Mokhoa oa ho penta boema-kepe ba marang-rang?
2024-09-23 13:25:09
Tafole ea likateng
1. Network Port ke eng?
Sebaka sa marang-rang ke sebaka sa puisano se lumellang lisebelisoa ho romella le ho amohela data. E nahane e le monyako o lumellang hore boitsebiso bo fete le ho tsoa tsamaisong. Lisebelisoa, joalo ka likhomphutha le li-server, li sebelisa likou tsena ho theha likhokahano le ho fetisa data ka marang-rang.
Mefuta ea li-Network Ports
Ho na le mefuta e fapaneng ea likou tsa marang-rang, empa tse peli tse atileng haholo ke likou tsa Ethernet le likou tsa TCP/UDP.
Likou tsa Ethernet li lumella likhokahano tsa 'mele lipakeng tsa lisebelisoa tse sebelisang likhoele tsa Ethernet. Tsena li sebelisoa haholo marang-rang a lapeng le a likhoebo bakeng sa likhokahano tsa mehala.
Likou tsa TCP/UDP ke likou tse bohlale tse sebelisetsoang ho tsebahatsa lits'ebetso kapa lits'ebeletso tse itseng phetisong ea data. TCP (Transmission Control Protocol) e ka tšeptjoa ebile e sebelisetsoa mesebetsi e kang ho bala marang-rang le imeile. UDP (User Datagram Protocol) e potlakile empa e sa tšepahale, hangata e sebelisetsoa ho phallela le ho bapala lipapaling tsa marang-rang.
Linomoro tsa Kou
Lisebelisoa tse fapaneng li buisana ka linomoro tse boletsoeng esale pele. Ka mohlala:
HTTP e sebelisa port 80 bakeng sa sephethephethe sa marang-rang.
HTTPS e sebelisa port 443 bakeng sa sephethephethe se sireletsehileng sa marang-rang.
FTP (File Transfer Protocol) hangata e sebelisa boema-kepe ba 21.
Ka ho tseba hore na ke likou life tse sebelisetsoang lits'ebeletso tse ikhethileng, u ka li laola le ho li lokisa ka nepo.
2. Ke Hobane'ng ha Patching Network Ports e le Bohlokoa?
Ho kenya likou tsa marang-rang ho bohlokoa bakeng sa ho boloka ts'ireletso le botsitso ba marang-rang a hau. Likou tse sa ngolisoang li ka pepesetsa sistimi ea hau mefokolong e mengata e fapaneng.
Matšoenyeho a Tšireletso
Likou tse butsoeng kapa tse sa ngolisoang ke sepheo se tloaelehileng bakeng sa litlhaselo tsa marang-rang tse kang ho hlahloba koung, moo linokoane li batlisisang litsamaiso tsa likou tse fihlellehang, le litlhaselo tsa DoS (Denial of Service) tse imetsang litsamaiso tse nang le sephethephethe. Litlhaselo tsena li ka lebisa ho tlolo ea data, tahlehelo ea litšebeletso, kapa phihlello e sa lumelloeng ea tlhaiso-leseling e tebileng.
Software Bugs
Litšebeletso tsa khale tsa marang-rang kapa tse sa ngolisoang li ka ba le liphoso tse ka sebelisoang ke bahlaseli. Mohlala, mefuta ea khale ea OpenSSL e ne e le kotsing ea ho hlaseloa joalo ka Heartbleed, e lumelletseng phihlello e sa lumelloeng ea data e patiloeng. Ho lokisoa khafetsa ho netefatsa hore likokoana-hloko tsena lia lokisoa 'me marang-rang a hau a lula a sireletsehile.
Mekhoa e Molemo ka ho Fetisisa
Ho netefatsa ts'ireletseho ea likou tsa marang-rang a hau, sebelisa li-firewall ka linako tsohle ho thibela phihlello ea lits'ebeletso tsa bohlokoa le ho kenya ts'ebetsong lits'ebetso tsa tlhahlobo ea intrusion (IDS) ho beha leihlo mesebetsi e belaetsang. Ho pakela likou tsena khafetsa e le karolo ea leano le felletseng la ts'ireletso ho ka fokotsa haholo kotsi ea litlhaselo.
Ho kopanya likou tsa marang-rang ho hloka lisebelisoa tsa software le hardware ho laola le ho lekola marang-rang a hau ka nepo.
Software
Lisebelisoa tse 'maloa tsa software li ka u thusa ho beha leihlo le ho tseba likou tse kotsing:
Wireshark ke analyzer e matla ea marang-rang e u lumellang hore u hlahlobe data e fetang marang-rang a hau.
Nmap e sebelisoa haholo bakeng sa ho sibolla marang-rang le tlhahlobo ea ts'ireletso, e fana ka leseli le felletseng mabapi le likou tse bulehileng.
