Ukuhlaselwa okunobuchule kubhekiswe kwi-tsorwinds ye-jorinds kunye nokulala kwamawaka alandelayo abathengi bayo kuyabetha ngemiphumo yawo kunye nemiphumo emiselweyo.
Ngonyaka wezifundo zenkohlakalo, olu hlaselo lusebenza njengesikhumbuzo esikhulu kwaye singathandekiyo - nabani na onokukhaba. Nabani na. Akukho lulawulo lokhuseleko, isoftware, iinkqubo kunye noqeqesho azinakubuthintela uhlaselo ngalunye. Ungahlala kwaye kufuneka ulwelwe ukunciphisa umngcipheko, kodwa ukuze ukhuphe kwaye ungaze uphumelele.
Sikhumbula kwakhona ukuba sidale iziseko zophuhliso ezimangalisayo zedijithali, ezikwimeko yokulalanisa kwayo kwaye zibambele kwimfihlo, zinokuba nefuthe elikhulu kwihlabathi lethu, uqoqosho kunye nobomi obuqhelekileyo kancinci ngexesha lobhubhane. Kumhlaseli, esi sibonelelo sedijithali sikwayindlela yokuqokelelwa kobutyebi obukhulu ngobusela, iipropathi zengqondo, iimfuno zokufikelela kwidatha okanye i-blackmail, nokuba umntu okhuphisana naye.
Unxibelelwano Luhlasela i-solarwinds kunye namalungelo okusebenza
Akukho mthengisi unokuqinisekisa ukuba isigqibo sakhe siya kuthintela ngokupheleleyo uhlaselo lweSolarwinds, kwaye kufuneka silumke ngelizwi. Kwangelo xesha, iinkampani zinokuthatha amanyathelo obuqhinga okuthintela olu hlobo lokuhlaselwa kwixesha elizayo ukuba bayaqonda kwaye bagqiba kwele ngxaki zisisiseko zokulawula iziseko ezilifa. Le ngxaki isisiseko yokhuseleko yimfuneko yokuqinisekisa ukuba nasiphi na isicelo sinokufikelela esinqeni kuyo yonke into ekwinethiwekhi, okanye, malunga nokufikelela kumlawuli okanye amalungelo eengcambu.Yintoni ukufikelela ekwabelwana ngayo kwilizwe lonke? Olu lufikelela kwiakhawunti engenamkhawulo (amangenelo) kwindalo. Oku kudla ngokuthetha ukuba isicelo ngaphandle kwezithintelo kufuneka senze ngaphandle kwemigaqo-nkqubo yokhuseleko. Umzekelo, i-akhawunti inokubandakanywa kuluhlu lweenkqubo zokulawula isicelo kwaye ayifakwanga kwiSoftware ye-anti-ris, ke ayivalwanga kwaye ayiphawulwanga ngeflegi. Iakhawunti inokusebenza egameni lomsebenzisi, inkqubo ngokwayo okanye isicelo kwi-asethi okanye isixhobo kwindalo esingqongileyo. Uninzi lweengcali ze-cyberitus zibiza olu hlobo lokufikelela "uThixo amalungelo", ithwala umngcipheko omkhulu, ongacacanga.
Ukufikelela kulawulo lwehlabathi kuhlala kusetyenziswa kwizicelo ezisetyenziswe njengelifa, ukulawulwa nokungenziwa kwitekhnoloji yendawo. Iiakhawunti zomlawuli obenziweyo kwihlabathi liphela zisebenza kwizixhobo ezininzi ezifakwe kwi-ofisi kwaye zisebenze kwiimeko zethu. Oku kubandakanya izisombululo zolawulo lwenethiwekhi, izicwangciso zolawulo lwengozi, izixhobo zokufumana ii-asethi kunye nezisombululo zokulawula izixhobo zeselula, kwaye ezi zezinye zemizekelo emininzi.
