{"id":94321,"date":"2020-09-15T19:42:32","date_gmt":"2020-09-15T17:42:32","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns"},"modified":"2020-09-15T19:42:32","modified_gmt":"2020-09-15T17:42:32","slug":"rukovodstvo-po-bezopasnosti-dns","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns","title":{"rendered":"Udh\u00ebzuesi p\u00ebr sigurin\u00eb e DNS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Udh\u00ebzuesi p\u00ebr sigurin\u00eb e DNS\" src=\"\/wp-content\/uploads\/2020\/09\/e29223def3c7c13eaa45a24967d6bba0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPavar\u00ebsisht se \u00e7far\u00eb merret me kompanin\u00eb, siguria <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/what-is-dns\/\"> DNS <\/a><\/noindex>duhet t\u00eb jet\u00eb nj\u00eb pjes\u00eb e pandashme e planit t\u00eb saj p\u00ebr sigurimin e siguris\u00eb. Sh\u00ebrbimet e p\u00ebrpunimit t\u00eb emrave, t\u00eb cilat transformojn\u00eb emrat e nyjeve n\u00eb IP adresat, p\u00ebrdoren nga t\u00eb gjitha aplikacionet dhe sh\u00ebrbimet n\u00eb rrjet.<\/p>\n<p><strong>N\u00ebse nj\u00eb sulmues fiton kontrollin mbi DNS-n\u00eb e organizat\u00ebs, at\u00ebher\u00eb ai mund t\u00eb:<\/strong><\/p>\n<ul>\n<li>krijoj\u00eb menaxhim p\u00ebr burimet e aksesueshme<\/li>\n<li>redirigjoj\u00eb email-et dhe k\u00ebrkesat p\u00ebr ueb, si dhe p\u00ebrpjekjet p\u00ebr autentifikim<\/li>\n<li>krijoj\u00eb dhe konfirmoj\u00eb certifikatat SSL\/TLS<\/li>\n<\/ul>\n<p>\n<strong>Ky udh\u00ebzues shqyrton sigurin\u00eb e DNS nga dy k\u00ebndv\u00ebshtrime:<\/strong><\/p>\n<ol>\n<li>Kryerja e monitorimit dhe kontrollit t\u00eb vazhduesh\u00ebm mbi DNS<\/li>\n<li>Si protokollet e reja t\u00eb DNS, si DNSSEC, DOH dhe DoT, mund t\u00eb ndihmojn\u00eb n\u00eb mbrojtjen e integritetit dhe privat\u00ebsis\u00eb s\u00eb k\u00ebrkesave t\u00eb DNS q\u00eb kalojn\u00eb<\/li>\n<\/ol>\n<p>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2> \u00c7far\u00eb \u00ebsht\u00eb siguria e DNS? <\/h2>\n<p>\n<img decoding=\"async\" alt=\"Udh\u00ebzuesi p\u00ebr sigurin\u00eb e DNS\" src=\"\/wp-content\/uploads\/2020\/09\/6367857de248c9ee9435f8ec079600be.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3> Koncepti i siguris\u00eb s\u00eb DNS p\u00ebrfshin dy komponent\u00eb t\u00eb r\u00ebnd\u00ebsish\u00ebm:<\/h3>\n<p><\/p>\n<ol>\n<li>Sigurimi i integritetit dhe disponueshm\u00ebris\u00eb s\u00eb p\u00ebrgjithshme t\u00eb sh\u00ebrbimeve t\u00eb DNS, t\u00eb cilat transformojn\u00eb emrat e nyjeve n\u00eb IP adresat<\/li>\n<li>Monitorimi i aktivitetit t\u00eb DNS p\u00ebr t\u00eb p\u00ebrcaktuar mund\u00ebsit\u00eb e problemeve t\u00eb siguris\u00eb diku n\u00eb rrjetin tuaj<\/li>\n<\/ol>\n<h3> Pse DNS \u00ebsht\u00eb e ndjeshme ndaj sulmeve? <\/h3>\n<p>\nTeknologjia DNS u krijua n\u00eb fillim t\u00eb zhvillimit t\u00eb internetit, shum\u00eb para se dikush t\u00eb fillonte t\u00eb mendoj\u00eb p\u00ebr sigurin\u00eb n\u00eb rrjet. DNS operon pa autentifikim dhe enkriptim, duke p\u00ebrpunuar k\u00ebrkesat e \u00e7do p\u00ebrdoruesi verb\u00ebrisht.