Ndandicinga ukuba kuya kuba kuhle ukugubungela iziganeko ezivela kwiinkomfa zamazwe ngamazwe. Kwaye kungekhona nje ngokubanzi, kodwa ukuthetha malunga neengxelo ezinomdla kakhulu. Ndizisa ingqalelo yakho ishumi lokuqala elishushu.
1. Ukulinda i-tandem enobubele yohlaselo lwe-IoT kunye ne-ransomware
Ngo-2016, sabona ukwanda ngokukhawuleza kohlaselo lwe-ransomwari. Sasingekabuyi kolu hlaselo xa igagasi elitsha lohlaselo lwe-DDoS lisebenzisa i-IoT lasibetha. Kule ngxelo, umbhali unika inkcazo yesinyathelo-nge-nyathelo malunga nendlela uhlaselo lwe-ransomware lwenzeka ngayo. Isebenza njani i-ransomware, kunye nento ekufuneka umphandi ayenze kwinqanaba ngalinye ukuchasa i-ransomware.
Ngokwenza oko, uthembele kwiindlela eziqinisekisiweyo. Emva koko isithethi sikhanyisa indlela i-IoT ebandakanyeka ngayo kuhlaselo lwe-DDoS: uxela ukuba yeyiphi indima edlalwa yi-malware encedisayo ekwenzeni olu hlaselo (ngoncedo olulandelayo kwinxalenye yalo ekwenzeni uhlaselo lwe-DDoS ngumkhosi we-IoT). Ikwathetha malunga nendlela i-tandem ye-ransomware kunye nohlaselo lwe-IoT olunokuba sisisongelo esikhulu kwiminyaka ezayo. Isithethi ngumbhali weencwadi "Malware, Rootkits & Botnets: a Beginner's Guide", "Advanced Malware Analysis", "Hacking Exposed: Malware & Rootkits Secrets & Solutions" - ngoko ubika ngolwazi lwalo mbandela.
2. βVula umlomo wakho, yithi 0x41414141β: Uhlaselo lwe-cyberinfrastructure yonyango
Izixhobo zonyango eziqhagamshelwe kwi-Intanethi ziyinto ekhoyo yonke indawo yeklinikhi. Ezo zixhobo ziluncedo oluxabisekileyo kubasebenzi bezonyango, kuba zenza inxalenye ebalulekileyo yesiqhelo. Nangona kunjalo, esi sixhobo siqulethe ubuthathaka obuninzi (zombini isoftware kunye nehardware), evula indawo ebanzi yomsebenzi kumntu onokuthi ahlasele. Kwingxelo, isithethi sabelana ngamava akhe obuqu okuqhuba i-pentest kwi-cyberinfrastructure yonyango; kwaye ikwathetha malunga nendlela abahlaseli abalalanisa ngayo izixhobo zonyango.
Isithethi sichaza: 1) indlela abahlaseli abasebenzisa ngayo iiprothokholi zonxibelelwano lobunikazi, i-2) indlela abajonga ngayo ubuthathaka kwiinkonzo zenethiwekhi, i-3) indlela abaphazamisa ngayo iinkqubo zokuxhasa ubomi, 4) indlela abasebenzisa ngayo i-hardware debugging interfaces kunye nebhasi yedatha yenkqubo; 5) indlela abahlasela ngayo i-wireless interfaces ezisisiseko kunye nobuchwepheshe obuthile obungenazingcingo; I-6) indlela abangena ngayo kwiinkqubo zolwazi lwezonyango, baze bafunde kwaye bahlele: ulwazi lomntu malunga nempilo yesigulane; iirekhodi zonyango ezisemthethweni, iziqulatho zazo ezihlala zifihliwe nakwisigulane; 7) indlela inkqubo yonxibelelwano esebenzisa izixhobo zonyango ukutshintshiselana ngolwazi kunye nemiyalelo yenkonzo iphazamiseka; 8) indlela ukufikelela kwabasebenzi bezonyango kwizixhobo ezilinganiselweyo; okanye uyivale ngokupheleleyo.
