IT Security: yuav ua li cas tiv thaiv koj tus kheej los ntawm Excel macro kab mob tawm tsam

Excel Macro Security tiv thaiv koj lub computer los ntawm cov kab mob uas yuav kis tau rau koj lub computer ntawm Excel macros.

Macro kev ruaj ntseg hloov pauv ntawm Excel 2003 thiab Excel 2007.

Hauv tsab xov xwm no cia saib ua ke yuav ua li cas tiv thaiv koj tus kheej kom zoo tshaj plaws los ntawm Excel macro tawm tsam.

Dab tsi yog macro nres

Kev tawm tsam macro yog qhov teeb meem ntawm kev txhaj tshuaj tsis zoo, script-based attack uas tuaj raws li kev qhia macro hauv cov ntaub ntawv zoo li muaj kev nyab xeeb. Hackers ua cov kev tawm tsam no los ntawm embedding malware download tsab ntawv (feem ntau) rau hauv cov ntaub ntawv uas txhawb macros. Lub siab phem thov ntawm macros nws yog nyob ntawm tib neeg qhov tsis txaus ntseeg ntawm kev tsis paub thiab kev tsis saib xyuas . Muaj ob peb yam ntxwv ntawm macro tawm tsam uas ua rau lawv txaus ntshai tshwj xeeb. Txawm li cas los xij, tseem muaj cov kev daws teeb meem zoo los tiv thaiv cov kev tawm tsam zoo li no.

Macros yog dab tsi?

Macros yog cov lus txib siv hauv ntau daim ntawv thov kom automate cov txheej txheem niaj hnub thiab nthuav dav ntau yam ntawm kev siv cov kev pab cuam. 

Muaj ntau txoj haujlwm uas koj tuaj yeem ua ntawm cov ntaub ntawv hauv Excel. Los ntawm kev tsim thiab khiav macro, koj tuaj yeem ua tau sau ib cov lus txib piav qhia txog cov txheej txheem uas nquag rov ua dua thiab ua rau lawv tsis muaj zog, txuag sijhawm ntau. Macros tso cai rau koj coj cov peev txheej sab nraud los txheeb xyuas cov ntaub ntawv los ntawm lwm cov ntaub ntawv hauv koj lub computer lossis txawm tias kev siv network mus download tau cov khoom los ntawm tej thaj chaw deb servers.

Kom nws mus Macro Virus ?

Txoj hauv kev yooj yim tshaj plaws los ua qhov kev tawm tsam macro yog embed ib tsab ntawv rub tawm hauv cov ntaub ntawv tsis zoo saib. Niaj hnub nimno hacking nyiam nyiag ntaub ntawv los ntawm koj muag lawv, encrypt koj cov ntaub ntawv rau extort tus nqe txhiv o leverage koj endpoint nyob rau hauv lwm txoj kev rau lawv kom zoo dua. Tag nrho cov xwm txheej no koom nrog kev txhaj tshuaj ntawm cov software txawv teb chaws rau hauv qhov system. Thiab macro yog qhov zoo ntawm qhov no.

Dab tsi ua rau macro tawm tsam tshwj xeeb txaus ntshai?

Kev tawm tsam Macro yog qhov tsis txaus ntseeg rau pab pawg kev nyab xeeb, vim tias lawv muaj qee yam khoom uas ua rau lawv nyuaj rau taug qab thiab nyuaj los tiv thaiv kev sib kis.

• Ib qho yooj yim kis tau. Macros ua haujlwm ntawm kev ua haujlwm sib txawv. Thaum lawv tsaws ntawm lub tsheb, lawv tuaj yeem kis tau zoo ib yam computer viruses thiab Internet worms. Lub macro tuaj yeem muaj cov lus txib los hloov kho lwm cov ntaub ntawv thiab txawm tias cov qauv ntaub ntawv. Qhov no ua rau txhua cov ntaub ntawv tsim los ntawm lub tshuab muaj kab mob. Piv txwv li, macros tuaj yeem tsim kom muaj kev sib txuas hauv network kom nthuav tawm cov ntaub ntawv tsis zoo ntawm email.
• Nws tuaj yeem yog fileless. Malefactors tuaj yeem sau macros kom tsis muaj qhov cim ntawm lawv lub xub ntiag ntawm lub khoos phis tawj lub hard drive lossis lwm yam khoom siv cia. Nws ua rau macro tawm tsam qhov piv txwv tiag tiag ntawm qhov tsis muaj kev tawm tsam uas nws cov lej muaj nyob hauv RAM nkaus xwb, tsis yog ntawm tus neeg raug tsim txom lub tshuab tsav (raws li cov ntaub ntawv lossis lwm daim ntawv).
• Yooj yim rau plooj. Muaj ntau ntau algorithms rau obfuscating macro code. Obfuscation tsis yog coding, nws yog cov txheej txheem yooj yim dua, tab sis nws tseem txaus los ua cov ntawv nyeem tsis tau rau tib neeg tus kws tshuaj ntsuam lossis hloov nws mus rau hauv ib qho kev sib tw ua ntej lawv tuaj yeem qhia tau tias cov macros siv yog qhov phem.

