Nigute ushobora gutobora icyambu?
2024-09-23 13:25:09
Imbonerahamwe
1. Icyambu ni iki?
Umuyoboro wumuyoboro ni itumanaho ryanyuma rituma ibikoresho byohereza no kwakira amakuru. Tekereza nk'umuryango wemerera amakuru kunyura no hanze ya sisitemu. Ibikoresho, nka mudasobwa na seriveri, koresha ibyo byambu kugirango uhuze kandi wohereze amakuru kurubuga.
Ubwoko bwibyambu
Hariho ubwoko butandukanye bwibyambu, ariko bibiri mubisanzwe ni ibyambu bya Ethernet na TCP / UDP.
Ibyambu bya Ethernet byemerera guhuza umubiri ukoresheje insinga za Ethernet. Ibi bikoreshwa cyane murugo no murusobe rwimishinga kugirango uhuze insinga.
Ibyambu bya TCP / UDP ni ibyambu byumvikana bikoreshwa muguhitamo inzira cyangwa serivisi muburyo bwo kohereza amakuru. TCP (Transmission Control Protocol) yizewe kandi ikoreshwa mubikorwa nko gushakisha urubuga na imeri. UDP (Umukoresha Datagram Protocole) irihuta ariko ntabwo yizewe, akenshi ikoreshwa mugukurikirana no gukina kumurongo.
Imibare yicyambu
Porogaramu zitandukanye zitumanaho binyuze mumibare yagenwe mbere. Urugero:
HTTP ikoresha port 80 kumurongo wurubuga.
HTTPS ikoresha icyambu 443 kugirango umutekano wurubuga rutekanye.
FTP (File Transfer Protocol) ikoresha port 21.
Kumenya ibyambu bikoreshwa muri serivisi zihariye, urashobora kuyobora no kubipakira neza.
2. Kuki Gufata ibyambu byurusobe ari ngombwa?
Gufata ibyambu byumuyoboro nibyingenzi mukubungabunga umutekano numutekano wurusobe rwawe. Ibyambu bidashyizwe ahagaragara birashobora kwerekana sisitemu yawe muburyo butandukanye bwintege nke.
Impungenge z'umutekano
Ibyambu bifunguye cyangwa bidafunguwe ni intego rusange yibitero bya interineti nko gusikana ibyambu, aho ba hackers bagenzura sisitemu kubyambu byoroshye, hamwe nibitero bya DoS (Guhakana serivisi) byuzuza sisitemu numuhanda. Ibi bitero birashobora gutuma habaho kutubahiriza amakuru, gutakaza serivisi, cyangwa kubona amakuru atabifitiye uburenganzira.
Bugs ya software
Serivise zishaje cyangwa zidashizweho zishobora kuba zirimo amakosa ashobora gukoreshwa nabateye. Kurugero, verisiyo zishaje za OpenSSL zashoboraga kwibasirwa nibitero nka Heartbleed, byemereraga uburenganzira butemewe bwo kubona amakuru. Gusiba buri gihe byemeza ko amakosa akosowe kandi urusobe rwawe rukomeza kuba umutekano.
Imyitozo myiza
Kugirango umenye umutekano wibyambu byawe, burigihe ukoreshe firewall kugirango ugabanye serivisi zikomeye kandi ushyire mubikorwa sisitemu yo kwinjira (IDS) kugirango ukurikirane ibikorwa biteye amakenga. Gufata ibyo byambu buri gihe murwego rwo kubungabunga umutekano birashobora kugabanya cyane ibyago byibitero.
Gufata ibyambu byurusobe bisaba software hamwe nibikoresho byuma kugirango ucunge neza kandi ukurikirane urusobe rwawe.
Porogaramu
Ibikoresho byinshi bya software birashobora kugufasha gukurikirana no kumenya ibyambu byoroshye:
Wireshark numuyoboro ukomeye wa protocole isesengura igufasha kugenzura amakuru anyura murusobe rwawe.
Nmap ikoreshwa cyane mubuvumbuzi no kugenzura umutekano, itanga amakuru arambuye kubyerekeye ibyambu bifunguye.
