Cyber ​​Security

Ukuhlasela kwe-Cyber ​​​​: ukuthi kuyini, kusebenza kanjani, inhloso nokuthi ungakuvimbela kanjani: Ukuhlaselwa kwe-Denial-of-service (DoS)

Ukuhlasela kwe-cyber defii-nible njengomsebenzi ononya omelene nesistimu, ithuluzi, uhlelo lokusebenza noma into enengxenye yekhompyutha. Kungumsebenzi ohlose ukuthola inzuzo yomhlaseli ngezindleko zalowo ohlaselwe. Namuhla sibheka ukuhlasela kweDenial-of-Service

    Kunezinhlobo ezahlukene zokuhlaselwa ku-inthanethi, ezihluka ngokuya ngezinhloso okufanele zizuzwe kanye nezimo zobuchwepheshe nezimo:

    • ukuhlaselwa kwe-cyber ukuvimbela isistimu ukuthi isebenze,
    • lokho kukhomba ukuyekethisa kohlelo,
    • okunye ukuhlasela kuqondise idatha yomuntu siqu ephethwe isistimu noma inkampani,
    • ukuhlaselwa kwe-cyber-activism ekusekeleni izimbangela noma imikhankaso yolwazi kanye nokuxhumana
    • etc ...

    Phakathi kokuhlaselwa okuvame kakhulu, ezikhathini zamuva, kukhona ukuhlaselwa kwezinhloso zezomnotho nokuhlaselwa kokugeleza kwedatha. Ngemva kokuhlaziya izinhlobo ezahlukene zokuhlaselwa emasontweni asanda kwedlula, namuhla sibonaUkuhlasela kwe-Denial-of-Service.

    Labo abenza ukuhlasela ku-inthanethi, bebodwa noma ngamaqembu, bayabizwa Hacker

    Ukuhlaselwa Kokuphika Isevisi

    Ukuhlasela kwe-Denial-of-Service kuhloswe ukuthatha izinsiza zesistimu ize iphele, ukuze uhlelo ngokwalo lungakwazi ukuphendula izicelo zesevisi. Ukuhlasela kwe-DoS nakho kuwukuhlasela kwezinsiza zesistimu, futhi kuqalwa inombolo enkulu yeminye imishini yokusingatha etheleleke ngesofthiwe enonya elawulwa umhlaseli.

    Ngokungafani nokuhlasela okudizayinelwe ukuvumela umhlaseli ukuthi azuze noma akhulise ukufinyelela, ukunqatshelwa kwesevisi akunikezi izinzuzo eziqondile kubahlaseli. Umphumela otholakele uwukwenza isevisi ingasebenziseki. Ngakho-ke, uma impahla ehlaselwe ingeyombangi wezohwebo, inzuzo yomhlaseli ingokoqobo.

    Enye injongo yokuhlasela kwe-DoS kungaba ukuthatha isistimu ingaxhunyiwe ku-inthanethi ukuze kuqaliswe olunye uhlobo lokuhlasela. 

    Ukuhlasela kwe-DoS kungaba kwezinhlobo ezahlukene:
    Ugwayi Izinyembezi:

    ibangela izinkambu ze-offset zobude nokwehlukana kumaphakethe alandelanayo we-Internet Protocol (IP) ukuthi adlulene kumsingathi ohlaselwe; isistimu ehlaselwe izama ukwakha kabusha amaphakheji kunqubo, kodwa yehluleka. Isistimu eqondiwe iyadideka futhi iphahlazeke. Uma zingekho iziqeshana ezitholakalayo zokuvikela kulokhu kuhlasela kwe-DoS, khubaza i-SMBv2 futhi uvimbele izimbobo 139 kanye ne-445;

    Ugwayi I-Smurf:

    kubandakanya ukusebenzisa i-IP spoofing kanye ne-ICMP ukuze kugcwaliswe inethiwekhi eqondiwe ngethrafikhi. Le ndlela yokuhlasela isebenzisa izicelo ze-ICMP echo ezihloselwe ukusakaza amakheli e-IP. Lezi zicelo ze-ICMP zivela ekhelini "lesisulu" elingcolile. Isibonelo, uma ikheli lesisulu lingu-10.0.0.10, umhlaseli kuzomele ahlasele isicelo se-ICMP echo kusuka ku-10.0.0.10 ukuze asakaze ikheli 10.255.255.255. Lesi sicelo sizoya kuwo wonke ama-IP ebangeni, nazo zonke izimpendulo ezibuyela ku-10.0.0.10, ezivala inethiwekhi. Le nqubo iyaphinda, futhi ingenziwa ngokuzenzakalelayo ukuze ikhiqize ukuminyana kwenethiwekhi okukhulu.

