ื“ื™ ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™ ืคื•ืŸ ืžืึธื“ืขืจืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืกื™ืกื˜ืขืžืขืŸ (WAF) ื–ืึธืœ ื–ื™ื™ืŸ ืคื™ืœ ื‘ืจื™ื™ื˜ืขืจืขืจ ื•ื•ื™ ื“ื™ ืจืฉื™ืžื” ืคื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืคื•ืŸ ื“ื™ OWASP Top 10

ืจืขื˜ืจืึธืกืคึผืขืงื˜ื™ื•ื•

ื“ื™ ื•ื•ืึธื’, ื–ืึทืฅ ืื•ืŸ ื–ืึทืฅ ืคื•ืŸ ืกื™ื™ื‘ืขืจ ื˜ืจืขืฅ ืฆื• ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ื–ืขื ืขืŸ ืจืึทืคึผืึทื“ืœื™ ื™ื•ื•ืึทืœื•ื•ื™ื ื’. ืคึฟืึทืจ ืคื™ืœืข ื™ืึธืจืŸ, ื™ื•ื–ืขืจื– ื”ืึธื‘ืŸ ืึทืงืกืขืกื˜ ื•ื•ืขื‘ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืื™ื‘ืขืจ ื“ื™ ืื™ื ื˜ืขืจื ืขื˜ ื ื™ืฆืŸ ืคืึธืœืงืก ื•ื•ืขื‘ ื‘ืจืึทื•ื–ืขืจื–. ืขืก ืื™ื– ื’ืขื•ื•ืขืŸ ื ื™ื™ื˜ื™ืง ืฆื• ืฉื˜ื™ืฆืŸ 2-5 ื•ื•ืขื‘ ื‘ืจืึทื•ื–ืขืจื– ืื™ืŸ ืงื™ื™ืŸ ืฆื™ื™ื˜, ืื•ืŸ ื“ื™ ื’ืึทื ื’ ืคื•ืŸ ืกื˜ืึทื ื“ืึทืจื“ืก ืคึฟืึทืจ ื“ืขื•ื•ืขืœืึธืคึผื™ื ื’ ืื•ืŸ ื˜ืขืกื˜ื™ื ื’ ื•ื•ืขื‘ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืื™ื– ื’ืขื•ื•ืขืŸ ื’ืึทื ืฅ ืœื™ืžื™ื˜ืขื“. ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ื›ึผืžืขื˜ ืึทืœืข ื“ืึทื˜ืึทื‘ื™ื™ืกื™ื– ื–ืขื ืขืŸ ื’ืขื‘ื•ื™ื˜ ืžื™ื˜ SQL. ืฆื•ื ื‘ืึทื“ื•ื™ืขืจืŸ, ื ืึธืš ืึท ืงื•ืจืฅ ืฆื™ื™ื˜, ื›ืึทืงืขืจื– ื’ืขืœืขืจื ื˜ ืฆื• ื ื•ืฆืŸ ื•ื•ืขื‘ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืฆื• ื’ืึทื ื•ื•ืขื ืขืŸ, ื•ื™ืกืžืขืงืŸ ืึธื“ืขืจ ื˜ื•ื™ืฉืŸ ื“ืึทื˜ืŸ. ื–ื™ื™ ืคืืจื“ื™ื ื˜ ื•ืžืœืขื’ืึทืœ ืึทืงืกืขืก ืฆื• ืื•ืŸ ืึทื‘ื™ื•ื–ื“ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืงื™ื™ืคึผืึทื‘ื™ืœืึทื˜ื™ื– ื ื™ืฆืŸ ืึท ืคืึทืจืฉื™ื™ื“ื ืงื™ื™ึทื˜ ืคื•ืŸ ื˜ืขืงื ื™ืงืก, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืึธืคึผื ืึทืจ ืคื•ืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ื ื™ืฆืขืจืก, ื™ื ื“ื–ืฉืขืงืฉืึทืŸ ืื•ืŸ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืคื•ืŸ ื•ื•ื™ื™ึทื˜ ืงืึธื“. ื‘ืืœื“, ื’ืขืฉืขืคื˜ ื•ื•ืขื‘ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืžื›ืฉื™ืจื™ื ื’ืขืจื•ืคึฟืŸ ื•ื•ืขื‘ ืึทืคึผืคึผืœื™ืงืึทื˜ื™ืึธืŸ ืคื™ืจืขื•ื•ืึทืœืœืก (WAFs) ื’ืขืงื•ืžืขืŸ ืื•ื™ืฃ ื“ื™ ืžืึทืจืง, ืื•ืŸ ื“ื™ ืงื”ืœ ื”ืึธื˜ ืจืขืึทื’ื™ืจื˜ ื“ื•ืจืš ืงืจื™ื™ื™ื˜ื™ื ื’ ืึทืŸ ืึธืคึฟืŸ ื•ื•ืขื‘ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคึผืจื•ื™ืขืงื˜, ื“ื™ Open Web Application Security Project (OWASP), ืฆื• ื“ืขืคื™ื ื™ืจืŸ ืื•ืŸ ื˜ื™ื™ึทื ืขืŸ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืกื˜ืึทื ื“ืึทืจื“ืก ืื•ืŸ ืžืขื˜ืึทื“ืึทืœืึทื“ื–ืฉื™ื–. ื–ื™ื›ืขืจ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–.

