Ngaba ungafumana iingcambu ngesilayidi secuba kuphela? (2024)

Ngaba Ungafumana Iingcambu Ngesilayidi Sesigarethi Kuphela? (2024)

Umfanekiso ngumfanekiso we-hacker lore: umfanekiso osisithunzi, oxhobileyo engenanto kodwa into yokulayita icuba kunye neplastiki ejijekileyo, egqitha kwisitshixo esiphucukileyo ngemizuzwana. Sisikweko esinamandla "sokuhlaselwa ngokomzimba" -i-tech-tech ephantsi, ukuphulwa kwempembelelo ephezulu yokukhusela inkqubo. Kodwa ngo-2024, njengoko isiseko seshishini lethu sisiya sisanda ngokwedijithali kwaye sinxibelelana, lo mzekeliso ubuza umbuzo obalulekileyo. Ngaba ukulingana kwale mihla "kokuhlaselwa kwecigarette lighter" kusenokukunika ingcambu-elona nqanaba liphezulu lokufikelela-kwinkqubo entsonkothileyo yokusebenza kweshishini? Impendulo ngumahluko, kunye nesilumkiso, ewe.

IsiKhalidi seCigarette yanamhlanje: Ubunjineli beNtlalo kunye neeNkqubo ezingafakwanga

Isibane esilahlwayo asizange sivele kakhulu, kodwa oogxa baso bedijithali bandile. I-"cigarette lighter" yanamhlanje isoloko iyinto elula, engahoywayo efuna isakhono esincinci sobugcisa ukuze isetyenziswe kodwa inokuthi ivuthe ukusabela kwetsheyini okukhokelela kulawulo olupheleleyo lwenkqubo. Abaviwa ababini abaphambili bayayifanela le nkcazo. Okokuqala, uhlaselo oluntsonkothileyo lobunjineli bezentlalo, njengobuxhakaxhaka obujoliswe kuko (i-vishing okanye i-smishing), busebenzisa i-psychology yabantu-i-"lockpick" yokuqala. Umqeshwa omnye ocofa ikhonkco elikhohlakeleyo unokuba yintlantsi. Okwesibini, i-software engabonakaliyo kunye ne-firmware, ngokukodwa kwizixhobo ezixhunyiwe kwi-intanethi (iiprinta, iikhamera, i-IoT sensors), zisebenza njengento eqhubekayo, eyaziwayo. Abahlaseli abafuni iintsuku zero-zero; basebenzisa izixhobo ezizisebenzelayo ukuskena ezi ngcango zivuliweyo, bezixhaphaza ngemibhalo elula nephindaphindwayo njengokuqhwanyaza kweBic.

I-Rection ye-Chain: Ukusuka kwi-Spark ukuya kwi-Inferno-Wide System

Isilayidi yecuba iyodwa ayitshisi isakhiwo; kuphemba umlilo. Ngokufanayo, olu lwaphulo-mthetho lokuqala alufane lube yinjongo yokugqibela. Ziyindawo yokuma. Xa ungaphakathi kwinethiwekhi nge-akhawunti yelungelo eliphantsi okanye isixhobo esisengozini, abahlaseli babandakanyeka "kwintshukumo esecaleni." Bahlola inethiwekhi yangaphakathi, bandise amalungelo ngokusebenzisa ulungelelwaniso olungalunganga, kwaye basuke kwinkqubo ukuya kwisistim. Eyona nto iphambili ekujoliswe kuyo idla ngokuba liqonga eliphakathi lolawulo-iseva ebamba i-OS yeshishini eliphambili lenkampani, iCRM, okanye idatha yezemali. Ukufumana "ingcambu" apha kuthetha ukufumana ulawulo kuyo yonke inkqubo yeshishini, ukusuka kwidatha ukuya kwimisebenzi. Yiyo loo nto imodyuli, kodwa elawulwa kwindawo esembindini, i-OS yeshishini kufuneka iyilwe ngemithetho-siseko ye-zero-trust, apho ukophulwa kwemodyuli enye kungafaki esichengeni yonke isuti.

"Kukhuseleko, sihlala si-injineli ngaphezulu kwe-firewall kodwa sishiye ucango lwangasemva luvuleke ngokubanzi. Olona hlaselo luhle kakhulu ayilolo loyisa inkqubo, kodwa olo lungena ngomnyango wonke umntu olibale ukuba ukho."

