Ukusabalalisa kwe-Linux okungcono kakhulu ukuvikela ukuphepha kwakho nobumfihlo

Informatec Digital » Linux » Ukusabalalisa kwe-Linux okungcono kakhulu ukuvikela ukuphepha kwakho nobumfihlo

Ukukhathazeka ngokuphepha kwedijithali kanye nobumfihlo kukhule kakhulu eminyakeni yamuva nje ngenxa yokwanda kokuhlaselwa kwe-cyber, ukuqapha okukhulu, kanye nobuchwepheshe bezinsongo ze-cyber. Ngenkathi iziqhwaga ezifana ne-Windows kanye ne-macOS zizama ukuqinisa izinhlelo zazo, i-Linux izimise njengeplatifomu eyisihluthulelo yabasebenzisi nochwepheshe abafuna ukuvikelwa okuphezulu, ukungaziwa, kanye nokulawula okuphelele kwamakhompyutha abo kanye nedatha.

Uma ungumsebenzisi we-Linux noma ucabanga ngokushintsha , cishe uyazibuza ukuthi yikuphi ukusatshalaliswa okufanelekela kangcono ukuvikela ulwazi lwakho nokuphequlula ngokuthula kwengqondo. Lesi sihloko sinikeza umhlahlandlela ophelele wokusatshalaliswa kwe-Linux okungcono kakhulu kokuphepha, ukuhlolwa kokungena, ubumfihlo, kanye nokusetshenziswa kobungcweti , sichaza izici zawo, amathuluzi, izinzuzo, ngisho nokuthi yiziphi ezifanele abaqalayo, ochwepheshe, noma izindawo zebhizinisi.

Kungani i-Linux kuyisinqumo esikhethwayo sokuphepha nobumfihlo?

I-Linux izuze idumela layo emkhakheni wezokuphepha kwe-cyber ngezizathu eziningana ezinengqondo . Okokuqala, uhlobo lwayo lomthombo ovulekile luvumela noma yimuphi umsebenzisi noma unjiniyela ukuthi abukeze ikhodi, abone ubuthakathaka, futhi aphakamise ama-patches ngaphambi kokuba abahlaseli bakwazi ukuwasebenzisa kabi.

Ngaphezu kwalokho, ukuphathwa kwemvume ku-Linux kunembe kakhulu futhi kunemingcele uma kuqhathaniswa nezinye izinhlelo, okuvimbela ukunikezwa kwamalungelo okuphatha angadingekile. Lokhu kunciphisa indawo yokuhlasela futhi kunciphisa izingozi zokwanda kwamalungelo, okuvamile ezindaweni ze-Windows.

Umphakathi omkhulu ngemuva kwe-Linux kanye ne-software evulekile ecosystem ihlinzeka ngezibuyekezo ezivamile, ukukhishwa kwama-patch okuphepha, kanye nokusekelwa kwamathuluzi amaningi anikezelwe ekuvikeleni, ekuhlolweni kwe-forensics, kanye nobumfihlo . Ukuguquguquka kwayo kanye nokuguquguquka kuvumela uhlelo ukuthi luvumelane nanoma yisiphi isidingo, kusukela ekusetshenzisweni kweseva kuya ekuhlolweni kobugebengu bokugqekeza okunezimiso zokuziphatha.

I-Linux ibuvikela kanjani ubumfihlo bomsebenzisi?

Enye yamandla amakhulu e-Linux yindlela yayo yokuqapha ubumfihlo . Ngaphandle kwekhodi yayo yomthombo ovulekile kanye nezimvume ezithuthukisiwe, ivelele ku:

• I-Granular Access Control: Ungachaza ukuthi ubani okwazi ukufinyelela ifayela nefolda ngayinye.
• I-firewall ehlanganisiwe nokulawulwa kwenethiwekhi: Amathuluzi afana Wazuh Bavumela ithrafikhi ukuthi ilawulwe kanye nezinsiza ezisolisayo ukuthi zivinjwe.
• Ukubethela kwedatha okuthuthukisiwe: Ukusekelwa komdabu kwe-LUKS, i-VeraCrypt, i-GnuPG nobuchwepheshe obufanayo.
• Secure Boot Technologies: Bathuthukisa ukuphepha kusukela ekuqaleni kwesistimu.

Ngenxa yalezi zici ezijwayelekile, nezinhlelo eziningi zezinkampani zangaphandle ezingenakubalwa ezitholakalayo, i-Linux iyisisekelo esiqinile sezinhlelo zokusebenza ezivikeleke kakhulu nezizimele kakhulu emakethe.