Eyona ngxaki iphambili kukuba ezi ngxelo zolawulo zinokufunyanwa ngokupheleleyo kuyafuneka ukusebenza ngokufanelekileyo, kwaye ke abanakusebenza usebenzisa umxholo wokulawula izicelo namalungelo aphantsi, olona qhenqa lokhuseleko olusezantsi. Ukuba ezi akhawunti inamalungelo arhoxisiweyo amalungelo kunye neemvume, isicelo eso asinakukwazi ukusebenza. Ke, zibonelelwa ngokufikelela ngokupheleleyo kwaye kungafunyanwanga emsebenzini, yindawo enkulu yokuhlaselwa.
Kwimeko yeSolarwinds, yile nto kanye yenzekileyo. Isicelo asoliswa ngokuhlaziyo ngokuzenzekelayo, kwaye abahlaseli basebenzise ukufikelela okungenamda kwimo ye-itreyisi esebenzisa esi sicelo. Ukuhlaselwa kunokwenza phantse kuwo nawuphi na umsebenzi owenziwe ngoSlarwinds, kwaye uzame kakhulu ukuba ungawenzeli kwiinkqubo apho kukho ukubeka esweni nokuqinisekisa ukhuseleko lwabathengisi abaphambili. Ke, kuya kuba njalo ngolu hlobo lulandelayo: Ukuba ikhowudi engenamsebenzi inobunkunkqele ngokwaneleyo ukuba iluluke izisombululo zokhuseleko kwaye iyenza kuphela kwezi zinto zinokukuphepha ukufumana, kuyakwenza oku kusetyenziswa amalungelo olawulo lwehlabathi. Akukho sisombululo sinokufumana kwaye sithintele uhlaselo.
Kunyaka ophelileyo kwibhlog yethu, apho sanika uqikelelo lwe-cyberberity ngo-2020, siqala ukunyuka kohlaziyo olusebenzayo oluzenzekelayo. Ke, nangona isisongelo singaziwayo okanye esingalindelekanga, isikali kunye neziphumo ezitshabalalisayo zezona zirhuqa ziza kuvakala ixesha elide.
Ungayithintela njani okanye ukuphelisa ukuhlaselwa kombutho obandakanyekileyo njengelifa
Kukho umbuzo omkhulu apha: singazihlaziya njani iindawo zethu kwaye singaxhomekeki kwizicelo kunye neeakhawunti ezifuna amalungelo aphezulu, engakhuselekanga?
Okokuqala, uninzi lwezicelo ezivalekileyo njengelifa, izisombululo zolawulo lwenethiwekhi, zolawulo lwentsebenzo, umzekelo, ngokusekwe kwitekhnoloji yokuskena yonke ilandelelana. Itekhnoloji nje ekhutshiweyo kunye nemodeli yokhuseleko yokuphumeza izicelo ezinjalo. Into ifuna utshintsho.
Ukuba ucinga ukuba ukunyhashwa kweSuladions yeyona nto imbi kakhulu eyakha yenzeka kwintsimi ye-Cyterbharust, usenokuba ulungile. Kwabo abasebenzi kwicandelo le-cybersecurity, ekhunjulwa nguSasser, blaster, etyheli enkulu, iMirai kunye ne-Wirai, i-Wirai kunye ne-Winess, i-Winess kunye ne-Winess kwaye ihlawule i-mperm ayinawo nakuphi na ukuthelekisa kunye Uhlaselo lweSolarwinds.
Izisongelo ezibi sele zikho iminyaka emininzi, kodwa zange khe sibone ukuba izipho ziza kuhlaselwa, zihlaselwe onke amaxhoba kunye neziphumo zokuhlaselwa azisaziwa ukuza kuthi ga ngoku. Xa i-SASR okanye i-wannacy yabetha inkqubo, abanini babo bayazi ngayo. Nokuba kwimeko yentsholongwane yokukhupha, uya kufunda malunga neziphumo zexesha elifutshane.
Ngokunxulumene ne-solarwinds enye yeenjongo eziphambili zabahlaseli yayikukuhlala zingabonwa. Kwaye ungalibali ukuba namhlanje kukho ingxaki enye yehlabathi ikhoyo ngezinye izicelo ezazuzwa njengelifa. Kwintlangano yokuhlaselwa kwamawakawaka amawaka eenkampani, ezinye iinkqubo ezinelungelo lolawulo lwehlabathi ezinokusetyenziswa, eziya kukhokelela kwiziphumo ezothusayo.
