec7p ho\u1eb7c \u0111\u00e1nh gi\u00e1 k\u1ef9 thu\u1eadt c\u1ee7a b\u00ean th\u1ee9 ba \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh s\u1ef1 l\u1ec7ch c\u1ea5u h\u00ecnh, c\u00e1c thu\u1eadt to\u00e1n m\u00e3 h\u00f3a l\u1ed7i th\u1eddi v\u00e0 c\u00e1c \u0111i\u1ec3m truy c\u1eadp t\u1eeb xa kh\u00f4ng \u0111\u01b0\u1ee3c gi\u00e1m s\u00e1t tr\u01b0\u1edbc khi ti\u1ebfn h\u00e0nh c\u00e1c cu\u1ed9c ki\u1ec3m tra tu\u00e2n th\u1ee7 quy \u0111\u1ecbnh.<\/li>\n<\/ol>\n<p>B\u1eb1ng c\u00e1ch gi\u1ea3i quy\u1ebft c\u00f3 h\u1ec7 th\u1ed1ng vi\u1ec7c b\u1ed1 tr\u00ed c\u1ed5ng, t\u00ednh to\u00e0n v\u1eb9n c\u1ee7a \u0111i\u1ec3m cu\u1ed1i v\u00e0 vi\u1ec7c th\u1ef1c thi x\u00e1c th\u1ef1c, c\u00e1c nh\u00f3m CNTT doanh nghi\u1ec7p c\u00f3 th\u1ec3 thi\u1ebft l\u1eadp m\u1ed9t m\u00f4i tr\u01b0\u1eddng l\u00e0m vi\u1ec7c t\u1eeb xa b\u1ec1n v\u1eefng \u0111\u00e1p \u1ee9ng c\u00e1c h\u01b0\u1edbng d\u1eabn c\u1ee7a NIST v\u00e0 b\u1ea3o v\u1ec7 h\u1ea1 t\u1ea7ng quan tr\u1ecdng kh\u1ecfi c\u00e1c m\u1ed1i \u0111e d\u1ecda b\u00ean ngo\u00e0i.<\/p>","protected":false},"excerpt":{"rendered":"<p>Kh\u00e1m ph\u00e1 c\u00e1ch T\u1eadp san \u0111\u1eb7c bi\u1ec7t c\u1ee7a NIST 800-46 h\u01b0\u1edbng d\u1eabn b\u1ea3o v\u1ec7 l\u00e0m vi\u1ec7c t\u1eeb xa doanh nghi\u1ec7p, ki\u1ebfn tr\u00fac truy c\u1eadp t\u1eeb xa v\u00e0 m\u00f4i tr\u01b0\u1eddng BYOD v\u1edbi c\u00e1c ti\u00eau chu\u1ea9n k\u1ef9 thu\u1eadt t\u1ed1t nh\u1ea5t<\/p>","protected":false},"author":1,"featured_media":3007,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[22],"tags":[],"class_list":["post-3008","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-industry-knowledge"],"_links":{"self":[{"href":"https:\/\/govelocks.com\/vi\/wp-json\/wp\/v2\/posts\/3008","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/govelocks.com\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/govelocks.com\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/govelocks.com\/vi\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/govelocks.com\/vi\/wp-json\/wp\/v2\/comments?post=3008"}],"version-history":[{"count":1,"href":"https:\/\/govelocks.com\/vi\/wp-json\/wp\/v2\/posts\/3008\/revisions"}],"predecessor-version":[{"id":3010,"href":"https:\/\/govelocks.com\/vi\/wp-json\/wp\/v2\/posts\/3008\/revisions\/3010"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/govelocks.com\/vi\/wp-json\/wp\/v2\/media\/3007"}],"wp:attachment":[{"href":"https:\/\/govelocks.com\/vi\/wp-json\/wp\/v2\/media?parent=3008"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/govelocks.com\/vi\/wp-json\/wp\/v2\/categories?post=3008"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/govelocks.com\/vi\/wp-json\/wp\/v2\/tags?post=3008"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}