{"id":94321,"date":"2020-09-15T19:42:32","date_gmt":"2020-09-15T17:42:32","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns"},"modified":"2020-09-15T19:42:32","modified_gmt":"2020-09-15T17:42:32","slug":"rukovodstvo-po-bezopasnosti-dns","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns","title":{"rendered":"Udhezues p\u00ebr sigurin\u00eb e DNS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Udhezues p\u00ebr sigurin\u00eb e DNS\" src=\"\/wp-content\/uploads\/2020\/09\/e29223def3c7c13eaa45a24967d6bba0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00c7far\u00ebdo qe t\u00eb b\u00ebj\u00eb kompania, siguria <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/what-is-dns\/\"> DNS <\/a><\/noindex>duhet t\u00eb jet\u00eb nj\u00eb pjes\u00eb e pandashme e planit t\u00eb saj p\u00ebr sigurimin e siguris\u00eb. Sh\u00ebrbimet e p\u00ebrpunimit t\u00eb emrave, t\u00eb cilat konvertojn\u00eb emrat e nyjeve rrjetore n\u00eb adresa IP, p\u00ebrdoren dosido nga t\u00eb gjitha aplikacionet dhe sh\u00ebrbimet n\u00eb rrjet.<\/p>\n<p><strong>N\u00ebse nj\u00eb sulmues fiton kontroll mbi DNS-n\u00eb e organizat\u00ebs, ai mund t\u00eb:<\/strong><\/p>\n<ul>\n<li>kaloj\u00eb drejt vetes menaxhimin e burimeve q\u00eb jan\u00eb n\u00eb dispozicion publik<\/li>\n<li>ridrejtoj\u00eb e-mailet e ardhshme, si dhe k\u00ebrkesat n\u00eb web dhe p\u00ebrpjekjet e autentikimit<\/li>\n<li>krijoj\u00eb dhe konfirmoj\u00eb certifikata SSL\/TLS<\/li>\n<\/ul>\n<p>\n<strong>Ky udh\u00ebzues shqyrton sigurin\u00eb e DNS-s\u00eb nga dy an\u00eb:<\/strong><\/p>\n<ol>\n<li>Kryerja e monitorimit dhe kontrollit t\u00eb vazhduesh\u00ebm mbi DNS-n\u00eb<\/li>\n<li>Si protokollet e reja t\u00eb DNS-s\u00eb, si DNSSEC, DOH dhe DoT, mund t\u00eb ndihmojn\u00eb n\u00eb mbrojtjen e integritetit dhe privat\u00ebsis\u00eb s\u00eb k\u00ebrkesave DNS t\u00eb transferuara<\/li>\n<\/ol>\n<p>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2> \u00c7far\u00eb \u00ebsht\u00eb siguria e DNS-s\u00eb? <\/h2>\n<p>\n<img decoding=\"async\" alt=\"Udhezues p\u00ebr sigurin\u00eb e DNS\" src=\"\/wp-content\/uploads\/2020\/09\/6367857de248c9ee9435f8ec079600be.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3> Siguria e DNS-s\u00eb p\u00ebrfshin dy p\u00ebrb\u00ebr\u00ebs t\u00eb r\u00ebnd\u00ebsish\u00ebm:<\/h3>\n<p><\/p>\n<ol>\n<li>Sigurimi i integritetit dhe disponueshm\u00ebris\u00eb s\u00eb p\u00ebrgjithshme t\u00eb sh\u00ebrbimeve DNS, q\u00eb konvertojn\u00eb emrat e nyjeve rrjetore n\u00eb adresa IP<\/li>\n<li>Monitorimi i aktiviteteve t\u00eb DNS-s\u00eb p\u00ebr t\u00eb identifikuar probleme t\u00eb mundshme t\u00eb siguris\u00eb diku n\u00eb rrjetin tuaj<\/li>\n<\/ol>\n<h3> P\u00ebrse DNS-ja \u00ebsht\u00eb e vulnerabilizuar ndaj sulmeve? <\/h3>\n<p>\nTeknologjia DNS u krijua n\u00eb fillimet e zhvillimit t\u00eb internetit, shum\u00eb koh\u00eb para se dikush t\u00eb fillonte t\u00eb mendonte p\u00ebr sigurin\u00eb n\u00eb rrjet. DNS funksionon pa autentifikim dhe enkriptim, duke p\u00ebrpunuar n\u00eb err\u00ebsir\u00eb k\u00ebrkesat e \u00e7dokujt.