Ukuba nesilingisi sokuhlasela esihle samanethiwekhi asekhaya Sekuyinto ebalulekile kunoma ubani ofuna ukuthatha ukuphepha kwe-inthanethi ngokungathi sÃna ekhaya noma ehhovisi elincane. Ngaphandle kokufaka nje isofthiwe ye-antivirus kanye ne-firewall eyisisekelo, manje kungenzeka ukuphinda, endaweni elawulwayo, lokho ubugebengu be-inthanethi bangempela obungakwenza, ukubona ukuthi inethiwekhi yethu ingamelana kangakanani nokuhlaselwa, futhi ifunde ukuthi ingasabela kanjani ngaphandle kokubeka idatha yethu engozini.
Amathuluzi okulingisa ukuhlasela, amanethiwekhi kanye I-malware Zisukela kumapulatifomu ezemfundo aklanyelwe ukukhulisa ulwazi phakathi kwabasebenzisi abangebona ochwepheshe kuya kuma-lab abonakalayo athuthukile kakhulu asetshenziswa onjiniyela benethiwekhi, abaduni bezigebengu abanokuziphatha okuhle, kanye namaqembu okuphendula ezigamekweni. Zonke zinomgomo ofanayo: ukuqonda ukuthi usongo luziphatha kanjani nokuthi yini esingayenza ukuze siluvimbe ngaphambi kokuba lubangele inhlekelele.
Iyini i-simulator yokuhlasela futhi kungani ibalulekile kumanethiwekhi asekhaya?
Isilingisi sokuhlasela kwamanethiwekhi asekhaya Kuyiqoqo lamathuluzi nezinsizakalo ezivumela ukulingiswa okulawulwayo kwezinhlobo ezahlukene zokuhlaselwa: kusukela emikhankasweni yobugebengu bokweba imininingwane ebucayi kuya ekuhlaselweni kokwenqatshwa kwenkonzo (i-DoS kanye ne-DDoS), ukutheleleka nge-malware, kanye nemizamo yokusebenzisa kabi ubuthakathaka. Umqondo awukhona "ukudlala ngokuba yi-hacker," kodwa ukuqeqesha abasebenzisi nabaphathi ukuthi baqaphele, balawule, futhi baqede lezi zinsongo.
Izixazululo eziningi zesimanje ziklanywe, zakhiwe, futhi zinakekelwe ngamaqembu ochwepheshe abaneminyaka eminingi yokuhlangenwe nakho kokuphepha okuhlangene, okungaphezu kalula iminyaka eyikhulu. Lokhu kuhumusha kokuqukethwe okubuyekeziwe, ukuhlaselwa okuhleliwe okubonisa izimo zangempela, kanye nemikhankaso evamile evumela ukulinganisa ukuthuthuka kokuvuthwa kokuphepha phakathi kwabasebenzisi basekhaya nabezinkampani.
Enye yezinkinga ezinkulu ngokuqeqeshwa kwezokuphepha kwe-inthanethi kwendabuko Inkinga iwukuthi ukuqeqeshwa kokuphepha kwe-inthanethi kuvame ukuba yinto enengqondo futhi akusebenzi ngendlela engokoqobo. Izifundo ezinama-slide, amavidiyo, kanye nezivivinyo zokukhetha okuningi ziyalibaleka ngokushesha futhi azithuthukisi ukusabela okuzenzakalelayo lapho zibhekene ne-imeyili esolisayo noma iwindi elivelayo elinonya. Ngokuphambene nalokho, ama-simulators asekelwe ekuhlaselweni kwangempela aveza izimo ezisebenzisanayo: ama-imeyili e-phishing, izinamathiselo, izixhumanisi, amafasitela okuvuselela mbumbulu, kanye nama-pop-up esistimu.
Imodeli yesevisi ethakazelisa kakhulu ngokombono osebenzayo Isebenza ngokuzenzakalelayo cishe yonke inqubo: iplatifomu ihlela futhi iqhube imikhankaso, ihlole imiphumela, iphinda ukuqeqeshwa ngezindlela ezahlukene, futhi ikhiqize imibiko, ngaphandle kokuthi inkampani noma umsebenzisi wasekhaya akuphathe nsuku zonke. Lokhu kuvumela "isikole sokuphepha kwe-inthanethi" esingenazihibe, esisekelwe ngemuva.
