{"id":34976,"date":"2019-10-31T22:01:37","date_gmt":"2019-10-31T19:01:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/okolo-5-5-vyyavlyaemyh-uyazvimostej-ispolzuyutsya-dlya-osushhestvleniya-atak\/"},"modified":"2019-10-31T22:01:37","modified_gmt":"2019-10-31T19:01:37","slug":"okolo-5-5-vyyavlyaemyh-uyazvimostej-ispolzuyutsya-dlya-osushhestvleniya-atak","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/okolo-5-5-vyyavlyaemyh-uyazvimostej-ispolzuyutsya-dlya-osushhestvleniya-atak","title":{"rendered":"Circa il 5.5% delle vulnerabilit\u00e0 rilevate sono utilizzate per effettuare attacchi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Un gruppo di ricercatori della Virginia Polytechnic Institute e delle aziende Cyentia e RAND, ha pubblicato<\/a><\/noindex> i risultati dell'analisi dei rischi relativi all'adozione di diverse strategie di mitigazione delle vulnerabilit\u00e0. Analizzando 76.000 vulnerabilit\u00e0 scoperte dal 2009 al 2018, \u00e8 emerso che solo 4.183 di esse (il 5,5%) sono state utilizzate per portare a termine attacchi reali. Questo valore \u00e8 cinque volte superiore alle previsioni precedentemente pubblicate, che stimavano il numero di problemi sfruttati intorno all'1,4%.<\/p>\n

Non \u00e8 stata trovata correlazione tra la pubblicazione di prototipi di exploit in accesso pubblico e i tentativi di sfruttamento delle vulnerabilit\u00e0. Di tutti i casi noti di sfruttamento delle vulnerabilit\u00e0, solo nella met\u00e0 dei casi era stato pubblicato un prototipo di exploit per il problema in fonti aperte. L'assenza di un prototipo di exploit non impedisce agli attaccanti di creare exploit autonomamente, se necessario.<\/p>\n

Dai altri risultati si pu\u00f2 notare la domanda per l'utilizzo principalmente delle vulnerabilit\u00e0 con un alto livello di pericolosit\u00e0 secondo la classificazione CVSS. In quasi met\u00e0 degli attacchi sono state utilizzate vulnerabilit\u00e0 con un peso di almeno 9. <\/p>\n

Il numero complessivo di prototipi di exploit pubblicati nel periodo considerato \u00e8 stato stimato in 9726. I dati utilizzati nello studio sugli exploit sono stati ottenuti da
\ncollezioni Exploit DB, Metasploit, D2 Security's Elliot Kit, Canvas Exploitation Framework, Contagio, Reversing Labs e Secureworks CTU.
\nLe informazioni sulle vulnerabilit\u00e0 sono state ottenute dal database NIST NVD<\/a><\/noindex> (National Vulnerability Database). Le informazioni sui fatti di sfruttamento sono state aggregate sulla base delle informazioni fornite da FortiGuard Labs, SANS Internet Storm Center, Secureworks CTU, OSSIM di Alienvault e ReversingLabs.<\/p>\n

Lo studio \u00e8 stato condotto per determinare il giusto equilibrio tra l'applicazione degli aggiornamenti per identificare eventuali vulnerabilit\u00e0 e la risoluzione solo dei problemi pi\u00f9 gravi. Nel primo caso, si garantisce un'elevata efficacia della protezione, ma sono richieste ingenti risorse per la gestione dell'infrastruttura, che vengono spese principalmente per risolvere problemi non critici. Nel secondo caso, c'\u00e8 un alto rischio di perdere una vulnerabilit\u00e0 che potrebbe essere sfruttata per un attacco. La ricerca ha mostrato che, quando si decide di installare un aggiornamento per correggere una vulnerabilit\u00e0, non si dovrebbe fare affidamento sull'assenza di un prototipo di exploit pubblicato e la possibilit\u00e0 di sfruttamento dipende direttamente dal livello di gravit\u00e0 della vulnerabilit\u00e0.<\/p>\n

<\/a><\/noindex><\/p>\n

Fonte: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041f\u043e\u043b\u0438\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0412\u0438\u0440\u0433\u0438\u043d\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 Cyentia \u0438 RAND, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0438\u0441\u043a\u043e\u0432 \u043f\u0440\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0418\u0437\u0443\u0447\u0438\u0432 76 \u0442\u044b\u0441\u044f\u0447 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0441 2009 \u043f\u043e 2018 \u0433\u043e\u0434, \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e, \u0447\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e 4183 \u0438\u0437 \u043d\u0438\u0445 (5.5%) \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u0432 \u043f\u044f\u0442\u044c \u0440\u0430\u0437 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 \u0440\u0430\u043d\u0435\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u044b, \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-34976","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Circa il 5.5% delle vulnerabilit\u00e0 rilevate vengono utilizzate per attacchi | ProHoster","description":"Un gruppo di ricercatori della Virginia Polytechnic Institute, insieme alle aziende Cyentia e RAND, ha pubblicato i risultati di un'analisi dei rischi associati a diverse strategie di remediation delle vulnerabilit\u00e0. Analizzando 76.000 vulnerabilit\u00e0 rilevate dal 2009 al 2018, \u00e8 emerso che solo 4.183 di esse (5,5%) sono state utilizzate per reali attacchi. Questo valore supera di cinque volte le previsioni precedentemente pubblicate.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/okolo-5-5-vyyavlyaemyh-uyazvimostej-ispolzuyutsya-dlya-osushhestvleniya-atak","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043a\u043e\u043b\u043e 5.5% \u0432\u044b\u044f\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041f\u043e\u043b\u0438\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0412\u0438\u0440\u0433\u0438\u043d\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 Cyentia \u0438 RAND, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0438\u0441\u043a\u043e\u0432 \u043f\u0440\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0418\u0437\u0443\u0447\u0438\u0432 76 \u0442\u044b\u0441\u044f\u0447 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0441 2009 \u043f\u043e 2018 \u0433\u043e\u0434, \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e, \u0447\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e 4183 \u0438\u0437 \u043d\u0438\u0445 (5.5%) \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u0432 \u043f\u044f\u0442\u044c \u0440\u0430\u0437 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 \u0440\u0430\u043d\u0435\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u044b, \u0432","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/okolo-5-5-vyyavlyaemyh-uyazvimostej-ispolzuyutsya-dlya-osushhestvleniya-atak","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:01:37+00:00","article:modified_time":"2019-10-31T19:01:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34976","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 21:21:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:12:26","updated":"2026-01-21 21:21:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/34976","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=34976"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/34976\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=34976"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=34976"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=34976"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}