Ukuhlasela kwasekhaya kanye ne-cyberattack simulator: umhlahlandlela ophelele

  • Ama-simulators okuhlasela avumela ukuqeqeshwa ekutholeni nasekuphenduleni ekuhlaselweni ngokomzimba kanye nokuhlaselwa kwe-cyber ezindaweni ezilawulwayo.
  • Amathuluzi afana ne-Slowloris, i-HULK, i-LOIC, noma i-UFOnet aphinda ahlasele i-DoS kanye ne-DDoS ukuze ahlole ukuqina kwamaseva namanethiwekhi.
  • Amadivayisi okukhona asetshenziswa ekhaya kanye nezinhlelo zomlilo owomile njenge-Smokeless Range® zithuthukisa ukuphepha kwekhaya kanye nokuzivikela komuntu siqu.
  • Amapulatifomu afana ne-Microsoft CyberBattleSim asebenzisa ukufunda kokuqinisa kanye ne-AI ukutadisha ukuziphatha kwabahlaseli kanye nabavikeli kumanethiwekhi alingisiwe.

Isilingisi sokuhlasela kwe-cyber

Lapho sikhuluma nge Isilingisi sokuhlasela sasekhayaEmpeleni sibhekisela kusethi ephelele yamathuluzi nezimo. Kusukela ekulingiseni abahlaseli basekhaya kuya kumalebhu okudala kabusha ukuhlaselwa kwe-cyber okuyinkimbinkimbi ngokumelene namanethiwekhi namaseva. Akuyona nje "uhlelo" olufakayo futhi yilokho kuphela. Kuyindlela yokuqeqesha nokuhlola ehlanganisa isofthiwe, amadivayisi angokoqobo, nezindlela zokuhlola ukuthuthukisa ukuphepha kwansuku zonke.

Lezi zinhlobo zama-simulators zikuvumela ukuthi uzijwayeze indlela ukusabela ekuhlaselweni endaweni elawulwayoKungakhathaliseki ukuthi ukucima kweseva, ukuzama ukungena kwe-Wi-Fi, noma isigameko sokuphepha kwenethiwekhi yenkampani, sizochaza izinhlobo ezahlukene zama-simulators ahlobene nokuhlaselwa kwasekhaya kanye nokuhlaselwa kwe-cyber asetshenziswa namuhla, ukuthi asebenza kanjani, nokuthi ahloselweni.

Izilingisi zokuhlaselwa kwezinhlelo namaseva

Enye yezindlela ezivamile kakhulu kulo mkhakha yi- ukulingiswa kokuhlaselwa kwezinhlelo namaseva ukuhlola ukuqina kwayo. Ngaphambi kokuqala lolu hlobo lokuhlola, kwenziwa ukuqinisekiswa okuphelele kohlelo oluzolingiswa: izici zalo zobuchwepheshe, izinsizakalo ezinikezayo, ukuncika, kanye nezindawo zokuhlasela ezingaba khona kuyahlaziywa, ikakhulukazi uma ingqalasizinda isetshenziswa I-Microsoft AzureLokho kuhlaziya kokuqala kubalulekile ekunqumeni. Yiziphi izinhlobo zokuhlasela okunengqondo ukuziphinda? kanye nalokho esifuna ukukufunda kulesi simo ngasinye.

Ngesikhathi salezi zilingiso kubalulekile ukuthi zonke izingxenye zesistimu ziyahlolwaLokhu kugwema ukushiya izindawo zingalawulwa ezingaba ubuthakathaka esimweni sangempela. Akukhona nje ukuqala ukuhlasela "okujwayelekile" okumbalwa nokucabangela umsebenzi owenziwe, kodwa mayelana nokuklama imikhankaso yokuhlola ehlanganisa izigaba ezahlukene: ukuhlola, ukuxhashazwa, ukukhushulwa kwamalungelo, ukunyakaza okuseceleni, kanye nokuhoxiswa kwabahlaseli.

