Kufufuza kwa intrusion system (IDS) oyang'anitsitsa mauthenga a pa Intaneti ndi oyang'anitsitsa ntchito zokayikitsa ndikuchenjeza dongosolo kapena wogwiritsira ntchito. Nthawi zina, IDS imatha kuchitapo kanthu pamsewu wosayenerera kapena woipa mwa kuchitapo kanthu monga kutseka aderesi kapena apulogalamu ya IP kuchoka pa intaneti.
IDS imabwera mu "zokopa" zosiyanasiyana ndikuyendera cholinga chozindikira magalimoto okayikira m'njira zosiyanasiyana. Pali magulu omangamanga (NIDS) ndi maofesi omwe amawotchera (HIDS). Pali IDS zomwe zimagwirizana ndi kuyang'ana zolemba zina zomwe zimayambitsidwa-zofanana ndi momwe antivirasi imapezera komanso kutetezera pulogalamu yachinsinsi - ndipo pali IDS zomwe zimazindikira poyerekeza ndi kayendetsedwe ka magalimoto ndikuyang'ana zolakwika. Pali IDS zomwe zimangoyang'anitsitsa ndi kuchenjeza ndipo pali IDS zomwe zimachitapo kanthu kapena zochitika poyang'ana zoopsya zomwe zimawoneka. Tidzakambirana zonsezi mwachidule.
NIDS
Ma Intaneti Akuyang'anitsitsa Amakonzedwe pazinthu zamakono kapena malo mkati mwa intaneti kuti ayang'anire zamagalimoto kupita kuzinthu zonse pa intaneti. Mwamtheradi, mungayese magalimoto onse osokonekera komanso otayika, ngakhale kuti kuchita zimenezi kungapangitse vuto lomwe lingasokoneze liwiro lonse la intaneti.
HIDS
Maofesi Odzidzidzirira Kufuna Kulowera Akugwiritsidwa ntchito pazipinda kapena makina omwe ali pa intaneti. HIDS ikuyang'anitsa mapaketi omwe amalowa ndi omwe amachokera pa chipangizo chokhacho ndipo amadziwa wothandizira kapena woyang'anira ntchito yodandaula akupezeka
Chizindikiro chachokera
A signature ozikidwa IDS adzayang'ana mapaketi pa intaneti ndi kuwayerekeza motsatira database of signatures kapena zizindikiro kuchokera zoopsa zowopsya. Izi zikufanana ndi momwe njira yambiri yowumitsira antivirus imapezera malonda. Vuto ndilokuti padzakhalanso maphala pakati pa zowopsya zatsopano zomwe zidzatuluke kuthengo ndi siginecha pozindikira kuti manthawa agwiritsidwa ntchito ku IDS yanu. Panthawi yamalonda, IDS yanu silingathe kuzindikira vuto latsopanoli.
Zokhazikika
Chidziwitso cha IDS chomwe chimawoneka bwino chidzayang'anitsitsa kayendetsedwe ka magetsi ndikuchiyerekeza ndi maziko oyambira. Zotsatirazo zidzatanthauzira zomwe ziri "zachizolowezi" pa intaneti - ndi mtundu wanji wa bandwidth omwe amagwiritsidwa ntchito nthawi zambiri, ndi ma protocol ati omwe amagwiritsidwa ntchito, machweti ndi zipangizo zambiri zimagwirizanirana wina ndi mzake - ndipo yang'anani wotsogolera kapena wogwiritsa ntchito pamene magalimoto amapezeka omwe ali osokonezeka, kapena zosiyana kwambiri ndizoyambira.
Zizindikiro zosadziwika za IDS
Chidziwitso cha IDS chimangozindikira komanso chenjezo. Pamene magalimoto okayikira kapena owopsya amapezeka kuti tcheru timapereka ndipo timatumizidwa kwa wotsogolera kapena wogwiritsa ntchito ndipo ndi kwa iwo kuti athetsepo ntchitoyo kapena kuyankha mwanjira ina.
Zosakaniza IDS
Chodziwikiratu cha IDS sichidzangozindikira magalimoto okayikira kapena oipa ndipo imayang'anitsitsa wotsogolera koma idzachitapo kanthu zowonongeka kuti zithe kuopsya. Kawirikawiri izi zikutanthauza kutseka njira ina iliyonse yamtaneti kuchokera kumtengowu wa IP kapena wosuta.
Chimodzi mwa zodziwika bwino kwambiri ndi zogwiritsidwa ntchito kwambiri pofufuza zizindikiro ndizowonekera, mwachindunji mulipo Snort. Ipezeka pamasitepe ndi machitidwe ophatikizapo kuphatikizapo Linux ndi Windows . Snort ili ndi zotsatira zazikulu komanso zokhulupirika ndipo pali zinthu zambiri zomwe zilipo pa intaneti kumene mungapeze masayina kuti muzitsatira kuti muwone zowopsya zatsopano. Kwa maofesi ena osankhidwa a freeware osakaniza, mungathe kupita ku Free Intrusion Detection Software .
Pali mzere wabwino pakati pa firewall ndi IDS. Palinso teknoloji yotchedwa IPS - Intrusion Prevention System . An IPS kwenikweni ndiwotchedwa firewall yomwe imagwirizanitsa kufotokozera zamagetsi ndi zamagetsi ndi zizindikiro za IDS pofuna kuteteza makanema. Zikuwoneka kuti pamene nthawi ikupita pamoto, IDS ndi IPS zimagwiritsanso zikhumbo zina ndi mzake ndikusokoneza mzere wochuluka.
Chofunika kwambiri, wanu wozimitsira moto ndilo mzere woyamba wa chitetezero chanu. Njira zabwino zimalimbikitsa kuti firewall yanu ikonzedwe bwino kuti DENY zonse zowonongeka zichitike ndipo mutsegula mabowo ngati kuli kofunikira. Mungafunikire kutsegula phukusi 80 kuti mulowe mawebusaiti kapena sewero 21 kuti mulandire seva la fTP FTP . Zina zonsezi zingakhale zofunikira kuchokera kumalingaliro amodzi, koma zimayimiliranso zovuta zogulitsira malonda kuti alowe mumtaneti wanu kusiyana ndi kutsekedwa ndi firewall.
Ndi pomwe IDS yanu ingalowemo. Kaya mumagwiritsa ntchito NIDS pamtunda wonse kapena HIDS pa chipangizo chanu, IDS idzayang'ana magalimoto osokonekera komanso otayika ndikupeza magalimoto okayikitsa kapena oipa omwe angadutse pamtunda wanu wamoto kapena Zingakhale zochokera mkati mwa intaneti yanu.
IDS ikhoza kukhala chida chachikulu chowunika ndikuyang'anira chitetezo chanu kuchokera ku ntchito zoipa, komabe, zimakhala zovuta kwa malamu wonyenga. Pogwiritsa ntchito njira iliyonse ya IDS yomwe mumayimilira muyenera kuyigwiritsa ntchito pokhapokha itayikidwa. Mukufunikira IDS kuti ikonzedwe bwino kuti muzindikire zomwe zimakhala zachilendo pamtunda wanu ndi zomwe zingakhale zovuta zamagalimoto ndi inu, kapena otsogolera omwe akuyenera kuyankha mauthenga a IDS, kuti muzindikire zomwe zizindikirozo zikutanthauza komanso momwe mungayankhire.