Ini ndanga ndichifunga kuti zvingave zvakanaka kuvhara zviitiko kubva kumisangano yepasirese. Uye kwete muchidimbu chete, asi kutaura pamusoro pemishumo inonakidza. Ndinounza kwauri kune yekutanga inopisa gumi.
1. Kumirira ino hushamwari tandem yekurwiswa kweIoT uye ransomware
Muna 2016, takaona kuwedzera nekukurumidza mukurwiswa kweransomwari. Isu takanga tisati tapora kubva pakurwiswa uku pakaitika fungu idzva rekurwisa kweDDoS tichishandisa IoT. Mumushumo uyu, munyori anopa tsananguro-nhanho-nhanho yekuti kurwiswa kwerudzikinuro kunoitika sei. Mashandiro anoita ransomware, uye izvo muongorori anofanira kuita padanho rega rega kurwisa ransomware.
Mukuita kudaro, anovimba nenzira dzakasimbiswa. Ipapo mutauri anojekesa kuti IoT inobatanidzwa sei mukurwiswa kweDDoS: anotaurira kuti ibasa ripi rinoitwa nemalware mukuita kurwiswa uku (kuzotevera rubatsiro pakuita kurwisa kweDDoS neuto reIoT). Inotaurawo nezvekuti tandem yeransomware uye kurwiswa kweIoT kungave kutyisidzira kukuru mumakore anotevera. Mutauri ndiye munyori wemabhuku anoti "Malware, Rootkits & Botnets: A Beginner's Guide", "Advanced Malware Analysis", "Hacking Exposed: Malware & Rootkits Secrets & Solutions" - saka anoshuma neruzivo rwenyaya yacho.
2. βVhura muromo wako, taura 0x41414141β: Kurwiswa kwezvehutano cyberinfrastructure
Michina yekurapa yakabatana neInternet ichokwadi chekiriniki chinowanikwa kwose kwose. Midziyo yakadaro inobatsira kuvashandi vezvokurapa, sezvo ichigadzira chikamu chakakosha chemaitiro. Nekudaro, iyi midziyo ine zvakawanda zvisingakwanisi (zvese zviri zviviri software nehardware), izvo zvinovhura nzvimbo yakafara yebasa kune anogona kurwisa. Mumushumo, mukurukuri anogovera ruzivo rwake rwekuita mapentest ezvokurapa cyberinfrastructure; uye zvakare inotaura nezvekuti vanorwisa vanokanganisa sei michina yekurapa.
Mukurukuri anotsanangura: 1) kuti vanorwisa vanoshandisa sei mitemo yekukurukurirana kwevaridzi, 2) maitiro avanotarisa kusakanganiswa mumasevhisi etiweki, 3) maitiro avanokanganisa masisitimu ekutsigira hupenyu, 4) mashandisiro avanoita hardware debugging interfaces uye system data bhasi; 5) kurwisa kwavanoita mawireless interfaces uye chaiyo proprietary wireless technologies; 6) mapindiro avanopinda masystem eruzivo rwezvekurapa, vozoverenga nekugadzirisa: ruzivo rwemunhu nezvehutano hwemurwere; zvinyorwa zvepamutemo zvekurapa, zviri mukati mazvo zvinowanzovanzwa kunyange kubva kumurwere; 7) nzira yekukurukurirana iyo michina yekurapa inoshandisa kuchinjana ruzivo uye mirairo yebasa inokanganiswa; 8) kuti kuwana kwevashandi vezvokurapa kune michina kushoma sei; kana kuvhara zvachose.
Mukati mepentest yake, mukurukuri akawana zvinetso zvakawanda nemichina yokurapa. Pakati pavo: 1) cryptography isina simba, 2) mukana wekugadzirisa data; 3) mukana wekudzoserwa kure kwemidziyo, 3) kusagadzikana mune proprietary protocol, 4) mukana wekupinda kusingatenderwe kune dhatabhesi, 5) yakaoma-coded, isingachinjike logins / password. Pamwe nerumwe ruzivo rwakadzama rwakachengetwa ingave mumidziyo firmware kana mumabhinari ehurongwa; 6) kukanganisa kwemidziyo yekurapa kune kure kure DoS kurwiswa.
Mushure mekuverenga chirevo, zvinova pachena kuti cybersecurity muchikamu chekurapa nhasi inyaya yekiriniki uye inoda kutarisirwa kwakanyanya.
