{"id":82929,"date":"2020-05-26T19:42:01","date_gmt":"2020-05-26T17:42:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/rangeamp-seriya-atak-na-cdn-manipuliruyushhaya-http-zagolovkom-range"},"modified":"2020-05-26T19:42:01","modified_gmt":"2020-05-26T17:42:01","slug":"rangeamp-seriya-atak-na-cdn-manipuliruyushhaya-http-zagolovkom-range","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/rangeamp-seriya-atak-na-cdn-manipuliruyushhaya-http-zagolovkom-range","title":{"rendered":"RangeAmp \u2014 uma s\u00e9rie de ataques a CDN que manipula o cabe\u00e7alho HTTP Range","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Um grupo de pesquisadores da Universidade de Pequim, da Universidade Tsinghua e da Universidade do Texas em Dallas expose<\/a><\/noindex> nova classe de ataques DoS - RangeAmp, baseada no uso do cabe\u00e7alho HTTP Range<\/a><\/noindex> para organizar o aumento do tr\u00e1fego por meio de redes de entrega de conte\u00fado (CDN). A ess\u00eancia do m\u00e9todo \u00e9 que, devido \u00e0 forma como os cabe\u00e7alhos Range s\u00e3o processados em muitas CDNs, o atacante pode solicitar atrav\u00e9s da CDN um byte de um grande arquivo, mas a CDN carregar\u00e1 do servidor de destino todo o arquivo ou um bloco de dados significativamente maior para armazenamento em cache. O grau de amplifica\u00e7\u00e3o do tr\u00e1fego em tal ataque, dependendo da CDN, varia de 724 a 43330 vezes, o que pode ser usado para sobrecarregar o tr\u00e1fego de entrada da CDN ou reduzir a largura de banda do canal de comunica\u00e7\u00e3o final at\u00e9 o site da v\u00edtima.<\/p>\n

\"RangeAmp<\/center><\/p>\n

O cabe\u00e7alho Range permite que o cliente especifique um intervalo de posi\u00e7\u00f5es no arquivo a ser carregado em vez de enviar o arquivo completo. Por exemplo, o cliente pode indicar 'Range: bytes=0-1023' e o servidor ir\u00e1 transmitir apenas os primeiros 1024 bytes de dados. Essa possibilidade \u00e9 \u00fatil ao baixar arquivos grandes - o usu\u00e1rio pode pausar o download e depois continuar a partir da posi\u00e7\u00e3o interrompida. Ao especificar 'bytes=0-0', o padr\u00e3o determina que o primeiro byte do arquivo deve ser enviado, 'bytes=-1' - o \u00faltimo, 'bytes=1-' - a partir do byte 1 at\u00e9 o final do arquivo. \u00c9 permitido enviar v\u00e1rios intervalos em um \u00fanico cabe\u00e7alho, por exemplo, 'Range: bytes=0-1023,8192-10240'.<\/p>\n

Al\u00e9m disso, foi proposta uma segunda variante de ataque, visando aumentar a carga na rede ao redirecionar o tr\u00e1fego atrav\u00e9s de outro CDN, que \u00e9 usado como proxy (por exemplo, quando o Cloudflare atua como front-end (FCDN) e Akamai como back-end (BCDN)). Este m\u00e9todo \u00e9 semelhante ao primeiro ataque, mas \u00e9 localizado dentro das redes CDN e permite aumentar o tr\u00e1fego ao fazer solicita\u00e7\u00f5es atrav\u00e9s de outros CDNs, elevando a carga na infraestrutura e reduzindo a qualidade do servi\u00e7o. <\/p>\n

