{"id":87697,"date":"2020-07-09T13:42:31","date_gmt":"2020-07-09T11:42:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/ddos-idet-v-offlajn"},"modified":"2020-07-09T13:42:31","modified_gmt":"2020-07-09T11:42:31","slug":"ddos-idet-v-offlajn","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/ddos-idet-v-offlajn","title":{"rendered":"DDoS po kalon n\u00eb offlajn.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Dy vitet e fundit, agjencit\u00eb k\u00ebrkimore dhe ofruesit e sh\u00ebrbimeve t\u00eb siguris\u00eb informative filluan t\u00eb raportojn\u00eb p\u00ebr r\u00ebnien<\/a><\/noindex> e numrit t\u00eb sulmeve DDoS. Por deri n\u00eb tremujorin e par\u00eb t\u00eb vitit 2019, t\u00eb nj\u00ebjt\u00ebt hulumtues raportuan p\u00ebr nj\u00eb rritje t\u00eb jasht\u00ebzakonshme prej 84%. M\u00eb pas, situata vazhdoi t\u00eb p\u00ebrkeq\u00ebsohej. Edhe pandemia nuk ndihmoi p\u00ebr nj\u00eb atmosfer\u00eb paqeje \u2014 p\u00ebrkundrazi, kriminel\u00ebt kibernetik\u00eb dhe spamer\u00ebt e pan\u00eb k\u00ebt\u00eb si nj\u00eb sinjal t\u00eb shk\u00eblqyer p\u00ebr t\u00eb sulmuar, dhe volumi i DDoS u rrit<\/a><\/noindex> me 84%. M\u00eb pas, gjith\u00e7ka shkoi n\u00eb rritje. Madje pandemia nuk ndihmoi atmosfer\u00ebn e qet\u00ebsis\u00eb \u2014 p\u00ebrkundrazi, kriminel\u00ebt kibernetik\u00eb dhe spamer\u00ebt e pan\u00eb k\u00ebt\u00eb si nj\u00eb sinjal t\u00eb shk\u00eblqyer p\u00ebr sulm, dhe v\u00ebllimi i DDoS u rrit. dyfish<\/a><\/noindex>.<\/p>\n

\"DDoS<\/a><\/noindex>
\n<\/a><\/noindex>
\nNe jemi t\u00eb sigurt se koha e sulmeve DDoS t\u00eb thjeshta dhe t\u00eb lehta p\u00ebr t'u zbuluar (dhe mjetet e thjeshta q\u00eb mund t'i parandalojn\u00eb ato) ka mbaruar. Kriminel\u00ebt kibernetik\u00eb kan\u00eb m\u00ebsuar t\u00eb fshihen m\u00eb mir\u00eb pas k\u00ebtyre sulmeve dhe t'i realizojn\u00eb ato n\u00eb m\u00ebnyra gjithnj\u00eb e m\u00eb t\u00eb sofistikuara. Industria e err\u00ebt ka kaluar nga sulmet brute force n\u00eb sulme n\u00eb nivelin e aplikacioneve. Ajo ka marr\u00eb porosi serioze p\u00ebr t\u00eb shkat\u00ebrruar procese biznesi, duke p\u00ebrfshir\u00eb edhe ato krejt\u00ebsisht offline.<\/p>\n

Duke ndodhur n\u00eb realitet<\/h2>\n

\nN\u00eb vitin 2017, nj\u00eb seri sulmesh DDoS t\u00eb drejtuara ndaj sh\u00ebrbimeve t\u00eb transportit n\u00eb Suedi \u00e7uan n\u00eb vonesa t\u00eb gjata n\u00eb trenat<\/a><\/noindex>. N\u00eb vitin 2019, operatori komb\u00ebtar i hekurudhave t\u00eb Danimark\u00ebs Danske Statsbaner<\/a><\/noindex> pati probleme me sistemet e shitjes. Si rezultat, automatet e biletave dhe dyert automatike n\u00eb stacione nuk funksiononin, dhe m\u00eb shum\u00eb se 15 mij\u00eb pasagjer\u00eb nuk arrit\u00ebn dot t\u00eb niseshin. N\u00eb t\u00eb nj\u00ebjtin vit, nj\u00eb sulm i fuqish\u00ebm kibernetik shkaktoi nd\u00ebrprerjen e furnizimit me energji n\u00eb Venezuela<\/a><\/noindex>.<\/p>\n

