- Ubuthakathaka buwubuthakathaka bobuchwepheshe noma bobuntu obuvumela ukuhlaselwa kobumfihlo, ubuqotho, kanye nokutholakala.
- Kunezinhlobo eziningi: isofthiwe, inethiwekhi, ukucushwa, isici somuntu, ifu kanye nochungechunge lokuhlinzeka, ngaphezu kokwehluleka kobuchwepheshe njengokujova, i-XSS noma i-buffer overflow.
- Ukuhlolwa kwe-CVSS kanye nomongo webhizinisi kubalulekile ekubekeni phambili ukuthi yiziphi izinkinga okufanele zilungiswe kuqala.
- Ukuphathwa okuphumelelayo kuhlanganisa ukuhlelwa okuqhubekayo, ukuhlolwa kwamabhuku, ukuqeqeshwa, izilawuli zokufinyelela, kanye nempendulo ezenzakalelayo.
Ubuthakathaka bokuphepha buyindawo yokuqala yezigameko eziningi zokuphepha kwe-inthanethi. Akusikho ukuhlaselwa ngokwako, kodwa kunalokho yisivalo esivumela usongo ukuthi lungene, lusakazeke, futhi ekugcineni lubangele umonakalo wangempela ezinhlelweni, kumanethiwekhi, kanye nedatha. Ukuqonda ukuthi zihlukaniswa kanjani, zibonakala kanjani, nokuthi ziphathwa kanjani kubalulekile kunoma iyiphi inkampani efuna ukuthatha ukuvikelwa kwayo kwedijithali ngokungathi sína.
Empilweni yansuku zonke, iphutha elilodwa lobuchwepheshe noma lomuntu linganciphisa isevisi ebalulekile ngemizuzu embalwa: kusukela kuseva engalungiselelwe kahle kuya kumsebenzi ochofoza isixhumanisi se-phishing. Yingakho kunezinkulumo eziningi kangaka mayelana nokuphathwa kobungozi , ama-patches, ama-CVE, ama-CVSS, kanye nokuxhashazwa. Kuyo yonke le ndatshana, sizohlela zonke lezi zingcezu: izincazelo, izinhlobo zobuthakathaka, izibonelo zangempela, amasu okuxhaphaza, kanye nendlela yokubeka phambili ukuthi yini okufanele uyilungise kuqala lapho konke kubonakala kuphuthuma.
Kuyini ubungozi bokuphepha futhi kungani kubaluleke kangaka?
Uma sikhuluma ngokuba sengozini, sibhekisela ephutheni , ephutheni, noma ekungalungiselelweni kahle ohlelweni lolwazi (amaseva, izinhlelo zokusebenza, amanethiwekhi, amadivayisi, njll.) okungasetshenziswa umhlaseli ukuze abeke engcupheni ukuphepha. Lokhu kuvumelana kungathinta ubumfihlo ( ukwebiwa kwedatha), ubuqotho ( ukuguqulwa okungagunyaziwe), noma ukutholakala (ukuphela kwesevisi noma ukuphazamiseka).
Ubuthakathaka bungavela emaphutheni okuklama, amaphutha okusebenzisa, ukucushwa okungavikelekile , noma ngisho nezinqubo zokusebenza ezingaphelele (isibonelo, ukwehluleka ukuhoxisa ukufinyelela kwabasebenzi abahambayo). Usongo yisenzo esisebenzisa lobo buthakathaka: i-ransomware, ukuhlaselwa kokunqatshelwa kwenkonzo, ukwebiwa okukhulu kweziqinisekiso, njll. Ngaphandle kobuthakathaka obaziwayo, kungaba nzima kakhulu kumhlaseli, ngakho-ke umgomo wakhe uwukubathola ngaphambi kokuba wenze kanjalo.
Imibiko eminingi yezokuphepha, ikakhulukazi eLatin America, ikhombisa ukuthi ubuthakathaka obungaphezu kweminyaka eyishumi buyaqhubeka nokuxhashazwa ngoba nje abukaze bulungiswe noma buthathwe kancane. Lokhu kwembula inkinga eyisisekelo: ukuntuleka kwezibuyekezo, ukulawulwa okungekuhle kwendawo yokuhlasela, kanye nokwazi okunganele kuwo wonke amazinga enhlangano.
