{"id":11732,"date":"2023-08-24T09:39:46","date_gmt":"2023-08-24T07:39:46","guid":{"rendered":"https:\/\/infolib.re\/blog\/?p=11732"},"modified":"2026-08-20T16:29:02","modified_gmt":"2026-08-20T14:29:02","slug":"la-securite-des-systemes-dinformation","status":"publish","type":"post","link":"https:\/\/infolib.re\/blog\/la-securite-des-systemes-dinformation\/","title":{"rendered":"La s\u00e9curit\u00e9 des syst\u00e8mes d\u2019information"},"content":{"rendered":"<p>La s\u00e9curit\u00e9 des syst\u00e8mes d\u2019information vise \u00e0 emp\u00eacher le mauvais usage, la modification ou le d\u00e9tournement des syst\u00e8mes d\u2019information.<br \/>\nLa s\u00e9curit\u00e9 des syst\u00e8mes d\u2019information am\u00e9liore la rentabilit\u00e9 de l\u2019organisme concern\u00e9, sa r\u00e9putation et les conditions de travail. Elle garantit la <strong>disponibilit\u00e9<\/strong>, l\u2019<strong>int\u00e9grit\u00e9<\/strong>, la <strong>confidentialit\u00e9<\/strong>, l\u2019<strong>authenticit\u00e9<\/strong> et la <strong>non-r\u00e9pudiation<\/strong> des donn\u00e9es. Elle prot\u00e8ge les utilisateurs, leurs proches et leurs contacts professionnels.<br \/>\nLa s\u00e9curit\u00e9 des syst\u00e8mes d\u2019information devient efficace lorsque tout le monde y participe volontairement.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h2>R\u00e9f\u00e9rentiels<\/h2>\n<p>&nbsp;<\/p>\n<ul>\n<li><a href=\"https:\/\/cyber.gouv.fr\/reglementation\/reglementation-identite-confiance-numerique\/securite-echanges-voie-electronique\/referentiel-general-de-securite\/\" target=\"_blank\" rel=\"noopener\">Le r\u00e9f\u00e9rentiel g\u00e9n\u00e9ral de s\u00e9curit\u00e9 (RGS)<\/a>.<\/li>\n<li><a href=\"https:\/\/eur-lex.europa.eu\/eli\/dir\/2022\/2555\/2022-12-27?locale=fr\" target=\"_blank\" rel=\"noopener\">La directive NIS 2<\/a>.<\/li>\n<li><a href=\"https:\/\/eur-lex.europa.eu\/eli\/reg\/2024\/2847\/2024-11-20\" target=\"_blank\" rel=\"noopener\">Le r\u00e8glement sur la cyberr\u00e9silience<\/a>.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h2>M\u00e9thodologie<\/h2>\n<p>&nbsp;<\/p>\n<p>Pour la mise en place d&rsquo;un syst\u00e8me de management de la s\u00e9curit\u00e9 de l\u2019information (SMSI), voir les <a href=\"https:\/\/fr.wikipedia.org\/wiki\/Suite_ISO\/CEI_27000\" target=\"_blank\" rel=\"noopener\">normes ISO 27xxx<\/a>. Le SMSI est un ensemble d\u2019outils (tableaux de bord), de documents (analyse des risques, politique de s\u00e9curit\u00e9 des syst\u00e8mes d\u2019information PSSI) et de m\u00e9thodes (comme la d\u00e9marche Plan \u2013 Do \u2013 Check \u2013 Act ou PDCA) pour d\u00e9finir une politique de s\u00e9curit\u00e9 de l\u2019information et l\u2019appliquer avec des moyens techniques, juridiques et humains.<\/p>\n<p><a href=\"https:\/\/infolib.re\/blog\/wp-content\/uploads\/2023\/08\/SMSI.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-11982 size-large\" src=\"https:\/\/infolib.re\/blog\/wp-content\/uploads\/2023\/08\/SMSI-1024x730.png?_t=1701980749\" alt=\"\" width=\"640\" height=\"456\" srcset=\"https:\/\/infolib.re\/blog\/wp-content\/uploads\/2023\/08\/SMSI-1024x730.png 1024w, https:\/\/infolib.re\/blog\/wp-content\/uploads\/2023\/08\/SMSI-300x214.png 300w, https:\/\/infolib.re\/blog\/wp-content\/uploads\/2023\/08\/SMSI-768x548.png 768w, https:\/\/infolib.re\/blog\/wp-content\/uploads\/2023\/08\/SMSI-379x270.png 379w, https:\/\/infolib.re\/blog\/wp-content\/uploads\/2023\/08\/SMSI.png 1130w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/a><\/p>\n<p>Il est recommand\u00e9 de faire une analyse des risques avant une PSSI. Exemples de m\u00e9thodes d\u2019analyse des risques :<\/p>\n<ul>\n<li><a href=\"https:\/\/clusif.fr\/services\/management-des-risques\/\" target=\"_blank\" rel=\"noopener\">M\u00e9thode harmonis\u00e9e d\u2019analyse des risques (MEHARI)<\/a>.