<\/p>\n<p>P\u00ebr k\u00ebt\u00eb arsye, ekzistojn\u00eb shum\u00eb m\u00ebnyra p\u00ebr t\u00eb mashtruar p\u00ebrdoruesin dhe p\u00ebr t\u00eb manipuluar informacionin mbi vendin ku realisht ndodhin transformimet e emrave n\u00eb IP adresat.<\/p>\n<h2> Siguria e DNS: pyetje dhe komponent\u00eb<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Udh\u00ebzuesi p\u00ebr sigurin\u00eb e DNS\" src=\"\/wp-content\/uploads\/2020\/09\/45d61ac4004631a2602518a3d4a51c3c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSiguria e DNS p\u00ebrb\u00ebhet nga disa elemente t\u00eb r\u00ebnd\u00ebsishme <em>komponent\u00eb<\/em>, secili prej t\u00eb cil\u00ebve duhet t\u00eb merret parasysh p\u00ebr t\u00eb siguruar nj\u00eb mbrojtje t\u00eb plot\u00eb:<\/p>\n<ul>\n<li><strong>Rritja e siguris\u00eb s\u00eb server\u00ebve dhe procedurave t\u00eb menaxhimit:<\/strong> rritni nivelin e mbrojtjes s\u00eb server\u00ebve dhe krijoni nj\u00eb shabllon standard p\u00ebr implementimin<\/li>\n<li><strong>P\u00ebrmir\u00ebsimi i protokollit:<\/strong> implementoni DNSSEC, DoT ose DoH<\/li>\n<li><strong>Analitika dhe raportimi: <\/strong>shtoni log-un e ngjarjeve t\u00eb DNS n\u00eb sistemin SIEM p\u00ebr kontekst t\u00eb shtuar gjat\u00eb hetimit t\u00eb incidenteve<\/li>\n<li><strong>Kibernetika dhe zbulimi i k\u00ebrc\u00ebnimeve:<\/strong> abonohuni p\u00ebr nj\u00eb kanal aktiv p\u00ebr marrjen e analizave mbi k\u00ebrc\u00ebnimet<\/li>\n<li><strong>Automatizimi: <\/strong>krijoni sa m\u00eb shum\u00eb skenar\u00eb t\u00eb mundsh\u00ebm p\u00ebr t\u00eb automatizuar proceset<\/li>\n<\/ul>\n<p>\nKomponent\u00ebt e p\u00ebrmendur m\u00eb lart jan\u00eb vet\u00ebm maja e ajsbergut t\u00eb siguris\u00eb s\u00eb DNS. N\u00eb seksionin tjet\u00ebr do t\u00eb shqyrtojm\u00eb p\u00ebrdorime m\u00eb specifike dhe praktikat m\u00eb t\u00eb mira q\u00eb duhet t\u00eb dini.<\/p>\n<h2> Sulmet ndaj DNS<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Udh\u00ebzuesi p\u00ebr sigurin\u00eb e DNS\" src=\"\/wp-content\/uploads\/2020\/09\/f44708ad51b13385aa5ce10629944ecc.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<ul>\n<li><strong><noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/dns-cache-poisoning\/\">nd\u00ebrrimi i DNS ose \"helmimi\" i caches<\/a><\/noindex>: <\/strong> p\u00ebrdorimi i dob\u00ebsis\u00eb s\u00eb sistemit p\u00ebr t\u00eb menaxhuar cache-n e DNS me q\u00ebllim t\u00eb redirigjimit t\u00eb p\u00ebrdoruesve n\u00eb nj\u00eb vend tjet\u00ebr<\/li>\n<li><strong><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/513160\/\">DNS tunneling<\/a><\/noindex>: <\/strong>n\u00eb