Ukuhlasela okuyinkimbinkimbi okuqondiswe ekungeni kokungena kwama-orion ama-solarwinds kanye nokuyekethisa okulandelayo kwezinkulungwane zamakhasimende alo kumangalisa nezinga layo nemiphumela engaba khona.
Ngonyaka wezifundo ezinesihluku, lokhu kuhlasela kusebenza njengesikhumbuzo esikhulu kakhulu nesingathandeki - noma ngubani angagenca. Noma ngubani. Akukho ukulawulwa kokuphepha, isoftware, izinqubo kanye nokuqeqeshwa akukwazi ukuvimba ukuhlasela ngakunye. Ungahlala futhi kufanele ulwele ukunciphisa ubungozi, kepha ukuze ubasuse ngeke baphumelele.
Siphinde sakhumbula nokuthi sakha ingqalasizinda emangalisayo yedijithali, okuyinto, esimweni sokuyekethisa kwayo futhi sithwebule imvelo kanye nezimfihlo zayo emhlabeni wethu, umnotho kanye nokuphila esijwayele kancane ngesikhathi sobhubhane. Ngomhlaseli, le ngcebo yedijithali nayo iyindlela yokuqongelela ingcebo enkulu ngokwebiwa kwezimfihlo, impahla yezobuhlakani, izidingo zokuthola idatha noma ukuncintisana noma ukuncintisana noma isizwe noma isizwe noma isizwe noma isizwe noma isizwe noma isizwe noma isizwe noma isizwe noma isizwe noma isizwe noma isizwe noma isizwe noma isizwe noma isizwe noma isizwe noma isizwe noma isizwe noma isizwe noma isizwe noma isiguli.
Ukuhlasela Kwezokuxhumana Solarwinds namalungelo okusebenzisa
Akunawo umthengisi angaqinisekisa ukuthi isinqumo sakhe singakuvimba ngokuphelele ukuhlaselwa ngamaSolarwinds, futhi kufanele siqaphele izitatimende ezinjalo. Ngasikhathi sinye, izinkampani zingathatha izinyathelo ezinamasu ukuvimbela lolu hlobo lokuhlaselwa ngokuzayo uma zibona futhi zinqume enye yezinkinga eziyisisekelo zokuphatha ingqalasizinda ezuzwe njengefa. Le nkinga yezokuphepha eyisisekelo yisidingo sokuqinisekisa ukuthi noma yiluphi uhlelo lokusebenza lunokufinyelela okungenamkhawulo kukho konke okukunethiwekhi, noma, ngokuya ngokufinyelela okunelungelo, ukufinyelela okwabiwe ngomhlaba.Kuyini ukufinyeleleka kwe-Global Kwabiwe? Lokhu ukufinyelela kwe-akhawunti okungenamkhawulo (okufakiwe) kwimvelo. Lokhu kuvame ukusho ukuthi uhlelo lokusebenza ngaphandle kwemikhawulo ludinga ukwenza okuhlukile kuzinqubomgomo zokuphepha. Isibonelo, i-akhawunti ingafakwa ohlwini lwezinhlelo zokulawula uhlelo lokusebenza futhi ingafakwa ku-software ye-anti-virus, ngakho-ke ayivinjelwe futhi ayimakwa ngefulegi. I-akhawunti ingasebenza egameni lomsebenzisi, uhlelo uqobo noma uhlelo lokusebenza kunoma yiziphi izimpahla noma izinsiza emvelweni. Ochwepheshe abaningi be-cybersecuture babiza lolu hlobo lokufinyelela "amalungelo obuNkulunkulu", liphethe ingozi enkulu, engenakuphikwa.
Ukufinyelela okuhlanganyelwe komhlaba okwabiwe kuvame ukusetshenziselwa izinhlelo zokusebenza ezitholakala njengefa yokuqapha, ukuphathwa kanye nokuzenzakalela kobuchwepheshe bendawo. Ama-akhawunti woMqondisi Womhlaba owabelwe ahlinzeka ngamathuluzi amaningi afakwe kwisisekelo nokusebenza ezindaweni zethu. Lokhu kufaka phakathi izixazululo zokulawulwa kwenethiwekhi, izixazululo zokulawulwa kwamandla, amathuluzi wokuthola izimpahla nezisombululo zokuphatha amadivaysi eselula, futhi lezi ezinye zezibonelo eziningi.