Ngale ndlela, i-simulator iba ithuluzi le- ukutholwa kwesitimela kanye nomthamo wokuxilongaEzimweni eziseduze ngangokunokwenzeka nendawo yansuku zonke, amaqembu afunda ukuqaphela amaphethini okuziphatha angajwayelekile, axhumanise izehlakalo, futhi ahlukanise phakathi kwesigameko esilula nokuhlasela okuqhubekayo. Bese kuba yingxenye esebenzayo ye indlela yokulwa nokuhlasela: yiziphi izinyathelo okufanele zithathwe, nini lapho kufanele kwenziwe ngobudlova, nini lapho kungcono ukuba nombono oqondile ukuze ungawisi uhlelo uqobo, nokuthi yiziphi izinyathelo zokuvimbela ezisebenza kahle kakhulu.

Ukusabela ekuhlaselweni okuqhubekayo kudinga isivinini sokulinganisela nokuhlakaniphaIsinqumo esibi singaba nomthelela omkhulu kunokuhlasela ngokwako. Isibonelo, ukuvala ngokungadingekile izinsizakalo ezibalulekile noma ukususa ubufakazi obubalulekile ekuhlaziyweni kwe-forensic. Ngakho-ke, lawa ma-simulators afaka nezigaba zokuhoxiswa komhlaseli, ukuvala ngokuphelele usongo, kanye nokulandelela imizila yokubuya okungenzeka ukuqinisekisa ukuthi akukho minyango yangemuva ehlala ivulekile engavumela ukuvumelana okusha.

ufone

Izilingi zokuhlasela ze-DoS kanye ne-DDoS zamanethiwekhi namaseva

Ezweni lokuhlaselwa kwe-cyber, isici esibaluleke kakhulu yi- ukulingiswa kokuhlaselwa kokunqatshelwa kwenkonzo (i-DoS kanye ne-DDoS)Lokhu kuhlaselwa kwenzelwe ukunqoba izinsiza nokudiliza iwebhusayithi, iseva, noma isevisi ethile. Kunezinhlelo eziningi zamahhala, ezenzelwe abasebenzisi basekhaya abafuna ukufunda kanye nezinhlangano ezifuna ukuhlola ukuzivikela kwazo kulezi zinsongo.

Lezi zi-simulators azisetshenziswa ukuhlasela abantu besithathu. Eqinisweni, ziyasebenza. amathuluzi okufundisa nawokuhlola ezindaweni ezilawulwayoNgokuvamile zisetshenziswa kumalebhu angaphakathi, emishinini ebonakalayo, noma ezindaweni zokuhlola ezilingisa ingqalasizinda yangempela. Lokhu kukuvumela ukuthi uhlole ukuthi iseva ingasingatha kahle kangakanani ukwanda kwezicelo noma ithrafikhi enamandla enonya, konke ngaphandle kokubeka izinhlelo zokukhiqiza engozini. Lezi yizona ezingcono kakhulu:

I-Slowloris: ukuhlasela kwe-HTTP okunamandla aphansi kodwa okuphumelelayo kakhulu

I-Slowloris iyithuluzi elenzelwe ukuxhaphaza indlela amaseva amaningi ewebhu asebenza ngayo Baphatha ama-subprocesses kanye nokuxhumeka kwe-HTTPLokho ekwenzayo ukuthumela izicelo eziningi ze-HTTP ukuze ihlale ivulekile isikhathi eside ngangokunokwenzeka, ithumela idatha ngezingcezu kancane kakhulu ukuze iseva ingavali uxhumano.

