Kubata-Based Based Intrusion Prevention

Zvinhu Zvokutarira Muchikamu Chikupedzisira Chekudzivirirwa

Kuchengeteka kwepamberi ishoko rinogamuchirwa pamakombiyuta uye mumatare ekuchengetedza (ona In Depth Security). Icho chinonyanya kukosha ndechokuti zvinotora zvidimbu zvakasiyana zvezvidziviriro zvekuchengetedza kune zvakasiyana-siyana zvekurwiswa nekutyisidzirwa. Haisi chete chigadzirwa kana chimiro chisingadziviriri pane zvose zvinogona kutyisidzira, saka zvinoda michina yakasiyana yezvipingamupinyi zvakasiyana, asi kuva nemiganhu yakawanda yekuzvidzivirira zvichitarisira kubvumira chimwe chigadziro kubata zvinhu zvingave zvakadarika mberi kwezvidziviriro zvekunze.

Pane zvakawanda zvekushanda uye zvigadziro zvaunogona kushandisa kune zvakasiyana-siyana-software yeAntivirus, firewalls, IDS (Intrusion Detection Systems) nezvimwe. Mumwe nomumwe ane basa rakasiyana zvakasiyana uye anodzivirira kubva pane zvakasiyana zvekurwisa nenzira yakasiyana.

Imwe yezvigadzirwa zvekare ndeye IPS- Intrusion Prevention System. An IPS yakafanana nekubatanidza IDS ne firewall. Chimwe chinonzi IDS chichanyora kana kuti chikurudzire iwe kuti ufungidzire mhirizhonga, asi mhinduro yasara kwauri. An IPS ine mitemo uye mitemo iyo inofananidza mitambo yekutengesa kune. Kana chero motokari inotyora mitemo uye inotonga IPS inogona kugadzirirwa kupindura pane kungokutsoropodza. Mhinduro dzinogona kunge dziri kukuvhara dzose motokari kubva paIndaneti yepaIndaneti kana kuti kudzivisa kuenderera mberi kwechiteshi payo port kuitira kuchengetedza makombiyuta kana network.

Kune mitambo yakakosha yekuchengetedza zvirongwa (NIPS) uye kune mauto-based intrusion kudzivirira masangano (HIPS). Kunyange zvazvo zvingave zvakadhura zvikuru kushandisa HIPS- kunyanya mune guru, nzvimbo yebhizimusi, ndinokurudzira vanhu vanochengetedza zvakachengetedzwa chero zvingaita. Kuchengetedza kushungurudza uye zvirwere pane imwe nhare yepamusoro yepamusoro inogona kuva yakanyanyisa kubudirira pakuvhara, kana kuti zvishoma zvine, zvinopisa. Nezvo mupfungwa, heino urongwa hwezvinhu zvaunotarisa mune HIPS solution ye network yako:

Kune zvimwe zvinhu zvishoma zvaunofanira kuchengeta mupfungwa. Chokutanga, mazano neAIPS haasi "sirivha" yekuchengeteka. Zvinogona kuva kuwedzerwa kukuru kune zvakasimba, kudzivirirwa zvakasvibiswa kusanganisira firewalls uye maitiro antivirus pakati pezvimwe zvinhu, asi haufaniri kuedza kudzorera hutaneti huripo.

Chechipiri, kutanga kwekushandiswa kweHIPS sarudzo inogona kuva inonakidza. Kugadzirisa kukanganisa kunowanikwa kunowanzodikanwa nekutengeserana kwemaoko "kubata maoko" kubatsira rubatsiro kunzwisisa kuti chii chinowanzo "kufamba" uye izvo zvisiri. Iwe unogona kuwana huwandu hwenhema hunoita kana hunosiyiwa urombo paunenge uchishanda kuti ugadzire nheyo yekutanga yezvinoreva "zvekare" motokari yemashini yako.

Pakupedzisira, kambani dzinowanzoshandisa kutenga zvichishandisa izvo zvavanogona kuitira kambani. Standard accounting practice inoratidza kuti izvi zvinofanira kuyerwa zvichienderana nekudzoka kwekutsvaga, kana ROI. Vabvunzi vanoda kuzvinzwisisa kana vachiisa mari yemari mune chimwe chigadzirwa kana teknolojia, zvichazotora nguva yakareba sei kuti chigadzirwa kana teknolojia ibhadzwe pachayo.

Zvinosuruvarisa, mitambo uye makombiyuta kuchengetedza zvigadzirwa hazvikwanisi kukodzera iyi mold. Chengetedzo inoshanda pane zvimwe zvekare-ROI. Kana chigadzirwa chekuchengeteka kana teknolojia inoshanda seyakagadzirirwa mambure icharamba yakachengeteka- asi hapazovi "purogiramu" yekuyera ROI kubva. Iwe unofanirwa kutarisa kutsanangurira zvakadaro uye funga kuti boka rinogona kurasikirwa kana chigadzirwa kana teknolojia yakange isina nzvimbo. Mari yakawanda inofanira kupedzerwa sei pakuvakazve maseraji, kuwanazve data, nguva uye zvigadziro zvekuzvitsaurira vashandi vekugadzira kuchenesa mushure mekurwa, etc? Kana kusina chibereko kunogona kukonzera kurasikirwa zvikuru nemari kupfuura chigadzirwa kana teknolojia inotoda kushanda, saka zvichida zvine musoro kuita kudaro.