Empeleni, i-simulator yokuhlasela enhle iqala ngokuqinisekiswa okuphelele kwesistimu noma indawo okufanele ivikelwe: yimaphi amadivayisi axhunyiwe, yiziphi izinsizakalo ezivezwayo, yiziphi izinhlelo zokusebenza ezisetshenziswayo, yiziphi izinhlelo zokusebenza ezibalulekile, nokuthi ulwazi lungena futhi luphuma kanjani. Kusukela lapho, kuchazwa izimo ezingokoqobo ezizohlola ubuchwepheshe, futhi ngaphezu kwakho konke, isici somuntu.
Ukulingisa ukuhlasela kwezokuxhumana: i-imeyili, i-Windows, kanye nokuphequlula iwebhu
Enye yezindawo eziyingozi kakhulu kunoma iyiphi inethiwekhi yasekhaya noma yenkampani Yi-imeyili. Iningi le-malware yesimanje, kusukela ku-ransomware kuya ku-advanced persistent threats (APTs), ingena ngemilayezo eklanywe kahle esebenzisa ukwethenjwa komsebenzisi. Amapulatifomu afana ne-Attack Simulator agxila ngqo ekuphindaphindeni lolu hlobo lokuhlaselwa kwe-imeyili kanye nokuhlaselwa ohlelweni lokusebenza uqobo.
Lezi zixazululo ziqala imikhankaso yobugebengu bokweba imininingwane ebucayi, ubugebengu bokweba imininingwane ebucayi (ukuhlaselwa okuqondiswe kakhulu kubantu abathile), ukukhwabanisa, ukwebiwa kobunikazi, kanye nokusatshalaliswa kwe-ransomware mbumbulu. Imiyalezo yenziwe ngokucophelela ukuze ibonakale isemthethweni: ingase ilingise ukuxhumana kwamabhange, amapulatifomu okusakaza, izaziso zemidiya yezenhlalo, noma imiyalezo yangaphakathi yenkampani. Umgomo uwukulinganisa ukuthi ubani ochofozayo, obani abafaka iziqinisekiso, nokuthi ubani olanda noma osebenzisa amafayela anonya.
Ngaphezu kwe-imeyili, ukuhlaselwa okuxhaphaza imiyalezo yomdabu kanye namabhokisi engxoxo nakho kuyalingiswa. kusuka ku-Windows nakwezinye izinhlelo zokusebenza: izibuyekezo ze-Adobe Flash ezicatshangelwayo, izexwayiso zokuphepha kwesiphequluli, ama-applet noma ama-weblet anegciwane, izandiso zesiphequluli ezingamanga, abaphathi bokulanda "abayisimangaliso" kanye nezinye izinhlelo zokusebenza ezithembisa ukuthuthukisa ulwazi lokuphequlula kodwa empeleni zifihla i-adware, i-spyware noma ama-Trojans.
Isihluthulelo salezi zikhathi zokuqeqesha ukuthi imiyalezo yokuzijwayeza ifana kakhulu neyokuqala....kuze kube seqophelweni lokukhohlisa ngisho nabasebenzisi abanolwazi. Lokhu kwenza kudingeke ukunaka imininingwane efana nekheli langempela lomthumeli, i-URL ephelele yesixhumanisi, izitifiketi zokuphepha zewebhusayithi, kanye nomqondo womlayezo. Uma umuntu "ethatha isicupho," uhlelo aluyifaki igciwane kukhompyutha, kodwa kunalokho lubhala phansi isenzo bese luqala imodyuli yemfundo ukuchaza ukuthi yini ehambe kabi.
Kule ndlela, unjiniyela noma umphathi we-IT akazi kusengaphambili ukuthi yiziphi izihlaselo ezizoqalwa.Lokhu kwenzelwa ukuthi ukulingisa kugcine inani lakho. Noma ubani obona ukuhlaselwa ngesikhathi sangempela kumele akwazi ukubona ukuthi hlobo luni losongo oluvelayo, ukuthi luhlose ukwenzani, nokuthi yiziphi izinyathelo okufanele zithathwe ukuze lunqandwe, ngaphandle kokulimaza izinhlelo zokukhiqiza noma ukuphazamisa izinsizakalo ezibalulekile.