<\/li>\n<li><a href=\"https:\/\/cyber.gouv.fr\/securisation\/analyse-des-risques\/methode-ebios-rm\/\" target=\"_blank\" rel=\"noopener\">EBIOS Risk Manager<\/a> (Expression des Besoins et Identification des Objectifs de S\u00e9curit\u00e9).\n<ul>\n<li>Sc\u00e9narios\u00a0:\n<ul>\n<li><a href=\"https:\/\/clusif.fr\/services\/management-des-risques\/bases-danalyse-generalistes\/\" target=\"_blank\" rel=\"noopener\">La base de Sc\u00e9narios du Clusif<\/a>.<\/li>\n<li><a href=\"https:\/\/attack.mitre.org\" target=\"_blank\" rel=\"noopener\">La base MITRE ATT&amp;CK<\/a>.<\/li>\n<\/ul>\n<\/li>\n<li><a href=\"https:\/\/cyber.gouv.fr\/securisation\/homologation-de-securite\/\" target=\"_blank\" rel=\"noopener\">L\u2019homologation de s\u00e9curit\u00e9<\/a>.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>La politique de s\u00e9curit\u00e9 des syst\u00e8mes d\u2019information (PSSI)\u00a0:<\/p>\n<ul>\n<li><a href=\"https:\/\/messervices.cyber.gouv.fr\/guides\/pssi-guide-delaboration-de-politiques-de-securite-des-systemes-dinformation\" target=\"_blank\" rel=\"noopener\">Guide d\u2019\u00e9laboration d&rsquo;une PSSI<\/a>.<\/li>\n<li><a href=\"https:\/\/cyber.gouv.fr\/reglementation\/cybersecurite-systemes-dinformation\/protection-du-service-numerique-de-letat\/\" target=\"_blank\" rel=\"noopener\">La PSSI de l\u2019\u00c9tat (PSSIE)<\/a>.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>Guides de l\u2019ANSSI\u00a0:<\/p>\n<ul>\n<li><a href=\"https:\/\/messervices.cyber.gouv.fr\/guides\/la-cybersecurite-pour-les-tpepme-en-treize-questions\" target=\"_blank\" rel=\"noopener\">La cybers\u00e9curit\u00e9 pour les TPE\/PME en treize questions<\/a>.<\/li>\n<li><a href=\"https:\/\/cyber.gouv.fr\/securisation\/10-regles-or-s%C3%A9curit%C3%A9-num%C3%A9rique\/\" target=\"_blank\" rel=\"noopener\">10 r\u00e8gles d\u2019or en mati\u00e8re de s\u00e9curit\u00e9 num\u00e9rique<\/a>.<\/li>\n<li><a href=\"https:\/\/secnumacademie.gouv.fr\" target=\"_blank\" rel=\"noopener\">MOOC de l&rsquo;ANSSI<\/a> (formation certifiante).<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>La protection des donn\u00e9es \u00e0 caract\u00e8re personnel (RGPD)\u00a0:<\/p>\n<ul>\n<li><a href=\"https:\/\/cnil.fr\" target=\"_blank\" rel=\"noopener\">Commission Nationale de l\u2019Informatique et des Libert\u00e9s (CNIL)<\/a>.<\/li>\n<li>L&rsquo;<span style=\"background-color: #ccffcc;\"><a style=\"background-color: #ccffcc;\" href=\"https:\/\/atelier-rgpd.cnil.fr\" target=\"_blank\" rel=\"noopener\">Atelier RGPD<\/a> de la CNIL<\/span> (formation certifiante).<\/li>\n<li><a href=\"https:\/\/www.legifrance.gouv.fr\/codes\/article_lc\/LEGIARTI000037825496\/\" target=\"_blank\" rel=\"noopener\">Code p\u00e9nal &#8211; Des atteintes aux droits de la personne r\u00e9sultant des fichiers ou des traitements informatiques<\/a>.<\/li>\n<li><a href=\"https:\/\/www.afapdp.org\" target=\"_blank\" rel=\"noopener\">Association francophone des autorit\u00e9s de protection des donn\u00e9es personnelles (AFAPDP)<\/a>.<\/li>\n<li><a href=\"https:\/\/afcdp.net\" target=\"_blank\" rel=\"noopener\">Association Fran\u00e7aise des Correspondants \u00e0 la protection des Donn\u00e9es \u00e0 caract\u00e8re Personnel (AFCDP)<\/a>.<\/li>\n<li><a href=\"https:\/\/asso-purr.eu.org\" target=\"_blank\" rel=\"noopener\">Association P.U.R.R<\/a>.