Yuav ua li cas kho lub network chaw nres nkoj?
2024-09-23 13:25:09 dr hab
Cov Lus Qhia
1. Network Port yog dab tsi?
Lub network chaw nres nkoj yog qhov kawg ntawm kev sib txuas lus uas ua rau cov cuab yeej xa thiab tau txais cov ntaub ntawv. Xav tias nws yog lub qhov rooj uas tso cai rau cov ntaub ntawv nkag mus rau hauv thiab tawm ntawm qhov system. Cov cuab yeej siv, xws li khoos phis tawj thiab servers, siv cov chaw nres nkoj no los tsim kev sib txuas thiab xa cov ntaub ntawv hla lub network.
Hom Network Ports
Muaj ntau hom chaw nres nkoj hauv network, tab sis ob qho ntawm feem ntau yog Ethernet chaw nres nkoj thiab TCP / UDP chaw nres nkoj.
Ethernet ports tso cai rau kev sib txuas ntawm lub cev ntawm cov khoom siv siv Ethernet cables. Cov no yog dav siv nyob rau hauv ob qho tib si hauv tsev thiab kev lag luam tes hauj lwm rau kev sib txuas wired.
TCP/UDP cov chaw nres nkoj yog cov chaw nres nkoj logical siv los txheeb xyuas cov txheej txheem lossis cov kev pabcuam hauv kev xa cov ntaub ntawv. TCP (Transmission Control Protocol) yog txhim khu kev qha thiab siv rau cov dej num xws li web browsing thiab email. UDP (User Datagram Protocol) sai dua tab sis tsis tshua muaj kev ntseeg siab, feem ntau siv rau streaming thiab online gaming.
Chaw nres nkoj naj npawb
Cov ntawv thov sib txawv sib txuas lus los ntawm tus lej chaw nres nkoj ua ntej. Piv txwv li:
HTTP siv chaw nres nkoj 80 rau lub vev xaib tsheb.
HTTPS siv chaw nres nkoj 443 rau kev nyab xeeb ntawm lub vev xaib.
FTP (File Transfer Protocol) feem ntau siv chaw nres nkoj 21.
Los ntawm kev paub txog cov chaw nres nkoj twg siv rau cov kev pabcuam tshwj xeeb, koj tuaj yeem tswj hwm thiab kho lawv kom zoo.
2. Vim li cas Patching Network Ports yog qhov tseem ceeb?
Patching network ports yog qhov tseem ceeb rau kev tswj xyuas kev ruaj ntseg thiab kev ruaj ntseg ntawm koj lub network. Unpatched ports tuaj yeem nthuav tawm koj lub cev mus rau ntau qhov chaw tsis zoo.
Kev txhawj xeeb txog kev ruaj ntseg
Qhib lossis tsis kho cov chaw nres nkoj yog lub hom phiaj rau cyberattacks xws li chaw nres nkoj scanning, qhov twg hackers soj ntsuam cov tshuab rau cov chaw nres nkoj nkag tau, thiab DoS (Kev Tsis Pom Zoo ntawm Kev Pabcuam) tawm tsam uas cuam tshuam nrog cov tsheb khiav. Cov kev tawm tsam no tuaj yeem ua rau cov ntaub ntawv ua txhaum cai, poob kev pabcuam, lossis tsis tau tso cai nkag mus rau cov ntaub ntawv rhiab heev.
Software Kab
Cov kev pabcuam qub qub lossis tsis tau kho dua tshiab yuav muaj cov kab uas tuaj yeem siv los ntawm cov neeg tawm tsam. Piv txwv li, cov versions dhau los ntawm OpenSSL yog qhov muaj kev cuam tshuam rau kev tawm tsam zoo li Heartbleed, uas tso cai rau kev nkag mus rau cov ntaub ntawv tsis raug cai. Kev patching tsis tu ncua ua kom cov kab no kho tau thiab koj lub network tseem ruaj ntseg.