    Ukuze uvikele amadivayisi akho kulokhu kuhlasela, udinga ukukhubaza ukusakaza okuqondiswe ku-IP kumarutha. Lokhu kuzovimbela isicelo sokusakaza i-ICMP echo ukuthi sifinyelele kumadivayisi enethiwekhi. Enye inketho kungaba ukulungisa izindawo zokugcina ukuze zibavimbele ekuphenduleni amaphakethe e-ICMP avela emakhelini okusakaza;

    Ugwayi I-Ping Yokufa:

    isebenzisa amaphakethe e-IP uku-ping isistimu eqondiwe enosayizi we-IP omkhulu kunomkhawulo wamabhayithi angu-65.535. Amaphakethe e-IP alo sayizi awavunyelwe, ngakho umhlaseli uhlukanisa iphakethe le-IP. Uma isistimu eqondiwe isihlanganisa kabusha iphakheji, ukuchichima kwebhafa nokunye ukuphahlazeka kungenzeka.

    I-Ping of death attack ingavinjwa ngokusebenzisa i-firewall elawula ubukhulu bobukhulu bamaphakethe e-IP ahlukanisiwe;

    Ugwayi Izikhukhula ze-TCP SYN:

    kulesi simo umhlaseli usizakala ngokusetshenziswa kwesikhala sebhafa phakathi neseshini yokuqaliswa kwe-Transmission Control Protocol (TCP) ukuxhawula isandla. Idivayisi yomhlaseli igcwalisa ulayini omncane ongaphakathi kwenqubo yesistimu eqondiwe ngezicelo zokuxhuma, kodwa ayiphenduli lapho isistimu eqondiwe iphendula lezo zicelo. Lokhu kubangela ukuthi isistimu eqondiwe iphele ngesikhathi ilinde impendulo evela kudivayisi yomhlaseli, okubangela ukuthi isistimu ilenge noma ingasebenziseki uma ulayini woxhumano usugcwele.

    Kunezinyathelo ezithile zokulwa nokuhlasela kwezikhukhula ze-TCP SYN:

    • Beka amaseva ngemuva kwe-firewall elungiselelwe ukumisa amaphakethe we-SYN angenayo.
    • Khulisa usayizi womugqa woxhumano futhi wehlise isikhathi sokuvala ekuxhumekeni okuvuliwe.

    izigidi zamasistimu atheleleke ngohlelo olungayilungele ikhompuyutha alawulwa abaduni, asetshenziselwa ukuhlasela i-DoS. Lawa ma-bots noma amasistimu e-“zombie” asetshenziselwa ukuhlasela amasistimu okuqondiwe, ngokuvamile agcwalisa umkhawulokudonsa wesistimu eqondiwe namandla okucubungula. Lokhu kuhlasela kwe-DoS kunzima ukulandelela ngoba ama-botnet atholakala ezindaweni ezahlukene.

    Ukuhlaselwa kwe-Botnet kungancishiswa ngoku:

    • Izihlungi ze-RFC3704, ezizophika ithrafikhi evela emakhelini akhohlisayo futhi zisize ekuqinisekiseni ukuthi ithrafikhi ilandeleka ibuyele kunethiwekhi yayo yomsuka okuyiyonayona. Isibonelo, ukuhlunga kwe-RFC3704 kuzosusa amaphakethe kumakheli mbumbulu.
    • Ukuhlunga imbobo emnyama, okuvimbela ithrafikhi engafunwa ngaphambi kokuthi ingene kunethiwekhi evikelekile. Uma kutholwa ukuhlasela kwe-DDoS, umsingathi we-Border Gateway Protocol (BGP) kufanele athumele izibuyekezo zomzila kumarutha e-ISP ukuze aqondise yonke ithrafikhi eqondiswe eziphakelini eziyisisulu kusixhumanisi esibonakalayo. null0 ku-hop elandelayo.

    Uma uhlaselwe futhi udinga ukubuyisela ukusebenza okuvamile, noma uma ufuna ukubona ngokucacile futhi uqonde kangcono, noma ufuna ukukuvimbela: sibhalele ku-rda@hrcsrl.it. 

    Ukuvimbela ukuhlasela Ukulahlwa Kwesevisi

    Kufanele nakanjani uthole isofthiwe ye-antivirus ephumelelayo nethembekile.
    Uma isabelomali sakho siqinile, ungathola ama-antivirus amaningi mahhala ku-inthanethi.

    Innovation newsletter
    Ungaphuthelwa yizindaba ezibaluleke kakhulu zokuqamba. Bhalisa ukuze uthole nge-imeyili.

