Monga Injiniya waluso wa Network, kodi mumamvetsetsa 8 Ma Network Attacks wamba?

Akatswiri opanga maukonde, pamwamba, ndi "ogwira ntchito mwaukadaulo" omwe amamanga, kukhathamiritsa, ndikuthetsa ma netiweki, koma zenizeni, ndife "mzere woyamba wachitetezo" pachitetezo cha cybersecurity. Lipoti la 2024 CrowdStrike likuwonetsa kuti ma cyberattack padziko lonse lapansi adakwera ndi 30%, pomwe makampani aku China akuwonongeka kwambiri ndi yuan biliyoni 50 chifukwa chachitetezo cha pa intaneti. Makasitomala samasamala kaya ndinu katswiri wama opaleshoni kapena chitetezo; zochitika zapaintaneti zikachitika, injiniya ndiye woyamba kukhala ndi mlandu. Osanenanso za kufalikira kwa AI, 5G, ndi maukonde amtambo, zomwe zapangitsa kuti njira zowukira zachiwembu zikhale zovuta kwambiri. Pali positi yotchuka pa Zhihu ku China: "Akatswiri a pa intaneti omwe saphunzira chitetezo akudula njira yawo yothawira!" Mawu amenewa, ngakhale kuti ndi ankhanza, ndi oona.

M'nkhaniyi, ndipereka kusanthula kwatsatanetsatane kwa machitidwe asanu ndi atatu omwe amagwiritsidwa ntchito pa intaneti, kuchokera ku mfundo zawo ndi maphunziro awo kupita ku njira zodzitetezera, ndikuzisunga momwe zingathere. Kaya ndinu mlendo kapena msilikali wodziwa ntchito yomwe mukufuna kupititsa patsogolo luso lanu, chidziwitsochi chidzakuthandizani kulamulira ntchito zanu. Tiyeni tiyambe!

No.1 DDoS Attack

Kuwukira kwa Distributed Denial-of-Service (DDoS) kumachulukirachulukira ma seva omwe akutsata kapena ma network okhala ndi kuchuluka kwa anthu abodza, zomwe zimapangitsa kuti ogwiritsa ntchito ovomerezeka asafikiridwe. Njira zodziwika bwino zimaphatikizapo kusefukira kwa SYN komanso kusefukira kwa UDP. Mu 2024, lipoti la Cloudflare lidawonetsa kuti DDoS idachita 40% yazomwe zidachitika pa intaneti.

Mu 2022, nsanja ya e-commerce idavutitsidwa ndi DDoS tsiku la Singles 'Singles, pomwe kuchuluka kwa magalimoto kumafika ku 1Tbps, zomwe zidapangitsa kuti tsambalo liwonongeke kwa maola awiri ndikuwonongeka kwa mamiliyoni mamiliyoni a yuan. Mnzanga wina anali kuyang'anira chithandizo chadzidzidzi ndipo anatsala pang'ono kupenga chifukwa cha kukakamizidwa.

Kodi kupewa izo?

○Kuyeretsa Kuyenda:Gwiritsani ntchito chitetezo cha CDN kapena DDoS (monga Alibaba Cloud Shield) kuti musefe magalimoto oyipa.
○Bandwidth Redundancy:Sungani 20% -30% ya bandwidth kuti muthane ndi kuchuluka kwa magalimoto mwadzidzidzi.
○Alamu Yoyang'anira:Gwiritsani ntchito zida (monga Zabbix) kuti muwunikire kuchuluka kwa magalimoto munthawi yeniyeni komanso tcheru pazovuta zilizonse.
○Emergency Plan: Gwirizanani ndi ma ISPs kuti musinthe mizere mwachangu kapena mutseke magwero owukira.

Na.2 SQL Injection

Obera amabaya khodi yoyipa ya SQL m'magawo olowetsa masamba kapena ma URL kuti abe zidziwitso za database kapena kuwononga machitidwe. Mu 2023, lipoti la OWASP linanena kuti jakisoni wa SQL adakhalabe amodzi mwamawu atatu apamwamba kwambiri pa intaneti.

Webusaiti yamakampani ang'onoang'ono mpaka apakatikati idasokonezedwa ndi wobera yemwe adalowetsa mawu a "1=1", kupeza mosavuta mawu achinsinsi a woyang'anira, chifukwa tsambalo linalephera kusefa zomwe ogwiritsa ntchito adalemba. Pambuyo pake zidadziwika kuti gulu lachitukuko silinagwiritse ntchito zotsimikizira zolowa.