Cov kev coj ua zoo tshaj plaws
Txhawm rau kom muaj kev ruaj ntseg ntawm koj lub network ports, ib txwm siv firewalls txwv tsis pub nkag mus rau cov kev pabcuam tseem ceeb thiab siv cov cuab yeej tiv thaiv kev nkag mus (IDS) los saib xyuas cov haujlwm tsis txaus ntseeg. Patching cov chaw nres nkoj tsis tu ncua raws li ib feem ntawm cov tswv yim kev ruaj ntseg muaj peev xwm txo tau qhov kev pheej hmoo ntawm kev tawm tsam.
Patching network ports xav tau ob qho tib si software thiab cov cuab yeej kho vajtse kom tswj tau zoo thiab saib xyuas koj lub network.
Software
Ntau cov cuab yeej software tuaj yeem pab koj saib xyuas thiab txheeb xyuas cov chaw nres nkoj yooj yim:
Wireshark yog lub zog network raws tu qauv ntsuas uas tso cai rau koj los tshuaj xyuas cov ntaub ntawv hla hauv koj lub network.
Nmap tau siv dav rau kev tshawb pom hauv network thiab kev soj ntsuam kev nyab xeeb, muab cov ncauj lus kom ntxaws txog cov chaw nres nkoj qhib.
Nessus yog cov cuab yeej tshawb xyuas qhov tsis zoo uas pab txheeb xyuas qhov tsis muaj zog hauv koj lub network, suav nrog cov chaw nres nkoj tsis tau kho.
Kho vajtse
Thaum ua haujlwm nrog kev sib txuas ntawm lub cev, qee yam khoom siv yog qhov tseem ceeb:
Network thaj vaj huam sib luag pab tswj ntau qhov kev sib txuas Ethernet, kom ntseeg tau tias koj lub network raug teeb tsa thiab ua kom loj tuaj.
Ethernet cables thiab RJ45 connectors yog tsim nyog rau kev sib txuas cov cuab yeej los ntawm lub cev ports.
Lwm yam cuab yeej
Cov cuab yeej ntxiv uas tuaj yeem pab suav nrog:
Network diagnostic cov cuab yeej los daws teeb meem.
Patch cables rau txuas cov khoom siv ncaj qha.
Ib qho cuab yeej crimping rau kev npaj kev cai network cables.
Cov cuab yeej ua ke no tso cai rau koj los kho cov chaw nres nkoj hauv network tau zoo thiab xyuas kom koj lub cev muaj kev nyab xeeb thiab mus txog hnub kawg.
4. Kauj ruam-by-step qhia rau Patching ib tug Network chaw nres nkoj
Kauj Ruam 1: Txheeb xyuas cov chaw nres nkoj tsis muaj zog
Ua ntej patching lub network chaw nres nkoj, thawj kauj ruam yog txhawm rau txheeb xyuas cov chaw nres nkoj twg muaj qhov tsis zoo. Qhov no ua kom ntseeg tau tias koj cov kev siv zog patching raug tsom thiab ua haujlwm tau zoo.
Siv Network Scanners
Ib txoj hauv kev ua tau zoo tshaj plaws los txheeb xyuas cov chaw nres nkoj qhib thiab tsis muaj zog yog los ntawm kev siv cov tshuab luam ntawv network xws li Nmap. Nmap scans koj lub network rau qhib cov chaw nres nkoj thiab muab cov lus qhia ntxaws ntxaws, qhia txog cov chaw nres nkoj twg raug nthuav tawm thiab muaj feem cuam tshuam.
Txhawm rau siv Nmap, tsuas yog khiav cov lus txib hauv qab no txhawm rau luam theej koj lub network:
npe -sV
Cov lus txib no teev tag nrho cov chaw nres nkoj qhib, cov kev pabcuam khiav ntawm cov chaw nres nkoj, thiab cov version ntawm software siv.