ื™ืงืขืจื“ื™ืง ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืฉื•ืฅ

OWASP Top 10 ืจืฉื™ืžื” ืื™ื– ื“ื™ ืกื˜ืึทืจื˜ื™ื ื’ ืคื•ื ื˜ ืคึฟืึทืจ ืกื™ืงื™ื•ืจื™ื ื’ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืื•ืŸ ื›ึผื•ืœืœ ืึท ืจืฉื™ืžื” ืคื•ืŸ ื“ื™ ืžืขืจืกื˜ ื’ืขืคืขืจืœืขืš ื˜ืจืขืฅ ืื•ืŸ ืžื™ืกืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทื ื– ื•ื•ืึธืก ืงืขื ืขืŸ ืคื™ืจืŸ ืฆื• ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืคื•ืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ื˜ืึทืงื˜ื™ืง ืคึฟืึทืจ ื“ื™ื˜ืขืงื˜ื™ื ื’ ืื•ืŸ ื‘ืึทื–ื™ื’ืŸ ืื ืคืืœืŸ. ื“ื™ OWASP Top 10 ืื™ื– ืึท ื“ืขืจืงืขื ื˜ ื‘ืขื ื˜ืฉืžืึทืจืง ืื™ืŸ ื“ื™ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืกื™ื™ื‘ืขืจืกืขืงื•ืจื™ื˜ื™ ืื™ื ื“ื•ืกื˜ืจื™ืข ื•ื•ืขืจืœื“ื•ื•ื™ื™ื“ ืื•ืŸ ื“ื™ืคื™ื™ื ื– ื“ื™ ื”ืึทืจืฅ ืจืฉื™ืžื” ืคื•ืŸ ืงื™ื™ืคึผืึทื‘ื™ืœืึทื˜ื™ื– ืึทื– ืึท ื•ื•ืขื‘ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ (WAF) ืกื™ืกื˜ืขื ื–ืึธืœ ื”ืึธื‘ืŸ.

ืื™ืŸ ืึทื“ื™ืฉืึทืŸ, WAF ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™ ืžื•ื–ืŸ ื ืขืžืขืŸ ืื™ืŸ ื—ืฉื‘ื•ืŸ ืื ื“ืขืจืข ืคึผืจืึธืกื˜ ืื ืคืืœืŸ ืื•ื™ืฃ ื•ื•ืขื‘ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืงืจื™ื™ึทื–-ืคึผืœืึทืฅ ื‘ืขื˜ืŸ ืคืึธืจื“ื–ืฉืขืจื™ (CSRF), ืงืœื™ืงืงื“ื–ืฉืึทืงื™ื ื’, ื•ื•ืขื‘ ืกืงืจื™ื™ืคึผื™ื ื’ ืื•ืŸ ื˜ืขืงืข ื™ื ืงืœื•ื–ืฉืึทืŸ (ืจืคื™ / ืœืคื™).

ื˜ืจืขืฅ ืื•ืŸ ื˜ืฉืึทืœืึทื ื“ื–ืฉื™ื– ืคึฟืึทืจ ื™ื ืฉื•ืจื™ื ื’ ื“ื™ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคื•ืŸ ืžืึธื“ืขืจืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–

ื”ื™ื™ึทื ื˜, ื ื™ื˜ ืึทืœืข ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ื–ืขื ืขืŸ ื™ืžืคึผืœืึทืžืขื ืึทื“ ืื™ืŸ ืึท ื ืขืฅ ื•ื•ืขืจืกื™ืข. ืขืก ื–ืขื ืขืŸ ื•ื•ืึธืœืงืŸ ืึทืคึผืคึผืก, ืจื™ืจืขื•ื•ื“ื™ืง ืึทืคึผืคึผืก, ืึทืคึผื™ืก, ืื•ืŸ ืื™ืŸ ื“ื™ ืœืขืฆื˜ืข ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจื–, ืืคื™ืœื• ืžื ื”ื’ ื•ื•ื™ื™ื›ื•ื•ืืจื’ ืคืึทื ื’ืงืฉืึทื ื–. ืึทืœืข ื“ื™ ื˜ื™ื™ืคึผืก ืคื•ืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืžื•ื–ืŸ ื–ื™ื™ืŸ ืกื™ื ื’ืงืจืึทื ื™ื™ื–ื“ ืื•ืŸ ืงืึทื ื˜ืจืึธื•ืœื“ ื•ื•ืขืŸ ื–ื™ื™ ืฉืึทืคึฟืŸ, ืžืึธื“ื™ืคื™ืฆื™ืจืŸ ืื•ืŸ ืคึผืจืึธืฆืขืก ืื•ื ื“ื–ืขืจ ื“ืึทื˜ืŸ. ืžื™ื˜ ื“ื™ ืึทื“ื•ื•ืขื ื˜ ืคื•ืŸ ื ื™ื™ึทืข ื˜ืขืงื ืึทืœืึทื“ื–ืฉื™ื– ืื•ืŸ ืคึผืขืจืึทื“ื™ืžื–, ื ื™ื™ึท ืงืึทืžืคึผืœืขืงืกื™ื˜ื™ื– ืื•ืŸ ื˜ืฉืึทืœืึทื ื“ื–ืฉื™ื– ืื•ื™ืคืฉื˜ื™ื™ืŸ ืื™ืŸ ืึทืœืข ืกื˜ืึทื’ืขืก ืคื•ืŸ ื“ื™ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืœื™ื™ืคืกื™ื™ืงืึทืœ. ื“ืึธืก ื›ื•ืœืœ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืื•ืŸ ืึทืคึผืขืจื™ื™ืฉืึทื ื– ื™ื ื˜ืึทื’ืจื™ื™ืฉืึทืŸ (DevOps), ืงืึทื ื˜ื™ื™ื ืขืจื–, ืื™ื ื˜ืขืจื ืขื˜ ืคื•ืŸ ื˜ื”ื™ื ื’ืก (ื™ืึธื˜), ืขืคึฟืขื ืขืŸ ืžืงื•ืจ ืžื›ืฉื™ืจื™ื, ืึทืคึผื™ืก, ืื•ืŸ ืžืขืจ.