Ngelishwa, le asingoyena mngcipheko lufuna ukulungiswa, kodwa endaweni yokusetyenziswa okungagunyaziswanga kobuchule besicelo esifuna la malungelo.
Ke kufuneka uqale phi?
Okokuqala, kufuneka sichonge size sifumane zonke izicelo kwindalo esingqongileyo, efuna amalungelo aphezulu:
- Sebenzisa isixhobo sokuCingiswa kweShishini kwiShishini, simisele ukuba zeziphi iinkqubo ezinelungelo lokufumana i-akhawunti efanayo kwiinkqubo ezininzi. Iziqinisekiso ziqhelekileyo kakhulu kwaye zinokusetyenziselwa ukusasazwa ngokuthe tyaba.
- Yenza uluhlu lweempahla zeqela labalawuli beqela kwaye bachonge zonke iiakhawunti okanye iinkonzo ezikhoyo. Nasiphi na isicelo esifuna amalungelo omlawuli waseDomain ngumngcipheko omkhulu.
- Bhrawuza zonke izicelo ezikuluhlu lwakho lwe-antivirus yakho ye-antivirus (xa kuthelekiswa nokungafaniyo kwiindawo ezithile). Baza kubandakanyeka kwinyathelo lokuqala kunye nelona libalulekileyo lesitayile sakho sokhuseleko - thintela i-malware.
- Bhrawuza uluhlu lwesoftware esetyenziswe kwishishini kwaye uqiniseki amalungelo afunekayo ngesicelo sokusebenza kunye nokwenza uhlaziyo oluzenzekelayo. Oku kunokunceda ekufumanise ukuba amalungelo omlawuli wasekhaya ayafuneka okanye i-akhawunti yomlawuli yasekhaya yokusebenza ngokuchanekileyo. Umzekelo, i-akhawunti engenamntu yokwandisa amalungelo esicelo esinokuba neakhawunti kwi-node yendawo ngenjongo.
Emva koko kufuneka simenzi apho kunokwenzeka ukuba silawule izicelo ngokusekwe amalungelo afanelekileyo. Ithetha ukususwa kwawo onke amalungelo aphezulu kwesicelo. Nangona kunjalo, njengoko kuchaziwe apha ngasentla, akusoloko kunokwenzeka. Okokugqibela, ukuphelisa isidingo seeakhawunti ezinikwe ilungelo lokwabelana ngehlabathi, unokufuna oku kulandelayo:
- Hlaziya isicelo kwisisombululo esitsha
- Khetha umthengisi omtsha ukusombulula ingxaki
- Guqula umthwalo kwilifu okanye esinye iziseko zophuhliso
Cinga njengabaphathi benkampani. I-Scannesity Scalnersity Scarners isebenzisa i-akhawunti ye-World Refect Act (ngamanye amaxesha ngaphezulu kwesinye) ukunxibelelana ngokude kwithagethi kunye nokungqinisisa njengeakhawunti yolawulo ukumisela ubungozi. Ukuba i-node iphazanyiswe kukuskena okungalunganga kwesoftware, emva koko i-hash esetyenzisiweyo yokuqinisekisa inokuqokelelwa kwaye isetyenziselwe ukusasazwa ngokuthe tyaba ngaphezulu kwenethiwekhi kunye nokuseka ubukho obuqhubekayo.
Iindawo zokupaka iinkqubo zokulawulwa kokusesikweni ziye zayiqonda le ngxaki kwaye endaweni yokugcina i-akhawunti yolawulo engapheliyo yokuskena, idityaniswe nesisombululo sokulawulwa kokufikelela esithandwayo (i-PAM) ukufumana iskena. Xa bekungekho zisombululo zePAM, abathengisi bezixhobo zobungozi banciphise umngcipheko, ukuphuhlisa iiarhente zendawo kunye nezixhobo ezinokusebenzisa i-API ukuvavanya i-API yokuvavanya isikethi esigunyazisiweyo.