Ngokuqoqa inani elikhulu izinhlelo zokusebenza ezingapheleleIseva igcina isebenzisa zonke izintambo noma ukuxhumana okutholakalayo ukuze ikhonze amaklayenti amasha asemthethweni. Umphumela uba ukuhlaselwa kokunqatshwa kwenkonzo. Isayithi libonakala liphansi noma lihamba kancane kakhulu, yize i-bandwidth ingagcwele ngokobuchwepheshe. I-Slowloris ilungele ukuhlola ukuthi amaseva asabela kanjani kulolu hlobo lokuhlaselwa kokukhathala kwezinsiza.

I-HULK: Ukugcwala ngezicelo ze-HTTP eyodwa

I-HULK, enezinhlamvu zokuqala ezimele Inkosi Yomthwalo Ongabekezeleleki we-HTTPKuyithuluzi elidumile lokulingisa ukuhlaselwa kwe-DDoS kumaseva ewebhu. Umgomo walo ukukhiqiza inani elikhulu lezicelo ze-HTTP ezihlukile, ukushintsha izihloko namapharamitha ukwenza ukugcinwa kwesikhashana kube nzima kakhulu nokuqinisekisa ukuthi isicelo ngasinye sidinga umsebenzi wangempela kusuka kuseva.

Leli thuluzi labhalwa ekuqaleni nge-Python futhi kamuva lathunyelwa ku-Go. Lokhu kukuvumela ukuthi Sebenzisa izinsiza kangcono futhi ulethe ithrafikhi eningi ngokusetshenziswa okuncaneIwusizo kakhulu ekuhloleni ikhono lewebhusayithi lokubekezelela ukukhuphuka komthwalo ngokweqile noma ukuhlaselwa okuklanyelwe ukuyisusa. Ikhodi iyatholakala kumapulatifomu afana ne-GitHub, kanye nemibhalo yobuchwepheshe kanye nezibonelo zokusetshenziswa ezihloselwe ukuhlolwa kokucindezeleka okulawulwayo.

I-Tor's Hammer: Isilingisi se-DDoS esingaziwa nge-Tor

I-Tor's Hammer ingenye uhlelo oluvumela Ukuhlola amaseva nezinhlelo zokusebenza zewebhu ukulingisa ukuhlaselwa kwe-DDoS. Igama layo alilona iphutha: lihlangana nenethiwekhi ye-Tor. Okusho ukuthi, esimweni sangempela, lingavumela ithrafikhi ukuthi iqaliswe ngokungaziwa kusuka kuma-node asakazwe. Elabhorethri, lesi sici singasetshenziswa ukutadisha ukuthi izivikelo zisabela kanjani kuthrafikhi ebonakala ivela emithonjeni eminingi.

Ukuhlasela okukudalayo kusekelwe ku- gcwalisa isitaki se-TCP ngezicelo eziningi ezingapheleleIthumela izicelo kancane kancane ukuze igcine ukuxhumana kusebenza isikhathi eside ngangokunokwenzeka, ngenhloso yokuthi iseva ekugcineni ifinyelele eqophelweni lapho ingasakwazi ukwamukela ukuxhumana okusha. Ibhalwe nge-Python futhi ivame ukutholakala ezindaweni zokugcina imininingwane yomphakathi.

I-DDOSIM Yesigaba 7: Ama-IP amaningi alingisiwe ngokumelene nethagethi

I-DDOSIM Layer 7 igxile kungqimba yohlelo lokusebenza (ingqimba 7 yemodeli ye-OSI) kanye ilingisa ukuhlaselwa kwe-DDoS ngamakheli e-IP amaningi akhiqizwe ngokungahleliweNgale ndlela, ilingisa ukuziphatha kwe-botnet esatshalaliswe ethumela izicelo ze-TCP kanye ne-HTTP kuseva eqondiwe.

Ngokuvamile isebenza ezindaweni ze-LinuxYenzelwe ukuvumela abaphathi nabaphathi bezokuphepha ukuthi bahlole amandla angempela ezinsizakalo zabo ukuze bamelane nalezi zinhlobo zokuhlaselwa, ikakhulukazi lezo eziqondiswe kuzinsizakusebenza (amawebhusayithi, ama-API, izinsizakalo ze-HTTP). Ikhodi yomthombo ivame ukutholakala ezindaweni zokugcina umphakathi, kanye nemibhalo yokuhlanganiswa kwayo nokusetshenziswa kwayo.

