{"id":55778,"date":"2020-01-28T00:00:00","date_gmt":"2020-01-27T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel"},"modified":"2020-02-18T14:03:55","modified_gmt":"2020-02-18T11:03:55","slug":"kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","title":{"rendered":"Kompania e mbrojtjes nga DDoS pranoi se kishte filluar vet\u00eb sulme DDoS, pranoi themeluesi i saj","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Kompania
\nDeri n\u00eb vitin 2016, vDos u b\u00eb sh\u00ebrbimi m\u00eb i popullarizuar n\u00eb bot\u00eb p\u00ebr porositjen e sulmeve DDoS.<\/i><\/p>\n

N\u00ebse besojm\u00eb teorit\u00eb e konspiracionit, kompanit\u00eb antivirus po vet\u00eb shp\u00ebrndajn\u00eb viruse, nd\u00ebrsa sh\u00ebrbimet p\u00ebr mbrojtjen nga sulmet DDoS vet\u00eb i nisin k\u00ebto sulme. Sigurisht, k\u00ebto jan\u00eb fantazi\u2026 apo jo?<\/p>\n

M\u00eb 16 janar 2020, Gjykata Federale e Distriktit t\u00eb New Jersey e shpalli fajtor<\/a><\/noindex> 22-vje\u00e7arin Tucker Preston, banor i qytetit Macon, shteti Georgia, p\u00ebr nj\u00eb nga akuzat, konkretisht \"d\u00ebmtimin e kompjuter\u00ebve t\u00eb mbrojtur p\u00ebrmes transmetimit t\u00eb nj\u00eb programi, kodi ose komande\". Tucker \u00ebsht\u00eb bashk\u00ebthemelues i kompanis\u00eb BackConnect Security LLC, e cila ofronte mbrojtje nga sulmet DDoS. Ky biznesmen i ri nuk arriti t\u00eb p\u00ebrmbaj\u00eb tundimin p\u00ebr t\u00eb hakmarr\u00eb ndaj klient\u00ebve t\u00eb pak\u00ebnaqur.
\n<\/a><\/noindex>
\nHistoria e trishtuar e Tucker Preston filloi n\u00eb vitin 2014, kur nj\u00eb hacker adoleshent s\u00eb bashku me mikun e tij Marshal Webb themeluan kompanin\u00eb BackConnect Security LLC, nga e cila m\u00eb von\u00eb u shk\u00ebput BackConnect, Inc. N\u00eb shtator 2016, kjo firm\u00eb u b\u00eb e njohur<\/a><\/noindex> gjat\u00eb operacionit p\u00ebr mbylljen e sh\u00ebrbimit vDos, i cili at\u00ebher\u00eb konsiderohej si sh\u00ebrbimi m\u00eb i popullarizuar n\u00eb bot\u00eb p\u00ebr porositjen e sulmeve DDoS. Kompania BackConnect at\u00ebher\u00eb pretendonte se vet\u00eb ishte sulmuar p\u00ebrmes vDos \u2014 dhe \u00e7oi nj\u00eb \"kontrakatak\" t\u00eb pazakont\u00eb, duke kapur 255 adresa IP t\u00eb armikut p\u00ebrmes BGP-hijack<\/a><\/noindex> (BGP hijacking). Kryerja e nj\u00eb sulmi t\u00eb till\u00eb p\u00ebr t\u00eb mbrojtur interesat e veta shkaktoi mendime kontradiktore n\u00eb komunitetin e siguris\u00eb informatike. Shum\u00eb besonin se BackConnect kaloi kufirin e lejuesh\u00ebm.<\/p>\n

Nj\u00eb BGP-hijack i thjesht\u00eb realizohet p\u00ebrmes njoftimit t\u00eb nj\u00eb prefiksi t\u00eb huaj si t\u00eb tij. Uplink\u00ebt\/peer\u00ebt e pranojn\u00eb at\u00eb, dhe ai fillon t\u00eb p\u00ebrhapet n\u00eb rrjet. P\u00ebr shembull, n\u00eb vitin 2017, supozohet se si rezultat i nj\u00eb defekti t\u00eb softuerit, \"Rosetelecom\" (AS12389) filloi t\u00eb njoftoj\u00eb prefiksat<\/a><\/noindex> Mastercard (AS26380), Visa dhe disa organizata t\u00eb tjera financiare. Pothuajse ashtu u veprua nga kompania BackConnect, kur eksproprijoi adresat IP nga hosti bullgar Verdina.net.<\/p>\n

