{"id":87697,"date":"2020-07-09T13:42:31","date_gmt":"2020-07-09T11:42:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/ddos-idet-v-offlajn"},"modified":"2020-07-09T13:42:31","modified_gmt":"2020-07-09T11:42:31","slug":"ddos-idet-v-offlajn","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/ddos-idet-v-offlajn","title":{"rendered":"DDoS ide do offline","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Pred p\u00e1r rokmi u\u017e v\u00fdskumn\u00e9 agent\u00fary a poskytovatelia informa\u010dn\u00fdch bezpe\u010dnostn\u00fdch slu\u017eieb za\u010dali spr\u00e1vy o poklese<\/a><\/noindex> po\u010dtu DDoS \u00fatokov. Ale u\u017e ku 1. \u0161tvr\u0165roku 2019 t\u00edto sami vedci ozn\u00e1mili ich ohromuj\u00faci n\u00e1rast<\/a><\/noindex> o 84%. A potom to i\u0161lo len vpred. Zatia\u013e \u010do pand\u00e9mia neprispela k atmosf\u00e9re pokoja \u2014 pr\u00e1ve naopak, kyberzlo\u010dinci a spammeri to pova\u017eovali za skvel\u00fd sign\u00e1l na \u00fatok, a objem DDoS \u00fatokov vzr\u00e1stol. dvojn\u00e1sobne<\/a><\/noindex>.<\/p>\n

\"DDoS<\/a><\/noindex>
\n<\/a><\/noindex>
\nSme presved\u010den\u00ed, \u017ee \u00e9ra jednoduch\u00fdch a \u013eahko odha\u013eovan\u00fdch DDoS \u00fatokov (a nie pr\u00edli\u0161 zlo\u017eit\u00fdch n\u00e1strojov, ktor\u00e9 ich m\u00f4\u017eu zabr\u00e1ni\u0165) u\u017e skon\u010dila. Kyberzlo\u010dinci sa nau\u010dili lep\u0161ie skr\u00fdva\u0165 tieto \u00fatoky a realizova\u0165 ich \u010doraz sofistikovanej\u0161\u00edm sp\u00f4sobom. Temn\u00fd priemysel pre\u0161iel od brute force \u00fatokov k \u00fatokom na \u00farovni aplik\u00e1ci\u00ed. Dost\u00e1va v\u00e1\u017ene zak\u00e1zky na naru\u0161enie obchodn\u00fdch procesov, vr\u00e1tane \u00faplne offline procesov.<\/p>\n

Vnikanie do reality<\/h2>\n

\nV roku 2017 s\u00e9ria DDoS \u00fatokov zameran\u00fdch na dopravn\u00e9 slu\u017eby \u0160v\u00e9dska sp\u00f4sobila dlh\u00e9 me\u0161kania vlakov.<\/a><\/noindex>V roku 2019 u n\u00e1rodn\u00e9ho \u017eelezni\u010dn\u00e9ho oper\u00e1tora D\u00e1nska Danske Statsbaner<\/a><\/noindex> vypnuli predajn\u00e9 syst\u00e9my. V d\u00f4sledku toho na staniciach nefungovali automaty na predaj l\u00edstkov a automatick\u00e9 br\u00e1ny, a viac ako 15 tis\u00edc cestuj\u00facich nemohlo nikam od\u00eds\u0165. V tom istom roku 2019 siln\u00fd kybernetick\u00fd \u00fatok sp\u00f4sobil odstavenie dod\u00e1vky elektriny v Venezuelsk\u00fdch.<\/a><\/noindex>.<\/p>\n

D\u00f4sledky DDoS \u00fatokov poci\u0165uj\u00fa teraz nielen online pou\u017e\u00edvatelia, ale aj \u013eudia, ako sa hovor\u00ed, IRL (in real life). Hoci historicky \u00fato\u010dn\u00edci cielili iba na online slu\u017eby, teraz \u010dasto ich \u00falohou je naru\u0161i\u0165 ak\u00e9ko\u013evek obchodn\u00e9 oper\u00e1cie. Pod\u013ea na\u0161ich odhadov m\u00e1 dnes viac ako 60% \u00fatokov tak\u00fdto cie\u013e \u2014 na vydieranie alebo ne\u010dist\u00fa konkurenciu. Pri transakci\u00e1ch a logistike je to obzvl\u00e1\u0161\u0165 zranite\u013en\u00e9.<\/p>\n