<\/li>\n<\/ul>\n<p>Ne r\u00e9pondez pas au t\u00e9l\u00e9phone \u00e0 des num\u00e9ros inconnus (laissez le r\u00e9pondeur r\u00e9pondre), ne les rappelez pas et ne publiez pas vos informations personnelles, votre voix, vos photos et vos vid\u00e9os sur Internet, elles seront utilisables par n&rsquo;importe qui :<\/p>\n<ul>\n<li><a href=\"https:\/\/www.zataz.com\/usurpation-vocale-les-sondages-telephoniques-detournes-par-les-cybercriminels\/\" target=\"_blank\" rel=\"noopener\">Usurpation vocale : les sondages t\u00e9l\u00e9phoniques d\u00e9tourn\u00e9s par les cybercriminels<\/a> et <a href=\"https:\/\/www.lefigaro.fr\/secteur\/high-tech\/les-appels-silencieux-sont-ils-une-arnaque-pour-voler-votre-voix-et-la-cloner-par-ia-20260507\" target=\"_blank\" rel=\"noopener\">Les appels silencieux sont-ils une arnaque pour voler votre voix et la cloner par IA<\/a> ?<\/li>\n<li><a href=\"https:\/\/fr.wikipedia.org\/wiki\/Scandale_Facebook-Cambridge_Analytica\" target=\"_blank\" rel=\"noopener\">Scandale Facebook &#8211; Cambridge Analytica<\/a>.<\/li>\n<li><a href=\"https:\/\/www.generation-nt.com\/actualites\/gare-arnaque-sim-swap-numero-telephone-usurpation-2046610\" target=\"_blank\" rel=\"noopener\">Gare \u00e0 l&rsquo;arnaque \u00e0 la carte SIM et \u00e0 l&rsquo;usurpation de num\u00e9ro de t\u00e9l\u00e9phone !<\/a><\/li>\n<li><a href=\"https:\/\/www.nouvelobs.com\/rue89\/rue89-nos-vies-connectees\/20110222.RUE0974\/vol-de-photos-quand-on-se-fait-passer-pour-vous-sur-internet.html\" target=\"_blank\" rel=\"noopener\">Vol de photos : quand on se fait passer pour vous sur Internet<\/a>.<\/li>\n<li><a href=\"https:\/\/www.cnil.fr\/fr\/comment-reagir-face-une-usurpation-didentite\" target=\"_blank\" rel=\"noopener\">Comment r\u00e9agir face \u00e0 une usurpation d&rsquo;identit\u00e9 ?<\/a><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>La protection des informations et des supports classifi\u00e9es\u00a0:<br \/>\nSi vous contractez un march\u00e9 concernant la d\u00e9fense nationale, en direct ou en sous-traitance, vous serez contact\u00e9\u00b7e par la DRSD. Elle vous fournira les textes r\u00e9glementaires, vous aidera \u00e0 s\u00e9curiser vos locaux et \u00e0 prot\u00e9ger votre personnel, les informations et le mat\u00e9riel classifi\u00e9s. Elle enqu\u00eatera et vous alertera sur d\u2019\u00e9ventuelles ing\u00e9rences.<\/p>\n<ul>\n<li><a href=\"https:\/\/www.defense.gouv.fr\/drsd\" target=\"_blank\" rel=\"noopener\">Direction du Renseignement et de la S\u00e9curit\u00e9 de la D\u00e9fense (DRSD)<\/a>.<\/li>\n<li><a href=\"https:\/\/armement.defense.gouv.fr\/securite-et-habilitation\" target=\"_blank\" rel=\"noopener\">Proc\u00e9dures d\u2019habilitation<\/a>.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h2>Faire un signalement<\/h2>\n<p>&nbsp;<\/p>\n<ul>\n<li><a href=\"https:\/\/www.cnil.fr\/fr\/services-en-ligne\/notifier-une-violation-de-donnees-personnelles\" target=\"_blank\" rel=\"noopener\">Notifier \u00e0 la CNIL une violation de donn\u00e9es personnelles<\/a>.<\/li>\n<li><a href=\"https:\/\/cnil.fr\/fr\/plaintes\" target=\"_blank\" rel=\"noopener\">D\u00e9poser une plainte \u00e0 la CNIL<\/a>.<\/li>\n<li><a href=\"https:\/\/www.service-public.gouv.fr\/particuliers\/vosdroits\/R46526\" target=\"_blank\" rel=\"noopener\">Signaler une fraude \u00e0 la carte bancaire (Perceval)<\/a>.<\/li>\n<li><a href=\"https:\/\/www.interieur.gouv.fr\/actualites\/communiques-de-presse\/escroquerie-au-faux-courriel\" target=\"_blank\" rel=\"noopener\">Signaler un courriel usurpant l\u2019identit\u00e9 d\u2019un service de police ou de gendarmerie<\/a>.<\/li>\n<li>Signaler un contenu illicite sur le Web : <a href=\"https:\/\/internet-signalement.gouv.fr\" target=\"_blank\" rel=\"noopener\">plateforme PHAROS<\/a> du minist\u00e8re de l&rsquo;Int\u00e9rieur.