{"id":87697,"date":"2020-07-09T13:42:31","date_gmt":"2020-07-09T11:42:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/ddos-idet-v-offlajn"},"modified":"2020-07-09T13:42:31","modified_gmt":"2020-07-09T11:42:31","slug":"ddos-idet-v-offlajn","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/ddos-idet-v-offlajn","title":{"rendered":"DDoS jde offline","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

P\u0159ed p\u00e1r lety za\u010dala v\u00fdzkumn\u00e1 agentura a poskytovatel\u00e9 informa\u010dn\u00ed bezpe\u010dnosti pod\u00e1vat zpr\u00e1vy o poklesu<\/a><\/noindex> po\u010dtu DDoS \u00fatok\u016f. Ale ji\u017e ve 1. \u010dtvrtlet\u00ed 2019 stejn\u00ed v\u00fdzkumn\u00edci informovali o jejich ohromuj\u00edc\u00edm n\u00e1r\u016fstu<\/a><\/noindex> o 84 %. A pak se to jen zhor\u0161ovalo. Dokonce ani pandemie nep\u0159isp\u011bla k atmosf\u00e9\u0159e klidu \u2014 naopak, kyberzlo\u010dinci a spamme\u0159i to pova\u017eovali za skv\u011bl\u00fd sign\u00e1l k \u00fatoku a objem DDoS vzrostl dvojn\u00e1sobn\u011b<\/a><\/noindex>.<\/p>\n

\"DDoS<\/a><\/noindex>
\n<\/a><\/noindex>
\nJsme si jisti, \u017ee doba jednoduch\u00fdch a snadno odhaliteln\u00fdch DDoS \u00fatok\u016f (a jednoduch\u00fdch n\u00e1stroj\u016f, kter\u00e9 je mohou zamezit) ji\u017e skon\u010dila. Kyberzlo\u010dinci se nau\u010dili l\u00e9pe skr\u00fdvat tyto \u00fatoky a prov\u00e1d\u011bt je \u010d\u00edm d\u00e1l rafinovan\u011bji. Temn\u00e1 pr\u016fmyslov\u00e1 sf\u00e9ra p\u0159e\u0161la od brute force k \u00fatok\u016fm na \u00farovni aplikac\u00ed. Z\u00edsk\u00e1v\u00e1 v\u00e1\u017en\u00e9 zak\u00e1zky na naru\u0161ov\u00e1n\u00ed obchodn\u00edch proces\u016f, v\u010detn\u011b t\u011bch zcela offline.<\/p>\n

Vnik\u00e1n\u00ed do reality<\/h2>\n

\nV roce 2017 vedla \u0159ada DDoS \u00fatok\u016f zam\u011b\u0159en\u00fdch na dopravn\u00ed slu\u017eby ve \u0160v\u00e9dsku k dlouh\u00fdm zpo\u017ed\u011bn\u00edm vlak\u016f<\/a><\/noindex>. V roce 2019 do\u0161lo k v\u00fdpadku prodejn\u00edch syst\u00e9m\u016f n\u00e1rodn\u00edho \u017eelezni\u010dn\u00edho oper\u00e1tora D\u00e1nska Danske Statsbaner<\/a><\/noindex> , co\u017e m\u011blo za n\u00e1sledek, \u017ee na stanic\u00edch nefungovaly automaty na j\u00edzdenky a automatick\u00e9 br\u00e1ny, a v\u00edce ne\u017e 15 tis\u00edc cestuj\u00edc\u00edch nemohlo nikam odjet. Ve stejn\u00e9m roce siln\u00fd kyber\u00fatok zp\u016fsobil v\u00fdpadek dod\u00e1vky elekt\u0159iny ve Venezuele<\/a><\/noindex>.<\/p>\n

D\u016fsledky DDoS \u00fatok\u016f nyn\u00ed poci\u0165uj\u00ed nejen online u\u017eivatel\u00e9, ale i lid\u00e9, jak se \u0159\u00edk\u00e1, IRL (v re\u00e1ln\u00e9m \u017eivot\u011b). A\u010dkoli historicky \u00fato\u010dn\u00edci m\u00ed\u0159ili pouze na online slu\u017eby, nyn\u00ed je \u010dasto jejich c\u00edlem naru\u0161it jak\u00e9koli obchodn\u00ed operace. Podle na\u0161ich odhad\u016f m\u00e1 dnes v\u00edce ne\u017e 60 % \u00fatok\u016f takov\u00fd c\u00edl \u2014 za \u00fa\u010delem vyd\u00edr\u00e1n\u00ed nebo ne\u010dist\u00e9ho konkuren\u010dn\u00edho boje. Zvl\u00e1\u0161t\u011b zraniteln\u00e9 v tomto kontextu jsou transakce a logistika.<\/p>\n