Ukucima i-Spark: uKhuselo oluSebenzayo kwiLizwe leModyuli

Ukuthintela ezi ndlela "zobuchwephesha obuphantsi" ukuze zibe neengcambu kufuna inguqu ukusuka kukhuselo olusekwe kwi-perimeter ukuya kukhuseleko olukrelekrele, olunolwaleko lwangaphakathi. Apha kulapho uyilo lweqonga lakho leshishini libaluleke kakhulu. Inkqubo efanaMewayzyakhiwe ngale nyaniso engqondweni. Uyilo lwayo lweemodyuli luvumela ulawulo lwegranular kunye nokuhlukaniswa. Ukuba umhlaseli uphazamisa imodyuli enye (umzekelo, i-app ye-form-builder), umonakalo unokubandakanywa, ukuthintela ukunyakaza kwecala ukuya kwiimodyuli eziphambili zemali okanye zabathengi. Ngaphaya koko, iMewayzigxininisa isazisi esisembindini kunye nolawulo lofikelelo (IAM), iqinisekisa ukuba umthetho-siseko welona lungelo lincinci liyanyanzeliswa kuzo zonke iimodyuli, nto leyo eyenza ukunyuswa kwelungelo kube nzima kakhulu nokuba kwenzeka ukophulwa kokuqala.

Uluhlu lwakho loKhuseleko loMlilo luka-2024

Ukuzikhusela kuhlaselo lwecuba lwale mihla, amashishini kufuneka athathe amanyathelo okhuseleko kunye nokhuseleko olubanzi. Nanga amanyathelo abalulekileyo omawuwathathe:

• Igunya lokuQinisekisa izinto ezininzi (MFA) Kuyo yonke indawo: Olu qheliselo lulodwa luyagatya uninzi lohlaselo olusekwe kwiziqinisekiso.
• Ulawulo lwePatch olungenanceba: Uhlaziyo oluzenzekelayo kuzo zonke iisoftware, ngakumbi kwiiperipherals eziqhagamshelwe kwinethiwekhi kunye nezixhobo ze-IoT.
• UQeqesho oluqhubekayo loKwazisa ngoKhuseleko: Ukuqeqesha abasebenzi ukuba baqaphele kwaye baxele iinzame zokukhohlisa. Yenza ukhuseleko lube yinxalenye yenkcubeko yakho.
• Yamkela iModeli yeZero-Trust: Ungaze uthembe, soloko uqinisekisa. Sebenzisa ulwahlulo oluncinci kunye nolawulo olungqongqo lokufikelela ngaphakathi.
• Khetha ii-Modular, ii-Platforms zokuqaphela uKhuseleko: Khetha izisombululo ze-OS zoshishino, ezifana ne-Mewayz, eziyilwe ngokhuseleko lodwa kunye nezakhiwo zemvume yegranular kumbindi wazo, ukuthintela i-spark encinci ukuba ibe yinto ephazamisayo.

Ke, ungafumana ingcambu ngesilayidi secuba kuphela ngo-2024? Ngokuqinisekileyo. I-lighter isandula ukuthatha ifom yedijithali. Isifundo asikokoyika isixhobo esilula, kodwa kukuhlonipha umonakalo omkhulu esinokuwenza xa sisetyenziswa kuhlobo olululo lwe-tinder. Ngokuhamba ngaphaya komjikelezo oqinileyo ukukhusela iindlela zangaphakathi kunye neemodyuli zemisebenzi yeshishini lakho, uyaqinisekisa ukuba nokuba intlantsi iyahlala, akukho nto ifumanekayo ngokulula ukuba itshise.

Imibuzo Ebuzwa Rhoqo

Ngaba Ungafumana Iingcambu Ngesilayidi Sesigarethi Kuphela? (2024)

Umfanekiso ngumfanekiso we-hacker lore: umfanekiso osisithunzi, oxhobileyo engenanto kodwa into yokulayita icuba kunye neplastiki ejijekileyo, egqitha kwisitshixo esiphucukileyo ngemizuzwana. Sisikweko esinamandla "sokuhlaselwa ngokomzimba" -i-tech-tech ephantsi, ukuphulwa kwempembelelo ephezulu yokukhusela inkqubo. Kodwa ngo-2024, njengoko isiseko seshishini lethu sisiya sisanda ngokwedijithali kwaye sinxibelelana, lo mzekeliso ubuza umbuzo obalulekileyo. Ngaba ukulingana kwale mihla "kokuhlaselwa kwecigarette lighter" kusenokukunika ingcambu-elona nqanaba liphezulu lokufikelela-kwinkqubo entsonkothileyo yokusebenza kweshishini? Impendulo ngumahluko, kunye nesilumkiso, ewe.