<\/li>\n<li>Signaler une escroquerie en ligne :\n<ul>\n<li>Plateforme t\u00e9l\u00e9phonique <em>Info Escroqueries<\/em>\u00a0au 0 805 805 817 (num\u00e9ro vert, appel gratuit depuis la France).<\/li>\n<li><a href=\"https:\/\/www.service-public.gouv.fr\/particuliers\/vosdroits\/N31138\" target=\"_blank\" rel=\"noopener\">Dispositif THESEE<\/a>.<\/li>\n<\/ul>\n<\/li>\n<li>Signaler une attaque informatique : <a href=\"https:\/\/17cyber.gouv.fr\" target=\"_blank\" rel=\"noopener\">17Cyber<\/a>.<\/li>\n<li><a href=\"https:\/\/safebrowsing.google.com\/safebrowsing\/report_phish\/\" target=\"_blank\" rel=\"noopener\">Signaler \u00e0 Google une page web d\u2019hame\u00e7onnage<\/a>.<\/li>\n<li>Signaler une faille de s\u00e9curit\u00e9 ou une vuln\u00e9rabilit\u00e9\u00a0:\n<ul>\n<li><a href=\"https:\/\/www.cert.ssi.gouv.fr\/contact\/\" target=\"_blank\" rel=\"noopener\">CERT-FR<\/a>.<\/li>\n<li><a href=\"https:\/\/www.legifrance.gouv.fr\/jorf\/id\/JORFARTI000033203174\" target=\"_blank\" rel=\"noopener\">Article 47 de la loi pour une R\u00e9publique num\u00e9rique<\/a>.<\/li>\n<\/ul>\n<\/li>\n<li><a href=\"https:\/\/plainte-en-ligne.masecurite.interieur.gouv.fr\" target=\"_blank\" rel=\"noopener\">Plainte en ligne<\/a> (police et gendarmerie).<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2><\/h2>\n<h2>Aides techniques et juridiques<\/h2>\n<p>&nbsp;<\/p>\n<ul>\n<li><a href=\"https:\/\/www.cybermalveillance.gouv.fr\" target=\"_blank\" rel=\"noopener\">Informations sur les menaces num\u00e9riques<\/a>.<\/li>\n<li>Alertes de s\u00e9curit\u00e9 : <a href=\"https:\/\/www.cve.org\" target=\"_blank\" rel=\"noopener\">CVE<\/a>, <a href=\"https:\/\/nvd.nist.gov\/vuln\/search\" target=\"_blank\" rel=\"noopener\">NIST National Vulnerability Database (NVD)<\/a>, <a href=\"https:\/\/euvd.enisa.europa.eu\" target=\"_blank\" rel=\"noopener\">European Union Vulnerability Database<\/a>.<\/li>\n<li>Le <a href=\"https:\/\/www.zataz.com\/service-veille-personnalisee-zataz\/\" target=\"_blank\" rel=\"noopener\">Service Veille ZATAZ<\/a> alerte sur les fuites de donn\u00e9es.<\/li>\n<li>Pour v\u00e9rifier si votre adresse \u00e9lectronique ou votre num\u00e9ro de t\u00e9l\u00e9phone font partie d\u2019une fuite de donn\u00e9e : <a href=\"https:\/\/haveibeenpwned.com\" target=\"_blank\" rel=\"noopener\">HaveIBeenPwned<\/a>, <a href=\"https:\/\/cybernews.com\/personal-data-leak-check\/\" target=\"_blank\" rel=\"noopener\">Cybernews<\/a>, <a href=\"https:\/\/www.politie.nl\/en\/information\/checkyourhack.html\" target=\"_blank\" rel=\"noopener\">Check your hack<\/a> ou plus complet, la base de donn\u00e9es d&rsquo;<a href=\"https:\/\/sec.hpi.de\/ilc\/\" target=\"_blank\" rel=\"noopener\">Hasso-Plattner-Institut<\/a>. Voir aussi <a href=\"https:\/\/bonjourlafuite.eu.org\" target=\"_blank\" rel=\"noopener\">C\u2019est qui qui a fuit\u00e9 aujourd\u2019hui ?<\/a>, <a href=\"https:\/\/www.ransomware.live\/map\/FR\" target=\"_blank\" rel=\"noopener\">Ransomware.live<\/a>, <a href=\"https:\/\/fuitesinfos.fr\" target=\"_blank\" rel=\"noopener\">Fuites Infos<\/a>, <a href=\"https:\/\/frenchbreaches.com\" target=\"_blank\" rel=\"noopener\">FrenchBreaches<\/a>.<\/li>\n<li><a href=\"https:\/\/www.nomoreransom.org\" target=\"_blank\" rel=\"noopener\">No More Ransom<\/a> pour d\u00e9chiffrer les disques chiffr\u00e9s par certains ran\u00e7ongiciels.<\/li>\n<li><a href=\"https:\/\/virustotal.com\" target=\"_blank\" rel=\"noopener\">VirusTotal<\/a> : antivirus en ligne (attention \u00e0 ne pas y t\u00e9l\u00e9verser un fichier avec des donn\u00e9es personnelles).