Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba

Tsarin nazarin zirga-zirga ba tare da yanke shi ba. Wannan hanya ana kiranta kawai “koyan injina”. Ya bayyana cewa idan an ciyar da babban adadin zirga-zirgar ababen hawa zuwa shigar da na'ura ta musamman, tsarin zai iya gano ayyukan muggan code a cikin zirga-zirgar rufaffiyar tare da babban matakin yuwuwar.

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba

Barazana kan layi sun canza kuma sun zama mafi wayo. Kwanan nan, ainihin manufar kai hari da tsaro ya canza. Adadin abubuwan da ke faruwa akan hanyar sadarwa ya karu sosai. Hare-hare sun zama mafi zamani kuma masu kutse suna da nisa sosai.

A cewar kididdigar Cisco, a cikin shekarar da ta gabata, maharan sun ninka adadin malware da suke amfani da su don ayyukansu, ko kuma, boye-boye don boye su. An sani daga ka'idar cewa "daidai" ɓoyayyen algorithm ba za a iya karya ba. Don fahimtar abin da ke ɓoye a cikin ɓoyayyun zirga-zirgar zirga-zirgar, ya zama dole ko dai a ɓoye shi da sanin maɓalli, ko ƙoƙarin ɓoye shi ta amfani da dabaru daban-daban, ko yin kutse kai tsaye, ko amfani da wasu nau'ikan lahani a cikin ka'idojin sirri.

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Hoton barazanar hanyar sadarwa na zamaninmu

Injin aiki

Sanin fasaha a cikin mutum! Kafin yin magana game da yadda fasahar ɓoye ɓoyayyen na'ura da kanta ke aiki, ya zama dole a fahimci yadda fasahar sadarwar jijiyoyi ke aiki.

Koyon na'ura wani yanki ne mai fa'ida na hankali na wucin gadi wanda ke nazarin hanyoyin gina algorithms waɗanda zasu iya koyo. Wannan kimiyya an yi niyya ne don ƙirƙirar ƙirar lissafi don “horon” kwamfuta. Manufar koyo shine tsinkayar wani abu. A fahimtar mutum, muna kiran wannan tsari kalmar "hikima". Hikima tana bayyana kanta a cikin mutanen da suka rayu na dogon lokaci (yaro mai shekaru 2 ba zai iya zama mai hikima ba). Lokacin da muka juya zuwa ga manyan abokan neman shawara, muna ba su wasu bayanai game da taron (bayanan shigarwa) kuma mu nemi taimako. Su kuma, suna tunawa da duk wani yanayi na rayuwa wanda ke da alaƙa da matsalar ku (tushen ilimi) kuma, bisa ga wannan ilimin (bayanai), suna ba mu nau'in tsinkaya (nasiha). An fara kiran irin wannan nasihar ana kiranta hasashe domin mai ba da shawarar bai san tabbas abin da zai faru ba, sai dai kawai ya ɗauka. Abin da ya faru a rayuwa ya nuna cewa mutum yana iya yin gaskiya, ko kuma ya yi kuskure.

Kada ku kwatanta hanyoyin sadarwa na jijiyoyi tare da algorithm reshe (idan kuma). Waɗannan abubuwa ne daban-daban kuma akwai bambance-bambance masu mahimmanci. Algorithm na reshe yana da bayyanannen “fahimtar” abin da za a yi. Zan nuna da misalai.

Aiki. Ƙayyade nisan birki na mota dangane da ƙirƙirata da shekarar da aka yi ta.

Misali na reshe algorithm. Idan mota mai lamba 1 ce kuma an sake shi a shekarar 2012, nisan birkinta ya kai mita 10, in ba haka ba, idan motar mai lamba 2 ce kuma an sake ta a 2011, da sauransu.