m\u00ebnyr\u00eb t\u00eb p\u00ebrshtatshme p\u00ebrdoret p\u00ebr t\u00eb anashkaluar masat mbrojt\u00ebse nga lidhjet e larg\u00ebta<\/li>\n<li><strong>interceptimi i DNS: <\/strong>redirigjimi i trafikut standard t\u00eb DNS n\u00eb nj\u00eb server tjet\u00ebr t\u00eb DNS duke ndryshuar regjistruesin e domenit<\/li>\n<li><strong>sulmi NXDOMAIN: <\/strong>b\u00ebr\u00eb nj\u00eb sulm DDoS ndaj nj\u00eb serveri t\u00eb autoritetit DNS duke d\u00ebrguar k\u00ebrkesa t\u00eb pap\u00ebrshtatshme t\u00eb domain p\u00ebr t\u00eb marr\u00eb nj\u00eb p\u00ebrgjigje t\u00eb detyruar<\/li>\n<li><strong>domen fantazm\u00eb: <\/strong> b\u00ebn q\u00eb zgjidh\u00ebsi i DNS (DNS resolver) t\u00eb pres\u00eb p\u00ebrgjigje nga domeinet jo ekzistues, \u00e7ka shkakton uljen e performanc\u00ebs<\/li>\n<li><strong>sulmi ndaj subdomain t\u00eb rastit: <\/strong> hostet e gjykuar dhe botete kryejn\u00eb nj\u00eb sulm DDoS mbi nj\u00eb domen t\u00eb v\u00ebrtet\u00eb, por fokusojn\u00eb zjarrin n\u00eb subdomainet false p\u00ebr t\u00eb detyruar serverin DNS t\u00eb kryej\u00eb k\u00ebrkesa dhe t\u00eb marr\u00eb kontroll mbi sh\u00ebrbimin<\/li>\n<li><strong>bllokimi i domenit: <\/strong> p\u00ebrfshin d\u00ebrgimin e shum\u00eb p\u00ebrgjigjeve spambot p\u00ebr t\u00eb bllokuar burimet e serverit DNS<\/li>\n<li><strong>sulmi i botnet-it nga pajisjet e abonent\u00ebve: <\/strong> nj\u00eb grup i kompjuter\u00ebve, modemeve, router-eve dhe pajisjeve t\u00eb tjera q\u00eb p\u00ebrqendrojn\u00eb fuqin\u00eb kompjuterike n\u00eb nj\u00eb faqe t\u00eb caktuar p\u00ebr ta mbingarkuar me k\u00ebrkesa trafiku<\/li>\n<\/ul>\n<p><\/p>\n<h3> Sulmet q\u00eb p\u00ebrdorin DNS<\/h3>\n<p>\nSulmet q\u00eb n\u00eb nj\u00eb m\u00ebnyr\u00eb t\u00eb caktuar p\u00ebrdorin DNS p\u00ebr t\u00eb sulmuar sisteme t\u00eb tjera (dmth. ndryshimi i regjistrave DNS nuk \u00ebsht\u00eb q\u00ebllimi p\u00ebrfundimtar):<\/p>\n<ul>\n<li>Fast-Flux<\/li>\n<li>Rrjetet e vetme Flux<\/li>\n<li>Rrjetet e dyfishta Flux<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/513160\/\">DNS tunneling<\/a><\/noindex> <\/li>\n<\/ul>\n<p><\/p>\n<h3> Sulmet ndaj DNS<\/h3>\n<p>\nSulmet q\u00eb rezultojn\u00eb n\u00eb kthimin e IP-s\u00eb s\u00eb nevojshme p\u00ebr sulmuesin nga serveri DNS:<\/p>\n<ul>\n<li>Nd\u00ebrrimi i DNS ose \"helmimi\" i caches<\/li>\n<li>Interceptimi i DNS<\/li>\n<\/ul>\n<p><\/p>\n<h2> \u00c7far\u00eb \u00ebsht\u00eb DNSSEC?<\/h2>\n<p><img decoding=\"async\" alt=\"Udh\u00ebzuesi p\u00ebr sigurin\u00eb e DNS\" src=\"\/wp-content\/uploads\/2020\/09\/929b6e632135bd1b059e403e7b4ddab8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDNSSEC \u2013 modulet e siguris\u00eb s\u00eb sh\u00ebrbimit t\u00eb emrave t\u00eb domenit \u2013 p\u00ebrdoren p\u00ebr t\u00eb verifikuar regjistrat DNS pa pasur nevoj\u00eb p\u00ebr t\u00eb ditur informacionin e p\u00ebrgjithsh\u00ebm p\u00ebr \u00e7do k\u00ebrkes\u00eb specifike t\u00eb DNS.