Pasojat e sulmeve DDoS tani ndihen jo vet\u00ebm nga p\u00ebrdoruesit online, por edhe nga njer\u00ebzit, si\u00e7 thuhet, IRL (n\u00eb jet\u00ebn reale). Nd\u00ebrsa historikisht sulmuesit synonin vet\u00ebm sh\u00ebrbimet online, tani shpesh detyra e tyre \u00ebsht\u00eb t\u00eb nd\u00ebrpresin \u00e7do operacion biznesi. Sipas vler\u00ebsimeve tona, sot m\u00eb shum\u00eb se 60% e sulmeve kan\u00eb nj\u00eb q\u00ebllim t\u00eb till\u00eb \u2014 p\u00ebr nxjerrjen e shp\u00ebrblimeve ose p\u00ebr konkurrenc\u00eb t\u00eb pastruar. Ve\u00e7an\u00ebrisht t\u00eb pambrojtura jan\u00eb transaksionet dhe logjistika.<\/p>\n

M\u00eb t\u00eb zgjuar dhe m\u00eb t\u00eb shtrenjt\u00eb<\/h2>\n

\nDDoS vazhdon t\u00eb konsiderohet nj\u00eb nga format m\u00eb t\u00eb zakonshme dhe n\u00eb rritje t\u00eb krimit kibernetik. Sipas parashikimeve t\u00eb ekspert\u00ebve, numri i tyre do t\u00eb rritet vet\u00ebm q\u00eb nga viti 2020. Kjo lidhet me arsye t\u00eb ndryshme \u2014 p\u00ebr nj\u00eb kalim edhe m\u00eb t\u00eb madh t\u00eb biznesit n\u00eb online p\u00ebr shkak t\u00eb pandemis\u00eb, me zhvillimin e industris\u00eb s\u00eb err\u00ebt t\u00eb krimeve kibernetike, dhe madje me p\u00ebrhapjen e 5G<\/a><\/noindex>.<\/p>\n

\u201cPopullor\u00ebt\u201d sulmet DDoS u b\u00ebn\u00eb dikur p\u00ebr shkak t\u00eb thjesht\u00ebsis\u00eb s\u00eb shp\u00ebrndarjes dhe kostos s\u00eb ul\u00ebt: disa vite m\u00eb par\u00eb, ato mund t\u00eb nisin p\u00ebr $50 n\u00eb dit\u00eb. Sot, si q\u00ebllimet ashtu edhe metodat e sulmeve kan\u00eb ndryshuar, \u00e7ka ka \u00e7uar n\u00eb rritjen e kompleksitetit dhe, si pasoj\u00eb, t\u00eb kostos. Po, \u00e7mimet nga $5 n\u00eb or\u00eb ende ekzistojn\u00eb n\u00eb \u00e7mime (po, kriminel\u00ebt kibernetik\u00eb kan\u00eb \u00e7mime dhe tarifa), por p\u00ebr nj\u00eb sit me mbrojtje tani k\u00ebrkohet m\u00eb shum\u00eb se $400 n\u00eb dit\u00eb, dhe \u00e7mimi i porosive \"individuale\" p\u00ebr kompanit\u00eb e m\u00ebdha arrin deri n\u00eb disa mij\u00ebra dollar\u00eb.<\/p>\n

Aktualisht ekzistojn\u00eb dy lloje kryesore t\u00eb sulmeve DDoS. E para ka si q\u00ebllim t\u00eb b\u00ebj\u00eb nj\u00eb burim online t\u00eb pa aksesuesh\u00ebm p\u00ebr nj\u00eb periudh\u00eb t\u00eb caktuar kohe. Pagesa p\u00ebr to merret nga koha e sulmit vet\u00eb. N\u00eb k\u00ebt\u00eb rast, operatori DDoS nuk \u00ebsht\u00eb i shqet\u00ebsuar p\u00ebr ndonj\u00eb rezultat t\u00eb ve\u00e7ant\u00eb, por klienti faktikisht b\u00ebn parapagimin p\u00ebr fillimin e sulmit. K\u00ebto metoda jan\u00eb relativisht t\u00eb lira.<\/p>\n

Lloji i dyt\u00eb \u2014 sulmet q\u00eb paguhen vet\u00ebm kur arrihet nj\u00eb rezultat t\u00eb caktuar. K\u00ebto jan\u00eb m\u00eb interesante. Ato jan\u00eb shum\u00eb m\u00eb t\u00eb komplikuara p\u00ebr t'u realizuar dhe prandaj shum\u00eb m\u00eb t\u00eb shtrenjta, pasi sulmuesit duhet t\u00eb zgjidhin metodat m\u00eb efektive p\u00ebr arritjen e q\u00ebllimeve. N\u00eb Variti, ndonj\u00ebher\u00eb organizojm\u00eb loj\u00ebra t\u00eb plota shah me kriminel\u00ebt kibernetik\u00eb, ku ata menj\u00ebher\u00eb ndryshojn\u00eb taktik\u00ebn dhe mjetet dhe provojn\u00eb nj\u00ebherazi t\u00eb hyjn\u00eb n\u00eb disa vulnerabilitete n\u00eb disa nivele. K\u00ebto jan\u00eb qart\u00eb sulme ekipore, n\u00eb t\u00eb cilat haker\u00ebt e din\u00eb shum\u00eb mir\u00eb se si t\u00eb reagojn\u00eb dhe t\u00eb p\u00ebrballin veprimet e mbrojt\u00ebsve. T\u00eb luftosh me ta nuk \u00ebsht\u00eb vet\u00ebm e v\u00ebshtir\u00eb, por gjithashtu shum\u00eb e shtrenjt\u00eb p\u00ebr kompanit\u00eb. P\u00ebr shembull, nj\u00eb nga klient\u00ebt tan\u00eb, nj\u00eb shit\u00ebs i madh rrjete, mbajti nj\u00eb ekip prej 30 personash p\u00ebr gati tre vjet, t\u00eb cil\u00ebs ishte detyra t\u00eb luftonte me sulmet DDoS.<\/p>\n