Nessus ke sesebelisoa sa ho hlahlobisisa ka tlokotsi se u thusang ho tseba bofokoli ba netweke ea hau, ho kenyeletsoa le likou tse sa ngolisoang.
Lisebelisoa
Ha o sebetsa le likhokahano tsa marang-rang, lisebelisoa tse itseng lia hlokahala:
Liphanele tsa marang-rang li thusa ho laola likhokahano tse ngata tsa Ethernet, ho netefatsa hore marang-rang a hau a hlophisitsoe ebile a ka senyeha.
Lithapo tsa Ethernet le likhokahano tsa RJ45 lia hlokahala bakeng sa ho hokahanya lisebelisoa ka likoung tsa 'mele.
Lisebelisoa tse ling
Lisebelisoa tse ling tse ka thusang li kenyelletsa:
Lisebelisoa tsa tlhahlobo ea marang-rang ho rarolla mathata.
Kopanya lithapo bakeng sa ho hokahanya lisebelisoa ka kotloloho.
Sesebelisoa sa crimping bakeng sa ho lokisa likhoele tsa marang-rang tse tloaelehileng.
Lisebelisoa tsena li kopantsoe li u lumella ho pata likou tsa marang-rang ka nepo le ho netefatsa hore sistimi ea hau e lula e bolokehile ebile e le nakong.
4. Tataiso ea Mohato ka Mohato ea ho Patching Network Port
Mohato oa 1: Tseba Li-Ports tsa Network tse Vulnerable
Pele o kopanya boema-kepe ba marang-rang, mohato oa pele ke ho tseba hore na ke likou life tse kotsing. Sena se tiisa hore matsapa a hau a ho patch a lebisitsoe ebile a sebetsa.
Ho sebelisa Network Scanners
E 'ngoe ea litsela tse sebetsang hantle tsa ho khetholla likou tse bulehileng le tse tlokotsing ke ka ho sebelisa li-scanner tsa marang-rang tse kang Nmap. Nmap e hlahloba marang-rang a hau bakeng sa likou tse bulehileng 'me e fana ka tlaleho e qaqileng, e totobatsang hore na ke likou life tse pepesehileng le tse ka bang kotsing.
Ho sebelisa Nmap, tsamaisa feela taelo e latelang ho hlahloba marang-rang a hau:
nmap -sV
Taelo ena e thathamisa likou tsohle tse bulehileng, lits'ebeletso tse sebetsang likoung tseo, le mofuta oa software e sebelisoang.
Li-Firewall Logs
Mokhoa o mong ke ho sekaseka li-firewall logs tsa hau. Li-firewall li kenya sephethephethe se kenang le se tsoang, ho kenyeletsoa le boiteko leha e le bofe ba ho kena likoung tse bulehileng. Ka ho hlahloba lintlha tsena, u ka tseba lintho tse belaetsang kapa liteko tse pheta-phetoang tsa ho hokela likoung tse tlokotsing. Sena se bohlokoa haholo bakeng sa ho bona liteko tse ka bang teng tsa ho hlahloba koung ke bahlaseli.
Tlhahlobo ea Matsoho
Bakeng sa mokhoa o mong oa ho sebetsa, o ka leka likou tsa marang-rang ka letsoho u sebelisa lisebelisoa tse kang telnet kapa netstat:
Telnet: Sesebelisoa sena sa mola oa taelo se u lumella ho etsa liteko haeba kou e itseng e butsoe mochining o hole. Ka mohlala:
Netstat: Sebelisa sesebelisoa sena ho lekola likhokahano tse sebetsang le likou tse mamelang mochining oa hau oa lehae:
netstat -an
Mekhoa ena e u fa taolo e eketsehileng ea granular holim'a tlhahlobo ea marang-rang ea hau.
Mohato oa 2: Khoasolla Lipache kapa Lintlafatso tse Hlokahalang
Ha u se u hlokometse likou tse tlokotsing, mohato o latelang ke ho bokella likou tse hlokahalang kapa lintlafatso ho li lokisa.
Lintlafatso tsa barekisi
Sheba lintlafatso ho tsoa ho morekisi oa software ea ikarabellang bakeng sa ts'ebeletso e sebetsang boema-kepeng ba tlokotsing. Barekisi ba joalo ka Microsoft, Cisco, le liphatlalatso tse fapaneng tsa Linux khafetsa ba lokolla liapdeite tsa ts'ireletso tse sebetsanang le bofokoli. Lintlafatso tsena hangata li kenyelletsa likhechana tsa lits'ebeletso tsa marang-rang tse ka hlahisoang ke likou tse bulehileng.
