Fungidzira uchivhura email inoita kunge yakajairika, uye nguva inotevera, account yako yebhangi inenge isina chinhu. Kana kuti uri kutarisa pawebhu apo skrini yako inokiyiwa uye meseji yerudzikinuro inobuda. Zviitiko izvi hazvisi mafirimu esainzi, asi mienzaniso chaiyo yekurwiswa kwemakombiyuta. Munguva ino yeInternet yezvinhu zvese, Internet haisi bhiriji riri nyore chete, asiwo nzvimbo yekuvhima ma hackers. Kubva pakuvanzika kwemunhu kusvika pazvakavanzika zvemakambani kusvika kuchengetedzeka kwenyika, cyber Attacks dziri kwese kwese, uye simba radzo rehunyengeri uye rekuparadza riri kutityisa. Ndeapi ma strike ari kutityisidzira? Anoshanda sei, uye chii chinofanira kuitwa nezvazvo? Ngatitarisei ma cyber attacks masere akajairika, achikuendesa munyika yakajairika neisina kujairika.
Marware
1. Chii chinonzi Malware? Malware chirongwa chine njodzi chakagadzirirwa kukuvadza, kuba, kana kudzora system yemushandisi. Chinopinda mumidziyo yemushandisi nenzira dzisingakuvadzi dzakadai semaemail attachments, software updates dzakavanzwa, kana kudhawunirodha mawebhusaiti zvisiri pamutemo. Kana changoshanda, malware inogona kuba ruzivo rwakavanzika, kuvharira data, kudzima mafaira, kana kutochinja mudziyo kuita "chidhori" chemurwisi.
2. Mhando dzakajairika dze malware
Utachiona:Yakabatana nemapurogiramu epamutemo, mushure mekumhanya, kuzvikopera, kutapurirana kwemamwe mafaira, zvichikonzera kudzikira kwekushanda kwesystem kana kurasikirwa nedata.
Honye:Inogona kupararira yoga pasina chirongwa chekugamuchira. Zvakajairika kuzviparadzira kuburikidza nekusagadzikana kwenetwork uye kushandisa zviwanikwa zvenetwork. Trojan: Kuzviita sesoftware yepamutemo yekukurudzira vashandisi kuisa backdoor inogona kudzora zvishandiso kana kuba data vari kure.
Spyware:Kutarisa pachivande maitiro evashandisi, kunyora makiyi kana nhoroondo yekubhurawuza, kazhinji kunoshandiswa kuba mapassword neruzivo rweakaundi yebhangi.
Rudzikinuro:Kukiya mudziyo kana data rakavharidzirwa kuti rivhurwe rave richinyanya kuwanda mumakore achangopfuura.
3. Kupararira uye Kukuvadza Malware inowanzo paradzirwa kuburikidza nemidziyo chaiyo yakaita semaemail ephishing, Malvertising, kana makiyi eUSB. Kukuvadzwa kwacho kunogona kusanganisira kubuda kwedata, kutadza kushanda kwesystem, kurasikirwa nemari, uye kunyange kurasikirwa nemukurumbira wekambani. Semuenzaniso, 2020 Emotet malware yakava dambudziko guru rekuchengetedza bhizinesi nekutapukira mamiriyoni emidziyo pasi rese kuburikidza nemagwaro eOffice akavanzika.
4. Maitiro ekudzivirira
• Isa uye gadzirisa software yekudzivirira mavhairasi nguva nenguva kuti utarise mafaira anofungidzirwa.
• Dzivisa kudzvanya pane zvinongedzo zvisingazivikanwi kana kudhawunirodha software kubva kunzvimbo dzisingazivikanwe.
• Chengetedza data rakakosha nguva nenguva kudzivirira kurasikirwa kusingadzoreki kunokonzerwa ne ransomware.
• Ita kuti firewall dzisabvumire vanhu kupinda netiweki vasingatenderwe.
Rudzikinuro
1. Mashandiro anoita Ransomware Ransomware rudzi rwemalware inonyanya kuvharira mudziyo wemushandisi kana kuvharidzira data rakakosha (semuenzaniso, magwaro, madhatabhesi, kodhi yekodhi) kuitira kuti munhu anenge abatwa asakwanise kuriwana. Varwisi vanowanzo kumbira kubhadharwa mumari yecrypto yakaita sebitcoin, uye vanotyisidzira kuparadza data racho zvachose kana mari yacho ikasabhadharwa.