<\/p>\n<p>P\u00ebr k\u00ebt\u00eb arsye ekzistojn\u00eb shum\u00eb m\u00ebnyra p\u00ebr t\u00eb mashtruar p\u00ebrdoruesin dhe p\u00ebr t\u00eb falsifikuar informacionin mbi at\u00eb se ku ndodh v\u00ebrtet konvertimi i emrave n\u00eb adresa IP.<\/p>\n<h2> Siguria e DNS-s\u00eb: pyetje dhe p\u00ebrb\u00ebr\u00ebs<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Udhezues p\u00ebr sigurin\u00eb e DNS\" src=\"\/wp-content\/uploads\/2020\/09\/45d61ac4004631a2602518a3d4a51c3c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSiguria e DNS-s\u00eb p\u00ebrb\u00ebhet nga disa aspekte t\u00eb r\u00ebnd\u00ebsishme <em>e komponent\u00ebve<\/em>, secili prej t\u00eb cil\u00ebve duhet t\u00eb merret parasysh p\u00ebr t\u00eb siguruar mbrojtje t\u00eb plot\u00eb:<\/p>\n<ul>\n<li><strong>P\u00ebrforcimi i siguris\u00eb s\u00eb server\u00ebve dhe procedurave t\u00eb menaxhimit:<\/strong> rritni nivelin e mbrojtjes s\u00eb server\u00ebve dhe krijoni nj\u00eb template standard p\u00ebr aktivizimin<\/li>\n<li><strong>P\u00ebrmir\u00ebsimi i protokollit:<\/strong> implementoni DNSSEC, DoT ose DoH<\/li>\n<li><strong>Analiza dhe raportimi: <\/strong>shtoni ditarin e aktiviteteve t\u00eb DNS-s\u00eb n\u00eb sistemin SIEM p\u00ebr kontekst shtes\u00eb gjat\u00eb hetimit t\u00eb incidenteve<\/li>\n<li><strong>Kyb\u00ebrazgjetja dhe zbulimi i k\u00ebrc\u00ebnimeve:<\/strong> abonehuni n\u00eb nj\u00eb kanal aktiv p\u00ebr marrjen e analizave mbi k\u00ebrc\u00ebnimet<\/li>\n<li><strong>Automatizimi: <\/strong>krijoni sa m\u00eb shum\u00eb skenar\u00eb t\u00eb mundsh\u00ebm p\u00ebr t\u00eb automatizuar proceset<\/li>\n<\/ul>\n<p>\nKomponent\u00ebt e lart\u00eb q\u00eb u p\u00ebrmend\u00ebn m\u00eb par\u00eb jan\u00eb vet\u00ebm maja e ajsbergut t\u00eb siguris\u00eb DNS. N\u00eb seksionin tjet\u00ebr ne do t\u00eb shqyrtojm\u00eb m\u00eb n\u00eb detaje opsionet specifike dhe praktikat m\u00eb t\u00eb mira q\u00eb duhet t\u00eb dini.<\/p>\n<h2> Sulmet ndaj DNS<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Udhezues p\u00ebr sigurin\u00eb e DNS\" src=\"\/wp-content\/uploads\/2020\/09\/f44708ad51b13385aa5ce10629944ecc.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<ul>\n<li><strong><noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/dns-cache-poisoning\/\">nd\u00ebrrimi i DNS ose \"helmimi\" i caches<\/a><\/noindex>: <\/strong> shfryt\u00ebzimi i nj\u00eb dob\u00ebsie t\u00eb sistemit p\u00ebr t\u00eb menaxhuar cache-n\u00eb DNS me q\u00ebllim q\u00eb t\u00eb orientoni p\u00ebrdoruesit n\u00eb nj\u00eb vend tjet\u00ebr<\/li>\n<li><strong><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/513160\/\">Tuneling