Nessus nigikoresho cyo gusikana intege nke zifasha kumenya intege nke murusobe rwawe, harimo ibyambu bitaribyoherejwe.
Ibyuma
Iyo ukorana numuyoboro uhuza, ibyuma bimwe nibyingenzi:
Umuyoboro wibikoresho bifasha gucunga imiyoboro myinshi ya Ethernet, kwemeza ko urusobe rwawe rutunganijwe kandi rinini.
Imiyoboro ya Ethernet hamwe na RJ45 birakenewe muguhuza ibikoresho binyuze ku byambu bifatika.
Ibindi bikoresho
Ibikoresho byinyongera bishobora gufasha harimo:
Ibikoresho byo gusuzuma umuyoboro kugirango ukemure ibibazo.
Shira insinga zo guhuza ibikoresho muburyo butaziguye.
Igikoresho gisunika cyo gutegura insinga za neti yihariye.
Ibi bikoresho byahujwe bigufasha gutobora ibyambu byurusobe neza kandi ukemeza ko sisitemu yawe ikomeza kuba umutekano kandi igezweho.
4. Intambwe ku yindi Ubuyobozi bwo Gutegura Umuyoboro
Intambwe ya 1: Menya ibyambu byoroshye
Mbere yo guterura icyambu, intambwe yambere nukumenya ibyambu byoroshye. Ibi byemeza ko imbaraga zawe zo guterura zigamije kandi zifite akamaro.
Gukoresha Umuyoboro
Bumwe mu buryo bunoze bwo kumenya ibyambu bifunguye kandi byoroshye ni ugukoresha scaneri ya neti nka Nmap. Nmap isikana umuyoboro wawe ku byambu bifunguye kandi itanga raporo irambuye, yerekana ibyambu bigaragara kandi bishobora kwibasirwa.
Koresha Nmap, koresha gusa itegeko rikurikira ryo gusikana urusobe rwawe:
nmap -sV
Iri tegeko ryerekana urutonde rwose rufunguye, serivisi zikorera kuri ibyo byambu, na verisiyo ya software ikoreshwa.
Ibiti bya Firewall
Ubundi buryo ni ugusesengura ibiti bya firewall. Firewalls yinjira mumodoka yinjira kandi isohoka, harimo kugerageza kugera ku byambu bifunguye. Mugusubiramo ibi biti, urashobora kumenya ibikorwa biteye amakenga cyangwa kugerageza kenshi guhuza ibyambu byoroshye. Ibi ni ingirakamaro cyane mugushakisha icyambu gisikana kugerageza kubatera.
Kwipimisha Intoki
Kuburyo bwokoresha amaboko menshi, urashobora kugerageza ibyambu byintoki ukoresheje ibikoresho nka telnet cyangwa netstat:
Telnet: Igikoresho-umurongo wigikoresho kigufasha kugerageza niba icyambu runaka gifunguye kumashini ya kure. Urugero:
Netstat: Koresha iki gikoresho kugirango ugenzure imiyoboro ikora hamwe nicyambu cyo gutegera kuri mashini yaho:
netstat -an
Ubu buryo buguha uburyo bunoze bwo kugenzura imiyoboro yawe.
Intambwe ya 2: Kuramo ibice bikenewe cyangwa bigezweho
Umaze kumenya ibyambu byoroshye, intambwe ikurikira ni ugukusanya ibice bikenewe cyangwa ibishya kugirango ubikosore.
Amakuru agezweho y'abacuruzi
Reba amakuru agezweho kubacuruzi ba software bashinzwe serivisi ikorera ku cyambu cyoroshye. Abacuruzi nka Microsoft, Cisco, hamwe nogukwirakwiza kwa Linux buri gihe basohora amakuru yumutekano akemura intege nke. Ivugurura akenshi ririmo ibice bya serivisi zurusobe zishobora kugaragara hifashishijwe ibyambu bifunguye.
Kuvugurura Firmware
Ntiwibagirwe kugenzura ivugurura ryibikoresho bya neti yawe, nka router, switch, cyangwa firewall. Porogaramu ishaje irashobora kugira intege nke zisiga ibyambu bifunguye cyangwa bidakwiye. Sura urubuga rwabakora kugirango ukuremo verisiyo yanyuma ya software hanyuma uyishyire mubikoresho byawe.