Yingakho indima yochwepheshe bezokuphepha kwe-inthanethi ibaluleke kakhulu. Umsebenzi wabo ukuthola lobu buthakathaka, ukukala umthelela wabo wangempela, ukububeka phambili, ukusebenzisa izindlela zokunciphisa, kanye nokubuqapha ukuqinisekisa ukuthi abuphinde buvele. Ukuze benze lokhu, basebenzisa izikena ezenzakalelayo , ukubuyekezwa kokucushwa, ukuhlolwa kokungena, kanye nokuhlaziywa okuqhubekayo kokusongela.
Kunezindlela ezimbili eziyinhloko zokuthola ubuthakathaka: ngokuhlola ukuphepha okusebenzayo (ukuhlolwa, ukuhlolwa kokungena, ukuskena) noma ngokusebenzisa kabi abahlaseli . Uma kwenzeka isimo sesibili, asisakhulumi nje ngobuthakathaka, kodwa ngesigameko sokuphepha noma ukwephulwa komthetho. Yingakho ukutholakala kusenesikhathi kanye nokulawula ukuvimbela kubaluleke kangaka.
Imiqondo ebalulekile emhlabeni wobuthakathaka
Ukuze uqonde kalula ukuhlukaniswa kobuthakathaka bokuphepha , kuyasiza ukwazi uchungechunge lwamagama avela emibikweni yobuchwepheshe, izaziso zomkhiqizi, kanye nezindaba zokuhlaselwa kwe-cyber.
Ubungozi : Lobu ubuthakathaka uqobo. Kungaba iphutha lekhodi, ukungalungiselelwa kahle, noma inhlanganisela yakho kokubili. Ngokwayo, akuyona ukuhlasela, kodwa kuyindlela yokungena kwesigebengu se-inthanethi.
I-Patch : Lesi yisibuyekezo noma ukulungiswa okukhishwe ngumthengisi ukubhekana nobuthakathaka obuthile . Kungase kuhilele ukushintsha amalabhulali, ukulungisa ukuqinisekiswa kokufaka, ukuqinisa izilawuli zokufinyelela, njll. Yisisombululo esiqondile kakhulu, kodwa futhi yisona esivame ukuhlehliswa ezinhlanganweni eziningi.
I-exploit iyindlela ewusizo yokusebenzisa i-vulnency . Kungaba iskripthi, ifayela elenziwe ngendlela ekhethekile, umucu womyalo, noma isethi yezinyathelo ezenzakalelayo. Iguqula ithiyori (uvulnency) ibe ukuhlasela kwangempela.
I-Payload : Lena "ikhodi enonya ewusizo" esebenza ngemva kokusebenzisa ubuthakathaka. Kungaba i-ransomware, ama-data stealers, i-backdoors ethule, noma enye i-malware. I-exploit ivula umnyango; i-payload ingena futhi yenze umsebenzi ongcolile.
Ubufakazi Bomqondo (POC) : Lokhu kuwubufakazi bomqondo obubonisa ukuthi ubuthakathaka bungasetshenziswa, ngokuvamile ngezinjongo zocwaningo noma zokuhlola . Akudingeki kube nonya; busetshenziselwa ukuqinisekisa ukuthi iphutha likhona futhi kulinganiswe umthelela walo ngaphandle kokulimaza umkhiqizo.
Usuku olungenalutho : Lokhu kuyingozi engaziwa umenzi futhi okungekho patch etholakalayo . Uma umhlaseli eyithola ngaphambi komunye umuntu, angayisebenzisa ngaphandle kwezimpawu zokuthola noma izixazululo ezithile, okwenza kube ngenye yezimo eziyingozi kakhulu.
I-CVE (Ubungozi Obuvamile kanye Nokuchayeka) : Lesi yisibonakaliso esijwayelekile esinikezwe ubungozi ngabunye obutholakala emphakathini. I-CVE efana ne -CVE-2026-6785 ivumela ubungozi obuthile ukuthi bubonwe ngekhodi ehlukile, okwenza kube lula ukulandelela nokuxhumanisa phakathi kwabakhiqizi namaqembu okuphepha.
