{"id":82929,"date":"2020-05-26T19:42:01","date_gmt":"2020-05-26T17:42:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/rangeamp-seriya-atak-na-cdn-manipuliruyushhaya-http-zagolovkom-range"},"modified":"2020-05-26T19:42:01","modified_gmt":"2020-05-26T17:42:01","slug":"rangeamp-seriya-atak-na-cdn-manipuliruyushhaya-http-zagolovkom-range","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/rangeamp-seriya-atak-na-cdn-manipuliruyushhaya-http-zagolovkom-range","title":{"rendered":"RangeAmp \u2014 nj\u00eb seri sulmesh n\u00eb CDN, q\u00eb manipulon me header-in HTTP Range","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb grup k\u00ebrkuesish nga Universiteti i Pekinit, Universiteti Tsinghua dhe Universiteti i Teksasit n\u00eb Dallas ka identifikuar<\/a><\/noindex> klasi i ri i sulmeve DoS \u2014 RangeAmp, i bazuar n\u00eb p\u00ebrdorimin e titujve HTTP Range<\/a><\/noindex> p\u00ebr t\u00eb organizuar p\u00ebrforcimin e trafikut p\u00ebrmes rrjetesh t\u00eb shp\u00ebrndarjes s\u00eb p\u00ebrmbajtjes (CDN). Thelbi i metod\u00ebs \u00ebsht\u00eb se p\u00ebr shkak t\u00eb ve\u00e7orive t\u00eb procesimit t\u00eb headers Range n\u00eb shum\u00eb CDN, sulmuesi mund t\u00eb k\u00ebrkoj\u00eb p\u00ebrmes CDN nj\u00eb byte nga nj\u00eb skedar i madh, por CDN do t\u00eb ngarkoj\u00eb nga serveri i synuar t\u00eb gjith\u00eb skedarin ose nj\u00eb bllok shum\u00eb m\u00eb t\u00eb madh t\u00eb dh\u00ebnash p\u00ebr ta vendosur n\u00eb cache. Shkalla e p\u00ebrforcimit t\u00eb trafikut n\u00eb k\u00ebt\u00eb sulm varion p\u00ebrkat\u00ebsisht nga 724 deri n\u00eb 43330 her\u00eb, q\u00eb mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb mbingarkuar trafik t\u00eb hyr\u00ebs n\u00eb CDN ose p\u00ebr t\u00eb ulur kapacitetin e kanalit p\u00ebrfundimtar t\u00eb komunikimit drejt faqes s\u00eb viktim\u00ebs.<\/p>\n

\"RangeAmp<\/center><\/p>\n

Titulli Range i ofron klientit mund\u00ebsin\u00eb p\u00ebr t\u00eb p\u00ebrcaktuar nj\u00eb gam\u00eb pozita n\u00eb skedarin q\u00eb duhet ngarkuar n\u00eb vend t\u00eb dor\u00ebzimit t\u00eb skedarit t\u00eb plot\u00eb. P\u00ebr shembull, klienti mund t\u00eb specifikoj\u00eb \"Range: bytes=0-1023\" dhe serveri do t\u00eb d\u00ebrgoj\u00eb vet\u00ebm 1024 bajt\u00ebt e par\u00eb t\u00eb t\u00eb dh\u00ebnave. Nj\u00eb mund\u00ebsi e till\u00eb \u00ebsht\u00eb e nevojshme kur ngarkohet skedar\u00eb t\u00eb m\u00ebdhenj \u2014 p\u00ebrdoruesi mund t\u00eb ndal\u00eb ngarkimin dhe pastaj ta vazhdoj\u00eb at\u00eb nga pozita e nd\u00ebrprer\u00eb. Duke specifikuar \"bytes=0-0\", standardi parashikon dor\u00ebzimin e bajt\u00ebve t\u00eb par\u00eb t\u00eb skedarit, \"bytes=-1\" \u2014 t\u00eb fundit, \"bytes=1-\" \u2014 duke filluar nga bajti i par\u00eb deri n\u00eb fund t\u00eb skedarit. Lejohet d\u00ebrgimi i disa gamave n\u00eb nj\u00eb titull, p\u00ebr shembull \"Range: bytes=0-1023,8192-10240\".<\/p>\n

P\u00ebrve\u00e7 k\u00ebsaj, \u00ebsht\u00eb propozuar nj\u00eb variant tjet\u00ebr sulmi, i fokusuar n\u00eb rritjen e ngarkes\u00ebs rrjet\u00ebsore duke kaluar trafikun p\u00ebrmes nj\u00eb CDN tjet\u00ebr, i cili p\u00ebrdoret si proxy (p\u00ebr shembull, kur Cloudflare vepron si front-end (FCDN) dhe Akamai si backend (BCDN)). Metoda kujton sulmin e par\u00eb, por lokalizohet brenda rrjeteve CDN dhe lejon forcimin e trafikut kur k\u00ebrkohet p\u00ebrmes CDN t\u00eb tjer\u00eb, duke rritur ngarkes\u00ebn n\u00eb infrastruktur\u00eb dhe duke ulur cil\u00ebsin\u00eb e sh\u00ebrbimit. <\/p>\n