Izilingisi zenethiwekhi kanye nama-emulator: ukuhlola ukwakheka ngaphambi kokukwakha
Ngaphandle kokulingisa ukuhlaselwa, izinhlangano eziningi nabasebenzisi abathuthukile Basebenzisa izilingisi zenethiwekhi ukuklama nokuhlola yonke ingqalasizinda ngaphambi kokuyisebenzisa ngokoqobo. Lokhu kuwusizo ngokufanayo kunethiwekhi yasekhaya eyinkimbinkimbi (ama-router amaningi, izindawo zokufinyelela, amadivayisi e-IoT) njengoba kunjalo kunethiwekhi yebhizinisi elincane noma inkampani enkulu.
Ukuklama inethiwekhi kuhilela ukunquma isakhiwo sayo esingokomzimba nesinengqondoLokhu kufaka phakathi imephu ye-topology, izintambo, ikheli le-IP, inombolo nendawo yama-router, amaswishi, izindawo zokufinyelela, amaseva, namanye amadivayisi, kanye nokwakheka kokuphepha (ukuhlukaniswa, ama-firewall, izinhlelo zokuthola ukungena, izilawuli zokufinyelela, njll.). Konke lokhu kuvame ukumelwa kumadayagramu asebenza njengesiqondiso sokufakwa kwangempela.
Le midwebo icabangela izendlalelo ezahlukene.: ungqimba olungokoqobo (ihadiwe kanye nezintambo), ungqimba lwesixhumanisi sedatha (ukuthembeka ekudlulisweni), ungqimba lwenethiwekhi (ukheli olunengqondo kanye nemizila), ungqimba lokuthutha (indlela idatha ehlukaniswa futhi ehanjiswa ngayo) kanye, ngenhla, iseshini, izendlalelo zokwethula kanye nezicelo, eziphatha ukuxhumana phakathi kwezinhlelo, ifomethi yolwazi kanye nemisebenzi yokugcina umsebenzisi ayibonayo.
Ukuba nomklamo omuhle wokuqala kuvumela ukuhlela izinsiza ngendlela ephumelelayoLokhu kusiza ekunqumeni ububanzi be-bandwidth obudingekayo, umthamo wesitoreji, ukuhlukaniswa kwenethiwekhi, izinqubomgomo zokuphepha, kanye nokukhula kwesikhathi esizayo. Kuphinde kuthuthukise ukwabiwa kwekheli le-IP, kuvimbele izithiyo, futhi kunciphise isikhathi sokungasebenzi kwesevisi lapho kudingeka izinguquko.
Ezindaweni zezinkampani ezidinga kakhulu, njengebhange noma ezokuxhumanaKungumkhuba ovamile ukugcina amalabhorethri anezifanekiso eziqondile zehadiwe yokukhiqiza, kulokho okwaziwa ngokuthi izindawo zokubeka. Kulezi zindawo, noma yiziphi izinguquko zokucushwa ziyaqinisekiswa ngaphambi kokuba zithunyelwe kunethiwekhi ebukhoma, okunciphisa kakhulu ingozi yokuphazamiseka. Kulabo abangakwazi ukukhokhela lezi zinhlobo zamalabhorethri angokoqobo, ama-simulators enethiwekhi nama-emulator ayindlela engcono kakhulu.
Izilingisi zenethiwekhi eziphezulu zokufunda nokuhlola ukucushwa
Ngaphakathi kwezwe lokulingisa inethiwekhi kunemindeni emibili eyinhlokoAma-simulators ahlanzekile, aphinda kabusha ukuziphatha kwenethiwekhi esebenzisa isofthiwe, kanye nama-emulator, alayisha izithombe zangempela zezinhlelo zokusebenza zama-routers, ama-switch noma ama-firewall futhi aziphatha cishe njengehadiwe yangempela.
Ama-simulators, njenge-Cisco Packet TracerZilungele ukufunda imiqondo eyisisekelo yokuqondisa kanye nokushintshashintsha (isibonelo, ngezitifiketi ze-CCNA). Zisebenzisa izinsiza ezimbalwa, zivumela ukudalwa kwe-topology eyinkimbinkimbi kusuka ku-PC ejwayelekile, futhi zinembile kakhulu, okwenza zifaneleke kahle ezindaweni zemfundo nezasekhaya.
Ama-Emulators, njenge-GNS3 noma i-Eve‑NGZisebenzisa ngqo izithombe zesistimu yokusebenza yamadivayisi (isibonelo, i-Cisco IOS) futhi zinikeza ukwethembeka okucishe kuphelele kwihadiwe yangempela. Lokhu kuzenza zibaluleke kakhulu ekuqinisekisweni okuthuthukisiwe nasekuhlolweni kokukhiqiza, kodwa futhi zidinga kakhulu ngokwe-RAM kanye ne-CPU.