I-CWE (Common Weakness Enumeration) : Esikhundleni sokugxila ezimweni ngazinye, ihlukanisa amaphethini obuthakathaka (ukugcwala kwe-buffer, ukuqinisekiswa okunganele, amaphutha okuqinisekisa, njll.). Isiza onjiniyela ukuqonda ukuthi yiziphi izinhlobo zamaphutha okufanele bazigweme kusukela esigabeni sokuklama.
I-CVSS (Uhlelo Lokulinganisa Oluvamile Lokusengozini) : Lolu uhlelo olusetshenziswa kakhulu ekutholeni ubunzima bokusengozini kusukela ku-0 kuya ku-10. Lubheka ukuthi lusetshenziswa kanjani, ukuthi ludinga ukuqinisekiswa, umthelela ekugcinweni kwemfihlo, ubuqotho, kanye nokutholakala, kanye nezici zesikhathi kanye nezemvelo. Izibonelo ezifana ne-Log4Shell (CVE-2021-44228) zifinyelela amaphuzu angu-10, okubonisa ubucayi obukhulu.
Ukuhlukaniswa okujwayelekile kobuthakathaka bokuphepha kwe-inthanethi
Indlela ewusizo yokuhlela ubuthakathaka ukubheka ukuthi buvelaphi nokuthi buthinta ini . Ukusuka lapho, buvame ukuhlukaniswa ngezigaba eziningana ezibanzi ezisiza ekubekeni phambili nasekubekeni imithwalo yemfanelo enhlanganweni.
Ubuthakathaka benethiwekhi : Lokhu kuthinta ingqalasizinda yokuxhumana : amachweba avulekile angadingekile, imithetho ye-firewall exegayo, ama-VPN angavikelekile kahle, ukuntuleka kokuhlukaniswa kwenethiwekhi, ithrafikhi engabethelwe, njll. Ezindaweni ezixubile nezikude, ziba zibaluleke kakhulu ngenxa yokwanda kwendawo yokuhlasela.
Ubuthakathaka bokucushwa kanye nohlelo : Lawa amaphutha avela lapho uhlelo lusetshenziswa ngamapharamitha angavikelekile , iziqinisekiso ezizenzakalelayo, izinsizakalo okungafanele zisebenze, noma ezingenazo izilawuli zokufinyelela ezanele. Azincikile kukhodi ngokwayo, kodwa kunalokho endleleni ingqalasizinda ehlelwe futhi inakekelwe ngayo.
Ubuthakathaka babantu : okwaziwa nangokuthi isici sabantu . Lokhu kuvela ekuziphatheni okungaphephile: ukusebenzisa amaphasiwedi abuthakathaka noma asetshenziswe kabusha, ukwabelana ngeziqinisekiso nge-imeyili, ukulanda amafayela emithonjeni engabazisayo, ukuwela ekuqotheni noma ekuqotheni, njll. Kunzima ukukuqeda ngoba kuhlobene kakhulu nesayensi yezengqondo namasiko kunobuchwepheshe.
Ubuthakathaka bamafu : Lokhu kuvela ezindaweni zamafu ngenxa yokulungiselelwa okungekuhle kwesitoreji (amabhakede omphakathi), ama-API angavikelekile, izimvume eziningi kubunikazi, noma ukuntuleka kokuqapha okuqhubekayo. Isivinini lapho izinsizakalo zamafu zishintsha khona senza kube lula ukulahlekelwa ukubonakala esimweni sakho sokuphepha.
Ubuthakathaka bezinkampani zangaphandle kanye nobezokunikezela : Lokhu kuvela kumathuluzi, imitapo yolwazi, abaphakeli, noma ozakwethu abanokufinyelela ezinhlelweni noma idatha ebucayi. Ukwehluleka kwenye yalezi zixhumanisi kungaba yindlela yokubeka engcupheni izinkampani ezinkulu kakhulu, njengoba kubonakala ezigamekweni ezidumile.
