Nzira dzemazuva ano dzekutsanangura zvinodikanwa zvekushanda kune masisitimu. Alistair Coburn. Ongororo yebhuku newedzero

Bhuku rinotsanangura nzira imwe yekunyora chikamu chechirevo chedambudziko, iyo nzira yekushandisa kesi.

Chii? Iyi ndiyo tsananguro yemushandisi wekudyidzana mamiriro nehurongwa (kana nebhizinesi). Muchiitiko ichi, hurongwa hunoita sebhokisi dema (uye izvi zvinoita kuti zvikwanise kuparadzanisa basa rakaoma rekugadzira mukugadzira kupindirana uye kuve nechokwadi chekubatana uku). Panguva imwecheteyo, zviyero zvezvinyorwa zvinotangwa, izvo zvinoita kuti kuve nyore kuverenga, kusanganisira kune vasiri vatori vechikamu, uye inobvumira mamwe macheki ekukwana uye kutevedzera zvinangwa zveanobatanidzwa.

Shandisa muenzaniso wenyaya

Iyo mamiriro anotaridzika sei, uchishandisa muenzaniso wemvumo pane saiti kuburikidza neemail:

(System) Pinda kune webhusaiti kuti uwane yako account account. ~~ (sea level)

Context: Mutengi asina mvumo anopinda pasaiti kuitira kuti saiti imuzive uye imuratidze ruzivo rwemunhu: nhoroondo yekubhurawuza, nhoroondo yekutenga, nhamba yazvino yemabhonasi mapoinzi, nezvimwewo, uchishandisa email sekupinda. 
Chikamu: chinangwa chemushandisi
Mutambi mukuru: mutengi (mushanyi wechitoro chedu chepamhepo)
Chikumbiro: Kudyidzana kwevatengi newebhusaiti yechitoro online
Vanobatanidzwa uye zvavanofarira:

• mushambadzi anoda huwandu hwepamusoro hwevashanyi vesaiti kuti vazivikanwe kuti vawedzere kufukidzwa kwekutumira mameseji,
• nyanzvi yezvekuchengetedza inoda kuona kuti hapana nyaya dzekusvika kusingatenderwe kune data remuenzi, kusanganisira kuedza kufungidzira password yeakaundi imwe chete kana kutsvaga account ine password isina simba,
• munhu anorwisa anoda kuwana mabhonasi emunhu akabatwa,
• vakwikwidzi vanoda kusiya ongororo dzisina kunaka pane zvigadzirwa,
• Iyo botnet inoda kuwana mutengi wechitoro uye kushandisa kurwisa kuita kuti saiti isashande.

Preconditions: mushanyi haafaniri kubvumirwa.
Minimum garanti: mushanyi achaziva kana kuedza kwemvumo kwakabudirira kana kuti hakuna kubudirira.
Guarantees yekubudirira: mushanyi anobvumirwa.

Main Scenario:

1. Mutengi anotanga mvumo.
2. Iyo sisitimu inosimbisa kuti mutengi haabvumirwe uye haapfuure nhamba yeasina kubudirira mvumo yekuedza kubva pane yakapihwa chikamu (kutsvaga isina simba password yeakaundi akawanda) maererano ne "Security Rule No. 23".
3. Iyo sisitimu inowedzera counter yehuwandu hwekuyedzwa kwemvumo.
4. Iyo sisitimu inoratidza fomu remvumo kune mutengi.
5. Mutengi anoisa yake email uye password.
6. Iyo sisitimu inosimbisa kuvepo kwemutengi ane email yakadaro muhurongwa uye kuti password inofanana uye nhamba yekuedza kupinda muakaunti iyi haina kupfuudzwa maererano ne "Security Rule No. 24".
7. Iyo sisitimu inobvumidza mutengi, inowedzera nhoroondo yekubhurawuza uye dengu rechikamu chino nechikamu chekupedzisira cheakaundi yevatengi.
8. Iyo sisitimu inoratidza mvumo yekubudirira meseji uye inoenda kune script nhanho kubva iyo mutengi akavhiringidzwa kuti abvumidzwe. Mune ino kesi, iyo data iri papeji inorodha zvakare ichifunga nezve yako account data.