Ezinkampanini ezinesabelomali esincane noma emalabhorethri asekhayaLezi zi-simulators nama-emulator zikuvumela ukuthi usethe amanethiwekhi abonakalayo anama-router amaningi, ama-switch, nama-firewall, uhlole ukucushwa, futhi ulingise ukwehluleka ngaphandle kokuthenga ihadiwe ebonakalayo, engabiza izinkulungwane zama-euro.
ICisco Packet Tracer
I-Cisco Packet Tracer ingenye yezindlela zokulingisa inethiwekhi ezaziwa kakhulu nezisetshenziswa kakhulu.Yasungulwa yiCisco, ihloselwe kakhulu abafundi nochwepheshe abalungiselela izitifiketi ezifana ne-CCNA. Ivumela abasebenzisi ukudala ama-topologies ngama-router, ama-switch, ama-hub, amaseva, namanye amadivayisi, isebenzisa inguqulo elula yesistimu yokusebenza yeCisco.
Inzuzo yayo eyinhloko ukuthi imahhala futhi isebenzisa izinsiza ezimbalwa kakhulu. Futhi kulula kakhulu ukuyisebenzisa. Kusukela kunguqulo 7.0, udinga ukubhalisa kuwebhusayithi yeCisco bese ungena ngemvume ukuze uvule zonke izici, kodwa ukubhalisa kumahhala. Kuphelele kunoma ubani ofuna ukuqala ukuzama amanethiwekhi abonakalayo ngaphandle kokuba nzima kakhulu.
Ngokomlando, amathuluzi afana ne-GNS3 noma i-Eve-NG anikeze amathuba athuthukile kakhulu I-Packet Tracer iyafana, kodwa ezinguqulweni zakamuva i-Cisco ithuthukise kakhulu i-simulator yayo, yengeza izici futhi yathuthukisa ulwazi lomsebenzisi. Kunezibonelo eziningi zezifundo kanye ne-topology ku-inthanethi ezenza ukufunda isinyathelo ngesinyathelo kube lula kakhulu.
GNS3
I-GNS3 (Graphical Network Simulator 3) iyi-emulator yenethiwekhi yomthombo ovulekile Yakhelwe ukulingisa izindawo eziyinkimbinkimbi kakhulu nezingokoqobo, ikuvumela ukuthi ulayishe izithombe ezimbili zezinhlelo zokusebenza ezivela kuma-router nakwamanye amadivayisi, uhlanganise ne-VirtualBox, i-QEMU, bese uqedela imishini ebonakalayo, bese uxhuma lawa manethiwekhi abonakalayo kuzixhumi ezibonakalayo ze-PC.
Lokhu kusho ukuthi ungaba, isibonelo, nenethiwekhi yama-router e-Cisco virtualUmshini obonakalayo osebenzisa iWindows noma iLinux kanye nekhompyutha yakho engokoqobo konke kusebenzelana elebhu efanayo. Kuhle kakhulu ekufundeni kokubili ukuxhumana kanye nokuphepha (isibonelo, ukusetha indawo yokuhlola lapho ungasebenzisa khona izikripthi zePython, ulingise ukuhlasela, futhi ufunde ukuziphatha kwazo).
I-GNS3 iyi-cross-platform (iWindows, iLinux kanye ne-macOS)Nakuba umkhuba ojwayelekile ukufaka iseva ye-GNS3 kumshini obonakalayo ozinikele (usebenzisa i-VMware noma i-VirtualBox) bese uxhuma kusuka kuklayenti. Ukusethwa kokuqala kungaba nzima kakhulu kunokwe-Packet Tracer, kodwa uma usudlulile kulowo mkhawulo wokuqala, kuyithuluzi elinamandla kakhulu.
U-Eve-NG
I-Eve‑NG (Imvelo Ebonakalayo Elingiswayo – ​​Isizukulwane Esilandelayo) ingenye ipulatifomu ethandwa kakhulu Ilingisa amanethiwekhi abonakalayo nabathengisi abaningi. Ine-edishini yamahhala yomphakathi kanye nenguqulo yobungcweti ekhokhelwayo, futhi yenzelwe abasebenzisi basekhaya, amabhizinisi amancane, kanye namalebhu athuthukile.
