75% ืคื•ืŸ ื’ืขืฉืขืคื˜ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืึทืจื™ื™ึทื ื ืขืžืขืŸ ืึทื•ื˜ื“ื™ื™ื˜ื™ื“ ืึธืคึฟืŸ ืžืงื•ืจ ืงืึธื“ ืžื™ื˜ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–

ืกื™ื ืึธืคึผืกื™ืก ืคึฟื™ืจืžืข ืึทื ืึทืœื™ื–ื™ืจื˜ 1253 ื’ืขืฉืขืคื˜ ืงืึธื“ืขื‘ืึทืกืขืก ืื•ืŸ ื’ืขืคื•ื ืขืŸ ืึทื– ื›ึผืžืขื˜ ืึทืœืข (99%) ืคื•ืŸ ื“ื™ ืจื™ื•ื•ื™ื•ื“ ื’ืขืฉืขืคื˜ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ ืžื™ื ื“ืกื˜ืขืจ ืื™ื™ืŸ ืึธืคึฟืŸ ืžืงื•ืจ ืงืึธืžืคึผืึธื ืขื ื˜, ืื•ืŸ 70% ืคื•ืŸ ื“ื™ ืงืึธื“ ืื™ืŸ ื“ื™ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ื– ืจื™ื•ื•ื™ื•ื“ ืื™ื– ื’ืขื•ื•ืขืŸ ืึธืคึฟืŸ ืžืงื•ืจ. ืคึฟืึทืจ ืคืึทืจื’ืœื™ื™ึทืš, ืื™ืŸ ืึท ืขื ืœืขืš ืœืขืจื ืขืŸ ืื™ืŸ 2015, ื“ื™ ื˜ื™ื™ืœืŸ ืคื•ืŸ ืขืคึฟืขื ืขืŸ ืžืงื•ืจ ืื™ื– ื’ืขื•ื•ืขืŸ 36%.

ืึธื‘ืขืจ, ืื™ืŸ ืจื•ื‘ึฟ ืคืืœืŸ, ื“ื™ ื“ืจื™ื˜-ืคึผืึทืจื˜ื™ื™ ืขืคึฟืขื ืขืŸ ืžืงื•ืจ ืงืึธื“ ื’ืขื ื™ืฆื˜ ืื™ื– ื ื™ืฉื˜ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื˜ ืื•ืŸ ื›ึผื•ืœืœ ืคึผืึธื˜ืขื ืฆื™ืขืœ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคึผืจืึธื‘ืœืขืžืก - 91% ืคื•ืŸ ื“ื™ ืงืึธื“ืขื‘ืึทืกืขืก ืจื™ื•ื•ื™ื•ื“ ื”ืึธื‘ืŸ ืึธื•ืคึผืึทื ื“ ืงืึทืžืคึผืึธื•ื ืึทื ืฅ ื•ื•ืึธืก ื”ืึธื‘ืŸ ื ื™ืฉื˜ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื˜ ืคึฟืึทืจ ืžืขืจ ื•ื•ื™ 5 ื™ืึธืจ ืึธื“ืขืจ ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ืื™ืŸ ืึท ืคืืจืœืื–ืŸ ืคืึธืจืขื ืคึฟืึทืจ ืื™ืŸ ืžื™ื ื“ืกื˜ืขืจ ืฆื•ื•ื™ื™ ื™ืึธืจ ืื•ืŸ ื–ืขื ืขืŸ ื ื™ืฉื˜ ืžื™ื™ื ื˜ื™ื™ื ื“ ื“ื•ืจืš ื“ืขื•ื•ืขืœืึธืคึผืขืจืก. ื•ื•ื™ ืึท ืจืขื–ื•ืœื˜ืึทื˜, 75% ืคื•ืŸ ืึธืคึฟืŸ ืžืงื•ืจ ืงืึธื“ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ืŸ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ื– ืึทื ื˜ื”ืึทืœื˜ืŸ ืึทื ืคึผืึทื˜ืฉื˜ ื‘ืึทื•ื•ื•ืกื˜ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–, ื”ืึทืœื‘ ืคื•ืŸ ื•ื•ืึธืก ื”ืึธื‘ืŸ ืึท ื”ื•ื™ืš ืžื“ืจื’ื” ืคื•ืŸ ื’ืขืคืึทืจ. ืื™ืŸ ื“ื™ 2018 ืžื•ืกื˜ืขืจ, ื“ื™ ื˜ื™ื™ืœืŸ ืคื•ืŸ ืงืึธื“ ืžื™ื˜ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ื– ื’ืขื•ื•ืขืŸ 60%.

ื“ื™ ืžืขืจืกื˜ ืคึผืจืึธืกื˜ ื’ืขืคืขืจืœืขืš ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื’ืขื•ื•ืขืŸ
ื“ื™ ืคึผืจืึธื‘ืœืขื CVE-2018-16487 (ื•ื•ื™ื™ึทื˜ ืงืึธื“ ื“ื•ืจื›ืคื™ืจื•ื ื’) ืื™ืŸ ื“ืขืจ ื‘ื™ื‘ืœื™ืึธื˜ืขืง lodash ืคึฟืึทืจ Node.js, ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ื•ื•ืขืจืกื™ืขืก ืคื•ืŸ ื•ื•ืึธืก ื–ืขื ืขืŸ ื’ืขืคึฟื•ื ืขืŸ ืžืขืจ ื•ื•ื™ 500 ืžืืœ. ื“ื™ ืึธื•ืœื“ืึทืกื˜ ืึทื ืคึผืึทื˜ืฉื˜ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื’ืขื•ื•ืขืŸ ืึท ืคึผืจืึธื‘ืœืขื ืื™ืŸ ื“ื™ lpd daemon (CVE-1999-0061), ืจื™ื•ื•ื™ื™ื–ื“ ืื™ืŸ 1999.

ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• ื–ื™ื›ืขืจื”ื™ื™ื˜ ืื™ืŸ ื“ื™ ืงืึธื“ ื‘ืึทืกืขืก ืคื•ืŸ ื’ืขืฉืขืคื˜ ืคึผืจืึทื“ื–ืฉืขืงืก, ืขืก ืื™ื– ืื•ื™ืš ืึท ื ืขื’ืœืึทื“ื–ืฉืึทื ื˜ ืฉื˜ืขืœื•ื ื’ ืฆื• ื”ืขืกืงืขื ืžื™ื˜ ื“ื™ ื˜ืขืจืžื™ื ืขืŸ ืคื•ืŸ ืคืจื™ื™ ืœื™ื™ืกืึทื ืกื™ื–.
ืื™ืŸ 73% ืคื•ืŸ ืงืึธื“ืขื‘ืึทืกืขืก, ืคึผืจืึธื‘ืœืขืžืก ื–ืขื ืขืŸ ื’ืขืคึฟื•ื ืขืŸ ืžื™ื˜ ื“ื™ ืœื™ื’ืึทืœืึทื˜ื™ ืคื•ืŸ ื ื™ืฆืŸ ืึธืคึฟืŸ ืžืงื•ืจ, ืœืžืฉืœ, ื™ื ืงืึทืžืคึผืึทื˜ืึทื‘ืึทืœ ืœื™ื™ืกืึทื ืกื™ื– (ื™ื•ื–ืฉืึทื•ื•ืึทืœื™ GPL ืงืึธื“ ืื™ื– ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ ื’ืขืฉืขืคื˜ ืคึผืจืึธื“ื•ืงื˜ืŸ ืึธืŸ ืขืคืŸ ืึท ื“ืขืจื™ื•ื•ืึทื˜ ืคึผืจืึธื“ื•ืงื˜) ืึธื“ืขืจ ื ื•ืฆืŸ ืคื•ืŸ ืงืึธื“ ืึธืŸ ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ืึท ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ. 93% ืคื•ืŸ ืึทืœืข ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ ืคึผืจืึธื‘ืœืขืžืก ืคืึทืœืŸ ืื™ืŸ ื•ื•ืขื‘ ืื•ืŸ ืจื™ืจืขื•ื•ื“ื™ืง ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–. ืื™ืŸ ืฉืคึผื™ืœืขืจื™ื™ึท, ื•ื•ื™ืจื˜ื•ืึทืœ ืคืึทืงื˜ ืกื™ืกื˜ืขืžืขืŸ, ืžื•ืœื˜ื™ืžืขื“ื™ืึท ืื•ืŸ ืคืึทืจื•ื•ื™ื™ึทืœื•ื ื’ ืžื’ื™ืœื”, ื•ื•ื™ื™ืึทืœื™ื™ืฉืึทื ื– ื–ืขื ืขืŸ ื‘ืืžืขืจืงื˜ ืื™ืŸ 59% ืคื•ืŸ ืงืึทืกืขืก.

ืื™ืŸ ื’ืึทื ืฅ, ื“ื™ ืœืขืจื ืขืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ 124 ื˜ื™ืคึผื™ืฉ ืึธืคึฟืŸ ืงืึทืžืคึผืึธื•ื ืึทื ืฅ ื•ื•ืึธืก ื–ืขื ืขืŸ ืงืึทืžืึทื ืœื™ ื’ืขื ื™ืฆื˜ ืื™ืŸ ืึทืœืข ืงืึธื“ ื‘ืึทืกืขืก. ื“ื™ ืžืขืจืกื˜ ืคืึธืœืงืก ื–ืขื ืขืŸ: jQuery (55%), Bootstrap (40%), Font Awesome (31%), Lodash (30%) ืื•ืŸ jQuery UI (29%). ืื™ืŸ ื˜ืขืจืžื™ื ืขืŸ ืคื•ืŸ ืคึผืจืึธื’ืจืึทืžืžื™ื ื’ ืฉืคึผืจืึทื›ืŸ, ื“ื™ ืžืขืจืกื˜ ืคืึธืœืงืก ื–ืขื ืขืŸ ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ (ื’ืขื ื™ืฆื˜ ืื™ืŸ 74% ืคื•ืŸ ืคึผืจืึทื“ื–ืฉืขืงืก), C ++ (57%), ืฉืขืœ (54%), C (50%), ืคึผื™ื˜ื”ืึธืŸ (46%), Java (40%), ื˜ื™ืคึผืกืงืจื™ืคึผื˜ (36%), C # (36%); ืคึผืขืจืœ (30%) ืื•ืŸ ืจื•ื‘ื™ (25%). ื“ื™ ื’ืึทื ืฅ ื˜ื™ื™ืœืŸ ืคื•ืŸ ืคึผืจืึธื’ืจืึทืžืžื™ื ื’ ืฉืคึผืจืึทื›ืŸ ืื™ื–:
ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ (51%), C ++ (10%), Java (7%), ืคึผื™ื˜ื”ืึธืŸ (7%), ืจื•ื‘ื™ (5%), ื’ื™ื™ืŸ (4%), C (4%), PHP (4%), TypeScript ( 4%), C # (3%), ืคึผืขืจืœ (2%) ืื•ืŸ ืฉืขืœ (1%).

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’