Sipas Variti, sulmet e thjeshta DDoS, t\u00eb kryera vet\u00ebm nga m\u00ebrzia, trollingu ose pak\u00ebnaq\u00ebsia ndaj nj\u00eb kompanie t\u00eb caktuar, aktualisht p\u00ebrb\u00ebjn\u00eb m\u00eb pak se 10% t\u00eb t\u00eb gjitha sulmeve DDoS (sigurisht, burimet e paprotectuara mund t\u00eb ken\u00eb statistika t\u00eb tjera, ne shohim t\u00eb dh\u00ebnat e klient\u00ebve tan\u00eb). Gjith\u00e7ka tjet\u00ebr \u00ebsht\u00eb pun\u00eb e ekipeve profesionale. Kjo ndoden ndon\u00ebse tre t\u00eb kat\u00ebrtat e t\u00eb gjith\u00eb \u201cboteve t\u00eb k\u00ebqija\u201d jan\u00eb bota t\u00eb sofistikua, t\u00eb cilat jan\u00eb t\u00eb v\u00ebshtira p\u00ebr tu zbuluar nga shumica e zgjidhjeve moderne t\u00eb tregut. Ato imitojn\u00eb sjelljen e p\u00ebrdoruesve real\u00eb ose shfletuesve dhe integrojn\u00eb modele q\u00eb e v\u00ebshtir\u00ebsojn\u00eb dallimin midis k\u00ebrkesave \u201ct\u00eb mira\u201d dhe \u201ct\u00eb k\u00ebqija\u201d. Kjo e b\u00ebn sulmin m\u00eb t\u00eb padukshem dhe, p\u00ebr pasoj\u00eb, m\u00eb efektiv.<\/p>\n

\"DDoS
\nT\u00eb dh\u00ebnat nga GlobalDots<\/i><\/p>\n

Objektiva t\u00eb rinj DDoS<\/h2>\n

\nRaporti Raporti mbi Bota t\u00eb K\u00ebqija<\/a><\/noindex> nga analist\u00ebt e GlobalDots tregon se bota aktualisht gjenerojn\u00eb 50% t\u00eb gjith\u00eb trafikut t\u00eb internetit, prej t\u00eb cil\u00ebve 17.5% jan\u00eb sakt\u00ebsisht bota malinj.<\/p>\n