<\/li>\n<li>Des enqu\u00eateurs, des experts judiciaires et des magistrats \u0153uvrent dans le domaine de l\u2019investigation num\u00e9rique (analyse forensique)\u00a0:\n<ul>\n<li><a href=\"https:\/\/new.afsin.org\" target=\"_blank\" rel=\"noopener\">Association francophone des sp\u00e9cialistes de l\u2019investigation num\u00e9rique (AFSIN)<\/a>.<\/li>\n<li><a href=\"https:\/\/caine-live.net\" target=\"_blank\" rel=\"noopener\">CAINE<\/a>, distribution Linux pour l&rsquo;analyse forensique.<\/li>\n<\/ul>\n<\/li>\n<li><a href=\"https:\/\/www.gendarmerie.interieur.gouv.fr\/contact\/discuter-avec-un-gendarme\" target=\"_blank\" rel=\"noopener\">Poser une question \u00e0 la brigade num\u00e9rique de la gendarmerie nationale<\/a>.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h2>Documentation, magazines<\/h2>\n<p>&nbsp;<\/p>\n<ul>\n<li><a href=\"https:\/\/owasp.org\" target=\"_blank\" rel=\"noopener\">Open Web Application Security Project (OWASP)<\/a>.<\/li>\n<li><a href=\"https:\/\/m3aawg.org\" target=\"_blank\" rel=\"noopener\">Messaging, Malware and Mobile Anti-Abuse Working Group (M3AAWG)<\/a>.<\/li>\n<li><a href=\"https:\/\/connect.ed-diamond.com\/misc\" target=\"_blank\" rel=\"noopener\">MISC<\/a>.<\/li>\n<li><a href=\"https:\/\/hakin9.org\" target=\"_blank\" rel=\"noopener\">Hakin9<\/a>.<\/li>\n<li><a href=\"https:\/\/nolimitsecu.fr\" target=\"_blank\" rel=\"noopener\">NoLimitSecu<\/a>.<\/li>\n<li><a href=\"https:\/\/thehackernews.com\" target=\"_blank\" rel=\"noopener\">The Hacker News<\/a>.<\/li>\n<li><a href=\"https:\/\/undernews.fr\" target=\"_blank\" rel=\"noopener\">UnderNews<\/a>.<\/li>\n<li><a href=\"https:\/\/reddit.com\/r\/netsec\/\" target=\"_blank\" rel=\"noopener\">\/r\/netsec<\/a>.<\/li>\n<li><a href=\"https:\/\/www.root-me.org\" target=\"_blank\" rel=\"noopener\">Root Me<\/a>, plateforme d\u2019apprentissage.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h2>Logiciels de s\u00e9curit\u00e9<\/h2>\n<p>&nbsp;<\/p>\n<ul>\n<li>Scannez les fichiers t\u00e9l\u00e9charg\u00e9s ou re\u00e7us, avec <a href=\"https:\/\/www.virustotal.com\" target=\"_blank\" rel=\"noopener\">VirusTotal<\/a>.<\/li>\n<li>Voir <a href=\"https:\/\/infolib.re\/blog\/synchronisation-creation-d-un-instantane-sauvegarde\/\">Synchronisation, clich\u00e9, sauvegarde<\/a>.<\/li>\n<li><a href=\"https:\/\/exifcleaner.com\" target=\"_blank\" rel=\"noopener\">ExifCleaner<\/a> pour effacer les donn\u00e9es EXIF des photographies.<\/li>\n<li><a href=\"https:\/\/getaegis.app\" target=\"_blank\" rel=\"noopener\">Aegis Authenticator<\/a>, <a href=\"https:\/\/bitwarden.com\/\" target=\"_blank\" rel=\"noopener\">Bitwarden<\/a>, <a href=\"https:\/\/keepassxc.org\" target=\"_blank\" rel=\"noopener\">KeePassXC<\/a>, <a href=\"https:\/\/keeweb.info\" target=\"_blank\" rel=\"noopener\">KeeWeb<\/a>, <a href=\"https:\/\/github.com\/passbolt\" target=\"_blank\" rel=\"noopener\">Passbolt<\/a>, <a href=\"https:\/\/pwsafe.org\" target=\"_blank\" rel=\"noopener\">Password Safe<\/a>, <a href=\"https:\/\/github.com\/dani-garcia\/vaultwarden\" target=\"_blank\" rel=\"noopener\">Vaultwarden<\/a> pour stocker ses mots de passe.<\/li>\n<li><a href=\"https:\/\/blog.tips4tech.fr\/debian-password-sur-grub\/\" target=\"_blank\" rel=\"noopener\">Ajouter un mot de passe \u00e0 GRUB<\/a>.<\/li>\n<li><a href=\"http:\/\/www.aescrypt.com\" target=\"_blank\" rel=\"noopener\">AES Crypt<\/a> pour chiffrer des fichiers (chiffrement sym\u00e9trique).