Chytrej\u0161ie a drah\u0161ie<\/h2>\n

\nDDoS sa st\u00e1le pova\u017euje za jeden z najroz\u0161\u00edrenej\u0161\u00edch a najr\u00fdchlej\u0161ie rast\u00facich typov kybernetickej kriminality. Pod\u013ea odborn\u00fdch predpoved\u00ed ich po\u010det od roku 2020 bude len r\u00e1s\u0165. Tento n\u00e1rast je spojen\u00fd s r\u00f4znymi d\u00f4vodmi \u2014 s e\u0161te v\u00e4\u010d\u0161\u00edm prechodom podnikania online kv\u00f4li pand\u00e9mii, s rozvojom samotn\u00e9ho temn\u00e9ho priemyslu kybernetickej kriminality a dokonca aj s roz\u0161\u00edren\u00edm 5G.<\/a><\/noindex>.<\/p>\n

\u201ePopul\u00e1rne\u201c DDoS \u00fatoky sa vtedy stali popul\u00e1rnymi kv\u00f4li jednoduchej realiz\u00e1cii a n\u00edzkym n\u00e1kladom: pred p\u00e1r rokmi ich bolo mo\u017en\u00e9 iniciova\u0165 za 50 dol\u00e1rov denne. Dnes sa zmenili ciele aj met\u00f3dy \u00fatokov, \u010do viedlo k ich zv\u00fd\u0161enej zlo\u017eitosti a n\u00e1sledne aj n\u00e1kladom. \u00c1no, ceny od 5 dol\u00e1rov za hodinu st\u00e1le existuj\u00fa v cenov\u00fdch ponuk\u00e1ch (\u00e1no, kyberzlo\u010dinci maj\u00fa cenn\u00edky a tarify), ale za webov\u00fa str\u00e1nku s ochranou u\u017e \u017eiadaj\u00fa od 400 dol\u00e1rov denne a n\u00e1klady na \u201eindividu\u00e1lne\u201c objedn\u00e1vky pre ve\u013ek\u00e9 spolo\u010dnosti dosahuj\u00fa nieko\u013eko tis\u00edc dol\u00e1rov.<\/p>\n

Teraz existuj\u00fa dva hlavn\u00e9 typy DDoS \u00fatokov. Prv\u00fd m\u00e1 cie\u013e u\u010dini\u0165 online zdroj nedostupn\u00fdm na ur\u010dit\u00fd \u010das. Platby za ne \u00fato\u010dn\u00edci po\u017eaduj\u00fa za \u010das samotn\u00e9ho \u00fatoku. V tomto pr\u00edpade DDoS oper\u00e1tor sa nezauj\u00edma o konkr\u00e9tny v\u00fdsledok, a klient v podstate rob\u00ed z\u00e1lohu na za\u010diatok \u00fatoku. Tieto met\u00f3dy s\u00fa dos\u0165 lacn\u00e9.<\/p>\n

Druh\u00fd typ s\u00fa \u00fatoky, ktor\u00e9 sa platia iba pri dosiahnut\u00ed ur\u010dit\u00fdch v\u00fdsledkov. Tieto s\u00fa u\u017e zauj\u00edmavej\u0161ie. S\u00fa ove\u013ea zlo\u017eitej\u0161ie na vykonanie a preto v\u00fdrazne drah\u0161ie, preto\u017ee \u00fato\u010dn\u00edkom sa mus\u00ed vybera\u0165 naj\u00fa\u010dinnej\u0161ie met\u00f3dy na dosiahnutie cie\u013eov. V Variti ob\u010das vedieme cel\u00e9 \u0161achov\u00e9 partie s kyberzlo\u010dincami, ktor\u00ed okam\u017eite menia taktiku a n\u00e1stroje a sna\u017eia sa prenikn\u00fa\u0165 do viacer\u00fdch zranite\u013enost\u00ed na r\u00f4znych \u00farovniach. Ide o jasn\u00e9 t\u00edmov\u00e9 \u00fatoky, v ktor\u00fdch hackeri ve\u013emi dobre vedia, ako reagova\u0165 a br\u00e1ni\u0165 sa proti \u010dinnostiam obrancov. Bojova\u0165 s nimi nie je len n\u00e1ro\u010dn\u00e9, ale aj ve\u013emi n\u00e1kladn\u00e9 pre spolo\u010dnosti. Napr\u00edklad jeden z na\u0161ich klientov, ve\u013ek\u00fd sie\u0165ov\u00fd maloobchodn\u00edk, mal takmer tri roky t\u00edm 30 \u013eud\u00ed, ktor\u00fdch \u00falohou bolo bojova\u0165 proti DDoS \u00fatokom.<\/p>\n

