{"id":55778,"date":"2020-01-28T00:00:00","date_gmt":"2020-01-27T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel"},"modified":"2020-02-18T14:03:55","modified_gmt":"2020-02-18T11:03:55","slug":"kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","title":{"rendered":"DDoS-kaitse ettev\u00f5te k\u00e4ivitas ise DDoS-r\u00fcnnakud, tunnustas selle asutaja.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"DDoS-kaitse
\n2016. aastaks oli vDos saanud maailma populaarseimaks DDoS-r\u00fcnnakute tellimise teenuseks.<\/i><\/p>\n

Usaldades conspiracy teooriaid, levitavad viiruset\u00f5rjetootjad ise viirusi ja DDoS-kaitseteenused k\u00e4ivitavad need r\u00fcnnakud ise. Loomulikult on see v\u00e4ljam\u00f5eldis\u2026 v\u00f5i mitte?<\/p>\n

16. jaanuaril 2020 j\u00e4ttis New Jersey f\u00f6deraalkohtus s\u00fc\u00fcdi m\u00f5istetud<\/a><\/noindex> 22-aastane Tucker Preston, Georgia osariigi Maconi elanik, \u00fches s\u00fc\u00fcdistuse punktis, nimelt \u2018kaitstud arvutite kahjustamine programmi, koodi v\u00f5i k\u00e4su edastamise teel\u2019. Tucker on BackConnect Security LLC asutaja, mis pakkus DDoS-kaitselahedusi. Noor \u00e4riinimene ei suutnud vastu seista k\u00e4ttemaksuhimu peale, et karistada koost\u00f6\u00f6altimat kliente.
\n<\/a><\/noindex>
\nTucker Prestoni kurb lugu algas 2014. aastal, kui noor h\u00e4kker koos oma s\u00f5bra Marshal Webbiga asutas ettev\u00f5tte BackConnect Security LLC, millest hiljem sai v\u00e4lja BackConnect, Inc. 2016. aasta septembris sai see firma t\u00e4helepanu.<\/a><\/noindex> vDos teenuse sulgemise operatsiooni k\u00e4igus, mis oli tol hetkel maailma populaarseim DDoS-r\u00fcnnakute tellimise teenus. Ettev\u00f5te BackConnect olevat siis ise olnud vDos kaudu r\u00fcnnaku all ja tegi ebatavalise \u00abvastur\u00fcnnaku\u00bb, haarates 255 vaenlase IP-aadressi. BGP-p\u00fc\u00fcniste<\/a><\/noindex> (BGP hijacking). Sellise r\u00fcnnaku korraldamine oma huvide kaitsmiseks tekitas informatsiooni- ja turvatehnoloogia kogukonnas vastuolulisi arvamusi. Paljud pidasid BackConnect'i tegevust lubamatuks.<\/p>\n

Lihtne BGP-p\u00fc\u00fcnis toimub, kui r\u00fcnnakutegija kuulutab kellegi teise eelistamist enda omaks. \u00dchendused \/ peer-id v\u00f5tavad selle vastu, ja see hakkab levima kogu v\u00f5rgus. N\u00e4iteks 2017. aastal v\u00e4idetavalt tarkvaravea t\u00f5ttu hakkas \u00abRostelekom\u00bb (AS12389) kuulutama eelistusi<\/a><\/noindex> Mastercard (AS26380), Visa ning mitmete teiste finantsorganisatsioonide osas. Just sama toimis ka BackConnect, kui nad omastasid IP-aadresse bulgaaria hosting-ettev\u00f5ttelt Verdina.net.<\/p>\n

BackConnect'i tegevjuht Bryant Townsend hiljem pidas end \u00f5igustatuks.<\/a><\/noindex> NANOG-i meilide vahel network operaatoritele. Ta r\u00e4\u00e4kis, et otsus r\u00fcnnata vaenlase aadressiruumi ei tulnud kergelt, kuid nad on valmis oma teo eest vastutama: \u201eKuigi meil oli v\u00f5imalus oma tegusid varjata, tundsime, et see oleks vale. Ma kulutasin palju aega, m\u00f5eldes sellele otsusele ja sellele, kuidas see v\u00f5iks ettev\u00f5tet ja mind teatud inimeste silmis negatiivselt m\u00f5jutada, kuid l\u00f5puks toetasime seda.\u201d<\/p>\n