Ebudeni bepentest yaso, isithethi safumanisa iingxaki ezininzi ngezixhobo zonyango. Phakathi kwabo: 1) i-cryptography ebuthathaka, i-2) inokwenzeka yokuguqulwa kwedatha; 3) ithuba lokutshintshwa kwezixhobo ezikude, 3) ubuthathaka kwiiprothokholi zobunikazi, i-4) ithuba lokufikelela okungagunyaziswanga kwiinkcukacha zolwazi, i-5) i-hard-coded, ii-logins / ii-passwords ezingatshintshiyo. Kunye nolunye ulwazi olunovakalelo olugcinwe nokuba kwi-firmware yesixhobo okanye kwiibhinari zesixokelelwano; I-6) ukuba buthathaka kwezixhobo zonyango ekuhlaselweni kwe-DoS ekude.
Emva kokufunda ingxelo, kuyacaca ukuba i-cybersecurity kwicandelo lezonyango namhlanje yimeko yeklinikhi kwaye ifuna ukhathalelo olunzulu.
3. I-toothy exploit kwincam ye-skewer yentengiso yeemeko
Yonke imihla, izigidi zabantu ziya kwiintanethi zentlalo: ngenxa yomsebenzi, ukuzonwabisa, okanye ngenxa nje. Ngaphantsi kwe-hood ye-social networks iiplatifti zeNtengiso ezingabonakaliyo kumtyeleli oqhelekileyo kwaye zinoxanduva lokuhambisa intengiso yeemeko ezifanelekileyo kwiindwendwe zenethiwekhi yoluntu. Amaqonga eentengiso kulula ukuwasebenzisa kwaye ayasebenza kakhulu. Ngoko ke, zifunwa phakathi kwabathengisi.
Ukongeza kwisakhono sokufikelela kubaphulaphuli abaninzi, okuluncedo kakhulu kwishishini, amaqonga eeNtengiso nawo akuvumela ukuba ucuthe ukujolisa kwakho ukuya kumntu omnye. Ngaphaya koko, ukusebenza kwamaqonga eeNtengiso zangoku kukuvumela ukuba ukhethe ukuba yeyiphi igajethi eninzi yalo mntu oza kubonisa intengiso kuyo.
Oko. amaqonga eeNtengiso zangoku avumela umthengisi ukuba afikelele kuye nawuphi na umntu, naphi na emhlabeni. Kodwa eli thuba linokusetyenziswa ngabahlaseli - njengesango lokungena kwinethiwekhi apho ixhoba labo lisebenza khona. Isithethi sibonisa indlela umthengisi okhohlakeleyo angasebenzisa ngayo iqonga leeNtengiso ukujolisa ngokuchanekileyo iphulo labo lokurhwaphiliza ukuhambisa ukuxhaphazwa kobuqu kumntu omnye.
4. Abaduni bokwenyani bayiphepha njani intengiso ekujoliswe kuyo
Sisebenzisa iinkonzo ezininzi ezahlukeneyo zekhompyuter kubomi bethu bemihla ngemihla. Kwaye kunzima ukuba sibancame, nokuba ngequbuliso sifumanise ukuba basijonga ngokupheleleyo. Kangangokuba balandelela yonke intshukumo yomzimba kunye nokucinezelwa kweminwe.
Isithethi sichaza ngokucacileyo indlela abathengisi banamhlanje basebenzisa iindlela ezahlukeneyo zokujolisa kwi-esoteric. Thina malunga ne-paranoia ehambayo, malunga nokucupha ngokupheleleyo. Kwaye abafundi abaninzi bathatha oko kubhaliweyo njengehlaya elingenabungozi, kodwa kwingxelo enikezelweyo kuyacaca ukuba abathengisi banamhlanje sele besebenzisa ngokupheleleyo ubuchwephesha obunjalo ukusilandela.
Yintoni onokuyenza, imboni yentengiso yeemeko, eyenza olu hlolo luphelele, luhamba ngokuxhuma kunye nemida. Ukuya kwinqanaba lokuba iiplatifti zeNtengiso zanamhlanje azikwazi ukulandelela kuphela umsebenzi wenethiwekhi yomntu (izitshixo, iintshukumo zesalathisi se mouse, njl.), kodwa kunye neempawu zakhe zomzimba (indlela esicofa ngayo izitshixo kunye nokuhambisa imawusi). Oko. izixhobo zangoku zokulandela umkhondo weqonga leeNtengiso, ezakhelwe kwiinkonzo esingenako ukucinga ngazo ubomi, kungekuphela nje ukukhasa phantsi kweengubo zethu zangaphantsi, kodwa naphantsi kolusu lwethu. Ukuba asinaso isakhono sokuphuma kwezi nkonzo ziqwalaselwe ngokugqithisileyo, kutheni ungazami ubuncinane ukubabetha ngolwazi olungenamsebenzi?