Firewall Logs
Lwm txoj hauv kev yog txhawm rau txheeb xyuas koj cov ntaub ntawv firewall. Firewalls nkag mus nkag thiab tawm, suav nrog txhua qhov kev sim nkag mus qhib cov chaw nres nkoj. Los ntawm kev tshuaj xyuas cov cav no, koj tuaj yeem txheeb xyuas cov haujlwm tsis txaus ntseeg lossis rov ua dua los txuas mus rau cov chaw nres nkoj tsis zoo. Qhov no yog tshwj xeeb tshaj yog muaj txiaj ntsig zoo rau kev pom qhov chaw nres nkoj scanning sim los ntawm cov neeg tawm tsam.
Kev Ntsuas Kev Ntsuas
Rau kev siv tes ua ntau dua, koj tuaj yeem sim cov chaw nres nkoj network manually siv cov cuab yeej xws li telnet lossis netstat:
Telnet: Cov cuab yeej hais kom ua kab no tso cai rau koj sim yog tias qhov chaw nres nkoj tshwj xeeb qhib rau ntawm lub tshuab chaw taws teeb. Piv txwv li:
Netstat: Siv cov cuab yeej no los xyuas cov kev sib txuas nquag thiab mloog cov chaw nres nkoj ntawm koj lub tshuab hauv zos:
netstat - ib
Cov txheej txheem no muab rau koj ntau granular tswj ntawm koj lub network diagnostics.
Kauj ruam 2: Download tau qhov tsim nyog Patches lossis hloov tshiab
Thaum koj tau txheeb xyuas cov chaw nres nkoj tsis zoo, cov kauj ruam tom ntej yog los sau cov thaj ua rau thaj tsam tsim nyog lossis hloov kho tshiab los kho lawv.
Cov neeg muag khoom hloov tshiab
Tshawb xyuas qhov hloov tshiab los ntawm tus neeg muag khoom software lub luag haujlwm rau cov kev pabcuam uas khiav ntawm qhov chaw nres nkoj tsis zoo. Cov neeg muag khoom xws li Microsoft, Cisco, thiab ntau yam Linux faib tsis tu ncua tso tawm kev ruaj ntseg hloov tshiab uas hais txog qhov tsis zoo. Cov kev hloov tshiab no feem ntau suav nrog thaj ua rau thaj rau cov kev pabcuam network uas yuav raug nthuav tawm ntawm cov chaw nres nkoj qhib.
Firmware Hloov tshiab
Tsis txhob hnov qab xyuas cov firmware hloov tshiab rau koj lub network hardware, xws li routers, keyboards, lossis firewalls. Cov firmware tsis tu ncua tuaj yeem muaj qhov tsis zoo uas tso cov chaw nres nkoj qhib lossis teeb tsa tsis raug. Mus saib cov chaw tsim khoom lub vev xaib txhawm rau rub tawm cov firmware tshiab thiab siv lawv rau koj qhov kho vajtse.
Patching Software
Koj tseem tuaj yeem rub tawm thaj ua rau thaj los ntawm cov chaw muaj npe nrov xws li CVE databases (Common Vulnerabilities and Exposures), uas teev cov kev paub tsis zoo thiab lawv cov kev daws teeb meem. Nco ntsoov xyuas qhov tseeb ntawm thaj ua rau thaj kom tsis txhob rub tawm cov ntaub ntawv tsis zoo lossis ua tsis zoo.
Kauj Ruam 3: Siv cov Patch lossis Configuration Hloov
Nrog rau qhov tsim nyog thaj ua rau thaj thiab hloov tshiab hauv tes, nws yog lub sijhawm los siv lawv thiab teeb tsa koj lub network teeb tsa.
Automatic vs. Manual Patching
Koj tuaj yeem thov thaj ua rau thaj yog txiav los yog manually.