Drejtori Ekzekutiv i BackConnect, Bryant Townsend, m\u00eb von\u00eb justifikoi veten.<\/a><\/noindex> n\u00eb informacionin NANOG p\u00ebr operator\u00ebt rrjet\u00eb. Ai tha se vendimi p\u00ebr t\u00eb sulmuar hap\u00ebsir\u00ebn adresore t\u00eb armikut nuk erdhi leht\u00eb, por ata jan\u00eb t\u00eb gatsh\u00ebm t\u00eb marrin p\u00ebrgjegj\u00ebsi p\u00ebr veprimin e tyre: \u00abMegjith\u00ebse kishim mund\u00ebsin\u00eb t\u00eb fshihnim veprimet tona, ndiheshim se do t\u00eb ishte e gabuar. Kam shpenzuar shum\u00eb koh\u00eb duke reflektuar mbi k\u00ebt\u00eb vendim dhe mbi m\u00ebnyr\u00ebn si mund t\u00eb ndikonte negativisht n\u00eb kompanin\u00eb dhe n\u00eb mua n\u00eb syt\u00eb e disa njer\u00ebzve, por n\u00eb fund e mb\u00ebshteta\u00bb.<\/p>\n

Si\u00e7 doli, BackConnect nuk \u00ebsht\u00eb hera e par\u00eb q\u00eb p\u00ebrdor BGP hijacking, dhe kompania ka nj\u00eb histori t\u00eb err\u00ebt. Megjithat\u00eb, duhet t\u00eb v\u00ebrej se BGP hijacking nuk p\u00ebrdoret gjithmon\u00eb p\u00ebr q\u00ebllime t\u00eb k\u00ebqija. Brian Krebs CNBC, n\u00eb periudh\u00ebn nga 2000 deri n\u00eb 2018 Facebook, Alphabet, Microsoft, Apple dhe Amazon kan\u00eb pun\u00ebsuar m\u00eb shum\u00eb se nj\u00eb milion punonj\u00ebs t\u00eb rinj. T\u00eb tilla biznese akumullojn\u00eb mjaft burime, p\u00ebrve\u00e7 aktivitetit t\u00eb tyre kryesor, p\u00ebr t\u00eb realizuar k\u00ebrkime dhe zhvillime masive n\u00eb fusha t\u00eb reja, ndonj\u00ebher\u00eb me rrezikshm\u00ebri t\u00eb lart\u00eb. P\u00ebr m\u00eb tep\u00ebr, kompanit\u00eb formojn\u00eb dhe ekosistemin e tyre, brenda t\u00eb cilit p\u00ebrdoruesit i zgjidhin nj\u00eb gam\u00eb t\u00eb gjer\u00eb problemesh - porositin menj\u00ebher\u00eb t\u00eb gjitha produktet e nevojshme, nga ushqimi deri te teknika, n\u00eb Amazon. Sipas parashikimeve t\u00eb analist\u00ebve, deri n\u00eb vitin 2021 ai<\/a><\/noindex>, tha se ai vet\u00eb p\u00ebr mbrojtjen nga DDoS p\u00ebrdor sh\u00ebrbimet e kompanis\u00eb Prolexic Communications (tani pjes\u00eb e Akamai Technologies). Kjo \u00ebsht\u00eb kompania q\u00eb erdhi me iden\u00eb p\u00ebr t\u00eb p\u00ebrdorur BGP hijack p\u00ebr mbrojtjen nga sulmet DDoS.<\/p>\n

N\u00ebse viktima e nj\u00eb sulmi DDoS k\u00ebrkon ndihm\u00eb nga Prolexic, kjo e fundit transferon adresat IP t\u00eb klientit te vetja, duke i lejuar asaj t\u00eb analizoje dhe filtroje trafikun e ardhsh\u00ebm.<\/p>\n

Duke qen\u00eb se BackConnect ofronte sh\u00ebrbime mbrojtjeje nga DDoS, u b\u00eb nj\u00eb analiz\u00eb se cilat nga BGP hijacks mund t\u00eb konsiderohen legjitime n\u00eb interes t\u00eb klient\u00ebve t\u00eb saj, dhe cilat duken dyshimtare. K\u00ebtu merren parasysh gjithashtu koha e z\u00ebnies s\u00eb adresave t\u00eb huaja, sa gjer\u00ebsisht \u00ebsht\u00eb njoftuar prefix-i i huaj si i vet\u00eb, a ka nj\u00eb marr\u00ebveshje t\u00eb konfirmuar me klientin etj. Nga tabela duket se disa veprime t\u00eb BackConnect duken shum\u00eb dyshuese.<\/p>\n

\"Kompania<\/a><\/noindex><\/p>\n

Duket se dikush nga t\u00eb d\u00ebmtuarit ka paditur BackConnect. N\u00eb d\u00ebshmit\u00eb e pranimit t\u00eb Prestonit (pdf)<\/a><\/noindex> nuk \u00ebsht\u00eb p\u00ebrmendur emri i kompanis\u00eb q\u00eb gjykata e shpalli t\u00eb d\u00ebmtuar. Viktima n\u00eb dokument quhet Viktima 1<\/i>.<\/p>\n