Extensions:
2.a. Mutengi akatotenderwa:
 2.a.1. Iyo sisitimu inozivisa mutengi nezve chokwadi chemvumo yakamboitwa uye inopa kukanganisa script kana kuenda kunhanho 4, uye kana nhanho yechitanhatu yapera nekubudirira, nhanho yechinomwe inoitwa nekujekeswa:
 2.a.7. Iyo sisitimu inobvisa mutengi pasi peakaundi yekare, inobvumidza mutengi pasi peakaundi nyowani, nepo nhoroondo yekubhurawuza uye ngoro yemusangano uyu wekudyidzana zvinoramba zviri muakaundi yekare uye usaendese kune itsva. Tevere, enda kunhanho 8.
2.b Nhamba yekuedza kwemvumo yakapfuura chikumbaridzo maererano ne "Security Rule No. 23":
 2.b.1 Enda kudanho rechina, captcha inoratidzwazve pafomu remvumo
 2.b.6 Sisitimu inosimbisa yekupinda Captcha
    2.b.6.1 Captcha yakapinda zvisizvo:
      2.b.6.1.1. iyo system inowedzera iyo counter yekusabudirira yemvumo yekuedza yeakaundi ino zvakare
      2.b.6.1.2. iyo system inoratidza meseji yekutadza uye inodzokera kunhanho 2
6.a. Hapana akaundi ine email iyi yawanikwa:
 6.a.1 Iyo sisitimu inoratidza meseji nezvekutadza uye inopa sarudzo yekuenda kunhanho 2 kana kuenda kune "Mushandisi Kunyoresa" mamiriro uye kuchengetedza iyo yakapinda email,
6.b. Pasiwedhi yeakaundi ine email iyi haienderane neyakaiswa:
 6.b.1 Sisitimu inowedzera kaunda yekusabudirira kuedza kupinda muakaundi ino.
 6.b.2 Sitimu inoratidza meseji yekutadza uye inopa sarudzo yekuenda kune "Password Recovery" mamiriro kana kuenda kunhanho yechipiri.
6.c: Yekuedza kupinda pakaunda yeakaundi iyi yadarika chikumbaridzo che "Security Rule No. 24."
 6.c.1 Iyo sisitimu inoratidza meseji nezve kuvharisa account yekuvharisa kwemaminetsi eX uye inoenderera kune nhanho 2.

Chii chikuru

Cheki dzekukwana uye kutevedzera zvinangwa, ndiko kuti, iwe unogona kupa zvinodikanwa kune mumwe muongorori kuti aonekwe, uchiita zvikanganiso zvishoma padanho rekugadzirisa dambudziko.

Kushanda nebhokisi dema system inobvumidza iwe kuparadzanisa kusimudzira uye kurongeka nemutengi wezvinozoitwa otomatiki kubva kune yekumisikidza nzira.

Icho chikamu chemuongorori nzira, chimwe chezvikamu zvikuru zvekushandisa. Mamiriro emushandisi anotsanangura nzira huru dzekufamba kwake, izvo zvinoderedza zvakanyanya rusununguko rwekusarudza kumugadziri uye mutengi uye zvinobatsira kuwedzera kukurumidza kwekugadzira dhizaini.

Ndiri kufadzwa nenzvimbo mune tsananguro iyo inosarudzika kune yega yega nhanho yekudyidzana inozivikanwa. Iyo yakazara IT sisitimu inofanirwa kupa kune imwe mhando yekusarudzika kubata, imwe nemaoko, imwe otomatiki (semumuenzaniso uri pamusoro).

Chiitiko chinoratidza kuti kubata-kusafungirwa-kunze kwekubata kunogona nyore kushandura sisitimu kuita hurongwa husina kunaka. Ndinoyeuka nyaya apo munguva dzeSoviet, kuti uwane chisarudzo, waifanira kuwana zvibvumirano zvakawanda kubva kumabasa akasiyana-siyana, uye zvinorwadza sei apo sevhisi yekupedzisira inoti - asi chikumbiro chako chiri muzita risiri iro kana kumwe kukanganisa mukati. nyora, itazve zvese uye gadzirisa zvese.

