{"id":87697,"date":"2020-07-09T13:42:31","date_gmt":"2020-07-09T11:42:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/ddos-idet-v-offlajn"},"modified":"2020-07-09T13:42:31","modified_gmt":"2020-07-09T11:42:31","slug":"ddos-idet-v-offlajn","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/ddos-idet-v-offlajn","title":{"rendered":"DDoS po shkon n\u00eb offline","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Para disa vjet\u00ebsh, agjencit\u00eb hulumtuese dhe ofruesit e sh\u00ebrbimeve t\u00eb siguris\u00eb informatike filluan t\u00eb raportojn\u00eb p\u00ebr tkurrjen<\/a><\/noindex> e numrit t\u00eb sulmeve DDoS. Por, deri n\u00eb tremujorin e par\u00eb t\u00eb vitit 2019, t\u00eb nj\u00ebjtit hulumtues raportuan p\u00ebr nj\u00eb rritje t\u00eb jasht\u00ebzakonshme prej 84%. M\u00eb pas, situata u p\u00ebrkeq\u00ebsua. Edhe pandemia nuk e solli atmosfer\u00ebn e paqes \u2014 p\u00ebrkundrazi, kriminel\u00ebt kibernetik\u00eb dhe spamuesit e panjohur e konsideruan k\u00ebt\u00eb si nj\u00eb sinjal t\u00eb shk\u00eblqyer p\u00ebr sulm, dhe volumi i DDoS u rrit<\/a><\/noindex> Ne jemi t\u00eb sigurt se koha e sulmeve DDoS t\u00eb thjeshta dhe t\u00eb lehta p\u00ebr t\u2019u zbuluar (dhe mjeteve t\u00eb thjeshta q\u00eb mund t\u2019i parandalojn\u00eb ato) ka kaluar. Kriminel\u00ebt kibernetik\u00eb kan\u00eb m\u00ebsuar t\u00eb fshehin m\u00eb mir\u00eb k\u00ebto sulme dhe t\u2019i kryejn\u00eb ato n\u00eb m\u00ebnyra gjithnj\u00eb e m\u00eb sofistikuara. Industria e err\u00ebt \u00ebsht\u00eb shnd\u00ebrruar nga sulmet brute-forces n\u00eb sulme n\u00eb nivelin e aplikacioneve. Ajo merr porosi serioze p\u00ebr t\u00eb shkat\u00ebrruar proceset e biznesit, p\u00ebrfshir\u00eb ato q\u00eb jan\u00eb plot\u00ebsisht offline. n\u00eb dyfish<\/a><\/noindex>.<\/p>\n

\"DDoS<\/a><\/noindex>
\n<\/a><\/noindex>
\nDuke dep\u00ebrtuar n\u00eb realitet<\/p>\n

N\u00eb vitin 2017, nj\u00eb seri sulmesh DDoS t\u00eb drejtuara ndaj sh\u00ebrbimeve t\u00eb transportit n\u00eb Suedi shkaktuan vonesa t\u00eb gjata<\/h2>\n

\nt\u00eb trenave . N\u00eb vitin 2019, sistemi i shitjeve i operatorit t\u00eb hekurudhave t\u00eb Danimark\u00ebs<\/a><\/noindex>Danske Statsbaner u \u00e7aktivizua. Si rezultat, n\u00eb stacione nuk funksiononin automat\u00ebt e shitjes s\u00eb biletave dhe portat automatike, dhe m\u00eb shum\u00eb se 15 mij\u00eb pasagjer\u00eb nuk arrit\u00ebn t\u00eb udh\u00ebtonin. Po at\u00eb vit, nj\u00eb sulm i fuqish\u00ebm kibernetik shkaktoi nd\u00ebrprerjen e furnizimit me energji elektrike n\u00eb<\/a><\/noindex> Venezuel\u00eb Pasojat e sulmeve DDoS tani i p\u00ebrjetojn\u00eb jo vet\u00ebm p\u00ebrdoruesit online, por edhe njer\u00ebzit, si\u00e7 thuhet, IRL (n\u00eb jet\u00eb reale). Nd\u00ebrsa historikisht sulmuesit synonin vet\u00ebm sh\u00ebrbimet online, tani shpesh q\u00ebllimi i tyre \u00ebsht\u00eb t\u00eb prishin \u00e7do operacion biznesi. Sipas vler\u00ebsimeve tona, sot m\u00eb shum\u00eb se 60% e sulmeve kan\u00eb nj\u00eb q\u00ebllim t\u00eb till\u00eb \u2014 p\u00ebr shantazh ose konkurrenc\u00eb t\u00eb pandershme. Ve\u00e7an\u00ebrisht t\u00eb ndjeshme jan\u00eb transakcione dhe logjistika.<\/a><\/noindex>.<\/p>\n