Amandla ayo atholakala ekhonweni layo lokusebenza nezithombe ezivela kubakhiqizi abaningi.I-Cisco, i-Juniper, i-Check Point, i-Palo Alto, i-F5, nabanye. Ikuvumela ukuthi wakhe amanethiwekhi ahlanganisiwe ayinkimbinkimbi kakhulu, ngokusheshiswa kwehadiwe nge-KVM, ukufinyelela kwabasebenzisi abaningi, isikhombimsebenzisi se-HTML5, kanye nekhono lokuhlanganisa amanethiwekhi wangempela ne-topologies ebonakalayo yokuhlola ngaphandle kokuthinta ukukhiqizwa.
Njenge-GNS3, u-Eve-NG udinga izithombe zesistimu yokusebenza yamadivayisi, ezimweni eziningi angekho mahhala. Kodwa-ke, kuyindlela enhle kakhulu yokulungiselela izitifiketi ezithuthukisiwe, ukulingisa ukuthunyelwa ezindaweni zezinkampani, nokuhlola ukuziphatha kwenethiwekhi lapho kubhekene nezinguquko, ukwehluleka, noma ukuhlaselwa.
I-VIRL (Amalebhu Okumodela e-Cisco)
I-VIRL, eyaziwa nangokuthi i-Cisco Modeling Labs (CML) manjeKuyi-emulator esemthethweni ye-Cisco yokusetha ama-lab angokoqobo kakhulu. Ihloselwe abasebenzisi basekhaya abathuthukile, izikhungo zokuqeqesha, kanye nezinkampani ezisebenza kakhulu nobuchwepheshe be-Cisco.
Kudinga ukubhaliswa kwaminyaka yonke, kodwa kunikeza ukufinyelela kukhathalogi enkulu yezithombe. Izinguqulo ezibuyekeziwe zama-router, ama-switch, namanye amadivayisi. I-interface yayo ilula kuneye-GNS3 noma i-Eve-NG, futhi ukusetshenziswa kwezinsiza kulungiselelwe kahle, okwenza kube lula ukuyiphatha ngisho nasezinhlelweni ezinehadiwe elinganiselwe.
Kulabo abalungiselela izitifiketi ezifana ne-CCNP noma i-CCIEIngenye yamapulatifomu okubhekiselwa kuwo, njengoba iphinda ngokwethembeka izinguqulo zesofthiwe nemisebenzi ezotholakala kamuva ezivivinyweni nasezindaweni zokukhiqiza.
Ezinye izilingisi kanye nezindawo ezithuthukile
Ngaphezu kwamagama amakhulu agxile kumanethiwekhi e-IP akudalaKunamathuluzi okulingisa agxile kakhulu ocwaningweni nasezimweni ezithile: i-IoT, i-5G, izinhlelo ezisatshalaliswayo, njll.
I-OMNeT++ iyi-simulator yenethiwekhi nezinhlelo ezisekelwe emcimbiniIsetshenziswa kabanzi emanyuvesi nasezikhungweni ze-R&D. Isebenza ngendlela ye-modular: wakha izinhlelo kusuka kumabhulokhi angenziwa ngezifiso, okukuvumela ukuthi ubonise yonke into kusukela kumanethiwekhi okuxhumana kuya kuzakhiwo zehadiwe. Iwumthombo ovulekile, kodwa ezinye izandiso zezentengiselwano zengeza izici ezithuthukisiwe.
I-QualNet igxile ekulingiseni amanethiwekhi okuxhumana angokoqobo ngokugxila kakhulu ekuhleleni nasekuhloleni ngaphambi kokusetshenziswa ngokomzimba. Iyakwazi ukuxuba amadivayisi abonakalayo nemishini yangempela ngesikhathi sangempela, isici esiwusizo kakhulu emikhakheni lapho ukuthembeka kubaluleke khona, njengokuvikela, izinsizakalo eziphuthumayo, noma imboni.
Ngakolunye uhlangothi, i-MIMIC Simulator igxile ekulingiseni amadivayisi kanye namanethiwekhi aphelele.Ama-router, amaswishi, izinzwa ze-IoT, neminye imishini. Ikuvumela ukuthi udale amalebhu amakhulu kuseva eyodwa, alungele ukuqeqesha amaqembu okusekela, ukuqinisekisa amathuluzi okuqapha, noma ukuhlola ukucushwa okusha ngaphandle kokudinga ihadiwe ebonakalayo.
