Kuwunika kwa kukhalapo kwa code yoyipa muzochita zofalitsidwa pa GitHub

Ofufuza ochokera ku yunivesite ya Leiden ku Netherlands adawunikiranso nkhani yoyika ma prototypes achinyengo pa GitHub, yomwe ili ndi code yoyipa kuti aukire ogwiritsa ntchito omwe amayesa kugwiritsa ntchito mwayiwu kuyesa kuti ali pachiwopsezo. Zonse zosungiramo 47313 zidawunikidwa, zomwe zidadziwika bwino kuyambira 2017 mpaka 2021. Kusanthula kwazomwe zachitika kwawonetsa kuti 4893 (10.3%) mwa iwo ali ndi ma code omwe amachita zoyipa. Ogwiritsa ntchito omwe asankha kugwiritsa ntchito zomwe zatulutsidwa akulimbikitsidwa kuti aziwunika kaye za kupezeka kwa zoyika zokayikitsa ndikuthamangitsa zomwe zidachitika pamakina omwe ali otalikirana ndi dongosolo lalikulu.

Mitundu iwiri ikuluikulu yazinthu zoyipa zadziwika: zowononga zomwe zili ndi code yoyipa, mwachitsanzo, kusiya kumbuyo kwa dongosolo, kutsitsa Trojan, kapena kulumikiza makina ku botnet, ndikugwiritsa ntchito zomwe zimasonkhanitsa ndikutumiza zinsinsi za wogwiritsa ntchito. . Kuphatikiza apo, gulu losiyana lazabodza zopanda vuto ladziwikanso lomwe silimachita zinthu zoyipa, komanso lilibe ntchito zomwe zikuyembekezeka, mwachitsanzo, zopangidwa kuti zisokeretse kapena kuchenjeza ogwiritsa ntchito omwe ali ndi code yosatsimikizika kuchokera pamaneti.

Macheke angapo adagwiritsidwa ntchito kuti azindikire zoyipa zoyipa:

  • Khodi yopezerapo mwayi idawunikidwa chifukwa cha kukhalapo kwa ma adilesi a IP ophatikizidwa, pambuyo pake ma adilesi odziwikawo adawunikidwanso motsutsana ndi nkhokwe zokhala ndi mindandanda yakuda ya makamu omwe amagwiritsidwa ntchito kuyang'anira ma botnets ndikugawa mafayilo oyipa.
  • Zochita zoperekedwa mu mawonekedwe ophatikizidwa zidawunikidwa mu pulogalamu yolimbana ndi ma virus.
  • Khodiyo idadziwika chifukwa cha kukhalapo kwa hexadecimal zachilendo kapena zoyika mu mtundu wa base64, pambuyo pake zoyikazo zidasinthidwa ndikuwunikidwa.

Kuwunika kwa kukhalapo kwa code yoyipa muzochita zofalitsidwa pa GitHub


Source: opennet.ru

Kuwonjezera ndemanga