    Kubalulekile ukuthi ngaso sonke isikhathi sigcine isiphequluli esisisebenzisayo ukuhlola i-inthanethi sibuyekeziwe futhi mhlawumbe sifake ithuluzi lokuhlaziya elikwazi ukuhlola ubukhona bobungozi kukhodi yewebhusayithi.

    UKUHLOLWA KWEZOKUPHEPHA

    Kuyinqubo eyisisekelo yokukala izinga lamanje lokuphepha lenkampani yakho.
    Ukwenza lokhu kuyadingeka ukufaka ithimba le-Cyber ​​​​elilungiselelwe ngokwanele, elikwazi ukwenza ukuhlaziya isimo lapho inkampani izithola ikuso ngokuphathelene nokuphepha kwe-IT.
    Ukuhlaziywa kungenziwa ngokuvumelanayo, ngenhlolokhono eyenziwa yi-Cyber ​​​​Team noma
    futhi i-asynchronous, ngokugcwalisa uhlu lwemibuzo ku-inthanethi.

    Singakusiza, thintana nochwepheshe be-HRC srl ngokubhalela ku-rda@hrcsrl.it.

    UKUQWASHISA NGOKUVIKELA: yazi isitha

    Ngaphezulu kuka-90% wokuhlaselwa kwama-hacker kuqala ngesenzo sabasebenzi.
    Ukuqwashisa yisikhali sokuqala sokulwa nengozi yohleloxhumano ngesiqoqelalwazi.

    Yile ndlela esenza ngayo "Ukuqwashisa", singakusiza, thintana nochwepheshe be-HRC srl ngokubhalela ku-rda@hrcsrl.it.

    UKUTHOLA OKULAWULIWE NEMPENDULO (MDR): ukuvikela okusebenzayo kwendawo yokugcina

    Idatha yebhizinisi inenani elikhulu kuzigebengu ze-inthanethi, yingakho izindawo zokugcina namaseva kuhloswe ngazo. Kunzima ngezixazululo zendabuko zokuphepha ukumelana nezinsongo ezivelayo. Izigebengu ze-Cybercriminal zidlula izivikeli ze-antivirus, zisizakala ngokungakwazi kwezinkampani ze-IT ukuqapha nokuphatha imicimbi yezokuphepha ubusuku nemini.

    Nge-MDR yethu singakusiza, thintana nochwepheshe be-HRC srl ngokubhalela ku-rda@hrcsrl.it.

    I-MDR iwuhlelo oluhlakaniphile oluqapha ithrafikhi yenethiwekhi futhi lenze ukuhlaziya ukuziphatha
    uhlelo lokusebenza, ukuhlonza umsebenzi osolisayo nongafuneki.
    Lolu lwazi ludluliselwa ku-SOC (Isikhungo Sokusebenza Kwezokuphepha), ilabhorethri ephethwe
    abahlaziyi be-cybersecurity, abaphethe izitifiketi eziyinhloko ze-cybersecurity.
    Esimeni lapho kukhona okungahambi kahle, i-SOC, enesevisi ephethwe 24/7, ingangenela emazingeni ahlukene obunzima, kusukela ekuthumeleni i-imeyili eyisixwayiso kuye ekuhlukaniseni iklayenti kunethiwekhi.
    Lokhu kuzosiza ukuvimba izinsongo ezingaba khona kuhlumela futhi kugweme umonakalo ongalungiseki.

    UKUQWASHWA KWEWEBHU YOKUVIKELA: ukuhlaziywa kweWEBHU EMNYAMA

    Iwebhu emnyama isho okuqukethwe kwe-World Wide Web kuma-darknets angafinyelelwa nge-inthanethi ngesofthiwe ethile, ukucupha kanye nokufinyelela.
    Ngokugada kwethu Iwebhu Yezokuphepha siyakwazi ukuvimbela futhi siqukathe ukuhlaselwa ku-inthanethi, kusukela ekuhlaziyweni kwesizinda senkampani (isb.: ilwebcreativo.it ) kanye namakheli e-imeyili angawodwana.