IsiKhalidi seCigarette yanamhlanje: Ubunjineli beNtlalo kunye neeNkqubo ezingafakwanga

Isibane esilahlwayo asizange sivele kakhulu, kodwa oogxa baso bedijithali bandile. I-"cigarette lighter" yanamhlanje isoloko iyinto elula, engahoywayo efuna isakhono esincinci sobugcisa ukuze isetyenziswe kodwa inokuthi ivuthe ukusabela kwetsheyini okukhokelela kulawulo olupheleleyo lwenkqubo. Abaviwa ababini abaphambili bayayifanela le nkcazo. Okokuqala, uhlaselo oluntsonkothileyo lobunjineli bezentlalo, njengobuxhakaxhaka obujoliswe kuko (i-vishing okanye i-smishing), busebenzisa i-psychology yabantu-i-"lockpick" yokuqala. Umqeshwa omnye ocofa ikhonkco elikhohlakeleyo unokuba yintlantsi. Okwesibini, i-software engabonakaliyo kunye ne-firmware, ngokukodwa kwizixhobo ezixhunyiwe kwi-intanethi (iiprinta, iikhamera, i-IoT sensors), zisebenza njengento eqhubekayo, eyaziwayo. Abahlaseli abafuni iintsuku zero-zero; basebenzisa izixhobo ezizisebenzelayo ukuskena ezi ngcango zivuliweyo, bezixhaphaza ngemibhalo elula nephindaphindwayo njengokuqhwanyaza kweBic.

Isenzo seChayini: Ukusuka kwi-Spark ukuya kwi-Inferno eBanzi kwiNkqubo

Isilayidi yecuba iyodwa ayitshisi isakhiwo; kuphemba umlilo. Ngokufanayo, olu lwaphulo-mthetho lokuqala alufane lube yinjongo yokugqibela. Ziyindawo yokuma. Xa ungaphakathi kwinethiwekhi nge-akhawunti yelungelo eliphantsi okanye isixhobo esisengozini, abahlaseli babandakanyeka "kwintshukumo esecaleni." Bahlola inethiwekhi yangaphakathi, bandise amalungelo ngokusebenzisa ulungelelwaniso olungalunganga, kwaye basuke kwinkqubo ukuya kwisistim. Eyona nto iphambili ekujoliswe kuyo idla ngokuba liqonga eliphakathi lolawulo-iseva ebamba i-OS yeshishini eliphambili lenkampani, iCRM, okanye idatha yezemali. Ukufumana "ingcambu" apha kuthetha ukufumana ulawulo kuyo yonke inkqubo yeshishini, ukusuka kwidatha ukuya kwimisebenzi. Yiyo loo nto imodyuli, kodwa elawulwa kwindawo esembindini, i-OS yeshishini kufuneka iyilwe ngemithetho-siseko ye-zero-trust, apho ukophulwa kwemodyuli enye kungafaki esichengeni yonke isuti.

Ukucima i-Spark: uKhuseleko olusebenzayo kwiLizwe leModyuli

Ukuthintela ezi ndlela "zobuchwephesha obuphantsi" ukuze zibe neengcambu kufuna inguqu ukusuka kukhuselo olusekwe kwi-perimeter ukuya kukhuseleko olukrelekrele, olunolwaleko lwangaphakathi. Apha kulapho uyilo lweqonga lakho leshishini libaluleke kakhulu. Inkqubo efana neMewayz yakhiwe ngale nyaniso engqondweni. Uyilo lwayo lweemodyuli luvumela ulawulo lwegranular kunye nokuhlukaniswa. Ukuba umhlaseli uphazamisa imodyuli enye (umzekelo, i-app ye-form-builder), umonakalo unokubandakanywa, ukuthintela ukunyakaza kwecala ukuya kwiimodyuli eziphambili zemali okanye zabathengi. Ngaphaya koko, i-Mewayz igxininisa isazisi esisembindini kunye nolawulo lofikelelo (IAM), eqinisekisa ukuba umthetho-siseko welona lungelo lincinci uyanyanzeliswa kuzo zonke iimodyuli, nto leyo eyenza ukuba unyuso lwelungelo lube nzima kakhulu nokuba kwenzeka ukophulwa kokuqala.

Uluhlu lwakho loKhuseleko loMlilo luka-2024

Ukuzikhusela kuhlaselo lwecuba lwale mihla, amashishini kufuneka athathe amanyathelo okhuseleko kunye nokhuseleko olubanzi. Nanga amanyathelo abalulekileyo omawuwathathe: