Cishe uke wazibuza ukuthi kuzokwenzekani uma umuntu wesithathu ekwazile ukungena kuseva yakho. Asikhulumi nje ngewebhusayithi ephahlazeka isikhashana, kodwa mayelana... ukwebiwa kolwazi olubucayiUkulahlekelwa yimali engenayo kanye nomonakalo omkhulu edumeleni lomkhiqizo wakho. Namuhla, ukuhlaselwa kwe-inthanethi akubandlululi futhi kuthinta kokubili abasebenzi abazimele kanye nezinkampani ezinkulu, ngakho-ke ukuvikela ingqalasizinda yakho nge Umhlahlandlela ophelele wokuphepha kwe-cyber wamabhizinisi akusekho ukuba yinto yokunethezeka futhi sekuyinto isidingo esiphelele ukuze ibhizinisi lakho lingami.
Ukuba neseva empeleni kuwukuphatha inhliziyo yedatha yakho. Yilapho kuhlala khona izizindalwazi ezisekela yonke indawo yakho yedijithali. Uma kukhona okungahambi kahle noma kukhona ukwephulwa kwemithetho, imiphumela ingaba yimbi kakhulu: kusukela ekuyekeni ukuthengisa esitolo sakho esiku-inthanethi kuya... ukulahleka okuphelele kwamafayela abalulekileNgakho-ke, ukuzinikela ngesikhathi ekusebenziseni izindlela zokuzivikela akuyona ukuchitha isikhathi, kodwa ukutshalwa kwezimali ku ukuthula nokuzinza isikhathi eside
Imiqondo eyisisekelo nezinhlobo zamaseva
Ukuze uqale kahle, kubalulekile ukuqonda ukuthi iseva iyidivayisi (ephathekayo noma isofthiwe) enikeza izinsizakalo, isitoreji, noma idatha kwamanye amakhompyutha abizwa ngamaklayenti. Kuye ngezidingo zakho, ungakhetha iseva ezinikelelapho unakho konke okusesikhwameni ngaphandle kokwabelana nge-CPU noma i-RAM, okukunikeza ukulawula okuphelele kanye nokusebenza okuphezulu kakhulu.
Enye inketho evame kakhulu yi- izixazululo zefuNakuba "ifu" lingase libonakale njengento eyisimangaliso, empeleni amaseva angokoqobo atholakala ezikhungweni zedatha zenkampani yangaphandle lapho enye inkampani iphatha khona ukulungiswa kwehadiwe. Kukhona futhi... amaseva abonakalayo (i-VPS)okuyisiqalo esiphakathi nendawo. Lapho ukhetha uhlelo lokusebenza, impi ivame ukuba phakathi IWindows neLinux; ngenkathi eyokuqala iqondakala kalula kwabanye, Ukusatshalaliswa kwe-Linux ne-BSD Lezi yizinketho ezikhethwa ngabaphathi ngenxa yokuguquguquka kwazo nokuqina kwazo.
Izinyathelo eziyisisekelo zokucushwa okunezikhali
Uma ufuna iseva yakho igweme ukuba yisihlungi, into enhle ongayenza ukuqala nge ukufakwa okuncaneLokhu kusho ukufaka isofthiwe edingekayo kuphela ukuze uhlelo lusebenze. Uma izinhlelo zokusebenza ezimbalwa ozifakile, kulapho indawo yokuhlasela iba ncane khona, njengoba uhlelo ngalunye olwengeziwe luyisifo esiyingozi. umnyango wangemuva ongenzeka ngomuntu osebenzisa i-hacker.
Uma usufakiwe, khohlwa ngamaphasiwedi alula. Kubalulekile ukusungula iphasiwedi eqinile Kumsebenzisi wempande noma umphathi, sebenzisa inhlanganisela yezinhlamvu ezinkulu, izinhlamvu ezincane, izinombolo, kanye nezimpawu. Uma uqashe iseva futhi wanikezwa iphasiwedi ezenzakalelayo, yishintshe ngokushesha usebenzisa i-terminal. Ukuze wengeze ungqimba olwengeziwe lokuphepha, kungcono ukuyisebenzisa Okhiye be-SSHezithatha indawo yephasiwedi ngezinkinobho ezimbili ze-cryptographic (zomphakathi nezangasese), okwenza ukufinyelela kuphephe kakhulu.