Misalin hanyar sadarwa na jijiyoyi. Muna tattara bayanai kan nisan birki na mota a cikin shekaru 20 da suka gabata. Ta hanyar yin da shekara, muna tattara tebur na nau'in "shekara-shekara na nisa-birki". Muna ba da wannan tebur zuwa cibiyar sadarwar jijiyoyi kuma mu fara koyar da shi. Ana gudanar da horo kamar haka: muna ciyar da bayanai zuwa cibiyar sadarwar jijiyoyi, amma ba tare da hanyar birki ba. Neuron yana ƙoƙarin yin hasashen abin da nisan birki zai kasance bisa teburin da aka ɗora a ciki. Yana tsinkayar wani abu kuma ya tambayi mai amfani "Shin daidai ne?" Kafin tambayar, ta ƙirƙiri shafi na huɗu, ginshiƙin zato. Idan tana da gaskiya, to sai ta rubuta 1 a shafi na huɗu, idan ta yi kuskure, ta rubuta 0. Cibiyar sadarwa ta jijiyoyi ta ci gaba zuwa taron na gaba (ko da ya yi kuskure). Wannan shine yadda hanyar sadarwar ke koyo kuma lokacin da aka kammala horo (an kai ga wani ma'auni na haɗuwa), muna ƙaddamar da bayanai game da motar da muke sha'awar kuma a ƙarshe samun amsa.

Don cire tambaya game da ma'aunin haɗuwa, zan bayyana cewa wannan wata dabara ce da aka samo ta hanyar ƙididdiga. Misali mai ban sha'awa na hanyoyin haɗin kai guda biyu daban-daban. Ja - haɗin gwiwar binary, shuɗi - haɗuwa ta al'ada.

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Binomial da rabon yuwuwar al'ada

Don ƙarin bayani, tambayi tambayar "Mene ne yiwuwar haɗuwa da dinosaur?" Akwai yiwuwar amsoshi 2 anan. Zaɓin 1 - ƙananan ƙananan (jafin shuɗi). Zabin 2 - ko dai taro ko a'a (ja jadawali).

Tabbas, kwamfuta ba mutum ba ce kuma tana koya daban. Akwai nau'ikan horon dokin ƙarfe guda biyu: koyo na tushen shari'a и deductive ilmantarwa.

Koyarwa bisa ga misali hanya ce ta koyarwa ta amfani da dokokin lissafi. Masana ilimin lissafi suna tattara tebur na ƙididdiga, zana ƙarshe kuma suna ɗaukar sakamakon a cikin hanyar sadarwar jijiyoyi - dabara don ƙididdigewa.

Rage koyo - koyo yana faruwa gaba ɗaya a cikin neuron (daga tarin bayanai zuwa bincikensa). Anan an kafa tebur ba tare da dabara ba, amma tare da kididdiga.

Faɗin bayyani na fasaha zai ɗauki wasu labarai guda goma sha biyu. A yanzu, wannan zai ishe mu fahimtar gaba ɗaya.

Neuroplasticity

A cikin ilmin halitta akwai irin wannan ra'ayi - neuroplasticity. Neuroplasticity shine ikon neurons (kwayoyin kwakwalwa) don yin aiki "bisa ga halin da ake ciki." Misali, mutumin da ya rasa ganinsa ya fi jin sauti, yana wari kuma ya fi sanin abubuwa. Wannan yana faruwa ne saboda gaskiyar cewa ɓangaren kwakwalwa (ɓangaren neurons) da ke da alhakin gani yana sake rarraba aikinsa zuwa wasu ayyuka.

Misali mai ban mamaki na neuroplasticity a rayuwa shine BrainPort lollipop.

A cikin 2009, Jami'ar Wisconsin a Madison ta sanar da sakin sabuwar na'ura wanda ya haɓaka ra'ayoyin "nuna harshe" - an kira shi BrainPort. BrainPort yana aiki bisa ga algorithm mai zuwa: Ana aika siginar bidiyo daga kyamara zuwa na'ura mai sarrafawa, wanda ke sarrafa zuƙowa, haske da sauran sigogin hoto. Hakanan yana jujjuya siginonin dijital zuwa abubuwan motsa jiki na lantarki, da gaske suna ɗaukar ayyukan retina.