3. Zino rinoshandiswa pamucheto wezvinyorwa zvekushambadzira skewer
Mazuva ese, mamirioni avanhu anoenda kumasocial network: kubasa, kuvaraidza, kana nekuda. Pasi pehodhi yesocial network kune Ads mapuratifomu asingaonekwe kune avhareji mushanyi uye ane basa rekuendesa kwakakodzera mamiriro ekushambadzira kune vashanyi vesocial network. Ads mapuratifomu ari nyore kushandisa uye anoshanda zvakanyanya. Nokudaro, ivo vari kudiwa pakati pevashambadziri.
Pamusoro pekugona kusvika kune vakawanda vateereri, izvo zvinobatsira zvakanyanya kune bhizinesi, Ads mapuratifomu anotenderawo kuti udzikisire tarisiro yako pasi kune mumwe munhu chaiye. Zvakare, kushanda kweazvino Ads mapuratifomu anotokutendera iwe kuti usarudze kuti ndeipi yeakawanda magajeti emunhu uyu kuratidza kushambadzira.
Izvozvo. emazuva ano Ads mapuratifomu anobvumira mushambadzi kuti asvike chero munhu, chero pasi. Asi mukana uyu unogona zvakare kushandiswa nevanorwisa - segedhi rekuenda kunetiweki iyo yavanoda kuitirwa inoshanda. Mutauri anoratidza kuti mushambadzi ane hutsinye angashandise sei Ads chikuva kuti anange chaizvo mushandirapamwe wavo wekubira vanhu kuti vaunze kubiridzira kune mumwe munhu.
4. Ma hackers chaiwo anonzvenga zvakanangwa kushambadzira
Isu tinoshandisa akawanda akasiyana masevhisi emakombuta muhupenyu hwedu hwemazuva ese. Uye zvakatiomera kuti tirege pavari, kunyangwe tikangoerekana taziva kuti vari kutiongorora zvizere. Saka zvakazara zvekuti vanoteedzera kufamba kwedu kwese kwemuviri uye kudzvanya kwemunwe wese.
Mukurukuri anotsanangura zvakajeka kuti vatengesi vemazuva ano vanoshandisa sei nzira dzakasiyana-siyana dzokutarisa esoteric. Isu nezve mobile paranoia, nezve yakazara surveillance. Uye vaverengi vazhinji vakatora zvakanyorwa sejoke risingakuvadzi, asi kubva mushumo wakapihwa zviri pachena kuti vatengesi vemazuva ano vari kutoshandisa zvizere matekinoroji akadaro kutitevera.
Chii chaungaite, iyo mamiriro ekushambadzira indasitiri, iyo inopisa iyi yakazara yekutarisa, inofamba nekusvetuka uye miganhu. Kusvika padanho rekuti mapuratifomu eAds emazuva ano anogona kutevedzera kwete chete chiitiko chetiweki chemunhu (makiyi, mbeva pointer mafambiro, nezvimwewo), asiwo maitiro ake emuviri (matsikiro atinoita makiyi uye kufambisa mbeva). Izvozvo. maturusi emazuva ano ekutevera emapuratifomu eAds, akavakirwa mumasevhisi asina kufungidzira hupenyu, kwete kungokambaira pasi pechipfeko chedu chemukati, asi kunyangwe pasi peganda redu. Kana isu tisina kugona kubuda muaya masevhisi anotarisisa zvakanyanya, saka wadii kumboedza kuabhowa nemashoko asina basa?
Chirevo chakaratidza chigadziriso chemunyori (software uye hardware bot), iyo inobvumira: 1) injecting Bluetooth beacons; 2) ruzha iyo data yakaunganidzwa kubva mumotokari pa-bhodhi sensors; 3) kunyepedzera zvitupa zvekuzivikanwa zvefoni mbozha; 4) ita ruzha nenzira yekudzvanya kwemunwe (pane keyboard, mbeva uye sensor). Ruzivo rwese urwu runozivikanwa kushandiswa kunanga kushambadza panharembozha.
Chiratidziro chinoratidza kuti mushure mekutangisa mudziyo wemunyori, iyo yekutevera system inopenga; zvokuti mashoko ainounganidza anova nemhere-mhere uye asina kururama zvokuti haazombobatsiri vaoni vedu. Sejee rakanaka, mukurukuri anoratidza kuti, nekuda kwechigadzirwa chakaunzwa, iyo "tracking system" inotanga kuona hacker ane makore 32 semusikana wemakore gumi nemaviri anopenga murudo nemabhiza.
