Semunhu ane hunyanzvi muNetwork Engineer, unonzwisisa here maNetwork Attacks masere akajairika?

Mainjiniya enetwork, pamusoro pezvose, vanongova "vashandi vehunyanzvi" vanovaka, vanogadzirisa, uye vanogadzirisa manetwork, asi muchokwadi, isu tiri "mudziviriri wekutanga" mukuchengetedzwa kwepaindaneti. Mushumo weCrowdStrike wa2024 wakaratidza kuti kurwiswa kwepaindaneti pasi rose kwakawedzera ne30%, makambani ekuChina achirasikirwa ne50 bhiriyoni yeyuan nekuda kwematambudziko ekuchengetedzwa kwepaindaneti. Vatengi havana basa kana uri nyanzvi yekushanda kana yekuchengetedza; kana chiitiko chenetwork chikaitika, mainjiniya ndiye wekutanga kutakura mhosva. Tisingatauri nezvekushandiswa kwakapararira kweAI, 5G, uye cloud networks, izvo zvakaita kuti nzira dzekurwisa dzema hackers dziwedzere kuve dzakaoma. Pane chinyorwa chakakurumbira paZhihu muChina: "Mainjiniya enetwork asingadzidze kuchengetedzeka ari kuvharira nzira yavo yekutiza!" Mashoko aya, kunyangwe akaomarara, ndeechokwadi.

Muchinyorwa chino, ndichaongorora zvakadzama kurwiswa kusere kwakajairika kwenetwork, kubva pamisimboti yavo uye zvidzidzo zvezviitiko kusvika kumazano ekudzivirira, ndichizviita nenzira inoshanda sezvinobvira. Ungave uri mutsva kana kuti murwi ane ruzivo rwakakura ari kutsvaga kusimudzira hunyanzvi hwako, ruzivo urwu ruchakupa simba rakawanda pamusoro pemapurojekiti ako. Ngatitangei!

Nhamba 1 DDoS Kurwiswa

Kurwiswa kweDistributed Denial-of-Service (DDoS) kunokunda maseva kana ma network akawanda enhema, zvichiita kuti asasvike kune vashandisi vepamutemo. Matekiniki akajairika anosanganisira SYN flooding uye UDP flooding. Muna 2024, mushumo weCloudflare wakaratidza kuti kurwiswa kweDDoS kwaive ne40% yekurwiswa kwe network yese.

Muna 2022, puratifomu ye e-commerce yakarwiswa neDDoS pamberi peSingles' Day, vanhu vakawanda vachisvika 1Tbps, zvikaita kuti webhusaiti iparare kwemaawa maviri zvikaita kuti pave nekurasikirwa kwemamiriyoni makumi emamiriyoni eyuan. Shamwari yangu ndiyo yaitarisira rubatsiro rwekukurumidzira uye yakapotsa yapenga nekumanikidzwa kwacho.

Nzira yekudzivirira sei?

○Kuchenesa Kuyerera:Isa masevhisi ekudzivirira eCDN kana DDoS (ungangoda Mylinking™ Inline Bypass Tap/Switch) kuti usefe traffic yakaipa.
○Kuwedzerwa kwebandwidth:Chengetedza 20%-30% yebandwidth kuti ukwanise kugadzirisa traffic yakakwira kamwe kamwe.
○Alarm yekutarisa:Shandisa maturusi (ungangoda Mylinking™ Network Packet Broker) kuti utarise traffic panguva chaiyo uye uchenjere kana paine zvinhu zvisina kumira zvakanaka.
○Hurongwa hweEmergency: Bata pamwe chete nemakambani eISP kuti uchinje mitsetse nekukurumidza kana kudzivirira masosi ekurwisa.

Nhamba 2 SQL Injection

MaHackers anoisa kodhi yeSQL yakaipa muminda yekuisa mawebhusaiti kana maURL kuti aba ruzivo rwedhatabhesi kana masisitimu ekukuvadza. Muna 2023, mushumo weOWASP wakataura kuti SQL injection yakaramba iri imwe yekurwisa kutatu kwepamusoro kwewebhu.

Webhusaiti yekambani diki kusvika pakati yakakanganiswa nemupari wenhau akaisa chirevo chekuti "1=1", achiwana password yemutariri zviri nyore, nekuti webhusaiti yakatadza kusefa zvinoiswa nemushandisi. Zvakazoonekwa kuti timu yekugadzira yakanga isati yaisa zvachose vimbiso yekupinda.