M\u00eb t\u00eb men\u00e7ur dhe m\u00eb t\u00eb shtrenjt\u00eb<\/p>\n

DDoS vazhdon t\u00eb konsiderohet si nj\u00eb nga format m\u00eb t\u00eb zakonshme dhe n\u00eb rritje t\u00eb krimeve kibernetike. Sipas parashikimeve t\u00eb ekspert\u00ebve, numri i tyre do t\u00eb rritet vet\u00ebm q\u00eb nga viti 2020. Kjo lidhet me disa arsye \u2014 si kalimi m\u00eb i madh i bizneseve n\u00eb internet p\u00ebr shkak t\u00eb pandemis\u00eb, ashtu edhe zhvillimi i industri t\u00eb err\u00ebt t\u00eb krimeve kibernetike, dhe madje edhe me<\/h2>\n

\np\u00ebrhapjen e 5G shp\u00ebrndarja e 5G<\/a><\/noindex>.<\/p>\n

DDoS-attacket \"popullore\" u b\u00ebn\u00eb t\u00eb njohura dikur p\u00ebr shkak t\u00eb leht\u00ebsis\u00eb s\u00eb implementimit dhe kostos s\u00eb ul\u00ebt: disa vite m\u00eb par\u00eb mund t\u00eb niste nj\u00eb sulm p\u00ebr 50 dollar\u00eb n\u00eb dit\u00eb. Sot, si objektivat ashtu edhe metodat e sulmit kan\u00eb ndryshuar, duke \u00e7uar n\u00eb rritjen e kompleksitetit dhe, si pasoj\u00eb, t\u00eb kostos. Jo, \u00e7mimet nga 5 dollar\u00eb n\u00eb or\u00eb ende ekzistojn\u00eb n\u00eb \u00e7mimet (po, kriminel\u00ebt kibernetik\u00eb kan\u00eb \u00e7mime dhe tarifa), por p\u00ebr nj\u00eb faqe me mbrojtje k\u00ebrkohet tashm\u00eb nga 400 dollar\u00eb n\u00eb dit\u00eb, nd\u00ebrsa \u00e7mimi i porosive \"t\u00eb personalizuara\" p\u00ebr kompanit\u00eb e m\u00ebdha arrin deri n\u00eb disa mij\u00ebra dollar\u00eb.<\/p>\n

Aktualisht ekzistojn\u00eb dy lloje kryesore t\u00eb sulmeve DDoS. I pari ka si q\u00ebllim t'i b\u00ebj\u00eb burimet online t\u00eb paarritshme p\u00ebr nj\u00eb periudh\u00eb t\u00eb caktuar kohe. Kriminel\u00ebt k\u00ebrkojn\u00eb pages\u00eb p\u00ebr koh\u00ebn e sulmit. N\u00eb k\u00ebt\u00eb rast, operatori DDoS nuk e ka problem p\u00ebr ndonj\u00eb rezultat t\u00eb caktuar, nd\u00ebrsa klienti n\u00eb thelb b\u00ebn nj\u00eb parapagim p\u00ebr nisjen e sulmit. K\u00ebto metoda jan\u00eb relativisht t\u00eb lira.<\/p>\n

Lloji i dyt\u00eb \u00ebsht\u00eb sulmet q\u00eb paguhen vet\u00ebm kur arrihet nj\u00eb rezultat i caktuar. K\u00ebto jan\u00eb m\u00eb interesante. Ato jan\u00eb shum\u00eb m\u00eb t\u00eb komplikuara p\u00ebr t'u realizuar dhe p\u00ebr k\u00ebt\u00eb arsye jan\u00eb shum\u00eb m\u00eb t\u00eb shtrenjta, pasi sulmuesit duhet t\u00eb zgjedhin metodat m\u00eb efikase p\u00ebr t\u00eb arritur q\u00ebllimet. Ne n\u00eb Variti shpesh zhvillojm\u00eb partit\u00eb e shahut me kriminel\u00ebt kibernetik\u00eb, ku ata e nd\u00ebrruan menj\u00ebher\u00eb taktik\u00ebn dhe mjetet dhe provojn\u00eb t\u00eb hyjn\u00eb nj\u00ebher\u00ebsh n\u00eb disa dob\u00ebsi n\u00eb disa nivele. K\u00ebto jan\u00eb qartazi sulme ekipore, ku hakera e din\u00eb shum\u00eb mir\u00eb se si t\u00eb reagojn\u00eb dhe t\u00eb kund\u00ebrshtojn\u00eb veprimet e mbrojt\u00ebsve. T\u00eb luftosh me ta \u00ebsht\u00eb jo vet\u00ebm e v\u00ebshtir\u00eb, por edhe shum\u00eb e shtrenjt\u00eb p\u00ebr kompanit\u00eb. P\u00ebr shembull, nj\u00eb nga klient\u00ebt tan\u00eb, nj\u00eb shit\u00ebs me pakic\u00eb t\u00eb madh, mbajti p\u00ebr gati tri vjet nj\u00eb ekip prej 30 njer\u00ebzish, t\u00eb cil\u00ebt ishin t\u00eb ngarkuar p\u00ebr t\u00eb luftuar kund\u00ebr sulmeve DDoS.<\/p>\n