Izinhlobo zokusabalalisa kwe-Linux okugxile ekuvikelekeni

Indawo yonke ye-Linux inkulu kakhulu kangangokuthi kunezindawo ezisatshalaliswayo ezifanela cishe noma yikuphi ukusetshenziswa . Uma sikhuluma ngokuphepha, zivame ukuhlukaniswa ngamaqembu amathathu ayinhloko:

• Ukusatshalaliswa kokungena, i-forensics, kanye nokugebenga kokuziphatha: Kubandakanya amathuluzi okuhlola ukungena, ukuhlolwa kwenethiwekhi, ukuhlaziya uhlelo olungayilungele ikhompuyutha, kanye nezibalo zedijithali.
• Ukusabalalisa kokungaziwa nobumfihlo: Kwenzelwe ukuphequlula ngokungaziwa, kungashiyi lutho, nokuvikela ukuxhumana.
• Ukusatshalaliswa kwamaseva noma ama-firewallIdizayinelwe ukusebenzisa ama-firewall, ama-VPN, nezixazululo ezididiyelwe zokuphepha zenethiwekhi.

Ake sihlole izinketho eziyinhloko zohlobo ngalunye, sichaze izici ezithile, izinzuzo, kanye nokubi.

Ukusabalalisa KwePentesting kanye Nokuhlolwa Kokuvikela

Uma umgomo wakho ukwenza ukuhlolwa kwezokuphepha, ukuhlolwa kokungena, noma ukuhlaziywa kwe-forensic, kunezindlela eziningana zokusabalalisa ezigxile ekugebengwini kokuziphatha ezigcwele amathuluzi aphezulu. Nasi ukukhetha okuvelele kakhulu:

I-Kali Linux

I-Kali Linux iyisistimu ehamba phambili yokuhlolwa kokungena kwe-ethical hacking kanye nokungena . Yasungulwa yi-Offensive Security futhi isekelwe ku-Debian, ivelele ngokufaka amathuluzi angaphezu kuka-600 afakwe ngaphambilini okuhlaziya inethiwekhi, ukuxhashazwa kobuthakathaka, ubunjiniyela obubuyela emuva, kanye ne-digital forensics. Ukuze ufunde kabanzi ngezici zayo ezintsha, ungabheka izici ezintsha ku-Linux 6.14.

Ungayiqalisa i-Kali Linux kwimodi ebukhoma, uyifake kudiski, noma uyisebenzise kuma-virtual machines , futhi isekela kokubili ukwakheka kwe-x86 kanye ne-ARM (okufanelekile ku-Raspberry Pi kanye namadivayisi eselula). Inomphakathi omkhulu kanye nemibhalo eminingi enezifundo zawo wonke amazinga.

Phakathi kwezinhlelo zokusebenza zayo ezihamba phambili, uzothola i-Metasploit, i-Nmap, i-Wireshark, i-John the Ripper, i-Burp Suite, nezinye eziningi. Kungakho kuyinketho ekhethwayo yochwepheshe, abafundi, ngisho nezinkanyezi zochungechunge ezifana noMnu Robot.

Ukuphepha kwe-Parrot OS

I-Parrot Security OS iyindlela elula futhi eguquguqukayo yokuhlola ukungena, ubumfihlo, kanye nokuthuthukiswa okuphephile. Isekelwe ku-Debian futhi igcinwe yi-FrozenBox, ivelele ngemvelo yayo yedeskithophu ye-MATE, ukusetshenziswa kwezinsiza okuphansi, kanye nezinguqulo ezithile zokusetshenziswa okujwayelekile, izinhlelo zokusebenza zamafu, kanye nokwakhiwa kwe-ARM.

Ifaka phakathi i-AnonSurf, i-OnionShare, kanye namathuluzi amaningi akhethekile avumela ukungaziwa kanye nokwabelana ngamafayela ngendlela evikelekile nge-Tor. Ilungele kokubili abahloli bokungena kanye nalabo abafuna uhlelo oluphephile lokusetshenziswa kwansuku zonke.

I-BlackArch

I-BlackArch iyimpendulo ye-Arch Linux kumqondo we-Kali . Ihlose abasebenzisi abathuthukile kanye nochwepheshe abafuna ukwenza ngokwezifiso okuphezulu kanye nobuchwepheshe bamuva. Amandla ayo amakhulu yindawo yokugcina izinto enamathuluzi angaphezu kuka-2800 azo zonke izigaba zokuphepha kwe-cyber, angafakwa ngawodwana noma ngamaqembu.

