Back to Question Center
0

Semalt Islamabad Expert: Nzira Yokudzivisa Izvozvo Zvakafanana Sekutaura Talk

1 answers:

Hurukuro inonzi TalkTalk yaiva mumisoro yegore rapera sezvo vanopfuura 150 000 vatengesi vakanyunyuta kuti zvavanenge vadzidza zvakabiwa. Izvi zvaishamisika nokuti vashambadzi vangave vakakwanisa kupikiswa kwakadai sekuve vaduku semakore gumi namashanu, uye kuputsa kunoita kuti Hurukuro Hurukuro inopfuura $ 40 Mamiriyoni. Zvinotyisa, uyo akarwisa akashandisa mujenya weSQL kuita basa rake, uye kurwiswa kwakashandisa dzimwe nzvimbo dzakakurumbira uye dzakanakisisa dzekushaya simba paIndaneti.

Mutengi Wekutengesa Mukubudirira we Semalt , Michael Brown, anovimbisa kuti pasinei nokuti ave aripo kwemakore uye ari nepamusoro pewebsite, kushungurudzika kwakaramba kuchiratidza mabhizinesi uye vakataura nezvekuvhiringidza kwemavara. Zvinyanya kukosha, zvakashandiswa mukurumbira wekunyora kwepabhesi muRussia, uko mazita emadhora anosvika mabhiriyoni nemapepiswedi, pamwe chete nekubatana kwavo, zvakabirwa, uye maImis email ema1 400 akapfigirwa.

Veracode yakaongorora data:

Kubva mu-app-cloud-based nehutano hwekuchengetedza ine mapurogiramu emabhiza anopfuura 50,000, Veracode ndiye wokutanga kuongorora dambudziko racho. Yakarongedza zvose zvekushanda kubva muna 2012 kusvika muna 2014 uye yakawana kuti sject ye SQL yakanga ichivhiringidza dheedhi rose paIndaneti. Izvi zvakaita kuti mamwe makambani ezvokuchengetedza vabvunze kana zvichikwanisa kuvimba nemaitiro ekuchengetedzwa kwenyika kana kwete.

Tarisa, uye iwe uchaiwana:

> Sezvo masangano akawanda nemakambani kunzwisisa kuti kuvhara kwekombiyuta ndekutyisidzira kukuru, vamwe havana kutenda kana kutora matanho pamusoro pevashandi vekunyora mabhuku. Sezvazvino, vanovimba nenhamba shoma yezvidziviriro zvakadai se-IDS, IPS system, uye firewalls.Asi zvakadaro, ivo vanoda zvakanakisisa uye zvakatendeseka mitambo-yakadzika maitiro kuitira kuti nzira dzisina kunaka dzisarwisa kana kuti dzishatise maitiro avo webhutsetse.Zvino kutyisidzirwa kweSQi kwakakura, hakugoneki.

Mufananidzo mukuru:

VaKybercriminals vanopinda muchirongwa chekunyora uye zvikwata zvekushanda uye zvivako zvekambani dzakasiyana-siyana kuti vawane rusununguko kunyanya SQLi. Iwe haufaniri kutendera kuti ikurove iwe. Saka, mhinduro ndeyekuongorora zviuru zvezvivako zvekugadzira panguva imwe chete uye kutsvaga nzvimbo dzisingazivikanwe kana kuti dzinoshungurudza kunze kwekambani yeIp corporate.

Pane imwe nguva haina kukwana:

Paunonyatsoona huwandu hwakazara hwehutachiona hwemapuraneti, kuongorora kweku-ad-hoc kamwe chete kwekanguva hakukwani. Saka, iwe unofanirwa kuwana yakazvigadzika gore-based method zvakare iyo ichakubatsira iwe kuchengetedza yakachengeteka web perimeters uye ichatarisa iyo website yose iwe. Zvakakosha kuti kambani ichengetedze nhepfenyuro nemapurogiramu ayo kubva kune zvityiso zvakadai nekushandura mitemo yayo nekudzivirira zvose zvisingakwanisi.

Iva nehasha:

Mawebhusayithi ose asina kutenderwa anofanira kupfigirwa nekukurumidza kana uchida kuderedza zvingangoita. Nokuda kweizvi, iwe unofanirwa kuendesa njodzi yekuchengetedzwa kwekuchengetedza kubva ku autom automation application chekuchengetedza mukati webhuware webhuware (WAF). Izvi zvichadzivirira kambani yako kubva pamatambudziko kusvikira zviratidzo zvichishandurwa. Hapana kambani kana hurongwa huri muzana hutete hwakachengeteka uye kusvika kune chiratidzo, asi nekushanduka kwe cyber kurwisa, unogona kuvimbisa kuchengeteka kwako paIndaneti. Kuteerera nyevero haisi chikonzero uye chero ani zvake asina kutora matanho anokosha angazviwana ari muhombodo yeTalkTalk uye anogona kukuvadza mukurumbira wake pamberi pevatengi.

November 29, 2017
Semalt Islamabad Expert: Nzira Yokudzivisa Izvozvo Zvakafanana Sekutaura Talk
Reply