{"id":35190,"date":"2019-10-31T22:02:50","date_gmt":"2019-10-31T19:02:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/eksperiment-mozhno-li-snizit-negativnye-posledstviya-dos-atak-s-pomoshhyu-proksi\/"},"modified":"2019-10-31T22:02:50","modified_gmt":"2019-10-31T19:02:50","slug":"eksperiment-mozhno-li-snizit-negativnye-posledstviya-dos-atak-s-pomoshhyu-proksi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/eksperiment-mozhno-li-snizit-negativnye-posledstviya-dos-atak-s-pomoshhyu-proksi","title":{"rendered":"Eksperiment: a \u00ebsht\u00eb e mundur t\u00eb reduktohen pasojat negative t\u00eb sulmeve DoS me an\u00eb t\u00eb proxy-t","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Eksperiment:<\/noindex><\/p>\n

Imazhi: Unsplash<\/a><\/noindex><\/i><\/p>\n

Sulmet e DoS jan\u00eb nj\u00eb nga k\u00ebrc\u00ebnimet m\u00eb t\u00eb m\u00ebdha p\u00ebr sigurin\u00eb informatike n\u00eb internetin modern. Ekzistojn\u00eb dhjet\u00ebra botnetesh, t\u00eb cilat hapin p\u00ebr qiradh\u00ebn\u00ebs p\u00ebr t\u00eb kryer sulme t\u00eb tilla. <\/p>\n

Shkenc\u00ebtar\u00ebt nga universiteti i San Diegos realizuan nj\u00eb studim<\/a><\/noindex> nj\u00eb studim mbi se sa ndihmon p\u00ebrdorimi i proxy p\u00ebr t\u00eb zvog\u00ebluar efektet negative t\u00eb sulmeve DoS \u2013 po ju paraqesim pikat kryesore t\u00eb k\u00ebtij punimi.<\/a><\/noindex><\/p>\n

Hyrje: proxy si nj\u00eb mjet n\u00eb luft\u00ebn kund\u00ebr DoS<\/h2>\n

\nEksperimente t\u00eb ngjashme realizohet periodikisht nga studiues nga vende t\u00eb ndryshme, por problemi i p\u00ebrbashk\u00ebt \u00ebsht\u00eb mungesa e burimeve p\u00ebr modelimin e sulmeve, q\u00eb jan\u00eb af\u00ebr realitetit. Testet n\u00eb stande t\u00eb vogla nuk lejojn\u00eb t\u00eb p\u00ebrgjigjen pyetjeve se sa efektivisht do t\u00eb kund\u00ebrveprojn\u00eb proxy ndaj sulmeve n\u00eb rrjete t\u00eb nd\u00ebrlikuara, \u00e7far\u00eb parametrash luajn\u00eb nj\u00eb rol ky\u00e7 n\u00eb aft\u00ebsin\u00eb p\u00ebr t\u00eb minimizuar d\u00ebmin, etj.<\/p>\n

P\u00ebr eksperimentin, shkenc\u00ebtar\u00ebt krijuan nj\u00eb model t\u00eb nj\u00eb aplikacioni tipik web \u2013 p\u00ebr shembull, nj\u00eb sh\u00ebrbim e-commerce. Ai funksionon me nj\u00eb grup serverash, p\u00ebrdoruesit jan\u00eb t\u00eb shp\u00ebrndar\u00eb n\u00eb lokacione t\u00eb ndryshme gjeografike dhe p\u00ebrdorin internetin p\u00ebr t\u00eb aksesuar sh\u00ebrbimin. N\u00eb k\u00ebt\u00eb model, interneti sh\u00ebrben si mjet komunikimi midis sh\u00ebrbimit dhe p\u00ebrdoruesve \u2013 k\u00ebshtu funksionojn\u00eb sh\u00ebrbimet web nga sistemet e k\u00ebrkimit deri te mjetet e bankingut online.<\/p>\n