Porogaramu
Urashobora kandi gukuramo ibice biva ahantu hizewe nka CVE data base (Common Vulnerabilities and Exposures), urutonde rwintege nke zizwi nibisubizo byazo. Witondere kugenzura niba ibipapuro ari ukuri kugirango wirinde gukuramo dosiye mbi cyangwa zangiritse.
Intambwe ya 3: Koresha Impinduka cyangwa Iboneza
Hamwe nibisabwa bikenewe hamwe nibivugururwa mumaboko, igihe kirageze cyo kubishyira mubikorwa no kugena imiyoboro yawe.
Automatic vs Intoki
Urashobora gushiraho ibice haba mu buryo bwikora cyangwa intoki.
Gutera byikora byoroshye, kuko sisitemu nyinshi zo gukora hamwe nububiko bwa software birashobora kugenwa gukuramo no gukoresha ibishya mu buryo bwikora. Ibikoresho nka WSUS (Serivisi zivugurura za Windows Serveri) na SolarWinds birashobora gutangiza uburyo bwo gutondeka imiyoboro yimishinga.
Gukoresha intoki biguha kugenzura byinshi ariko bigusaba gukuramo no kwishyiriraho ibice wenyine. Ubu buryo butwara igihe kinini ariko bukwemeza ko uzi impinduka zose zakozwe muri sisitemu.
Shiraho Firewall na Routers
Usibye porogaramu ya patching, ugomba gushiraho firewall yawe na router kugirango ufunge cyangwa ubuze uburyo bwo gufungura ibyambu.
Dore inzira yoroheje intambwe ku yindi:
1.Gera kuri interineti ya firewall: Injira mumwanya wibikoresho bya firewall.
2. Shakisha ibyambu bifunguye: Kujya mu gice ushobora gucunga ibyambu.
3.Funga ibyambu bitari ngombwa: Hagarika ibyambu bidakoreshwa cyane cyangwa bisabwa.
4. Ongeraho amategeko ya firewall: Shiraho amategeko yemerera gusa traffic kuva aderesi ya IP yizewe cyangwa imiyoboro imwe n'imwe.
5.Bika kandi ushyire mubikorwa: Numara kurangiza, menya neza kubika no kugerageza igenamiterere rishya.
Kwemeza Impinduka
Nyuma yo gushira ibice cyangwa guhindura ibishushanyo, ni ngombwa kwemeza ko impinduka zatangiye gukurikizwa. Koresha ibikoresho byo gukurikirana imiyoboro nka Nmap cyangwa Wireshark kugirango wongere usuzume urusobe kandi urebe ko intege nke zashizweho. Shakisha ibimenyetso byerekana ko ibyambu byangiritse ubu bifite umutekano cyangwa bifunze.
Intambwe ya 4: Gerageza Icyambu
Kwipimisha nigice cyingenzi muburyo bwo gutema kugirango ukosore ibyakozwe neza.
Ibizamini bya nyuma
Iyo patch imaze gukoreshwa, ongera usuzume urusobe rwawe ukoresheje Nmap cyangwa ibikoresho bisa kugirango urebe ko ibyambu bitagishoboye kugaragara.
Kwiruka:
nmap -sV
Menya neza ko verisiyo ya serivise yavuguruwe kandi ko ibyambu byose bitari ngombwa byafunzwe.
Koresha ibikoresho byo Kwinjira
Kugirango usuzume byimbitse, tekereza gukoresha ibikoresho byo kugerageza byinjira nka Metasploit kugirango wigane ibitero kuri neti. Ibi bikoresho bigufasha kugenzura ko ibyambu byawe bifite umutekano muke birwanya iterabwoba ryisi. Niba Metasploit idashobora gukoresha icyambu cyangiritse mbere, iremeza ko patch yawe yagenze neza.
Gukurikirana Urusobe
PC PC
Kubara
Mudasobwa zigendanwa
Ibinini binini
Mudasobwa igendanwa
Akanama gashinzwe inganda PC
Ikiganza
PC Yinganda PC