Kodi kupewa izo?

○Funso lokhazikika:Opanga backend ayenera kugwiritsa ntchito mawu okonzekera kuti apewe kulumikiza mwachindunji SQL.
○Dipatimenti ya WAF:Ma firewall a pa intaneti (monga ModSecurity) amatha kuletsa zopempha zoyipa.
○Kuwunika pafupipafupi:Gwiritsani ntchito zida (monga SQLMap) kuti musanthule zofooka ndikusunganso nkhokwe musanayambe kuzigamba.
○Control Access:Ogwiritsa ntchito database ayenera kupatsidwa mwayi wocheperako kuti apewe kutayika kwathunthu.

No.3 Cross-site Scripting (XSS) Attack

Cross-site scripting (XSS) imabera ma cookie, ma ID a gawo, ndi zolemba zina zoyipa poziyika pamasamba. Amagawidwa m'magulu owonetsedwa, osungidwa, komanso ozikidwa pa DOM. Mu 2024, XSS idachita 25% yazovuta zonse zapaintaneti.

Bungwe linalephera kusefa ndemanga za ogwiritsa ntchito, kulola owononga kuti aike script code ndi kuba zambiri zachinsinsi za ogwiritsa ntchito. Ndawonapo milandu yomwe makasitomala adalandidwa CNY500,000 yuan chifukwa cha izi.

Kodi kupewa izo?

○Zosefera zolowetsa: Kuthawira kwa ogwiritsa ntchito (monga HTML encoding).
○Njira ya CSP:Yambitsani mfundo zachitetezo kuti muchepetse zolemba.
○Chitetezo cha msakatuli:Khazikitsani mitu ya HTTP (monga X-XSS-Protection) kuti mutseke zolemba zoyipa.
○Tool Scan:Gwiritsani ntchito Burp Suite kuti muyang'ane zovuta za XSS nthawi zonse.

No.4 Kuphwanya Achinsinsi

Ma hackers amapeza mawu achinsinsi a ogwiritsa ntchito kapena oyang'anira pogwiritsa ntchito ziwopsezo zankhanza, kuwukira kwa mtanthauzira mawu, kapena uinjiniya wamagulu. Lipoti la 2023 la Verizon lidawonetsa kuti 80% ya kulowerera pa intaneti kunali kokhudzana ndi mawu achinsinsi ofooka.

Rauta ya kampani, pogwiritsa ntchito mawu achinsinsi oti "admin," idalowetsedwa mosavuta ndi wobera yemwe adayika chitseko chakumbuyo. Pambuyo pake injiniya wokhudzidwayo adachotsedwa ntchito, ndipo woyang'anirayo adayimbidwanso mlandu.

Kodi kupewa izo?

○Mawu Achinsinsi Ovuta:Limbikitsani zilembo 12 kapena kupitilira apo, zilembo zosakanizika, manambala, ndi zizindikilo.
○Multi-Factor Authentication:Yambitsani MFA (monga nambala yotsimikizira za SMS) pazida zofunika kwambiri.
○Kuwongolera mawu achinsinsi:Gwiritsani ntchito zida (monga LastPass) kusamalira chapakati ndi kusintha nthawi zonse.
○Kuchepetsa Kuyesera:Adilesi ya IP yatsekedwa pambuyo poyesa kulephera katatu kuti mupewe kuukira kwankhanza.

No.5 Man-in-the-Middle Attack (MITM)

Ma hackers amalowerera pakati pa ogwiritsa ntchito ndi ma seva, kusokoneza kapena kusokoneza deta. Izi ndizofala pa Wi-Fi yapagulu kapena mauthenga osabisika. Mu 2024, kuwukira kwa MITM kudapanga 20% ya kununkhiza kwa maukonde.

Wi-Fi ya shopu ya khofi idasokonezedwa ndi obera, zomwe zidapangitsa ogwiritsa ntchito kutaya madola masauzande ambiri pomwe deta yawo idalandidwa ndikulowa patsamba la banki. Pambuyo pake mainjiniya adazindikira kuti HTTPS sinagwiritsidwe ntchito.

Kodi kupewa izo?