Ingxelo ibonise isixhobo sombhali (isoftware kunye ne-hardware bot), evumela: 1) ukujova iibhanoni zeBluetooth; 2) ingxolo idatha eqokelelwe kwi-sensors ye-board-board yesithuthi; 3) ukukhohlisa iiparamitha zokuchongwa kwefowuni ephathwayo; 4) yenza ingxolo ngendlela yokucofa iminwe (kwikhibhodi, imouse kunye nenzwa). Lonke olu lwazi luyaziwa ukuba lusetyenziselwa ukujolisa intengiso kwiigajethi eziphathwayo.
Umboniso ubonisa ukuba emva kokuqalisa isixhobo sombhali, inkqubo yokulandelela iyaphambana; kangangokuba inkcazelo eyiqokelelayo iba yingxolo kwaye ingachaneki kangangokuba ayisayi kuba luncedo kwabo bayibukeleyo. Njengomdlalo ohlekisayo, isithethi sibonisa indlela, ngenxa yesixhobo esinikezelweyo, "inkqubo yokulandela umkhondo" iqala ukubona i-hacker eneminyaka engama-32 njengentombazana eneminyaka eli-12 ubudala ethanda amahashe.
5. Iminyaka engama-20 ye-MMORPG yokugqekeza: imizobo epholileyo, ukuxhaphaza okufanayo
Isihloko sokuqhekeza i-MMORPGs sixoxwe kwi-DEF CON iminyaka eyi-20. Sinika imbeko kwisikhumbuzo, isithethi sichaza awona maxesha abalulekileyo kwezi ngxoxo. Ukongeza, uthetha malunga nokufika kwakhe kwintsimi yokuzingela iithoyi ze-intanethi. Ukususela kwi-Ultima Online (kwi-1997). Kwaye iminyaka elandelayo: Ubudala bobumnyama beCamelot, i-Anarchy Online, i-Asherons Call 2, i-ShadowBane, i-Lineage II, i-Final Fantasy XI / XIV, i-World of Warcraft. Kubandakanya abameli abaliqela abatsha: Iimfazwe zeGuild 2 kunye nabaDala baSkrola kwi-Intanethi. Kwaye oku akusiyo yonke irekhodi yomzila wesithethi!
Ingxelo ibonelela ngeenkcukacha zobugcisa ekudaleni ukuxhaphaza kweMMORPGs ezikunceda ukuba ufumane imali ebonakalayo, kwaye ehambelana nayo yonke iMMORPG. Isithethi sithetha ngokufutshane ngongquzulwano lwanaphakade phakathi kwabazingeli abangekho mthethweni (abavelisi bezinto ezisetyenziswayo) kunye βnolawulo lweentlanziβ; kunye nemeko yobugcisa yangoku yolu gqatso lwezixhobo.
Ichaza indlela yohlalutyo lwepakethe eneenkcukacha kunye nendlela yokuqwalasela ukuxhaphazwa ukuze ukuzingela kungabonakali kwicala lomncedisi. Kubandakanywa nokubonisa ukuxhaphazwa kwamva nje, okwathi ngexesha lengxelo kwakunenzuzo ngaphezu "kokuhlolwa kweentlanzi" kugqatso lwezixhobo.
6. Masiziqhekeze iirobhothi phambi kokuba uSkynet eze
Iirobhothi zingumsindo kule mihla. Kwixesha elizayo elingekude, baya kuba kuyo yonke indawo: kwimisebenzi yempi, kwimisebenzi yotyando, ekwakhiweni kwe-skyscrapers; abancedisi beevenkile ezivenkileni; abasebenzi basesibhedlele; abancedisi bamashishini, amaqabane ngesondo; abapheki basekhaya kunye namalungu apheleleyo osapho.