I-UFOnet: Ukuhlaselwa Kwesigaba 7 kanye Nesigaba 3

I-UFOnet iyithuluzi lamahhala eliqondiswe ku- ukwenza ukuhlaselwa kwe-DoS kanye ne-DDoS kuzo zombili izendlalelo 7 (uhlelo lokusebenza) kanye nezendlalelo 3 (inethiwekhi)Esinye sezici zayo eziphawulekayo ukuthi isebenzisa ama-vector e-Open Redirect kumawebhusayithi ezinkampani zangaphandle, iwasebenzisa njengokungathi ayi-botnet esatshalaliswe eqondisa kabusha ithrafikhi enonya iye kumuntu okuqondiwe kuye.

Ngaphezu kwalokho, i-UFOnet ihlanganisa uhlobo lwe- I-DarkNet Ebethelwe yokwabelana ngokuqukethweNgokusekelwe kusakhiwo se-P2P sokuxhumana ngqo, la makhono, endaweni elawulwayo, avumela abacwaningi ukuthi baphenye ukuthi izinsizakalo zezinkampani zangaphandle ezisemthethweni zingase zisetshenziswe kabi kanjani ukuze kuthuthukiswe ukuhlaselwa, futhi ngesikhathi esifanayo, bafunde izindlela zokuzivikela ezingaba khona ngokumelene nakho.

I-LOIC ne-GoldenEye: ama-classic okuqeqesha nokuhlola ukuzivikela

I-LOIC (Low Orbit Ion Cannon) ingenye yezinhlelo ezaziwa kakhulu zokulingisa ukuhlaselwa kwe-DDoS. Isetshenziswe iminyaka eminingi. Iyisofthiwe yamahhala futhi iyi- itholakalela iWindows neLinuxUmsebenzi wayo oyinhloko ukuthumela inani elikhulu lamaphakethe e-TCP, i-UDP kanye nezicelo ze-HTTP(S) ngokumelene nomgomo ukuze kuhlolwe ukuthi ingqalasizinda ingawuphatha kangakanani umthwalo.

Umgomo wabathuthukisi bayo kwakuwukuba isetshenziswe njalo izinjongo zemfundo nokuhlola ezindaweni ezigunyaziweUkuze uqonde kangcono ukuthi inethiwekhi iziphatha kanjani ngesikhathi sokuhlaselwa kwe-DDoS, hlola ukuthi ukuzivikela kwanele yini, bese uthola ubuthakathaka obudinga ukuthuthukiswa. Ikhodi yomthombo ingabukwa futhi ilandwe, yize ithuluzi lingasagcinwa, ngakho-ke kufanele lisetshenziswe ngokuqapha futhi kuphela ezindaweni zelebhu.

I-Microsoft FireBattlesim

Izilingisi zokuhlasela nge-cyberattack ezinobuhlakani bokwenziwa: I-Microsoft CyberBattleSim

Ebhizinisini nasemsebenzini, kuvele amaphrojekthi athakazelisayo kakhulu agxile kuwo linganisa ukuhlaselwa kwe-cyber okuyinkimbinkimbi kusetshenziswa amasu obuhlakani bokwenziwa. Enye yezinto ezihlaba umxhwele kakhulu yi-cyberattack simulator eyethulwe yi-Microsoft: I-CyberBattleSim. Yenzelwe ukusiza amaqembu okuphepha ukuthi adale amanethiwekhi abonakalayo lapho angabona khona ukusebenzisana phakathi kwabahlaseli abazenzakalelayo kanye nabavikeli.