Botat jan\u00eb n\u00eb gjendje t\u00eb prishin jet\u00ebn e kompanive n\u00eb m\u00ebnyra t\u00eb ndryshme: p\u00ebrve\u00e7 se \u2018shkaktojn\u00eb prishjen\u2019 e faqeve, ato tani gjithashtu rrisin shpenzimet p\u00ebr reklamim, klikohet me reklamat, p\u00ebrparojn\u00eb \u00e7mimet p\u00ebr t'i b\u00ebr\u00eb ato nj\u00eb qindark\u00eb m\u00eb t\u00eb ulta dhe t\u00eb t\u00ebrheqin bler\u00ebsit, dhe vidhen p\u00ebrmbajtje me q\u00ebllime t\u00eb ndryshme t\u00eb k\u00ebqija (p.sh., ne kemi diskutuar s\u00eb fundmi p\u00ebr faqe t\u00eb internetit me p\u00ebrmbajtje t\u00eb vjedhur q\u00eb detyrojn\u00eb p\u00ebrdoruesit t\u00eb zgjidhin captcha t\u00eb huaja). Botat e p\u00ebrvet\u00ebsojn\u00eb shum\u00eb statistika mb\u00ebshtet\u00ebse t\u00eb biznesit dhe si pasoj\u00eb, vendimet merren mbi t\u00eb dh\u00ebna t\u00eb pasakta. Sulmi DDoS shpesh sh\u00ebrben si nj\u00eb zhurm\u00eb p\u00ebr krime m\u00eb serioze si thyerja dhe vjedhja e t\u00eb dh\u00ebnave. Tani ne po shohim se nj\u00eb klas\u00eb e re e k\u00ebrc\u00ebnimeve kibernetike \u00ebsht\u00eb shtuar \u2014 kjo \u00ebsht\u00eb nd\u00ebrhyrja n\u00eb funksionimin e proceseve t\u00eb caktuara t\u00eb biznesit t\u00eb kompanive, shpesh ato offline (n\u00eb koh\u00ebn ton\u00eb, asgj\u00eb nuk mund t\u00eb jet\u00eb krejt\u00ebsisht \u2018jasht\u00eb rrjetit\u2019). Ne shohim shpesh se proceset logjistike dhe komunikimet me klient\u00ebt jan\u00eb ato q\u00eb thyhen. shkruam<\/a><\/noindex> p\u00ebr faqet me p\u00ebrmbajtje t\u00eb vjedhur, t\u00eb cilat detyrojn\u00eb p\u00ebrdoruesit t\u00eb zgjidhin CAPTCHA t\u00eb huaja). Bots shpesh deformojn\u00eb statistikat e ndryshme t\u00eb biznesit, dhe p\u00ebr pasoj\u00eb, vendimet merren mbi baza t\u00eb dh\u00ebnash t\u00eb gabuara. Nj\u00eb sulm DDoS shpesh \u00ebsht\u00eb nj\u00eb perde tymi p\u00ebr krime m\u00eb serioze si hackime dhe vjedhje t\u00eb t\u00eb dh\u00ebnave. Dhe tani po shohim se nj\u00eb klas\u00eb t\u00eb re t\u00eb k\u00ebrc\u00ebnimeve kibernetike \u00ebsht\u00eb shtuar \u2014 kjo \u00ebsht\u00eb nd\u00ebrprerja e funksionimit t\u00eb proceseve t\u00eb caktuara t\u00eb biznesit t\u00eb kompanis\u00eb, shpesh \u2014 offline (sepse n\u00eb koh\u00ebt tona, asgj\u00eb nuk mund t\u00eb jet\u00eb plot\u00ebsisht \"jasht\u00eb rrjetit\"). Ve\u00e7an\u00ebrisht shpesh shohim se proceset logjistike dhe komunikimet me klient\u00ebt jan\u00eb shkat\u00ebrruar.<\/p>\n

\u2018Nuk \u00ebsht\u00eb dor\u00ebzuar\u2019<\/h2>\n

\nProceset logjistike t\u00eb biznesit jan\u00eb thelb\u00ebsore p\u00ebr shumic\u00ebn e kompanive, prandaj ato shpesh jan\u00eb objekt i sulmeve. Ja skenar\u00ebt e sulmeve q\u00eb mund t\u00eb ndodhin p\u00ebr k\u00ebt\u00eb.<\/p>\n

Nuk \u00ebsht\u00eb n\u00eb dispozicion<\/i><\/p>\n

N\u00ebse punoni n\u00eb fush\u00ebn e tregtis\u00eb online, tashm\u00eb jeni t\u00eb njohur me problemin e porosive false. N\u00eb rastin e sulmeve, botat mbingarkojn\u00eb burimet logjistike dhe e b\u00ebjn\u00eb t\u00eb pamundur qasjen e produkteve p\u00ebr bler\u00ebsit e tjer\u00eb. P\u00ebr k\u00ebt\u00eb, ato vendosin nj\u00eb num\u00ebr t\u00eb madh porosish false, t\u00eb barabarta me numrin maksimal t\u00eb produkteve n\u00eb dispozicion. K\u00ebto produkte nuk paguhen dhe pas nj\u00eb kohe kthehen n\u00eb faqe. Por puna \u00ebsht\u00eb b\u00ebr\u00eb: ato jan\u00eb sh\u00ebnuar si \u2018nuk jan\u00eb n\u00eb dispozicion\u2019, dhe disa bler\u00ebs tashm\u00eb kan\u00eb ikur tek competitor\u00ebt. Kjo taktik\u00eb \u00ebsht\u00eb e njohur n\u00eb industrin\u00eb e biletave ajrore, ku ndonj\u00ebher\u00eb botat menj\u00ebher\u00eb \u2018blejn\u00eb\u2019 t\u00eb gjitha biletat pothuajse menj\u00ebher\u00eb pas shfaqjes s\u00eb tyre. P\u00ebr shembull, nj\u00eb nga klient\u00ebt tan\u00eb \u2014 nj\u00eb kompani e madhe ajrore \u2014 p\u00ebsoi nj\u00eb sulm t\u00eb till\u00eb, t\u00eb organizuar nga konkurrent\u00eb t\u00eb Kin\u00ebs. N\u00eb vet\u00ebm dy or\u00eb, botat e tyre rezervuan 100% t\u00eb biletave p\u00ebr disa destinacione t\u00eb caktuara.<\/p>\n