DNS<\/a><\/noindex>: <\/strong>p\u00ebrdoret kryesisht p\u00ebr t\u00eb anashkaluar mjetet e mbrojtjes nga lidhjet e larg\u00ebta<\/li>\n<li><strong>kapja e DNS: <\/strong>orientimi i trafikut t\u00eb zakonsh\u00ebm DNS n\u00eb nj\u00eb server tjet\u00ebr DNS duke ndryshuar regjistruesin e domain-it<\/li>\n<li><strong>sulmi NXDOMAIN: <\/strong>kryerja e nj\u00eb sulmi DDoS ndaj nj\u00eb serveri autoritativ DNS duke d\u00ebrguar k\u00ebrkesa t\u00eb pap\u00ebrshtatshme t\u00eb domain-it p\u00ebr t\u00eb marr\u00eb nj\u00eb p\u00ebrgjigje t\u00eb detyruar<\/li>\n<li><strong>domen fantazm\u00eb: <\/strong> e b\u00ebn transformuesin DNS (DNS resolver) t\u00eb pres\u00eb p\u00ebrgjigje nga domain-e t\u00eb paeksistueshme, duke shkaktuar ulje t\u00eb performanc\u00ebs<\/li>\n<li><strong>sulmi ndaj subdomain-it rast\u00ebsor: <\/strong> hostet e thyera dhe botnetet kryejn\u00eb nj\u00eb sulm DDoS ndaj nj\u00eb domeni aktiv, por p\u00ebrqendrojn\u00eb zjarri n\u00eb subdomain-et e rreme p\u00ebr t\u00eb detyruar serverin DNS t\u00eb b\u00ebj\u00eb k\u00ebrkesa p\u00ebr regjistrime dhe t\u00eb kapin kontrollin mbi sh\u00ebrbimin<\/li>\n<li><strong>bllokimi i domain-it: <\/strong> p\u00ebrfaq\u00ebson d\u00ebrgimin e shum\u00eb p\u00ebrgjigjeve t\u00eb spamit p\u00ebr t\u00eb bllokuar burimet e serverit DNS<\/li>\n<li><strong>sulmi i botnet nga pajisjet e abonent\u00ebve: <\/strong> grupi i kompjuter\u00ebve, modem\u00ebve, router-eve dhe pajisjeve t\u00eb tjera q\u00eb p\u00ebrqendrojn\u00eb fuqin\u00eb llogarit\u00ebse n\u00eb nj\u00eb faqe t\u00eb caktuar p\u00ebr ta ngarkuar me k\u00ebrkesa trafiku<\/li>\n<\/ul>\n<p><\/p>\n<h3> Sulmet q\u00eb p\u00ebrdorin DNS<\/h3>\n<p>\nSulmet q\u00eb n\u00eb nj\u00ebfar\u00eb m\u00ebnyre p\u00ebrdorin DNS p\u00ebr t\u00eb sulmuar sisteme t\u00eb tjera (p.sh., ndryshimi i regjistrave DNS nuk \u00ebsht\u00eb q\u00ebllimi p\u00ebrfundimtar):<\/p>\n<ul>\n<li>Fast-Flux<\/li>\n<li>Rrjetet individiale Flux<\/li>\n<li>Rrjetet e dyfishta Flux<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/513160\/\">Tuneling DNS<\/a><\/noindex> <\/li>\n<\/ul>\n<p><\/p>\n<h3> Sulmet ndaj DNS<\/h3>\n<p>\nSulmet nga t\u00eb cilat serveri DNS kthen nj\u00eb adres\u00eb IP t\u00eb d\u00ebshiruar nga sulmuesi:<\/p>\n<ul>\n<li>Nd\u00ebrrimi i DNS ose \"helmimi\" i caches<\/li>\n<li>Kapja e DNS<\/li>\n<\/ul>\n<p><\/p>\n<h2> \u00c7far\u00eb \u00ebsht\u00eb DNSSEC?<\/h2>\n<p><img decoding=\"async\" alt=\"Udhezues p\u00ebr sigurin\u00eb e DNS\" src=\"\/wp-content\/uploads\/2020\/09\/929b6e632135bd1b059e403e7b4ddab8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDNSSEC - modulet e siguris\u00eb s\u00eb sh\u00ebrbimit t\u00eb emrave t\u00eb domain-eve - p\u00ebrdoren p\u00ebr t\u00eb verifikuar regjistrat DNS pa pasur nevoj\u00eb t\u00eb dini informacionin e p\u00ebrgjithsh\u00ebm p\u00ebr \u00e7do k\u00ebrkes\u00eb t\u00eb ve\u00e7ant\u00eb DNS.