Chytr\u00e9 a drah\u00e9<\/h2>\n

\nDDoS nad\u00e1le z\u016fst\u00e1v\u00e1 jedn\u00edm z nejroz\u0161\u00ed\u0159en\u011bj\u0161\u00edch a nejrychleji rostouc\u00edch typ\u016f kyberkriminality. Podle odborn\u00edk\u016f se od roku 2020 jejich po\u010det bude jen zvy\u0161ovat. To je spojeno s r\u016fzn\u00fdmi d\u016fvody \u2014 jak s je\u0161t\u011b v\u011bt\u0161\u00edm p\u0159echodem podnik\u016f do online kv\u016fli pandemii, tak s v\u00fdvojem samotn\u00e9ho st\u00ednov\u00e9ho odv\u011btv\u00ed kyberkriminality a dokonce i s roz\u0161\u00ed\u0159en\u00edm 5G<\/a><\/noindex>.<\/p>\n

DDoS \u00fatoky se staly \"popul\u00e1rn\u00edmi\" kv\u016fli snadnosti nasazen\u00ed a n\u00edzk\u00fdm n\u00e1klad\u016fm: je\u0161t\u011b p\u0159ed p\u00e1r lety je bylo mo\u017en\u00e9 spustit za 50 dolar\u016f denn\u011b. Dnes se c\u00edle i metody \u00fatok\u016f zm\u011bnily, co\u017e vedlo k jejich zv\u00fd\u0161en\u00e9 slo\u017eitosti a n\u00e1sledn\u011b k n\u00e1r\u016fstu n\u00e1klad\u016f. Ano, ceny od 5 dolar\u016f za hodinu st\u00e1le existuj\u00ed v cen\u00edc\u00edch (ano, kyberzlo\u010dinci maj\u00ed cen\u00edky a tarifn\u00ed s\u00edt\u011b), ale za web s ochranou ji\u017e po\u017eaduj\u00ed od 400 dolar\u016f za den, zat\u00edmco cena \"individu\u00e1ln\u00edch\" zak\u00e1zek pro velk\u00e9 spole\u010dnosti dosahuje n\u011bkolika tis\u00edc dolar\u016f.<\/p>\n

Nyn\u00ed existuj\u00ed dva hlavn\u00ed typy DDoS \u00fatok\u016f. Prvn\u00ed m\u00e1 za c\u00edl u\u010dinit online zdroj nedostupn\u00fdm po ur\u010ditou dobu. Platby za n\u011b kyberzlo\u010dinci berou za \u010das samotn\u00e9ho \u00fatoku. V tomto p\u0159\u00edpad\u011b DDoS oper\u00e1tor nezaj\u00edm\u00e1 \u017e\u00e1dn\u00fd konkr\u00e9tn\u00ed v\u00fdsledek, a klient fakticky prov\u00e1d\u00ed p\u0159edplacen\u00ed za zah\u00e1jen\u00ed \u00fatoku. Tyto metody jsou dost levn\u00e9.<\/p>\n

Druh\u00fd typ \u00fatok\u016f se plat\u00ed a\u017e po dosa\u017een\u00ed ur\u010dit\u00e9ho v\u00fdsledku. Ty jsou u\u017e zaj\u00edmav\u011bj\u0161\u00ed. Jsou mnohem slo\u017eit\u011bj\u0161\u00ed na proveden\u00ed a tud\u00ed\u017e v\u00fdrazn\u011b dra\u017e\u0161\u00ed, proto\u017ee \u00fato\u010dn\u00edci mus\u00ed vyb\u00edrat nejefektivn\u011bj\u0161\u00ed metody k dosa\u017een\u00ed c\u00edl\u016f. Ve spole\u010dnosti Variti n\u011bkdy hrajeme cel\u00e9 \u0161achov\u00e9 partie s kyberzlo\u010dinci, kdy oni okam\u017eit\u011b m\u011bn\u00ed taktiku a n\u00e1stroje a pokou\u0161\u00ed se prorazit n\u011bkolik zranitelnostmi na n\u011bkolika \u00farovn\u00edch. To jsou rozhodn\u011b t\u00fdmov\u00e9 \u00fatoky, p\u0159i kter\u00fdch hacke\u0159i skv\u011ble v\u011bd\u00ed, jak reagovat a \u010delit \u010dinnostem obr\u00e1nc\u016f. Bojovat proti nim nen\u00ed jen obt\u00ed\u017en\u00e9, ale tak\u00e9 velmi n\u00e1kladn\u00e9 pro spole\u010dnosti. Nap\u0159\u00edklad jeden z na\u0161ich klient\u016f, velk\u00fd maloobchodn\u00edk, udr\u017eoval t\u00e9m\u011b\u0159 t\u0159i roky t\u00fdm o 30 lidech, jeho\u017e \u00fakolem bylo bojovat proti DDoS \u00fatok\u016fm.<\/p>\n