Izinhlobo zobuchwepheshe ezivame kakhulu zobuthakathaka
Ngaphandle kwezigaba ezijwayelekile, kubalulekile ukuqonda izinhlobo zobuchwepheshe zobuthakathaka obuvame ukuvela ekuhlolweni nasekuhlaselweni kwangempela. Eziningi zifakiwe ku-OWASP's Top 10 futhi zivame ukutholakala emibikweni yomhlaba wonke.
Ukugcwala kwe-Buffer : Lokhu kwenzeka lapho uhlelo lokusebenza lubhala idatha eningi kunaleyo engangena endaweni yememori egciniwe. Uma lesi sikhala sidluliwe, ezinye izindawo zememori ziyabhalwa ngaphezulu, okungavumela ikhodi engahleliwe ukuthi isetshenziswe ngemvume yenqubo esengozini.
Isimo sohlanga : Lokhu kwenzeka lapho umphumela womsebenzi uncike odabeni lokwenziwa kwezinqubo eziningi noma imicu efinyelela kumthombo owabiwe. Uma umhlaseli elawula lolu hlelo, angabangela ukuziphatha okungalindelekile, njengokwenza isenzo kabili noma ukudlula izilawuli.
Amaphutha e-String Format : Lawa amaphutha avela ekwamukeleni i-String Format engavumelekile (isibonelo, ku-C, imisebenzi efana ne-printf). Umhlaseli angafaka izichazi ze-Format ukuze afunde noma abhale imemori ngaphandle kwemvume.
Ukuqinisekiswa kokufakwayo okubi : Uma idatha evela kubasebenzisi, amafomu, ama-header, noma amapharamitha e-URL ingaqinisekiswanga kahle, ivula ithuba lokuhlaselwa okufana nokujova kwe-SQL, ukujova kwe-LDAP, i-XPath, i-XSS, noma ukujova komyalo . Kuyimbangela evamile yobuthakathaka obuningi obubalulekile.
Ukufakwa kwe-SQL : Lokhu kuhilela ukufaka ikhodi ye-SQL enonya lapho kulindeleke khona umbhalo ojwayelekile (isibonelo, ngendlela yokungena ngemvume). Uma uhlelo lokusebenza luhlanganisa ngokuqondile lokhu okufakwayo embuzweni, umhlaseli angafunda , aguqule, noma asuse idatha , futhi alawule ngisho nedathabheyisi.
I-CSRF (Cross-Site Request Forgery) : iphoqa umsebenzisi oqinisekisiwe ukuthi enze izenzo ezingafuneki kuhlelo lokusebenza olusemthethweni, ngokuvamile ngokuchofoza kusixhumanisi noma ukulayisha ikhasi elinesicelo esifihliwe. Isebenzisa ukwethemba kwesayithi kuseshini yomsebenzisi.
Ukuzulazula kwesikhombisi : Lokhu kuhilela ukuguqula izindlela zefayela kusetshenziswa ukulandelana okufana ne -../ ukuze kufinyelelwe amafayela angaphandle kwesikhombisi esivunyelwe uhlelo lokusebenza (isibonelo, /etc/passwd ku-Linux). Ngaphandle kokuqinisekiswa kwendlela efanele, ulwazi olubucayi lungafundwa, noma ikhodi ingasebenza uma izikripthi zishintshwa.
Ukufakwa komyalo : Lokhu kwenzeka lapho uhlelo lokusebenza lusebenzisa imiyalo yesistimu yokusebenza lusebenzisa idatha enikezwe ngumsebenzisi ngaphandle kokuyihlanza. Umhlaseli angafaka imiyalo eyengeziwe ukuze asuse amafayela, akhiphe ulwazi, noma avule iziteshi ezikude.
Ukususwa kochungechunge okungavikelekile kwenzeka lapho uhlelo lokusebenza lwamukela idatha eqoqwe ngokulandelana (izinto, izakhiwo) futhi luyisusa uchungechunge ngaphandle kokuqinisekisa imvelaphi noma okuqukethwe kwayo. Into eguquliwe ingabangela ukwenziwa kwekhodi ngesikhathi senqubo yokwakha kabusha.
Iziqinisekiso ezifakwe ikhodi eqinile : iziqinisekiso, amathokheni, noma okhiye abafakwe ngqo kukhodi yomthombo noma kuma-binary. Uma umhlaseli ethola ukufinyelela endaweni yokugcina noma ehlukanisa uhlelo lokusebenza, angathola lezi ziqinisekiso futhi azisebenzise ukushintshela kwezinye izinhlelo.