Sipas t\u00eb dh\u00ebnave nga Variti, sulmet e thjeshta DDoS, t\u00eb kryera p\u00ebr arsye si boredom, trolling apo pak\u00ebnaq\u00ebsi me nj\u00eb kompani t\u00eb caktuar, tani p\u00ebrb\u00ebjn\u00eb m\u00eb pak se 10% t\u00eb gjith\u00eb sulmeve DDoS (sigurisht, burimet e pambrojtura mund t\u00eb ken\u00eb statistik\u00eb tjet\u00ebr, ne shohim t\u00eb dh\u00ebnat e klient\u00ebve tan\u00eb). T\u00eb gjitha t\u00eb tjerat jan\u00eb pun\u00eb e ekipeve profesioniste. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, tre t\u00eb kat\u00ebrtat e t\u00eb gjith\u00eb \u201cbots\u201d-eve t\u00eb k\u00ebqija jan\u00eb bots t\u00eb komplikuara, t\u00eb cilat jan\u00eb t\u00eb v\u00ebshtira p\u00ebr tu identifikuar me shumic\u00ebn e zgjidhjeve t\u00eb tregut aktuale. Ato imitojn\u00eb sjelljen e p\u00ebrdoruesve ose shfletuesve t\u00eb v\u00ebrtet\u00eb dhe inkorporojn\u00eb modele, t\u00eb cilat e v\u00ebshtir\u00ebsojn\u00eb dallimin mes k\u00ebrkesave \u201ct\u00eb mira\u201d dhe \u201ct\u00eb k\u00ebqija\u201d. Kjo e b\u00ebn sulmin m\u00eb t\u00eb paduksh\u00ebm dhe, p\u00ebr rrjedhoj\u00eb, m\u00eb efektiv.<\/p>\n

\"DDoS
\nT\u00eb dh\u00ebnat nga GlobalDots<\/i><\/p>\n

Objektivat e reja DDoS<\/h2>\n

\nRaporti Raporti mbi Bots t\u00eb k\u00ebqij<\/a><\/noindex> nga analist\u00ebt e GlobalDots tregon se bots tani gjenerojn\u00eb 50% t\u00eb gjith\u00eb trafikut t\u00eb uebit, nga t\u00eb cilat 17.5% jan\u00eb pik\u00ebrisht bots t\u00eb d\u00ebmsh\u00ebm.<\/p>\n

Bots kan\u00eb m\u00ebnyra t\u00eb ndryshme p\u00ebr t\u00eb prishur jet\u00ebn e kompanive: plus faktit q\u00eb ato \u2018shkulin\u2019 faqet, ato tani jan\u00eb gjithashtu t\u00eb angazhuar n\u00eb rritjen e shpenzimeve p\u00ebr reklamim, klikimet n\u00eb reklama, p\u00ebr t\u00eb p\u00ebrpunuar \u00e7mimet, q\u00eb t'i b\u00ebjn\u00eb ato t\u00eb pak\u00ebqij dhe t\u00eb t\u00ebrheqin bler\u00ebsit, dhe vjedhin p\u00ebrmbajtje p\u00ebr q\u00ebllime t\u00eb ndryshme t\u00eb k\u00ebqija (p\u00ebr shembull, ne s\u00eb fundmi kemi shkruar<\/a><\/noindex> p\u00ebr faqet me p\u00ebrmbajtje t\u00eb vjedhur q\u00eb detyrojn\u00eb p\u00ebrdoruesit t\u00eb zgjidhin captcha t\u00eb huaja). Bots r\u00ebnd\u00eb distortojn\u00eb statistik\u00ebn e ndryshme t\u00eb biznesit, dhe n\u00eb fund, vendimet merren n\u00eb baz\u00eb t\u00eb t\u00eb dh\u00ebnave t\u00eb gabuara. Nj\u00eb sulm DDoS shpesh \u00ebsht\u00eb nj\u00eb mjegull e d\u00ebmshme p\u00ebr krime edhe m\u00eb serioze si hackimi dhe vjedhja e t\u00eb dh\u00ebnave. Tani ne shohim se ka dal\u00eb nj\u00eb klas\u00eb e re e k\u00ebrc\u00ebnimeve kibernetike \u2014 kjo \u00ebsht\u00eb nd\u00ebrprerja e funksionimit t\u00eb proceseve t\u00eb caktuara t\u00eb biznesit t\u00eb kompanis\u00eb, shpesh \u2014 offline (pasi n\u00eb dit\u00ebt tona asgj\u00eb nuk mund t\u00eb jet\u00eb krejt\u00ebsisht 'jasht\u00eb rrjetit'). Ve\u00e7an\u00ebrisht shpesh ne shohim se prishen proceset logjistike dhe komunikimet me klient\u00ebt.<\/p>\n