Podle \u00fadaj\u016f spole\u010dnosti Variti tvo\u0159\u00ed jednoduch\u00e9 DDoS \u00fatoky, prov\u00e1d\u011bn\u00e9 p\u0159ev\u00e1\u017en\u011b z nudy, trolling nebo nespokojenosti s ur\u010dit\u00fdmi firmami, v sou\u010dasnosti m\u00e9n\u011b ne\u017e 10 % v\u0161ech DDoS \u00fatok\u016f (samoz\u0159ejm\u011b, \u017ee u nezabezpe\u010den\u00fdch zdroj\u016f m\u016f\u017ee b\u00fdt statistika jin\u00e1, my se d\u00edv\u00e1me na \u00fadaje na\u0161ich klient\u016f). V\u0161e ostatn\u00ed je pr\u00e1ce profesion\u00e1ln\u00edch t\u00fdm\u016f. Z\u00e1rove\u0148 t\u0159i \u010dtvrtiny v\u0161ech \"\u0161patn\u00fdch\" bot\u016f jsou slo\u017eit\u00e9 boty, kter\u00e9 je obt\u00ed\u017en\u00e9 odhalit pomoc\u00ed v\u011bt\u0161iny modern\u00edch tr\u017en\u00edch \u0159e\u0161en\u00ed. Imituj\u00ed chov\u00e1n\u00ed skute\u010dn\u00fdch u\u017eivatel\u016f nebo prohl\u00ed\u017ee\u010d\u016f a vkl\u00e1daj\u00ed vzory, kter\u00e9 zt\u011b\u017euj\u00ed rozli\u0161ov\u00e1n\u00ed mezi \"dobr\u00fdmi\" a \"\u0161patn\u00fdmi\" po\u017eadavky. To \u010din\u00ed \u00fatoky m\u00e9n\u011b n\u00e1padn\u00fdmi a tedy \u00fa\u010dinn\u011bj\u0161\u00edmi.<\/p>\n

\"DDoS
\n\u00dadaje od GlobalDots<\/i><\/p>\n

Nov\u00e9 c\u00edle DDoS<\/h2>\n

\nZpr\u00e1va Zpr\u00e1va o \u0161patn\u00fdch bodech<\/a><\/noindex> od analytik\u016f z GlobalDots nazna\u010duje, \u017ee boti nyn\u00ed generuj\u00ed 50 % ve\u0161ker\u00e9ho webov\u00e9ho provozu, p\u0159i\u010dem\u017e 17,5 % z nich jsou konkr\u00e9tn\u011b \u0161kodliv\u00ed boti.<\/p>\n