Ideja \u00ebsht\u00eb q\u00eb sulmuesi d\u00ebrgon n\u00eb CDN k\u00ebrkesa Range t\u00eb disa gamave, si \"bytes=0-,0-,0-\u2026\", \"bytes=1-,0-,0-\u2026\" ose \"bytes=-1024,0-,0-\u2026\". K\u00ebrkesat p\u00ebrmbajn\u00eb nj\u00eb num\u00ebr t\u00eb madh gamash \"0-\", q\u00eb n\u00ebnkupton dor\u00ebzimin e skedarit nga pozita zero deri n\u00eb fund. P\u00ebr shkak t\u00eb implementimit t\u00eb pasakt\u00eb t\u00eb analiz\u00ebs s\u00eb gamave kur CDN e par\u00eb iu qaset t\u00eb dyt\u00eb, p\u00ebr \u00e7do gam\u00eb \"0-\" dor\u00ebzohet skedari i plot\u00eb (gamet nuk agregohen, por kalohen renditsh\u00ebm), n\u00ebse n\u00eb k\u00ebrkes\u00ebn fillestare t\u00eb d\u00ebrguar nga sulmuesi ka duplicim dhe nd\u00ebrprerje t\u00eb gamave. Departamenti i forcimit t\u00eb trafikut n\u00eb nj\u00eb sulm t\u00eb till\u00eb \u00ebsht\u00eb nga 53 deri n\u00eb 7432 her\u00eb.<\/p>\n

\"RangeAmp<\/center><\/p>\n

Gjat\u00eb procesit t\u00eb hulumtimit, u studua sjellja e 13 CDN \u2014
\nAkamai, Alibaba Cloud, Azure, CDN77, CDNsun, Cloudflare, CloudFront, Fastly, G-Core Labs, Huawei Cloud, KeyCDN, StackPath dhe Tencent Cloud. T\u00eb gjitha CDN-t\u00eb e shqyrtuara lejuan form\u00ebn e par\u00eb t\u00eb sulmit ndaj serverit p\u00ebrfundimtar. Variantit t\u00eb dyt\u00eb t\u00eb sulmit ndaj CDN iu jan\u00eb n\u00ebnshtruar 6 sh\u00ebrbime, nga t\u00eb cilat kat\u00ebr mund t\u00eb veprojn\u00eb si frontend (CDN77, CDNsun, Cloudflare dhe StackPath) dhe tri si backend (Akamai, Azure dhe StackPath). Forca m\u00eb e madhe e p\u00ebrforcimit arrihet n\u00eb Akamai dhe StackPath, t\u00eb cilat lejojn\u00eb specifikimin n\u00eb headerin Range t\u00eb m\u00eb shum\u00eb se 10,000 diapazonesh. Pronar\u00ebt e CDN jan\u00eb njoftuar p\u00ebr dob\u00ebsit\u00eb rreth 7 muaj m\u00eb par\u00eb dhe deri n\u00eb momentin e zbulimit publik, 12 nga 13 CDN kan\u00eb eliminuar problemet e identifikuara ose shpreh\u00ebn gatishm\u00ebrin\u00eb p\u00ebr t'i eliminuar (vet\u00ebm sh\u00ebrbimi StackPath nuk ka reaguar).<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041f\u0435\u043a\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430, \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0426\u0438\u043d\u0445\u0443\u0430 \u0438 \u0422\u0435\u0445\u0430\u0441\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0414\u0430\u043b\u043b\u0430\u0441\u0435 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 DoS-\u0430\u0442\u0430\u043a — RangeAmp, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Range \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 (CDN). \u0421\u0443\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0438\u0437-\u0437\u0430 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Range-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 CDN \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 CDN \u043e\u0434\u0438\u043d \u0431\u0430\u0439\u0442 \u0438\u0437 \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430, \u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":82930,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-82929","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47RangeAmp \u2014 nj\u00eb seri sulmesh ndaj CDN, q\u00eb manipulojn\u00eb HTTP-headerin Range | ProHoster","description":"Nj\u00eb grup hulumtuesish nga Universiteti i Pekinit, Universiteti Tsinghua dhe Universiteti i Texasit n\u00eb Dallas","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/rangeamp-seriya-atak-na-cdn-manipuliruyushhaya-http-zagolovkom-range","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47RangeAmp \u2014 \u0441\u0435\u0440\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 CDN, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0430\u044f HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c Range | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041f\u0435\u043a\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430, \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0426\u0438\u043d\u0445\u0443\u0430 \u0438 \u0422\u0435\u0445\u0430\u0441\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0414\u0430\u043b\u043b\u0430\u0441\u0435","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/rangeamp-seriya-atak-na-cdn-manipuliruyushhaya-http-zagolovkom-range","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-26T17:42:01+00:00","article:modified_time":"2020-05-26T17:42:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"82929","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:28:37","updated":"2022-10-02 22:54:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/82929","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=82929"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/82929\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/82930"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=82929"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=82929"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=82929"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}