Izinto Okumele Zibheke Kulo Mkhakha Wokugcina Wokuvikela
Ukulondeka okwehlelekile kuyimiso evunyelwe kabanzi yekhompyutha nokuphepha kwenethiwekhi (bheka ku-Security Depth). Isisekelo esiyisisekelo ukuthi kuthatha izingqimba eziningi zokuzivikela ukuvikela ezihlukahlukene zokuhlaselwa kanye nezinsongo. Akukona nje kuphela ukuthi umkhiqizo noma inqubo eyodwa ingavikeli kuzo zonke izinsongo ezikhona, ngakho-ke idinga imikhiqizo ehlukene ngezinsongo ezihlukene, kodwa ukutholakala kwemigqa eminingi yokuzivikela kuyoba nethemba ukuthi kuvumeleke umkhiqizo owodwa ukuthi ubambe izinto ezingase zishintshe phambili ukuzivikela kwangaphandle.
Kunokuningi kwezicelo namadivaysi ongawasebenzisa kuzo izakhiwo ezahlukene-isofthiwe ye-antivirus, izibhamu, i-IDS (Izinqubo Zokuthola Ukungena) nokuningi. Ngamunye unomsebenzi ohlukile futhi uvikela kusuka kusethi ehlukene yokuhlaselwa ngendlela ehlukile.
Enye yobuchwepheshe obusha yi-IPS- Intrusion Prevention System. I-IPS ifana nokuhlanganisa i-IDS ne-firewall. I-IDS evamile izokungena noma ikuxwayise kumgwaqo osolisayo, kodwa impendulo ishiywe kuwe. I-IPS inezinqubomgomo nemithetho ukuthi iqhathanisa ithrafikhi yenethiwekhi. Uma ngabe yimuphi umgwaqo ophula izinqubomgomo futhi ulawula i-IPS ingahle ilungiswe ukuphendula kunokuba nje ikuxwayise. Izimpendulo ezijwayelekile zingase zivimbele yonke ithrafikhi kusuka ekhelini le-IP yomthombo noma ukuvimbela ithrafikhi engenayo kulelo port ukuze ivikele ikhompiyutha noma inethiwekhi ngokuvikela.
Kukhona izinhlelo zokuvimbela ukungena kwe-intrusion yenethiwekhi (NIPS) futhi kunezinhlelo zokuvimbela ukungena kwe-intrusion (HIPS). Nakuba kungabiza kakhulu ukusebenzisa i-HIPS- ikakhulukazi endaweni enkulu, ibhizinisi, ngincoma ukuphepha okusekelwe emakhaya lapho kungenzeka khona. Ukuyeka ukungena kanye nokutheleleka ezingeni ngalinye lomsebenzi kungasebenza kahle ekuvimbeleni, noma okungenani kuqukethe, izinsongo. Ngalokho engqondweni, nangu uhlu lwezinto okufanele uzibheke kulesisombululo se-HIPS senethiwekhi yakho:
- Akukhiphi AmaSignatures Akunamathele: Izimpawu ezisayinwe- noma eziyingqayizivele ezinsongweni eziziwa- zingenye yezindlela eziyinhloko ezisetshenziselwa isofthiwe efana ne-antivirus kanye nokutholakala kwe-intrusion (i-IDS) .Ukuwa kwamasignesha ukuthi bayasebenza. Isignesha ayikwazi ukuthuthukiswa kuze kube ngemuva kokusongela futhi ungase uhlaselwe ngaphambi kokuba isignesha idalwe. Isixazululo sakho se-HIPS kufanele sisebenzise ukutholakala okusekelwe ngesiginesha kanye nokutholakala okusekelwe kwe-anomaly okubeka isisekelo sokuthi umsebenzi "wenethiwekhi" obukeka kanjani kumshini wakho futhi uzophendula kunoma iyiphi ithrafikhi ebonakala engavamile. Isibonelo, uma ikhompiyutha yakho ingalokothi isebenzise i-FTP futhi ngokuzumayo ezinye izinsongo zizama ukuvula uxhumano lwe-FTP kusuka kukhompyutha yakho, i-HIPS izobona lokhu njengomsebenzi ongasebenzi.
- Isebenza Ngokucushwa Kwakho : Ezinye izixazululo ze-HIPS zingase zivimbele ngokwezinhlelo noma izinqubo abakwazi ukuziqapha nokuzivikela. Kufanele uzame ukuthola ama-HIPS angakwazi ukusingatha amaphakheji ezentengiselwano avela eshalofini kanye nanoma yiziphi izinhlelo zesiko ezikhulile ekhaya ongazisebenzisa. Uma ungasebenzisi izinhlelo zangokwezifiso noma ungabheki njengenkinga enkulu yemvelo yakho, okungenani uqinisekise ukuthi isisombululo sakho se-HIPS sivikela izinhlelo nezinqubo ozenzayo.