Boti um\u011bj\u00ed r\u016fzn\u00fdmi zp\u016fsoby zt\u011b\u017eovat \u017eivot firm\u00e1m: krom\u011b toho, \u017ee \"zhazuj\u00ed\" webov\u00e9 str\u00e1nky, nyn\u00ed tak\u00e9 zvy\u0161uj\u00ed n\u00e1klady na reklamu, klik\u00e1n\u00ed na reklamy, parsuj\u00ed ceny, aby je sn\u00ed\u017eili o hal\u00e9\u0159 a p\u0159et\u00e1hli kupuj\u00edc\u00ed, a kradou obsah s r\u016fzn\u00fdmi nekal\u00fdmi c\u00edli (nap\u0159\u00edklad jsme ned\u00e1vno psali<\/a><\/noindex> o str\u00e1nk\u00e1ch s ukraden\u00fdm obsahem, kter\u00e9 nut\u00ed u\u017eivatele \u0159e\u0161it ciz\u00ed captchy). Boti siln\u011b zkresluj\u00ed r\u016fzn\u00e9 podnikatelsk\u00e9 statistiky, co\u017e vede k rozhodnut\u00edm na z\u00e1klad\u011b chybn\u00fdch \u00fadaj\u016f. DDoS \u00fatok \u010dasto slou\u017e\u00ed jako zakryt\u00ed pro je\u0161t\u011b z\u00e1va\u017en\u011bj\u0161\u00ed trestn\u00e9 \u010diny, jako je hacking a kr\u00e1de\u017e dat. A nyn\u00ed vid\u00edme, \u017ee p\u0159ibyl cel\u00fd nov\u00fd klasifikace kybernetick\u00fdch hrozeb \u2014 to je naru\u0161en\u00ed ur\u010dit\u00fdch podnikatelsk\u00fdch proces\u016f spole\u010dnosti, \u010dasto offline (proto\u017ee v sou\u010dasnosti nem\u016f\u017ee nic b\u00fdt \u00fapln\u011b \"offline\"). Zvl\u00e1\u0161\u0165 \u010dasto vid\u00edme, \u017ee jsou naru\u0161ov\u00e1ny logistick\u00e9 procesy a komunikace se z\u00e1kazn\u00edky.<\/p>\n

\"Nedoru\u010deno\"<\/h2>\n

\nLogistick\u00e9 podnikov\u00e9 procesy jsou kl\u00ed\u010dov\u00e9 pro v\u011bt\u0161inu firem, proto jsou \u010dasto ter\u010dem \u00fatok\u016f. Zde jsou sc\u00e9n\u00e1\u0159e \u00fatok\u016f, kter\u00e9 k tomu mohou nastat.<\/p>\n

Nen\u00ed skladem<\/i><\/p>\n

Pokud pracujete v oblasti online obchodu, ur\u010dit\u011b u\u017e zn\u00e1te probl\u00e9m fale\u0161n\u00fdch objedn\u00e1vek. P\u0159i t\u011bchto \u00fatoc\u00edch roboti p\u0159et\u011b\u017euj\u00ed logistick\u00e9 zdroje a \u010din\u00ed zbo\u017e\u00ed nedostupn\u00fdm pro ostatn\u00ed z\u00e1kazn\u00edky. Umis\u0165uj\u00ed obrovsk\u00e9 mno\u017estv\u00ed fale\u0161n\u00fdch objedn\u00e1vek, kter\u00e9 odpov\u00eddaj\u00ed maxim\u00e1ln\u00edmu po\u010dtu dostupn\u00e9ho zbo\u017e\u00ed. Toto zbo\u017e\u00ed pak nen\u00ed uhrazeno a po n\u011bjak\u00e9 dob\u011b se vrac\u00ed na web. Ale to u\u017e je p\u0159\u00edli\u0161 pozd\u011b: bylo ozna\u010deno jako \u201enen\u00ed skladem\u201c a \u010d\u00e1st z\u00e1kazn\u00edk\u016f u\u017e ode\u0161la ke konkurenci. Taktika je velmi dob\u0159e zn\u00e1m\u00e1 v odv\u011btv\u00ed letenek, kde roboti n\u011bkdy okam\u017eit\u011b \u201evypust\u00ed\u201c v\u0161echny letenky prakticky ihned po jejich zve\u0159ejn\u011bn\u00ed. Nap\u0159\u00edklad jeden z na\u0161ich klient\u016f \u2013 velk\u00e1 leteck\u00e1 spole\u010dnost \u2013 utrp\u011bl takov\u00e9mu \u00fatoku, kter\u00fd provedli \u010d\u00edn\u0161t\u00ed konkurenti. B\u011bhem dvou hodin jejich roboti objednali 100% letenek na ur\u010dit\u00e9 trasy.<\/p>\n