\"Eksperiment:
\n
\nSulmet DoS e b\u00ebjn\u00eb t\u00eb pamundur nd\u00ebrveprimin normal midis sh\u00ebrbimit dhe p\u00ebrdoruesve. Ekzistojn\u00eb dy lloje t\u00eb sulmeve DoS: sulme n\u00eb nivel aplikacioni dhe n\u00eb nivel infrastrukture. N\u00eb k\u00ebt\u00eb rast, sulmuesit sulmojn\u00eb drejtp\u00ebrdrejt rrjetin dhe hostet n\u00eb t\u00eb cil\u00ebt funksionon sh\u00ebrbimi (p\u00ebr shembull, duke saturuar t\u00eb gjith\u00eb brezin e gj\u00ebr\u00eb t\u00eb rrjetit me trafik t\u00eb mbingarkuar). N\u00eb rastin e sulmeve n\u00eb nivel aplikacioni, q\u00ebllimi i sulmuesit \u00ebsht\u00eb nd\u00ebrfaqja e nd\u00ebrveprimit me p\u00ebrdoruesit \u2013 p\u00ebr k\u00ebt\u00eb ata d\u00ebrgojn\u00eb nj\u00eb num\u00ebr t\u00eb madh k\u00ebrkesash me q\u00ebllim q\u00eb t\u00eb shkaktojn\u00eb r\u00ebnien e aplikacionit. Eksperimenti i p\u00ebrshkruar u p\u00ebrqendrua n\u00eb sulmet n\u00eb nivel infrastrukture.<\/p>\n

Rrjetet proxy jan\u00eb nj\u00eb nga instrumentet p\u00ebr minimizimin e d\u00ebmit nga sulmet DoS. N\u00eb rastin e p\u00ebrdorimit t\u00eb proxy, t\u00eb gjitha k\u00ebrkesat nga p\u00ebrdoruesi n\u00eb sh\u00ebrbim dhe p\u00ebrgjigjet ndaj tyre kalojn\u00eb jo drejtp\u00ebrdrejt, por p\u00ebrmes serverave nd\u00ebrmjet\u00ebs. As p\u00ebrdoruesi, as aplikacioni \"nuk e shohin\" nj\u00ebri-tjetrin drejtp\u00ebrdrejt, atyre iu disponohen vet\u00ebm adresat e proxy. Si rezultat, \u00ebsht\u00eb e pamundur t\u00eb sulmohet aplikacioni drejtp\u00ebrdrejt. N\u00eb kufirin e rrjetit ndodhen t\u00eb ashtuquajturat edge proxy \u2013 proxy t\u00eb jasht\u00ebm me IP t\u00eb disponueshme, lidhja b\u00ebhet fillimisht me ta. <\/p>\n

\"Eksperiment:
\n
\nN\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb kund\u00ebrveprojn\u00eb me sukses ndaj sulmeve DoS, rrjeti proxy duhet t\u00eb ket\u00eb dy mund\u00ebsi ky\u00e7e. N\u00eb radh\u00eb t\u00eb par\u00eb, nj\u00eb rrjet nd\u00ebrmjet\u00ebs i till\u00eb duhet t\u00eb luaj\u00eb rolin e nj\u00eb nd\u00ebrmjet\u00ebsi, dometh\u00ebn\u00eb, mund t\u00eb \"arrij\u00eb\" n\u00eb aplikacion vet\u00ebm n\u00ebp\u00ebrmjet saj. Kjo do t\u00eb p\u00ebrjashtonte mund\u00ebsin\u00eb e sulmit t\u00eb drejtp\u00ebrdrejt\u00eb n\u00eb sh\u00ebrbim. N\u00eb radh\u00eb t\u00eb dyt\u00eb, rrjeti proxy duhet t\u00eb ket\u00eb mund\u00ebsin\u00eb t'u ofroj\u00eb p\u00ebrdoruesve mund\u00ebsin\u00eb p\u00ebr t\u00eb vazhduar nd\u00ebrveprimin me aplikacionin, edhe gjat\u00eb sulmit.<\/p>\n

Infrastruktura e eksperimentit<\/h2>\n

\nGjat\u00eb studimit u p\u00ebrdor\u00ebn kat\u00ebr komponente ky\u00e7e:<\/p>\n