Inikeza ama-ISO amaningana: eyisisekelo (netinstall), egcwele, kanye nencane encane yezakhiwo ezahlukene, futhi ihlanganisa izindawo eziningi zedeskithophu (i-fluxbox, i-openbox, njll.). Kunzima kakhulu ukukufaka, kodwa akuhlulwa ngokuya ngamathuluzi kanye nemodularity.

I-BackBox

I-BackBox ibeka phambili ubulula nokusebenza kahle . Ngokusekelwe ku-Ubuntu nokusebenzisa i-Xfce njengendawo yayo yedeskithophu ezenzakalelayo, inikeza ukukhethwa okukhethwe ngokucophelela kwezinhlelo ezibalulekile zokuhlola ukungena, ukuhlolwa kwe-forensics, ukuhlolwa kobungozi, kanye nokuqapha inethiwekhi.

Ilula, iyashesha, futhi izinzile, ilungele labo abafuna ukusabalalisa okulula ukukusebenzisa ngaphandle kokudela izici ezithuthukile.

I-Wifislax

I-Wifislax ivelele njengenketho enamandla kakhulu yokuhlola inethiwekhi ye-WiFi . Yakhiwe eSpain futhi isekelwe ku-Slackware, ihlanganisa wonke amathuluzi aziwayo okuqhekeka, ukugenca, nokuhlaziya amanethiwekhi e-WiFi (i-Aircrack-ng, i-Reaver, i-Wifite, nokuningi). Ukuze uthole imininingwane eyengeziwe, bheka izinsiza ze-Linux.

Ngemodi yayo ebukhoma, ungahlola amanethiwekhi angenawaya ngaphandle kokufaka noma yini, nakuba ungayisebenzisa emshinini obonakalayo noma kudiski. Isixhumi esibonakalayo esisebenziseka kalula siyenza intandokazi yabaqalayo nochwepheshe ngokufanayo.

I-Bugtraq

I-Bugtraq ingenye inketho enokugxila kokuhlasela kanye nokuhambisana okubanzi nezakhiwo zedeskithophu kanye nezindawo. Itholakala ngezinguqulo ezisekelwe ku-Ubuntu, i-Debian, kanye ne-openSUSE, ivelele ngokusekelwa kwayo kwezilimi eziningi kanye namathuluzi enziwe ngokwezifiso okuhlola ukungena kanye nokuhlolwa kwe-forensics.

Okunye ukusabalalisa okukhethekile

Kunezinye izindlela eziningi zokusabalalisa i-pentesting: i-Xiaopan OS (efanele ukuhlolwa okungenantambo), i-Pentoo (esekelwe ku-Gentoo, ekwazi ukwenziwa ngokwezifiso kakhulu), i-DEFT Linux kanye ne -Caine (egxile ku-forensics yedijithali), kanye ne -Samurai Web Testing Framework kanye ne -NST (yokuhlaziywa kokuphepha kwenethiwekhi).

Ukusabalalisa kugxile kubumfihlo nokungaziwa

Kulabo ababeka kuqala ukungaziwa, ukubethela, kanye nokuphequlula okungenazihibe, i-Linux inezinhlelo eziklanyelwe lokhu. Nazi eziyinhloko:

Umsila

I-Tails (I-Amnesic Incognito Live System) iyindlela engcono kakhulu yokusabalalisa uma kukhulunywa ngobumfihlo obuphelele. Yakhelwe ukuqala kusuka ku-USB noma i-DVD kwimodi ebukhoma, ayishiyi mkhondo emshinini futhi ihambisa zonke izixhumanisi nge-Tor, iqinisekisa ukungaziwa ngisho nasemanethiwekhi anonya. Uma ufuna ukufunda kabanzi ngokuthuthukisa ukuphepha kwakho, sincoma ukuthi ubuyekeze ukubaluleka kokuphepha kwekhompyutha.

Ihlanganisa amathuluzi afana ne-Tor Browser, i-GnuPG, i-KeePassX, i-VeraCrypt, kanye nezinsiza eziningi zokuxhumana ezibethelwe kanye nokususwa kwedatha okuphephile. Inconywa kakhulu izintatheli, izishoshovu, kanye nabasebenzisi abadinga ukuzikhethela okuphezulu.

I-Qubes OS

I-Qubes OS ibeka phambili ukuphepha ngokuhlukaniswa kanye nokuhlukanisa . Uhlelo lokusebenza ngalunye, idokhumenti, noma umsebenzi usebenza ngaphakathi komshini obonakalayo (i-cube), ukuvimbela ukutheleleka noma ukungena ekusakazekeni kulo lonke uhlelo. Ukuze uthole ulwazi olwengeziwe mayelana nesakhiwo sangaphakathi sohlelo, ungavakashela ikhasi lezinhlelo zamafayela e-Linux.

Isekelwe ku-Fedora futhi isebenzisa i-Xen hypervisor, isekela ngisho nokusebenza ngasikhathi sinye kwe-Windows kanye nokunye ukusatshalaliswa kwe-Linux. Kuyindlela ekhethwayo yochwepheshe abanjengo-Edward Snowden , yize idinga ihadiwe enamandla.

I-Whonix

I-Whonix idlula ukungaziwa okuvamile . Isekelwe ku-Debian, isebenza kumishini ebonakalayo, ihlukanisa isango nesiteshi somsebenzi. Yonke imisebenzi yesiteshi iphoqelelwa ngenethiwekhi ye-Tor, ivimbela ukuvuza kwe-IP ne-DNS. Ukuze wandise amandla ayo, bheka ku-[link/reference].

Ihambisana ne-Qubes OS ne-VirtualBox, ihlanganisa amathuluzi obumfihlo kanye nokucushwa kwe-kernel eqinile. Kunconywa kakhulu kulabo abafuna ukungaziwa okuzinzile nokuvumelana nezimo.

Kodachi Linux

I-Kodachi iyisisombululo esilungele ukusetshenziswa esigxile ekungaziwa kwansuku zonke. Ngokusekelwe ku-Debian, ingasebenza kusuka ku-USB noma i-DVD, iphoqa yonke ithrafikhi kuqala nge-VPN bese idlula ku-Tor, ngaphezu kokubethela kwe-DNS. Ifaka i-VeraCrypt, i-MAT, i-ZuluCrypt, namathuluzi okususa ama-RAM traces, kanye nezinsiza zokubethela amafayela nemiyalezo. Uma ufuna ukufunda kabanzi ngala mathuluzi, bheka ukuthi ungahlela kanjani ifayela le-hosts.

Ngenxa ye- "Panic Room" yayo , ingasula yonke idatha ebethelwe ngephasiwedi, ewusizo kakhulu ezindaweni ezinobutha kakhulu.

I-PureOS ne-Septor

I-PureOS igxile kubumfihlo obulula kanye nokulula kokusebenzisa, okwenza kube kuhle kubasebenzisi abafuna ukuvikelwa okulula. I-Septor , esekelwe ku-Debian futhi isebenzisa i-KDE Plasma, ifaka i-Tor Browser kanye ne-OnionShare, evumela ukuphequlula okungaziwa kanye nokwabelana ngamafayela ngenethiwekhi ye-Tor. Ukuze ufunde kabanzi, hlola ukusatshalaliswa kwe-Linux okungcono kakhulu kwamaseva.

Ukusatshalaliswa okugxile kuma-firewall, amaseva, nokuvikela inethiwekhi

Ukuqinisa ukuphepha kwenethiwekhi yakho, ukuqapha ithrafikhi, noma ukusebenzisa ama-VPN nama-firewall, kukhona ukusabalalisa okuklanyelwe lokhu nje:

• Sula i-ClearOS: Ngokusekelwe ku-Fedora/Red Hat, isiza ukuqaliswa kwezicishamlilo namaseva wama-SME ngesixhumi esibonakalayo sewebhu.
• IPCop: Guqula ikhompuyutha endala ibe i-firewall/VPN esebenza kahle kakhulu ngokucushwa okusekelwe kuwebhu okunembile.
• I-IPFire: Kuqondiswe ku-firewall, umzila kanye nezinsizakalo ezifana nokutholwa kokungena, ummeleli kanye ne-Wake-on-Lan (iguquguquka kakhulu futhi inwebeka ngama-plugin).
• I-Smoothwall: Ilula kakhulu futhi izinzile, enezinguqulo zamahhala nezikhokhelwayo, ezisetshenziselwa kabanzi ukudala izithiyo zenethiwekhi emabhizinisini amancane.