○Limbikitsani HTTPS:Webusayiti ndi API zimasungidwa ndi TLS, ndipo HTTP ndiyozimitsa.
○Chitsimikizo cha Satifiketi:Gwiritsani ntchito HPKP kapena CAA kuti muwonetsetse kuti satifiketiyo ndi yodalirika.
○Chitetezo cha VPN:Zochita zowoneka bwino ziyenera kugwiritsa ntchito VPN kubisa traffic.
○Chitetezo cha ARP:Yang'anirani tebulo la ARP kuti mupewe spoofing ya ARP.

No.6 Phishing Attack

Obera amagwiritsa ntchito maimelo achinyengo, mawebusayiti, kapena mameseji kunyenga ogwiritsa ntchito kuti aulule zambiri kapena kudina maulalo oyipa. Mu 2023, ziwopsezo zachinyengo zidapanga 35% yazochitika zachitetezo cha pa intaneti.

Wogwira ntchito pakampani ina adalandira imelo kuchokera kwa munthu wina woti ndi bwana wawo, wopempha kuti amutumizire ndalama, ndipo pamapeto pake adataya mamiliyoni. Pambuyo pake zidadziwika kuti tsamba la imelo linali labodza; wogwira ntchitoyo anali asanatsimikizire.

Kodi kupewa izo?

○Maphunziro Ogwira Ntchito:Nthawi zonse zichitani maphunziro odziwitsa anthu za cybersecurity kuti muphunzitse momwe mungadziwire maimelo achinyengo.
○Kusefa Imelo:Ikani zipata zotsutsana ndi phishing (monga Barracuda).
○Kutsimikizira Domain:Chongani domeni ya wotumiza ndi kuyatsa mfundo za DMARC.
○Kutsimikizira Pawiri:Zochita zowoneka bwino zimafuna kutsimikizira pafoni kapena pamaso pa munthu.

No.7 Ransomware

Ransomware imasunga deta ya ozunzidwa ndipo imafuna dipo kuti iwonongeke. Lipoti la 2024 Sophos lidawonetsa kuti 50% yamabizinesi padziko lonse lapansi adakumana ndi ziwopsezo za ransomware.

Ma network a chipatala adasokonezedwa ndi LockBit ransomware, zomwe zidachititsa kuti ziwalo za dongosolo komanso kuyimitsidwa kwa maopaleshoni. Mainjiniya adakhala sabata yathunthu akubwezeretsa zomwe zidachitikazo, zomwe zidawonongeka kwambiri.

Kodi kupewa izo?

○Kusunga Nthawi Zonse:Kusunga zosunga zobwezeretsera zapaintaneti zofunikira ndikuyesa njira yochira.
○Management Patch:Sinthani machitidwe ndi mapulogalamu mwachangu kuti mutseke zovuta.
○Kuyang'anira Makhalidwe:Gwiritsani ntchito zida za EDR (monga CrowdStrike) kuti muwone machitidwe odabwitsa.
○Isolation Network:Kugawaniza machitidwe ozindikira kuti apewe kufalikira kwa ma virus.

No.8 Zero-day Attack

Ziwopsezo zamasiku a Zero zimagwiritsa ntchito zovuta za pulogalamu yosadziwika, zomwe zimapangitsa kuti zikhale zovuta kuzipewa. Mu 2023, Google idanenanso za kupezeka kwa ziwopsezo 20 zokhala pachiwopsezo chatsiku la zero, zambiri zomwe zidagwiritsidwa ntchito pakuwukira.

Kampani yomwe imagwiritsa ntchito pulogalamu ya SolarWinds idasokonekera chifukwa chokhala pachiwopsezo cha masiku a zero, zomwe zidakhudza njira zake zonse zoperekera. Mainjiniya analibe chochita ndipo anangodikirira chigamba.

Kodi kupewa izo?

○Kuzindikira Kulowa:Ikani ma IDS/IPS (monga Snort) kuti muwunikire kuchuluka kwa magalimoto.
○Sandbox Analysis:Gwiritsani ntchito sandbox kuti musankhe mafayilo okayikitsa ndikuwunika machitidwe awo.
○Threat Intelligence:Lembetsani kuzinthu (monga FireEye) kuti mudziwe zambiri zakusatetezeka.
○Mwayi Wochepa:Kuletsa zilolezo mapulogalamu kuchepetsa kuukira pamwamba.

Anzanga amtaneti, mwakumanapo ndi ziwonetsero zanji? Nanga munazikwanitsa bwanji? Tiyeni tikambirane izi limodzi ndikugwira ntchito limodzi kuti maukonde athu akhale olimba!