Njengoko i-ecosystem yerobhothi isanda kwaye impembelelo yeerobhothi kuluntu lwethu kunye noqoqosho lukhula ngokukhawuleza, ziqala ukubeka isoyikiso esibalulekileyo ebantwini, kwizilwanyana nakumashishini. Embindini wabo, iirobhothi ziikhompyuter ezineengalo, imilenze namavili. Kwaye kunikwe iinyani zale mihla zokhuseleko lwe-cybersecurity, ezi ziikhompyuter ezisengozini ezineengalo, imilenze kunye namavili.
Ubuthathaka beSoftware kunye ne-hardware yeerobhothi zanamhlanje zivumela umhlaseli ukuba asebenzise ubunakho bomzimba werobhothi ukwenza umonakalo kwipropati okanye ngokwemali; okanye bade babeke ubomi bomntu ngempazamo okanye ngabom. Izoyikiso ezinokuthi zibekho kuyo nayiphi na indawo ekufutshane neerobhothi zonyuka ngokukhawuleza ngokuhamba kwexesha. Ngaphezu koko, bayanda kwiimeko apho imboni yokhuseleko lwekhompyuter olusekiweyo ayizange ibonwe ngaphambili.
Kuphando lwakhe lwakutsha nje, isithethi safumanisa ukuba semngciphekweni obuninzi ekhaya, iirobhothi zeshishini kunye nezoshishino-kubakhiqizi abaziwayo. Kwingxelo, utyhila iinkcukacha zobugcisa bezoyikiso zangoku kwaye uchaza ngokuthe ngqo indlela abahlaseli abanokuphazamisa ngayo amacandelo ahlukeneyo e-robot ecosystem. Ngokuboniswa kokusebenza okusebenzayo.
Phakathi kweengxaki ezifunyenwe sisithethi kwi-robot ecosystem: 1) unxibelelwano olungakhuselekanga; 2) ukuba kunokwenzeka umonakalo kwimemori; 3) ubuthathaka obuvumela ukuphunyezwa kwekhowudi ekude (RCE); 4) ukuba kunokwenzeka ukuphula ingqibelelo yenkqubo yefayile; 5) iingxaki ngokugunyaziswa; kwaye kwezinye iimeko ukungabikho konke konke; 6) i-cryptography ebuthathaka; 7) iingxaki kunye nokuhlaziya i-firmware; 8) iingxaki zokuqinisekisa ubumfihlo; 8) amandla angabhalwanga (kwakhona asengozini kwi-RCE, njl.); 9) uqwalaselo olungagqibekanga olungagqibekanga; 10) Umthombo ovulelekileyo osesichengeni "iinkqubo zokulawula iirobhothi" kunye namathala eencwadi esoftware.
Isithethi sinika imiboniso ephilayo yeemeko ezahlukeneyo zokugqekeza ezinxulumene ne-cyber espionage, izoyikiso zangaphakathi, umonakalo wepropathi, njl. Sichaza iimeko ezisengqiqweni ezinokubonwa endle, isithethi sichaza indlela ukungakhuseleki kobugcisa berobhothi bale mihla okunokukhokelela ngayo ekuqweqwedisweni. Ichaza ukuba kutheni iirobhothi ezigqekeziweyo ziyingozi ngakumbi kunabo nabuphi na obunye ubuchwephesha obusengozini.
Isithethi sikwatsalela ingqalelo kwinto yokuba iiprojekthi zophando olukrwada zingena kwimveliso phambi kokuba imiba yokhuseleko isonjululwe. Intengiso iyaphumelela njengesiqhelo. Le meko ingathandekiyo kufuneka ilungiswe ngokukhawuleza. Kwade kwafika uSkynet. Nangona ... Ingxelo elandelayo ibonisa ukuba uSkynet sele efikile.
7. Ukuqhutywa komkhosi wokufunda koomatshini
Emngciphekweni wokubizwa ngokuba sisazinzulu esiphambeneyo, isithethi sisachukunyiswa "yindalo yakhe entsha kasathana", ngokuzingca sazisa i-DeepHack: umthombo ovulekileyo we-hacker AI. Le bot yi-self-learning web application hacker. Isekwe kwinethiwekhi ye-neural efunda ngokuzama nangempazamo. Kwangaxeshanye, i-DeepHack iphatha iziphumo ezinokuthi zibekho kumntu ovela kolu vavanyo kunye neempazamo ngokudelela okoyikekayo.