Sneakers bots<\/i><\/p>\n

Nj\u00eb skenar tjet\u00ebr popullor: botat blen\u00eb menj\u00ebher\u00eb t\u00eb gjith\u00eb linj\u00ebn e produkteve, dhe pronar\u00ebt e tyre i shesin ato m\u00eb von\u00eb me nj\u00eb \u00e7mim t\u00eb fryr\u00eb (n\u00eb mesatarisht, marzhi \u00ebsht\u00eb 200%). K\u00ebto bote quhen sneakers bots, sepse problemin e kan\u00eb njohur mir\u00eb n\u00eb industrin\u00eb e k\u00ebpuc\u00ebve moderne, ve\u00e7an\u00ebrisht n\u00eb koleksionet e kufizuara. Botat praktikisht blen\u00eb p\u00ebr minuta linjat e reja q\u00eb sapo dol\u00ebn, duke bllokuar k\u00ebshtu burimin q\u00eb p\u00ebrdoruesit real\u00eb t\u00eb mos mund t\u00eb hynin. Kjo \u00ebsht\u00eb nj\u00eb rast i rrall\u00eb kur p\u00ebr botat shkruhet n\u00eb revista t\u00eb njohura t\u00eb mod\u00ebs. Megjithat\u00eb, n\u00eb t\u00eb v\u00ebrtet\u00eb, shp\u00ebrndar\u00ebsit e biletave p\u00ebr ngjarje t\u00eb njohura si ndeshjet e futbollit p\u00ebrdorin t\u00eb nj\u00ebjtin skenar.<\/p>\n

Skenar\u00eb t\u00eb tjer\u00eb<\/i><\/p>\n

Por as kjo nuk \u00ebsht\u00eb e gjitha. Ka nj\u00eb variant edhe m\u00eb t\u00eb komplikuar t\u00eb sulmeve ndaj logjistik\u00ebs, i cili rrezikon humbje t\u00eb konsiderueshme. Kjo mund t\u00eb ndodh\u00eb n\u00ebse sh\u00ebrbimi ka opsionin \u2018Pagesa pas marrjes s\u00eb produktit\u2019. Botat vendosin porosi false p\u00ebr k\u00ebto produkte, duke p\u00ebrdorur adresa false, dhe ndonj\u00ebher\u00eb edhe reale, t\u00eb njer\u00ebzve q\u00eb nuk kan\u00eb asnj\u00eb ide. Dhe kompanit\u00eb p\u00ebrballen me shpenzime t\u00eb m\u00ebdha p\u00ebr d\u00ebrges\u00ebn, ruajtjen dhe sqarimin e detajeve. N\u00eb k\u00ebt\u00eb koh\u00eb, produktet nuk jan\u00eb n\u00eb dispozicion p\u00ebr klient\u00ebt e tjer\u00eb, dhe gjithashtu z\u00ebn\u00eb hap\u00ebsir\u00eb n\u00eb magazin\u00eb.<\/p>\n

\u00c7far\u00eb tjet\u00ebr? Botat l\u00ebn\u00eb komente masive t\u00eb k\u00ebqija false p\u00ebr produktet, mbushin funksionin \u2018kthim i pages\u00ebs\u2019, bllokojn\u00eb transaksionet, vjedhin t\u00eb dh\u00ebnat e klient\u00ebve, spamohet me bler\u00ebsit e v\u00ebrtet\u00eb \u2014 ka shum\u00eb opsione. Nj\u00eb shembull i mir\u00eb \u00ebsht\u00eb nj\u00eb sulm i fundit ndaj DHL, Hermes, AldiTalk, Freenet, Snipes.com. Haker\u00ebt u dol\u00ebn si<\/a><\/noindex>, q\u00eb ata \"po testojn\u00eb sistemet e mbrojtjes nga DDoS\", dhe n\u00eb fund t\u00eb fundit, vendos\u00ebn portalin e klient\u00ebve t\u00eb biznesit t\u00eb kompanis\u00eb dhe t\u00eb gjith\u00eb API-t\u00eb. Si rezultat, ndodhi nj\u00eb nd\u00ebrprerje e madhe n\u00eb dor\u00ebzimin e sh\u00ebrbimeve p\u00ebr klient\u00ebt.<\/p>\n

Telefononi nes\u00ebr<\/h2>\n

\nvitin e kaluar, Komisioni Federal i Tregtis\u00eb (FTC) raportoi p\u00ebr dyfishimin e ankesave nga biznese dhe p\u00ebrdorues p\u00ebr thirrjet telefonike t\u00eb spamer\u00ebve dhe mashtrimeve. Sipas disa vler\u00ebsimeve, ato p\u00ebrb\u00ebjn\u00eb gati 50%<\/a><\/noindex> t\u00eb gjitha thirrjeve.<\/p>\n