    Xhumana nathi ngokubhalela ku-rda@hrcsrl.it, singalungiselela uhlelo lokulungisa ukuhlukanisa usongo, ukuvimbela ukusabalala kwalo, kanye defisithatha izinyathelo ezidingekayo zokulungisa. Isevisi inikezwa 24/XNUMX evela e-Italy

    I-CYBERDRIVE: uhlelo lokusebenza oluvikelekile lokwabelana nokuhlela amafayela

    I-CyberDrive ingumphathi wefayela lefu onamazinga aphezulu okuphepha ngenxa yokubethela okuzimele kwawo wonke amafayela. Qinisekisa ukuvikeleka kwedatha yebhizinisi ngenkathi usebenza efwini futhi wabelana futhi uhlela amadokhumenti nabanye abasebenzisi. Uma uxhumano lulahlekile, ayikho idatha egcinwa ku-PC yomsebenzisi. I-CyberDrive ivimbela amafayela ukuthi alahleke ngenxa yokulimala kwengozi noma akhishelwe ukweba, kungaba okoqobo noma okwedijithali.

    «THE CUBE»: ikhambi izinguquko

    Isikhungo sedatha esincane kunazo zonke nesinamandla kakhulu se-in-a-box esinikeza amandla ekhompuyutha nesivikelo ekulimaleni ngokomzimba nokunengqondo. Idizayinelwe ukuphathwa kwedatha ezindaweni ezisemaphethelweni naserobo, izindawo zokudayisa, amahhovisi ochwepheshe, amahhovisi akude kanye namabhizinisi amancane lapho isikhala, izindleko kanye nokusetshenziswa kwamandla kubalulekile. Ayidingi izikhungo zedatha namakhabhinethi ama-rack. Ingabekwa kunoma yiluphi uhlobo lwendawo ngenxa yomthelela wobuhle obuhambisana nezindawo zokusebenza. «I-Cube» ibeka ubuchwepheshe besoftware yebhizinisi ensizeni yamabhizinisi amancane naphakathi nendawo.

    Xhumana nathi ngokubhalela ku-rda@hrcsrl.it.

    Ungase ube nentshisekelo kuMuntu wethu kokuthunyelwe okuPhakathi

    Ercole Palmeri: I-Innovation iyalutha

    [Ultimate_post_list id=”12982″]

    Innovation newsletter
    Ungaphuthelwa yizindaba ezibaluleke kakhulu zokuqamba. Bhalisa ukuze uthole nge-imeyili.

    Izihloko zakamuva

    Ubuhlakani bokwenziwa be-Google obusha bungakwazi ukwenza i-DNA, i-RNA kanye "nawo wonke ama-molecule empilo"

    I-Google DeepMind yethula inguqulo ethuthukisiwe yemodeli yayo yobuhlakani bokwenziwa. Imodeli entsha ethuthukisiwe ayinikezi kuphela…

    9 May 2024

    Ukuhlola i-Laravel's Modular Architecture

    I-Laravel, edume nge-syntax yayo enhle nezici ezinamandla, iphinde inikeze isisekelo esiqinile sokwakhiwa kwe-modular. Lapho…

    9 May 2024

    I-Cisco Hypershield kanye nokutholwa kwe-Splunk Inkathi entsha yokuphepha iyaqala

    I-Cisco ne-Splunk zisiza amakhasimende ukuthi asheshise uhambo lwawo oluya ku-Security Operations Center (SOC) yesikhathi esizayo nge...

    8 May 2024

    Ngale kohlangothi lwezomnotho: izindleko ezingabonakali ze-ransomware

    I-Ransomware iphethe izindaba kule minyaka emibili edlule. Iningi labantu lazi kahle ukuthi ukuhlasela...

    6 May 2024

    Ukungenelela okusha ku-Augmented Reality, ngesibukeli se-Apple e-Catania Polyclinic

    Ukuhlinzwa kwe-ophthalmoplasty kusetshenziswa isibukeli sezentengiso se-Apple Vision Pro kwenziwa eCatania Polyclinic…

    3 May 2024

    Izinzuzo Zokufaka Umbala Amakhasi Ezingane - umhlaba womlingo wayo yonke iminyaka

    Ukuthuthukisa amakhono amahle emisipha ngokusebenzisa imibala kulungiselela izingane amakhono ayinkimbinkimbi njengokubhala. Ukufaka umbala...

    2 May 2024

    Ikusasa Lilapha: Imboni Yezokuthumela Imikhumbi Iwuguqula Kanjani Umnotho Womhlaba

    Umkhakha wezempi wasolwandle ungamandla ezomnotho weqiniso emhlabeni jikelele, osudlule wafinyelela emakethe yezigidigidi eziyi-150...

    1 May 2024

    Abashicileli kanye nezivumelwano ze-OpenAI zisayina ukuze zilawule ukuhamba kolwazi olucutshungulwa yi-Artificial Intelligence

    NgoMsombuluko odlule, i-Financial Times imemezele isivumelwano ne-OpenAI. I-FT inikeza amalayisense ubuntatheli bayo obusezingeni lomhlaba…

    30 April 2024