\u2018Nuk \u00ebsht\u00eb dor\u00ebzuar\u2019<\/h2>\n

\nProceset e biznesit logjistik jan\u00eb thelb\u00ebsore p\u00ebr shumic\u00ebn e kompanive, k\u00ebshtu q\u00eb ato shpesh jan\u00eb objekt sulmesh. K\u00ebtu jan\u00eb disa skenare sulmesh q\u00eb mund t\u00eb ndodhin.<\/p>\n

Nuk \u00ebsht\u00eb n\u00eb dispozit<\/i><\/p>\n

N\u00ebse punoni n\u00eb fush\u00ebn e tregtis\u00eb online, tashm\u00eb jeni sigurisht t\u00eb njohur me problemin e porosive t\u00eb falsifikuara. N\u00eb rastin e sulmeve, robot\u00ebt mbingarkojn\u00eb burimet logjistike dhe i b\u00ebjn\u00eb produktet t\u00eb paaksesueshme p\u00ebr bler\u00ebsit e tjer\u00eb. P\u00ebr k\u00ebt\u00eb q\u00ebllim, ata vendosin nj\u00eb num\u00ebr t\u00eb madh porosish t\u00eb falsifikuara, t\u00eb barabart\u00eb me numrin maksimal t\u00eb produkteve n\u00eb dispozicion. K\u00ebto produkte m\u00eb pas nuk paguhen dhe pas nj\u00eb kohe kthehen n\u00eb faqen e internetit. Por puna tashm\u00eb \u00ebsht\u00eb b\u00ebr\u00eb: ato jan\u00eb etiketuar si \"t\u00eb pap\u00ebrfshira\", dhe nj\u00eb pjes\u00eb e bler\u00ebsve tashm\u00eb kan\u00eb shkuar te konkurrent\u00ebt. Kjo taktik\u00eb \u00ebsht\u00eb e njohur mir\u00eb n\u00eb industrin\u00eb e biletave ajrore, ku ndonj\u00ebher\u00eb robot\u00ebt blen\u00eb menj\u00ebher\u00eb \"shk\u00ebputjet\" e t\u00eb gjitha biletave pothuajse menj\u00ebher\u00eb pas shfaqjes s\u00eb tyre. P\u00ebr shembull, nj\u00eb nga klient\u00ebt tan\u00eb \u2014 nj\u00eb kompanin\u00eb e madhe ajrore \u2014 u godit nga nj\u00eb sulm i till\u00eb, i organizuar nga konkurrent\u00eb kinez\u00eb. N\u00eb vet\u00ebm dy or\u00eb, robot\u00ebt e tyre porositur 100% t\u00eb biletave p\u00ebr trajektore t\u00eb caktuara.<\/p>\n

