IDS - kuyini? Intrusion Ukuthola System (IDS) njengendlela umsebenzi?

IDS - kuyini? lokhu kanjani uhlelo ukusebenza? System Intrusion Ukuthola - a hardware noma isofthiwe ukuthola ukuhlaselwa nomsebenzi ezinonya. Asiza amanethiwekhi kanye zama-computer ukuze abanike wenqaba efanele. Ukuze kuzuzwe lokhu, IDS iqoqa ulwazi kusuka eziningi ohlelweni noma inethiwekhi imithombo. Khona-ke IDS ihlaziya ukunquma khona ukuhlaselwa. Lesi sihloko izozama ukuphendula umbuzo: "? IDS - kuyini futhi ziyini"

Yiziphi intrusion ukubona izinhlelo (IDS)

izinhlelo Imininingwane namanethiwekhi Njalo sibhekana Cyber-ukuhlaselwa. Firewalls kanye unqulo wesi arab ukubonakalisa zonke lezi ukuhlaselwa akwanele, ngoba bayakwazi ukuvikela "emnyango ongaphambili" kwetinhlelo tangcondvomshini namanethiwekhi kuphela. Okunye intsha, wacabanga bona kubaduni, njalo scouring internet beyofuna izikhala zokuvikela.

Ngenxa World Wide Web abanazo eziningi imahhala zesofthiwe elimazayo - yimuphi Slammer, slepperov nezinhlelo ezifanayo ezinonya. Isevisi kubaduni professional uncintisana izinkampani iwukudambisa nomunye. Ngakho ukuthi izinhlelo ukuthi ukuthola ayehlasela (intrusion ukubona izinhlelo), - esiphuthumayo. Akumangalisi ukuthi nsuku zonke eziba yilo esetshenziswa kabanzi.

izakhi IDS

Izinto IDS zihlanganisa:

• umtshina subsystem, injongo okuyinto - ekuqongeleleni inethiwekhi izenzakalo noma ikhompyutha izinhlelo;
• ukuhlaziywa subsystem ukuthi kuthola ukuhlaselwa Cyber nomsebenzi ezingabazisayo;
• isitoreji ukulondoloza ulwazi ngezenzakalo imiphumela ukuhlaziya ukuhlaselwa Cyber nezenzo okungagunyaziwe;
• ukuphathwa kwekhonsoli ngawo IDS kungenzeka ukusetha imingcele, ukuqapha isimo senethiwekhi (noma uhlelo lwe-computer), ukwazi ukufinyelela ulwazi mayelana Kutholwe kuhlasela ukuhlaziywa subsystem nezenzo ezingekho emthethweni.

Eqinisweni, abaningi bangase babuze, 'lihunyushwe kanjani IDS? " Ukuhumusha kusuka IsiZulu kuzwakala "uhlelo Othola kubahlaseli ashisayo."

Imisebenzi eyisisekelo ukuxazulula nsada uhlelo ukuthola

Intrusion Ukuthola System has imigomo emibili eyinhloko: ukuhlaziya yokwaziswa imithombo kanye impendulo efanele, esekelwe ngemiphumela yalo ukuhlaziywa. Ukuze sikwazi ukufeza lezi imisebenzi IDS uhlelo wenza izenzo ezilandelayo:

• uqaphe futhi ihlaziya umsebenzi womsebenzisi;
• It is bekwi-audit ukucushwa kwesistimu kanye nobuthaka bayo;
• It uhlola ubuqotho ezibucayi amafayela system kanye namafayela idatha;
• uqhuba ukuhlaziya ngokwezibalo kwemininingwane uhlelo uthi esekelwe ukuqhathanisa nemibandela okwenzeka ngesikhathi sokuhlaselwa okwaziwayo kakade;
• It ukubalwa kwezimali yesistimu yokusebenza.

Lokho anganikeza nsada uhlelo ukuthola futhi ukuthi ngeke yena angakwazi ukukhokhela

Ungayisebenzisa ukufeza lokhu okulandelayo:

• ngcono ubuqotho kwemigomo ingqalasizinda;
• ukulandelela umsebenzi womsebenzisi ku usuku okwaqala yayo ohlelweni bese isicelo umonakalo noma ngokwenza noma yiziphi izenzo okungagunyaziwe;
• ukuhlonza futhi wazise mayelana nalolu shintsho, noma ukususa idatha;
• Okuzenzakalelayo imisebenzi ukuqapha inthanethi ukuze uthole ukuhlaselwa yakamuva kakhulu;
• ukubona iphutha ukucushwa kwesistimu;
• ukubona ukuhlaselwa ekuqaleni futhi ikwazise.