Lesi silingisi sisatshalaliswa njenge iphrojekthi yomthombo ovulekile ku-GitHub Isekelwe ku-OpenAI Gym toolkit, eyaziwa kakhulu emkhakheni wokufunda okuqinisiwe. Nakuba lolu hlobo lobuchwepheshe lusetshenziswe ekuqaleni ikakhulukazi emidlalweni yevidiyo, kumarobhothi, nasezinhlelweni zokulawula, iMicrosoft iqaphele amandla ayo amakhulu okusetshenziswa ekuphepheni kwe-cyber.

Umqondo uwukuthi abacwaningi bangakwazi chaza inethiwekhi enama-node amaningiokucacisa ukuthi yiziphi izinsizakalo ezisebenza kuhlelo ngalunye, ukuthi yiziphi izithiyo ezizilethayo, nokuthi yiziphi izindlela zokuphepha ezisetshenzisiwe (izicishamlilo, izinhlelo zokuthola, izinqubomgomo zokufinyelela, njll.). Ama-ejenti azenzakalelayo abe eseqaliswa kule ndawo, ethatha izindima zabahlaseli nabavikeli.

Abahlaseli abazenzakalelayo bahlose ukuthatha inethiwekhi eningi ngangokunokwenzekaUkuxhaphaza ubuthakathaka, ukuhamba phakathi kwama-node, nokuzama ukwandisa amalungelo noma nini lapho kungenzeka. Abavikeli abazenzakalelayo, ngakolunye uhlangothi, baklanyelwe ukubona ukungena, ukubavimba, nokuxosha abahlaseli emvelweni, ukubuyisela ukulawula.

Ngokusho kwethimba locwaningo lweMicrosoft 365 Defender, iCyberBattleSim ivumela ukubheka ngokuningiliziwe ukuthi umuntu osongelayo usakazeka kanjani eceleni Ngemva kokufinyelela kokuqala kunethiwekhi, lokhu kusiza ukuqonda kangcono ukuthi yimiphi imizila yokuhlasela engenzeka kakhulu. Kuphinde kwembule ukuthi yiziphi izilungiselelo zokuphepha ezivimbela kakhulu intuthuko yomhlaseli nokuthi yibuphi ubuthakathaka obudinga ukuqiniswa.

Umgomo omkhulu ukuthi ochwepheshe bezokuphepha bakwazi Hlaziya futhi uthuthukise ukusetshenziswa kokufunda okuqinisiwe kuzinhlelo zokusebenza zokuphepha kwe-inthanethiNgokuqeqesha ama-ejenti kule ndawo elingisiwe, amasu amasha okuzivikela angatholakala, futhi izimpendulo eziguquguqukayo zingazenzakalela. Sekukonke, lokhu kuphakamisa izinga lokuvuthwa kokuphepha ngaphandle kokufaka engcupheni izinhlelo zangempela.

Ukufunda okuqinisiwe okusetshenziselwa ukuphepha

Ukufunda ukuqinisa kuyindlela Ukufunda komshini lapho umenzeli enza izinqumo ngokusebenzisana nendawo akuyo kanye nokuthola imivuzo noma izinhlawulo ngokusekelwe ezenzweni zayo. Esikhundleni sokufunda ezibonelweni ezingaguquki, umenzeli uhlola amasu. Ubona imiphumela futhi alungise ukuziphatha kwakhe ukuze andise isilinganiso esithile sempumelelo.

Ezindaweni ezifana ne-OpenAI Gym, le ndlela isetshenziswe ngempumelelo ku- imidlalo yevidiyo, amarobhothi kanye nezinhlelo zokulawulalapho umenzeli efunda khona ukunqoba amazinga, ukugcina ibhalansi yerobhothi, noma ukuphatha uhlelo oluguquguqukayo. I-Microsoft ivumelanise lo mqondo ofanayo nomhlaba wokuxhumana kanye nokuphepha kwe-inthanethi. Umphumela: ukukhombisa ukuthi izindawo zokulingisa ezicebile ngokwanele ukuqeqesha ama-ejenti okuzivikela kanye nokuhlasela zingakhiwa.

