Kwv yees li 5.5% ntawm kev txheeb xyuas qhov tsis zoo yog siv los ua kev tawm tsam

Ib pab neeg tshawb fawb los ntawm Virginia Tech, Cyentia thiab RAND, luam tawm Cov txiaj ntsig ntawm kev soj ntsuam kev pheej hmoo thaum siv ntau yam kev kho qhov tsis zoo. Tau kawm txog 76 txhiab qhov tsis zoo uas pom los ntawm 2009 txog 2018, nws tau qhia tias tsuas yog 4183 ntawm lawv (5.5%) tau siv los ua kev tawm tsam tiag. Cov txiaj ntsig tau pom yog tsib zaug siab dua li qhov kev kwv yees tau tshaj tawm yav dhau los, uas kwv yees tus naj npawb ntawm cov teeb meem siv tau ntawm kwv yees li 1.4%.

Txawm li cas los xij, tsis muaj kev sib raug zoo ntawm qhov kev tshaj tawm ntawm kev siv cov qauv hauv cov pej xeem sau npe thiab sim siv qhov tsis zoo. Ntawm tag nrho cov lus tseeb ntawm kev siv dag zog rau cov neeg tshawb nrhiav paub, tsuas yog nyob rau hauv ib nrab ntawm cov teeb meem rau qhov teeb meem yog ib qho piv txwv ntawm kev siv tau luam tawm hauv qhov chaw qhib ua ntej. Qhov tsis muaj kev siv tus qauv tsis txwv cov neeg tawm tsam, uas, yog tias tsim nyog, tsim kev siv lawv tus kheej.

Lwm qhov kev txiav txim siab suav nrog qhov kev thov rau kev siv dag zog feem ntau ntawm qhov tsis zoo uas muaj kev phom sij txaus ntshai raws li CVSS kev faib tawm. Yuav luag ib nrab ntawm kev tawm tsam siv qhov tsis zoo nrog qhov hnyav ntawm tsawg kawg 9.

Tag nrho cov naj npawb ntawm exploit prototypes luam tawm thaum lub sij hawm nyob rau hauv kev tshuaj xyuas yog kwv yees li ntawm 9726. Cov ntaub ntawv ntawm exploit siv nyob rau hauv txoj kev tshawb no yog tau los ntawm
Cov ntawv sau Exploit DB, Metasploit, D2 Security's Elliot Kit, Canvas Exploitation Framework, Contagio, Reversing Labs thiab Secureworks CTU.
Cov ntaub ntawv hais txog qhov tsis zoo tau muab los ntawm cov ntaub ntawv NWS NVD (National Vulnerability Database). Cov ntaub ntawv ua haujlwm tau muab tso ua ke siv cov ntaub ntawv los ntawm FortiGuard Labs, SANS Internet Storm Center, Secureworks CTU, Alienvault's OSSIM thiab ReversingLabs.

Txoj kev tshawb no tau ua los txiav txim siab qhov zoo sib npaug ntawm kev siv cov kev hloov kho tshiab los txheeb xyuas txhua qhov tsis zoo thiab tshem tawm tsuas yog cov teeb meem txaus ntshai tshaj plaws. Hauv thawj kis, kev tiv thaiv kev ua haujlwm siab tau ua kom ntseeg tau, tab sis cov peev txheej loj yuav tsum tau ua kom muaj kev tsim kho vaj tse, uas yog siv los kho cov teeb meem tsis tseem ceeb. Nyob rau hauv rooj plaub thib ob, muaj kev pheej hmoo siab ntawm qhov tsis muaj qhov tsis zoo uas tuaj yeem siv rau kev tawm tsam. Txoj kev tshawb no qhia tau hais tias thaum txiav txim siab los txhim kho qhov hloov tshiab uas tshem tawm qhov muaj qhov tsis zoo, koj yuav tsum tsis txhob cia siab rau qhov tsis muaj kev tshaj tawm kev siv tus qauv thiab qhov muaj feem cuam tshuam ncaj qha yog nyob ntawm qhov hnyav ntawm qhov tsis zoo.

Tau qhov twg los: opennet.ru

Ntxiv ib saib