2. Nyaya Dzakajairika
Kurwiswa kweColonial Pipeline muna 2021 kwakashamisa nyika. DarkSide ransomware yakavharira system yekudzora pombi huru yemafuta kuEast Coast yeUnited States, zvikaita kuti mafuta amiswe uye varwisi vachida mari yerudzikinuro yemadhora mamiriyoni mana nemazana mana. Chiitiko ichi chakaratidza kusasimba kwezvivakwa zvakakosha ku ransomware.
3. Sei ransomware ichiuraya zvakadaro?
Kuvanza zvakanyanya: Ransomware inowanzo paradzirwa kuburikidza nekugadzira mainjiniya (semuenzaniso, kuita semaemail echokwadi), zvichiita kuti zviomere vashandisi kuona.
Kupararira nekukurumidza: Nekushandisa kusasimba kwenetwork, ransomware inogona kukurumidza kukanganisa michina yakawanda mukati mebhizinesi.
Zvakaoma kupora: Pasina backup inoshanda, kubhadhara rudzikinuro kungave ndiyo chete sarudzo, asi zvingasakwanisika kudzoreredza data mushure mekubhadhara rudzikinuro.
4. Matanho Ekudzivirira
• Gara uchichengetedza data rese usingashandise internet kuti uone kuti data rakakosha rinogona kudzoserwa nekukurumidza.
• Sisitimu yeEndpoint Detection and Response (EDR) yakashandiswa kuti iongorore maitiro asina kujairika munguva chaiyo.
• Dzidzisai vashandi kuti vaone maemail ephishing kuitira kuti asave mavector ekurwiswa.
• Kugadzirisa matambudziko esystem nesoftware nenguva kuti kuderedze njodzi yekupindira.
Phishing
1. Hunhu hwePhishing
Phishing rudzi rwekurwisa kwesocial engineering apo munhu anorwisa, achinyepedzera kuva munhu anovimbwa naye (senge kubhangi, e-commerce platform, kana mumwe waanoshanda naye), anomanikidza munhu anobatwa kuti aburitse ruzivo rwakavanzika (senge mapassword, manhamba emakadhi echikwereti) kana kudzvanya pane link ine njodzi kuburikidza neemail, meseji, kana meseji inokurumidza.
2. Mafomu Akajairika
• Kubiridzira paindaneti: Maemail enhema epamutemo ekunyepedzera kuti vashandisi vapinde mumawebhusaiti enhema uye vanyore magwaro avo ehunyanzvi.
Kurwisa kweSpear Phishing: Kurwisa kwakagadzirirwa munhu kana boka rine mwero wekubudirira wakakwira.
• Kunyemwerera: Kutumira zviziviso zvenhema kuburikidza nemameseji ekutumira mameseji kuti unyengere vashandisi kuti vadzvanye pane zvinongedzo zvine njodzi.
• Kufungidzira: kuita semunhu ane simba pafoni kuti awane ruzivo rwakakosha.
3. Njodzi Nemigumisiro
Kurwiswa kwephishing kwakachipa uye kuri nyore kuita, asi kunogona kukonzera kurasikirwa kukuru. Muna 2022, kurasikirwa kwemari pasi rose nekuda kwekurwiswa kwephishing kwakasvika mabhiriyoni emadhora, kusanganisira maakaundi evanhu akabiwa, kutyorwa kwedata remakambani, nezvimwewo.
4. Maitiro Ekugadzirisa Dambudziko
• Tarisa kero yemutumi kuti uone kana paine mazita asina kujairika kana kuti mazita emadhomini asina kujairika.
• Shandisa multi-factor authentication (MFA) kuderedza njodzi kunyangwe mapassword akakanganiswa.
• Shandisa maturusi ekudzivirira phishing kuti ubvise maemail nemalink ane njodzi.
• Itai kudzidziswa kwekuchengetedza nguva dzose kuti vashandi varambe vakangwarira.
Dambudziko Rinoramba Richienderera Mberi (APT)
1. Tsanangudzo yeAPT
Kutyisidzira kunoramba kuripo (APT) kurwiswa kwakaoma kwenguva refu paindaneti, kunowanzoitwa nemapoka evapambi vepachivande kana mapoka ematsotsi. Kurwiswa kweAPT kune chinangwa chakajeka uye kugona kukuru kwekugadzirisa. Varwisi vanopinda mumatanho akasiyana-siyana vovanda kwenguva yakareba kuti vaba ruzivo rwakavanzika kana kukuvadza sisitimu.