I-IDOR (I-Insecure Direct Object Reference) : Lokhu kwenzeka lapho uhlelo lokusebenza luvumela ukufinyelela kuzinsiza ngokushintsha nje isihlonzi (isibonelo, i-ID yenombolo ku-URL) ngaphandle kokuqinisekisa ukuthi umsebenzisi unemvume yini. Lesi yisimo esivamile sokubuka idatha yomunye umuntu ngokushintsha inombolo ku-URL.
Amaphutha okuphathwa kwezinsiza : Lokhu kufaka phakathi izimo lapho uhlelo lokusebenza lwehluleka ukuphatha kahle ukusetshenziswa kwememori, i-CPU, isitoreji, noma izinqubo ezihambisanayo. Lokhu kwenza kube lula ukukhathala kwezinsiza kanye nokuhlaselwa kokwenqatshwa kwensizakalo , isibonelo, ngezicelo ezingenamkhawulo ku-API ngaphandle komkhawulo wesilinganiso.
Amaphutha okucushwa afaka phakathi amaphaneli okuphatha avele ngaphandle kokuqinisekiswa okufanele, amabhakede amafu omphakathi, izinsizakalo ezisebenzayo ezingadingekile, iziqondisi ezisohlwini, kanye nama-endpoints okulungisa iphutha atholakala ku-inthanethi. Ingqalasizinda eklanywe kahle ingaba engaphephile ngokuphelele ngenxa yokulungiselelwa okukodwa okungalungile.
Izinkinga zemvume nokulawula ukufinyelela , ezaziwa nangokuthi ukulawula ukufinyelela okuphukile, zenzeka lapho abasebenzisi bekwazi ukwenza izenzo okungafanele bazenze, kungaba ngenxa yezindima ezingachazwanga kahle, ukuqinisekiswa okwanele kwe-backend , noma ama-API angaqinisekisi ukuthi ubani owenza isicelo. Lokhu kuwumthombo ovamile wokwenyuka kwamalungelo.
Ukuvuza kolwazi : Lokhu kwenzeka lapho izinhlelo noma izinhlelo zokusebenza ziveza idatha ebucayi emilayezweni yamaphutha, ezihlokweni, ezindleleni, ezingodweni, noma ezimpendulweni ze-HTTP . Ngezinye izikhathi akuyona ukuhlasela okuqondile, kodwa lolu lwazi lusiza umhlaseli ukuthi ahlele uhlelo, abone izinguqulo, noma athole ezinye izingcuphe.
Ukuphathwa kabi kweseshini : Lokhu kufaka phakathi amathokheni akhiqizwe ngendlela engafanele, amaseshini angaphelelwa yisikhathi, ukuvalwa kweseshini okungalungile, noma ukugcinwa okungaphephile kweziqinisekiso kumakhukhi. Lezi zinhlobo zezinkinga zenza kube lula ngabahlaseli ukuthumba amaseshini nokusebenzisa ama-akhawunti asemthethweni.
Izibonelo zangempela zobuthakathaka kanye nesofthiwe ethintekile
Ikhathalogi ye-CVE ikhula minyaka yonke ngamashumi ezinkulungwane zezinto ezintsha ezifakiwe. Ezinye izinkinga ziye zaduma ngenxa yomthelela wazo emhlabeni wonke futhi zisiza ekuboniseni ukuthi yini engenzeka uma inhlangano yehluleka ukulungisa ngesikhathi noma ithatha kancane iseluleko sezokuphepha.
Isibonelo sakamuva yi- CVE-2026-6785 , ubuthakathaka bokuphepha kwememori ezinguqulweni ezahlukene ze-Firefox ne-Thunderbird. Nakuba imininingwane yobuchwepheshe iyinkimbinkimbi, umongo ucacile: kwakukhona amaphutha angaholela ekonakaleni kwememori kanye nokusetshenziswa kwekhodi ngokungahleliwe . Ukulungiswa kwakhishwa ezinguqulweni zakamuva (i-Firefox 150, izinguqulo ze-ESR ezibuyekeziwe, njll.), kodwa noma yiluphi uhlelo olungabuyekezwanga ngesikhathi luhlala lusengozini.