Ini kazhinji ndinosangana nemamiriro ezvinhu apo maitiro ekushandisa eiyo sisitimu isina kufungidzirwa kunze kwaida kwakakosha kugadzirisazve sisitimu. Nekuda kweizvi, chikamu cheshumba chebasa remuongorori chinopedzerwa pakubata kwakasiyana.

Runyoro rwemavara, kusiyana nemadhayagiramu, runobvumira zvimwe zvisiri izvo kuti zvizivikanwe uye kufukidzwa.

Kuwedzera kune nzira kubva pakuita

Iyo yekushandisa kesi haisi yakazvimirira yakasarudzika chikamu chechirevo, kusiyana nenyaya yemushandisi.

Muchiitiko chiri pamusoro, funga nezve “6.a. Hapana account ine email iyi yakawanikwa." uye nhanho inotevera "6.a.1 Iyo sisitimu inoratidza meseji yekutadza uye inoenderera kune nhanho 2." Zvinhu zvipi zvakaipa zvakanga zvasiiwa pachena? Kune mutengi, chero kudzoka kwakafanana nekuti basa rese raakaita achipinza data rinokandwa mudura. (Hazvioneki muzvinyorwa!) Chii chingaitwa? Vakazve script kuitira kuti izvi zvisaitike. Zvinoita here kuita izvi? Iwe unogona - semuenzaniso, tarisa kuGoogle mvumo script.

Scenario optimization

Iri bhuku rinotaura nezve kugadzirwa, asi rinotaura zvishoma nezve nzira dzekugonesa mamiriro akadai.

Asi zvinokwanisika kusimbisa nzira kuburikidza nekugadzirisa mamiriro ezvinhu, uye nzira yekushandiswa kwekugadzirisa inobvumira izvi kuti zviitwe. Kunyanya, iwe unofanirwa kufunga nezve imwe neimwe inosarudzika inoitika, tarisa chikonzero, uye kuvaka patsva script kuti ubvise kusarudzika kana kuderedza rwendo rwevatengi.

Paunenge uchiisa odha kubva kuchitoro chepamhepo, unofanirwa kupinda muguta rekutumira. Zvinogona kuitika kuti chitoro hachigone kuendesa zvinhu kuguta rakasarudzwa nemutengi nekuti haaendese ikoko, nekuda kwehukuru kurambidzwa, kana nekuda kwekushaikwa kwezvinhu mudura rinoenderana.

Kana tikangotsanangura mamiriro ekudyidzana panguva yekunyoresa, tinogona kunyora "kuzivisa mutengi kuti kuendesa hakugoneke uye kupa kushandura guta kana zviri mukati mengoro" (uye vazhinji vanoongorora vanoongorora vanomira ipapo). Asi kana pane zvakawanda zvezviitiko zvakadaro, ipapo mamiriro acho anogona kugadziriswa.

Chinhu chekutanga chaunofanirwa kuita kukurega usarudze chete guta ratinogona kuendesa. Kuita izvi rini? Usati wasarudza chigadzirwa pawebhusaiti (autodetection yeguta kuburikidza neIP nekujekesa).

Chechipiri, isu tinofanirwa kupa sarudzo chete yezvinhu zvatinokwanisa kuendesa kune mutengi. Kuita izvi rini? Panguva yekusarudza - pane chigadzirwa tile uye kadhi yechigadzirwa.

Idzi shanduko mbiri dzinoenda kure kure nekubvisa kusarudzika uku.

Zvinodikanwa zvekuyera uye metrics

Paunenge uchifunga nezve basa rekudzikisa kusarudzika kubata, unogona kuseta basa rekubika (kushandisa kesi haina kutsanangurwa). Mangani akasiyana aivepo, mune zvipi zviitiko zvakaitika, uye kuti mangani ezvinoitika zvakapfuura zvakabudirira.