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Lollipop na BrainPort tare da tabarau da kamara

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
BrainPort yana aiki

Haka da kwamfuta. Idan cibiyar sadarwar jijiyoyi ta fahimci canji a cikin tsari, ya dace da shi. Wannan shine mabuɗin fa'idar hanyoyin sadarwar jijiyoyi idan aka kwatanta da sauran algorithms - cin gashin kai. Wani nau'in ɗan adam.

Rufaffen Traffic Analytics

Rufaffen Traffic Analytics wani bangare ne na tsarin Stealthwatch. Stealthwatch shine shigarwar Cisco cikin sa ido kan tsaro da hanyoyin nazari waɗanda ke ba da damar bayanan telemetry na kasuwanci daga abubuwan more rayuwa na cibiyar sadarwa.

Kasuwancin Stealthwatch ya dogara ne akan Lasisin Ƙimar Yaɗawa, Mai Tara Tafiya, Console na Gudanarwa da kayan aikin Sensor Flow.

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Cisco Stealthwatch Interface

Matsalar boye-boye ta yi tsanani sosai saboda an fara rufaffen ababen hawa da yawa. A baya can, kawai an rufaffen lambar (mafi yawa), amma yanzu duk zirga-zirgar ababen hawa an rufaffen su kuma raba bayanan "tsabta" daga ƙwayoyin cuta ya zama mafi wahala. Misali mai ban mamaki shine WannaCry, wanda yayi amfani da Tor don ɓoye kasancewar sa akan layi.

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Hane-hane na haɓakar ɓoyayyen zirga-zirga akan hanyar sadarwa

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Encryption a cikin macroeconomics

Tsarin Encrypted Traffic Analytics (ETA) ya zama dole daidai don aiki tare da ɓoyayyen zirga-zirga ba tare da ɓoye shi ba. Masu kai hare-hare suna da wayo kuma suna amfani da algorithms boye-boye na crypto-resistant, kuma karya su ba kawai matsala ba ce, har ma da tsada sosai ga ƙungiyoyi.

Tsarin yana aiki kamar haka. Wasu zirga-zirga suna zuwa kamfanin. Ya fada cikin TLS (Tsaron layin sufuri). Bari mu ce an rufaffen zirga-zirga. Muna ƙoƙarin amsa tambayoyi da yawa game da irin haɗin da aka yi.

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Yadda tsarin Encrypted Traffic Analytics (ETA) ke aiki

Don amsa waɗannan tambayoyin muna amfani da koyon inji a cikin wannan tsarin. Ana ɗaukar bincike daga Cisco kuma bisa ga waɗannan binciken an ƙirƙiri tebur daga sakamako 2 - qeta da zirga-zirgar "mai kyau". Tabbas, ba mu san tabbas irin nau'in zirga-zirgar ababen hawa sun shiga tsarin kai tsaye a halin yanzu a cikin lokaci ba, amma zamu iya gano tarihin zirga-zirgar a ciki da wajen kamfanin ta amfani da bayanai daga matakin duniya. A ƙarshen wannan mataki, muna samun babban tebur tare da bayanai.

Dangane da sakamakon binciken, an gano halayen halayen - wasu ƙa'idodi waɗanda za a iya rubuta su a cikin sigar lissafi. Waɗannan dokoki za su bambanta sosai dangane da ma'auni daban-daban - girman fayilolin da aka canjawa wuri, nau'in haɗin kai, ƙasar da wannan zirga-zirgar ya fito, da dai sauransu. Sakamakon aikin, babban tebur ɗin ya juya ya zama tarin tarin dabaru. Akwai kaɗan daga cikinsu, amma wannan bai isa ba don aikin jin daɗi.

Bayan haka, ana amfani da fasahar koyan na'ura - tsarin haɗin kai kuma bisa sakamakon haɗuwa za mu sami maɗaukaki - maɓalli, inda lokacin da aka fitar da bayanan za mu sami canji (tuta) a matsayi na sama ko ƙasa.

Matsayin da ya haifar shine samun saitin abubuwan da ke haifar da rudani wanda ya rufe 99% na zirga-zirga.