Amanye amacala adumile afaka phakathi ubuthakathaka obunesilinganiso se -CVSS esingu-10 , njenge-Heartbleed (OpenSSL), i-BlueKeep, i-Shellshock, i-EternalBlue, kanye ne-Log4Shell eshiwo ngenhla. Konke lokhu kwavumela ukusetshenziswa kwekhodi ekude noma ukufinyelela olwazini olubucayi kakhulu futhi kwasetshenziswa emikhankasweni emikhulu ye-malware kanye ne-ransomware.
Izibonelo zesofthiwe ehlaselwa njalo zifaka phakathi i-Adobe Flash (manje esiphelelwe yisikhathi kodwa ehlushwa amaphutha okusebenzisa ikhodi), i-Microsoft Windows (enezinzuzo eziningi kanye nobuthakathaka be-RCE eminyakeni edlule), amaseva e-Apache , izizindalwazi ze-Oracle , i-Adobe Acrobat Reader , i-Java , kanye ne -PHP , konke okunemilando eminingi yokuxhashazwa, kusukela ekugcwaleni kwe-buffer kuya ekufakweni nasekubhalweni kwesayithi elihlukile.
Ezinye izinkinga ezithile ziye zahlotshaniswa nokuhlaselwa okwaziwayo. Isibonelo, i-CVE-2017-0199 , iphutha lokusebenzisa ikhodi ekude ku-Microsoft Office, lasetshenziswa yimindeni ye-ransomware efana ne-Ryuk, i-Emotet, ne-Dridex, isebenzisa amadokhumenti anonya abonakala engenangozi ekuqaleni.
Kukhona nezimo lapho ukuvuza kwamathuluzi obunhloli be-cyber kuye kwadalula ubuthakathaka obungaziwa ngaphambilini. Ngo-2016, iqembu i-Shadow Brokers lashicilela isethi yezenzo ezithiwa zebiwe kwi-NSA, okwembula amaphutha abalulekile ezinhlelweni zokusebenza, izinhlelo zokusebenza, kanye nama-firewall. Lawa mathuluzi asetshenziswa kabusha kamuva ezigamekweni ezifana ne-WannaCry ransomware, eyasebenzisa ubuthakathaka be-EternalBlue ukuze isakazeke ngokushesha.
Indlela ubuthakathaka obusetshenziswa ngayo: amasu avamile
Uma ubungozi sebutholakele, umhlaseli udinga indlela yokubuguqula bube ukufinyelela okusebenzayo . Ukusuka lapho, angasebenzisa i-malware, adlulele eceleni kwenethiwekhi, noma akhiphe idatha. Amanye amasu okuxhaphaza afanele kakhulu abhalwe ngezansi.
Ukusebenza Kwekhodi Ekude (RCE) : Lokhu "kuyi-grail engcwele" kubahlaseli abaningi, njengoba kubavumela ukuthi basebenzise ikhodi ekude ohlelweni lwesisulu ngaphandle kokufinyelela ngokomzimba. Amaketanga amaningi okuxhaphaza aklanyelwe ngqo ukufeza leli khono, njengoba kwakunjalo nge-Log4Shell noma ubuthakathaka obuthile kumasevisi adaluliwe.
I-LFI/RFI (Ukufakwa Kwamafayela Endawo/Okukude) : Ezingcupheni zokufakwa kwamafayela, uhlelo lokusebenza olusengozini lungagcina lulayisha futhi lusebenzise amafayela endawo noma akude alawulwa umhlaseli . I-LFI ifinyelela amafayela kuseva uqobo (isibonelo, amalogi anekhodi efakiwe), kuyilapho i-RFI ifaka okuqukethwe okubanjwe kuseva yangaphandle, okuvumela ukwenziwa kwekhodi okuqondile.