Thaum tus neeg siv yog qhov tsis zoo

Macro tawm tsam siv tej zaum qhov txaus ntshai tshaj plaws hauv cybersecurity: tus neeg siv. Tsis muaj computer literacy thiab inattention ua rau cov neeg siv a yooj yim lub hom phiaj rau hackers thiab tso cai rau cov neeg ua txhaum cai cia siab tias cov neeg siv yuav tua lawv cov pob khoom phem. Cov neeg ua txhaum cai yuav tsum dag cov neeg siv ob zaug : ua ntej kom lawv rub tawm cov ntaub ntawv nrog cov macros thiab tom qab ntawd kom yaum lawv kom tso cai rau macros khiav. Muaj ntau yam kev dag ntxias uas hackers tuaj yeem siv rau, tab sis lawv feem ntau yog tib yam li feem ntau phishing thiab malware nthuav tawm phiaj xwm.

Macro kev ruaj ntseg hauv cov qauv tam sim no ntawm Excel (2007 thiab tom qab):

Yog tias koj xav khiav macros hauv Excel tam sim no, koj yuav tsum khaws cov ntaub ntawv Excel ua phau ntawv ua haujlwm macro. Excel lees paub cov phau ntawv ua haujlwm macro los ntawm .xlsm cov ntaub ntawv txuas ntxiv (ntau dua li ib txwm .xlsx txuas ntxiv).

Yog li ntawd, yog tias koj ntxiv ib qho macro rau ib tus qauv Excel phau ntawv ua haujlwm thiab xav kom muaj peev xwm khiav qhov macro no txhua zaus koj nkag mus rau phau ntawv ua haujlwm, koj yuav tsum khaws nws nrog .xlsm txuas ntxiv.

Txhawm rau ua qhov no, xaiv Txuag Raws li los ntawm "Cov ntaub ntawv" tab ntawm Excel ribbon. Excel yuav tom qab ntawd tso saib "Save As" screen lossis "Save As" dialog box.

Teem cov ntaub ntawv rau "Excel Macro-Enabled Workbook" thiab tom qab ntawd nyem lub pob Salva .

Qhov sib txawv ntawm Excel cov ntaub ntawv txuas ntxiv ua kom pom tseeb thaum phau ntawv ua haujlwm muaj macros, yog li qhov no hauv nws tus kheej yog qhov ntsuas kev nyab xeeb muaj txiaj ntsig. Txawm li cas los xij, Excel kuj tseem muaj kev xaiv macro kev ruaj ntseg teeb tsa, uas tuaj yeem tswj tau ntawm cov ntawv qhia zaub mov.

Macro Security Settings

Plaub macro kev ruaj ntseg teeb tsa:

• "Disable tag nrho macros yam tsis tau ceeb toom": Qhov kev teeb tsa no tsis tso cai rau cov macros khiav. Thaum koj qhib phau ntawv ua haujlwm Excel tshiab, koj tsis tau ceeb toom tias nws muaj macros, yog li koj yuav tsis paub tias vim li cas phau ntawv ua haujlwm tsis ua haujlwm raws li qhov xav tau.
• "Disable tag nrho macros nrog kev ceeb toom": Qhov teeb tsa no tiv thaiv macros los ntawm kev khiav. Txawm li cas los xij, yog tias muaj macros hauv phau ntawv ua haujlwm, lub qhov rai pop-up yuav ceeb toom koj tias macros muaj nyob thiab tau ua tsis taus. Tom qab ntawd koj tuaj yeem xaiv qhib macros hauv phau ntawv ua haujlwm tam sim no yog tias koj xav tau.
• "Disable tag nrho cov macro tshwj tsis yog cov kos npe digitally": Qhov kev teeb tsa no tsuas yog tso cai rau macros los ntawm cov chaw ntseeg tau khiav. Tag nrho lwm cov macros tsis khiav. Thaum koj qhib phau ntawv ua haujlwm Excel tshiab, koj tsis tau ceeb toom tias nws muaj macros, yog li koj yuav tsis paub tias vim li cas phau ntawv ua haujlwm tsis ua haujlwm raws li qhov xav tau.
• "Qhib tag nrho cov macro": Qhov kev teeb tsa no tso cai rau txhua tus macro khiav. Thaum koj qhib phau ntawv ua haujlwm Excel tshiab, koj tsis tau ceeb toom tias nws muaj macros, thiab koj yuav tsis paub txog cov macros khiav thaum cov ntaub ntawv qhib.