Si\u00e7 ndodh me DDoS, objektivat e TDoS \u2014 sulmet masive t\u00eb bot\u00ebve n\u00eb telefona \u2014 ndryshojn\u00eb nga \"llotarit\u00eb\" deri te konkurenca e papast\u00ebr. Bots jan\u00eb n\u00eb gjendje t\u00eb mbingarkojn\u00eb qendrat e kontaktit dhe t\u00eb mos lejojn\u00eb klient\u00ebt e v\u00ebrtet\u00eb. Ky metod\u00eb \u00ebsht\u00eb efektive jo vet\u00ebm p\u00ebr qendrat e thirrjeve me operator\u00eb \"t\u00eb gjall\u00eb\", por edhe atje ku p\u00ebrdoren sisteme AVR. Bots gjithashtu mund t\u00eb sulmojn\u00eb n\u00eb mas\u00eb kanale t\u00eb tjera komunikimi me klient\u00ebt (biseda, email-e), t\u00eb d\u00ebmtojn\u00eb pun\u00ebn e sistemeve CRM dhe madje n\u00eb nj\u00eb far\u00eb forme t\u00eb ndikojn\u00eb negativisht n\u00eb menaxhimin e personelit, pasi operator\u00ebt mbingarkohen duke u munduar t\u00eb p\u00ebrballen me kriz\u00ebn. Sulmet gjithashtu mund t\u00eb p\u00ebrshtaten me sulme tradicionale DDoS ndaj resurseve online t\u00eb viktim\u00ebs.<\/p>\n

S\u00eb fundmi, nj\u00eb sulm i till\u00eb nd\u00ebrpreu sh\u00ebrbimin e ndihm\u00ebs 911<\/a><\/noindex> n\u00eb SHBA \u2014 njer\u00ebz t\u00eb zakonsh\u00ebm, q\u00eb kishin nevoj\u00eb urgjente p\u00ebr ndihm\u00eb, thjesht nuk mund t\u00eb telefononin. Rreth n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, ZOO Dublinit e p\u00ebrjetoi t\u00eb nj\u00ebjt\u00ebn fatkeq\u00ebsi: t\u00eb pakt\u00ebn 5000 njer\u00ebz mor\u00ebn spame n\u00eb form\u00ebn e mesazheve SMS, q\u00eb i inkurajonin ata t\u00eb telefononin urgjentisht n\u00eb numrin e telefonit t\u00eb kopshtit zoologjik dhe t\u00eb k\u00ebrkonin nj\u00eb person t\u00eb imagjinar.<\/p>\n

Wi-Fi nuk do t\u00eb jet\u00eb<\/h2>\n

\nKriminel\u00ebt kibernetik\u00eb gjithashtu mund t\u00eb bllokojn\u00eb leht\u00ebsisht t\u00eb gjith\u00eb rrjetin korporativ. Shpesh, bllokimi i IP p\u00ebrdoret si nj\u00eb mas\u00eb p\u00ebr t\u00eb luftuar sulmet DDoS. Por kjo praktik\u00eb jo vet\u00ebm q\u00eb \u00ebsht\u00eb e pafavorshme, por gjithashtu shum\u00eb e rrezikshme. Adresa IP \u00ebsht\u00eb e leht\u00eb p\u00ebr t'u gjetur (p.sh., p\u00ebrmes monitorimit t\u00eb burimeve) dhe e leht\u00eb p\u00ebr t'u z\u00ebvend\u00ebsuar (ose falsifikuar). Klient\u00ebt tan\u00eb para ardhjes n\u00eb Variti kishin raste kur kjo \u00e7oi n\u00eb bllokimin e nj\u00eb IP t\u00eb caktuar dhe thjesht ndaloi Wi-Fi-n\u00eb n\u00eb zyrat e tyre. Kishte nj\u00eb rast kur nj\u00eb klient \"u ofrua\" nj\u00eb IP t\u00eb till\u00eb, dhe ai bllokoi aksesin n\u00eb burimin e tij p\u00ebr p\u00ebrdoruesit nga nj\u00eb rajon t\u00eb t\u00ebr\u00eb, duke mos e v\u00ebrejtur p\u00ebr nj\u00eb koh\u00eb t\u00eb gjat\u00eb, sepse n\u00eb t\u00eb tjera gjitha burimet funksiononin n\u00eb m\u00ebnyr\u00eb t\u00eb p\u00ebrsosur.<\/p>\n