Izinhlelo zokulingisa ukuhlaselwa kwe-DoS kanye ne-DDoS
Uma sikhuluma ngqo ngama-simulators okuhlasela e-DoS kanye ne-DDoSSingena endaweni ebucayi: la mathuluzi anamandla kakhulu futhi, uma esetshenziswa ngaphandle kwendawo elawulwayo futhi ngaphandle kwemvume, angaba ngokusobala ukuthi awasemthethweni. Uma esetshenziswa kahle, emalabhorethri noma ngokumelene nezinhlelo zangaphakathi, angahlola ukuthi iseva noma inethiwekhi ingamelana kahle kangakanani nenqwaba yethrafikhi enonya.
I-Slowloris iyithuluzi elijwayelekile lokuphika isevisi ye-HTTP Ithumela izicelo eziningi ezingaphelele kuseva futhi izigcina zivulekile isikhathi eside ngangokunokwenzeka. Lokhu kuqeda inqwaba yezingxoxo ezitholakalayo futhi kuvimbela iseva ekusingatheni ukuxhumana okusha okusemthethweni.
I-HULK (HTTP Unbearable Load King) olunye uhlelo olwenzelwe ukukhiqiza inani elikhulu lezicelo ezihlukile ngokumelene neseva yewebhu. Ekuqaleni yabhalwa nge-Python futhi kamuva yathunyelwa ku-Go, leli thuluzi lilungele ukukala ukuthi isayithi liziphatha kanjani ngaphansi kokwanda komthwalo okulingisiwe okunonya.
I-Tor's Hammer ilandela indlela efanayo, kodwa inesengezo esithakazelisayo.Ingasebenzisa inethiwekhi ye-Tor ukufihla umsuka wethrafikhi, okwenza kube nzima ukulandelela. Indlela yayo yokusebenza ihilela ukugcwala i-TCP stack ngezicelo ezingaphelele nezihamba kancane, ukugcina ukuxhumana kusebenza futhi kudla izinsiza zeseva.
I-BoNeSi iyithuluzi elivulekile le-Linux Leli thuluzi likuvumela ukuthi ulingise ukuhlaselwa kwe-DDoS kusuka kumugqa womyalo, uqondise amakheli athile e-IP futhi usebenze ngisho nangaphakathi kwemishini ebonakalayo. Liwusizo kakhulu ekuhloleni amandla eseva noma isevisi ngaphansi kwemithwalo esatshalalisiwe.
Isigaba 7 se-DDOSIM sigxile ekukhiqizeni ukuhlaselwa kwezinga lesiceloIsebenzisa amakheli e-IP amaningi angahleliwe ukuze iqalise inani elikhulu lezicelo ze-TCP ngokumelene nethagethi. Njenge-BoNeSi, ivame ukusebenza ezindaweni ze-Linux futhi iyisinqumo esihle sokulinganisa ukuqina kwezinsizakalo zewebhu ngokumelene nokuhlaselwa okuyinkimbinkimbi.
I-UFONet iyithuluzi lamahhala elenzelwe ukuthola ukuhlaselwa kwe-DoS kanye ne-DDoS ku-layer 7 (HTTP) ngokusebenzisa amavekhtha e-Open Redirect kumasayithi ezinkampani zangaphandle, asebenza njengohlobo lwe-botnet. Ingasebenza futhi kungqimba yenethiwekhi futhi inezici ze-DarkNET ezibethelwe zokwabelana ngokuqukethwe kusakhiwo se-P2P.
I-LOIC (i-Low Orbit Ion Cannon) mhlawumbe ingenye yamathuluzi aziwa kakhulu Ukuze ilingise ukuhlaselwa kwe-DDoS, ekuqaleni yayiklanyelwe ukusetshenziswa kwezemfundo. Ithumela inani elikhulu lezicelo ze-TCP, UDP, kanye ne-HTTP(S) ku-target ukuze kulinganiswe ukuthi inethiwekhi iziphatha kanjani ngaphansi kwengcindezi. Iyisofthiwe yamahhala futhi yayitholakala ku-Windows kanye ne-Linux, yize ingasagcinwa.
I-GoldenEye ingenye ithuluzi le-HTTP DoS elinganakekelwa., ngaleso sikhathi eyayisetshenziswa ukuhlola ukuqina kwamaseva ewebhu ezinhlotsheni ezithile zokugcwala kwezinga lesicelo.
