Back to Question Center
0

Izifundo zoKhuseleko lweSicelo seWebhu ezintathu zokugcina ingqalelo. I-Semalt Expert Iyazi indlela yokugwema ukuba ngumntu ohlukumezayo

1 answers:

Ngo-2015, i-Ponemon Institute ikhuphe iziphumo ezivela kwisifundo "Iindleko zeCyber ​​Crime",a ba beqhuba. Akumangalisi ukuba iindleko zobugebengu be-cyber zanda. Nangona kunjalo, amanani ayesigxina.Iiprojekthi ze-Cybersecurity Ventures (i-global conglomerate) iindleko eziza kutshintsha i-$ 6 trillion ngonyaka. Ngokomyinge, kuthatha inhlanganoIintsuku ezingama-31 zokubuyisela emva kobugebengu bobugqwetha ngexabiso lokulungiswa malunga ne-$ 639 500.

Ngaba uyazi ukuba ukuphika kwenkonzo (ukuhlaselwa kwe-DDOS), ukuphulwa kwewebhu kunye nobubii-55% yazo zonke iindleko zobugebengu be-cyber? Oku akugcini nje ukubeka ingozi kwi data yakho kodwa kunokukwenza ukuba ulahlekelwe yimali.

uFrank Abagnale, uMphathi weMpumelelo weMthengi iSemalt IiNkonzo zeDivithali, unikezela ukuqwalasela ezi zintathu iziganeko zokuphulwa ezenziwe ngo-2016.

Icala lokuqala: UMosack-Fonseca (iiPanama Papers)

Izaziso zePanama Papers zaqhekeka ekugqibeleni ngo-2015, kodwa ngenxa yeizigidi zeemviwo eza kufuneka zihlanjululwe, kwagqitywa ngo-2016. Ukuvuza kutyhile indlela abapolitiko, abashishini bezoqoqosho,abadumileyo kunye ne-creme de la creme yoluntu igcinwe imali kwi-akhawunti ye-offshore. Ngokuqhelekileyo, le nto yayingumthunzi kwaye iwele i-ethicalumgca. Nangona i-Mossack-Fonseca yintlangano ekhethekileyo ekusithekeni, icebo layo lokhuseleko lwengcaciso laliphantse lingekho.Ukuqala, i-WordPress umfanekiso we-plugin ye-plugin ayisebenzise yayiphelelwe yisikhathi. Okwesibini, basebenzisa i-Drupal eneminyaka emithathu ubudala kunye nobungozi obuwayo.Okumangalisa kukuba, abalawuli benkqubo ye-organization ayilungise le miba.

Izifundo:

  • > soloko uqinisekisa ukuba iiplatifomu zakho ze-CMS, iifowuni kunye nezihloko zihlaziywa rhoqo..
  • > zihlala zihlaziywa kunye nezobungozi zakamuva zokhuseleko lweCMS. Joomla, iDrupal, WordPress kunye nezinyeIinkonzo zineenkcukacha zolwazi.
  • > ukukhangela zonke iiplagi phambi kokuba uziphumeze kwaye uzisebenze

Icandelo lesibini: Umfanekiso wephrofayili wePayPal

I-Florian Courtial (injineli yeprojekthi yeFransi) ifumene i-CSRF (i-cross site application request)ubungozi kwi-PayPal's site entsha, PayPal.me. Inkokhelo enkulu yentlawulo ye-intanethi ivule i-PayPal.me ukulungiselela ukuhlawulwa ngokukhawuleza. Nangona kunjalo,I-PayPal.me inokusetyenziswa. UFlorian wakwazi ukuhlela aze aphinde asuse ithokheni ye-CSRF ngokuhlaziya umfanekiso wesiprofayili somsebenzisi. Njengokobekunjalo, nabani na onokuzifanisa nomnye umntu ngokufumana umfanekiso wabo kwi-intanethi ukususela kwi-Facebook.

Izifundo:

  • > ufumana amathokheni ahlukeneyo e-CSRF kubasebenzisi - oku kufuneka kube yinto ekhethekileyo kwaye utshintshe naluphi na umsebenzisi engena kuyo.
  • > ithokheni nganye ngesicelo - ngaphandle kweengongoma ezingentla, ezi zikhutshana kufuneka zenziwe zifumanekexa umsebenzisi ebacela. Unika ukhuseleko olongezelelweyo.
  • > ukuphuma kwexesha - kuncitshiswe ubungozi ukuba i-akhawunti ihlala ingasebenzi ixesha elithile.

Icala lesithathu: Ubulungiseleli bezeMicimbi yaseMzansi yaseRashiya bubona iNgxowa-xhobo ye-XSS

Nangona ulutsha oluninzi luhlaselwa ukuba luphazamise imali yengeniso, idumela,kunye neendlela, ezinye zenzelwe ukuhlazeka. Kwimeko kwinqanaba, inkohlakalo engazange yenzeke eRashiya. Oku kwenzeka: i-hacker yaseMelika(obizwa ngokuthi nguJester) waxhaphaza isicatshulwa sendawo (cross-scripting scripting) (XSS) engozini awayeyibona kwi-website yeSebe lezeNgaphandle laseMzansi. Ijester wadala iwebhusayithi ye-dummy eyenza ukulinganisa iinjongo kwiwebhusayithi esemthethweni ngaphandle kwesihloko, esilungele ukwenzabahleka ngabo.

Izifundo:

  • > ukucoca ukulungiswa kwe-HTML
  • > ungenise idatha ngaphandle kokuba uyiqinisekise
  • > sebenzisa ukuphunyuka kwe-JavaScript ngaphambi kokungenisa idatha engakhathali kwixabiso leelwimi (iJavaScript) yexabiso
  • > uzikhusele kwi-DOM esekelwe ukukhubazeka kwe-XSS
November 28, 2017
Izifundo zoKhuseleko lweSicelo seWebhu ezintathu zokugcina ingqalelo. I-Semalt Expert Iyazi indlela yokugwema ukuba ngumntu ohlukumezayo
Reply