Nzira yekudzivirira sei?

○Mubvunzo wakarongwa:Vagadziri veBackend vanofanira kushandisa zvirevo zvakagadzirirwa kudzivirira kubatanidza zvakananga SQL.
○Dhipatimendi reWAF:Mafirewall ewebhu (akadai seModSecurity) anogona kudzivirira zvikumbiro zvine hutsinye.
○Ongororo Yenguva Dzose:Shandisa maturusi (akadai seSQLMap) kuti uongorore zvikanganiso uye uchengetedze dhatabhesi usati waisa patch.
○Kudzora Kupinda:Vashandisi vedatabase vanofanira kungopihwa kodzero shoma chete kudzivirira kurasikirwa zvachose kwekutonga.

Nhamba 3 Kurwisa Kushandiswa KwemaSystem Scripting (XSS)

Kurwiswa kweCross-site scripting (XSS) kunoba ma user cookies, session IDs, nezvimwe zvinyorwa zvine njodzi nekuzviisa muma web pages. Zvinoiswa muzvikamu zve reflective, storaged, uye DOM-based attacks. Muna 2024, XSS yakaita 25% ye all web attacks.

Imwe forum yakatadza kusefa makomendi evashandisi, zvichibvumira ma hackers kuisa script code nekuba ruzivo rwekupinda kubva kuzviuru zvevashandisi. Ndakaona zviitiko apo vatengi vakabirwa CNY500,000 yuan nekuda kweizvi.

Nzira yekudzivirira sei?

○Kusefa kwekuisa: Escape user input (yakadai seHTML encoding).
○Maitiro eCSP:Bvumira mitemo yekuchengetedza zvemukati kuti udzivise manyuko ezvinyorwa.
○Dziviriro yebrowser:Gadza misoro yeHTTP (yakadai seX-XSS-Protection) kuti ivhare zvinyorwa zvine njodzi.
○Kuskena Chishandiso:Shandisa Burp Suite kuti ugare uchitarisa zvikanganiso zveXSS.

Nhamba 4 Kuputsa Maphasiwedi

MaHackers anowana mapassword evashandisi kana emutariri kuburikidza nekurwiswa kwechisimba, kurwiswa kwemadictionary, kana social engineering. Mushumo weVerizon wa2023 wakaratidza kuti 80% yekupinda kweinternet kwaive kwakabatana nemapassword asina simba.

Router yekambani, ichishandisa password yekuti "admin," yakanyoreswa zviri nyore nemupari wenhau wepaindaneti uyo akaisa backdoor. Mainjiniya akabatanidzwa akazodzingwa basa, uye maneja wacho akatongerwawo mhosva.

Nzira yekudzivirira sei?

○Mapassword Akaoma:Simbisa mavara gumi nemaviri kana kupfuura, mabhii akasiyana, nhamba, uye zviratidzo.
○Kusimbiswa kwezvinhu zvakawanda:Shandisa MFA (yakadai seSMS verification code) pamidziyo yakakosha.
○Kutarisira Mapassword:Shandisa maturusi (akadai seLastPass) kuti uzvishandise pakati uye uzvichinje nguva nenguva.
○Kuedza Kuganhurirwa:Kero ye IP yakavharwa mushure mekunge vanhu vatadza kupinda katatu kuti vadzivise kurwiswa nechisimba.

Nhamba 5 Kurwiswa kweMunhu ari Pakati (MITM)

MaHackers anopindira pakati pevashandisi nemaseva, vachibata kana kukanganisa data. Izvi zvakajairika muWi-Fi yeruzhinji kana kutaurirana kusina kunyorwa. Muna 2024, kurwiswa kweMITM kwakaita kuti pave ne20% yekunhuhwirira kwenetiweki.

Wi-Fi yemuchitoro chekofi yakakanganiswa nema hackers, zvikaita kuti vashandisi varasikirwe nezviuru zvemadhora apo data ravo rakabatwa panguva yekupinda muwebhusaiti yebhangi. Mainjiniya akazowana kuti HTTPS yakanga isiri kushandiswa.

Nzira yekudzivirira sei?

○Manikidza HTTPS:Webhusaiti neAPI zvakavharidzirwa neTLS, uye HTTP yakadzimwa.
○Kusimbiswa kweChitupa:Shandisa HPKP kana CAA kuti uve nechokwadi chekuti chitupa chacho chakavimbika.
○Dziviriro yeVPN:Mabasa anonyanya kuomarara anofanira kushandisa VPN kuchengetedza traffic.
○Dziviriro yeARP:Tarisa tafura yeARP kudzivirira kunyengedzwa kweARP.

Nhamba 6 Kurwiswa kwePhishing

MaHackers anoshandisa maemail, mawebhusaiti, kana mameseji ekunyepedzera kuti vanyengedze vashandisi kuti vaburitse ruzivo kana kudzvanya pane zvinongedzo zvine hukasha. Muna 2023, kurwiswa kwephishing kwaive 35% yezviitiko zvekuchengetedzwa kwepaindaneti.

Mushandi wekambani akagamuchira email kubva kune mumwe munhu aizviti ndiye mukuru wavo, achikumbira kutumirwa mari, uye akazopedzisira arasikirwa nemamiriyoni emari. Zvakazoonekwa kuti email yacho yaive yenhema; mushandi wacho akanga asina kuisimbisa.

Nzira yekudzivirira sei?

○Kudzidziswa kweVashandi:Gara uchidzidzisa vanhu nezvekuchengetedzwa kwemakombiyuta kuti uvadzidzise mashandisirwo emaemail ephishing.
○Kusefa Email:Isa nzira yekudzivirira phishing (yakadai seBarracuda).
○Kusimbiswa kweDomain:Tarisa domain yemunhu anotumira uye vhura mutemo weDMARC.
○Kusimbiswa kaviri:Mabasa anorwadza anoda kusimbiswa nefoni kana nekuonana nemunhu.

Nhamba 7 Ransomware

Ransomware inochengetedza data revanobatwa uye inoda rudzikinuro kuti ibvise crypt. Mushumo weSophos wegore ra2024 wakaratidza kuti 50% yemabhizinesi pasi rese akamborwiswa neransomware.

Network yechipatara yakakanganiswa neLockBit ransomware, zvikaita kuti system iome uye kuti maoparesheni amiswe. Mainjiniya vakapedza vhiki vachiwana data racho, zvikaita kuti varasikirwe zvakanyanya.

Nzira yekudzivirira sei?

○Backup yenguva dzose:Kuchengetedza data rakakosha kubva panzvimbo isina nzvimbo uye kuyedzwa kwemaitiro ekudzoreredza data.
○Kutarisira Patch:Gadzirisa masisitimu nesoftware nekukurumidza kuti uvhare zvikanganiso.
○Kutarisa Maitiro Evanhu:Shandisa zvishandiso zveEDR (zvakadai seCrowdStrike) kuti uone maitiro asina kujairika.
○Network Yekuzviparadzanisa:Kupatsanura masisitimu anodzivirira kupararira kwemavhairasi.

Nhamba 8 Kurwiswa kweZero-day

Kurwiswa kweZero-day kunoshandisa zvipingamupinyi zvesoftware zvisina kutaurwa, zvichiita kuti zviome zvikuru kudzivirira. Muna 2023, Google yakashuma kuwanikwa kwezvipingamupinyi makumi maviri zvine njodzi huru yezero-day, zvakawanda zvacho zvaishandiswa pakurwiswa kwezvekutengesa.

Kambani yaishandisa software yeSolarWinds yakakanganiswa nedambudziko rekushaya simba, zvichikanganisa zvese zvinotengeswa. Mainjiniya vakashaya pekubata uye vaingokwanisa kumirira kuti patch igadziriswe.

Nzira yekudzivirira sei?

○Kuonekwa Kwekupindira:Isa IDS/IPS (yakadai seSnort) kuti iongorore traffic isina kujairika.
○Kuongorora Sandbox:Shandisa bhokisi rejecha kuti ubvise mafaira anofungidzirwa uye uongorore maitiro avo.
○Uchenjeri hweKutyisidzira:Nyorera kumasevhisi (akadai seFireEye) kuti uwane ruzivo rwechangobva kuitika rwekukuvadzwa.
○Kodzero Dzisina Kukosha:Dzivisa mvumo yesoftware kuti uderedze nzvimbo yekurwiswa.

Vateveri ve network, makasangana nekurwiswa kwerudzii? Uye makazvigadzirisa sei? Ngatikurukurei izvi pamwe chete toshanda pamwe chete kuti network dzedu dziwedzere kusimba!