Nakuba izinhlelo zamakhompyutha nenethiwekhi ziyinkimbinkimbi kakhulu kunomdlalo wevidiyo ojwayelekile, okuhlangenwe nakho kwesikhathi esidlule kubonisa ukuthi I-OpenAI Gym inikeza uhlaka oluqinile lwalolu hlobo locwaningoYingakho i-CyberBattleSim ithembele kule nqubo ukuze umphakathi wabacwaningi kanye nososayensi bedatha bakwazi ukuzama, ukulungisa izindawo, nokwabelana ngemiphumela.

Izilingisi zokuhlasela ze-WiFi kanye nezinhlelo zokusebenza zeselula

Emkhakheni wasekhaya sithola nezinhlelo zokusebenza zeselula ezithi Zilingisa amandla amakhulu noma ukuhlaselwa kwesichazamazwi ngokumelene namanethiwekhi e-Wi-Fi. Hhayi ngempela ukuze bayekethise, kodwa ukuze babonise ngokubonakalayo nangokwemfundo ukuthi ukuhlaselwa okunjalo kuzobukeka kanjani. Isibonelo esisodwa yi-simulator efana ne-WIBR+ (Wifi Bruteforce), ephinda inqubo yokuzama ukuqhekeza amaphasiwedi.

Lezi zinhlobo zezinhlelo zokusebenza zibonisa okulandelayo esikrinini:

  • Amaphasiwedi "ahlolwa" -
  • Uhlobo lokuhlasela (isichazamazwi noma amandla aluhlaza).
  • Isikhathi esilinganiselwe esingathathwa ukuthola ukhiye osebenzayo ngaphansi kwezimo zangempela.

Nakuba zilingisa isivinini kanye nokugeleza kokuhlasela, azisunguli ukuxhumana kwangempela noma amanethiwekhi okuvumelana. Inhloso yazo iwukubonisa nje.

Ngokuphathelene nezimvume, lezi zinhlelo zokusebenza ngokuvamile cela ukufinyelela endaweni Ukuze kufakwe ohlwini amanethiwekhi e-Wi-Fi atholakalayo, izinhlelo zokusebenza zeselula zihlobanisa ukuskena kwenethiwekhi nedatha yendawo. Zicela nokufinyelela ku-inthanethi, ngokuvamile ukuze kuboniswe izikhangiso. Kubalulekile ukuqonda lokhu kulingisa njengethuluzi lokukhulisa ulwazi mayelana ukubaluleka kokusebenzisa amaphasiwedi aqinile futhi uvikele amaphrothokholi okubethela ku-router yakho yasekhaya.

Lonke lolu hlelo lokusebenza lwezilingisi—kusukela kulabo abakha kabusha ukuzama ukuphanga ikhaya kusetshenziswa ukukhanya nezithunziKusukela kumapulatifomu e-AI ahlola ukuhlaselwa kwe-cyber okuthuthukisiwe kuya ezinhlelweni ze-DDoS zakudala kanye nabaqeqeshi bokudubula ekhaya, konke kubonisa ukuthi indlela engcono kakhulu yokulungiselela ukuhlaselwa ukuzijwayeza ezindaweni ezilawulwayo. Uma isimo silingisiwe singokoqobo futhi siphelele, kuba lula ukubona ubuthakathaka, ukufunda ukuphendula ngokuthula, nokuqinisa kokubili ukuphepha okungokwenyama kwekhaya kanye nokuphepha kwe-cyber kwamanethiwekhi nezinhlelo.

i-microsoft azure
I-athikili ehlobene:
Zitholele yonke imikhiqizo namasevisi e-Microsoft Azure: umhlahlandlela ophelele

Engeza njengomthombo okhethwayo