Ukwenyuka kwamalungelo : Ngisho noma ukufinyelela kokuqala kwenziwa nge-akhawunti elinganiselwe, umgomo ojwayelekile ukwandisa amalungelo (umsebenzisi kuya kumphathi, umsebenzisi ojwayelekile kuya kumpande, njll.). Lokhu kungafezwa ngamaphutha esistimu yokusebenza, ukulungiselelwa okungalungile kwezinsizakalo, noma ubuthakathaka obuthile njenge-PwnKit (CVE-2021-4034) ezinhlelweni ze-Linux.
Ukufutha ngenqwaba : inqubo ethuthukisiwe ehilela ukugcwalisa inkumbulo enamandla (inqwaba) ngamaphethini aqukethe umthwalo okhokhelwayo, ukuze lapho i-exploit iqondisa kabusha ukusebenza endaweni engacacisiwe yenkumbulo, amathuba okuthi "iwele" kukhodi enonya akhule. Yayisetshenziswa kabanzi ekuqhutshweni okuqondiswe ezipheqululini ezindala.
Uhlelo Oluqondiswe Emuva (ROP) : isu lokugwema ukuvikelwa okufana ne-DEP/NX. Esikhundleni sokufaka ikhodi entsha, umhlaseli usebenzisa izingcezu ezincane zekhodi esemthethweni ("amagajethi") akhona kuma-binary noma emitatsheni yezincwadi, ezihlanganisa nezitatimende zokubuyisa ukuze akhe i-logic enonya. Kungenye yezindlela eziqine kakhulu ezimweni lapho izindlela zokunciphisa zanamuhla zisebenza khona.
Ukuhlola nokubeka phambili: indlela yokunquma ukuthi yikuphi ubungozi okufanele buhlaselwe kuqala
Esimweni esivamile, ukuskena noma ukuhlolwa kungaveza umbiko onenqwaba noma amakhulu obuthakathaka obubhalwe njengobunzima, obuphakathi, noma obuphansi. Lokhu kuhlukaniswa okujwayelekile kuyasiza njengokulinganisa kokuqala, kodwa kuyasilela ekwenzeni izinqumo zebhizinisi, ikakhulukazi uma kunezinsuku zokugcina eziqinile zokuya ekukhiqizeni.
Ukuze kuhlungwe lokhu kubekwa phambili, kusetshenziswa i-CVSS kanye nezilinganiso zayo . Ingxenye ethi "Isisekelo" se-CVSS ihlaziya izinto ezifana ne-access vector (inethiwekhi yendawo, eseduze, noma ekude), ubunzima bokuhlasela, ukuthi ingabe ukuqinisekiswa kuyadingeka yini, kanye nomthelela ekugcinweni kwemfihlo, ubuqotho, kanye nokutholakala. Lapho ukuhlasela kukude futhi kulula, futhi lapho umthelela uba mkhulu, kulapho amaphuzu aphezulu khona.
Izilinganiso zesikhashana zifaka izici ezifana nokuba khona kwezenzo zomphakathi, ukutholakala kwama-patch, kanye nokuthembeka kolwazi lobuthakathaka. Izilinganiso zemvelo , ngakolunye uhlangothi, zicabangela umongo othize wenhlangano ngayinye: inani lezinhlelo ezithintekile, izidingo zokuphepha kwangaphakathi, kanye nomonakalo ongaba khona wesibambiso (ngokwezimali, ngokomthetho, ngokwedumela).
Empeleni, ubuthakathaka obunamaphuzu aphezulu obubangela ukwenqatshwa kwensizakalo ohlelweni olungabalulekile bungamukeleka okwesikhashana, kanti ubuthakathaka "obuphakathi" obuveza idatha evikelwe yimithetho bungase bungamukeleki. Isihluthulelo ukubhekisela kumaphuzu obuchwepheshe ngokubucayi kwempahla kanye nomongo wokulawula.
Ngaphezu kwe-CVSS, izinhlangano eziningi zisebenzisa izinhlaka zokuphathwa kwezingozi ezifaka izilinganiso ezifana ne-EPSS (amathuba okusetshenziswa), ukubaluleka kwempahla, kungakhathaliseki ukuthi ivezwa ku-inthanethi noma ingaphakathi kuphela, nokuthi ngabe kukhona yini izilawuli zokukhokha (i-WAF, ukuhlukaniswa, ukuqapha, njll.). Umgomo ulula: ukuba nohlu olucacile lwalokho okufanele kulungiswe manje, lokho okufanele kuncishiswe ngokushesha, kanye nalokho okungahlelwa esikhathini esiphakathi.