Robot\u00ebt e k\u00ebpuc\u00ebve<\/i><\/p>\n

Skenari tjet\u00ebr i njohur: robot\u00ebt blejn\u00eb menj\u00ebher\u00eb t\u00eb gjith\u00eb gam\u00ebn e produkteve, dhe pronar\u00ebt e tyre i shesin ato m\u00eb von\u00eb me nj\u00eb \u00e7mim t\u00eb inflacionuar (n\u00eb mesatarisht, \u00e7mimi rritet 200%). K\u00ebta robot\u00eb quhen robot\u00eb t\u00eb k\u00ebpuc\u00ebve, sepse kjo problematik\u00eb \u00ebsht\u00eb e njohur mir\u00eb n\u00eb industrin\u00eb e k\u00ebpuc\u00ebve modeste, ve\u00e7an\u00ebrisht p\u00ebr koleksionet e limituara. Robot\u00ebt blen\u00eb menj\u00ebher\u00eb modelet e reja q\u00eb sapo u shfaq\u00ebn, duke bllokuar burimin n\u00eb m\u00ebnyr\u00eb q\u00eb p\u00ebrdoruesit real\u00eb t\u00eb mos mund t\u00eb hyjn\u00eb. Ky \u00ebsht\u00eb nj\u00eb rast i rrall\u00eb kur p\u00ebr robot\u00ebt \u00ebsht\u00eb shkruar n\u00eb revista modeste. Edhe pse n\u00eb p\u00ebrgjith\u00ebsi, ata q\u00eb riprodhojn\u00eb bileta p\u00ebr ngjarje t\u00eb njohura si ndeshjet e futbollit e ndjekin t\u00eb nj\u00ebjtin skenar.<\/p>\n

Skenar\u00eb t\u00eb tjer\u00eb<\/i><\/p>\n

Por edhe kjo nuk \u00ebsht\u00eb e gjitha. Ka nj\u00eb variant edhe m\u00eb t\u00eb komplikuar t\u00eb sulmeve ndaj logistic\u00ebs, i cili rrezikon humbje t\u00eb m\u00ebdha. Kjo mund t\u00eb b\u00ebhet, n\u00ebse sh\u00ebrbimi ka opsionin \"Pagesa kur merret produkti\". Robot\u00ebt l\u00ebn\u00eb porosi t\u00eb falsifikuara p\u00ebr k\u00ebto produkte, duke treguar adresat e falsifikuara, madje edhe reale t\u00eb njer\u00ebzve q\u00eb nuk dyshojn\u00eb. Nd\u00ebrsa kompanit\u00eb p\u00ebrballen me shpenzime t\u00eb m\u00ebdha p\u00ebr transport, ruajtje dhe sqarimin e detajeve. N\u00eb at\u00eb koh\u00eb, produktet jan\u00eb t\u00eb paaksesueshme p\u00ebr klient\u00ebt e tjer\u00eb dhe madje z\u00ebn\u00eb hap\u00ebsir\u00eb n\u00eb depo.<\/p>\n

\u00c7far\u00eb tjet\u00ebr? Robot\u00ebt l\u00ebn\u00eb komente masive t\u00eb rreme negative p\u00ebr produktet, mbushin funksionin e \u201ckthimit t\u00eb pages\u00ebs\u201d, bllokojn\u00eb transaksionet, vjedhin t\u00eb dh\u00ebnat e klient\u00ebve, shqet\u00ebsojn\u00eb bler\u00ebsit e v\u00ebrtet\u00eb \u2013 ka shum\u00eb mund\u00ebsi. Nj\u00eb shembull i mir\u00eb \u00ebsht\u00eb sulmi i fundit ndaj DHL, Hermes, AldiTalk, Freenet, Snipes.com. Haker\u00ebt u pretenduan<\/a><\/noindex>, se po \"testonin sistemet mbrojt\u00ebse nga DDoS\", dhe p\u00ebrfundimisht bllokuan portalin e klient\u00ebve t\u00eb biznesit t\u00eb kompanis\u00eb dhe t\u00eb gjitha API-t\u00eb. Si pasoj\u00eb, ndodhi nj\u00eb nd\u00ebrprerje e madhe n\u00eb dor\u00ebzimin e produkteve p\u00ebr bler\u00ebsit.<\/p>\n

Telefononi nes\u00ebr<\/h2>\n

\nN\u00eb vitin e kaluar, Komisioni Federal i Tregtis\u00eb (FTC) raportoi p\u00ebr nj\u00eb rritje t\u00eb dyfisht\u00eb t\u00eb ankesave nga bizneset dhe p\u00ebrdoruesit p\u00ebr telefonatat spamer dhe mashtruese nga robot\u00ebt. Sipas disa vler\u00ebsimeve, ato p\u00ebrb\u00ebjn\u00eb gati 50%<\/a><\/noindex> t\u00eb gjitha telefonatave.<\/p>\n