<\/p>\n<p>DNSSEC p\u00ebrdor \u00e7el\u00ebsat e n\u00ebnshkrimit digjital (PKI) p\u00ebr t\u00eb konfirmuar n\u00ebse rezultatet e k\u00ebrkes\u00ebs p\u00ebr emrin e domain-it jan\u00eb marr\u00eb nga nj\u00eb burim t\u00eb lejuar.<br \/>\nImplementimi i DNSSEC nuk \u00ebsht\u00eb vet\u00ebm nj\u00eb praktik\u00eb e mir\u00eb e industris\u00eb, por gjithashtu ndihmon n\u00eb m\u00ebnyr\u00eb efektive p\u00ebr t\u00eb shmangur shumic\u00ebn e sulmeve ndaj DNS.<\/p>\n<h4>Principi i funksionimit t\u00eb DNSSEC<\/h4>\n<p>\nDNSSEC funksionon n\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme me TLS\/HTTPS, duke p\u00ebrdorur \u00e7ifte \u00e7elesh publik dhe privat p\u00ebr n\u00ebnshkrimin dixhital t\u00eb sh\u00ebnimeve DNS. Nj\u00eb p\u00ebrmbledhje e p\u00ebrgjithshme e procesit:<\/p>\n<ol>\n<li>Sh\u00ebnimet DNS n\u00ebnshkruhen me nj\u00eb \u00e7ift \u00e7elesh privat dhe publik<\/li>\n<li>P\u00ebrgjigjet ndaj k\u00ebrkesave DNSSEC p\u00ebrmbajn\u00eb sh\u00ebnimin e k\u00ebrkuar, si dhe n\u00ebnshkrimin dhe \u00e7el\u00ebsin publik<\/li>\n<li>Pastaj <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/pgp-encryption\/\">\u00e7el\u00ebsi publik <\/a><\/noindex>p\u00ebrdoret p\u00ebr t\u00eb krahasuar autenticitetin e sh\u00ebnimit dhe n\u00ebnshkrimit<\/li>\n<\/ol>\n<h2> Siguria e DNS dhe DNSSEC<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Udhezues p\u00ebr sigurin\u00eb e DNS\" src=\"\/wp-content\/uploads\/2020\/09\/3bd1d530634e82ed6d80040a1d207ff0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDNSSEC \u00ebsht\u00eb nj\u00eb mjet p\u00ebr verifikimin e integritetit t\u00eb k\u00ebrkesave DNS. Ai nuk ndikon n\u00eb privat\u00ebsin\u00eb e DNS. Me fjal\u00eb t\u00eb tjera, DNSSEC mund t'ju ofroj\u00eb besim se p\u00ebrgjigja ndaj k\u00ebrkes\u00ebs suaj DNS nuk \u00ebsht\u00eb falsifikuar, por \u00e7do sulmues mund ta shoh\u00eb k\u00ebt\u00eb informacion ashtu si\u00e7 u d\u00ebrgua ju.<\/p>\n<h2> DoT \u2014 DNS mbi TLS<\/h2>\n<p>\nTransport Layer Security (Siguria e transportit, TLS) \u00ebsht\u00eb nj\u00eb protokoll kriptografik p\u00ebr mbrojtjen e informacionit t\u00eb transmetuar p\u00ebrmes nj\u00eb lidhjeje rrjeti. Sapo \u00ebsht\u00eb krijuar nj\u00eb lidhje e sigurt TLS midis klientit dhe serverit, t\u00eb dh\u00ebnat e transmetuara enkriptohen dhe asnj\u00eb nd\u00ebrmjet\u00ebs nuk do t\u00eb mund t'i shoh\u00eb ato.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/tls-vs-ssl\/\">TLS <\/a><\/noindex>shpesh p\u00ebrdoret si pjes\u00eb e HTTPS (SSL) n\u00eb shfletuesin tuaj t\u00eb uebit, pasi k\u00ebrkesat d\u00ebrgohen n\u00eb serverat HTTP t\u00eb mbrojtur.<\/p>\n<p>DNS mbi TLS (DNS mbi TLS, DoT) p\u00ebrdor protokollin TLS p\u00ebr t\u00eb enkriptuar trafikun UDP t\u00eb k\u00ebrkesave t\u00eb zakonshme DNS.