2. Kuyerera kwekurwisa
Kupindira kwekutanga:Kuwana mukana wekupinda kuburikidza ne phishing emails, exploits, kana supply chain attacks.
Gadzira nzvimbo:Isa magonhi ekumashure kuti uchengetedze kupinda kwenguva refu.
Kufamba Kwemativi:kupararira mukati me network yavanoda kuti vawane simba repamusoro.
Kuba Data:Kuburitsa ruzivo rwakakosha rwakadai sepfuma yepfungwa kana magwaro ehurongwa.
Fukidza Chinyorwa:Bvisa log kuti uvanze kurwiswa.
3. Nyaya Dzakajairika
Kurwiswa kweSolarWinds muna 2020 kwaive chiitiko cheAPT chakajairwa apo ma hackers akaisa kodhi yakaipa kuburikidza nekurwiswa kwecheni yekugovera, zvichikanganisa zviuru zvemabhizinesi nemasangano ehurumende pasi rese uye zvichiba ruzivo rwakawanda rwakavanzika.
4. Mapoinzi ekudzivirira
• Shandisa sisitimu yekuona kupinda kwevanopinda (IDS) kuti iongorore traffic isina kujairika yenetwork.
• Shandisai mutemo wekuti hapana mukana wekushandisa simba rakawanda kuti mudzivise kufamba kwevanorwisa.
• Ita ongororo dzekuchengetedza nguva nenguva kuti uone zvingangoitika kuti vanhu vasavepo.
• Shanda nemapuratifomu ehungwaru hwekutyisidzira kuti ubate mafambiro matsva ekurwiswa.
Murume Ari Mukurwisa Pakati (MITM)
1. Kurwiswa kwevanhu vari pakati nepakati kunoshanda sei?
Kurwiswa kwevanhu vari pakati nepakati (MITM) kunoitika kana munhu anorwisa apinza, anobata, uye achichinja-chinja kutumira data pakati pevanhu vaviri vanotaurirana vasingazive nezvazvo. Munhu anorwisa anogona kuba ruzivo rwakavanzika, kukanganisa data, kana kutevedzera mumwe munhu nekuda kwekubiridzira.
2. Mafomu Akajairika
• Kunyengera paWi-Fi: Varwi vanogadzira nzvimbo dzenhema dzeWi-Fi kuti vakurudzire vashandisi kuti vaba data.
Kunyengedza DNS: kukanganisa mibvunzo yeDNS kuti utungamirire vashandisi kumawebhusaiti ane hukasha.
• Kubirwa kweSSL: Kugadzira zvitupa zveSSL zvenhema kuti zvidzivirire traffic yakavharidzirwa.
• Kubiridzira maemail: Kubata nekushandura zviri mukati memaemail.
3. Njodzi
Kurwiswa kweMITM kune njodzi huru kumabhangi epamhepo, e-commerce, uye masisitimu ekutaurirana, izvo zvinogona kutungamira kumaakaundi akabiwa, kutengeserana kwakakanganiswa, kana kufumurwa kwekutaurirana kwakavanzika.
4. Matanho ekudzivirira
• Shandisa mawebhusaiti eHTTPS kuti uve nechokwadi chekuti kutaurirana kwakanyorwa.
• Dzivisa kubatana neWi-Fi yeruzhinji kana kushandisa VPNS kuvhara traffic.
• Batidza sevhisi yeDNS resolution yakachengeteka yakaita seDNSSEC.
• Tarisa kuti zvitupa zveSSL ndezvechokwadi here uye chenjerera yambiro dzekunze.
Jekiseni reSQL
1. Maitiro ekushandisa SQL Injection
Kuiswa kweSQL injection kurwiswa kwekodhi umo murwisi anoisa zvirevo zveSQL zvine hutsinye muminda yekuisa yeWeb application (semuenzaniso, bhokisi rekupinda, bhawa rekutsvaga) kuti anyengedze database kuti iite mirairo isiri pamutemo, nokudaro ichiba, kukanganisa kana kudzima data.
2. Nheyo yekurwisa
Funga nezvemubvunzo unotevera weSQL wefomu rekupinda:
Murwisi anopinda:
Mubvunzo unova:
Izvi zvinodzivisa kusimbiswa kwedata uye zvinobvumira munhu anorwisa kupinda.