Isebenzisa ialgorithm enye yendalo iphela, ifunda ukuxhaphaza iintlobo ezahlukeneyo zobuthathaka. I-DeepHack ivula umnyango kwindawo ye-hacker AI, ezininzi zazo ezinokuthi zilindeleke kwixesha elizayo. Ngokuphathelele oku, isithethi ngokuzingca sichaza ibhoti yaso βnjengesiqalo sesiphelo.
Isithethi sikholelwa ukuba izixhobo zokugqekeza ezisekwe kwi-AI, eziza kuvela kungekudala, emva kwe-DeepHack, bubuchwephesha obutsha obunesiseko ekuseza kufuneka bathathwe ngabakhuseli be-cyber kunye nabahlaseli be-cyber. Isithethi siqinisekisa ukuba kulo nyaka uzayo, ngamnye wethu uya kube ebhala izixhobo zokugqekeza ngoomatshini ngokwethu, okanye sizame ngamandla ukuzikhusela kuzo. Akukho wesithathu.
Kwakhona, ngokuqhula okanye ngokunzulu, isithethi sithi: βAliselilo igunya leengqondo-ngqondo zobudemon, idystopia engenakuthintelwa ye-AI sele ifumaneka kuye wonke ubani namhlanje. Ke sijoyine kwaye siya kukubonisa indlela onokuthatha inxaxheba ngayo ekutshatyalalisweni koluntu ngokwenza eyakho inkqubo yokufunda ngomatshini womkhosi. Ewe, ukuba iindwendwe ezivela kwixesha elizayo azisithinteli ekwenzeni oku. "
8. Khumbula yonke into: ukufaka amagama ayimfihlo kwinkumbulo yokuqonda
Yintoni inkumbulo yokuqonda? Ungayifaka njani igama lokugqitha apho? Ngaba oku kukhuselekile? Kwaye kutheni amaqhinga anjalo konke konke? Umbono kukuba ngale ndlela, awuzukwazi ukuphalaza amagama ayimfihlo, naphantsi konyanzeliso; ngelixa ugcina ukukwazi ukungena kwinkqubo.
Intetho iqala ngengcaciso yokuba yintoni na inkumbulo yokuqonda. Emva koko ichaza indlela inkumbulo ecacileyo kunye nefihlakeleyo eyahluke ngayo. Okulandelayo, iikhonsepthi zokungazi kunye nokungazi ziyaxoxwa. Kwaye ikwachaza ukuba luhlobo luni lwento oluyiyo - ukwazi. Ichaza indlela imemori yethu ekhowudwa ngayo, igcina kwaye ikhuphe ulwazi. Ukulinganiselwa kwinkumbulo yomntu kuchaziwe. Kwaye nokuba inkumbulo yethu ifunda njani. Kwaye ingxelo iphetha ngebali malunga nophando lwanamhlanje kwimemori yokuqonda komntu, kumxholo wendlela yokuphumeza iiphasiwedi kuyo.
Isithethi, ngokuqinisekileyo, asizange sizise inkcazo yebhongo eyenziwe kwisihloko sentetho yaso kwisisombululo esipheleleyo, kodwa kwangaxeshanye sakhankanya izifundo ezininzi ezinomdla ezikwiindlela zokusombulula ingxaki. Ngokukodwa, uphando oluvela kwiYunivesithi yaseStanford, isihloko saso sisihloko esifanayo. Kwaye iprojekthi yokuphuhlisa ujongano lomatshini wobuntu kubantu abangaboni kakuhle - ngonxibelelwano oluthe ngqo kwingqondo. Isithethi sikwabhekisela kuphononongo lwezazinzulu zaseJamani ezikwazile ukwenza uxhulumaniso lwe-algorithmic phakathi kwemiqondiso yombane yengqondo kunye namagama omlomo; Isixhobo abasiphuhlisileyo sikuvumela ukuba uchwetheze umbhalo ngokucinga nje ngawo. Olunye uphando olunomdla isithethi sibhekisela kuyo yi-neurotelephone, i-interface phakathi kwengqondo kunye nefowuni ephathekayo, nge-headset ye-EEG engenazintambo (i-Dartmouth College, eU.SA).
Njengoko sele kuphawuliwe, isithethi asizange sizise inkcazo yebhongo eyenziwe kwisihloko senkcazo-ntetho yaso kwisisombululo esipheleleyo. Nangona kunjalo, isithethi siphawula ukuba ngaphandle kwetekhnoloji yokufaka igama eliyimfihlo kwimemori yengqondo okwangoku, i-malware ezama ukuyikhupha apho sele ikhona.