Inkinga eyinhloko iwukuthi lezi akhawunti zokuphatha nge ukufinyelela okugcwele ezidingekayo ukuze umsebenzi kahle, ngakho-ke abakwazi ukusebenza usebenzisa nomqondo nokuphatha izinhlelo zokusebenza ngolwazi lokuphequlula amalungelo aphansi, okuyinto engcono yezokuvikela. Uma la ma-akhawunti asuse amalungelo nezimvume, uhlelo lokusebenza cishe ngeke lukwazi ukusebenza. Ngakho-ke, banikezwa ukufinyelela okugcwele nokungenamkhawulo emsebenzini, okuyindawo enkulu yokuhlaselwa.
Uma kwenzeka uSolarwinds, lokhu kwenzeka kanye. Uhlelo lokusebenza uqobo lwalo lwaluncishiswe ngokuvuselelwa okuzenzakalelayo, futhi abahlaseli basebenzise ukufinyelela okungenamkhawulo kwimvelo yesisulu besebenzisa lolu hlelo lokusebenza. Ukuhlasela kungenza cishe noma yiminye imisebenzi efihliwe ngama-solarwinds, futhi waze wazama kanzima ukuthi angazenzeli ezinhlelweni lapho kunezindlela zokuqapha kanye nokuqinisekisa ukuphepha kwabathengisi abathuthukile. Ngakho-ke, kuba sobala ngokulandelayo: Uma ikhodi enonya yenziwe kahle ngokwanele ukugwema izixazululo zokuphepha futhi ikwenze kuphela kulezo zinto lapho kungakugwema khona ukutholwa komhlaba wonke. Akunasisombululo esingabona futhi sivimbele ukuhlaselwa okunjalo.
Ngonyaka odlule kubhulogi lethu, lapho sanikeza khona isibikezelo se-cybersecurity for 2020, siqale sabeka ukwanda kokuvuselelwa okuzenzakalelayo okunonya. Ngakho-ke, yize ukusongelwa okuphelele bekungeyona into engaziwa noma engalindelekile, isikali kanye nemiphumela ebhubhisayo yalesi sigameko esithize sokuhlasela izokhala isikhathi eside.
Ungakuvimbela kanjani noma ukuqeda ukuhlaselwa enhlanganweni kwawo izicelo ezizuzwa njengefa
Kunombuzo omkhulu lapha: Singakukhuphula kanjani izimo zethu futhi asixhomeki kuzinhlelo zokusebenza nama-akhawunti adinga amalungelo amaningi, okungaphephile?
Okokuqala, ngokugcwele izinhlelo ezinjalo ezitholakala njengefa, izixazululo zokulawulwa kwenethiwekhi noma ukuphathwa kobungcweti, ngokwesibonelo, ngokususelwa kubuchwepheshe bokuskena konke kuyahleleka. Vele ubuchwepheshe obuphelelwe yisikhathi kanye namamodeli wokuphepha ukuze usebenzise izicelo ezinjalo. Okuthile kudinga ushintsho.
Uma ucabanga ukuthi ukwephulwa kwamaSolarwinds kuyinto embi kakhulu eyake yenzeka emkhakheni we-cybersecurity, ungahle ulungile. Kulabo ochwepheshe emkhakheni we-cybersecurity, abakhunjulwa yi-sasser, elihlaselwa, eliphuzi elikhulu, i-Mirai kanye ne-Wannacry, ivolumu yamathonya ohlelweni izoqhathaniswa, kepha okuhlosiwe kanye nokulayishwa kwalezi zibungu akunakuqhathaniswa nanoma yikuphi ukuqhathanisa ne Ukuhlaselwa kwamaSolarwinds.
Izinsongo ezinkulu sezivele zikhona iminyaka eminingi, kepha ngaphambi kokuba sibone insiza ukuthi ihlaselwe kakhulu kangangokuba zonke izisulu ezingaba khona kanye nemiphumela yokuhlaselwa azaziwa nathi kuze kube manje. Lapho i-sasser noma i-wannacry ishaya uhlelo, abanikazi bayo babazi ngakho. Ngisho nasendabeni yokuphanga amagciwane, uzofunda ngemiphumela yesikhathi esifushane.