<br \/>\nEnkriptimi i k\u00ebtyre k\u00ebrkesave n\u00eb format tekst t\u00eb zakonsh\u00ebm ndihmon n\u00eb mbrojtjen e p\u00ebrdoruesve ose aplikacioneve q\u00eb b\u00ebjn\u00eb k\u00ebrkesat nga disa sulme.<\/p>\n<ul>\n<li><strong>MitM, ose \u00abnjeriu n\u00eb mes\u00bb<\/strong>: pa enkriptim, sistemi nd\u00ebrmjet\u00ebs q\u00eb ndodhet midis klientit dhe serverit p\u00ebr autoritetin DNS, potencialisht mund t\u00eb d\u00ebrgoj\u00eb klientit nj\u00eb informacion t\u00eb rrem\u00eb ose t\u00eb rreziksh\u00ebm si p\u00ebrgjigje ndaj k\u00ebrkes\u00ebs.<\/li>\n<li><strong>Spiunimi dhe ndjekja<\/strong>: pa enkriptimin e k\u00ebrkesave, \u00ebsht\u00eb shum\u00eb e leht\u00eb p\u00ebr sistemet nd\u00ebrmjet\u00ebse t\u00eb shohin se cilat faqe interneti po viziton nj\u00eb p\u00ebrdorues ose aplikacion i ve\u00e7ant\u00eb. Megjith\u00ebse nuk \u00ebsht\u00eb e mundur t\u00eb dihet sakt\u00ebsisht se cil\u00ebn faqe t\u00eb caktuar po viziton nj\u00eb person n\u00eb nj\u00eb sit vet\u00ebm nga DNS, njohuria e thjesht\u00eb e domain-eve t\u00eb k\u00ebrkuara \u00ebsht\u00eb e mjaftueshme p\u00ebr t\u00eb krijuar nj\u00eb profil t\u00eb nj\u00eb sistemi ose individi t\u00eb ve\u00e7ant\u00eb.<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"Udhezues p\u00ebr sigurin\u00eb e DNS\" src=\"\/wp-content\/uploads\/2020\/09\/31bb5e540feac0302244253b1c12ed32.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nBurimi: <noindex><a rel=\"nofollow\" href=\"https:\/\/faculty.sites.uci.edu\/zhouli\/files\/2019\/11\/conext19.pdf\">Universiteti i Kalifornis\u00eb Irvine<\/a><\/noindex><\/p>\n<h2> DoH \u2014 DNS mbi HTTPS<\/h2>\n<p>\nDNS mbi HTTPS (DNS-over-HTTPS, DoH)\u2014 \u00ebsht\u00eb nj\u00eb protokoll eksperimental, i promovuar nga Mozilla dhe Google. Q\u00ebllimi i tij \u00ebsht\u00eb i ngjash\u00ebm me protocolin DoT \u2014 t\u00eb forcoj\u00eb privat\u00ebsin\u00eb e individ\u00ebve n\u00eb internet duke koduar k\u00ebrkesat dhe p\u00ebrgjigjet DNS.<\/p>\n<p>K\u00ebrkesat standarde DNS d\u00ebrgohen p\u00ebrmes UDP. K\u00ebrkesat dhe p\u00ebrgjigjet mund t\u00eb ndiqen me ndihm\u00ebn e mjeteve si <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/how-to-use-wireshark\/\">Wireshark<\/a><\/noindex>. DoT e kodeks mban k\u00ebto k\u00ebrkesa t\u00eb sigurta, por ato akoma identifikohen si nj\u00eb trafik UDP shum\u00eb i dalluesh\u00ebm n\u00eb rrjet.<\/p>\n<p>DoH p\u00ebrdor nj\u00eb qasje tjet\u00ebr dhe d\u00ebrgon k\u00ebrkesa t\u00eb koduara p\u00ebr transformimin e emrave t\u00eb nyjeve rrjetore p\u00ebrmes lidhjeve HTTPS, t\u00eb cilat n\u00eb rrjet duken si \u00e7do k\u00ebrkes\u00eb tjet\u00ebr web.<\/p>\n<p>Kjo dallim ka pasoja t\u00eb r\u00ebnd\u00ebsishme p\u00ebr administratoret e sistemeve dhe p\u00ebr t\u00eb ardhmen e transformimit t\u00eb emrave.