9. Kwaye umncinci wabuza: "Ngaba ngokwenene ucinga ukuba ngabaphangi bakarhulumente kuphela abanokwenza uhlaselo lwe-cyber kwigridi yamandla?"
Ukusebenza kakuhle kombane kubaluleke kakhulu kubomi bethu bemihla ngemihla. Ukuxhomekeka kwethu kumbane kuye kucace ngakumbi xa ucinyiwe β nokuba lixeshana elifutshane. Namhlanje kuyamkelwa ngokubanzi ukuba ukuhlaselwa kwe-cyber kwigridi yamandla kunzima kakhulu kwaye kufikeleleke kuphela kubaduni bakarhulumente.
Isithethi sicelomngeni lo bulumko obuqhelekileyo kwaye sibonisa inkcazo ecacileyo yokuhlaselwa kwigridi yamandla, iindleko eziyamkelekileyo nakwabahlaseli abangekho phantsi korhulumente. Ibonisa ulwazi oluqokelelwe kwi-Intanethi oluya kuba luncedo ekubumbeni nasekuhlalutyeni igridi yamandla ekujoliswe kuyo. Kwaye iphinda ichaze ukuba le ngcaciso ingasetyenziselwa njani ukuhlaselwa kweegridi zamandla emhlabeni jikelele.
Ingxelo iphinda ibonise ubuthathaka obubalulekileyo obufunyenwe sisithethi kwi-General Electric Multilin iimveliso, ezisetyenziswa ngokubanzi kwicandelo lamandla. Isithethi sichaza indlela ayeke ngayo ngokupheleleyo kwi-encryption algorithm esetyenziswa kwezi nkqubo. Le algorithm isetyenziswe kwiimveliso ze-Multilin Jikelele zoMbane wonxibelelwano olukhuselekileyo lwee-subsystems zangaphakathi, kunye nokulawulwa kwezi zikhokelo. Kubandakanya ukugunyazisa abasebenzisi kunye nokubonelela ngokufikelela kwimisebenzi enelungelo.
Emva kokufunda iikhowudi zokufikelela (ngenxa yokunciphisa i-algorithm ye-encryption), umhlaseli unokukhubaza ngokupheleleyo isixhobo kwaye acime umbane kumacandelo athile egridi yamandla; abaqhubi block. Ukongeza, isithethi sibonisa ubuchule bokufunda ukude umkhondo wedijithali oshiywe sisixhobo esisengozini yohlaselo lwe-cyber.
10. I-Internet sele iyazi ukuba ndikhulelwe
Impilo yabasetyhini lishishini elikhulu. Kukho intaphane yee-apps ze-Android kwimarike ezinceda abasetyhini ukuba balandele umjikelo wabo wenyanga, bazi ukuba bangamitha nini na, okanye balandele imeko yabo yokukhulelwa. Ezi apps zikhuthaza abantu basetyhini ukuba babhale ezona nkcukacha zinzulu zobomi babo, ezinje ngeemvakalelo, intshukumo yesondo, intshukumo yomzimba, iimpawu zomzimba, ubude, ubunzima kunye nokunye.
Kodwa ziyimfihlo kangakanani ezi apps, kwaye zikhuseleke kangakanani? Emva kwayo yonke loo nto, ukuba isicelo sigcina iinkcukacha ezinje malunga nobomi bethu bobuqu, kuya kuba kuhle ukuba asizange sabelane ngale datha nomnye umntu; umzekelo, kunye nenkampani enobuhlobo (ebandakanyeka kwintengiso ekujoliswe kuyo, njl. njl.) okanye kunye neqabane / umzali okhohlakeleyo.
Isithethi sinika iziphumo zohlalutyo lwakhe lwe-cybersecurity lwezicelo ezingaphezu kweshumi elinesibini eziqikelela ukuba kunokwenzeka ukuba umntu akhawulwe kwaye alandele inkqubela yokukhulelwa. Ufumanise ukuba uninzi lwezi zicelo zineengxaki ezinzulu nge-cybersecurity ngokubanzi kunye nobumfihlo ngokukodwa.
umthombo: www.habr.com