ื“ื™ ืคื•ื ืื ื“ืขืจื’ืขื˜ื™ื™ืœื˜ ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืคื•ืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืื•ืŸ ื“ื™ ื“ื™ื™ื•ื•ืขืจืกื™ื˜ื™ ืคื•ืŸ ื˜ืขืงื ืึทืœืึทื“ื–ืฉื™ื– ืงืจื™ื™ื™ืฅ ืงืึธืžืคึผืœืขืงืก ืื•ืŸ ืงืึธืžืคึผืœืขืงืก ื˜ืฉืึทืœืึทื ื“ื–ืฉื™ื– ื ื™ื˜ ื‘ืœื•ื™ื– ืคึฟืึทืจ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคึผืจืึธืคืขืกืกื™ืึธื ืึทืœืก, ืึธื‘ืขืจ ืื•ื™ืš ืคึฟืึทืจ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืœื™ื™ื–ื•ื ื’ ื•ื•ืขื ื“ืึธืจืก ื•ื•ืึธืก ืงืขื ืขืŸ ื ื™ื˜ ืžืขืจ ืคืึทืจืœืึธื–ื  ื–ื™ืš ืึท ื™ื•ื ืึทืคื™ื™ื“ ืฆื•ื’ืึทื ื’. ืึทืคึผืคึผืœื™ืงืึทื˜ื™ืึธืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืžื™ื˜ืœืขืŸ ืžื•ื–ืŸ ื ืขืžืขืŸ ืื™ืŸ ื—ืฉื‘ื•ืŸ ื–ื™ื™ืขืจ ื’ืขืฉืขืคื˜ ืกืคึผืขืกื™ืคื™ืงืก ืฆื• ืคืึทืจืžื™ื™ึทื“ืŸ ืคืึทืœืฉ ืคึผืึทื–ืึทื˜ื™ื•ื•ื– ืื•ืŸ ื“ื™ืกืจืึทืคึผืฉืึทืŸ ืคื•ืŸ ื“ื™ ืงื•ื•ืึทืœื™ื˜ืขื˜ ืคื•ืŸ ืกืขืจื•ื•ื™ืกืขืก ืคึฟืึทืจ ื ื™ืฆืขืจืก.

ื“ื™ ืœืขืฆื˜ ืฆื™ืœ ืคื•ืŸ ื›ืึทืงืขืจื– ืื™ื– ื™ื•ื–ืฉืึทื•ื•ืึทืœื™ ืึธื“ืขืจ ืฆื• ื’ืึทื ื•ื•ืขื ืขืŸ ื“ืึทื˜ืŸ ืึธื“ืขืจ ืฆืขืฉื˜ืขืจืŸ ื“ื™ ืึทื•ื•ื™ื™ืœืึทื‘ื™ืœืึทื˜ื™ ืคื•ืŸ ืกืขืจื•ื•ื™ืกืขืก. ืึทื˜ืึทืงืขืจื– ืื•ื™ืš ื ื•ืฅ ืคื•ืŸ ื˜ืขืงื ืึทืœืึทื“ื–ืฉื™ืงืึทืœ ืขื•ื•ืึธืœื•ืฆื™ืข. ืขืจืฉื˜ืขืจ, ื“ื™ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคื•ืŸ ื ื™ื™ึทืข ื˜ืขืงื ืึทืœืึทื“ื–ืฉื™ื– ืงืจื™ื™ื™ืฅ ืžืขืจ ืคึผืึธื˜ืขื ืฆื™ืขืœ ื’ืึทืคึผืก ืื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–. ืฆื•ื•ื™ื™ื˜ื ืก, ื–ื™ื™ ื”ืึธื‘ืŸ ืžืขืจ ืžื›ืฉื™ืจื™ื ืื•ืŸ ื•ื•ื™ืกืŸ ืื™ืŸ ื–ื™ื™ืขืจ ืึทืจืกืขื ืึทืœ ืฆื• ื‘ื™ื™ืคึผืึทืก ื˜ืจืื“ื™ืฆื™ืื ืขืœืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืžื™ื˜ืœืขืŸ. ื“ืึธืก ื™ื ืงืจื™ืกื™ื– ื–ื™ื™ืขืจ ื“ื™ ืึทื–ื•ื™ ื’ืขืจื•ืคืขื ืข "ืึทื˜ืึทืง ื™ื™ื‘ืขืจืคืœืึทืš" ืื•ืŸ ื“ื™ ื•ื™ืกืฉื˜ืขืœืŸ ืคื•ืŸ ืึธืจื’ืึทื ืึทื–ื™ื™ืฉืึทื ื– ืฆื• ื ื™ื™ึทืข ืจื™ืกืงืก. ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคึผืึทืœืึทืกื™ื– ืžื•ื–ืŸ ืงืขืกื™ื™ื“ืขืจ ื˜ื•ื™ืฉืŸ ืื™ืŸ ืขื ื˜ืคืขืจ ืฆื• ืขื ื“ืขืจื•ื ื’ืขืŸ ืื™ืŸ ื˜ืขื›ื ืึธืœืึธื’ื™ืข ืื•ืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–.

ืื–ื•ื™, ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืžื•ื–ืŸ ื–ื™ื™ืŸ ืคึผืจืึธื˜ืขืงื˜ืขื“ ืคื•ืŸ ืึท ื˜ืึธืžื™ื“ ื™ื ืงืจื™ืกื™ื ื’ ืคืึทืจืฉื™ื™ื“ื ืงื™ื™ึทื˜ ืคื•ืŸ ืึทื˜ืึทืง ืžืขื˜ื”ืึธื“ืก ืื•ืŸ ืงื•ื•ืืœืŸ, ืื•ืŸ ืึธื˜ืึทืžื™ื™ื˜ื™ื“ ืื ืคืืœืŸ ืžื•ื–ืŸ ื–ื™ื™ืŸ ืงืึทื•ื ื˜ืขืจื“ ืื™ืŸ ืคืึทืงื˜ื™ืฉ ืฆื™ื™ื˜ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื™ื ืคืึธืจืžื“ ื“ื™ืกื™ื–ืฉืึทื ื–. ื“ืขืจ ืจืขื–ื•ืœื˜ืึทื˜ ืื™ื– ื’ืขื•ื•ืืงืกืŸ ื˜ืจืึทื ืกืึทืงื˜ื™ืึธืŸ ืงืึธืก ืื•ืŸ ืžืึทื ื•ืึทืœ ืึทืจื‘ืขื˜, ืงืึทืคึผืึทืœื“ ืžื™ื˜ ืึท ื•ื•ื™ืงืึทื ื“ ื–ื™ื›ืขืจื”ื™ื™ื˜ ื”ืึทืœื˜ื  ื–ื™ืš.