Ukulingisa ukuhlaselwa kwe-ransomware ezindaweni ezidalwe ngamafu
I-Ransomware isibe ngenye yezinsongo ezilimaza kakhulu Kumabhizinisi nakubantu ngabanye: ibethela noma ivimbele ukufinyelela kwedatha futhi ifuna isihlengo sokukhishwa kwayo. Ukushintshela kuzakhiwo ze-cloud-native kuye kwandisa kakhulu indawo yokuhlasela, njengoba izinsizakalo, ama-microservices, ama-container, kanye nama-integration points anda.
Indawo etholakala efwini iqukethe izinhlelo zokusebenza ezenzelwe ifu.Lezi zinhlelo zokusebenza zihlukaniswe ngama-microservices futhi ngokuvamile zihlelwe ngamapulatifomu afana ne-Kubernetes. Ziyakwazi ukukhuliswa kakhulu, ziqine, futhi kulula ukuzisebenzisa, kodwa ubunzima bazo buholela ekungalungiselelweni kahle kanye nobuthakathaka bokuphepha abahlaseli abangabusebenzisa.
Kuhlelo olunjalo oluxhumene, umhlaseli obeka engcupheni ingxenye eyodwa Ngokombono, ingaphenduka kusukela lapho futhi ithole ukufinyelela kwamanye amasevisi amancane, izizindalwazi, noma imigqa yemiyalezo, okwandisa umthelela wokuhlasela. Ukwanda okungokwemvelo kwendawo etholakala efwini nakho kungasebenza ngokumelene nakho: uma isevisi ethelelekile iphindaphinda ngokuzenzakalelayo, i-ransomware isakazeka ngokushesha okukhulu.
Ngakho-ke, ukulingisa ukuhlaselwa kwe-ransomware kulezi zindawo Kubhekwa njengokubalulekile ngaphakathi kwamasu okuphepha anamuhla. Akukhona nje ukubona ukuthi ikhophi egciniwe iyasebenza yini, kodwa mayelana nokuqinisekisa ukusebenza kahle kwezilawuli zokufinyelela, ukuhlukaniswa kwenethiwekhi, izinqubomgomo zelungelo elincane, ukuqapha amalogi, kanye nokuphendula kwezehlakalo okuzenzakalelayo.
Inqubo ivame ukuqala ngemephu eningiliziwe yemvelo: ukuthi yimaphi ama-microservices akhona, indlela axhumana ngayo, ukuthi aphatha yiphi idatha, igcinwa kuphi, ukuthi yikuphi ukuhlanganiswa kwezinkampani zangaphandle okukhona, yiziphi izimvume ama-akhawunti esevisi ahlukene kanye nabasebenzisi abanazo, nokuthi yiziphi izakhi eziveza izixhumi ezibonakalayo ngaphandle.
Kusukela lapho, kwakhiwa imodeli yosongo. Ukusebenzisa izinhlaka ezifana ne-STRIDE noma i-DREAD, ezisiza ekuboneni izingozi zokuzenza umuntu ongeyena, ukukhohlisa, ukudalulwa kolwazi, ukwenqatshwa kwenkonzo, noma ukwanda kwamalungelo. Lo modeli usetshenziselwa ukuklama izimo zokuhlasela ezivivinywa kusetshenziswa amasu okuhlola ukungena ezindaweni ezilawulwayo.
Lingisa ukuhlasela kwe-ransomware kusukela ekuqaleni kuze kube sekupheleni Ikuvumela ukuthi ubone ukuthi izinkinga zikuphi: iziqinisekiso ezingavikelwe kahle, ukucushwa okuzenzakalelayo, ukuntuleka kokuhlukaniswa, ukuqapha okunganele, izikhathi zokuphendula ezisheshayo, izinqubo ezingacacile ezenziwe ngesandla, njll. Ngokusekelwe emiphumeleni, izinqubomgomo ziyalungiswa, izimpendulo ziyazenzakalela, futhi izixhumanisi ezibuthakathaka kakhulu ochungechungeni lokuphepha ziyaqiniswa.