5. Makore makumi maviri eMMORPG kubira: inotonhorera magiraidhi, zvakafanana zviitiko
Nyaya yekubira MMORPGs yakakurukurwa kuDEF CON kwemakore makumi maviri. Achipa rukudzo kumhemberero yegore negore, mukurukuri anotsanangura nguva dzinokosha zvikuru kubva muhurukuro idzi. Pamusoro pezvo, anotaura nezve adventures yake mumunda wepoaching online matoyi. Kubva Ultima Online (muna 20). Uye makore anotevera: Rima Zera reCamelot, Anarchy Online, Asherons Call 1997, ShadowBane, Lineage II, Final Fantasy XI/XIV, World of Warcraft. Kusanganisira vakati wandei vamiriri vatsva: Guild Wars 2 uye Vakuru Mipumburu Pamhepo. Uye iyi haisi iyo nhoroondo yese yemukurukuri!
Chirevo chinopa tekinoroji ruzivo rwekugadzira zvibodzwa zveMMORPGs zvinokubatsira kuti ubate mari chaiyo, uye inoenderana nechero MMORPG. Mukurukuri anotaura muchidimbu nezvekurwisana kusingagumi pakati pevanobira zvisiri pamutemo (vagadziri vezvinoitwa) uye βkudzora hoveβ; uye nezve hunyanzvi hwazvino mamiriro emujaho wezvombo uyu.
Inotsanangura nzira yekuongorora kwepakeji yakadzama uye maitiro ekugadzirisa zvakashandiswa kuitira kuti poaching irege kuonekwa padivi reseva. Kusanganisira kuburitsa yazvino kushandiswa, iyo panguva yemushumo yaive nemukana pane "hove yekuongorora" mujaho wezvombo.
6. Ngatichekei ma robot Skynet isati yauya
Marobhoti ndiwo ane hasha mazuvano. Munguva yemberi iri pedyo, vachave kwose kwose: pamabasa ehondo, mukuvhiya, mukuvaka skyscrapers; vabatsiri vezvitoro muzvitoro; vashandi vepachipatara; vatsigiri vebhizimisi, vadiwa vepabonde; vabiki vepamba uye nhengo dzakazara dzemhuri.
Sezvo marobhoti ecosystem achiwedzera uye pesvedzero yemarobhoti munharaunda yedu uye hupfumi hwenyika huchikura nekukurumidza, vari kutanga kutyisidzira vanhu, mhuka nemabhizinesi. Pakati pavo, marobhoti makomputa ane maoko, makumbo nemavhiri. Uye tichipihwa chokwadi chemazuva ano checybersecurity, aya makomputa asina njodzi ane maoko, makumbo nemavhiri.
Kusagadzikana kweSoftware uye Hardware emarobhoti emazuva ano anobvumira munhu anorwisa kushandisa masimba erobhoti kukonzera kukuvara kwemidziyo kana mari; kana kuti netsaona kana kuti nemaune kuisa upenyu hwomunhu pangozi. Iyo inogona kutyisidzira chero chinhu chiri pedyo nemarobhoti inowedzera exponentially nekufamba kwenguva. Uyezve, ivo vari kuwedzera mumamiriro ezvinhu ayo iyo yakasimbiswa komputa yekuchengetedza indasitiri haina kumbobvira yaona.
Mutsvagiridzo yake ichangoburwa, mutauri akawana kusazvibata kwakawanda mumba, emakambani uye emaindasitiri marobhoti - kubva kune vanozivikanwa vagadziri. Mumushumo, anoburitsa ruzivo rwehunyanzvi hwekutyisidzira kwazvino uye anotsanangura chaizvo kuti vanorwisa vanogona kukanganisa sei zvikamu zvakasiyana zverobhoti ecosystem. Nekuratidzwa kwekushanda.
Pakati pezvinetso zvakawanikwa nemukurukuri murobhoti ecosystem: 1) kusachengeteka kutaurirana; 2) mukana wekukuvara kwendangariro; 3) kusagadzikana kunobvumira kure kure kodhi kuuraya (RCE); 4) mukana wekutyora kuvimbika kwefaira system; 5) matambudziko nemvumo; uye mune dzimwe nguva kusavapo kwayo zvachose; 6) cryptography isina simba; 7) matambudziko nekuvandudza firmware; 8) matambudziko nekuona zvakavanzika; 8) masimba asina kunyorwa (zvakare ari panjodzi kuRCE, nezvimwewo); 9) isina simba default configuration; 10) panjodzi Open Source "maitiro ekudzora marobhoti" uye software maraibhurari.