Si n\u00eb rastet e DDoS, objektivat e TDoS \u2013 sulme masive nga robot\u00ebt ndaj telefonave \u2013 variojn\u00eb nga \u201cloj\u00ebrat\u201d deri te konkurrenca e papast\u00ebrt. Robot\u00ebt jan\u00eb t\u00eb aft\u00eb t\u00eb mbingarkojn\u00eb qendrat e kontaktit dhe t\u00eb mos lejojn\u00eb klient\u00eb t\u00eb v\u00ebrtet\u00eb. Kjo metod\u00eb \u00ebsht\u00eb efektive jo vet\u00ebm p\u00ebr qendrat e thirrjeve me operator\u00eb \u201ct\u00eb gjall\u00eb\u201d, por edhe atje ku p\u00ebrdoren sistemet AVR. Robot\u00ebt gjithashtu mund t\u00eb sulmojn\u00eb masivisht kanale t\u00eb tjera komunikimi me klient\u00ebt (biseda, email), t\u00eb d\u00ebmtojn\u00eb funksionimin e sistemeve CRM dhe madje t\u00eb ken\u00eb ndikim t\u00eb but\u00eb n\u00eb menaxhimin e stafit, pasi operator\u00ebt jan\u00eb t\u00eb mbingarkuar duke u p\u00ebrpjekur t\u00eb p\u00ebrballen me kriz\u00ebn. Sulmet gjithashtu mund t\u00eb sinkronizohen me nj\u00eb sulm tradicional DDoS ndaj burimeve online t\u00eb viktim\u00ebs.<\/p>\n

S\u00eb fundmi, nj\u00eb sulm i till\u00eb shp\u00ebrndau funksionimin e sh\u00ebrbimit t\u00eb shp\u00ebtimit 911<\/a><\/noindex> n\u00eb SHBA \u2013 njer\u00ebzit e zakonsh\u00ebm, t\u00eb cil\u00ebt kishin nevoj\u00eb urgjente p\u00ebr ndihm\u00eb, thjesht nuk mund t\u00eb telefononin. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, ZOO-n\u00eb e Dublinit e p\u00ebsoi t\u00eb nj\u00ebjt\u00ebn fat: t\u00eb pakt\u00ebn 5000 njer\u00ebz mor\u00ebn spame n\u00eb form\u00ebn e mesazheve SMS, duke i nxitur ata t\u00eb telefononin urgjentisht n\u00eb numrin e telefonit t\u00eb ZOO-s dhe t\u00eb k\u00ebrkonin nj\u00eb person t\u00eb imagjinuar.<\/p>\n

Wi-Fi nuk do t\u00eb ket\u00eb<\/h2>\n

\nKriminel\u00ebt kibernetik\u00eb gjithashtu mund t\u00eb bllokojn\u00eb leht\u00ebsisht t\u00eb gjith\u00eb rrjetin korporativ. Shpesh, bllokimi i IP-ve p\u00ebrdoret si nj\u00eb mjet p\u00ebr t\u00eb luftuar DDoS. Por kjo jo vet\u00ebm q\u00eb nuk \u00ebsht\u00eb e efektshme, por \u00ebsht\u00eb edhe nj\u00eb praktik\u00eb shum\u00eb e rrezikshme. Adresa IP mund t\u00eb gjendet leht\u00ebsisht (p\u00ebr shembull, me ndihm\u00ebn e monitorimit t\u00eb burimeve) dhe gjithashtu mund t\u00eb z\u00ebvend\u00ebsohet (ose falsifikohet). Klient\u00ebt tan\u00eb para se t\u00eb vinin n\u00eb Variti pat\u00ebn raste kur bllokimi i nj\u00eb IP-je t\u00eb caktuar thjesht ndaloi Wi-Fi-n\u00eb n\u00eb zyrat e tyre. Kishte nj\u00eb rast kur nj\u00eb klienti iu dha nj\u00eb IP e caktuar dhe ai bllokoi aksesin n\u00eb burimin e tij p\u00ebr p\u00ebrdoruesit nga nj\u00eb t\u00ebr\u00eb rajon, dhe ai nuk e vuri re p\u00ebr nj\u00eb koh\u00eb t\u00eb gjat\u00eb, sepse p\u00ebrndryshe gjith\u00eb burimi funksiononte mir\u00eb.<\/p>\n