Imbono yam ngalo mzekelo ilula: Itekhnoloji yolawulo embalwa yelifa izuzwe njengelifa ivele ngendlela yokuba kungabi saveza abathengi abanxibelelene neeakhawunti ze-terbal ezinxulumene nazo. Ngelishwa, amanye itekhnoloji yabathengisi abangabathengisi ayitshintshanga izigqibo zazo, kwaye isoyikiso sihlala de izisombululo ezindala zitshintshwa okanye zazaliswa.
Ukuba unezixhobo zokulawula ukuba zeziphi ii-akhawunti zolawulo zehlabathi ziyafuneka, ke umsebenzi obaluleke kakhulu obaluleke kakhulu kuma-2021 kufuneka athathe indawo yezi zixhobo okanye uhlaziyo lwabo. Qinisekisa ukuba izisombululo ozithengiweyo ziphuhliswa ngabathengisi sele zihambisa kolu songelo.
Okokugqibela, cinga ngokulawula amalungelo ezicelo ezisekwe kumgaqo wamalungelo afanelekileyo. Izisombululo ze-PAM zenzelwe ukugcina iimfihlo kwaye zivumele ukusetyenziswa kwezicelo zokusebenza nenqanaba lelungelo elinelungelo, nokuba zazingeyonto yakwenza nokusebenza kwezi zicelo.
Ukubuyela kumzekelo wethu, izisombululo zolawulo lolawulo lwengozi zingasebenzisa amalungelo e-UNIX kunye neLinux ukwenza i-scararality can, nokuba azibonelelwanga ngokufikelela kwabo. Isixhobo solawulo selungelo siphumeza imiyalelo egameni leskena kwaye ibuyise iziphumo. Kukwenza imiyalelo yeskena kunye namalungelo amancinci kwaye angayifezekisi imiyalelo yayo engafanelekanga, umzekelo, acime inkqubo. Ngandlel 'ithile, umgaqo wamalungelo amancinci amancinci kula qonga ufana ne-sudo kwaye unokulawula, umda kunye nokwenza izicelo ngamalungelo afowunayo. Le yenye nje indlela yokulawula ukufikelela ekufikeleleni inokusetyenziswa kwezinye izicelo eziphelelwe lixesha kwiimeko apho kufuneka amalungelo aphezulu apho kufuneka khona amalungelo aphezulu kwaye kufanelekile ukuba kubekho endaweni efanelekileyo.
Incitshiswe i-cibersian kwi-2021 kwaye enye: La manyathelo aphambili alandelayo
Nawuphi na umbutho unokuba lujoliso lwabangeneleli, kwaye nasiphi na isicelo samalungelo aphezulu sinokusetyenziswa kwinkampani yonke. Isiganeko seSolarwinds kufuneka sikhuthaze sonke ukuba siphinde siphinde siphinde siphinde siqaphele kwaye sichonge ezo nkqubo zisebenza zinxulunyaniswa nokungena kwilungelo eligqithileyo. Kufuneka siqonde ukuba ungaluthambisa njani isoyikiso, nokuba akunakwenzeka ukuba uyiphelise ngoku.
Ekugqibeleni, imizamo yakho yokunciphisa umngcipheko kwaye isuse imiphumo yabo inokukukhokelela ekutshintsheni izicelo okanye ukutshintshwa kwilifu. Ngaphandle kwamathandabuzo omnye - umxholo wolawulo lofikelelo olwenziweyo usebenza kwizicelo nakubantu. Ukuba izicelo zakho azilawulwa ngokufanelekileyo, zinokubeka emngciphekweni ukhuseleko lweshishini lonke. Kwaye akukho nto ifanele ukuba ifikelele kumda kwimo yakho. Eli lelinye ikhonkco elibuthathaka ekufuneka sichonge, cima kwaye uphendule kwikamva.
Inqaku elinomdla ngakumbi kwiCisoclub.ru. Bhalisela kuthi: I-facebook | VK | I-Twitter | I-Instagram | I-Telegraph | I-Zen | Messeser | ICQ ENTS | I-YouTube | Pulse.