Sneakers bots<\/i><\/p>\n

Dal\u0161\u00ed popul\u00e1rn\u00ed sc\u00e9n\u00e1\u0159: roboti okam\u017eit\u011b nakupuj\u00ed celou \u0159adu produkt\u016f a jejich majitel\u00e9 je pak prod\u00e1vaj\u00ed pozd\u011bji za p\u0159emr\u0161t\u011bn\u00e9 ceny (pr\u016fm\u011brn\u00e1 p\u0159ir\u00e1\u017eka \u010din\u00ed 200%). Takov\u00fdmto robot\u016fm se \u0159\u00edk\u00e1 sneakers bots, proto\u017ee s t\u00edmto probl\u00e9mem se dob\u0159e znaj\u00ed v pr\u016fmyslu m\u00f3dn\u00edch tenisek, zejm\u00e9na pokud jde o limitovan\u00e9 kolekce. Roboti prakticky b\u011bhem minut skupovali pr\u00e1v\u011b vydan\u00e9 nov\u00e9 modely, zat\u00edmco blokovali web tak, aby se tam nemohli dostat skute\u010dn\u00ed u\u017eivatel\u00e9. Je to vz\u00e1cn\u00fd p\u0159\u00edpad, kdy o robotech psaly m\u00f3dn\u00ed \u010dasopisy. A\u010dkoli v podstat\u011b, p\u0159ekupn\u00edci vstupenek na presti\u017en\u00ed akce, jako jsou fotbalov\u00e9 z\u00e1pasy, pou\u017e\u00edvaj\u00ed stejn\u00fd sc\u00e9n\u00e1\u0159.<\/p>\n

Dal\u0161\u00ed sc\u00e9n\u00e1\u0159e<\/i><\/p>\n

Ale to nen\u00ed v\u0161echno. Existuje je\u0161t\u011b slo\u017eit\u011bj\u0161\u00ed varianta \u00fatok\u016f na logistiku, kter\u00e1 hroz\u00ed v\u00e1\u017en\u00fdmi ztr\u00e1tami. T\u00edmto mohou b\u00fdt roboti anga\u017eov\u00e1ni, pokud m\u00e1 slu\u017eba mo\u017enost \u201cPlatba p\u0159i p\u0159evzet\u00ed zbo\u017e\u00ed\u201d. Roboti zanech\u00e1vaj\u00ed fale\u0161n\u00e9 objedn\u00e1vky na takov\u00e9 zbo\u017e\u00ed, uv\u00e1d\u011bj\u00ed fale\u0161n\u00e9 nebo dokonce re\u00e1ln\u00e9 adresy nic netu\u0161\u00edc\u00edch lid\u00ed. Spole\u010dnosti tak nesou obrovsk\u00e9 n\u00e1klady na dopravu, skladov\u00e1n\u00ed a zji\u0161\u0165ov\u00e1n\u00ed podrobnost\u00ed. B\u011bhem t\u00e9to doby je zbo\u017e\u00ed nedostupn\u00e9 pro ostatn\u00ed klienty a nav\u00edc zab\u00edr\u00e1 m\u00edsto ve skladu.<\/p>\n

Co dal\u0161\u00edho? Boti zanech\u00e1vaj\u00ed masov\u00e9 fale\u0161n\u00e9 negativn\u00ed recenze na zbo\u017e\u00ed, zahlcuj\u00ed funkci \"vr\u00e1cen\u00ed platby\", blokuj\u00ed transakce, kradou \u00fadaje z\u00e1kazn\u00edk\u016f, spamuj\u00ed skute\u010dn\u00e9 kupuj\u00edc\u00ed \u2014 mo\u017enost\u00ed je mnoho. Dobrou uk\u00e1zkou je ned\u00e1vn\u00fd \u00fatok na DHL, Hermes, AldiTalk, Freenet, Snipes.com. Hacke\u0159i se vyd\u00e1vali<\/a><\/noindex>, \u017ee testuj\u00ed \"ochrann\u00e9 syst\u00e9my proti DDoS\", a nakonec znefunk\u010dnili port\u00e1l obchodn\u00edch klient\u016f spole\u010dnosti a v\u0161echna API. V\u00fdsledkem byly velk\u00e9 p\u0159eru\u0161en\u00ed dod\u00e1vek zbo\u017e\u00ed z\u00e1kazn\u00edk\u016fm.<\/p>\n

Zavolejte z\u00edtra<\/h2>\n

\nMinul\u00fd rok Federal Trade Commission (FTC) ozn\u00e1mila zdvojn\u00e1soben\u00ed po\u010dtu st\u00ed\u017enost\u00ed ze strany podnik\u016f a u\u017eivatel\u016f na spamov\u00e9 a podvodn\u00e9 telefonn\u00ed boty. Podle n\u011bkter\u00fdch odhad\u016f tvo\u0159\u00ed t\u00e9m\u011b\u0159 50%<\/a><\/noindex> v\u0161ech hovor\u016f.<\/p>\n