Mayelana nama-solarwinds Enye yezinhloso eziphambili zabahlaseli kwakuwukunganakwa. Futhi ungakhohlwa ukuthi namhlanje inkinga efanayo yomhlaba ikhona nezinye izinhlelo zokusebenza ezizuzwa njengefa. Enhlanganweni yokuhlaselwa kwezinkulungwane zezinkampani, ezinye izinhlelo zokusebenza ezinamalungelo okuphatha abiwe emhlabeni wonke ezizosebenza, ezizoholela emiphumeleni eyethusayo.
Ngeshwa, lokhu akuyona ingozi esengozini edinga ukulungiswa, kodwa kunalokho ukusetshenziswa okungagunyaziwe kwamandla wesicelo esidinga la malungelo.
Manje uzoqala kuphi?
Okokuqala, kudingeka sikhombe futhi sibone zonke izinhlelo zokusebenza emvelweni wethu, ezidingeka amalungelo anjalo:
- Usebenzisa ithuluzi lokutholwa kwe-Enterprise Class, nquma ukuthi iziphi izinhlelo zokusebenza ezine-akhawunti efanayo ne-akhawunti ezinhlelweni eziningi. Ubuqiniso buvame kakhulu futhi bungasetshenziselwa ukusatshalaliswa okuvundlile.
- Yenza iqoqo lama-Domain Administrator Group Group bese ukhomba wonke ama-akhawunti wesicelo noma izinsizakalo ezikhona. Noma yiluphi uhlelo lokusebenza oludinga amalungelo omqondisi wesizinda luyingozi enkulu.
- Dlulisa amehlo kuzo zonke izinhlelo zokusebenza ezikuhlu lwakho lwe-antivirus ngaphandle kwe-antivirus engaphandle (ngokuqhathaniswa nokuhlukile kwizindawo ezithile). Bazobambe iqhaza esigabeni sokuqala nesibaluleke kunazo zonke se-Endpoint Security Stack yakho - Vimbela i-malware.
- Dlulisa amehlo kuhlu lwesoftware esetshenziswa ebhizinisini futhi kunqume ukuthi imaphi amalungelo adingeka ngohlelo lokusebenza lokusebenza nokwenza izibuyekezo ezizenzakalelayo. Lokhu kungasiza ekuboneni ukuthi amalungelo omlawuli wendawo adingekayo noma ama-akhawunti womqondisi wendawo asebenza kahle kohlelo lokusebenza. Isibonelo, i-akhawunti engeyinhlisayo yokwandisa amalungelo isicelo kungaba yi-akhawunti endaweni yendawo yale nhloso.
Ngemuva kwalokho kufanele sisebenzise lapho kungenzeka ukuphatha izinhlelo zokusebenza ngokuya ngamalungelo adingekayo. Kusho ukususwa kwawo wonke amalungelo ohlelo lokusebenza. Kodwa-ke, njengoba kushiwo ngenhla, akwenzeki njalo. Ekugcineni, ukuqeda isidingo sama-akhawunti anikezwe amalungelo omhlaba, ungadinga kanjena:
- Vuselela uhlelo lokusebenza kwikhambi elisha
- Khetha umthengisi omusha ukuxazulula inkinga
- Humusha umthwalo wefulo efwini noma kwenye ingqalasizinda
Cabanga njengobungozi bokuphatha abasibonelo. Izikena zendabuko zobungozi zisebenzisa i-akhawunti evunyelwe ye-Global Shared Accound (kwesinye isikhathi ezingaphezu kweyodwa) ukuxhuma kude ukubhekisa ukubhekisisa nokufakazelwa ubuqiniso njenge-akhawunti yokuphatha ukuthola ubungozi. Uma i-node isengozini yokuskena kwesoftware enonya, khona-ke i-hashi esetshenziselwe ubuqiniso ingaqoqwa futhi isetshenziselwe ukusatshalaliswa okuvundlile kunethiwekhi bese kusungulwa ubukhona obuqhubekayo.
Izinkundla zezinhlelo zokuphathwa kwengozi ziye zabona le nkinga futhi esikhundleni sokugcina i-akhawunti eqhubekayo yokuphatha ukuze iskena, ihlanganiswe nesixazululo sokulawula ukufinyelela okuthandwayo (Pam) ukuthola i-akhawunti enenhlanhla yokuqedela i-Scan. Lapho kungekho zixazululo ze-PAM, abathengisi bamathuluzi okuphatha ubungcweti banciphise ubungozi, ukuthuthukisa abenzeli bendawo namathuluzi angasebenzisa i-API ukuze ahlole esikhundleni se-akhawunti eyodwa eyabiwe ngokuskena.