Mutauri anopa zviratidziro zvepamoyo zvakasiyana siyana zvekubira zvine chekuita necyber espionage, kutyisidzira kwemukati, kukuvadzwa kwemidziyo, nezvimwe. Achitsanangura mamiriro ezvinhu echokwadi anogona kuonekwa musango, mukurukuri anotsanangura kuti kusachengeteka kwemichina yemarobhoti yemazuva ano kungaita sei pakubirwa. Inotsanangura kuti sei marobhoti akabirwa ari nengozi zvakanyanya kupfuura chero humwe tekinoroji yakakanganiswa.
Mukurukuri anokweverawo pfungwa kunyaya yekuti mapurojekiti ekutsvaga asina kuchena anoenda mukugadzirwa nyaya dzekuchengetedza dzisati dzagadziriswa. Marketing inokunda semazuva ese. Iyi mamiriro ezvinhu asina kunaka anoda kugadziriswa nekukurumidza. Kusvikira Skynet vauya. Kunyangwe ... Mushumo unotevera unoratidza kuti Skynet yatosvika.
7. Militarization yekudzidza muchina
Panjodzi yekunzi sainzi anopenga, mutauri achiri kubatwa ne "chisikwa chitsva chadhiyabhorosi", achizivisa nekuzvikudza DeepHack: yakavhurika sosi yehacker AI. Iyi bot ndeye-yega yekudzidza yewebhu application hacker. Iyo yakavakirwa pane neural network inodzidza nekuedza uye kukanganisa. Panguva imwecheteyo, DeepHack inobata zvinogona kuitika kune munhu kubva mumiedzo iyi uye zvikanganiso nekuzvidzwa kunotyisa.
Ichishandisa algorithm imwe chete yepasirese, inodzidza kushandisa marudzi akasiyana ekusagadzikana. DeepHack inovhura musuwo wenzvimbo yehacker AI, mazhinji ayo anogona kutotarisirwa munguva pfupi iri kutevera. Panyaya iyi, mukurukuri anodada anozivisa bot yake seβmavambo okupedzisira.β
Mutauri anotenda kuti AI-based hacking maturusi, ayo achakurumidza kuoneka, achitevera DeepHack, inyanzvi nyowani tekinoroji iyo vadziviriri vecyber uye vanorwisa cyber havasati vatora. Mutauri anovimbisa kuti mugore rinotevera, mumwe nemumwe wedu angave achinyora muchina wekudzidzira kubira maturusi isu pachedu, kana kuedza neshungu kuzvidzivirira kubva kwavari. Hapana chetatu.
Uyewo, zvingava zvokuseka kana kuti zvakakomba, mukurukuri anoti: βHazvichisiri kodzero yenyanzvi dzadhiabhorosi, dystopia isingadzivisiki yeAI yatowanika kumunhu wose nhasi. Saka batana nesu uye isu tinokuratidza maitiro aungaita mukuparadzwa kwevanhu nekugadzira yako wega mauto emuchina kudzidza sisitimu. Ehe, kana vaenzi vanobva mune ramangwana vasingatitadzise kuita izvi."
8. Rangarira zvese: kuisa mapassword mundangariro yekuziva
Chii chinonzi cognitive memory? Unogona sei "kuisa" password ipapo? Izvi zvakatochengetedzeka here? Uye nei maitiro akadaro zvachose? Pfungwa ndeyokuti nemaitiro aya, hauzokwanisi kudurura mapassword ako, kunyangwe uchimanikidzwa; uchichengetedza kugona kupinda muhurongwa.
Hurukuro inotanga netsananguro yekuti ndangariro yekuziva chii. Inobva yatsanangura kuti ndangariro dzakajeka uye dzakajeka dzinosiyana sei. Tevere, pfungwa dzekuziva uye kusaziva dzinokurukurwa. Uye inotsanangurawo kuti rudzii rwechinhu ichi - kuziva. Inotsanangura kuti ndangariro dzedu dzinoisa sei, dzinochengeta uye dzinotora ruzivo. Mipimo yendangariro yomunhu inorondedzerwa. Uye zvakare kuti ndangariro dzedu dzinodzidza sei. Uye chirevo chinopera nenhau nezve tsvakiridzo yemazuva ano mundangariro yekuziva kwevanhu, mumamiriro ekuita mapassword mairi.
Mukurukuri, hongu, haana kuunza chirevo chekuda chakaitwa mumusoro wemharidzo yake kumhinduro yakakwana, asi panguva imwechete akataura zvidzidzo zvakawanda zvinonakidza zviri munzira dzekugadzirisa dambudziko. Kunyanya, tsvagiridzo kubva kuStanford University, iyo nyaya iri musoro mumwe chete. Uye chirongwa chekugadzira chimiro chemunhu-muchina wevanhu vasingaone - nekubatana kwakananga kuhuropi. Mukurukuri anotaurawo nezvekuongorora kwakaitwa nemasayendisiti eGermany akakwanisa kuita algorithmic connection pakati pemagetsi emagetsi europi nemashoko ekutaura; Chishandiso chavakagadzira chinokubvumira kutaipa mavara nekungofunga nezvazvo. Chimwe chidzidzo chinonakidza icho mukurukuri anoreva ndeye neurotelephone, chinongedzo pakati pehuropi nefoni mbozha, kuburikidza newireless EEG headset (Dartmouth College, USA).