ืึทืจื‘ืขื˜ #1: ืึธื ืคื™ืจื•ื ื’ ื‘ืึธืฅ

ืžืขืจ ื•ื•ื™ 60% ืคื•ืŸ ืื™ื ื˜ืขืจื ืขื˜ ืคืึทืจืงืขืจ ืื™ื– ื“ื–ืฉืขื ืขืจื™ื™ื˜ืึทื“ ื“ื•ืจืš ื‘ืึธืฅ, ื”ืึทืœื‘ ืคื•ืŸ ื•ื•ืึธืก ืื™ื– "ืฉืœืขื›ื˜" ืคืึทืจืงืขืจ (ืœื•ื™ื˜ ืฆื• ืจืึทื“ื•ื•ืึทืจืข ื–ื™ื›ืขืจื”ื™ื™ื˜ ื‘ืืจื™ื›ื˜). ืึธืจื’ืึทื ืึทื–ื™ื™ืฉืึทื ื– ื™ื ื•ื•ืขืกื˜ื™ืจืŸ ืื™ืŸ ื™ื ืงืจื™ืกื™ื ื’ ื ืขืฅ ืงืึทืคึผืึทืฆื™ื˜ืขื˜, ื™ืกืขื ืฉืึทืœื™ ื“ื™ื ืขืŸ ืึท ืคื™ืงื˜ื™ืฉืึทืก ืžืึทืกืข. ืึทืงื™ืขืจืึทื˜ืœื™ ื“ื™ืกื˜ื™ื ื’ื’ื•ื•ื™ืฉื™ื ื’ ืฆื•ื•ื™ืฉืŸ ืคืึทืงื˜ื™ืฉ ื‘ืึทื ื™ืฆืขืจ ืคืึทืจืงืขืจ ืื•ืŸ ื‘ืึธื˜ ืคืึทืจืงืขืจ, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ "ื’ื•ื˜ืข" ื‘ืึธืฅ (ืœืžืฉืœ, ื–ื•ื›ืŸ ืขื ื“ื–ืฉืึทื ื– ืื•ืŸ ืคึผืจื™ื™ึทื– ืคืึทืจื’ืœื™ื™ึทืš ื‘ืึทื“ื™ื ื•ื ื’ืก) ืื•ืŸ "ืฉืœืขื›ื˜" ื‘ืึธืฅ ืงืขื ืขืŸ ืจืขื–ื•ืœื˜ืึทื˜ ืื™ืŸ ื‘ืึทื˜ื™ื™ื˜ื™ืง ืงืึธืก ืกื™ื™ื•ื•ื™ื ื’ื– ืื•ืŸ ื™ืžืคึผืจื•ื•ื•ื“ ืงื•ื•ืึทืœื™ื˜ืขื˜ ืคื•ืŸ ื“ื™ื ืกื˜ ืคึฟืึทืจ ื™ื•ื–ืขืจื–.

ื‘ืึธืฅ ื•ื•ืขื˜ ื ื™ืฉื˜ ืžืึทื›ืŸ ื“ืขื ืึทืจื‘ืขื˜ ื’ืจื™ื ื’, ืื•ืŸ ื–ื™ื™ ืงืขื ืขืŸ ื ืึธื›ืžืึทื›ืŸ ื“ื™ ื ืึทื˜ื•ืจ ืคื•ืŸ ืคืึทืงื˜ื™ืฉ ื ื™ืฆืขืจืก, ื‘ื™ื™ืคึผืึทืก ืงืึทืคึผื˜ื˜ืฉืึทืก ืื•ืŸ ืื ื“ืขืจืข ืžื ื™ืขื•ืช. ื“ืขืจืฆื•, ืื™ืŸ ื“ื™ ืคืึทืœ ืคื•ืŸ ืื ืคืืœืŸ ื ื™ืฆืŸ ื“ื™ื ืึทืžื™ืฉ IP ืึทื“ืจืขืกืขืก, ืฉื•ืฅ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ IP ืึทื“ืจืขืก ืคึฟื™ืœื˜ืจื™ืจื•ื ื’ ื•ื•ืขืจื˜ ื™ื ื™ืคืขืงื˜ื™ื•ื•. ืึธืคื˜, ืึธืคึฟืŸ ืžืงื•ืจ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืžื›ืฉื™ืจื™ื (ืœืžืฉืœ, Phantom JS) ื•ื•ืึธืก ืงืขื ืขืŸ ืฉืขืคึผืŸ ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ ืื•ื™ืฃ ืงืœื™ืขื ื˜ ื–ื™ื™ึทื˜ ื–ืขื ืขืŸ ื’ืขื ื™ืฆื˜ ืฆื• ืงืึทื˜ืขืจ ื‘ืจื•ื˜-ืงืจืึทืคื˜ ืื ืคืืœืŸ, ืงืจืึทื“ืขื ื˜ืฉืึทืœ ืกื˜ืึทืคื™ื ื’ ืื ืคืืœืŸ, DDoS ืื ืคืืœืŸ ืื•ืŸ ืึธื˜ืึทืžื™ื™ื˜ื™ื“ ื‘ืึธื˜ ืื ืคืืœืŸ.

ืฆื• ื™ืคืขืงื˜ื™ื•ื•ืœื™ ืคื™ืจืŸ ื‘ืึธื˜ ืคืึทืจืงืขืจ, ืึท ื™ื™ื ืฆื™ืง ืœืขื’ื™ื˜ื™ืžืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื–ื™ื™ึทืŸ ืžืงื•ืจ (ื•ื•ื™ ืึท ืคื™ื ื’ืขืจืคึผืจื™ื ื˜) ืื™ื– ืคืืจืœืื ื’ื˜. ื–ื™ื ื˜ ืึท ื‘ืึธื˜ ื‘ืึทืคืึทืœืŸ ื“ื–ืฉืขื ืขืจื™ื™ืฅ ืงื™ื™ืคืœ ืจืขืงืึธืจื“ืก, ื–ื™ื™ืŸ ืคื™ื ื’ืขืจืคึผืจื™ื ื˜ ืึทืœืึทื•ื– ืขืก ืฆื• ื™ื“ืขื ื˜ื™ืคื™ืฆื™ืจืŸ ืกืึทืกืคึผื™ืฉืึทืก ื˜ืขื˜ื™ืงื™ื™ื˜ ืื•ืŸ ื‘ืึทืฉื˜ื™ืžืขืŸ ืกืงืึธืจื–, ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื•ื•ืึธืก ื“ื™ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืฉื•ืฅ ืกื™ืกื˜ืขื ืžืื›ื˜ ืึทืŸ ื™ื ืคืึธืจืžื“ ื‘ืึทืฉืœื•ืก - ืคืึทืจืฉืคึผืึทืจืŸ / ืœืึธื–ืŸ - ืžื™ื˜ ืึท ืžื™ื ื™ืžื•ื ืงื•ืจืก ืคื•ืŸ ืคืึทืœืฉ ืคึผืึทื–ืึทื˜ื™ื•ื•ื–.