<\/p>\n<p>DNSSEC p\u00ebrdor \u00e7el\u00ebsa t\u00eb n\u00ebnshkrimit digjital (PKI) p\u00ebr t\u00eb konfirmuar se rezultatet e k\u00ebrkes\u00ebs p\u00ebr emrin e domenit jan\u00eb marr\u00eb nga nj\u00eb burim i lejuesh\u00ebm.<br \/>\nZbatimi i DNSSEC nuk \u00ebsht\u00eb vet\u00ebm nj\u00eb praktik\u00eb e mir\u00ebbrendshme e industris\u00eb, por gjithashtu ndihmon efektivisht n\u00eb shmangien e shumic\u00ebs s\u00eb sulmeve mbi DNS.<\/p>\n<h4>Parimi i funksionimit t\u00eb DNSSEC<\/h4>\n<p>\nDNSSEC funksionon n\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme me TLS\/HTTPS, duke p\u00ebrdorur \u00e7ifte \u00e7el\u00ebsash publik\u00eb dhe privat\u00eb p\u00ebr n\u00ebnshkrimin digjital t\u00eb regjistrimeve DNS. P\u00ebrmbledhje e procesit:<\/p>\n<ol>\n<li>Regjistrimet DNS n\u00ebnshkruhen me nj\u00eb \u00e7ift \u00e7el\u00ebsash privat dhe publik<\/li>\n<li>P\u00ebrgjigjet n\u00eb k\u00ebrkesat DNSSEC p\u00ebrmbajn\u00eb regjistrimin e k\u00ebrkuar, si dhe n\u00ebnshkrimin dhe \u00e7el\u00ebsin publik<\/li>\n<li>Pastaj <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/pgp-encryption\/\">\u00e7el\u00ebsi publik <\/a><\/noindex>p\u00ebrdoret p\u00ebr t\u00eb krahasuar autenticitetin e regjistrimit dhe n\u00ebnshkrimit<\/li>\n<\/ol>\n<h2> Siguria e DNS dhe DNSSEC<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Udh\u00ebzuesi p\u00ebr sigurin\u00eb e DNS\" src=\"\/wp-content\/uploads\/2020\/09\/3bd1d530634e82ed6d80040a1d207ff0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDNSSEC \u00ebsht\u00eb nj\u00eb mjet p\u00ebr t\u00eb verifikuar integritetin e k\u00ebrkesave DNS. Nuk ndikon n\u00eb konfidencialitetin e DNS. N\u00eb terma t\u00eb tjer\u00eb, DNSSEC mund t'ju jap\u00eb besimin se p\u00ebrgjigjja n\u00eb k\u00ebrkes\u00ebn tuaj DNS nuk \u00ebsht\u00eb e falsifikuar, por \u00e7do keqb\u00ebr\u00ebs mund t\u00eb shoh\u00eb k\u00ebto rezultate n\u00eb form\u00ebn ku ato u d\u00ebrguan juve.<\/p>\n<h2> DoT - DNS mbi TLS<\/h2>\n<p>\nTransport Layer Security (siguria n\u00eb nivelin e transportit, TLS) \u00ebsht\u00eb nj\u00eb protokol kriptografik p\u00ebr mbrojtjen e informacionit t\u00eb d\u00ebrguar n\u00ebp\u00ebrmjet nj\u00eb lidhjeje rrjetit. Pasi t\u00eb keni krijuar nj\u00eb lidhje t\u00eb sigurt TLS midis klientit dhe serverit, t\u00eb dh\u00ebnat e d\u00ebrguara jan\u00eb t\u00eb koduara dhe asnj\u00eb nd\u00ebrmjet\u00ebs nuk do t\u00eb jet\u00eb n\u00eb gjendje t'i shoh\u00eb ato.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/tls-vs-ssl\/\">TLS <\/a><\/noindex>shpesh p\u00ebrdoret si pjes\u00eb e HTTPS (SSL) n\u00eb shfletuesin tuaj, pasi k\u00ebrkesat d\u00ebrgohen n\u00eb server\u00ebt HTTP t\u00eb siguruar.