Ukusabalalisa kwe-Linux okuqiniswe ngokuvikeleka ukuze kusetshenziswe nsuku zonke

Impela, akuwona wonke ama-distros ezokuphepha ahloselwe kuphela ukugebenga noma ukungaziwa. Uma ufuna ukusebenzisa i-Linux empilweni yakho yansuku zonke kodwa ngokuvikeleka okukhulu, unezinketho ezimbalwa:

• I-Alpine Linux: I-Ultra-lightweight futhi iqinile, isebenzisa i-PaX ne-grsecurity patches ngokuzenzakalelayo kanye nokunciphisa ukuchichima kwebhafa. Ukuze uthole imininingwane eyengeziwe, bheka I-Oregon 10 Linux.
• I-OpenWall: Inikeza i-kernel eqinile kanye nesistimu ejwayelekile eqinile, egcizelela ekuvikelweni kwephasiwedi.
• I-subgraph OS: Isathuthukiswa, kodwa iyasebenza. Iqinisa ubumfihlo ngokusetshenziswa kwe-Tor, i-sandboxing ethuthukisiwe, neziqephu zokuphepha, nakuba inganconywa kwabaqalayo.
• I-anyanisi Yezokuphepha: Ngokusekelwe ku-Ubuntu, yengeza amathuluzi anamandla okuthola ukungena, ukuqapha inethiwekhi, nokuhlaziywa kwe-forensic, njenge-Snort, i-Suricata, ne-Bro.

Ukusabalalisa okungasindi nokukhethekile

Kumakhompyutha anezinsiza ezilinganiselwe, kukhona ukusatshalaliswa okufana ne-Puppy Linux, i-Slitaz, kanye ne-Tiny Core , okukuvumela ukuthi uvuselele amakhompyutha amadala ngaphandle kokulahlekelwa isivinini noma ukuphepha. Kukhona nezinketho zomculo (Musix), i-multimedia (MythTV), imfundo (Edubuntu), intuthuko yesayensi (Scientific Linux), kanye nokuphathwa kwe-router ( Linux emshinini obonakalayo ).

Imibuzo Evame Ukubuzwa mayelana Nokusabalalisa Kwe-Linux Kwezokuphepha

• Ingabe i-Kali Linux ingcono kuno-Ubuntu ngokuphepha? I-Kali ihloselwe ukuhlola ukungena nokugebenga kwezimiso zokuziphatha, ngamakhulu wamathuluzi afakwe ngaphambilini. Ubuntu bufanele ukusetshenziswa okujwayelekile, futhi ungaqinisa ukuphepha kwakho ngokufaka amathuluzi adingekayo.
• Yiziphi izinzuzo zangempela iLinux ezinikezayo ngeWindows? Ukulawula okuphelele kwezimvume, ikhodi yomthombo ovulekile, kanye nomphakathi osebenzayo ohlala uthola futhi ulungisa ubungozi. Ukwengeza, abasebenzisi abanikezwa izimvume zomlawuli ngokuzenzakalelayo, okunciphisa ubungozi bokuhlaselwa okubucayi.
• Hlobo luni lwehadiwe engiludingayo? Ukusabalalisa okuningi kungasebenza ngehadiwe enesizotha, ikakhulukazi kumodi ebukhoma. Kodwa-ke, ukusatshalaliswa okufana ne-Qubes OS kudinga ihadiwe enamandla ngenxa yemishini ebonakalayo.
• Yikuphi ukusatshalaliswa okufanele ukhethe kwabaqalayo? Kulabo abasha kwezokuphepha, i-Parrot Security OS, i-BackBox, ne-Wifislax inikeza kalula ukusetshenziswa okunezici ezifanele.
• Ngingakwazi ukusebenzisa lokhu kusakazwa njengamasistimu ayinhloko? Nakuba eziningi zilungele ukusetshenziswa kwansuku zonke, lezo ezihloselwe ukungena ngemvume noma ubumfihlo obudlulele (i-Kali, Tails, Qubes OS) zenzelwe imisebenzi ethile. Ngokusetshenziswa kwansuku zonke ngokuvikeleka okukhulu, izinketho ezifana ne-Alpine Linux, OpenWall, noma i-Subgraph OS zingase zifaneleke kakhulu.

Ukwehlukahlukana kwe-ecosystem ye-Linux kukuvumela ukuthi ukhethe ukusatshalaliswa okuyifanele kangcono iphrofayela yakho: kusukela kubaduni bezokuziphatha kuya ezinkampanini ezifuna ukuqinisa ukuvikeleka kwengqalasizinda yazo noma abasebenzisi abathintekayo ngobumfihlo. Ukhiye uwukuchaza ngokucacile izinjongo zakho futhi uzame ngezinketho ezihlukahlukene, njengoba umphakathi we-Linux uvulekile, usebenzisana, futhi uhlale uzimisele ukukusiza ukuthi uthole okuningi kusistimu yakho.