Elinye iqhinga elisebenza kahle kakhulu shintsha imbobo ye-SSHNgokuzenzakalelayo, cishe wonke umuntu usebenzisa i-port 22, futhi yilapho ama-bot okuhlasela eqala khona ukuhlasela kwawo kokuqala. Ukuhambisa ukufinyelela kwelinye i-port kuzonciphisa kakhulu umsindo ovela ekuhlaselweni okuzenzakalelayo. Ngaphezu kwalokho, kuyalulekwa kakhulu... Khubaza ukuloga kwe-SSH komlawuliKwakha umsebenzisi ojwayelekile ukuze angene ngemvume, futhi uma esengaphakathi, kwandisa amalungelo uma kudingeka.
Amathuluzi okuvikela nokuzivikela asebenzayo
El i-firewall noma i-firewall Ingumqaphi weseva yakho. Umsebenzi wayo ukuvimba zonke izimbobo ezingenayo ngaphandle kwalezo ezibalulekile (njenge-80 noma i-443 yethrafikhi yewebhu). Ukuze uthuthukise ukuphepha, ungasebenzisa I-IDS (Uhlelo Lokuthola Ukungena) okukwazisayo uma kwenzeka into engavamile, noma I-IPS (Uhlelo Lokuvimbela Ukungena) ukuthi, ngaphezu kokwazisa, kuvimbela ngokuzenzakalelayo ikheli le-IP lomhlaseli.
Ukuze kulwiwe nokuhlaselwa ngamandla amakhulu (lapho umhlaseli ezama khona izinkulungwane zezinkinobho ngomzuzwana), amathuluzi anjenge I-Fail2Ban ku-Linux I-RdpGuard ku-Windows iyithuluzi elingakwesokudla. Lezi zinhlelo zihlaziya amalogi okufinyelela futhi, uma zithola amaphutha amaningi kakhulu ekhelini elifanayo, Ikheli le-IP livinjelwe komsolwa okwesikhashana noma unomphela.
Uma uphatha idatha eyimfihlo, awukwazi ukuphila ngaphandle kwayo Ukubethela kwe-SSL/TLS ukuqinisekisa ukuthi ukuxhumana phakathi kweklayenti neseva kubethelwe. Ngokufanayo, ukusetshenziswa kwe- I-VPN (Inethiwekhi Eyimfihlo Ebonakalayo) Ivumela ukuphathwa kweseva ukuthi kwenziwe ngomhubhe ophephile, okuvimbela noma ubani ukuthi avimbele umsebenzi wakho kumanethiwekhi omphakathi.
Ukunakekelwa kanye nemikhuba emihle yansuku zonke
Ukuphepha akuyona into oyimisa kanye bese uyikhohlwa. Ukuqinisa Inqubo yokulungisa ubungozi bohlelo iyaqhubeka. Kubalulekile ukugcina kubuyekeziwe uhlelo lokusebenza kanye nesofthiwe Ama-patches okuphepha abuyekezwa nsuku zonke ukuze kulungiswe ubuthakathaka obusetshenziswa ngabaduni. Ku-Linux, ungasebenzisa izikripthi ezifana ne-apticron ukuze wenze le misebenzi ibe ngokuzenzakalela.
Asikwazi ukuvumela lokhu kudlule kithi ukuqapha izinsizaUkusebenzisa amathuluzi afana ne-Netdata, i-Monit, noma i-Nagios kukwazisa ngesikhathi sangempela uma i-CPU isemkhawulweni wayo noma uma kunezinqubo ezingavamile ezidla inkumbulo. Uma ubona ukwehla okungazelelwe, hlola amalogi okufinyelela Kungaba yisihluthulelo sokuthola umzamo wokungena ngaphambi kokuba sekwephuze kakhulu.
Ekugcineni, insika ehlanganisa konke ndawonye isu lokusekelayoAkukho uhlelo olungenaphutha, ngakho-ke ukuba nama-backups azenzakalelayo agcinwe ngaphandle kwendawo kuwukuphela kwesiqinisekiso sangempela sokululama uma kwenzeka ukwehluleka. ukuhlasela kwe-ransomware. Amathuluzi afana rsync Zinhle kakhulu ekugcineni idatha ivumelanisiwe nokuqinisekisa ukuthi, uma kwenzeka noma iyiphi inhlekelele, ungabuyisela isevisi yakho ngemizuzu embalwa.
Ukugcina ingqalasizinda eqinile kudinga ibhalansi phakathi kokukhetha ihadiwe efanele, ukusebenzisa izendlalelo zokuphepha ezifana nama-firewall nama-VPN, kanye nokunamathela ngokuqinile kuzibuyekezo kanye nama-backup edatha. Ukuhlanganisa ukufakwa okuhlanzekile nokuqapha njalo amalogi kanye nokusetshenziswa kwamathuluzi okulwa ne-brute-force kunciphisa kakhulu ingozi yesigameko esingathi sína, okuvumela izinsizakalo ukuthi zisebenze ngokuqina okuphezulu.