<\/li>\n<li><a href=\"http:\/\/www.gnupg.org\" target=\"_blank\" rel=\"noopener\">GnuPG<\/a> (chiffrement asym\u00e9trique) pour chiffrer et signer des fichiers et des courriers \u00e9lectroniques, g\u00e9rer les certificats et les cl\u00e9s de chiffrement priv\u00e9es et publiques sur son ordinateur et les cl\u00e9s de chiffrement publiques sur les serveurs de diffusion de cl\u00e9s. <a href=\"https:\/\/gpg4win.org\" target=\"_blank\" rel=\"noopener\">Gpg4win<\/a> est un installeur alternatif sous Windows. <a href=\"https:\/\/gpgtools.org\" target=\"_blank\" rel=\"noopener\">GPG Suite<\/a> est un installeur alternatif sous macOS (la partie chiffrement des messages \u00e9lectroniques est payante). Note : Mozilla Thunderbird int\u00e8gre nativement le chiffrement des courriels.<\/li>\n<li><a href=\"https:\/\/openkeychain.org\" target=\"_blank\" rel=\"noopener\">OpenKeychain<\/a> : chiffrement asym\u00e9trique sous Android. Il suit le standard <a href=\"https:\/\/openpgp.org\/about\/\" target=\"_blank\" rel=\"noopener\">OpenPGP<\/a>.<\/li>\n<li>Plateformes PKI : <a href=\"https:\/\/ejbca.org\" target=\"_blank\" rel=\"noopener\">EJBCA<\/a>, <a href=\"https:\/\/notamax.be\/certificate-authority-avec-easyrsa-et-implementation-sous-pfsense\/\" target=\"_blank\" rel=\"noopener\">EasyRSA<\/a>.<\/li>\n<li><a title=\"Home\" href=\"http:\/\/www.bleachbit.org\" target=\"_blank\" rel=\"home noopener\">BleachBit<\/a> pour effacer les fichiers temporaires, etc.<\/li>\n<li><a href=\"https:\/\/github.com\/PartialVolume\/shredos.x86_64\" target=\"_blank\" rel=\"noopener\">ShredOS<\/a> (utilise <a href=\"https:\/\/github.com\/martijnvanbrummelen\/nwipe\" target=\"_blank\" rel=\"noopener\">nwipe<\/a>) pour effacer compl\u00e8tement un disque. <a href=\"https:\/\/apps.gnome.org\/fr\/Raider\/\" target=\"_blank\" rel=\"noopener\">File Shredder<\/a> pour effacer compl\u00e8tement des fichiers.<\/li>\n<li>Scanners r\u00e9seau :\n<ul>\n<li><a href=\"https:\/\/nmap.org\/zenmap\/\" target=\"_blank\" rel=\"noopener\">Zenmap<\/a>, <a href=\"https:\/\/angryip.org\" target=\"_blank\" rel=\"noopener\">Angry IP Scanner<\/a>, <a href=\"https:\/\/github.com\/ZingyTomato\/NetPeek\" target=\"_blank\" rel=\"noopener\">NetPeek<\/a> : scan d&rsquo;IP\/ports.<\/li>\n<li><a href=\"http:\/\/www.openvas.org\" target=\"_blank\" rel=\"noopener\">OpenVAS<\/a> : scan et tests de vuln\u00e9rabilit\u00e9.<\/li>\n<li><a href=\"https:\/\/github.com\/stamparm\/maltrail\" target=\"_blank\" rel=\"noopener\">Mailtrail<\/a> : d\u00e9tection de trafic malicieux.<\/li>\n<li><a href=\"https:\/\/zeek.org\" target=\"_blank\" rel=\"noopener\">Zeek<\/a> : analyse du trafic.<\/li>\n<\/ul>\n<\/li>\n<li>Syst\u00e8mes de d\u00e9tection d&rsquo;intrusion :\n<ul>\n<li><a href=\"https:\/\/suricata.io\" target=\"_blank\" rel=\"noopener\">Suricata<\/a>.<\/li>\n<li><a href=\"https:\/\/squeylab.com\/fr\/\" target=\"_blank\" rel=\"noopener\">Squey<\/a> : analyse de donn\u00e9es informatiques.<\/li>\n<\/ul>\n<\/li>\n<li><a href=\"http:\/\/www.packetfence.org\" target=\"_blank\" rel=\"noopener\">Packetfence<\/a> pour contr\u00f4ler les acc\u00e8s aux r\u00e9seaux informatiques (par exemple isoler les points d&rsquo;acc\u00e8s Wi-Fi).<\/li>\n<li><a href=\"https:\/\/github.com\/evilsocket\/opensnitch\" target=\"_blank\" rel=\"noopener\">OpenSnitch<\/a>, <a href=\"https:\/\/www.bunkerweb.io\" target=\"_blank\" rel=\"noopener\">BunkerWeb<\/a> : pare-feux applicatifs.<\/li>\n<li><a href=\"https:\/\/dynfi.com\" target=\"_blank\" rel=\"noopener\">DynFi<\/a>, <a href=\"https:\/\/opnsense.org\" target=\"_blank\" rel=\"noopener\">OPNsense<\/a> : pare-feu.<\/li>\n<li>Blocage des adresses IP malveillantes :\n<ul>\n<li><a href=\"https:\/\/crowdsec.net\" target=\"_blank\" rel=\"noopener\">CrowdSec<\/a> (avec partage des informations).