Yog tias koj xaiv qhov chaw thib ob, "Disable tag nrho macros nrog kev ceeb toom", thaum koj qhib phau ntawv ua haujlwm uas muaj macros, koj tau txais kev xaiv los tso cai rau macros khiav. Qhov kev xaiv no tau nthuav tawm rau koj hauv cov kab daj nyob rau sab saum toj ntawm daim ntawv nthuav qhia, raws li qhia hauv qab no:

Yog li ntawd, koj tsuas yog yuav tsum nyem lub pob no yog tias koj xav tso cai rau macro khiav.

Nkag mus rau Excel macro kev ruaj ntseg teeb tsa

Yog tias koj xav pom lossis hloov Excel macro kev ruaj ntseg teeb tsa hauv Excel versions dhau los:

• Hauv Excel 2007: Xaiv Excel cov ntawv qhia zaub mov tseem ceeb (los ntawm xaiv lub logo Excel nyob rau sab laug sab laug ntawm daim ntawv teev npe) thiab, nyob rau hauv qab sab xis ntawm cov ntawv qhia zaub mov, xaiv Excel Options los tso saib "Excel Options" dialog box; Los ntawm "Excel Options" dialog box, xaiv qhov kev xaiv Chaw Tiv Thaiv thiab, los ntawm qhov no, nyem rau ntawm lub pob Trust Center Settings… ; Los ntawm kev xaiv Macro nqis , xaiv ib qho ntawm cov chaw thiab nias OK .
• Hauv Excel 2010 lossis tom qab ntawd: Xaiv lub tab cov ntaub ntawv thiab xaiv los ntawm qhov no Options los tso saib "Excel Options" dialog box; Los ntawm "Excel Options" dialog box, xaiv qhov kev xaiv Chaw Tiv Thaiv thiab, los ntawm qhov no, nyem rau ntawm lub pob Trust Center Settings… ; Los ntawm kev xaiv Macro nqis , xaiv ib qho ntawm cov chaw thiab nias OK .

Nco tseg: Thaum koj hloov Excel macro kev ruaj ntseg teeb tsa, koj yuav tsum kaw thiab rov pib Excel rau qhov chaw tshiab kom siv tau.

Cov chaw ntseeg siab nyob rau hauv cov qauv tam sim no ntawm Excel

Tam sim no versions ntawm Excel tso cai rau koj mus definish ntseeg qhov chaw, piv txwv li folders ntawm koj lub computer uas Excel "trusts". Yog li ntawd, Excel tshem tawm cov kev txheeb xyuas macro ib txwm thaum qhib cov ntaub ntawv khaws cia hauv cov chaw no. Qhov no txhais tau hais tias yog tias cov ntaub ntawv Excel tau muab tso rau hauv qhov chaw ntseeg siab, macros hauv cov ntaub ntawv no yuav raug qhib, tsis hais qhov chaw ruaj ntseg macro.

Microsoft muaj defined ib co kev txhim khu kev qha ua ntejdefinites, teev nyob rau hauv qhov kev xaiv xaiv Kev ntseeg siab hauv koj phau ntawv ua haujlwm Excel. Koj tuaj yeem nkag mus rau nws los ntawm cov kauj ruam hauv qab no:

• Hauv Excel 2007: Xaiv Excel cov ntawv qhia zaub mov tseem ceeb (los ntawm xaiv lub logo Excel nyob rau sab laug sab laug ntawm daim ntawv nthuav qhia) thiab, nyob rau hauv qab sab xis ntawm cov ntawv qhia zaub mov, xaiv Excel Options; Los ntawm "Excel Options" dialog box uas tshwm, xaiv qhov kev xaiv Chaw Tiv Thaiv thiab, los ntawm qhov no, nyem rau ntawm lub pob Trust Center Settings… ; Xaiv qhov kev xaiv Cov chaw ntseeg siab los ntawm cov ntawv qhia zaub mov ntawm sab laug.
• Hauv Excel 2010 lossis tom qab ntawd: Xaiv cov ntaub ntawv tab thiab los ntawm qhov kev xaiv no;
  Los ntawm "Excel Options" dialog box uas qhib, xaiv qhov kev xaiv Trust Center thiab los ntawm qhov no, nyem rau ntawm Trust Center Settings… khawm;
  Xaiv qhov Trusted Locations xaiv los ntawm cov ntawv qhia zaub mov sab laug.

Yog koj xav tau definish koj qhov chaw ntseeg siab, koj tuaj yeem ua nws raws li hauv qab no:

• Los ntawm kev xaiv Cov chaw ntseeg siab , nyem lub pob Ntxiv qhov chaw tshiab… ;
• Nrhiav cov npe uas koj xav kom ntseeg siab thiab nyem OK .

Saib xyuas: Peb tsis pom zoo kom tso qhov loj ntawm lub tsav, xws li tag nrho "Kuv Cov Ntaub Ntawv" nplaub tshev, nyob rau hauv qhov chaw ntseeg siab, vim qhov no ua rau koj muaj kev pheej hmoo ntawm kev tso cai macros los ntawm qhov tsis ntseeg.

Ercole Palmeri