ื“ื™ ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™ ืคื•ืŸ ืžืึธื“ืขืจืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืกื™ืกื˜ืขืžืขืŸ (WAF) ื–ืึธืœ ื–ื™ื™ืŸ ืคื™ืœ ื‘ืจื™ื™ื˜ืขืจืขืจ ื•ื•ื™ ื“ื™ ืจืฉื™ืžื” ืคื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืคื•ืŸ ื“ื™ OWASP Top 10

ืึทืจื•ื™ืกืจื•ืคืŸ #2: ืคึผืจืึทื˜ืขืงื˜ื™ื ื’ ื“ื™ ืึทืคึผื™

ืคื™ืœืข ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืงืœื™ื™ึทื‘ืŸ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืื•ืŸ ื“ืึทื˜ืŸ ืคึฟื•ืŸ ืกืขืจื•ื•ื™ืกืขืก ืžื™ื˜ ื•ื•ืึธืก ื–ื™ื™ ื™ื ื˜ืขืจืึทืงื˜ ื“ื•ืจืš ืึทืคึผื™ืก. ื•ื•ืขืŸ ื˜ืจืึทื ืกืžื™ื˜ื™ื ื’ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ื“ืึทื˜ืŸ ื“ื•ืจืš ืึทืคึผื™ืก, ืžืขืจ ื•ื•ื™ 50% ืคื•ืŸ ืึธืจื’ืึทื ืึทื–ื™ื™ืฉืึทื ื– ื ื™ื˜ ื•ื•ืึทืœืึทื“ื™ื™ื˜ ืึธื“ืขืจ ื–ื™ื›ืขืจ ืึทืคึผื™ืก ืฆื• ื“ืขื˜ืขืงื˜ ืกื™ื™ื‘ืขืจืึทื˜ืึทืงืก.

ื‘ื™ื™ืฉืคื™ืœืŸ ืคื•ืŸ ื ื™ืฆืŸ ื“ื™ API:

  • ืื™ื ื˜ืขืจื ืขืฅ ืคื•ืŸ ื˜ื”ื™ื ื’ืก (ื™ืึธื˜) ื™ื ื˜ืึทื’ืจื™ื™ืฉืึทืŸ
  • ืžืึทืฉื™ืŸ-ืฆื•-ืžืึทืฉื™ืŸ ืงืึธืžื•ื ื™ืงืึทืฆื™ืข
  • ืกืขืจื•ื•ืขืจืœืขืกืก ื™ื ื•ื•ื™ื™ืจืึทื ืžืึทื ืฅ
  • ืžืึธื‘ื™ืœ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–
  • ื’ืขืฉืขืขื ื™ืฉ-ื’ืขื˜ืจื™ื‘ืŸ ืึทืคึผืคึผืœื™ืงืึทื˜ื™ืึธื ืก

ืึทืคึผื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ืขื ืœืขืš ืฆื• ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื•ืŸ ืึทืจื™ื™ึทื ื ืขืžืขืŸ ื™ื ื“ื–ืฉืขืงืฉืึทื ื–, ืคึผืจืึธื˜ืึธืงืึธืœ ืื ืคืืœืŸ, ืคึผืึทืจืึทืžืขื˜ืขืจ ืžืึทื ื™ืคึผื™ืึทืœื™ื™ืฉืึทืŸ, ืจื™ื“ืขืจืขืงืฅ ืื•ืŸ ื‘ืึธื˜ ืื ืคืืœืŸ. ื“ืขื“ืึทืงื™ื™ื˜ืึทื“ ืึทืคึผื™ ื’ื™ื™ื˜ื•ื•ื™ื™ื– ื”ืขืœืคึฟืŸ ืฆื• ืขื ืฉื•ืจ ืงืึทืžืคึผืึทื˜ืึทื‘ื™ืœืึทื˜ื™ ืฆื•ื•ื™ืฉืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ื‘ืึทื“ื™ื ื•ื ื’ืก ื•ื•ืึธืก ื™ื ื˜ืขืจืึทืงื˜ ื“ื•ืจืš ืึทืคึผื™ืก. ืึธื‘ืขืจ, ื–ื™ื™ ื˜ืึธืŸ ื ื™ื˜ ืฆื•ืฉื˜ืขืœืŸ ืขื ื“-ืฆื•-ืกื•ืฃ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ื•ื•ื™ ืึท WAF ืงืขื ืขืŸ ืžื™ื˜ ื™ืงืขืจื“ื™ืง ื–ื™ื›ืขืจื”ื™ื™ื˜ ืžื›ืฉื™ืจื™ื ืึทื–ืึท ื•ื•ื™ HTTP ื›ืขื“ืขืจ ืคึผืึทืจืกื™ื ื’, ืœื™ื™ึทืขืจ 7 ืึทืงืกืขืก ืงืึธื ื˜ืจืึธืœ ืจืฉื™ืžื” (ACL), JSON / XML ืคึผื™ื™ืœืึธื•ื“ ืคึผืึทืจืกื™ื ื’ ืื•ืŸ ื“ื•ืจื›ืงื•ืง, ืื•ืŸ ืฉื•ืฅ ืงืขื’ืŸ ืึทืœืข ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืคื•ืŸ OWASP Top 10 ืจืฉื™ืžื” ื“ืขื ืื™ื– ืึทื˜ืฉื™ื•ื•ื“ ื“ื•ืจืš ื™ื ืกืคึผืขืงื˜ื™ื ื’ ืฉืœื™ืกืœ ืึทืคึผื™ ื•ื•ืึทืœื•ืขืก ืžื™ื˜ positive ืื•ืŸ ื ืขื’ืึทื˜ื™ื•ื• ืžืึธื“ืขืœืก.