<\/li>\n<li><a href=\"https:\/\/github.com\/fail2ban\/fail2ban\" target=\"_blank\" rel=\"noopener\">Fail2Ban<\/a>.<\/li>\n<li><a href=\"https:\/\/framagit.org\/ppom\/reaction\" target=\"_blank\" rel=\"noopener\">reaction<\/a>.<\/li>\n<\/ul>\n<\/li>\n<li>Sniffeur, analyseur de protocole :\n<ul>\n<li><a href=\"http:\/\/www.wireshark.org\" target=\"_blank\" rel=\"noopener\">Wireshark<\/a> et <a href=\"http:\/\/ostinato.org\" target=\"_blank\" rel=\"noopener\">Ostinato<\/a>.<\/li>\n<li><a href=\"http:\/\/www.aircrack-ng.org\" target=\"_blank\" rel=\"noopener\">Aircrack-ng<\/a> pour trouver la cl\u00e9 de chiffrement d&rsquo;un r\u00e9seau Wi-Fi.<\/li>\n<li><a href=\"https:\/\/www.ntop.org\/products\/deep-packet-inspection\/ndpi\/\" target=\"_blank\" rel=\"noopener\">nDPI<\/a> pour faire du DPI.<\/li>\n<li><a href=\"http:\/\/www.rf-dump.org\" target=\"_blank\" rel=\"noopener\">RFDump<\/a> pour lire les puces RFID.<\/li>\n<\/ul>\n<\/li>\n<li>Scanner de vuln\u00e9rabilit\u00e9s sur les sites web : <a href=\"https:\/\/cirt.net\/Nikto2\" target=\"_blank\" rel=\"noopener\">Nikto<\/a>, <a href=\"https:\/\/github.com\/yahoo\/gryffin\" target=\"_blank\" rel=\"noopener\">Gryffin<\/a>. Test \u00e0 donn\u00e9es al\u00e9atoires : <a href=\"https:\/\/github.com\/ANSSI-FR\/fuzzysully\" target=\"_blank\" rel=\"noopener\">FuzzySully<\/a> pour tester les interfaces OPC UA.<\/li>\n<li>Acc\u00e8s \u00e0 distance \u00e0 un r\u00e9seau (VPN) :\n<ul>\n<li><a href=\"https:\/\/protonvpn.com\/blog\/openvpn-vs-wireguard\/\" target=\"_blank\" rel=\"noopener\">OpenVPN versus WireGuard<\/a>.<\/li>\n<li><a href=\"https:\/\/bitmask.net\" target=\"_blank\" rel=\"noopener\">Bitmask<\/a> : client VPN, fait partie du projet <a href=\"https:\/\/github.com\/leapcode\" target=\"_blank\" rel=\"noopener\">LEAP Encryption Access<\/a>.<\/li>\n<li><a href=\"https:\/\/github.com\/mullvad\/\" target=\"_blank\" rel=\"noopener\">Mullvad VPN<\/a>.<\/li>\n<li><a href=\"https:\/\/github.com\/TrustTunnel\/TrustTunnel\" target=\"_blank\" rel=\"noopener\">TrustTunnel<\/a>.<\/li>\n<\/ul>\n<\/li>\n<li>Vid\u00e9osurveillance : <a href=\"https:\/\/frigate.video\/\" target=\"_blank\" rel=\"noopener\">Frigate<\/a>, <a href=\"https:\/\/github.com\/guardianproject\/haven\" target=\"_blank\" rel=\"noopener\">Haven<\/a>,\u00a0<a href=\"https:\/\/kerberos.io\" target=\"_blank\" rel=\"noopener\">Kerberos.io<\/a>, <a href=\"http:\/\/slist.lilotux.net\/linux\/qmotion\/index_fr.html\" target=\"_blank\" rel=\"noopener\">QMotion<\/a>,\u00a0<a href=\"https:\/\/gitlab.com\/Shinobi-Systems\/ShinobiCE\" target=\"_blank\" rel=\"noopener\">Shinobi Community Edition<\/a>, <a href=\"https:\/\/zoneminder.com\" target=\"_blank\" rel=\"noopener\">ZoneMinder<\/a>, <a href=\"https:\/\/motion-project.github.io\" target=\"_blank\" rel=\"noopener\">Motion<\/a>, <a href=\"https:\/\/www.ispyconnect.com\" target=\"_blank\" rel=\"noopener\">iSpy<\/a>, <a href=\"https:\/\/webcamoid.github.io\" target=\"_blank\" rel=\"noopener\">Webcamoid<\/a>, <a href=\"https:\/\/github.com\/KDE\/kamoso\" target=\"_blank\" rel=\"noopener\">Kamoso<\/a>.<\/li>\n<li><a href=\"https:\/\/github.com\/BoboTiG\/pombo\" target=\"_blank\" rel=\"noopener\">Pombo<\/a> pour g\u00e9olocaliser un ordinateur portable vol\u00e9.<\/li>\n<li><a href=\"https:\/\/web.developpez.com\/actu\/368952\/reCAPTCHA-819-millions-d-heures-humaines-perdues-et-des-milliards-de-dollars-de-profits-pour-Google-selon-une-etude-qui-le-designe-comme-un-outil-de-tracage\/\" target=\"_blank\" rel=\"noopener\">Pour v\u00e9rifier que l&rsquo;utilisateur n&rsquo;est pas un robot<\/a>.