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Matakan binciken ababen hawa a cikin ETA

A sakamakon aikin, an warware wata matsala - harin daga ciki. Babu sauran buƙatar mutane a tsakiyar tace zirga-zirga da hannu (Ina nutse da kaina a wannan lokacin). Da fari dai, ba kwa buƙatar kashe kuɗi da yawa akan ƙwararren mai kula da tsarin (Na ci gaba da nutsar da kaina). Abu na biyu, babu haɗarin hacking daga ciki (aƙalla wani ɓangare).

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Ra'ayin Mutum-in-da-Tsakiya ya ƙare

Yanzu, bari mu gano menene tsarin ya dogara da shi.

Tsarin yana aiki akan ka'idojin sadarwa na 4: TCP/IP - Yarjejeniyar Canja wurin bayanan Intanet, DNS - uwar garken sunan yanki, TLS - ka'idodin tsaro na sufuri, SPLT (SpaceWire Physical Layer Tester) - gwajin Layer sadarwa na jiki.

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Ka'idojin aiki tare da ETA

Ana yin kwatance ta hanyar kwatanta bayanai. Yin amfani da ka'idojin TCP/IP, ana bincika sunan rukunin yanar gizon (ziyartar tarihi, manufar ƙirƙirar rukunin yanar gizon, da sauransu), godiya ga ka'idar DNS, zamu iya watsar da adiresoshin rukunin "mara kyau". Ka'idar TLS tana aiki tare da sawun yatsa na rukunin yanar gizo kuma tana tabbatar da rukunin yanar gizon akan ƙungiyar amsawar gaggawa ta kwamfuta (cert). Mataki na ƙarshe na bincika haɗin kai shine dubawa a matakin jiki. Ba a bayyana cikakkun bayanai game da wannan mataki ba, amma batun shine kamar haka: duba sine da cosine masu lankwasa na hanyoyin watsa bayanai akan shigarwar oscillographic, watau. Godiya ga tsarin buƙatun a Layer na jiki, mun ƙayyade manufar haɗin gwiwa.

Sakamakon aikin tsarin, za mu iya samun bayanai daga ɓoyayyiyar zirga-zirga. Ta hanyar nazarin fakiti, za mu iya karanta bayanai da yawa kamar yadda zai yiwu daga filayen da ba a ɓoye a cikin fakitin kanta. Ta hanyar duba fakitin a Layer na jiki, mun gano halaye na fakitin (bangare ko gaba ɗaya). Har ila yau, kar a manta game da sunan shafukan. Idan buƙatar ta fito daga wasu tushen albasa, bai kamata ku amince da shi ba. Don sauƙaƙe aiki tare da irin wannan bayanan, an ƙirƙiri taswirar haɗari.

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Sakamakon aikin ETA

Kuma duk abin da alama yana da kyau, amma bari muyi magana game da ƙaddamar da cibiyar sadarwa.

Aiwatar da jiki na ETA

Yawan nuances da dabara sun taso a nan. Da fari dai, lokacin ƙirƙirar irin wannan
cibiyoyin sadarwa tare da babban matakin software, ana buƙatar tattara bayanai. Tattara bayanai da hannu gaba daya
daji, amma aiwatar da tsarin mayar da martani ya riga ya fi ban sha'awa. Na biyu, bayanan
ya kamata a kasance da yawa, wanda ke nufin cewa dole ne na'urori masu auna sigina na cibiyar sadarwa suyi aiki
ba kawai mai cin gashin kansa ba, har ma a cikin kyakkyawan yanayi, wanda ke haifar da matsaloli da yawa.