I IDS abakwazi ukukwenza:

• ukugcwalisa izikhala zenethiwekhi yezifiso;
• indima compensatory ukudlala uma kwenzeka ababuthakathaka ukuhlonza ukuqinisekisa izindlela zokuxhumana noma zekhompyutha uqaphe;
• Kufanele kuphawulwe ukuthi IDS akuyona njalo babhekane nezinkinga ezihlobene ne-ukuhlaselwa ezingeni iphakethe (iphakethe-level).

IPS (nsada uhlelo lokuvikela) - IDS Kuyaqhubeka

IPS imele "uhlelo nsada zokuvimbela." Lokhu eziphambili, ukusebenza okuningi IDS izinhlobo. IPS IDS zinhlelo esisheshayo (ngokungafani kuya evamile). Lokhu kusho ukuthi bangakwazi azigcini ngokubalula, irekhodi nesixwayisi ngalokhu kuhlasela, kodwa futhi ukwenza imisebenzi yokuphepha. Le misebenzi ifaka compounds kabusha futhi ivimbela amaphakethe engenayo traffic. Esinye isici-IPS wukuthi basebenza inthanethi futhi kungaba ngokuzenzakalelayo ukuvimba ukuhlaselwa.

Zenyathi IDS indlela ukuqapha

NIDS (ie IDS, okuyinto asiqaphile yonke inethiwekhi (inethiwekhi)) wahlanganyela ukuhlaziywa ithrafikhi subnets futhi iphathwe liphakathi. ilungiselelo njalo NIDS eziningana ukuqapha ingafinyelela usayizi kahle esikhulu inethiwekhi.

Basebenza kwimodi ngokobulili (ie hlola wonke amaphakethe engenayo, esikhundleni nikwenza ngokukhetha) ngokuqhathanisa subnet ithrafikhi sokuhlaselwa okwaziwayo ngomtapo yayo. Lapho kuba khona okuhlaselayo uchazwa noma ithole umsebenzi okungagunyaziwe, umlawuli uthunyelwa i-alamu. Nokho, kufanele kushiwo ukuthi inethiwekhi enkulu nge esiphithiphithini NIDS ngezinye izikhathi asikwazi ukumelana nokushintsha kwamandla wonke amaphakethe Imininingwane test. Ngakho-ke, kukhona kungenzeka ukuthi phakathi "ihora rush", ngeke bakwazi ukubona kuhlasela.

NIDS (kususelwe kunethiwekhi IDS) - lawa izinhlelo zihlanganisiwe kalula entsha inethiwekhi yomphindwa njengoba ithonya kakhulu ekusebenzeni kwazo, abanayo, ngokuba yekwentiwa. Bathi nje fixed kulotshwe futhi ikwazise, ngokungafani esisheshayo uhlobo IPS izinhlelo okuxoxwe ngazo ngenhla. Nokho, kumelwe futhi ishiwo IDS kususelwe kunethiwekhi, lokhu uhlelo ezingeke uhlaziye idatha ngaphansi ukubethela. Lokhu kuyinto embi abalulekile ngenxa isingeniso yokwanda kokungabi isengezo senethiwekhi ezimele (VPN) ukufaka ikhowudi kwimininingo yonke lwazi ngokuya esetshenziswa cybercriminals ukuhlasela.

NIDS futhi akakwazi ukunquma ngokuthe okwenzekile ngenxa yalokhu kuhlasela, ke kwadala umonakalo noma cha. Zonke ke imali - kuyinto ukulungisa ekuqaleni kwawo. Ngakho-ke, umlawuli uphoqelekile ukuba kabusha uzihlole njalo icala kuhlasela ukuze uqiniseke ukuthi ukuhlasela kuphumelele. Enye inkinga enkulu wukuthi NIDS neze ithumba kuhlasela usebenzisa amaphakethe wahlukana. Ziyakwazi kuyingozi ikakhulukazi ngoba zingaphazamisa operation evamile NIDS. Kusho ukuthini lokhu ngoba yonke inethiwekhi noma ikhompyutha ohlelweni, asikho isidingo ukuchaza.

HIDS (aphethe uhlelo intrusion ukubona)

HIDS (IDS, monitoryaschie aphethe (impi)) ukukhonza kuphela ikhompyutha ethile. Yiqiniso, inikeza ukusebenza kahle kakhulu kunalokhu. HIDS ihlaziye ezimbili izinhlobo zolwazi: amalogi uhlelo kanye imiphumela yokuhlolwa kwamabhuku yesistimu yokusebenza. Zenza isifinyezo amafayela system bese uliqhathanisa nabazalwane isithombe ngaphambili. Uma kubalulekile ezibucayi samafayela uhlelo ezishintshiwe noma zisuswe ke umphathi ithumela i-alamu.

HIDS inzuzo enkulu yikhono benza umsebenzi wabo esimweni lapho inethiwekhi traffic cipher singangena. Lena sibonga kungenzeka yokuthi kokuba umninikhaya (aphethe-based) imithombo yokwaziswa kungadalwa phambi idatha letihambisana ukubethela noma ngemva ukuqaqwa ku umninikhaya uya khona.