Lintlafatso tsa Firmware
Se ke oa lebala ho sheba liapdeite tsa firmware bakeng sa lisebelisoa tsa hau tsa marang-rang, joalo ka lirutha, li-switches, kapa li-firewall. Firmware ea khale e ka ba le likotsi tse sieang likou li butsoe kapa li sa hlophisoa ka nepo. Etela sebaka sa marang-rang sa moetsi ho khoasolla liphetolelo tsa morao-rao tsa firmware le ho li sebelisa ho hardware ea hau.
Patching Software
U ka khoasolla lipache ho tsoa mehloling e tsebahalang joalo ka database tsa CVE (Common Vulnerabilities and Exposures), tse thathamisang bofokoli bo tsebahalang le tharollo ea bona. Etsa bonnete ba hore u netefatsa bonnete ba lipache ho qoba ho khoasolla lifaele tse mpe kapa tse senyehileng.
Mohato oa 3: Sebelisa Patch kapa Liphetoho tsa Tlhophiso
Ka lipache tse hlokahalang le liapdeite, ke nako ea ho li sebelisa le ho hlophisa litlhophiso tsa marang-rang a hau.
Automatic vs. Manual Patching
U ka sebelisa li-patches ka boiketsetso kapa ka letsoho.
Ho patching ka othomathike ho bonolo, kaha lits'ebetso tse ngata tsa ts'ebetso le liphutheloana tsa software li ka hlophisoa hore li ka khoasolla le ho kenya lisebelisoa ka bo eona. Lisebelisoa tse kang WSUS (Windows Server Update Services) le SolarWinds li ka iketsetsa mokhoa oa ho patch bakeng sa marang-rang a likhoebo.
Ho patching ka letsoho ho u fa taolo e eketsehileng empa ho hloka hore u khoasolle le ho kenya li-patches ka bouena. Mokhoa ona o nka nako e ngata empa o netefatsa hore o tseba liphetoho tsohle tse entsoeng tsamaisong ea hau.
Lokisa li-firewall le li-routers
Ntle le software ea ho patch, o lokela ho lokisa li-firewall le li-routers ho koala kapa ho thibela phihlello ea likou tse bulehileng.
Mona ke tataiso e bonolo ea mohato ka mohato:
1. Fumana sebopeho sa firewall: Kena ho phanele ea tlhophiso ea firewall ea hau.
2.Locate likou tse bulehileng: Tsamaea ho ea karolong eo u ka khona ho laola phihlello ea boema-kepe.
3.Koala likou tse sa hlokahaleng: Thibela likou tse sa sebelisoeng ka mafolofolo kapa tse hlokehang.
4.Eketsa melao ea firewall: Etsa melao e lumellang feela sephethephethe ho tsoa ho liaterese tsa IP tse tšepahalang kapa marang-rang a itseng.
5.Boloka 'me u sebelise litlhophiso: Hang ha u qetile, etsa bonnete ba hore u boloka le ho leka litlhophiso tsa hau tse ncha.
Netefatsa Liphetoho
Kamora ho sebelisa patch kapa ho fetola litlhophiso, ho bohlokoa ho netefatsa hore liphetoho li qalile. Sebelisa lisebelisoa tsa ho beha leihlo marang-rang joalo ka Nmap kapa Wireshark ho hlahloba marang-rang hape le ho netefatsa hore bofokoli bo kentsoe. Batla mats'oao a hore likou tsa pele tse neng li le tlokotsing li se li bolokehile kapa li koetsoe.
Mohato oa 4: Lekola Port e Patched
Teko ke karolo ea bohlokoa ea ts'ebetso ea ho patch ho netefatsa hore litokiso tse sebelisitsoeng li sebetsa hantle.
Liteko tsa Post-Patching
Kamora hore patch e sebelisoe, hlahloba marang-rang a hau hape u sebelisa Nmap kapa lisebelisoa tse tšoanang ho netefatsa hore likou tse tlokotsing ha li sa pepesoa.
Matha:
nmap -sV
Netefatsa hore mefuta ea litšebeletso e ntlafalitsoe le hore likou life kapa life tse sa hlokahaleng li se li koetsoe.
Sebelisa Lisebelisoa tsa Teko ea ho Kena
Bakeng sa tlhahlobo e tebileng, nahana ka ho sebelisa lisebelisoa tsa tlhahlobo ea ho kenella tse kang Metasploit ho etsisa litlhaselo marang-rang a patiloeng. Lisebelisoa tsena li u lumella ho netefatsa hore likou tsa marang-rang tsa hau li sirelelitsoe ka nepo khahlanong le litšokelo tsa lefatše la 'nete. Haeba Metasploit e sa khone ho sebelisa boema-kepe bo neng bo le kotsing pele, e tiisa hore patch ea hau e atlehile.
Tlhokomelo ea Marang-rang
Rackmount PC
Embedded Computing
Lik'homphieutha tse nkehang habonolo tsa indasteri
Matlapa a Mangata
Laptop e thata
Indasteri Panel PC
Handheld e matsutla
Advantech Industrial PC