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Sensors da tsarin agogon Stealthwatch

Shigar da firikwensin abu ɗaya ne, amma saita shi aiki ne na daban. Don saita na'urori masu auna firikwensin, akwai hadaddun da ke aiki bisa ga topology mai zuwa - ISR = Cisco Integrated Services Router; ASR = Cisco Aggregation Services Router; CSR = Cisco Cloud Services Router; WLC = Cisco Wireless LAN Controller; IE = Cisco Industrial Ethernet Switch; ASA = Cisco Adaptive Security Appliance; FTD = Cisco Firepower Barazana Tsaro Magani; WSA = Kayan Aikin Tsaro na Yanar Gizo; ISE = Injin Sabis na Shaida

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Cikakken saka idanu yana la'akari da kowane bayanan telemetric

Masu gudanar da hanyar sadarwa sun fara fuskantar arrhythmia daga adadin kalmomin “Cisco” a cikin sakin layi na baya. Farashin wannan abin al'ajabi ba karami bane, amma wannan ba shine abin da muke magana ba a yau ...

Za a tsara halayen dan dandatsa kamar haka. Stealthwatch a hankali yana sa ido kan ayyukan kowace na'ura akan hanyar sadarwa kuma yana da ikon ƙirƙirar tsari na al'ada. Bugu da ƙari, wannan maganin yana ba da zurfin fahimta game da halayen da ba su dace ba da aka sani. Maganin yana amfani da kusan 100 daban-daban algorithms bincike ko heuristics wanda ke magance nau'ikan halayen zirga-zirga daban-daban kamar su dubawa, firam ɗin ƙararrawa, shiga-ƙarfi, kama bayanan da ake zargi, zubar da bayanai, da sauransu. Abubuwan tsaro da aka jera sun faɗi ƙarƙashin nau'in ƙararrawa masu ma'ana. Wasu al'amuran tsaro kuma na iya tayar da ƙararrawa da kansu. Don haka, tsarin zai iya daidaita al'amuran da ba a sani ba da yawa kuma ya haɗa su tare don tantance yiwuwar nau'in harin, tare da haɗa shi zuwa takamaiman na'ura da mai amfani (Hoto 2). A nan gaba, za a iya yin nazarin abin da ya faru a kan lokaci tare da la'akari da bayanan telemetry masu alaƙa. Wannan ya ƙunshi bayanan mahallin a mafi kyawun sa. Likitocin da ke bincika majiyyaci don fahimtar abin da ba daidai ba ba sa kallon alamun a ware. Suna kallon babban hoto don yin ganewar asali. Hakanan, Stealthwatch yana ɗaukar duk wani aiki maras kyau akan hanyar sadarwar kuma yana bincika shi gabaɗaya don aika ƙararrawa na sane da mahallin, ta haka yana taimakawa ƙwararrun tsaro ba da fifikon haɗari.

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Gano anomaly ta amfani da ƙirar ɗabi'a

Aiwatar da hanyar sadarwa ta zahiri yayi kama da haka:

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Zaɓin tura cibiyar sadarwar reshe (a sauƙaƙe)

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Zaɓin tura cibiyar sadarwar reshe

An tura hanyar sadarwar, amma tambaya game da neuron ya kasance a buɗe. Sun shirya hanyar sadarwar watsa bayanai, sun sanya na'urori masu auna firikwensin a kan ƙofa kuma sun ƙaddamar da tsarin tattara bayanai, amma neuron bai shiga cikin lamarin ba. Wallahi.

Multilayer jijiya cibiyar sadarwa

Tsarin yana nazarin halayen mai amfani da na'ura don gano cututtuka masu muni, sadarwa tare da umarni da sabar sarrafawa, ƙwace bayanai, da yuwuwar aikace-aikacen da ba a so da ke gudana a cikin kayan aikin ƙungiyar. Akwai nau'ikan sarrafa bayanai da yawa inda haɗin kaifin basira, koyan na'ura, da dabarun ƙididdiga na lissafi ke taimakawa cibiyar sadarwa da kanta ta koyi ayyukanta na yau da kullun don ta iya gano munanan ayyuka.