- Ikuvumela Ukudala Izinqubomgomo : Izixazululo eziningi ze-HIPS ziza nesethi enhle kakhulu yezinqubomgomo ezichazwe ngaphambilini nabathengisi ngokuvamile bazohlinzeka ngezibuyekezo noma ukukhulula izinqubomgomo ezintsha ukunikeza impendulo ethize ngezinsongo ezintsha noma ukuhlaselwa. Noma kunjalo, kubalulekile ukuthi unekhono lokudala izinqubomgomo zakho uma kwenzeka ukuthi unobungozi obuhlukile lapho umdayisi engacabangeli khona noma lapho usongo olusha luqhuma futhi udinga inqubomgomo ukuvikela uhlelo lwakho ngaphambi kokuthi umdayisi unesikhathi sokukhipha isibuyekezo. Udinga ukuqinisekisa ukuthi umkhiqizo oyisebenzisayo awunalo nje kuphela ikhono lakho lokudala izinqubomgomo, kodwa ukuthi indalo yenqubomgomo ilula ngokwanele ukuba uyiqonde ngaphandle kwamasonto okuqeqeshwa noma amakhono okuhlela ochwepheshe.
- Inikeza Ukubika Okuphakathi Nezokuphatha : Ngenkathi sikhuluma ngokuvikela okusekelwe kwamasosha amaseva ngabanye noma izisebenzi zokusebenza, izixazululo ze-HIPS ne-NIPS zibiza kakhulu futhi zingaphandle kwendawo yomsebenzisi wasekhaya ojwayelekile. Ngakho-ke, ngisho nalapho ukhuluma ngamaHIPS cishe udinga ukukucabangela ngombono wokuthumela ama-HIPS kumakhulu ama-desktops namaseva kunethiwekhi. Nakuba kuhle ukuba nokuvikeleka ezingeni ledeskithophu ngayinye, ukuphatha amakhulu amasistimu ngabanye, noma ukuzama ukwakha umbiko ohlanganisiwe kungahle kwenzeke ngaphandle kokubika okuphakathi okuhle nokuphatha umsebenzi. Uma ukhetha umkhiqizo, qinisekisa ukuthi ukubika kanye nokuphatha okuphakathi kwakho kukuvumela ukuba uthumele izinqubomgomo ezintsha kuyo yonke imishini noma ukudala imibiko evela kuyo yonke imishini evela endaweni eyodwa.
Kunezinye izinto ezimbalwa okudingeka uzigcine engqondweni. Okokuqala, ama-HIPS nama-NIPS awawona "isiliva sesiliva" sokuphepha. Zingaba ukwengeza okukhulu ekuvikeleni okuqinile, okugqoke ukufaka izibhamu kanye nezinhlelo zokusebenza ze-unqulo wesi arab phakathi kwezinye izinto, kodwa akufanele uzame ukuthatha indawo yobuchwepheshe obukhona.
Okwesibili, ukuqaliswa kokuqala kwesisombululo se-HIPS kungaba yinkimbinkimbi. Ukulungisa ukutholakala okusekelwe kumuntu okungaqondakali kudinga ukuthi kube nomsebenzi omuhle "wokubamba ngesandla" ukusiza uhlelo lokusebenza ukuthi luqonde ukuthi yini "evamile" ithrafikhi nokuthi yini engekho. Ungase uthole amaphutha amaningi amanga noma ukulahlekelwa okungalungile ngenkathi usebenzela ukusungula isisekelo salokho okuchaza umgwaqo "ovamile" womshini wakho.
Okokugcina, izinkampani ngokuvamile zithenga ngokusekelwe kulokho abangakwenza kinkampani. Ukuziphatha okujwayelekile kwezimali kubonisa ukuthi lokhu kulinganiswa ngokubuyiselwa kokutshalwa kwezimali, noma i-ROI. Abacwaningi bezimali bafuna ukuqonda uma betsha imali engumkhiqizo omusha noma ubuchwepheshe, kuzothatha isikhathi esingakanani ukuthi umkhiqizo noma ubuchwepheshe bukhokhele.
Ngeshwa, imikhiqizo yokuvikela inethiwekhi nekhompiyutha ayihambisani nalokhu okubunjiwe. Ukuphepha kusebenza ngaphezulu kwe-reverse-ROI. Uma umkhiqizo wokuphepha noma ubuchwepheshe busebenza njengoba kuhlanganiswe inethiwekhi izohlala iphephile- kodwa ngeke kube "inzuzo" yokukala i-ROI evela. Kufanele ubheke okuphambene nalokho futhi ucabange ukuthi inkampani ingahle ilahlekelwe kanjani uma umkhiqizo noma ubuchwepheshe bengekho. Imali engadingeka isetshenziswe kumaseva wokwakha kabusha, ukubuyisela idatha, isikhathi kanye nezinsiza zokunikezela abasebenzi bezobuchwepheshe ukuhlanza emva kokuhlaselwa, njll? Uma kungenalo umkhiqizo kungase kubangele ukulahlekelwa imali eyengeziwe kunokuba umkhiqizo noma ubuchwepheshe bukhokhele ukusebenzisa, mhlawumbe kunengqondo ukwenza kanjalo.