ืึทืจื•ื™ืกืจื•ืคืŸ #3: ืึธืคึผืœื™ื™ืงืขื ื•ื ื’ ืคื•ืŸ ืกืขืจื•ื•ื™ืก

ืึทืŸ ืึทืœื˜ ื‘ืึทืคืึทืœืŸ ื•ื•ืขืงื˜ืึธืจ, ืึธืคึผืœื™ื™ืงืขื ื•ื ื’ ืคื•ืŸ ื“ื™ื ืกื˜ (ื“ืึธืก), ื”ืืœื˜ ืฆื• ื‘ืึทื•ื•ื™ื™ึทื–ืŸ ื–ื™ื™ึทืŸ ื™ืคืขืงื˜ื™ื•ื•ื ืึทืก ืื™ืŸ ืึทื˜ืึทืงื™ื ื’ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–. ืึทื˜ืึทืงืขืจื– ื”ืึธื‘ืŸ ืึท ืงื™ื™ื˜ ืคื•ืŸ ื’ืขืจืึธื˜ืŸ ื˜ืขืงื ื™ืงืก ืฆื• ืฆืขืฉื˜ืขืจืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ื‘ืึทื“ื™ื ื•ื ื’ืก, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ื”ื˜ื˜ืคึผ ืึธื“ืขืจ ื”ื˜ื˜ืคึผืก ืคืœืึทื“ื–, ื ื™ื“ืขืจื™ืง-ืื•ืŸ-ืคึผืึทืžืขืœืขืš ืื ืคืืœืŸ (ืœืžืฉืœ SlowLoris, LOIC, Torshammer), ืื ืคืืœืŸ ื ื™ืฆืŸ ื“ื™ื ืึทืžื™ืฉ IP ืึทื“ืจืขืกืขืก, ื‘ืึทืคืขืจ ืึธื•ื•ื•ืขืจืคืœืึธื•, ื‘ืจื•ื˜ ืงืจืึทืคื˜-ืึทื˜ืึทืงืก, ืื•ืŸ ืคื™ืœืข ืื ื“ืขืจืข . ืžื™ื˜ ื“ืขืจ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคื•ืŸ ื“ื™ ืื™ื ื˜ืขืจื ืขื˜ ืคื•ืŸ ื˜ื”ื™ื ื’ืก ืื•ืŸ ื“ื™ ืกืึทื‘ืกืึทืงื•ื•ืึทื ื˜ ื™ืžืขืจื“ื–ืฉืึทื ืก ืคื•ืŸ IoT ื‘ืึธื˜ื ืขืฅ, ืื ืคืืœืŸ ืื•ื™ืฃ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ื”ืึธื‘ืŸ ื•ื•ืขืจืŸ ื“ื™ ื”ื•ื™ืคึผื˜ ืคืึธืงื•ืก ืคื•ืŸ DDoS ืื ืคืืœืŸ. ืจื•ื‘ึฟ ืกื˜ื™ื™ื˜ืคื•ืœ ื•ื•ืึทืคืก ืงืขื ืขืŸ ื‘ืœื•ื™ื– ืฉืขืคึผืŸ ืึท ืœื™ืžื™ื˜ืขื“ ืกื•ืžืข ืคื•ืŸ โ€‹โ€‹ืžืึทืกืข. ืึธื‘ืขืจ, ื–ื™ื™ ืงืขื ืขืŸ ื“ื•ืจื›ืงื•ืงืŸ HTTP / S ืคืึทืจืงืขืจ ืคืœืึธื•ื– ืื•ืŸ ื‘ืึทื–ื™ื™ึทื˜ื™ืงืŸ ื‘ืึทืคืึทืœืŸ ืคืึทืจืงืขืจ ืื•ืŸ ื‘ื™ื™ื–ืข ืงืึทื ืขืงืฉืึทื ื–. ืึทืžืึธืœ ืึทืŸ ืึทื˜ืึทืง ืื™ื– ื™ื™ื“ืขื ืึทืคื™ื™ื“, ืขืก ืื™ื– ืงื™ื™ืŸ ืคื•ื ื˜ ืฆื• ืคืึธืจืŸ ื“ืขื ืคืึทืจืงืขืจ ื•ื•ื™ื“ืขืจ. ื–ื™ื ื˜ ื“ื™ WAF ืก ืงืึทืคึผืึทืฆื™ื˜ืขื˜ ืฆื• ืึธืคึผืฉื˜ื•ื™ืกืŸ ืื ืคืืœืŸ ืื™ื– ืœื™ืžื™ื˜ืขื“, ืึทืŸ ื ืึธืš ืœื™ื™ื–ื•ื ื’ ืื™ื– ื“ืืจืฃ ืื™ืŸ ื“ื™ ื ืขืฅ ืคึผืขืจื™ืžืขื˜ืขืจ ืฆื• ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ืคืึทืจืฉืคึผืึทืจืŸ ื“ื™ ื•ื•ื™ื™ึทื˜ืขืจ "ืฉืœืขื›ื˜" ืคึผืึทืงื™ืฅ. ืคึฟืึทืจ ื“ืขื ื–ื™ื›ืขืจื”ื™ื™ื˜ ืกืฆืขื ืึทืจ, ื‘ื™ื™ื“ืข ืกืึทืœื•ืฉืึทื ื– ืžื•ื–ืŸ ืงืขื ืขืŸ ืฆื• ื™ื‘ืขืจื’ืขื‘ืŸ ืžื™ื˜ ื™ืขื“ืขืจ ืื ื“ืขืจืข ืฆื• ื•ื•ืขืงืกืœ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ืื ืคืืœืŸ.