Stejn\u011b jako v p\u0159\u00edpadech DDoS jsou c\u00edle TDoS \u2014 masov\u00fdch \u00fatok\u016f bot\u016f na telefony \u2014 od \u201closov\u00e1n\u00ed\u201d a\u017e po nef\u00e9rovou konkurenci. Boti dok\u00e1\u017eou zahlcovat kontaktn\u00ed centra a zamezit skute\u010dn\u00fdm klient\u016fm. Tato metoda je \u00fa\u010dinn\u00e1 nejen pro call centra s \u201c\u017eiv\u00fdmi\u201d oper\u00e1tory, ale i tam, kde jsou pou\u017e\u00edv\u00e1ny syst\u00e9my AVR. Boti tak\u00e9 mohou hromadn\u011b napadat jin\u00e9 komunika\u010dn\u00ed kan\u00e1ly se z\u00e1kazn\u00edky (chaty, e-maily), naru\u0161ovat fungov\u00e1n\u00ed CRM syst\u00e9m\u016f a dokonce v ur\u010dit\u00e9 m\u00ed\u0159e negativn\u011b ovliv\u0148ovat \u0159\u00edzen\u00ed person\u00e1lu, nebo\u0165 oper\u00e1to\u0159i jsou p\u0159et\u00ed\u017eeni, sna\u017e\u00ed se zvl\u00e1dnout krizi. \u00datoky mohou b\u00fdt tak\u00e9 synchronizov\u00e1ny s tradi\u010dn\u00edm \u00fatokem DDoS na online zdroje ob\u011bti.<\/p>\n

Ned\u00e1vno podobn\u00fd \u00fatok naru\u0161il \u010dinnost z\u00e1chrann\u00e9 slu\u017eby 911<\/a><\/noindex> ve Spojen\u00fdch st\u00e1tech \u2014 oby\u010dejn\u00ed lid\u00e9, kte\u0159\u00ed akutn\u011b pot\u0159ebovali pomoc, se prost\u011b nemohli dovolat. P\u0159ibli\u017en\u011b ve stejnou dobu postihla stejn\u00e1 situace Dublinsk\u00fd zoologickou zahradu: nejm\u00e9n\u011b 5000 lid\u00ed obdr\u017eelo spam v podob\u011b textov\u00fdch SMS zpr\u00e1v, pob\u00edzej\u00edc\u00edch je k nal\u00e9hav\u00e9mu zavol\u00e1n\u00ed na telefonn\u00ed \u010d\u00edslo zoo a po\u017e\u00e1d\u00e1n\u00ed o neexistuj\u00edc\u00ed osobu.<\/p>\n

Wi-Fi nebude<\/h2>\n

\nKyberzlo\u010dinci mohou tak\u00e9 snadno zablokovat celou firemn\u00ed s\u00ed\u0165. \u010casto se blokov\u00e1n\u00ed IP pou\u017e\u00edv\u00e1 jako opat\u0159en\u00ed proti DDoS \u00fatok\u016fm. Ale to je nejen neefektivn\u00ed, ale tak\u00e9 velmi nebezpe\u010dn\u00e1 praxe. IP adresu je snadn\u00e9 naj\u00edt (nap\u0159\u00edklad pomoc\u00ed monitorov\u00e1n\u00ed zdroj\u016f) a snadno ji vym\u011bnit (nebo fal\u0161ovat). Na\u0161i klienti m\u011bli p\u0159ed p\u0159\u00edchodem do Variti p\u0159\u00edpady, kdy blokov\u00e1n\u00ed ur\u010dit\u00e9 IP jednodu\u0161e vypnulo Wi-Fi v jejich vlastn\u00edch kancel\u00e1\u0159\u00edch. Byl p\u0159\u00edpad, kdy klientovi \u201epodstr\u010dili\u201c pot\u0159ebnou IP a on zablokoval p\u0159\u00edstup k jeho zdroji u\u017eivatel\u016fm z cel\u00e9ho regionu, ani\u017e by si toho dlouho v\u0161iml, proto\u017ee zbytek zdroje fungoval bez probl\u00e9m\u016f.<\/p>\n