Asi maiwe! Zvakaitika zvakaratidza kuti zvinodikanwa zvekuzivisa zvezviitiko zviri mufomu iri hazvina kukwana; zvinodikanwa kuti titarise zvinodiwa zvekurekodha kune maitiro anotsanangurwa zvakanyanya kwete muchimiro chekushandisa.

Kuwana Kushandiswa

Mukuita kwedu, isu takawedzera fomu yekutsanangura nyaya yekushandiswa netsananguro yezvakananga hunhu hwemasangano uye data kuti mutengi aite sarudzo, iyo inosimudzira inotevera kushandiswa.

Nekugadzirisa dhizaini, isu takawedzera chikamu chekuisa - kuratidza data.

Mune mamiriro ane mvumo, iyi inyaya yekuti mutengi anotenderwa muhurongwa. Kana mutengi achifanotenderwa, wobva waratidza yambiro nezve kushandura nhoroondo yekufambisa uye ngoro kuaccount nyowani mushure memvumo yakabudirira.

Kazhinji, uku ndiko kuratidzwa kweruzivo rwakakosha kune mutengi kuitira kuti aite sarudzo nezve zvimwe zvaanoita zvinoenderana nemamiriro ezvinhu (iwe unogona kubvunza kana iyi data yakakwana kune mutengi, chii chimwe chinodiwa, ruzivo rupi runoita. mutengi anofanira kuita zvisarudzo).  
Izvo zvakakoshawo kupatsanura ruzivo rwakapinda muminda yekupinza kana ichigadziriswa zvakasiyana uye nekugadzirwa kwezvakasiyana.

Mumuenzaniso nemvumo yemutengi, kana iwe ukaparadzanisa ruzivo rwakapinda mukupinda uye password, saka zvakakodzera kushandura script yemvumo kuratidza matanho ekupinda yakaparadzana yekupinda uye password yakasiyana (uye izvi zvinoitwa muYandex, Google, asi. hazvina kuitwa muzvitoro zvakawanda zvepamhepo).

Kusvika kune inodiwa data shanduko

Iwe unogona zvakare kubvisa zvinodiwa zvekushandura data algorithms kubva pane script.

mienzaniso:

• Kuita sarudzo yekutenga chigadzirwa muchitoro chepamhepo, mutengi anofanirwa kuziva pane kadhi rechigadzirwa mukana, mutengo, nguva yekuendesa kuguta rake rechigadzirwa (izvo zvinoverengerwa nealgorithm zvichibva pakuwanikwa kwechigadzirwa mukati. dzimba dzekuchengetera zvinhu uye madhizaini ekutengesa).
• Paunenge uchipinda mutsara mumutsara wekutsvaga, mutengi anoratidzwa mazano ekutsvaga maererano nealgorithm (iyo inogadzirwa negorgorithm ...).

Total

Kazhinji, mushure mekuverenga bhuku, zvinosuruvarisa, hazvisi pachena kuti ungaenda sei kubva kune muongorori kuenda kumatambudziko ebhizinesi kune yakagadziriswa hunyanzvi hwekuita kune anovandudza. Iri bhuku rinongoudza chikamu chemaitiro, nematanho ekuisa asina kujeka uye matanho anotevera asina kujeka. Iyo yekushandisa kesi pachayo kazhinji haisi chirevo chakazara chemugadziri.

Zvakadaro, iyi inzira yakanaka kwazvo yekumisikidza nekugadzirisa mamiriro ekudyidzana pakati pechinhu nechidzidzo, kana kudyidzana kuchikonzera shanduko mune chimwe chinhu muchidzidzo. Ndiyo imwe yenzira shoma dzekunyora dzinobvumira zvinogoneka zvinodikanwa zvine hunyanzvi hwekutsvaga nzvimbo dzekutsvaga.

Iri bhuku rinofanirwa kuverengerwa kune vanoongorora kuti vatange kunyora mitambo inoedzwa.

Source: www.habr.com