ื“ื™ ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™ ืคื•ืŸ ืžืึธื“ืขืจืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืกื™ืกื˜ืขืžืขืŸ (WAF) ื–ืึธืœ ื–ื™ื™ืŸ ืคื™ืœ ื‘ืจื™ื™ื˜ืขืจืขืจ ื•ื•ื™ ื“ื™ ืจืฉื™ืžื” ืคื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืคื•ืŸ ื“ื™ OWASP Top 10
ืคื™ื™ึทื’ 1. ืึธืจื’ืึทื ื™ื–ืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ืคื•ืœืฉื˜ืขื ื“ื™ืง ื ืขืฅ ืื•ืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืฉื•ืฅ ื ื™ืฆืŸ ื“ืขื ื‘ื™ื™ึทืฉืคึผื™ืœ ืคื•ืŸ ืจืึทื“ื•ื•ืึทืจืข ืกืึทืœื•ืฉืึทื ื–

ืึทืจื•ื™ืกืจื•ืคืŸ #4: ืงืขืกื™ื™ื“ืขืจื“ื™ืง ืฉื•ืฅ

ืึทืคึผืคึผืœื™ืงืึทื˜ื™ืึธื ืก ื˜ื•ื™ืฉืŸ ืึธืคื˜. ืื ื˜ื•ื•ื™ืงืœื•ื ื’ ืื•ืŸ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืžืขื˜ืึทื“ืึทืœืึทื“ื–ืฉื™ื– ืึทื–ืึท ื•ื•ื™ ืจืึธื•ืœื™ื ื’ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ืžื™ื™ื ืขืŸ ืึทื– ืžืึธื“ื™ืคื™ืงืึทื˜ื™ืึธื ืก ืคืึทืœืŸ ืึธืŸ ืžืขื ื˜ืฉ ื™ื ื˜ืขืจื•ื•ืขื ื˜ื™ืึธืŸ ืึธื“ืขืจ ืงืึธื ื˜ืจืึธืœ. ืื™ืŸ ืึทื–ืึท ื“ื™ื ืึทืžื™ืฉ ื™ื ื•ื•ื™ื™ืจืึทื ืžืึทื ืฅ, ืขืก ืื™ื– ืฉื•ื•ืขืจ ืฆื• ื˜ื™ื™ึทื ืขืŸ ืึทื“ืึทืงื•ื•ืึทื˜ืœื™ ืคืึทื ื’ืงืฉืึทื ื™ื ื’ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคึผืึทืœืึทืกื™ื– ืึธืŸ ืึท ื”ื•ื™ืš ื ื•ืžืขืจ ืคื•ืŸ ืคืึทืœืฉ ืคึผืึทื–ืึทื˜ื™ื•ื•ื–. ืจื™ืจืขื•ื•ื“ื™ืง ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ื–ืขื ืขืŸ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื˜ ืคื™ืœ ืžืขืจ ืึธืคื˜ ื•ื•ื™ ื•ื•ืขื‘ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–. ื“ืจื™ื˜ ื˜ื™ื™ืœื•ื•ื™ื™ึทื– ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืงืขืŸ ื˜ื•ื™ืฉืŸ ืึธืŸ ื“ื™ื™ืŸ ื•ื•ื™ืกืŸ. ืขื˜ืœืขื›ืข ืึธืจื’ืึทื ืึทื–ื™ื™ืฉืึทื ื– ื–ื•ื›ืŸ ืžืขืจ ืงืึธื ื˜ืจืึธืœ ืื•ืŸ ื•ื•ื™ื–ืึทื‘ื™ืœื™ื˜ื™ ืฆื• ื‘ืœื™ื™ื‘ืŸ ืื•ื™ืฃ ืฉืคึผื™ืฅ ืคื•ืŸ ืคึผืึธื˜ืขื ืฆื™ืขืœ ืจื™ืกืงืก. ืึธื‘ืขืจ, ื“ืึธืก ืื™ื– ื ื™ื˜ ืฉื˜ืขื ื“ื™ืง ืึทื˜ืฉื™ื•ื•ืึทื‘ืึทืœ, ืื•ืŸ ืคืึทืจืœืึธื–ืœืขืš ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืฉื•ืฅ ืžื•ื–ืŸ ื ื•ืฆืŸ ื“ื™ ืžืึทื›ื˜ ืคื•ืŸ ืžืึทืฉื™ืŸ ืœืขืจื ืขืŸ ืฆื• ืจืขื›ืขื ืขืŸ ืื•ืŸ ื•ื•ื™ื–ืฉื•ื•ืึทืœื™ื™ื– ื‘ื ื™ืžืฆื ืจืขืกื•ืจืกืŸ, ืึทื ืึทืœื™ื™ื– ืคึผืึธื˜ืขื ืฆื™ืขืœ ื˜ืจืขืฅ ืื•ืŸ ืฉืึทืคึฟืŸ ืื•ืŸ ืึทืคึผื˜ืึทืžื™ื™ื– ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคึผืึทืœืึทืกื™ื– ืื™ืŸ ื“ื™ ื’ืขืฉืขืขื ื™ืฉ ืคื•ืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืžืึธื“ื™ืคื™ืงืึทื˜ื™ืึธื ืก.