Tsis siv neeg patching yog yooj yim dua, raws li muaj ntau yam kev khiav hauj lwm systems thiab software tej pob khoom yuav configured mus download tau thiab siv hloov tshiab tau. Cov cuab yeej zoo li WSUS (Windows Server Update Services) thiab SolarWinds tuaj yeem ua haujlwm patching txheej txheem rau kev lag luam tes hauj lwm.
Phau ntawv patching muab rau koj tswj ntau tab sis xav kom koj rub tawm thiab nruab thaj ua rau koj tus kheej. Txoj kev no siv sijhawm ntau dua tab sis ua kom koj paub txog txhua qhov kev hloov pauv hauv koj lub cev.
Configure Firewalls thiab Routers
Ntxiv nrog rau patching software, koj yuav tsum teeb tsa koj lub firewalls thiab routers kom kaw lossis txwv kev nkag mus rau cov chaw nres nkoj qhib.
Ntawm no yog ib qho yooj yim step-by-step qhia:
1. Nkag mus rau firewall interface: Nkag mus rau hauv koj lub firewall lub teeb tsa vaj huam sib luag.
2.Nrhiav cov chaw nres nkoj qhib: Nkag mus rau ntu uas koj tuaj yeem tswj xyuas chaw nres nkoj nkag.
3. Kaw cov chaw nres nkoj tsis tsim nyog: Tshem tawm cov chaw nres nkoj uas tsis nquag siv lossis xav tau.
4.Ntxiv cov cai firewall: Tsim cov cai uas tsuas yog tso cai rau kev khiav tsheb los ntawm qhov chaw nyob IP ntseeg lossis qee lub network.
5.Txuag thiab siv cov chaw: Thaum koj ua tiav, nco ntsoov khaws thiab sim koj qhov chaw tshiab.
Siv tau cov kev hloov pauv
Tom qab siv thaj ua rau thaj lossis hloov cov kev teeb tsa, nws yog ib qho tseem ceeb kom paub tseeb tias cov kev hloov pauv tau siv. Siv cov cuab yeej saib xyuas lub network xws li Nmap lossis Wireshark rov txheeb xyuas lub network thiab xyuas kom meej tias qhov tsis zoo tau raug kho. Nrhiav cov cim qhia tias yav dhau los cov chaw nres nkoj tsis muaj zog tam sim no muaj kev nyab xeeb lossis raug kaw.
Kauj ruam 4: Kuaj qhov chaw nres nkoj Patched
Kev ntsuam xyuas yog ib feem tseem ceeb ntawm cov txheej txheem patching kom ntseeg tau tias cov kev siv kho tau zoo.
Post-Patching Tests
Tom qab siv thaj ua rau thaj, rov tshawb xyuas koj lub network siv Nmap lossis cov cuab yeej zoo sib xws los xyuas kom meej tias cov chaw nres nkoj tsis raug cuam tshuam lawm.
Khiav:
npe -sV
Xyuas kom tseeb tias cov kev pabcuam versions tau hloov kho thiab tam sim no txhua qhov chaw nres nkoj tsis tsim nyog raug kaw.
Siv cov cuab yeej ntsuas kev nkag mus
Rau qhov kev ntsuam xyuas tob dua, xav txog kev siv cov cuab yeej ntsuas kev nkag mus zoo li Metasploit los simulate kev tawm tsam ntawm lub network patched. Cov cuab yeej no tso cai rau koj los xyuas kom meej tias koj cov chaw nres nkoj network tau ruaj ntseg zoo tiv thaiv kev hem thawj hauv ntiaj teb. Yog tias Metasploit tsis tuaj yeem siv qhov chaw nres nkoj uas muaj qhov tsis zoo yav dhau los, nws lees tias koj thaj ua tiav.
Kev Saib Xyuas Network
Rackmount PC
Embedded Computing
Industrial Portable Computers
Rugged Tablets
Rugged Laptop
Muaj vaj huam sib luag PC
Rugged Handheld
Advantech Industrial PC