Nagu selgus, ei ole BackConnect esimene kord, kui BGP-r\u00fcnnakut rakendatakse, ja ettev\u00f5tte ajalugu on \u00fcldiselt tumedam. Kuigi tuleb m\u00e4rkida, et BGP-r\u00fcnnakut ei kasutata alati pahatahtlikel eesm\u00e4rkidel. Brian Krebs writes<\/a><\/noindex>, et ta kasutab DDoS-i kaitseks Prolexic Communicationsi teenuseid (n\u00fc\u00fcd osa Akamai Technologiesist). Just nemad leiutasid, kuidas kasutada BGP-r\u00fcnnakut kaitseks DDoS-r\u00fcnnakute eest.<\/p>\n

Kui DDoS-r\u00fcnnaku ohver p\u00f6\u00f6rdub Prolexici poole abi saamiseks, suunab Prolexic kliendi IP-aadressid enda peale, mis v\u00f5imaldab neil anal\u00fc\u00fcsida ja filtreerida sisenevat liiklust.<\/p>\n

Kuna BackConnect pakkus DDoS-kaitse teenuseid, viidi l\u00e4bi anal\u00fc\u00fcs, millised BGP-rikkumised v\u00f5iksid olla klientide huvides seaduslikud ja millised n\u00e4evad v\u00e4lja kahtlased. Arvesse v\u00f5etakse, kui kaua on v\u00f5\u00f5raste aadresside \u00fclev\u00f5tmine kestnud, kui laialdaselt on v\u00f5\u00f5rast eelist oma omadena reklaamitud, kas on olemas kinnitatud kokkulepe kliendiga jne. Tabelist n\u00e4htub, et m\u00f5ned BackConnecti tegevused n\u00e4evad v\u00e4ga kahtlased v\u00e4lja.<\/p>\n

\"DDoS-kaitse<\/a><\/noindex><\/p>\n

Tundub, et m\u00f5ned kannatanud on esitanud kaebuse BackConnecti vastu. Prestoni tunnistustes (pdf)<\/a><\/noindex> ei ole mainitud ettev\u00f5tte nime, mille kohus tunnistas kannatanud. Ohverdokumentis on viidatud kui Victim 1<\/i>.<\/p>\n

Nagu eespool mainitud, algas BackConnecti tegevuse uurimine p\u00e4rast vDos teenuse h\u00e4kkimist. Siis saadi teada nimed<\/a><\/noindex> teenuse administraatoritest, samuti vDos andmebaas, sealsed registreeritud kasutajad ja kirjed klientidest, kes maksid vDos-ile DDoS-r\u00fcnnete l\u00e4biviimise eest.<\/p>\n

Need this account opened on the vDos site was linked to email addresses associated with a domain registered under the name of Tucker Preston. This account initiated attacks on a large number of targets, including multiple attacks on networks owned by Free Software Foundation<\/a><\/noindex> (FSF).<\/p>\n

In 2016, a former sysadmin of the FSF stated that the non-profit organization at one point considered working with BackConnect, and the attacks began almost immediately after the FSF announced that it would seek another firm for DDoS protection.<\/p>\n

Vastavalt v\u00e4itele<\/a><\/noindex> The U.S. Department of Justice has indicated that Tucker Preston could face a prison sentence of up to 10 years and a fine of up to $250,000, which is double the total profit or loss from the crime. Sentencing is set for May 7, 2020.<\/p>\n