\u00c7far\u00eb \u00ebsht\u00eb e re?<\/h2>\n

\nK\u00ebrc\u00ebnimet e reja k\u00ebrkojn\u00eb zgjidhje t\u00eb reja p\u00ebr mbrojtje. Megjithat\u00eb, kjo ni\u0219\u00eb e re n\u00eb treg sapo ka filluar t\u00eb formohet. Zgjidhjet p\u00ebr t\u00eb hequr dor\u00eb nga sulmet e thjeshta t\u00eb bot\u00ebve jan\u00eb t\u00eb shumta, por p\u00ebr ato komplekse, gj\u00ebrat nuk jan\u00eb ashtu si\u00e7 duken. Shum\u00eb zgjidhje ende praktikojn\u00eb metoda t\u00eb bllokimit t\u00eb IP. T\u00eb tjer\u00ebve u nevojitet koh\u00eb p\u00ebr t\u00eb mbledhur t\u00eb dh\u00ebna fillestare p\u00ebr t\u00eb filluar pun\u00ebn, dhe k\u00ebto 10-15 minuta mund t\u00eb b\u00ebhen nj\u00eb dob\u00ebsi. Ka zgjidhje q\u00eb p\u00ebrdorin m\u00ebsimin e makinerive p\u00ebr t\u00eb identifikuar bot\u00ebt n\u00eb baz\u00eb t\u00eb sjelljes s\u00eb tyre. Dhe nj\u00ebkoh\u00ebsisht, skuadrat nga \"ana tjet\u00ebr\" mburren se kan\u00eb tashm\u00eb bot\u00eb q\u00eb mund t\u00eb imitojn\u00eb modele reale, t\u00eb pandryshueshme nga ato njer\u00ebzore. Kush k\u00eb kush \u2014 ende nuk dihet.<\/p>\n

\u00c7far\u00eb t\u00eb b\u00ebni, n\u00ebse duhet t\u00eb luftoni me ekipe profesionale t\u00eb bot\u00ebve dhe sulme komplekse, multi-hap\u00ebsirash n\u00eb disa nivele nj\u00ebherazi?<\/p>\n

Eksperienca jon\u00eb tregon se duhet t\u00eb fokusohemi n\u00eb filtrimin e k\u00ebrkesave t\u00eb paligjshme pa bllokuar adresat IP. P\u00ebr sulmet komplekse DDoS, nevojitet filtrimi n\u00eb disa nivele, duke p\u00ebrfshir\u00eb nivelin e transportit, niveli i aplikacioneve dhe API-t\u00eb. Fal\u00eb k\u00ebsaj, \u00ebsht\u00eb e mundur t\u00eb reflektojm\u00eb edhe sulmet me frekuenc\u00eb t\u00eb ul\u00ebt, t\u00eb cilat zakonisht jan\u00eb t\u00eb padukshme dhe p\u00ebr k\u00ebt\u00eb arsye shpesh kalojn\u00eb m\u00eb tej. S\u00eb fundmi, \u00ebsht\u00eb e nevojshme t\u00eb lejojm\u00eb t\u00eb gjith\u00eb p\u00ebrdoruesit e v\u00ebrtet\u00eb edhe gjat\u00eb faz\u00ebs aktive t\u00eb sulmit.<\/p>\n

N\u00eb t\u00eb dyt\u00ebn, kompanit\u00eb kan\u00eb nevoj\u00eb p\u00ebr mund\u00ebsin\u00eb p\u00ebr t\u00eb krijuar sisteme t\u00eb avancuara mbrojtjeje, n\u00eb t\u00eb cilat, p\u00ebrve\u00e7 mjeteve p\u00ebr parandalimin e sulmeve DDoS, do t\u00eb integrohen sisteme p\u00ebr kund\u00ebrv\u00ebnie ndaj mashtrimeve, vjedhjes s\u00eb t\u00eb dh\u00ebnave, mbrojtjes s\u00eb p\u00ebrmbajtjes dhe k\u00ebshtu me radh\u00eb. <\/p>\n

N\u00eb t\u00eb tret\u00ebn, ato duhet t\u00eb funksionojn\u00eb n\u00eb koh\u00eb reale nga k\u00ebrkesa e par\u00eb \u2014 aft\u00ebsia p\u00ebr t\u00eb reaguar menj\u00ebher\u00eb ndaj incidenteve t\u00eb siguris\u00eb rrit ndjesh\u00ebm shanset p\u00ebr t\u00eb parandaluar nj\u00eb sulm ose p\u00ebr t\u00eb reduktuar fuqin\u00eb shkat\u00ebrruese t\u00eb tij.<\/p>\n

