{"id":55778,"date":"2020-01-28T00:00:00","date_gmt":"2020-01-27T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel"},"modified":"2020-02-18T14:03:55","modified_gmt":"2020-02-18T11:03:55","slug":"kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","title":{"rendered":"DDoS-i kaitse ettev\u00f5te korraldas ise DDoS-r\u00fcnnakuid, tunnustas selle asutaja","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"DDoS-i
\n2016. aastaks oli vDos saanud maailma k\u00f5ige populaarsemaks teenuseks DDoS-r\u00fcnnakute tellimiseks.<\/i><\/p>\n

Kuna usutakse vanden\u00f5uteooriatesse, v\u00e4idetakse, et viiruset\u00f5rjetootjad levitavad ise viiruseid ja DDoS-kaitseteenuste pakkujad algatavad neid r\u00fcnnakuid. Loomulikult on see v\u00e4ljam\u00f5eldis\u2026 v\u00f5i siis mitte?<\/p>\n

16. jaanuaril 2020 tunnustas New Jersey osariigi f\u00f6deraalne ringkonnakohtunik s\u00fc\u00fcdi<\/a><\/noindex> 22-aastane Tucker Preston, kes oli Georgia osariigi Maconi linnast, \u00fches s\u00fc\u00fcdistuste punktis, nimelt \"kaitstud arvutite kahjustamine programmide, koodide v\u00f5i k\u00e4skude edastamise kaudu\". Tucker oli BackConnect Security LLC asutaja ja pakkus DDoS-r\u00fcnnakute kaitset. Noor ettev\u00f5tja ei suutnud vastu seista kiusatusele k\u00e4tte maksta vastutulelikest klientidest.
\n<\/a><\/noindex>
\nTucker Prestoni traagiline lugu algas 2014. aastal, kui noor h\u00e4kker asutas koos s\u00f5ber Marshal Webbi ja BackConnect Security LLC, millest hiljem eraldus BackConnect, Inc. Septembris 2016 t\u00f5usis see firma esile kui osales vDos teenuse sulgemise operatsioonis, mis oli tol ajal maailma k\u00f5ige populaarsem DDoS-r\u00fcnnakute tellimise teenus. BackConnect v\u00e4itis siis, et nad olid ise saanud vDos'i kaudu r\u00fcnnaku osaliseks \u2014 ja viisid l\u00e4bi ebatavalise \"vastur\u00fcnnaku\", haarates 255 vastase IP-aadressi<\/a><\/noindex> BGP-\u00fclevaate kaudu. (BGP hijacking). Sellise r\u00fcnnaku l\u00e4biviimine oma huvide kaitsmiseks tekitas infotehnoloogia turvalisuse kogukonnas vastuolulisi arvamusi. Paljud arvavad, et BackConnect \u00fcletas lubatud piiri.<\/a><\/noindex> Lihtne BGP-\u00fclevaade toimub, kui kuulutatakse kellegi teise eelistatud aadress oma omana. \u00dchenduste\/tasuta teenusepakkujad aktsepteerivad selle ja see hakkab Internetis levima. N\u00e4iteks 2017. aastal olevat \"Rostelekom\" (AS12389)<\/p>\n

hakkanud kuulutama eelistusi Mastercard (AS26380), Visa ja m\u00f5nede teiste finantsorganisatsioonide kohta. Umbes samamoodi tegutses BackConnect, kui nad konfiskeerisid IP-aadresse bulgaaria teenusepakkuja Verdina.net-lt.<\/a><\/noindex> BackConnect'i tegevjuht Bryant Townsend hiljem<\/p>\n

pidas enda tegu \u00f5igustatuks. p\u00fc\u00fcdis end \u00f5igustada<\/a><\/noindex> NANOG-i postitustes r\u00e4\u00e4giti, et vaenlase aadressiruumi r\u00fcndamise otsus ei tulnud kergek\u00e4eliselt, kuid nad olid valmis oma tegude eest vastutama: \u201eKuigi meil oli v\u00f5imalus oma tegevust varjata, tundsime, et see oleks vale. Kulutasin palju aega, m\u00f5eldes sellele otsusele ja sellele, kuidas see v\u00f5ib negatiivselt m\u00f5jutada ettev\u00f5tet ja mind teatud inimeste silmis, kuid l\u00f5puks toetasin seda.\"<\/p>\n

Selgus, et BackConnect ei ole esmakordselt BGP-h\u00e4kkerit rakendanud, ning ettev\u00f5ttel on \u00fcldse tume ajalugu. Siiski tuleb m\u00e4rkida, et BGP-h\u00e4kkimist ei kasutata alati kuritegelikel eesm\u00e4rkidel. Brian Krebs kirjutab<\/a><\/noindex>, et ta kaitseb end DDoS-r\u00fcnnakute eest ettev\u00f5tte Prolexic Communications (n\u00fc\u00fcd osa Akamai Technologies) teenustega. Just nemad leiutasid, kuidas kasutada BGP h\u00e4kkimist DDoS-r\u00fcnnakute kaitseks.<\/p>\n

Kui DDoS-r\u00fcnnaku ohver p\u00f6\u00f6rdub Prolexicu abi saamiseks, suunab viimane kliendi IP-aadressid enda peale, mis v\u00f5imaldab neil anal\u00fc\u00fcsida ja filtreerida sissetulevat liiklust.<\/p>\n