<\/p>\n<ol>\n<li>Filt\u00ebrimi DNS \u00ebsht\u00eb nj\u00eb m\u00ebnyr\u00eb e zakonshme p\u00ebr t\u00eb filtruar trafik web p\u00ebr t\u00eb mbrojtur p\u00ebrdoruesit nga sulmet phishing, faqet q\u00eb shp\u00ebrndajn\u00eb malware, ose aktivitete t\u00eb tjera potencialisht t\u00eb rrezikshme n\u00eb internet n\u00eb rrjetin korporativ. Protokolli DoH anashkalon k\u00ebto filtra, duke i ekspozuar potencialisht p\u00ebrdoruesit dhe rrjetin n\u00eb nj\u00eb rrezik m\u00eb t\u00eb lart\u00eb. <\/li>\n<li>N\u00eb modelin aktual t\u00eb transformimit t\u00eb emrave, \u00e7do pajisje n\u00eb rrjet, n\u00eb nj\u00eb far\u00eb m\u00ebnyre, merr k\u00ebrkesat DNS nga nj\u00eb vend t\u00eb vet\u00ebm (nga serveri DNS i caktuar). DoH dhe, n\u00eb ve\u00e7anti, implementimi i tij nga Firefox tregon se n\u00eb t\u00eb ardhmen kjo mund t\u00eb ndryshoj\u00eb. \u00c7do aplikacion n\u00eb kompjuter mund t\u00eb marr\u00eb t\u00eb dh\u00ebna nga burime t\u00eb ndryshme DNS, q\u00eb e b\u00ebn shum\u00eb m\u00eb t\u00eb v\u00ebshtir\u00eb gjetjen dhe zgjidhjen e problemeve, sigurimin e siguris\u00eb dhe modelimin e rreziqeve. <\/li>\n<\/ol>\n<p><img decoding=\"async\" alt=\"Udhezues p\u00ebr sigurin\u00eb e DNS\" src=\"\/wp-content\/uploads\/2020\/09\/46ece02ca361b133d4a6bd488b917c73.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nBurimi: <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/what-is-powershell\/\">www.varonis.com\/blog\/what-is-powershell<\/a><\/noindex><\/p>\n<h3> \u00c7far\u00eb ndryshimi ka midis DNS mbi TLS dhe DNS mbi HTTPS?<\/h3>\n<p>\nLe t\u00eb fillojm\u00eb me DNS mbi TLS (DoT). V\u00ebmendja kryesore k\u00ebtu \u00ebsht\u00eb q\u00eb protokolli origjinal DNS nuk ndryshohet, por thjesht d\u00ebrgohet n\u00eb m\u00ebnyr\u00eb t\u00eb sigurt p\u00ebrmes nj\u00eb kanali t\u00eb mbrojtur. DoH n\u00eb an\u00ebn tjet\u00ebr, e vendos DNS-in n\u00eb formatin HTTP p\u00ebrpara se t\u00eb kryej\u00eb k\u00ebrkesat.<\/p>\n<h2> Kujtimet e monitorimit DNS<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Udhezues p\u00ebr sigurin\u00eb e DNS\" src=\"\/wp-content\/uploads\/2020\/09\/fbbd9f320922dbd2eec180a253ba54f0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMund\u00ebsia p\u00ebr t\u00eb ndjekur me efikasitet trafikun DNS n\u00eb rrjetin tuaj p\u00ebr anomali t\u00eb dyshimta \u00ebsht\u00eb thelb\u00ebsore p\u00ebr zbardhjen e hershme t\u00eb thyerjeve. P\u00ebrdorimi i nj\u00eb instrumenti si Varonis Edge do t'ju mund\u00ebsoj\u00eb t\u00eb jeni t\u00eb informuar p\u00ebr t\u00eb gjitha metr\u00ebt e r\u00ebnd\u00ebsish\u00ebm dhe t\u00eb krijoni profile p\u00ebr \u00e7do llogari n\u00eb rrjetin tuaj. Ju mund t\u00eb konfiguroni gjenerimin e njoftimeve bazuar n\u00eb kombinimin e veprimeve q\u00eb ndodhin brenda nj\u00eb periudhe t\u00eb caktuar.