Iphuzu lami lokubuka ngalesi sibonelo lilula: Ubuchwepheshe bokuphathwa kwezobugebengu obuzungeza njengefa buye bavela ngendlela yokuthi ayisadalule amakhasimende ngengozi enkulu ehambisana nama-akhawunti wesicelo somhlaba kanye nokufinyelela kubo. Ngeshwa, abanye abantu abaningi abathengisi bezobuchwepheshe abazishintshile izinqumo zabo, futhi izinsongo zihlala kuze kube yilapho izixazululo ezindala zithathelwa indawo noma zanamuhla.
Uma unamathuluzi wokuphatha ukuthi yimaphi ama-akhawunti wokwabelana nge-Adminioned World adingeka, khona-ke umsebenzi wokubaluleka kwePharamo, kufanele uthathe indawo la mathuluzi noma ukubuyekeza kwabo. Qiniseka ukuthi izixazululo ozithengayo zithuthukiswa ngabathengisi esivele beletha kulolu songo.
Ekugcineni, cabanga ngokuphatha amalungelo wokusetshenziswa okususelwa emgomweni wamalungelo adingekayo okungenani. Izisombululo ze-PAM zenzelwe ukugcina izimfihlo futhi zivumele izinhlelo zokusebenza zisebenze nge-level enobumfihlo elincane, noma ngabe zazenzelwe ekuqaleni ukusebenza nalezi zicelo.
Ukubuyela esibonelweni sethu, izixazululo zokulawulwa kwengcupheko zingasebenzisa amalungelo we-UNIX neLinux ukwenza ama-scan asengozini, noma ngabe anikezwanga ngokufinyelela kwawo okuyinhlanhla. Ithuluzi lokulawula ilungelo likhipha imiyalo egameni lesithwebuli bese libuyisa imiphumela. Ikhipha imiyalo yesithwebuli ngamalungelo amancane kakhulu futhi ayifeze imiyalo yaso engafanele, ngokwesibonelo, icisha uhlelo. Ngomqondo othile, umgomo wamalungelo amancane kunawo wonke kulamapulatifomu ufana ne-sudo futhi angalawula, anciphise futhi akhiphe izinhlelo zokusebenza ngamalungelo, noma ngabe yinqubo ebiza umyalo. Le ndlela eyodwa nje yokuphatha ukufinyelela okunelungelo ingasetshenziswa kwezinye izinhlelo zokusebenza eziphelelwe yisikhathi ezimweni lapho kudingeka khona amalungelo aphezulu futhi okunye esikhundleni esifanele akunakwenzeka.
Anciphise i-ciberia ngo-2021 futhi aqhubeke: lezi zinyathelo eziphambili ezilandelayo
Noma iyiphi inhlangano ingaba yithagethi yabangeneleli, futhi noma yiluphi uhlelo lokusebenza olunamalungelo ngokweqile lungasetshenziswa ngokumelene nenkampani yonke. Isigameko soSolarwind kumele sisikhuthaze sonke ukuthi sibuyekeze futhi sikhombe lezo zinhlelo zokusebenza ezihlotshaniswa nobungozi bokufinyelela okwedlulele. Kufanele sinqume ukuthi ungasithambisa kanjani usongo, noma ngabe akunakwenzeka ukuyiqeda manje.
Ekugcineni, imizamo yakho yokunciphisa ubungozi futhi isuse imiphumela yabo ingakuholela ekuthatheni ukubuyisela izinhlelo noma uguquko efwini. Ngokungangabazeki omunye - umqondo wokuphathwa kokufinyelela okunelungelo uyasebenza kwizicelo kanye nabantu. Uma izinhlelo zakho zokusebenza zingalawulwa kahle, zingabeka engcupheni ukuphepha kwalo lonke ibhizinisi. Futhi akukho okufanele kube nokufinyelela okungenamkhawulo endaweni yakho. Lesi yisixhumanisi esisodwa esibuthakathaka okufanele sikhombe, sisuse futhi sikugweme ngokuzayo.
Indwangu ethokozisayo ku-CisoClub.ru. Bhalisela: Facebook | I-VK | I-Twitter | I-Instagram | I-Telegraph | Zen | Isithunywa | I-ICQ New | I-YouTube | Pulse.