Kuna BackConnect pakkus DDoS kaitsete teenuseid, viidi l\u00e4bi anal\u00fc\u00fcs, milliseid BGP-h\u00e4kke loetakse kliendi huvides seaduslikuks ja millised tunduvad kahtlased. Sellega arvestatakse sissetungimist teiste aadresside juurde, kui laialdaselt kuulutati v\u00e4lja kellegi teise prefiks kui oma ja kas on olemas kinnitatud leping kliendiga jne. Tabelist on n\u00e4ha, et m\u00f5ned BackConnect'i tegevused tunduvad v\u00e4ga kahtlased.<\/p>\n

\"DDoS-i<\/a><\/noindex><\/p>\n

Ilmselt on m\u00f5ni ohvritest kaebust esitanud BackConnect'i vastu. A luseid tunnistustes Prestoni (pdf)<\/a><\/noindex> ei ole nimetatud ettev\u00f5tet, mille kohus tunnustas kannatanuna. Ohvrit nimetatakse dokumendis kui Victim 1<\/i>.<\/p>\n

Nagu eelpool mainitud, algas BackConnect'i tegevuse uurimine p\u00e4rast vDos teenuse h\u00e4kkimist. Siis tuli avalikuks nimed<\/a><\/noindex> teenuse administraatoritest, samuti vDos andmebaas, sealhulgas registreeritud kasutajad ja andmed klientide kohta, kes maksid vDos-le DDoS-r\u00fcnnakute l\u00e4biviimise eest.<\/p>\n

Need andmed n\u00e4itasid, et \u00fcks vDos saidi konto oli avatud e-posti aadresside jaoks, mis on seotud domeeniga, mis on registreeritud Tucker Prestoni nimele. See konto algatas r\u00fcnnakud suure arvu sihtide vastu, sealhulgas mitmeid r\u00fcnnakuid v\u00f5rkudele, mis kuulusid Vaba tarkvarafondi<\/a><\/noindex> (FSF).<\/p>\n

2016. aastal \u00fctles endine FSF-i s\u00fcsteemiadministraator, et mittetulundus\u00fching kaalub mingil hetkel koost\u00f6\u00f6d BackConnectiga ning r\u00fcnnakud algasid peaaegu kohe p\u00e4rast seda, kui FSF teatas, et otsib teist firmat DDoS-i kaitseks.<\/p>\n

Vastavalt deklareeringu<\/a><\/noindex> USA \u00f5iguskaitseministeriumile, selle s\u00fc\u00fcdistuse alusel v\u00f5ib Taker Preston saada kuni 10 aastat vangistust ja kuni 250 000 dollari suuruse rahatrahvi, mis on kaks korda suurem kuriteo kogutulust v\u00f5i -kahjumist. Kohtuotsus tehakse 7. mail 2020.<\/p>\n

\nGlobalSign pakub skaleeritavaid PKI-lahendusi igas suuruses organisatsioonidele. \"DDoS-i<\/a><\/noindex>
\nKohtumiseks: +7 (499) 678 2210, sales-ru@globalsign.com.
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a 2016 \u0433\u043e\u0434\u0443 vDos \u0441\u0442\u0430\u043b \u0441\u0430\u043c\u044b\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u0432 \u043c\u0438\u0440\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c \u0434\u043b\u044f \u0437\u0430\u043a\u0430\u0437\u0430 DDoS-\u0430\u0442\u0430\u043a \u0415\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0442\u0435\u043e\u0440\u0438\u044f\u043c \u0437\u0430\u0433\u043e\u0432\u043e\u0440\u0430, \u0442\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u0430\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432\u0438\u0440\u0443\u0441\u044b, \u0430 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u0441\u0430\u043c\u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044e\u0442 \u044d\u0442\u0438 \u0430\u0442\u0430\u043a\u0438. \u041a\u043e\u043d\u0435\u0447\u043d\u043e, \u044d\u0442\u043e \u0432\u044b\u0434\u0443\u043c\u043a\u0438\u2026 \u0438\u043b\u0438 \u043d\u0435\u0442? 16 \u044f\u043d\u0432\u0430\u0440\u044f 2020 \u0433\u043e\u0434\u0430 \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u043a\u0440\u0443\u0436\u043d\u043e\u0439 \u0441\u0443\u0434 \u041d\u044c\u044e-\u0414\u0436\u0435\u0440\u0441\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0432\u0438\u043d\u043e\u0432\u043d\u044b\u043c 22-\u043b\u0435\u0442\u043d\u0435\u0433\u043e \u0422\u0430\u043a\u0435\u0440\u0430 \u041f\u0440\u0435\u0441\u0442\u043e\u043d\u0430 (Tucker Preston), \u0436\u0438\u0442\u0435\u043b\u044f \u0433\u043e\u0440\u043e\u0434\u0430 \u041c\u0435\u0439\u043a\u043e\u043d\u0430, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55778","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 DDoS-kaitseettev\u00f5te ise korraldas DDoS-r\u00fcnnakuid, tunnistas selle asutaja | ProHoster","description":"2016. aastaks vDos.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043e\u0442 DDoS \u0441\u0430\u043c\u0430 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0430 DDoS-\u0430\u0442\u0430\u043a\u0438, \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0435\u0451 \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c | ProHoster","og:description":"\u041a 2016 \u0433\u043e\u0434\u0443 vDos.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-27T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55778","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:02:37","updated":"2022-09-28 16:22:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55778","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=55778"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55778\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=55778"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=55778"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=55778"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}