\u00c7far\u00eb \u00ebsht\u00eb e re?<\/h2>\n

\nK\u00ebrc\u00ebnimet e reja k\u00ebrkojn\u00eb zgjidhje t\u00eb reja p\u00ebr mbrojtje. Sidoqoft\u00eb, kjo ni\u015f\u00eb e re n\u00eb treg po fillon vet\u00ebm t\u00eb formohet. Zgjidhjet p\u00ebr t\u00eb refuzuar sulmet e thjeshta nga robot\u00ebt jan\u00eb t\u00eb shumta, por p\u00ebr ato t\u00eb komplikuara, situata nuk \u00ebsht\u00eb aq e leht\u00eb. Shum\u00eb zgjidhje akoma praktikojn\u00eb metoda bllokimi IP. T\u00eb tjer\u00ebt kan\u00eb nevoj\u00eb p\u00ebr koh\u00eb p\u00ebr t\u00eb mbledhur t\u00eb dh\u00ebna fillestare p\u00ebr t\u00eb filluar pun\u00ebn, dhe k\u00ebto 10-15 minuta mund t\u00eb shnd\u00ebrrohen n\u00eb nj\u00eb dob\u00ebsi. Ka zgjidhje t\u00eb bazuara n\u00eb m\u00ebsimin makinerik q\u00eb lejojn\u00eb identifikimin e robot\u00ebve nga sjellja e tyre. Dhe nj\u00ebkoh\u00ebsisht ekipet nga \"ajo\" an\u00eb krenohen se kan\u00eb robot\u00eb q\u00eb mund t\u00eb imitojn\u00eb modelet reale, t\u00eb pandashme nga ato njer\u00ebzore. Kush \u00ebsht\u00eb k\u00ebtu n\u00eb avantazh \u2014 mbetet ende e paqart\u00eb.<\/p>\n

\u00c7far\u00eb t\u00eb b\u00ebjm\u00eb n\u00ebse duhet t\u00eb luftojm\u00eb me ekipe profesionale t\u00eb robot\u00ebve dhe sulme t\u00eb komplikuara, shum\u00ebfazore n\u00eb disa nivele nj\u00ebkoh\u00ebsisht?<\/p>\n

Eksperienca jon\u00eb tregon se duhet t\u00eb fokusohemi n\u00eb filtrimin e k\u00ebrkesave t\u00eb paligjshme pa bllokuar adresat IP. P\u00ebr sulmet e komplikuara DDoS, nevojitet filtrimi n\u00eb disa nivele menj\u00ebher\u00eb, duke p\u00ebrfshir\u00eb nivelin e transportit, nivelin e aplikacioneve dhe nd\u00ebrfaqet API. Fal\u00eb k\u00ebsaj, \u00ebsht\u00eb e mundur t\u00eb refuzohen madje edhe sulmet me frekuenc\u00eb t\u00eb ul\u00ebt, t\u00eb cilat zakonisht jan\u00eb t\u00eb padukshme dhe p\u00ebr k\u00ebt\u00eb arsye shpesh kalojn\u00eb m\u00eb tej. S\u00eb fundi, \u00ebsht\u00eb e nevojshme t\u00eb lejohet kalimi i t\u00eb gjith\u00eb p\u00ebrdoruesve real\u00eb, madje edhe kur \u00ebsht\u00eb n\u00eb faz\u00ebn aktive t\u00eb sulmit.<\/p>\n

E dyta, kompanit\u00eb kan\u00eb nevoj\u00eb p\u00ebr mund\u00ebsin\u00eb p\u00ebr t\u00eb nd\u00ebrtuar sistemet e tyre t\u00eb mbrojtjes shum\u00ebfazore, ku p\u00ebrve\u00e7 mjeteve p\u00ebr gjithashtu mbrojtjen nga sulmet DDoS, do t\u00eb integrohen sistemet kund\u00ebr mashtrimit, vjedhjes s\u00eb t\u00eb dh\u00ebnave, mbrojtjes s\u00eb p\u00ebrmbajtjes dhe k\u00ebshtu me radh\u00eb. <\/p>\n

S\u00eb fundmi, ata duhet t\u00eb punojn\u00eb n\u00eb koh\u00eb reale nga k\u00ebrkesa e par\u00eb \u2014 aft\u00ebsia p\u00ebr t'u p\u00ebrgjigjur menj\u00ebher\u00eb ndaj incidenteve t\u00eb siguris\u00eb rrit ndjesh\u00ebm mund\u00ebsit\u00eb p\u00ebr t\u00eb parandaluar nj\u00eb sulm ose p\u00ebr t\u00eb reduktuar fuqin\u00eb e tij shkat\u00ebrruese.<\/p>\n

E ardhmja e af\u00ebrt: menaxhimi i reputacionit dhe grumbullimi i t\u00eb dh\u00ebnave t\u00eb m\u00ebdha me ndihm\u00ebn e bot\u00ebve
\nHistoria e DDoS ka evoluar nga thjeshti n\u00eb kompleks. N\u00eb fillim, objekti i sulmuesve ishte t\u00eb ndalonin funksionimin e faqes. Tani ata e konsiderojn\u00eb m\u00eb efektive t\u00eb synojn\u00eb proceset kryesore t\u00eb biznesit.<\/p>\n