Si\u00e7 u p\u00ebrmend m\u00eb sip\u00ebr, hetimi i veprimtaris\u00eb s\u00eb BackConnect filloi pas hackimit t\u00eb sh\u00ebrbimit vDos. At\u00ebher\u00eb u b\u00ebn\u00eb t\u00eb njohura emrat<\/a><\/noindex> administruesve t\u00eb sh\u00ebrbimit, si dhe databaza e vDos, duke p\u00ebrfshir\u00eb p\u00ebrdoruesit e regjistruar dhe rekordet e klient\u00ebve q\u00eb paguanin vDos p\u00ebr realizimin e sulmeve DDoS.<\/p>\n

K\u00ebto regjistra treguan se nj\u00ebri nga llogarit\u00eb n\u00eb sitin vDos ishte e hapur me adresat e post\u00ebs elektronike t\u00eb lidhura me nj\u00eb domen q\u00eb \u00ebsht\u00eb regjistruar n\u00eb em\u00ebr t\u00eb Tucker Preston. Kjo llogari iniciuoi sulme ndaj nj\u00eb numri t\u00eb madh objektivash, duke p\u00ebrfshir\u00eb sulme t\u00eb shumta ndaj rrjeteve q\u00eb i p\u00ebrkasin Fondit e softuerit t\u00eb lir\u00eb<\/a><\/noindex> (FSF).<\/p>\n

N\u00eb vitin 2016, nj\u00eb ish-administrator i sistemit t\u00eb FSF tha se organizata jofitimprur\u00ebse kishte shqyrtuar nj\u00eb her\u00eb mund\u00ebsin\u00eb e bashk\u00ebpunimit me BackConnect, dhe sulmet filluan pothuajse menj\u00ebher\u00eb pasi FSF tha se do t\u00eb k\u00ebrkonte nj\u00eb kompani tjet\u00ebr p\u00ebr mbrojtjen nga DDoS.<\/p>\n

Sipas sipas<\/a><\/noindex> Ministria e Drejt\u00ebsis\u00eb e SHBA-ve, p\u00ebr k\u00ebt\u00eb akuz\u00eb, Takere Preston rrezikon nj\u00eb d\u00ebnim me burg deri n\u00eb 10 vjet dhe nj\u00eb gjob\u00eb deri n\u00eb $250,000, q\u00eb \u00ebsht\u00eb dyfishi i fitimit total ose humbjes nga krimi. D\u00ebnimi do t\u00eb jepet m\u00eb 7 maj 2020.<\/p>\n

\nGlobalSign ofron zgjidhje PKI t\u00eb shkall\u00ebzueshme p\u00ebr organizata t\u00eb \u00e7do madh\u00ebsie. \"Kompania<\/a><\/noindex>
\nM\u00eb shum\u00eb: +7 (499) 678 2210, sales-ru@globalsign.com.
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a 2016 \u0433\u043e\u0434\u0443 vDos \u0441\u0442\u0430\u043b \u0441\u0430\u043c\u044b\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u0432 \u043c\u0438\u0440\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c \u0434\u043b\u044f \u0437\u0430\u043a\u0430\u0437\u0430 DDoS-\u0430\u0442\u0430\u043a \u0415\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0442\u0435\u043e\u0440\u0438\u044f\u043c \u0437\u0430\u0433\u043e\u0432\u043e\u0440\u0430, \u0442\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u0430\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432\u0438\u0440\u0443\u0441\u044b, \u0430 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u0441\u0430\u043c\u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044e\u0442 \u044d\u0442\u0438 \u0430\u0442\u0430\u043a\u0438. \u041a\u043e\u043d\u0435\u0447\u043d\u043e, \u044d\u0442\u043e \u0432\u044b\u0434\u0443\u043c\u043a\u0438\u2026 \u0438\u043b\u0438 \u043d\u0435\u0442? 16 \u044f\u043d\u0432\u0430\u0440\u044f 2020 \u0433\u043e\u0434\u0430 \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u043a\u0440\u0443\u0436\u043d\u043e\u0439 \u0441\u0443\u0434 \u041d\u044c\u044e-\u0414\u0436\u0435\u0440\u0441\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0432\u0438\u043d\u043e\u0432\u043d\u044b\u043c 22-\u043b\u0435\u0442\u043d\u0435\u0433\u043e \u0422\u0430\u043a\u0435\u0440\u0430 \u041f\u0440\u0435\u0441\u0442\u043e\u043d\u0430 (Tucker Preston), \u0436\u0438\u0442\u0435\u043b\u044f \u0433\u043e\u0440\u043e\u0434\u0430 \u041c\u0435\u0439\u043a\u043e\u043d\u0430, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55778","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kompania q\u00eb mbron nga DDoS vet\u00eb ka nisur sulme DDoS, pranoi themeluesi i saj | ProHoster","description":"Derisa arriti 2016, vDos.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043e\u0442 DDoS \u0441\u0430\u043c\u0430 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0430 DDoS-\u0430\u0442\u0430\u043a\u0438, \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0435\u0451 \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c | ProHoster","og:description":"\u041a 2016 \u0433\u043e\u0434\u0443 vDos.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-27T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55778","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:02:37","updated":"2022-09-28 16:22:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55778","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=55778"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55778\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=55778"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=55778"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=55778"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}