Pod\u013ea \u00fadajov Variti jednoduch\u00e9 DDoS \u00fatoky, ktor\u00e9 s\u00fa vykon\u00e1van\u00e9 v\u00fdhradne z nudy, trollingu alebo nespokojnosti s konkr\u00e9tnou spolo\u010dnos\u0165ou, v s\u00fa\u010dasnosti tvoria menej ako 10 % v\u0161etk\u00fdch DDoS \u00fatokov (samozrejme, \u017ee pre nezabezpe\u010den\u00e9 zdroje m\u00f4\u017ee by\u0165 in\u00e1 \u0161tatistika, my sa pozer\u00e1me na \u00fadaje na\u0161ich klientov). V\u0161etko ostatn\u00e9 je pr\u00e1ca profesion\u00e1lnych t\u00edmov. Z\u00e1rove\u0148 tri \u0161tvrtiny v\u0161etk\u00fdch \"zl\u00fdch\" botov s\u00fa zlo\u017eit\u00ed boti, ktor\u00fdch je \u0165a\u017ek\u00e9 odhali\u0165 pomocou v\u00e4\u010d\u0161iny modern\u00fdch trhov\u00fdch rie\u0161en\u00ed. Napodob\u0148uj\u00fa spr\u00e1vanie skuto\u010dn\u00fdch pou\u017e\u00edvate\u013eov alebo prehliada\u010dov a zav\u00e1dzaj\u00fa vzorce, ktor\u00e9 s\u0165a\u017euj\u00fa rozl\u00ed\u0161enie medzi \"dobr\u00fdmi\" a \"zl\u00fdmi\" po\u017eiadavkami. T\u00fdm p\u00e1dom s\u00fa \u00fatoky menej n\u00e1padn\u00e9 a, teda, efekt\u00edvnej\u0161ie.<\/p>\n

\"DDoS
\n\u00dadaje od GlobalDots<\/i><\/p>\n

Nov\u00e9 ciele DDoS<\/h2>\n

\nSpr\u00e1va Spr\u00e1va o zl\u00fdch botoch<\/a><\/noindex> od analytikov z GlobalDots sa uv\u00e1dza, \u017ee boti v s\u00fa\u010dasnosti generuj\u00fa 50 % celkov\u00e9ho webov\u00e9ho trafic, pri\u010dom 17,5 % z nich s\u00fa pr\u00e1ve \u0161kodliv\u00e9 boti.<\/p>\n

