Kambani yekudzivirira yeDDoS pachayo yakatanga DDoS kurwiswa, muvambi wayo akabvuma

Pakazosvika 2016, vDos yakava sevhisi inonyanya kufarirwa pasi rose yekuraira DDoS kurwiswa

Kana iwe uchitenda dzidziso dzekurangana, saka makambani eantivirus pachawo anogovera mavhairasi, uye DDoS kurwisa masevhisi ekudzivirira ivo pachavo vanotanga kurwiswa uku. Zvechokwadi, iyi ingano ... kana kwete?

Ndira 16, 2020 Federal District Court yeNew Jersey kuwanikwa ane mhosva Tucker Preston, 22, weMacon, Georgia, pane imwe nhamba yekukuvadza yakachengetedzwa makomputa nekutumira chirongwa, kodhi kana kuraira. Tucker ndiye muvambi we BackConnect Security LLC, iyo yakapa dziviriro kubva kuDDoS kurwiswa. Muzvinabhizimisi wechidiki haana kukwanisa kukunda muedzo wekutsiva kune vatengi vake vairambana.

Nyaya inosiririsa yaTucker Preston yakatanga muna 2014, apo mubiki wechidiki, pamwe neshamwari yake Marshal Webb, vakatanga kambani BackConnect Security LLC, iyo yakabva yabviswa kubva kuBackConnect, Inc. MunaSeptember 2016, kambani iyi kuvheneka panguva yekushanda kuvhara vDos sevhisi, iyo panguva iyoyo yainzi ndiyo inonyanya kufarirwa sevhisi munyika yekuraira kurwiswa kweDDoS. Kambani yeBackConnect yakazonzi pachayo yakarwiswa nevDos - ikaita "counterattack" isina kujairika, ichitora mazana maviri nemakumi mashanu neshanu kero dzeIP kero. BGP kubatwa (BGP kupambwa). Kuita kurwisa kwakadaro kudzivirira zvido zvemunhu kwakonzera kukakavara munharaunda yekuchengetedzwa kwemashoko. Vazhinji vakanzwa kuti BackConnect yakanga yadarika.

Kubata kuri nyore kweBGP kunoitwa nekuzivisa prefix yemumwe munhu seyako. Uplinks/vezera vanoigamuchira, uye inotanga kupararira paInternet. Semuenzaniso, muna 2017, zvichinzi nekuda kwekutadza kwesoftware, Rostelecom (AS12389) akatanga kuzivisa prefixes Mastercard (AS26380), Visa uye mamwe masangano emari. BackConnect yakashanda nenzira yakafanana payakatorera IP kero kubva kuBulgarian hoster Verdina.net.

BackConnect CEO Bryant Townsend vakaita zvikonzero muNANOG nhau yevashandisi venetiweki. Akataura kuti sarudzo yekurwisa kero yemuvengi haina kurerutswa, asi vakagadzirira kupindura nezvezviito zvavo: “Kunyangwe isu takanga tine mukana wekuviga zvatakaita, takafunga kuti zvaizova zvakaipa. Ndakatora nguva yakawanda ndichifunga nezvesarudzo iyi uye kuti ingaratidze sei zvakaipa pakambani neni mumaziso evamwe vanhu, asi pakupedzisira ndakaitsigira. "

Sezvazvakazoitika, aka hakasi kekutanga BackConnect ichishandisa BGP kubata, uye kambani kazhinji ine nhoroondo yakasviba. Kunyangwe zvinofanirwa kucherechedzwa kuti BGP kubatwa haisi nguva dzose inoshandiswa kune zvakaipa. Brian Krebs anonyorakuti iye pachake anoshandisa masevhisi eProlexic Communications (ikozvino chikamu cheAkamai Technologies) chekudzivirira kweDDoS. Akanga ari iye akafunga nzira yekushandisa BGP hijack kudzivirira kubva kuDDoS kurwiswa.

Kana DDoS akarwiswa akabatwa neProlexic kuti abatsirwe, iyo yekupedzisira inotamisa IP kero yemutengi kwaari, izvo zvinoibvumira kuongorora uye kusefa traffic inouya.

Sezvo BackConnect yakapa masevhisi ekudzivirira eDDoS, ongororo yakaitwa kuti ione kuti ndezvipi zveBGP zvingatorwa sezviri pamutemo mukuda kwevatengi vavo, uye ndezvipi zvairatidza kufungidzira. Izvi zvinotora nguva yekutora kero dzevamwe vanhu, kuti chirevo cheumwe munhu chakashambadzirwa sei sechavo, kana pane chibvumirano chakasimbiswa nemutengi, nezvimwewo. Tafura inoratidza kuti zvimwe zvezviito zveBackConnect zvinoratidzika zvakanyanya kunyumwira.

Sezviri pachena, vamwe vevakabatwa vakamhan'arira BackConnect. IN Kureurura kwaPreston (pdf) Zita rekambani yakazivikanwa nedare kuti ndiye akakuvadzwa harina kuratidzwa. Munhu akabatwa anotaurwa nezvake mugwaro se Mubatwa 1.

Sezvambotaurwa pamusoro, kuferefetwa kwezviitiko zveBackConnect kwakatanga mushure mekunge vDos sevhisi yabiwa. Zvadaro mazita akazozivikanwa vatariri vebasa, pamwe neiyo vDos dhatabhesi, kusanganisira vashandisi vayo vakanyoreswa uye marekodhi evatengi vakabhadhara vDos kuita DDoS kurwisa.

Izvi zvinyorwa zvakaratidza kuti imwe yeakaunti pawebhusaiti yevDos yakavhurwa kune email kero dzakabatana nedura rakanyoreswa muzita reTucker Preston. Iyi account yakatanga kurwiswa nenhamba huru yezvinangwa, kusanganisira kurwiswa kwakawanda pamanetiweki ekwavo Yemahara Software Foundation (FSF).

Muna 2016, aimbove FSF sysadmin akati iyo isiri purofiti yakambofunga kubatana neBackConnect, uye kurwiswa kwakatanga nguva pfupi mushure mekunge FSF yati yaizotsvaga imwe femu kuti ipe DDoS dziviriro.

Maererano ne chirevo Dhipatimendi reUnited States reJustice, pakuverenga uku, Tucker Preston anotarisana nemakore gumi mujeri uye faindi inosvika $10, iyo inopeta kaviri kuwana kana kurasikirwa zvachose kubva kune mhosva. Mutongo uchaziviswa muna Chivabvu 250, 000.

GlobalSign inopa scalable PKI mhinduro kumasangano eese saizi.
Mamwe mashoko: +7 (499) 678 2210, [email inodzivirirwa].

Source: www.habr.com