<\/p>\n<p>Monitorimi i ndryshimeve DNS, vendeve t\u00eb llogarive, si dhe faktet e p\u00ebrdorimit t\u00eb par\u00eb dhe acessit n\u00eb t\u00eb dh\u00ebna konfidenciale, si dhe aktivitetet jasht\u00eb orarit t\u00eb pun\u00ebs \u2014 k\u00ebto jan\u00eb vet\u00ebm disa tregues q\u00eb mund t\u00eb krahasohen p\u00ebr t\u00eb krijuar nj\u00eb pamje m\u00eb t\u00eb gjer\u00eb t\u00eb zbulimit.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/519108\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c DNS \u0434\u043e\u043b\u0436\u043d\u0430 \u044f\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u043e\u0442\u044a\u0435\u043c\u043b\u0435\u043c\u043e\u0439 \u0447\u0430\u0441\u0442\u044c\u044e \u0435\u0435 \u043f\u043b\u0430\u043d\u0430 \u043f\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u043b\u0443\u0436\u0431\u044b \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438\u043c\u0435\u043d, \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0438\u043c\u0435\u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0437\u043b\u043e\u0432 \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432\u0441\u0435\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0432 \u0441\u0435\u0442\u0438. \u0415\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 DNS \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0442\u043e \u0441\u043c\u043e\u0436\u0435\u0442 \u0431\u0435\u0437 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430\u0434 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u043c\u0438\u0441\u044f \u0432 \u043e\u0431\u0449\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94322,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94321","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 DNS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-15T17:42:32+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-15T17:42:32+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Udh\u00ebzuesi p\u00ebr Sigurin\u00eb DNS | ProHoster","description":"\u00c7far\u00ebdo qe t\u00eb b\u00ebj\u00eb kompania, siguria","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 DNS | ProHoster","og:description":"\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-15T17:42:32+00:00","article:modified_time":"2020-09-15T17:42:32+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94321","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:29:29","updated":"2022-09-30 08:27:56","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/94321","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=94321"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/94321\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/94322"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=94321"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=94321"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=94321"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}