3. Njodzi
Kuiswa kweSQL kunogona kukonzera kubuda kwezviri mudhatabhesi, kubiwa kwemagwaro evashandisi, kana kutotorwa masisitimu ese. Kutyorwa kwedata reEquifax muna 2017 kwakabatana nekusagadzikana kwekushandiswa kweSQL kwakakanganisa ruzivo rwevanhu vevashandisi vanosvika mamiriyoni 147.
4. Dziviriro
• Shandisa mibvunzo yakarongwa kana zvirevo zvakarongwa kare kudzivirira kubatanidza zvakananga zvinongedzo zvemushandisi.
• Shandisa ongororo yekuisa uye kusefa kuti urambe mavara asina kujairika.
• Dzivisa mvumo dzedatabase kudzivirira varwisi kuti vasaite zviito zvine njodzi.
• Gara uchitarisa mawebhusaiti nguva nenguva kuti uone kana paine matambudziko uye njodzi dzekuchengetedza patch.
Kurwiswa kweDDoS
1. Hunhu hweKurwiswa kweDDoS
Kurwiswa kweDistributed Denial of Service (DDoS) kunotumira zvikumbiro zvakakura kuseva inotarirwa nekudzora huwandu hwakawanda hwemabots, izvo zvinopedza bandwidth yayo, zviwanikwa zvechikamu kana simba rekombiyuta, uye zvinoita kuti vashandisi vakajairwa vasakwanise kuwana sevhisi.
2. Mhando Dzakajairika
• Kurwiswa kwemotokari: kutumira mapaketi akawanda uye kuvharira bandwidth yenetwork.
• Kurwiswa kweprotocol: Kushandisa TCP/IP protocol kusashanda zvakanaka pakushandisa zviwanikwa zveserver session.
• Kurwiswa kweApplication-layer: Kumisa maWeb servers nekuita seari kushandisa zvikumbiro zvevashandisi zviri pamutemo.
3. Nyaya Dzakajairika
Kurwiswa kweDyn DDoS muna 2016 kwakashandisa botnet yaMirai kuputsa mawebhusaiti akawanda anosanganisira Twitter neNetflix, zvichiratidza njodzi dzekuchengetedza dzemidziyo yeiot.
4. Maitiro Ekugadzirisa Dambudziko
• Isa masevhisi ekudzivirira eDDoS kuti usefe vanhu vane njodzi.
• Shandisa network yekutumira zviri mukati (CDN) kuparadzira traffic.
• Gadzirisa ma "load balancers" kuti uwedzere kugona kwekugadzirisa sevha.
• Tarisa traffic yenetiweki kuti uone uye upindure kune zvisingawanzoitika nenguva.
Zvinotyisidzira zvemukati
1. Tsananguro yeNjodzi yeInsider
Kutyisidzira kwemukati kunobva kune vashandisi vane mvumo (semuenzaniso, vashandi, makondirakiti) vari mukati mesangano vanogona kushandisa zvisirizvo kodzero dzavo nekuda kwehutsinye, kushaya hanya, kana kushandiswa nevanorwisa vekunze, zvichikonzera kubuda kwedata kana kukuvara kwesystem.
2. Rudzi rweNjodzi
• Vanhu vane hutsinye: Kuba data nemaune kana kuisa masystems munjodzi kuti vawane purofiti.
• Vashandi vasina hanya: Nekuda kwekusaziva nezvekuchengetedzwa, kusashanda zvakanaka kunoita kuti vanhu vasave nenjodzi.
• Maakaundi akabiwa: Varwi vanodzora maakaundi emukati kuburikidza ne phishing kana kuba ma certificate.
3. Njodzi
Kutyisidzira kwemukati mekambani kwakaoma kuona uye kunogona kunzvenga mafirewall echinyakare uye masisitimu ekuona kupinda kwekambani. Muna 2021, kambani inozivikanwa yetekinoroji yakarasikirwa nemazana emamiriyoni emadhora nekuda kwekuburitswa kwekodhi yekodhi yemushandi wemukati.
4. Matanho Akasimba Ekudzivirira
• Shandisa hurongwa hwe zero-trust uye simbisa zvikumbiro zvese zvekuwana.
• Tarisa maitiro emushandisi kuti uone mashandiro asina kujairika.
• Itai kudzidziswa kwekuchengetedza nguva dzose kuti vashandi vazive zviri kuitika.
• Kuderedza mukana wekuwana ruzivo rwakakosha kuti uderedze njodzi yekubuda kwemvura.
Nguva yekutumira: Chivabvu-26-2025