\nGlobalSign offers scalable PKI solutions for organizations of any size. \"DDoS-kaitse<\/a><\/noindex>
\nMore info: +7 (499) 678 2210, sales-ru@globalsign.com.
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a 2016 \u0433\u043e\u0434\u0443 vDos \u0441\u0442\u0430\u043b \u0441\u0430\u043c\u044b\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u0432 \u043c\u0438\u0440\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c \u0434\u043b\u044f \u0437\u0430\u043a\u0430\u0437\u0430 DDoS-\u0430\u0442\u0430\u043a \u0415\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0442\u0435\u043e\u0440\u0438\u044f\u043c \u0437\u0430\u0433\u043e\u0432\u043e\u0440\u0430, \u0442\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u0430\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432\u0438\u0440\u0443\u0441\u044b, \u0430 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u0441\u0430\u043c\u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044e\u0442 \u044d\u0442\u0438 \u0430\u0442\u0430\u043a\u0438. \u041a\u043e\u043d\u0435\u0447\u043d\u043e, \u044d\u0442\u043e \u0432\u044b\u0434\u0443\u043c\u043a\u0438\u2026 \u0438\u043b\u0438 \u043d\u0435\u0442? 16 \u044f\u043d\u0432\u0430\u0440\u044f 2020 \u0433\u043e\u0434\u0430 \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u043a\u0440\u0443\u0436\u043d\u043e\u0439 \u0441\u0443\u0434 \u041d\u044c\u044e-\u0414\u0436\u0435\u0440\u0441\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0432\u0438\u043d\u043e\u0432\u043d\u044b\u043c 22-\u043b\u0435\u0442\u043d\u0435\u0433\u043e \u0422\u0430\u043a\u0435\u0440\u0430 \u041f\u0440\u0435\u0441\u0442\u043e\u043d\u0430 (Tucker Preston), \u0436\u0438\u0442\u0435\u043b\u044f \u0433\u043e\u0440\u043e\u0434\u0430 \u041c\u0435\u0439\u043a\u043e\u043d\u0430, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55778","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DDoS-kaitsefirma k\u00e4ivitas ise DDoS-r\u00fcnnakuid, tunnistas selle asutaja | ProHoster","description":"Kuna 2016. aastaks oli vDos maailmas k\u00f5ige populaarsem DDoS-r\u00fcnnakute tellimise teenus. Kui uskuda vanden\u00f5uteooriaid, levitavad viiruset\u00f5rjetooted ise viirusi ja DDoS-kaitseteenused algatavad ise neid r\u00fcnnakuid. Muidugi on see v\u00e4ljam\u00f5eldis\u2026 v\u00f5i mitte? 16. jaanuaril 2020 leidis New Jersey f\u00f6deraalne ringkonnakohus 22-aastane Tucker Preston, kes on Meikoni elanik, s\u00fc\u00fcdi.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043e\u0442 DDoS \u0441\u0430\u043c\u0430 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0430 DDoS-\u0430\u0442\u0430\u043a\u0438, \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0435\u0451 \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c | ProHoster","og:description":"\u041a 2016 \u0433\u043e\u0434\u0443 vDos \u0441\u0442\u0430\u043b \u0441\u0430\u043c\u044b\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u0432 \u043c\u0438\u0440\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c \u0434\u043b\u044f \u0437\u0430\u043a\u0430\u0437\u0430 DDoS-\u0430\u0442\u0430\u043a \u0415\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0442\u0435\u043e\u0440\u0438\u044f\u043c \u0437\u0430\u0433\u043e\u0432\u043e\u0440\u0430, \u0442\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u0430\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432\u0438\u0440\u0443\u0441\u044b, \u0430 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u0441\u0430\u043c\u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044e\u0442 \u044d\u0442\u0438 \u0430\u0442\u0430\u043a\u0438. \u041a\u043e\u043d\u0435\u0447\u043d\u043e, \u044d\u0442\u043e \u0432\u044b\u0434\u0443\u043c\u043a\u0438\u2026 \u0438\u043b\u0438 \u043d\u0435\u0442? 16 \u044f\u043d\u0432\u0430\u0440\u044f 2020 \u0433\u043e\u0434\u0430 \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u043a\u0440\u0443\u0436\u043d\u043e\u0439 \u0441\u0443\u0434 \u041d\u044c\u044e-\u0414\u0436\u0435\u0440\u0441\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0432\u0438\u043d\u043e\u0432\u043d\u044b\u043c 22-\u043b\u0435\u0442\u043d\u0435\u0433\u043e \u0422\u0430\u043a\u0435\u0440\u0430 \u041f\u0440\u0435\u0441\u0442\u043e\u043d\u0430 (Tucker Preston), \u0436\u0438\u0442\u0435\u043b\u044f \u0433\u043e\u0440\u043e\u0434\u0430 \u041c\u0435\u0439\u043a\u043e\u043d\u0430,","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-27T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55778","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:02:37","updated":"2022-09-28 16:22:21"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55778","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=55778"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55778\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=55778"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=55778"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=55778"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}