{"id":34976,"date":"2019-10-31T22:01:37","date_gmt":"2019-10-31T19:01:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/okolo-5-5-vyyavlyaemyh-uyazvimostej-ispolzuyutsya-dlya-osushhestvleniya-atak\/"},"modified":"2019-10-31T22:01:37","modified_gmt":"2019-10-31T19:01:37","slug":"okolo-5-5-vyyavlyaemyh-uyazvimostej-ispolzuyutsya-dlya-osushhestvleniya-atak","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/okolo-5-5-vyyavlyaemyh-uyazvimostej-ispolzuyutsya-dlya-osushhestvleniya-atak","title":{"rendered":"Cirka 5,5 % av de uppt\u00e4ckta s\u00e5rbarheterna anv\u00e4nds f\u00f6r att utf\u00f6ra attacker","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

En grupp forskare fr\u00e5n Virginia Polytechnic Institute samt f\u00f6retagen Cyentia och RAND, publicerade<\/a><\/noindex> resultaten av riskanalysen vid till\u00e4mpningen av olika strategier f\u00f6r att \u00e5tg\u00e4rda s\u00e5rbarheter. Efter att ha studerat 76 000 s\u00e5rbarheter som uppt\u00e4ckts mellan 2009 och 2018, visade det sig att endast 4 183 av dem (5,5%) anv\u00e4ndes f\u00f6r att utf\u00f6ra verkliga attacker. Det erh\u00e5llna v\u00e4rdet \u00e4r fem g\u00e5nger h\u00f6gre \u00e4n tidigare publicerade prognoser, d\u00e4r antalet utnyttjade problem uppskattades till cirka 1,4%.<\/p>\n

Det fanns ingen korrelation mellan publiceringen av exploiteringsprototyper i offentligheten och f\u00f6rs\u00f6ken att utnyttja s\u00e5rbarheten. Av alla k\u00e4nda fall av s\u00e5rbarhetsutnyttjande, publicerades en prototyp f\u00f6r problemet i offentliga k\u00e4llor bara i h\u00e4lften av fallen. Avsaknaden av en exploiteringsprototyp stoppar inte angriparna, som vid behov skapar exploiteringar sj\u00e4lva.<\/p>\n

Bland andra slutsatser kan n\u00e4mnas efterfr\u00e5gan p\u00e5 utnyttjande av huvudsakligen s\u00e5rbarheter med h\u00f6g fara enligt CVSS-klassificeringen. I n\u00e4stan h\u00e4lften av attackerna anv\u00e4ndes s\u00e5rbarheter med ett viktsv\u00e4rde p\u00e5 minst 9. <\/p>\n

Det totala antalet publicerade exploiteringsprototyper under den granskade perioden uppskattas till 9 726. De data om exploiteringar som anv\u00e4ndes i studien erh\u00f6lls fr\u00e5n
\nkollektioner fr\u00e5n Exploit DB, Metasploit, D2 Security’s Elliot Kit, Canvas Exploitation Framework, Contagio, Reversing Labs och Secureworks CTU.
\nInformationen om s\u00e5rbarheter har h\u00e4mtats fr\u00e5n databasen NIST NVD<\/a><\/noindex> (National Vulnerability Database). Uppgifter om exploitering har sammanst\u00e4llts baserat p\u00e5 information fr\u00e5n FortiGuard Labs, SANS Internet Storm Center, Secureworks CTU, Alienvault’s OSSIM och ReversingLabs.<\/p>\n

Forskningen genomf\u00f6rdes f\u00f6r att best\u00e4mma den optimala balansen mellan att till\u00e4mpa uppdateringar vid uppt\u00e4ckten av s\u00e5rbarheter och att \u00e5tg\u00e4rda endast de mest kritiska problemen. I det f\u00f6rsta fallet s\u00e4kerst\u00e4lls en h\u00f6g skyddseffektivitet, men det kr\u00e4vs stora resurser f\u00f6r att underh\u00e5lla infrastrukturen, vilka fr\u00e4mst g\u00e5r \u00e5t till att \u00e5tg\u00e4rda obetydliga problem. I det andra fallet finns det en stor risk att man missar en s\u00e5rbarhet som kan utnyttjas f\u00f6r en attack. Forskningen visade att vid beslutet att installera en uppdatering f\u00f6r att \u00e5tg\u00e4rda s\u00e5rbarheter, b\u00f6r man inte f\u00f6rlita sig p\u00e5 att det inte finns en offentliggjord exploiteringsprototyp, och chansen f\u00f6r utnyttjande beror direkt p\u00e5 s\u00e5rbarhetens allvarlighetsgrad.<\/p>\n

<\/a><\/noindex><\/p>\n

K\u00e4lla: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041f\u043e\u043b\u0438\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0412\u0438\u0440\u0433\u0438\u043d\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 Cyentia \u0438 RAND, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0438\u0441\u043a\u043e\u0432 \u043f\u0440\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0418\u0437\u0443\u0447\u0438\u0432 76 \u0442\u044b\u0441\u044f\u0447 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0441 2009 \u043f\u043e 2018 \u0433\u043e\u0434, \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e, \u0447\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e 4183 \u0438\u0437 \u043d\u0438\u0445 (5.5%) \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u0432 \u043f\u044f\u0442\u044c \u0440\u0430\u0437 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 \u0440\u0430\u043d\u0435\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u044b, \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-34976","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cirka 5,5 % av de identifierade s\u00e5rbarheterna anv\u00e4nds f\u00f6r att genomf\u00f6ra attacker | ProHoster","description":"En grupp forskare fr\u00e5n Virginia Polytechnic Institute samt f\u00f6retagen Cyentia och RAND,","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/okolo-5-5-vyyavlyaemyh-uyazvimostej-ispolzuyutsya-dlya-osushhestvleniya-atak","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043a\u043e\u043b\u043e 5.5% \u0432\u044b\u044f\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041f\u043e\u043b\u0438\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0412\u0438\u0440\u0433\u0438\u043d\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 Cyentia \u0438 RAND,","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/okolo-5-5-vyyavlyaemyh-uyazvimostej-ispolzuyutsya-dlya-osushhestvleniya-atak","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:01:37+00:00","article:modified_time":"2019-10-31T19:01:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34976","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 21:21:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:12:26","updated":"2026-01-21 21:21:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/34976","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=34976"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/34976\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=34976"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=34976"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=34976"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}