E ardhmja af\u00ebr: menaxhimi i reputacionit dhe mbledhja e t\u00eb dh\u00ebnave t\u00eb m\u00ebdha p\u00ebrmes bot\u00ebve
\nHistoria e DDoS ka evoluar nga e thjesht\u00eb n\u00eb t\u00eb komplikuar. Fillimisht, q\u00ebllimi i sulmuesve ishte t\u00eb ndalonin funksionimin e faqes. Tani ata e konsiderojn\u00eb m\u00eb efektive t\u00eb synojn\u00eb proceset kryesore t\u00eb biznesit.<\/p>\n

V\u00ebshtir\u00ebsia e sulmeve do t\u00eb vazhdoj\u00eb t\u00eb rritet, kjo \u00ebsht\u00eb e pashmangshme. Shtuar k\u00ebsaj, ajo q\u00eb bota e keqe e b\u00ebnte deri tani \u2014 vjedhja e t\u00eb dh\u00ebnave dhe falsifikimi i tyre, shantazhi, spami \u2014 robot\u00ebt do t\u00eb mbledhin t\u00eb dh\u00ebna nga shum\u00eb burime (Big Data) dhe do t\u00eb krijojn\u00eb llogari \"t\u00eb besueshme\" t\u00eb rreme p\u00ebr t\u00eb menaxhuar ndikimin, reputacionin ose phishing masiv.<\/p>\n

Aktualisht, vet\u00ebm kompanit\u00eb e m\u00ebdha mund t\u00eb p\u00ebrballojn\u00eb investimet n\u00eb mbrojtjen nga DDoS dhe robot\u00ebt, por madje edhe ato nuk arrijn\u00eb gjithmon\u00eb t\u00eb gjurmojn\u00eb dhe filtrojn\u00eb plot\u00ebsisht trafikun e gjeneruar nga robot\u00ebt. E vetmja pozitivitet i asaj q\u00eb sulmet e robot\u00ebve po b\u00ebhen m\u00eb t\u00eb komplikuara \u00ebsht\u00eb se ajo stimulon tregun t\u00eb krijoj\u00eb zgjidhje \"inteligjente\" dhe m\u00eb t\u00eb avancuara p\u00ebr mbrojtje.<\/p>\n

\u00c7far\u00eb mendoni \u2014 si do t\u00eb zhvillohet industria e mbrojtjes nga robot\u00ebt dhe cilat zgjidhje jan\u00eb t\u00eb nevojshme n\u00eb treg tani p\u00ebr tani?
\n
Burimi: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0430\u0440\u0443 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u0443\u0441\u043b\u0443\u0433 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0431\u044b\u043b\u043e \u0434\u043e\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u0438 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 DDoS-\u0430\u0442\u0430\u043a. \u041d\u043e \u0443\u0436\u0435 \u043a 1-\u043c\u0443 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0443 2019 \u0433\u043e\u0434\u0430 \u0442\u0435 \u0436\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u0438\u0445 \u043e\u0448\u0435\u043b\u043e\u043c\u043b\u044f\u044e\u0449\u0435\u043c \u0440\u043e\u0441\u0442\u0435 \u043d\u0430 84%. \u0410 \u0434\u0430\u043b\u044c\u0448\u0435 \u0432\u0441\u0435 \u043f\u043e\u0448\u043b\u043e \u043f\u043e \u043d\u0430\u0440\u0430\u0441\u0442\u0430\u044e\u0449\u0435\u0439. \u0414\u0430\u0436\u0435 \u043f\u0430\u043d\u0434\u0435\u043c\u0438\u044f \u043d\u0435 \u043f\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0430\u0442\u043c\u043e\u0441\u0444\u0435\u0440\u0435 \u043c\u0438\u0440\u0430 \u2014 \u043d\u0430\u043f\u0440\u043e\u0442\u0438\u0432, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0438 \u0441\u043f\u0430\u043c\u0435\u0440\u044b \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u043b\u0438 \u044d\u0442\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u044b\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":87698,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-87697","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DDoS shkon offline | ProHoster","description":"Dy vitet e fundit, agjencit\u00eb k\u00ebrkimore dhe ofruesit e sh\u00ebrbimeve t\u00eb siguris\u00eb informative filluan t\u00eb raportojn\u00eb p\u00ebr","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/ddos-idet-v-offlajn","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47DDoS \u0438\u0434\u0435\u0442 \u0432 \u043e\u0444\u0444\u043b\u0430\u0439\u043d | ProHoster","og:description":"\u041f\u0430\u0440\u0443 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u0443\u0441\u043b\u0443\u0433 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0431\u044b\u043b\u043e \u0434\u043e\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u043e","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/ddos-idet-v-offlajn","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-09T11:42:31+00:00","article:modified_time":"2020-07-09T11:42:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"87697","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:46:50","updated":"2022-09-28 14:28:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/87697","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=87697"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/87697\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/87698"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=87697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=87697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=87697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}