Co je nov\u00e9ho?<\/h2>\n

\nNov\u00e9 hrozby vy\u017eaduj\u00ed nov\u00e1 \u0159e\u0161en\u00ed pro ochranu. Nicm\u00e9n\u011b tato nov\u00e1 nika na trhu teprve za\u010d\u00edn\u00e1 vznikat. \u0158e\u0161en\u00ed pro efektivn\u00ed odr\u00e1\u017een\u00ed jednoduch\u00fdch \u00fatok\u016f bot\u016f je spousta, ale u slo\u017eit\u011bj\u0161\u00edch to tak jednoduch\u00e9 nen\u00ed. Mnoho \u0159e\u0161en\u00ed st\u00e1le pou\u017e\u00edv\u00e1 metody blokov\u00e1n\u00ed IP. Jin\u00fdm trv\u00e1 ur\u010ditou dobu, ne\u017e shrom\u00e1\u017ed\u00ed prim\u00e1rn\u00ed data pro zah\u00e1jen\u00ed pr\u00e1ce, a t\u011bchto 10-15 minut se m\u016f\u017ee st\u00e1t zranitelnost\u00ed. Existuj\u00ed \u0159e\u0161en\u00ed zalo\u017een\u00e1 na strojov\u00e9m u\u010den\u00ed, kter\u00e1 umo\u017e\u0148uj\u00ed ur\u010dit bota podle jeho chov\u00e1n\u00ed. A z\u00e1rove\u0148 se t\u00fdmy \u201et\u00e9\u201c strany chlub\u00ed, \u017ee maj\u00ed u\u017e boty, kter\u00e9 mohou napodobovat skute\u010dn\u00e9, kter\u00e9 nejsou od lidsk\u00fdch vzor\u016f k rozli\u0161en\u00ed.<\/p>\n

Co d\u011blat, pokud mus\u00edte bojovat s profesion\u00e1ln\u00edmi t\u00fdmy botmaker\u016f a slo\u017eit\u00fdmi, v\u00edcestup\u0148ov\u00fdmi \u00fatoky najednou na n\u011bkolika \u00farovn\u00edch?<\/p>\n

Na\u0161e zku\u0161enosti ukazuj\u00ed, \u017ee je t\u0159eba se soust\u0159edit na filtrov\u00e1n\u00ed nelegitimn\u00edch po\u017eadavk\u016f bez blokov\u00e1n\u00ed IP adres. Pro slo\u017eit\u00e9 DDoS \u00fatoky je pot\u0159eba filtraci prov\u00e1d\u011bt na n\u011bkolika \u00farovn\u00edch, v\u010detn\u011b transportn\u00ed \u00farovn\u011b, \u00farovn\u011b aplikac\u00ed a API rozhran\u00ed. D\u00edky tomu je mo\u017en\u00e9 odr\u00e1\u017eet i n\u00edzkofrekven\u010dn\u00ed \u00fatoky, kter\u00e9 jsou obvykle neviditeln\u00e9, a proto jsou \u010dasto propou\u0161t\u011bny d\u00e1l. Nakonec je tak\u00e9 nutn\u00e9 propustit v\u0161echny skute\u010dn\u00e9 u\u017eivatele i b\u011bhem aktivn\u00ed f\u00e1ze \u00fatoku.<\/p>\n

Za druh\u00e9, firm\u00e1m je pot\u0159eba umo\u017enit vytv\u00e1\u0159en\u00ed vlastn\u00edch v\u00edcestup\u0148ov\u00fdch ochrann\u00fdch syst\u00e9m\u016f, do nich\u017e budou krom\u011b n\u00e1stroj\u016f pro prevenci DDoS \u00fatok\u016f integrov\u00e1ny tak\u00e9 syst\u00e9my proti podvod\u016fm, kr\u00e1de\u017e\u00edm dat, ochran\u011b obsahu a tak d\u00e1le. <\/p>\n

Za t\u0159et\u00ed, mus\u00ed fungovat v re\u00e1ln\u00e9m \u010dase od prvn\u00edho po\u017eadavku \u2014 schopnost okam\u017eit\u011b reagovat na bezpe\u010dnostn\u00ed incidenty v\u00fdrazn\u011b zvy\u0161uje \u0161ance na prevenci \u00fatoku nebo sn\u00ed\u017een\u00ed jeho destruktivn\u00ed s\u00edly.<\/p>\n

Bl\u00edzk\u00e1 budoucnost: spr\u00e1va reputace a shroma\u017e\u010fov\u00e1n\u00ed velk\u00fdch dat pomoc\u00ed bot\u016f
\nHistorie DDoS se vyv\u00edjela od jednoduch\u00e9ho po slo\u017eit\u00e9. Zat\u00edmco na za\u010d\u00e1tku byla c\u00edlem \u00fato\u010dn\u00edk\u016f snaha o zastaven\u00ed webov\u00fdch str\u00e1nek, nyn\u00ed pova\u017euj\u00ed za efektivn\u011bj\u0161\u00ed c\u00edlit na kl\u00ed\u010dov\u00e9 obchodn\u00ed procesy.<\/p>\n