Boti dok\u00e1\u017eu r\u00f4znymi sp\u00f4sobmi znepr\u00edjemni\u0165 \u017eivot spolo\u010dnostiam: okrem toho, \u017ee \"zhadzuj\u00fa\" str\u00e1nky, teraz sa zaoberaj\u00fa aj t\u00fdm, \u017ee zvy\u0161uj\u00fa n\u00e1klady na reklamu, klikaj\u00fa na reklamn\u00e9 ozn\u00e1menia, parsuj\u00fa ceny, aby ich zn\u00ed\u017eili o drobn\u00e9 a pril\u00e1kali kupuj\u00facich, a kradn\u00fa obsah s r\u00f4znymi neetick\u00fdmi cie\u013emi (napr\u00edklad sme ned\u00e1vno p\u00edsali<\/a><\/noindex> o str\u00e1nkach s ukradnut\u00fdm obsahom, ktor\u00e9 n\u00fatia pou\u017e\u00edvate\u013eov rie\u0161i\u0165 cudzie CAPTCHA). Boti silne skres\u013euj\u00fa r\u00f4znu obchodn\u00fa \u0161tatistiku, a tak sa rozhodnutia prij\u00edmaj\u00fa na z\u00e1klade nespr\u00e1vnych \u00fadajov. DDoS \u00fatok \u010dasto sl\u00fa\u017ei ako dymov\u00e1 clona pre e\u0161te z\u00e1va\u017enej\u0161ie zlo\u010diny, ako je hackovanie a kr\u00e1de\u017e d\u00e1t. A teraz vid\u00edme, \u017ee sa objavila cel\u00e1 nov\u00e1 trieda kybernetick\u00fdch hrozieb \u2014 naru\u0161enie fungovania ur\u010dit\u00fdch obchodn\u00fdch procesov spolo\u010dnosti, \u010dasto offline (preto\u017ee v na\u0161ich \u010dasoch ni\u010d nem\u00f4\u017ee by\u0165 \u00faplne \"off-line\"). Obzvl\u00e1\u0161\u0165 \u010dasto vid\u00edme, \u017ee s\u00fa naru\u0161en\u00e9 logistick\u00e9 procesy a komunik\u00e1cie so z\u00e1kazn\u00edkmi.<\/p>\n

\"Nedoru\u010den\u00e9\"<\/h2>\n

\nLogistick\u00e9 obchodn\u00e9 procesy s\u00fa k\u013e\u00fa\u010dov\u00e9 pre v\u00e4\u010d\u0161inu spolo\u010dnost\u00ed, preto na ne \u010dasto \u00fato\u010dia. Tu s\u00fa mo\u017en\u00e9 scen\u00e1re \u00fatokov.<\/p>\n

Nie je na sklade<\/i><\/p>\n

Ak pracujete v oblasti online obchodu, ur\u010dite ste u\u017e obozn\u00e1men\u00ed s probl\u00e9mom falo\u0161n\u00fdch objedn\u00e1vok. V pr\u00edpade \u00fatokov boti pre\u0165a\u017euj\u00fa logistick\u00e9 zdroje a robia produkty nedostupn\u00fdmi pre ostatn\u00fdch z\u00e1kazn\u00edkov. Na tento \u00fa\u010del umiest\u0148uj\u00fa obrovsk\u00e9 mno\u017estvo falo\u0161n\u00fdch objedn\u00e1vok, ktor\u00e9 zodpovedaj\u00fa maxim\u00e1lnemu po\u010dtu produktov na sklade. Tieto produkty sa potom nezaplatia a po ur\u010ditom \u010dase sa vr\u00e1tia na str\u00e1nku. Ale probl\u00e9m je u\u017e sp\u00f4soben\u00fd: boli ozna\u010den\u00e9 ako \u201enie je na sklade\u201c, a \u010das\u0165 z\u00e1kazn\u00edkov u\u017e pre\u0161la ku konkurencii. T\u00e1to taktika je dobre zn\u00e1ma v priemysle leteniek, kde niekedy boti okam\u017eite \u201ek\u00fapia\u201c v\u0161etky l\u00edstky takmer ihne\u010f po ich zverejnen\u00ed. Napr\u00edklad, jeden z na\u0161ich klientov \u2013 ve\u013ek\u00e1 leteck\u00e1 spolo\u010dnos\u0165 \u2013 utrpel tak\u00fd \u00fatok organizovan\u00fd \u010d\u00ednskymi konkurentmi. Za iba dve hodiny ich boti objednali 100% l\u00edstkov na ur\u010dit\u00e9 trasy.<\/p>\n