<\/p>\n<p>DNS-over-TLS (DNS mbi TLS, DoT) p\u00ebrdor protokollin TLS p\u00ebr t\u00eb koduar trafikun UDP t\u00eb k\u00ebrkesave t\u00eb zakonshme DNS.<br \/>\nKodimi i k\u00ebtyre k\u00ebrkesave n\u00eb form\u00eb teksti t\u00eb zakonsh\u00ebm ndihmon n\u00eb mbrojtjen e p\u00ebrdoruesve ose aplikacioneve q\u00eb kryejn\u00eb k\u00ebrkesa nga disa sulme.<\/p>\n<ul>\n<li><strong>MitM, ose \u00abnjeriu n\u00eb mes\u00bb<\/strong>: pa kodim, sistemi nd\u00ebrmjet\u00ebs, q\u00eb ndodhet midis klientit dhe serverit t\u00eb autorizuar DNS, mund t\u00eb d\u00ebrgoj\u00eb potencialisht informacion t\u00eb rrem\u00eb ose t\u00eb rreziksh\u00ebm n\u00eb p\u00ebrgjigje t\u00eb k\u00ebrkes\u00ebs s\u00eb klientit<\/li>\n<li><strong>Spiunazh dhe ndjekje<\/strong>: pa kodimin e k\u00ebrkesave, sistemet nd\u00ebrmjet\u00ebse leht\u00ebsisht mund t\u00eb shohin se n\u00eb cilat faqe po shkon nj\u00eb p\u00ebrdorues ose aplikacion i caktuar. Megjith\u00ebse nga DNS n\u00eb vetvete nuk mund t\u00eb dihet se n\u00eb cil\u00ebn faqe t\u00eb ve\u00e7ant\u00eb n\u00eb nj\u00eb sit po vizitohet, thjesht njohja e domain-ve t\u00eb k\u00ebrkuara \u00ebsht\u00eb e mjaftueshme p\u00ebr t\u00eb formuar nj\u00eb profil t\u00eb sistemit ose nj\u00eb individi t\u00eb ve\u00e7ant\u00eb<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"Udh\u00ebzuesi p\u00ebr sigurin\u00eb e DNS\" src=\"\/wp-content\/uploads\/2020\/09\/31bb5e540feac0302244253b1c12ed32.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nBurimi: <noindex><a rel=\"nofollow\" href=\"https:\/\/faculty.sites.uci.edu\/zhouli\/files\/2019\/11\/conext19.pdf\">University of California Irvine<\/a><\/noindex><\/p>\n<h2> DoH - DNS mbi HTTPS<\/h2>\n<p>\nDNS-over-HTTPS (DNS mbi HTTPS, DoH) \u00ebsht\u00eb nj\u00eb protokoll eksperimental, i promovuar n\u00eb bashk\u00ebpunim nga Mozilla dhe Google. Q\u00ebllimet e tij jan\u00eb t\u00eb ngjashme me protokollin DoT \u2014 p\u00ebrmir\u00ebsimi i privat\u00ebsis\u00eb s\u00eb njer\u00ebzve n\u00eb internet duke koduar k\u00ebrkesat dhe p\u00ebrgjigjet DNS.<\/p>\n<p>K\u00ebrkesat standarde DNS d\u00ebrgohen p\u00ebrmes UDP. K\u00ebrkesat dhe p\u00ebrgjigjet mund t\u00eb gjurmohen me ndihm\u00ebn e skemave si <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/how-to-use-wireshark\/\">Wireshark<\/a><\/noindex>. DoT kodon k\u00ebto k\u00ebrkesa, por ato ende identifikohen si nj\u00eb trafik relativisht i duksh\u00ebm UDP n\u00eb rrjet.<\/p>\n<p>DoH p\u00ebrdor nj\u00eb qasje tjet\u00ebr dhe d\u00ebrgon k\u00ebrkesa t\u00eb koduara p\u00ebr shnd\u00ebrrimin e emrave t\u00eb nyjeve n\u00ebp\u00ebrmjet lidhjeve HTTPS, q\u00eb n\u00eb rrjet duken si \u00e7do k\u00ebrkes\u00eb tjet\u00ebr web.<\/p>\n<p>Kjo dallim ka pasoja t\u00eb r\u00ebnd\u00ebsishme p\u00ebr administrator\u00ebt e sistemeve dhe p\u00ebr t\u00eb ardhmen e shnd\u00ebrrimit t\u00eb emrave.