ืคื™ื™ื ื“ื™ื ื’ื–

ื•ื•ื™ ืึทืคึผืคึผืก ืฉืคึผื™ืœืŸ ืึท ื™ื ืงืจื™ืกื™ื ื’ืœื™ ื•ื•ื™ื›ื˜ื™ืง ืจืึธืœืข ืื™ืŸ ื•ื•ืึธื›ืขื“ื™ืง ืœืขื‘ืŸ, ื–ื™ื™ ื•ื•ืขืจืŸ ืึท ื”ื•ื™ืคึผื˜ ืฆื™ืœ ืคึฟืึทืจ ื›ืึทืงืขืจื–. ื“ื™ ืคึผืึธื˜ืขื ืฆื™ืขืœ ืจื™ื•ื•ืึธืจื“ื– ืคึฟืึทืจ ืงืจื™ืžืึทื ืึทืœื– ืื•ืŸ ื“ื™ ืคึผืึธื˜ืขื ืฆื™ืขืœ ืœืึธืกืกืขืก ืคึฟืึทืจ ื’ืขืฉืขืคื˜ืŸ ื–ืขื ืขืŸ ืจื™ื–ื™ืง. ื“ื™ ืงืึทืžืคึผืœืขืงืกื™ื˜ื™ ืคื•ืŸ ื“ื™ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืึทืจื‘ืขื˜ ืงืขื ืขืŸ ื ื™ื˜ ื–ื™ื™ืŸ ืึธื•ื•ื•ืขืจืกื˜ื™ื™ื˜ื™ื“ ื•ื•ื™ื™ึทืœ ืคื•ืŸ ื“ื™ ื ื•ืžืขืจ ืื•ืŸ ื•ื•ืขืจื™ื™ื™ืฉืึทื ื– ืคื•ืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืื•ืŸ ื˜ืจืขืฅ.

ืฆื•ืž ื’ืœื™ืง, ืžื™ืจ ื–ืขื ืขืŸ ืื™ืŸ ืึท ืคื•ื ื˜ ืื™ืŸ ืฆื™ื™ื˜ ื•ื•ื• ืงื™ื ืกื˜ืœืขืš ืกื™ื™ื›ืœ ืงืขื ืขืŸ ืงื•ืžืขืŸ ืฆื• ืื•ื ื“ื–ืขืจ ื”ื™ืœืฃ. ืžืึทืฉื™ืŸ ืœืขืจื ืขืŸ-ื‘ืื–ื™ืจื˜ ืึทืœื’ืขืจื™ื“ืึทืžื– ืฆื•ืฉื˜ืขืœืŸ ืึทื“ืึทืคึผื˜ื™ื•ื•, ืคืึทืงื˜ื™ืฉ-ืฆื™ื™ื˜ ืฉื•ืฅ ืงืขื’ืŸ ื“ื™ ืžืขืจืกื˜ ืึทื•ื•ืึทื ืกื™ืจื˜ืข ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ-ื˜ืึทืจื’ืขื˜ืขื“ ืกื™ื™ื‘ืขืจ ื˜ืจืขืฅ. ื–ื™ื™ ืื•ื™ืš ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคึผืึทืœืึทืกื™ื– ืฆื• ื‘ืึทืฉื™ืฆืŸ ื•ื•ืขื‘, ืจื™ืจืขื•ื•ื“ื™ืง ืื•ืŸ ื•ื•ืึธืœืงืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– - ืื•ืŸ ืึทืคึผื™ืก - ืึธืŸ ืคืึทืœืฉ ืคึผืึทื–ืึทื˜ื™ื•ื•ื–.

ืขืก ืื™ื– ืฉื•ื•ืขืจ ืฆื• ืคืึธืจื•ื™ืกื–ืึธื’ืŸ ืžื™ื˜ ื–ื™ื›ืขืจืงื™ื™ื˜ ื•ื•ืึธืก ื“ืขืจ ื•ื•ื™ื™ึทื˜ืขืจ ื“ื•ืจ ืคื•ืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืกื™ื™ื‘ืขืจื˜ืจื™ืฅ (ืขืคืฉืขืจ ืื•ื™ืš ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ืžืึทืฉื™ืŸ ืœืขืจื ืขืŸ) ื•ื•ืขื˜ ื–ื™ื™ืŸ. ืึธื‘ืขืจ ืึธืจื’ืึทื ืึทื–ื™ื™ืฉืึทื ื– ืงืขื ืขืŸ ืึทื•ื•ืึทื“ืข ื ืขืžืขืŸ ืกื˜ืขืคึผืก ืฆื• ื‘ืึทืฉื™ืฆืŸ ืงื•ื ื” ื“ืึทื˜ืŸ, ื‘ืึทืฉื™ืฆืŸ ืื™ื ื˜ืขืœืขืงื˜ื•ืึทืœ ืคืึทืจืžืึธื’ ืื•ืŸ ืขื ืฉื•ืจ ืกืขืจื•ื•ื™ืก ืึทื•ื•ื™ื™ืœืึทื‘ื™ืœืึทื˜ื™ ืžื™ื˜ ื’ืจื•ื™ืก ื’ืขืฉืขืคื˜ ื‘ืขื ืขืคื™ืฅ.

ืขืคืขืงื˜ื™ื•ื• ืึทืคึผืจืึธื•ื˜ืฉื™ื– ืื•ืŸ ืžืขื˜ื”ืึธื“ืก ืคึฟืึทืจ ื™ื ืฉื•ืจื™ื ื’ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜, ื“ื™ ื”ื•ื™ืคึผื˜ ื˜ื™ื™ืคึผืก ืื•ืŸ ื•ื•ืขืงื˜ืึธืจืก ืคื•ืŸ ืื ืคืืœืŸ, ืจื™ื–ื™ืงื™ืจืŸ ื’ืขื‘ื™ื˜ืŸ ืื•ืŸ ื’ืึทืคึผืก ืื™ืŸ ืกื™ื™ื‘ืขืจ ืฉื•ืฅ ืคื•ืŸ ื•ื•ืขื‘ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ื’ืœืื‘ืืœืข ื“ืขืจืคืึทืจื•ื ื’ ืื•ืŸ ื‘ืขืกื˜ืขืจ ืคึผืจืึทืงื˜ื™ืกื™ื– ื–ืขื ืขืŸ ื“ืขืจืœืื ื’ื˜ ืื™ืŸ ื“ื™ Radware ืœืขืจื ืขืŸ ืื•ืŸ ื‘ืึทืจื™ื›ื˜ "ื•ื•ืขื‘ ืึทืคึผืคึผืœื™ืงืึทื˜ื™ืึธืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืื™ืŸ ืึท ื“ื™ื’ื™ื˜ืึทืœ ืงืึธื ื ืขืงื˜ืขื“ ื•ื•ืขืœื˜".

ืžืงื•ืจ: www.habr.com

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’