Bututun bincike na tsaro na cibiyar sadarwa, wanda ke tattara bayanan telemetry daga dukkan sassan cibiyar sadarwa, gami da rufaffen zirga-zirga, siffa ce ta musamman na agogon Stealthwatch. Yana ƙara haɓaka fahimtar abin da ba shi da kyau, sannan ya rarraba ainihin abubuwan mutum ɗaya na “ayyukan barazanar,” kuma a ƙarshe ya yanke hukunci game da ko na'urar ko mai amfani da gaske an lalatar da su. Ƙarfin haɗa ƙananan ɓangarorin da ke samar da shaida don yanke shawara na ƙarshe game da ko an lalata wani kadara ya zo ta hanyar bincike da kuma daidaitawa sosai.

Wannan ikon yana da mahimmanci saboda kasuwanci na yau da kullun na iya karɓar adadin ƙararrawa a kowace rana, kuma ba shi yiwuwa a bincika kowane ɗayan saboda ƙwararrun tsaro suna da ƙarancin albarkatu. Tsarin koyan na'ura yana aiwatar da bayanai masu ɗimbin yawa a kusa da ainihin lokaci don gano mahimman abubuwan da suka faru tare da babban ƙarfin gwiwa, kuma yana da ikon samar da fayyace darussa na aiki don ƙuduri mai sauri.

Bari mu kalli dabaru na koyon injina da yawa da Stealthwatch ke amfani da shi. Lokacin da aka ƙaddamar da wani abin da ya faru ga injin koyan injuna na Stealthwatch, yana tafiya ta hanyar bincike na tsaro wanda ke amfani da haɗe-haɗe na dabarun koyan na'ura da ba sa kulawa.

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Ƙarfin koyan inji mai-mataki

Mataki na 1. Gano Anomaly da ƙirar amintattu

A wannan matakin, kashi 99% na zirga-zirga ana watsar da su ta hanyar amfani da na'urorin gano abubuwan da ba su da kyau. Waɗannan na'urori masu auna firikwensin tare suna samar da ƙira masu rikitarwa na abin da ke al'ada kuma menene, akasin haka, mara kyau. Duk da haka, rashin daidaituwa ba lallai ba ne mai cutarwa. Yawancin abubuwan da ke faruwa akan hanyar sadarwar ku ba su da alaƙa da barazanar—abin ban mamaki ne kawai. Yana da mahimmanci a rarraba irin waɗannan hanyoyin ba tare da la'akari da halayen barazana ba. Don haka, ana ci gaba da nazarin sakamakon irin waɗannan na'urori don kama wani baƙon hali wanda za'a iya bayyanawa da amincewa. A ƙarshe, ƙaramin juzu'i ne kawai na mafi mahimmancin zaren da buƙatun sanya shi zuwa Layer 2 da 3. Idan ba tare da yin amfani da irin waɗannan fasahohin koyon na'ura ba, farashin aiki na raba sigina da amo zai yi yawa.

Ganewar anomaly. Mataki na farko na gano ɓarna yana amfani da dabarun koyan injunan ƙididdiga don raba zirga-zirgar al'ada ta al'ada da zirga-zirgar ababen hawa. Fiye da masu gano mutum 70 suna sarrafa bayanan wayar salula Stealthwatch yana tattarawa akan zirga-zirgar da ke ratsa kewayen cibiyar sadarwar ku, yana raba zirga-zirgar cikin gida na Tsarin Sunan Domain (DNS) daga bayanan uwar garken wakili, idan akwai. Ana sarrafa kowace buƙata ta fiye da na'urori 70, tare da kowane mai ganowa yana amfani da nasa algorithm na ƙididdiga don samar da kimanta abubuwan da aka gano. An haɗa waɗannan maki kuma ana amfani da hanyoyin ƙididdiga masu yawa don samar da maki ɗaya don kowane tambaya ɗaya. Ana amfani da wannan jimillar makin don raba al'ada da zirga-zirgar ababen hawa.

Amincewa da samfuri. Bayan haka, ana haɗa buƙatun makamantansu, kuma ana ƙididdige makin maraƙi na irin waɗannan ƙungiyoyi a matsayin matsakaicin dogon lokaci. A tsawon lokaci, ana nazarin ƙarin tambayoyi don ƙayyade matsakaicin lokaci mai tsawo, don haka rage ƙimar ƙarya da rashin kuskure. Ana amfani da sakamakon ƙirar amana don zaɓar ɓangaren zirga-zirgar ababen hawa wanda makin da ba shi da kyau ya wuce wasu ƙayyadaddun ƙira don matsawa zuwa matakin sarrafawa na gaba.