Sneaker boti<\/i><\/p>\n

\u010eal\u0161\u00ed popul\u00e1rny scen\u00e1r: boti okam\u017eite kupuj\u00fa cel\u00fa radu produktov, a ich vlastn\u00edci ich nesk\u00f4r pred\u00e1vaj\u00fa za zv\u00fd\u0161en\u00fa cenu (priemern\u00e1 prir\u00e1\u017eka je 200%). Tieto boti sa naz\u00fdvaj\u00fa sneaker boti, preto\u017ee s t\u00fdmto probl\u00e9mom sa dobre obozn\u00e1mila priemysel m\u00f3dnych tenisiek, najm\u00e4 \u2013 limitovan\u00fdch kolekci\u00ed. Boti prakticky za min\u00faty vyk\u00fapili pr\u00e1ve zverejnen\u00e9 nov\u00e9 kolekcie, pri\u010dom zablokovali zdroj tak, aby sa tam nemohli dosta\u0165 skuto\u010dn\u00ed pou\u017e\u00edvatelia. Je to zriedkav\u00fd pr\u00edpad, ke\u010f sa o botov p\u00edsalo v m\u00f3dnych \u010dasopisoch. Aj tak predajcovia l\u00edstkov na prest\u00ed\u017ene podujatia ako futbalov\u00e9 z\u00e1pasy vyu\u017e\u00edvaj\u00fa rovnak\u00fd scen\u00e1r.<\/p>\n

In\u00e9 scen\u00e1re<\/i><\/p>\n

Ale to e\u0161te nie je v\u0161etko. Existuje e\u0161te zlo\u017eitej\u0161\u00ed variant \u00fatokov na logistiku, ktor\u00fd hroz\u00ed v\u00e1\u017enymi stratami. Tieto \u00fatoky m\u00f4\u017eu prebieha\u0165, ak m\u00e1 slu\u017eba mo\u017enos\u0165 \u201ePlatba pri prevzat\u00ed tovaru\u201c. Boti zanech\u00e1vaj\u00fa falo\u0161n\u00e9 objedn\u00e1vky na tak\u00e9to produkty, pri\u010dom uv\u00e1dzaj\u00fa falo\u0161n\u00e9, alebo dokonca skuto\u010dn\u00e9 adresy ni\u010d netu\u0161iacich \u013eud\u00ed. A spolo\u010dnosti nes\u00fa obrovsk\u00e9 n\u00e1klady na prepravu, skladovanie a zis\u0165ovanie podrobnost\u00ed. V tom \u010dase s\u00fa produkty nedostupn\u00e9 pre in\u00fdch z\u00e1kazn\u00edkov a okrem toho zaberaj\u00fa miesto na sklade.<\/p>\n

\u010co e\u0161te? Boti zanech\u00e1vaj\u00fa mas\u00edvne falo\u0161n\u00e9 negat\u00edvne recenzie na produkty, znefunk\u010d\u0148uj\u00fa funkciu \u201evr\u00e1tenia platby\u201c, blokuj\u00fa transakcie, kradn\u00fa \u00fadaje z\u00e1kazn\u00edkov, spamuj\u00fa re\u00e1lnych kupuj\u00facich \u2013 mo\u017enost\u00ed je ne\u00farekom. Dobr\u00fdm pr\u00edkladom je ned\u00e1vny \u00fatok na DHL, Hermes, AldiTalk, Freenet, Snipes.com. Hackeri sa pretvarovali<\/a><\/noindex>, \u017ee testuj\u00fa syst\u00e9my ochrany proti DDoS, a nakoniec polo\u017eili port\u00e1l obchodn\u00fdch z\u00e1kazn\u00edkov spolo\u010dnosti a v\u0161etky API. V\u00fdsledkom boli ve\u013ek\u00e9 probl\u00e9my pri dod\u00e1vke tovaru z\u00e1kazn\u00edkom.<\/p>\n

Zavolajte zajtra<\/h2>\n

\nMinul\u00fd rok Feder\u00e1lna obchodn\u00e1 komisia (FTC) ozn\u00e1mila dvojit\u00fd rast s\u0165a\u017enost\u00ed od podnikov a pou\u017e\u00edvate\u013eov na spamov\u00e9 a podvodn\u00edcke telefonick\u00e9 hovory od botov. Pod\u013ea niektor\u00fdch odhadov tvoria takmer 50%<\/a><\/noindex> v\u0161etk\u00fdch hovorov.<\/p>\n