<\/p>\n<ol>\n<li>Filtrimi DNS \u00ebsht\u00eb nj\u00eb m\u00ebnyr\u00eb e zakonshme p\u00ebr t\u00eb filtruar trafikun web p\u00ebr t\u00eb mbrojtur p\u00ebrdoruesit nga sulmet phishing, faqeve q\u00eb shp\u00ebrndajn\u00eb malware, ose aktivitetit tjet\u00ebr potencialisht t\u00eb rreziksh\u00ebm n\u00eb rrjetin korporativ. Protokolli DoH kalon k\u00ebto filtrat, duke ekspozuar potencialisht p\u00ebrdoruesit dhe rrjetin n\u00eb nj\u00eb rrezik m\u00eb t\u00eb lart\u00eb. <\/li>\n<li>N\u00eb modelin aktual t\u00eb shnd\u00ebrrimit t\u00eb emrave, \u00e7do pajisje n\u00eb rrjet n\u00eb nj\u00eb far\u00eb m\u00ebnyre merr k\u00ebrkesat DNS nga e nj\u00ebjta vend (nga serveri DNS i paracaktuar). DoH dhe, n\u00eb ve\u00e7anti, implementimi i tij nga Firefox tregojn\u00eb se n\u00eb t\u00eb ardhmen kjo mund t\u00eb ndryshoj\u00eb. \u00c7do aplikacion n\u00eb kompjuter mund t\u00eb marr\u00eb t\u00eb dh\u00ebna nga burime t\u00eb ndryshme DNS, duke e b\u00ebr\u00eb shum\u00eb m\u00eb t\u00eb v\u00ebshtir\u00eb gjetjen dhe zgjidhjen e problemeve, sigurimin e siguris\u00eb dhe modelimin e rreziqeve. <\/li>\n<\/ol>\n<p><img decoding=\"async\" alt=\"Udh\u00ebzuesi p\u00ebr sigurin\u00eb e DNS\" src=\"\/wp-content\/uploads\/2020\/09\/46ece02ca361b133d4a6bd488b917c73.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nBurimi: <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/what-is-powershell\/\">www.varonis.com\/blog\/what-is-powershell<\/a><\/noindex><\/p>\n<h3> Cila \u00ebsht\u00eb ndryshimi midis DNS mbi TLS dhe DNS mbi HTTPS?<\/h3>\n<p>\nT\u00eb fillojm\u00eb me DNS mbi TLS (DoT). V\u00ebmendja k\u00ebtu \u00ebsht\u00eb se protokolli origjinal DNS nuk ndryshohet, por thjesht kalon n\u00ebp\u00ebr nj\u00eb kanal t\u00eb sigurt. DoH vendos DNS n\u00eb formatin HTTP para se t\u00eb kryej\u00eb k\u00ebrkesat.<\/p>\n<h2> Njoftimet e monitorimit DNS<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Udh\u00ebzuesi p\u00ebr sigurin\u00eb e DNS\" src=\"\/wp-content\/uploads\/2020\/09\/fbbd9f320922dbd2eec180a253ba54f0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAft\u00ebsia p\u00ebr t\u00eb monitoruar n\u00eb m\u00ebnyr\u00eb efektive trafikun DNS n\u00eb rrjetin tuaj p\u00ebr anomalit\u00eb e dyshimta \u00ebsht\u00eb thelb\u00ebsore p\u00ebr zbulimin e hersh\u00ebm t\u00eb thyerjes s\u00eb siguris\u00eb. P\u00ebrdorimi i nj\u00eb instrumenti si Varonis Edge do t'ju jap\u00eb mund\u00ebsin\u00eb t\u00eb jeni n\u00eb dijeni t\u00eb t\u00eb gjitha treguesve t\u00eb r\u00ebnd\u00ebsish\u00ebm dhe t\u00eb krijoni profile p\u00ebr \u00e7do llogari n\u00eb rrjetin tuaj. Mund t\u00eb konfiguroni gjenerimin e njoftimeve si rezultat i kombinimeve t\u00eb aktiviteteve q\u00eb ndodhin p\u00ebr nj\u00eb periudh\u00eb t\u00eb caktuar kohore.