Sezvatocherechedzwa, mukurukuri haana kuunza chirevo cheshungu chakaitwa mumusoro wemharidzo yake kumhinduro izere. Nekudaro, mutauri anocherekedza kuti kunyangwe pasina tekinoroji yekuisa password mundangariro yekuziva parizvino, malware inoedza kuibvisa kubva ipapo yatovepo.
9. Uye mudiki wacho akabvunza kuti: "Munofunga kuti matsotsi ehurumende chete anogona kuita cyber kurwisa pane grid yemagetsi?"
Kushanda zvakanaka kwemagetsi kwakakosha zvakanyanya muhupenyu hwedu hwezuva nezuva. Kuvimba kwedu nemagetsi kunova kunyanya kuoneka kana akadzimwa - kunyangwe kwenguva pfupi. Nhasi zvinogamuchirwa kuti kurwiswa kwecyber pane grid yemagetsi kwakaomarara uye kunowanikwa chete kune vanobira hurumende.
Mukurukuri anopikisa huchenjeri uhwu hwakajairika uye anopa tsananguro yakadzama yekurwiswa kwegedhi remagetsi, iyo mutengo unogamuchirwa kunyangwe kune vasiri vehurumende hackers. Inoratidza ruzivo rwakaunganidzwa kubva kuInternet iyo ichave yakakosha mukuenzanisira uye kuongorora iyo yakanangwa yemagetsi grid. Uye inotsanangurawo kuti ruzivo urwu rungashandiswa sei kuenzanisa kurwiswa pamagetsi emagetsi kutenderera pasirese.
Chirevo chinoratidzawo kusagadzikana kwakanyanya kwakawanikwa nemutauri muGeneral Electric Multilin zvigadzirwa, izvo zvinoshandiswa zvakanyanya muchikamu chesimba. Mutauri anotsanangura kuti akakanganisa sei zvachose encryption algorithm inoshandiswa mune idzi masisitimu. Iyi algorithm inoshandiswa muGeneral Electric Multilin zvigadzirwa zvekutaurirana zvakachengeteka zvemukati ma subsystems, uye nekutonga kweaya ma subsystems. Kusanganisira kupa mvumo vashandisi uye nekupa mukana kune yakasarudzika mashandiro.
Mushure mekudzidza makodhi ekuwana (nekuda kwekukanganisa iyo encryption algorithm), anorwisa anogona kudzima zvachose chishandiso uye kudzima magetsi muzvikamu zvakatsanangurwa zvegidhi remagetsi; block operators. Pamusoro pezvo, mutauri anoratidza hunyanzvi hwekuverenga kure kure madhijitari akasiiwa nemidziyo iri panjodzi yekurwiswa necyber.
10. Internet inotoziva kuti ndine mimba
Utano hwevakadzi ibhizimusi guru. Pane huwandu hwemaapplication eAroid pamusika ayo anobatsira vakadzi kuteedzera kutenderera kwavo pamwedzi, kuziva nguva yavanogona kubata pamuviri, kana kutarisisa mamiriro avo ekuzvitakura. Aya maapplication anokurudzira vakadzi kunyora zvakadzama zvehupenyu hwavo, senge manyawi, kuita bonde, kurovedza muviri, zviratidzo zvemuviri, kureba, uremu nezvimwe.
Asi maapplication aya akavanzika zvakadii, uye akachengeteka zvakadii? Mushure mezvose, kana application ikachengeta zvakadzama kudaro nezvehupenyu hwedu pachedu, zvingave zvakanaka kana ikasagovera iyi data nemumwe munhu; semuenzaniso, nekambani ine hushamwari (inoshambadzira yakanangwa, zvichingodaro) kana nemudiwa/mubereki ane hutsinye.
Mutauri anoburitsa mhedzisiro yekuongorora kwake cybersecurity kweanopfuura gumi nemaviri maapplication ayo anofanotaura mukana wekubata pamuviri uye kuona mafambiro epamuviri. Akaona kuti mazhinji emaapplication aya ane matambudziko akakura necybersecurity mune zvese uye kuvanzika kunyanya.
Source: www.habr.com