Rovnako ako v pr\u00edpadoch s DDoS, ciele TDoS \u2013 mas\u00edvne \u00fatoky botov na telef\u00f3ny \u2013 sa pohybuj\u00fa od \"s\u00fa\u0165a\u017e\u00ed\" a\u017e po ne\u010dist\u00fa konkuren\u010dn\u00fa boj. Boti s\u00fa schopn\u00ed pre\u0165a\u017ei\u0165 kontaktn\u00e9 centr\u00e1 a nevpusti\u0165 skuto\u010dn\u00fdch z\u00e1kazn\u00edkov. T\u00e1to met\u00f3da je \u00fa\u010dinn\u00e1 nielen pre call centr\u00e1 s \"\u017eiv\u00fdmi\" oper\u00e1tormi, ale aj tam, kde sa pou\u017e\u00edvaj\u00fa syst\u00e9my AVR. Boti m\u00f4\u017eu tie\u017e hromadne \u00fato\u010di\u0165 na in\u00e9 komunika\u010dn\u00e9 kan\u00e1ly so z\u00e1kazn\u00edkmi (\u010daty, e-maily), naru\u0161ova\u0165 pr\u00e1cu CRM syst\u00e9mov a dokonca do ur\u010ditej miery negat\u00edvne ovplyv\u0148ova\u0165 riadenie person\u00e1lu, ke\u010f\u017ee oper\u00e1tori s\u00fa pre\u0165a\u017een\u00ed v snahe vysporiada\u0165 sa s kr\u00edzou. \u00datoky m\u00f4\u017eu by\u0165 tie\u017e synchronizovan\u00e9 s tradi\u010dn\u00fdm DDoS \u00fatokom na online zdroje obete.<\/p>\n

Ned\u00e1vno podobn\u00fd \u00fatok naru\u0161il pr\u00e1cu z\u00e1chrannej slu\u017eby 911<\/a><\/noindex> v USA \u2013 oby\u010dajn\u00ed \u013eudia, ktor\u00ed naliehavo potrebovali pomoc, sa jednoducho nemohli dovola\u0165. Pribli\u017ene v tom istom \u010dase postihol rovnak\u00fd osud aj Dublinsk\u00fa zoologick\u00fa z\u00e1hradu: najmenej 5000 \u013eud\u00ed dostalo spam v podobe textov\u00fdch SMS spr\u00e1v, vyz\u00fdvaj\u00facich ich, aby naliehavo zavolali na telef\u00f3nne \u010d\u00edslo zoologickej z\u00e1hrady a po\u017eiadali o fikt\u00edvnu osobu.<\/p>\n

Wi-Fi nebude<\/h2>\n

\nKyberzlo\u010dinci m\u00f4\u017eu tie\u017e jednoducho zablokova\u0165 cel\u00fa firemn\u00fa sie\u0165. \u010casto sa blokovanie IP pou\u017e\u00edva ako obrana proti DDoS \u00fatokom. Av\u0161ak nie je to len neefekt\u00edvna, ale aj ve\u013emi nebezpe\u010dn\u00e1 prax. IP adresa sa \u013eahko n\u00e1jde (napr\u00edklad pomocou monitorovania zdrojov) a \u013eahko sa d\u00e1 nahradi\u0165 (alebo fal\u0161ova\u0165). Na\u0161i klienti pred pr\u00edchodom do Variti mali pr\u00edpady, ke\u010f to viedlo k tomu, \u017ee blokovanie ur\u010dit\u00e9ho IP jednoducho odpojilo Wi-Fi v ich vlastn\u00fdch kancel\u00e1ri\u00e1ch. Bol pr\u00edpad, ke\u010f klientovi \u201enasadili\u201c potrebn\u00e9 IP a on zablokoval pr\u00edstup na svoj zdroj u\u017e\u00edvate\u013eom z cel\u00e9ho regi\u00f3nu, pri\u010dom si to dlho nev\u0161imol, preto\u017ee v ostatnom v\u0161etko fungovalo perfektne.<\/p>\n