Mataki na 2. Rarraba taron da ƙirar abubuwa

A wannan matakin, sakamakon da aka samu a matakan da suka gabata an rarraba su kuma an sanya su zuwa takamaiman abubuwan da suka faru. An rarraba abubuwan da suka faru bisa ƙimar da na'urori masu rarraba koyan na'ura suka sanya don tabbatar da daidaiton daidaito sama da 90%. Tsakanin su:

  • Tsarin layi na layi akan Neyman-Pearson lemma (dokar rarraba ta al'ada daga jadawali a farkon labarin)
  • goyan bayan injunan vector ta amfani da ilmantarwa da yawa
  • hanyoyin sadarwa na jijiya da bazuwar gandun daji algorithm.

Waɗannan keɓantattun abubuwan tsaro suna da alaƙa sannan ana danganta su da maƙasudin ƙarshen lokaci ɗaya. A wannan mataki ne aka samar da bayanin barazanar, wanda aka yi la'akari da yadda maharin da ya dace ya sami nasarar cimma wasu sakamako.

Rarraba abubuwan da suka faru. Ƙididdiga mai banƙyama daga matakin da ya gabata ana rarraba shi zuwa nau'i 100 ko fiye ta amfani da masu rarrabawa. Yawancin masu rarrabawa sun dogara ne akan halayen mutum ɗaya, alaƙar ƙungiya, ko ɗabi'a akan sikelin duniya ko na gida, yayin da wasu na iya zama takamaiman. Misali, mai rarrabawa na iya nuna zirga-zirgar C&C, tsawaita abin tuhuma, ko sabunta software mara izini. Dangane da sakamakon wannan matakin, an samar da jerin abubuwan da ba su dace ba a cikin tsarin tsaro, waɗanda aka rarraba zuwa wasu nau'ikan, an ƙirƙira su.

Samfuran abu. Idan adadin shaidun da ke goyan bayan hasashen cewa wani abu na musamman yana da cutarwa ya zarce madaidaicin kayan abu, an ƙayyade barazanar. Abubuwan da suka dace waɗanda suka yi tasiri ga ma'anar barazanar suna da alaƙa da irin wannan barazanar kuma sun zama wani ɓangare na tsayayyen samfurin abu na dogon lokaci. Kamar yadda shaida ke taruwa a kan lokaci, tsarin yana gano sabbin barazanar lokacin da aka kai matakin abin duniya. Wannan ƙimar kofa tana da ƙarfi kuma an daidaita shi cikin hikima bisa matakin haɗarin barazana da sauran dalilai. Bayan wannan, barazanar ta bayyana a kan bayanan bayanan yanar gizon yanar gizon kuma an canza shi zuwa mataki na gaba.

Mataki na 3. Samfuran Alakar

Manufar ƙirar dangantaka ita ce haɗa sakamakon da aka samu a matakan da suka gabata daga hangen nesa na duniya, la'akari da ba kawai na gida ba har ma da yanayin duniya na abin da ya dace. A wannan mataki ne za ku iya tantance kungiyoyi nawa ne suka fuskanci irin wannan harin domin sanin ko an yi maka ne na musamman ko kuma wani bangare ne na yakin duniya baki daya, kuma yanzu an kama ka.