I yokuntula zalesi simiso zihlanganisa kungenzeka Ukuvinjwa yayo noma ngisho iyakwenqabela usebenzisa uhlobo oluthile dos-ukuhlaselwa. Inkinga lapha wukuthi ezinye izinzwa HIDS nokuhlaziya amathuluzi zitholakala umninikhaya, okuyinto iyahlaselwa, okungukuthi, nabo kuhlasela. Iqiniso lokuthi imithombo HIDS Sebawoti omsebenzi wakhe basuke ukuqapha, futhi, kungaba uyibize ngokuthi plus, ngoba ngokwemvelo kunciphisa umkhiqizo wabo.

Zenyathi IDS mayelana nendlela ongayibona ngayo ukuhlaselwa

Indlela anomalies, isignesha ukuhlaziywa indlela nezinqubomgomo - zenyathi ezinjalo mayelana nendlela ongayibona ngayo ukuhlaselwa iyona IDS.

Indlela isignesha ukuhlaziywa

Kulokhu, lo amaphakethe idatha bangenile sokuhlasela amasignisha. Ukusayinda kwaleso kuhlasela - siyafana kumcimbi komunye zezinhlobo, echaza ukuhlaselwa aziwayo. Le ndlela iphumelela kakhulu, ngoba uma usebenzisa nemibiko engamanga sokuhlaselwa iyivelakancane.

anomalies indlela

Nge azomsiza wathola izenzo ezingekho emthethweni kunethiwekhi umkhosi. Ngesisekelo umlando ukuhlinzwa evamile yempi futhi inethiwekhi wadala amaphrofayli ekhethekile ngedatha ngakho. Khona-ke ezihilelekile ekhethekile imitshina ukuthi sihlaziye izenzakalo. Usebenzisa ubuchule obuphezulu ezahlukene kuzala ekuhlaziyweni kwalezi zenzakalo, ukuqhathanisa lawo ne "kuyinsakavukela" in the amaphrofayli. Ukuswelakala kokusebenza ngokuhlanganyela isidingo buthelela omningi kuhlasela amasignisha - plus esiqondile le ndlela. Nokho, inani elikhulu ukukhohliswa ubala ngokuqondene Kuhlaselwa ngamabhomu atypical, kodwa kungenye into ehluke esisemthethweni inethiwekhi izenzakalo - lena lokususa yakhe undoubted.

indlela inqubomgomo

Enye indlela ukuthola ukuhlaselwa indlela inqubomgomo. Ingqikithi ke - kudalwa iziqondiso zokuphepha inethiwekhi, okuyinto, isibonelo, kungase kubonise amanethiwekhi we isimiso phakathi kwakhe ne-esetshenziswa kule olandelwayo. Le ndlela liyathembisa, kodwa into enzima impela inqubo kunzima yokudala semininingwane izinqubomgomo.

ID Systems sizonikeza isivikelo kwenethiwekhi futhi ikhompyutha yakho izinhlelo

Iqembu i-ID Systems namuhla ingenye emkhakheni umholi zokuvikela emakethe amanethiwekhi computer. Kuyoba ukukunikeza isivikelo ngokumelene Cyber-amashinga. awukwazi ukhathazeke idatha yakho kubalulekile ukuvikela ID Systems izinhlelo. Ngenxa yalokhu uyokwazi ukujabulela ukuphila xaxa ngoba unayo inhliziyo kuyinto nankinga.

ID Systems - abasebenzi Izibuyekezo

Omkhulu nethimba, futhi okubaluleke kakhulu, yebo - lena akubone ngombono ofanele ukuphathwa inkampani abasebenzi bayo. Wonke umuntu (ngisho Wabasaqalayo elalisafufusa) nethuba ekukhuleni okhokhelwayo. Nokho, ukuze lokhu kwenzeke, yebo, wena kudingeka bakhulume, bese konke Kuyophumela ethubeni.

Eqenjini nomoya omuhle wokuthanda izinto. Beginners zihlale emhlabeni isitimela bonke umbukiso. Ayikho mncintiswano okungenamsoco akuyona wazizwa. Abasebenzi abasebenza inkampani iminyaka eminingi, ubizwa kuhle emehlweni ukwabelana yonke imininingwane yezobuchwepheshe. Ziyakwazi friendly, ngisho ngaphandle kokunezela noluncane ukuzehlisa uphendula imibuzo eziwubuwula kakhulu abasebenzi abangenaso isipiliyoni. Ngokuvamile, kusuka abasebenza Systems ID eminye imizwelo emnandi.

Isimo Sengqondo ukuphathwa wesilisa ethanda. Kwamjabulisa lokho lapha, kusobala, bayakwazi ukusebenza nabasebenzi, ngoba abasebenzi ngempela ifaniswe kakhulu. Isisebenzi cishe isobala: abazizwa emsebenzini ekhaya.