\u010co je nov\u00e9?<\/h2>\n

\nNov\u00e9 hrozby si vy\u017eaduj\u00fa nov\u00e9 rie\u0161enia na ochranu. T\u00e1to nov\u00e1 nika na trhu sa v\u0161ak len za\u010d\u00edna formova\u0165. Rie\u0161en\u00ed pre efekt\u00edvnu obranu proti jednoduch\u00fdm \u00fatokom botov je mno\u017estvo, ale so zlo\u017eit\u00fdmi to u\u017e nie je tak\u00e9 jednoduch\u00e9. Mnoh\u00e9 rie\u0161enia st\u00e1le praktizuj\u00fa met\u00f3dy blokovania IP. In\u00fdm trv\u00e1 \u010das, k\u00fdm zhroma\u017edia prvotn\u00e9 d\u00e1ta na za\u010diatok pr\u00e1ce, a t\u00fdchto 10-15 min\u00fat m\u00f4\u017ee by\u0165 zranite\u013enos\u0165ou. Existuj\u00fa rie\u0161enia, ktor\u00e9 s\u00fa zalo\u017een\u00e9 na strojovom u\u010den\u00ed a ktor\u00e9 dok\u00e1\u017eu ur\u010di\u0165 bota pod\u013ea jeho spr\u00e1vania. A s\u00fa\u010dasne t\u00ed, na \u201etej\u201c strane, sa chv\u00e1lia, \u017ee u\u017e maj\u00fa boty, ktor\u00e9 m\u00f4\u017eu imitova\u0165 re\u00e1lne, od \u010dloveka nerozl\u00ed\u0161ite\u013en\u00e9 vzorce. Kto koho \u2014 zatia\u013e nie je jasn\u00e9.<\/p>\n

\u010co robi\u0165, ak mus\u00edte bojova\u0165 s profesion\u00e1lnymi t\u00edmami botanov a zlo\u017eit\u00fdmi, viacstup\u0148ov\u00fdmi \u00fatokmi naraz na viacer\u00fdch \u00farovniach?<\/p>\n

Na\u0161a sk\u00fasenos\u0165 ukazuje, \u017ee je potrebn\u00e9 zamera\u0165 sa na filtrovanie nelegit\u00edmnych po\u017eiadaviek bez blokovania IP adries. Pre zlo\u017eit\u00e9 DDoS \u00fatoky je potrebn\u00e9 filtrova\u0165 na viacer\u00fdch \u00farovniach, vr\u00e1tane transportnej \u00farovne, \u00farovne aplik\u00e1ci\u00ed a API rozhran\u00ed. V\u010faka tomu je mo\u017en\u00e9 odr\u00e1\u017ea\u0165 aj n\u00edzkofrekven\u010dn\u00e9 \u00fatoky, ktor\u00e9 s\u00fa zvy\u010dajne nevidite\u013en\u00e9, a preto s\u00fa \u010dasto prehliadan\u00e9. Nakoniec je potrebn\u00e9 pusti\u0165 v\u0161etk\u00fdch skuto\u010dn\u00fdch u\u017e\u00edvate\u013eov aj v \u010dase, ke\u010f prebieha akt\u00edvna f\u00e1za \u00fatoku.<\/p>\n

Po druh\u00e9, spolo\u010dnostiam je potrebn\u00e9 umo\u017eni\u0165 vytv\u00e1ra\u0165 vlastn\u00e9 viacstup\u0148ov\u00e9 syst\u00e9my ochrany, do ktor\u00fdch, okrem n\u00e1strojov na prevenciu DDoS \u00fatokov, bud\u00fa integrovan\u00e9 syst\u00e9my proti podvodom, kr\u00e1de\u017ei d\u00e1t, ochrane obsahu a \u010fal\u0161ie. <\/p>\n

Po tretie, musia pracova\u0165 v re\u00e1lnom \u010dase od prv\u00e9ho dopytu \u2014 schopnos\u0165 okam\u017eite reagova\u0165 na bezpe\u010dnostn\u00e9 incidenty v\u00fdrazne zvy\u0161uje \u0161ance na zabr\u00e1nenie \u00fatoku alebo zmiernenie jeho de\u0161trukt\u00edvnej sily.<\/p>\n

Najbli\u017e\u0161ia bud\u00facnos\u0165: spr\u00e1va reput\u00e1cie a zber ve\u013ek\u00fdch d\u00e1t pomocou botov
\nHist\u00f3ria DDoS sa vyv\u00edjala od jednoduch\u00fdch po zlo\u017eit\u00e9. Spo\u010diatku bolo cie\u013eom zlodejov zastavi\u0165 prev\u00e1dzku webovej str\u00e1nky. Teraz pova\u017euj\u00fa za efekt\u00edvnej\u0161ie zamera\u0165 sa na hlavn\u00e9 obchodn\u00e9 procesy.<\/p>\n