Ana tabbatar da ko gano abubuwan da suka faru. Wani tabbataccen abin da ya faru yana nuna amincewa 99 zuwa 100% saboda dabarun da kayan aikin da aka haɗa a baya an lura da su a cikin aiki akan sikelin (duniya). Abubuwan da aka gano sun keɓanta a gare ku kuma sun zama wani ɓangare na yaƙin neman zaɓe. Abubuwan da aka gano a baya ana musayar su tare da sanannen tsarin aiki, yana ceton ku lokaci da albarkatu don amsawa. Sun zo tare da kayan aikin bincike da kuke buƙatar fahimtar wanda ya kawo muku hari da kuma iyakar da yaƙin neman zaɓe ya yi niyya ga kasuwancin ku na dijital. Kamar yadda kuke tsammani, adadin da aka tabbatar ya zarce adadin wadanda aka gano saboda saukin dalilin da ya sa tabbatar da faruwar lamarin ba sa kashe makudan kudade ga maharan, yayin da aka gano abubuwan da ke faruwa.
tsada domin dole ne su zama sababbi da kuma musamman. Ta hanyar ƙirƙirar ikon gano abubuwan da aka tabbatar, tattalin arziƙin wasan a ƙarshe ya canza zuwa ga masu tsaron baya, yana ba su fa'ida ta musamman.

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Horarwar matakai da yawa na tsarin haɗin jijiyoyi dangane da ETA

Taswirar haɗarin duniya

An ƙirƙiri taswirar haɗarin duniya ta hanyar bincike da aka yi amfani da algorithms na koyon injin zuwa ɗaya daga cikin manyan bayanai na nau'in sa a cikin masana'antar. Yana ba da ƙididdiga masu yawa game da sabar kan Intanet, koda kuwa ba a san su ba. Irin waɗannan sabar suna da alaƙa da hare-hare kuma ana iya haɗa su ko amfani da su azaman wani ɓangare na harin nan gaba. Wannan ba "baƙar fata", amma cikakken hoto na uwar garken da ake tambaya ta hanyar tsaro. Wannan bayanin mahallin game da ayyukan waɗannan sabobin yana ba da damar gano na'urorin koyo na inji na Stealthwatch da masu rarrabawa don yin hasashen daidai matakin haɗarin da ke tattare da sadarwa tare da irin waɗannan sabar.

Kuna iya duba katunan da ake da su a nan.

Binciken hanyoyin da aka ɓoye ba tare da yanke shi ba
Taswirar duniya tana nuna adiresoshin IP miliyan 460

Yanzu cibiyar sadarwa tana koya kuma ta tashi don kare hanyar sadarwar ku.

A ƙarshe, an sami panacea?

Abin takaici, babu. Daga gwaninta aiki tare da tsarin, zan iya cewa akwai matsalolin 2 na duniya.

Matsala 1. Farashin. Ana tura duk hanyar sadarwar akan tsarin Cisco. Wannan abu ne mai kyau da mara kyau. Kyakkyawan gefen shine cewa ba dole ba ne ka damu da shigar da gungun matosai kamar D-Link, MikroTik, da dai sauransu. Rashin ƙasa shine babban farashin tsarin. Yin la'akari da yanayin tattalin arziki na kasuwancin Rasha, a halin yanzu kawai mai arziki mai babban kamfani ko banki zai iya samun wannan mu'ujiza.

Matsala ta 2: Horo. Ban rubuta a cikin labarin lokacin horo don cibiyar sadarwar jijiyoyi ba, amma ba saboda babu shi ba, amma saboda yana koyo koyaushe kuma ba za mu iya yin hasashen lokacin da zai koya ba. Tabbas, akwai kayan aikin kididdigar lissafi (ɗauka iri ɗaya na ma'aunin haɗin kai na Pearson), amma waɗannan rabin matakan ne. Muna samun yuwuwar tace zirga-zirgar ababen hawa, har ma a lokacin kawai a ƙarƙashin yanayin cewa an riga an sarrafa harin kuma an san shi.

Duk da waɗannan matsalolin guda 2, mun yi babban tsalle a cikin ci gaban tsaro na bayanai gabaɗaya da kuma kariya ta hanyar sadarwa musamman. Wannan hujja na iya zama mai ƙwarin gwiwa don nazarin fasahohin hanyar sadarwa da hanyoyin sadarwa na jijiyoyi, waɗanda a yanzu sun zama jagora mai ban sha'awa.

source: www.habr.com

Add a comment