Izinzuzo zalezi zilingiso zicacile.Ubuthakathaka buyatholakala ngaphambi kokuba abahlaseli benze kanjalo, amakhono okusabela ayathuthukiswa, izikhathi zokululama ziyancishiswa, futhi ukuqhubeka kwebhizinisi kuyavikelwa. Ngaphezu kwalokho, izifundo ezifundwayo zisetshenziselwa ukuklama izinhlelo ezingcono zokululama enhlekeleleni nokuqinisa ukuqeqeshwa kwabasebenzi bezobuchwepheshe.
Izinzuzo kanye nokungalungi kwe-network kanye ne-attack simulators
Izilingisi zenethiwekhi nezokuhlasela zinikeza inani elikhulu Zilungele ukufunda, ukuhlela, kanye nokuhlola ngaphandle kokubeka engcupheni ingqalasizinda yangempela. Zivumela ukuhlola ngezakhiwo eziyinkimbinkimbi, izinqubomgomo zokuphepha, ubuchwepheshe obusha, kanye nezimo zokwehluleka ngaphandle kokusetha amalebhu angokoqobo noma idatha yokukhiqiza ingozi.
Nokho, banemingcele okufanele ikhunjulwe.Noma ngabe zinembile kangakanani, azikaze zimelele ngokuphelele ukuziphatha kwenethiwekhi yangempela. Kungaba nomehluko ngezikhathi zokuphendula, ukusebenzisana phakathi kweprotocol, ukusebenza ngaphansi komthwalo, ukuziphatha kwehadiwe ethile, noma izimo zemvelo (isb., ukuphazamiseka kumanethiwekhi e-Wi-Fi).
Enye inkinga enkulu ukusetshenziswa kwezinsizakusebenzaLokhu kuyiqiniso ikakhulukazi kuma-emulator athuthukile alayisha izithombe zesistimu yokusebenza ephelele noma aphindaphinde amadivayisi amaningi ngasikhathi sinye. Uma ihadiwe esetshenziselwa ukulingisa ingaphumeleli, imiphumela ingase ingabonakali, futhi ulwazi lomsebenzisi lungaba yinto ekhungathekisayo kakhulu.
Akuwona wonke ama-simulators asekela wonke amadivayisi kanye nezinqubo.Izinketho zamahhala zivame ukulinganiselwa ngokuya ngabakhiqizi noma izinguqulo, kuyilapho izinketho ezikhokhelwayo zidinga amalayisense ukuze zilayishe izithombe ezithile. Lokhu kungaba yinkinga ezindaweni ezikhethekile kakhulu noma uma ufuna ukuphinda inethiwekhi yenkampani ngokuningiliziwe.
Okokugcina, kufanele kucatshangelwe indlela yokufunda.Lawa mathuluzi, ikakhulukazi lawo aphelele, akuyona nje indaba yokuthi "okulandelayo, okulandelayo, ukuqeda." Adinga ukuqonda imiqondo yokuxhumana, ukuphepha, kanye nokwenza izinto zibe ngokoqobo, futhi ngokuvamile, ubungcweti bomugqa womyalo. Kuyinselele ekuqaleni, kodwa uma esekwazi kahle, aba umthombo obalulekile kunoma yimuphi uchwepheshe wokuxhumana noma wokuphepha kwe-inthanethi.
Naphezu kwalezi zingqinamba, ibhalansi phakathi kwezindleko nezinzuzo Ngokuvamile kunenzuzo enkulu: ukuqala ngama-simulators wamahhala, futhi njengoba izidingo zikhula, ukucabangela izixazululo ezikhokhelwayo noma ezihlanganisiwe kukuvumela ukuthi udale uhlelo lokuhlola oluqinile ngaphandle kokuchitha imali eningi kuhadiwe noma amalayisense kusukela ngosuku lokuqala.
Uma zihlanganisiwe, hlasela izilingisi zamanethiwekhi asekhaya nawezinkampaniAmapulatifomu okuqwashisa nge-phishing kanye ne-malware, amalebhu enethiwekhi ebonakalayo, kanye nokulingisa kwe-ransomware okusekelwe efwini kwakha izikhali ezinamandla zokuhlala phambili kwezigebengu ze-inthanethi. Ngokuhlanganisa amathuluzi asebenzayo nokuqeqeshwa okuqhubekayo kanye nesiko eliqinile lokuphepha, kungenzeka ukuguqula amanethiwekhi amancane asekhaya kanye nengqalasizinda yamabhizinisi amakhulu ibe yizindawo ezikwazi ukumelana nezigameko zansuku zonke.