Zlo\u017eitost \u00fatokov bude na\u010falej r\u00e1s\u0165, je to nevyhnutn\u00e9. Okrem toho, \u010do robia zl\u00e9 roboty teraz \u2014 kr\u00e1de\u017ee d\u00e1t a ich fal\u0161ovanie, vydieranie, spam \u2014 roboty bud\u00fa zbiera\u0165 d\u00e1ta z mnoh\u00fdch zdrojov (Big Data) a vytv\u00e1ra\u0165 \u201ed\u00f4veryhodn\u00e9\u201c falo\u0161n\u00e9 \u00fa\u010dty na ovplyv\u0148ovanie, spr\u00e1vu reput\u00e1cie alebo masov\u00e9 phishingov\u00e9 \u00fatoky.<\/p>\n

V s\u00fa\u010dasnosti si len ve\u013ek\u00e9 spolo\u010dnosti m\u00f4\u017eu dovoli\u0165 invest\u00edcie do ochrany proti DDoS a robotom, ale aj oni nie v\u017edy dok\u00e1\u017eu \u00faplne sledova\u0165 a filtrova\u0165 prev\u00e1dzku generovan\u00fa robotmi. Jedin\u00fdm pozit\u00edvom, \u017ee \u00fatoky robotov sa komplikuj\u00fa, je to, \u017ee podnecuj\u00fa trh vytv\u00e1ra\u0165 \u201einteligentn\u00e9\u201c a sofistikovanej\u0161ie rie\u0161enia na ochranu.<\/p>\n

\u010co si mysl\u00edte \u2014 ako sa bude rozv\u00edja\u0165 odvetvie ochrany proti robotom a ak\u00e9 rie\u0161enia s\u00fa na trhu potrebn\u00e9 u\u017e teraz?
\n
Zdroj: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0430\u0440\u0443 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u0443\u0441\u043b\u0443\u0433 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0431\u044b\u043b\u043e \u0434\u043e\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u0438 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 DDoS-\u0430\u0442\u0430\u043a. \u041d\u043e \u0443\u0436\u0435 \u043a 1-\u043c\u0443 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0443 2019 \u0433\u043e\u0434\u0430 \u0442\u0435 \u0436\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u0438\u0445 \u043e\u0448\u0435\u043b\u043e\u043c\u043b\u044f\u044e\u0449\u0435\u043c \u0440\u043e\u0441\u0442\u0435 \u043d\u0430 84%. \u0410 \u0434\u0430\u043b\u044c\u0448\u0435 \u0432\u0441\u0435 \u043f\u043e\u0448\u043b\u043e \u043f\u043e \u043d\u0430\u0440\u0430\u0441\u0442\u0430\u044e\u0449\u0435\u0439. \u0414\u0430\u0436\u0435 \u043f\u0430\u043d\u0434\u0435\u043c\u0438\u044f \u043d\u0435 \u043f\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0430\u0442\u043c\u043e\u0441\u0444\u0435\u0440\u0435 \u043c\u0438\u0440\u0430 \u2014 \u043d\u0430\u043f\u0440\u043e\u0442\u0438\u0432, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0438 \u0441\u043f\u0430\u043c\u0435\u0440\u044b \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u043b\u0438 \u044d\u0442\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u044b\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":87698,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-87697","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DDoS ide do offline | ProHoster","description":"Pred p\u00e1r rokmi u\u017e v\u00fdskumn\u00e9 agent\u00fary a poskytovatelia informa\u010dn\u00fdch bezpe\u010dnostn\u00fdch slu\u017eieb za\u010dali spr\u00e1vy o","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/ddos-idet-v-offlajn","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47DDoS \u0438\u0434\u0435\u0442 \u0432 \u043e\u0444\u0444\u043b\u0430\u0439\u043d | ProHoster","og:description":"\u041f\u0430\u0440\u0443 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u0443\u0441\u043b\u0443\u0433 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0431\u044b\u043b\u043e \u0434\u043e\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u043e","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/ddos-idet-v-offlajn","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-09T11:42:31+00:00","article:modified_time":"2020-07-09T11:42:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"87697","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:46:50","updated":"2022-09-28 14:28:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/87697","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=87697"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/87697\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/87698"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=87697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=87697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=87697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}