<\/li>\n<li>Autres logiciels sur <a href=\"http:\/\/sectools.org\" target=\"_blank\" rel=\"noopener\">Sectools.org<\/a>, <a href=\"https:\/\/prism-break.org\/fr\/\" target=\"_blank\" rel=\"noopener\">PRISM BREAK<\/a>.<\/li>\n<li>Cl\u00e9s FIDO2 U2F (Universal 2nd Factor) :\u00a0<a href=\"https:\/\/nitrokey.com\" target=\"_blank\" rel=\"noopener\">Nitrokey<\/a>, <a href=\"https:\/\/solokeys.com\" target=\"_blank\" rel=\"noopener\">Solokeys<\/a>, <a href=\"https:\/\/www.token2.com\" target=\"_blank\" rel=\"noopener\">Token2<\/a>.<\/li>\n<li>Gestion de l&rsquo;information et des \u00e9v\u00e9nements de s\u00e9curit\u00e9 (SIEM) : <a href=\"https:\/\/strangebee.com\" target=\"_blank\" rel=\"noopener\">TheHive, Cortex<\/a>, <a href=\"https:\/\/wazuh.com\" target=\"_blank\" rel=\"noopener\">Wazuh<\/a>.<\/li>\n<li>Cartographie du syst\u00e8me d&rsquo;information : <a href=\"https:\/\/github.com\/dbarzin\/mercator\" target=\"_blank\" rel=\"noopener\">Mercator<\/a>, <a href=\"https:\/\/github.com\/scanopy\/scanopy\" target=\"_blank\" rel=\"noopener\">Scanopy<\/a>.<\/li>\n<li>Indicateurs sur l&rsquo;efficacit\u00e9 des mesures de s\u00e9curit\u00e9 : <a href=\"https:\/\/github.com\/dbarzin\/deming\" target=\"_blank\" rel=\"noopener\">Deming<\/a>.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>La s\u00e9curit\u00e9 des syst\u00e8mes d\u2019information vise \u00e0 emp\u00eacher le mauvais usage, la modification ou le d\u00e9tournement des syst\u00e8mes d\u2019information. La s\u00e9curit\u00e9 des syst\u00e8mes d\u2019information am\u00e9liore la rentabilit\u00e9 de l\u2019organisme concern\u00e9, sa r\u00e9putation et les conditions de travail. Elle garantit la disponibilit\u00e9, l\u2019int\u00e9grit\u00e9, la confidentialit\u00e9, l\u2019authenticit\u00e9 et la non-r\u00e9pudiation des donn\u00e9es. Elle prot\u00e8ge les utilisateurs, leurs proches et leurs contacts professionnels. La s\u00e9curit\u00e9 des syst\u00e8mes d\u2019information devient efficace lorsque tout le monde y participe volontairement. &nbsp; &nbsp; R\u00e9f\u00e9rentiels &nbsp; Le r\u00e9f\u00e9rentiel&#8230;<\/p>\n<p class=\"read-more\"><a class=\"btn btn-default\" href=\"https:\/\/infolib.re\/blog\/la-securite-des-systemes-dinformation\/\">Lire la suite<span class=\"screen-reader-text\"> Lire la suite<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[442,445,441,439,437,436,438,435,443,444,50,601],"class_list":["post-11732","post","type-post","status-publish","format-standard","hentry","category-articles-publics","tag-anssi","tag-cert","tag-cnil","tag-cybersecurite","tag-ebios","tag-mehari","tag-mitre-attck","tag-pssi","tag-rgpd","tag-rgs","tag-securite","tag-ssi"],"_links":{"self":[{"href":"https:\/\/infolib.re\/blog\/wp-json\/wp\/v2\/posts\/11732","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infolib.re\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infolib.re\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infolib.re\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/infolib.re\/blog\/wp-json\/wp\/v2\/comments?post=11732"}],"version-history":[{"count":1,"href":"https:\/\/infolib.re\/blog\/wp-json\/wp\/v2\/posts\/11732\/revisions"}],"predecessor-version":[{"id":15430,"href":"https:\/\/infolib.re\/blog\/wp-json\/wp\/v2\/posts\/11732\/revisions\/15430"}],"wp:attachment":[{"href":"https:\/\/infolib.re\/blog\/wp-json\/wp\/v2\/media?parent=11732"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infolib.re\/blog\/wp-json\/wp\/v2\/categories?post=11732"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infolib.re\/blog\/wp-json\/wp\/v2\/tags?post=11732"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}