<\/p>\n<p>Monitorimi i ndryshimeve t\u00eb DNS, vendndodhjeve t\u00eb llogarive, si dhe t\u00eb fakt\u00ebve t\u00eb p\u00ebrdorimit t\u00eb par\u00eb dhe aksesit n\u00eb t\u00eb dh\u00ebna t\u00eb ndjeshme, si dhe aktivitetet jasht\u00eb orarit t\u00eb pun\u00ebs \u2014 jan\u00eb disa tregues q\u00eb mund t\u00eb krahasohen p\u00ebr t\u00eb krijuar nj\u00eb pamje m\u00eb t\u00eb gjer\u00eb t\u00eb zbullimit.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/519108\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c DNS \u0434\u043e\u043b\u0436\u043d\u0430 \u044f\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u043e\u0442\u044a\u0435\u043c\u043b\u0435\u043c\u043e\u0439 \u0447\u0430\u0441\u0442\u044c\u044e \u0435\u0435 \u043f\u043b\u0430\u043d\u0430 \u043f\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u043b\u0443\u0436\u0431\u044b \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438\u043c\u0435\u043d, \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0438\u043c\u0435\u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0437\u043b\u043e\u0432 \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432\u0441\u0435\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0432 \u0441\u0435\u0442\u0438. \u0415\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 DNS \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0442\u043e \u0441\u043c\u043e\u0436\u0435\u0442 \u0431\u0435\u0437 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430\u0434 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u043c\u0438\u0441\u044f \u0432 \u043e\u0431\u0449\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94322,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94321","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 DNS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-15T17:42:32+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-15T17:42:32+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Udh\u00ebzuesi p\u00ebr Sigurin\u00eb e DNS | ProHoster","description":"Pavar\u00ebsisht se \u00e7far\u00eb merret me kompanin\u00eb, siguria","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 DNS | ProHoster","og:description":"\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-15T17:42:32+00:00","article:modified_time":"2020-09-15T17:42:32+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94321","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:29:29","updated":"2022-09-30 08:27:56","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/94321","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=94321"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/94321\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/94322"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=94321"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=94321"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=94321"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}