Kompleksiteti i sulmeve do t\u00eb vazhdoj\u00eb t\u00eb rritet, kjo \u00ebsht\u00eb e pashmangshme. P\u00ebrve\u00e7 asaj q\u00eb bota e k\u00ebqija b\u00ebn tani \u2014 vjedhja e t\u00eb dh\u00ebnave dhe falsifikimi, shantazhi, spam \u2014 bot\u00ebt do t\u00eb grumbullojn\u00eb t\u00eb dh\u00ebna nga nj\u00eb num\u00ebr t\u00eb madh burimesh (Big Data) dhe do t\u00eb krijojn\u00eb llogari \"t\u00eb besueshme\" false p\u00ebr t\u00eb menaxhuar ndikimin, reputacionin ose peshimin masiv.<\/p>\n

N\u00eb k\u00ebt\u00eb moment, vet\u00ebm kompanit\u00eb e m\u00ebdha mund t\u00eb p\u00ebrballojn\u00eb investimet n\u00eb mbrojtjen nga DDoS dhe bot\u00ebt, por edhe ato shpesh nuk mund t\u00eb monitorojn\u00eb dhe filtrojn\u00eb plot\u00ebsisht trafikun e gjeneruar nga bot\u00ebt. E vetmja pozitive nga p\u00ebrkeq\u00ebsimi i sulmeve t\u00eb bot\u00ebve \u00ebsht\u00eb se kjo stimulon tregun t\u00eb krijoj\u00eb zgjidhje \"inteligjente\" dhe m\u00eb t\u00eb avancuara p\u00ebr mbrojtje.<\/p>\n

\u00c7far\u00eb mendoni ju \u2014 si do t\u00eb evoluoj\u00eb industria e mbrojtjes nga bot\u00ebt dhe cilat zgjidhje jan\u00eb t\u00eb nevojshme n\u00eb treg tani?
\n
Burimi: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0430\u0440\u0443 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u0443\u0441\u043b\u0443\u0433 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0431\u044b\u043b\u043e \u0434\u043e\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u0438 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 DDoS-\u0430\u0442\u0430\u043a. \u041d\u043e \u0443\u0436\u0435 \u043a 1-\u043c\u0443 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0443 2019 \u0433\u043e\u0434\u0430 \u0442\u0435 \u0436\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u0438\u0445 \u043e\u0448\u0435\u043b\u043e\u043c\u043b\u044f\u044e\u0449\u0435\u043c \u0440\u043e\u0441\u0442\u0435 \u043d\u0430 84%. \u0410 \u0434\u0430\u043b\u044c\u0448\u0435 \u0432\u0441\u0435 \u043f\u043e\u0448\u043b\u043e \u043f\u043e \u043d\u0430\u0440\u0430\u0441\u0442\u0430\u044e\u0449\u0435\u0439. \u0414\u0430\u0436\u0435 \u043f\u0430\u043d\u0434\u0435\u043c\u0438\u044f \u043d\u0435 \u043f\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0430\u0442\u043c\u043e\u0441\u0444\u0435\u0440\u0435 \u043c\u0438\u0440\u0430 \u2014 \u043d\u0430\u043f\u0440\u043e\u0442\u0438\u0432, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0438 \u0441\u043f\u0430\u043c\u0435\u0440\u044b \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u043b\u0438 \u044d\u0442\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u044b\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":87698,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-87697","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DDoS po kalon n\u00eb offline | ProHoster","description":"Para disa vjet\u00ebsh, agjencit\u00eb hulumtuese dhe ofruesit e sh\u00ebrbimeve t\u00eb siguris\u00eb informatike filluan t\u00eb raportojn\u00eb p\u00ebr","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/ddos-idet-v-offlajn","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47DDoS \u0438\u0434\u0435\u0442 \u0432 \u043e\u0444\u0444\u043b\u0430\u0439\u043d | ProHoster","og:description":"\u041f\u0430\u0440\u0443 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u0443\u0441\u043b\u0443\u0433 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0431\u044b\u043b\u043e \u0434\u043e\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u043e","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/ddos-idet-v-offlajn","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-09T11:42:31+00:00","article:modified_time":"2020-07-09T11:42:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"87697","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:46:50","updated":"2022-09-28 14:28:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/87697","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=87697"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/87697\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/87698"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=87697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=87697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=87697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}