Slo\u017eitost \u00fatok\u016f bude nad\u00e1le r\u016fst, to je nevyhnuteln\u00e9. Krom\u011b toho, co \u0161patn\u00ed boti d\u011blaj\u00ed nyn\u00ed \u2014 kr\u00e1de\u017e dat a jejich fal\u0161ov\u00e1n\u00ed, vyd\u00edr\u00e1n\u00ed, spam \u2014 budou boti shroma\u017e\u010fovat data z velk\u00e9ho mno\u017estv\u00ed zdroj\u016f (Big Data) a vytv\u00e1\u0159et \"d\u016fv\u011bryhodn\u00e9\" fale\u0161n\u00e9 \u00fa\u010dty pro \u0159\u00edzen\u00ed vlivu, reputace nebo masov\u00e9ho phishingu.<\/p>\n

V sou\u010dasn\u00e9 dob\u011b si pouze velk\u00e9 spole\u010dnosti mohou dovolit investice do ochrany proti DDoS a bot\u016fm, ale ani ony obvykle nedok\u00e1\u017eou zcela sledovat a filtrovat provoz generovan\u00fd boty. Jedinou pozitivn\u00ed str\u00e1nkou slo\u017eit\u011bj\u0161\u00edch \u00fatok\u016f bot\u016f je, \u017ee to motivuje trh k vytv\u00e1\u0159en\u00ed \"inteligentn\u00edch\" a sofistikovan\u011bj\u0161\u00edch ochrann\u00fdch \u0159e\u0161en\u00ed.<\/p>\n

Co si mysl\u00edte \u2014 jak se bude vyv\u00edjet odv\u011btv\u00ed ochrany proti bot\u016fm a jak\u00e1 \u0159e\u0161en\u00ed jsou na trhu ji\u017e nyn\u00ed pot\u0159ebn\u00e1?
\n
Zdroj: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0430\u0440\u0443 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u0443\u0441\u043b\u0443\u0433 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0431\u044b\u043b\u043e \u0434\u043e\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u0438 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 DDoS-\u0430\u0442\u0430\u043a. \u041d\u043e \u0443\u0436\u0435 \u043a 1-\u043c\u0443 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0443 2019 \u0433\u043e\u0434\u0430 \u0442\u0435 \u0436\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u0438\u0445 \u043e\u0448\u0435\u043b\u043e\u043c\u043b\u044f\u044e\u0449\u0435\u043c \u0440\u043e\u0441\u0442\u0435 \u043d\u0430 84%. \u0410 \u0434\u0430\u043b\u044c\u0448\u0435 \u0432\u0441\u0435 \u043f\u043e\u0448\u043b\u043e \u043f\u043e \u043d\u0430\u0440\u0430\u0441\u0442\u0430\u044e\u0449\u0435\u0439. \u0414\u0430\u0436\u0435 \u043f\u0430\u043d\u0434\u0435\u043c\u0438\u044f \u043d\u0435 \u043f\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0430\u0442\u043c\u043e\u0441\u0444\u0435\u0440\u0435 \u043c\u0438\u0440\u0430 \u2014 \u043d\u0430\u043f\u0440\u043e\u0442\u0438\u0432, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0438 \u0441\u043f\u0430\u043c\u0435\u0440\u044b \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u043b\u0438 \u044d\u0442\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u044b\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":87698,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-87697","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DDoS p\u0159ech\u00e1z\u00ed do offline | ProHoster","description":"P\u0159ed p\u00e1r lety za\u010dala v\u00fdzkumn\u00e1 agentura a poskytovatel\u00e9 informa\u010dn\u00ed bezpe\u010dnosti pod\u00e1vat zpr\u00e1vy o","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/ddos-idet-v-offlajn","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47DDoS \u0438\u0434\u0435\u0442 \u0432 \u043e\u0444\u0444\u043b\u0430\u0439\u043d | ProHoster","og:description":"\u041f\u0430\u0440\u0443 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u0443\u0441\u043b\u0443\u0433 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0431\u044b\u043b\u043e \u0434\u043e\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u043e","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/ddos-idet-v-offlajn","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-09T11:42:31+00:00","article:modified_time":"2020-07-09T11:42:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"87697","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:46:50","updated":"2022-09-28 14:28:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/87697","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=87697"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/87697\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/87698"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=87697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=87697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=87697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}