Izindlela ezinhle kakhulu zokunciphisa nokuphatha ubuthakathaka
Ayikho inhlangano engasusa bonke ubuthakathaka, kodwa inganciphisa kakhulu ukuvezwa kwayo ngokusebenzisa uchungechunge lwezinyathelo eziyisisekelo, kuhlanganiswe nezinqubo zokuthuthukisa eziqhubekayo.
Okokuqala nokubaluleke kakhulu, uhlelo oluqinile lokuphatha ama-patch lubalulekile : uhlu oluphelele lwempahla, ukuqapha izeluleko zokuphepha ezivela kubathengisi, ukuhlolwa okusheshayo ezindaweni zangaphambi kokukhiqiza, kanye nokuthunyelwa okusheshayo kwezibuyekezo ekukhiqizeni. Lokhu kusiza ukuvala ifasitela lokuchayeka ebuthakathakeni obaziwayo.
Kubalulekile futhi ukwenza ukuhlolwa nokuhlolwa njalo , kokubili okuzenzakalelayo (izikena zobungozi) kanye nezandla (ukuhlolwa kokungena, ukubuyekezwa kokucushwa). Le misebenzi ivumela ukutholakala kwamaphutha okuklama, ukucushwa kwefa, izinsizakalo ezingadingekile eziveziwe, kanye namaphutha abantu angeke avele ekuskeni okulula.
Ukuqeqeshwa nokuqwashisa kwabasebenzi kungenye insika ebalulekile. Isici somuntu sihlala siyisixhumanisi esibuthakathaka ezinhlotsheni eziningi zokuhlasela. Izinhlelo zokuqeqesha eziqhubekayo, ukuqeqeshwa kobugebengu bokweba imininingwane ebucayi, izinqubomgomo ezicacile zephasiwedi, ukuqinisekiswa kwezinto eziningi, kanye nezinqubo zokubika izehlakalo kusiza ukunciphisa le ngozi.
Ngokombono wobuchwepheshe, kuyalulekwa ukuqinisa izilawuli zokufinyelela (isimiso selungelo elincane, i-RBAC/ABAC, ukubuyekezwa kwezimvume njalo), amanethiwekhi okuhlukanisa ukuze kuncishiswe ukunyakaza okuseceleni, kuvikelwe izixhumi zokuphatha nge-VPN noma ukuhlunga kwe-IP, futhi kukhubaze izinsizakalo kanye nezindawo zokuhlola ekukhiqizweni.
Okokugcina, amathuluzi kanye namapulatifomu okuzenzakalelayo okuphendula ngobungozi obuthuthukisiwe angenza umehluko omkhulu ezinhlanganweni ezinenani elikhulu lempahla. Izixazululo ezihlanganisa okutholakele okuvela kuma-scanner ahlukene, zilungise idatha, ziyicebise ngobuhlakani bosongo, futhi zenzeka ngokuzenzakalelayo imisebenzi yokulungisa noma ukukhiqiza amathikithi zisiza ukunciphisa isikhathi esimaphakathi sokuxazulula futhi zivimbele ubungozi obubalulekile ukuthi bungaphuthelwa phakathi kwamakhulu ezexwayiso ezincane.
Ekugcineni, ukuphathwa kobungozi kudlulela ngalé kokusebenzisa iskena ngezikhathi ezithile. Kudinga ukuqonda ukuthi ubungozi buyini, ukuthi buhlukaniswa kanjani, buvela kuphi (ikhodi, inethiwekhi, ifu, abantu, amaqembu esithathu), ukuthi yimaphi amasu okuxhaphaza asetshenziswayo, nokuthi ungabeka kanjani izinto kuqala ngokuhlakanipha ngokusekelwe engcupheni yangempela ebhizinisini. Izinhlangano ezihlanganisa konke lokhu emasikweni azo nasezinqubweni zansuku zonke yizo ezigcina zimelana kangcono nesimo sengozi esiyinkimbinkimbi nesishintshashintshayo.