A ideia \u00e9 que o atacante envie ao CDN solicita\u00e7\u00f5es Range de v\u00e1rios intervalos, como 'bytes=0-,0-,0-...', 'bytes=1-,0-,0-...' ou 'bytes=-1024,0-,0-...'. As solicita\u00e7\u00f5es cont\u00eam um grande n\u00famero de intervalos '0-', sugerindo o envio do arquivo da posi\u00e7\u00e3o zero at\u00e9 o final. Devido \u00e0 implementa\u00e7\u00e3o incorreta do processamento de intervalos ao primeiro CDN se conectar ao segundo, cada intervalo '0-' recebe o arquivo completo (os intervalos n\u00e3o s\u00e3o agregados, mas percorridos sequencialmente), se a solicita\u00e7\u00e3o enviada originalmente pelo atacante contiver duplica\u00e7\u00f5es e sobreposi\u00e7\u00f5es de intervalos. O grau de amplifica\u00e7\u00e3o do tr\u00e1fego nesse tipo de ataque varia de 53 a 7432 vezes.<\/p>\n

\"RangeAmp<\/center><\/p>\n

Durante a pesquisa, foi estudado o comportamento de 13 CDNs -
\nAkamai, Alibaba Cloud, Azure, CDN77, CDNsun, Cloudflare, CloudFront, Fastly, G-Core Labs, Huawei Cloud, KeyCDN, StackPath e Tencent Cloud. Todos os CDNs analisados permitiram o primeiro tipo de ataque ao servidor final. O segundo tipo de ataque ao CDN afetou 6 servi\u00e7os, dos quais quatro podem atuar como frontend (CDN77, CDNsun, Cloudflare e StackPath) e tr\u00eas como backend (Akamai, Azure e StackPath). A maior amplifica\u00e7\u00e3o \u00e9 alcan\u00e7ada na Akamai e na StackPath, que permitem a especifica\u00e7\u00e3o de mais de 10 mil faixas no cabe\u00e7alho Range. Os propriet\u00e1rios dos CDNs foram notificados sobre as vulnerabilidades h\u00e1 cerca de 7 meses e, no momento da divulga\u00e7\u00e3o p\u00fablica, 12 dos 13 CDNs haviam corrigido os problemas identificados ou expressaram disposi\u00e7\u00e3o para corrig\u00ed-los (apenas o servi\u00e7o StackPath n\u00e3o respondeu).<\/p>\n

<\/a><\/noindex><\/p>\n

Fonte: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041f\u0435\u043a\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430, \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0426\u0438\u043d\u0445\u0443\u0430 \u0438 \u0422\u0435\u0445\u0430\u0441\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0414\u0430\u043b\u043b\u0430\u0441\u0435 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 DoS-\u0430\u0442\u0430\u043a — RangeAmp, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Range \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 (CDN). \u0421\u0443\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0438\u0437-\u0437\u0430 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Range-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 CDN \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 CDN \u043e\u0434\u0438\u043d \u0431\u0430\u0439\u0442 \u0438\u0437 \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430, \u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":82930,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-82929","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47RangeAmp \u2014 uma s\u00e9rie de ataques ao CDN que manipulam o cabe\u00e7alho HTTP Range | ProHoster","description":"Um grupo de pesquisadores da Universidade de Pequim, Universidade Tsinghua e Universidade do Texas em Dallas","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/rangeamp-seriya-atak-na-cdn-manipuliruyushhaya-http-zagolovkom-range","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47RangeAmp \u2014 \u0441\u0435\u0440\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 CDN, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0430\u044f HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c Range | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041f\u0435\u043a\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430, \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0426\u0438\u043d\u0445\u0443\u0430 \u0438 \u0422\u0435\u0445\u0430\u0441\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0414\u0430\u043b\u043b\u0430\u0441\u0435","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/rangeamp-seriya-atak-na-cdn-manipuliruyushhaya-http-zagolovkom-range","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-26T17:42:01+00:00","article:modified_time":"2020-05-26T17:42:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"82929","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:28:37","updated":"2022-10-02 22:54:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/82929","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=82929"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/82929\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/82930"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=82929"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=82929"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=82929"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}