UKaspersky uthi iLinux iya ngokujolisa ekuhlaselweni

Ngokutsho Abaphandi bezokhuseleko abavela I-Kaspersky, imigewu ijolise ekuhlaseleni iiseva zeLinux kunye neendawo zokusebenzela.

Ngelixa iinkqubo zeWindows bezisoloko zijolise kubahlaseli, izoyikiso ezingapheliyo (APT) ngoku yingxaki enkulu kwilizwe leLinux.

Kwiinkqubo zeLinux zijolise ngqo kukhetho olukhulayo lwezixhobo ezinobungozi.

Ngelixa kungaziwa kwaphela ukuba iLinux malware ifunyenwe, kwaye mininzi imizekelo ebonakalayo enje ngeTwoSail Junk, Sofacy kunye ne-Equation, U-Kaspersky uphawula ukuba ngaphandle kokubonakala ngokubanzi kweenkqubo zeLinux kunqabile okanye kungaze kujolise kuko, zininzi ii-webhells, ngasemva, kunye neengcambu ezenzelwe iLinux.

Intsomi yokuba iLinux, ekubeni iyinkqubo yokusebenza engathandwa kakhulu, ayinakulindeleka ukuba ijolise kwi-malware, imema umngcipheko wokhuselo lwe-cyber. Ngelixa uhlaselo olujolise kwiinkqubo ezisekwe kwi-Linux lusenqabile, ngokuqinisekileyo kukho i-malware eyenzelwe bona, kubandakanya ii-webshells, ngasemva, i-rootkits, kunye nokuxhaphaza ngokwesiko.  

Umzekelo wakutshanje luhlobo oluhlaziyiweyo lwangaphandle Linux Ngoku Iqela laseRussia iTurla.

Iqela laseKorea uLazaro likwandisile i-arhente ye-malware yeLinux, kubandakanya izixhobo ezahlukeneyo ezisetyenziselwa ubuntlola kunye nohlaselo lwezezimali.

U-Yury Namestnikov, UMlawuli weqela laseKaspersky loPhando lweHlabathi kunye noHlolo (GReAT) eRashiya, uthi:

"Iingcali zethu zichonge imeko yokuphucula izixhobo ze-APT amaxesha amaninzi ngaphambili. kwaye izixhobo ze-Linux-centric azikho ngaphandle. Ukukhusela iinkqubo zabo, i-IT kunye namasebe ezokhuseleko basebenzisa iLinux rhoqo kunakuqala. Abadlali besoyikiso bayaphendula kolu phuhliso ngokwenza izixhobo ezintsonkothileyo ezinokungena kwezi nkqubo. Sicebisa iingcali zokhuselo lwe-cyber ukuba zinike ingqalelo kule meko kwaye zenze amanyathelo ongezelelweyo okukhusela iiseva zabo kunye neendawo zokusebenza.

Iinkampani zenkampani yezokhuseleko zabelana ngeenkcukacha uthotho lwamanyathelo anokuthathwa ukunceda ukukhusela iinkqubo zeLinux kwii-APTs:

• Gcina uluhlu lwemithombo ethembekileyo yesoftware kwaye uphephe ukusebenzisa amajelo okuhlaziya angabhalwanga.
• Sukuqhuba iibinaries kunye nezikripthi ezivela kwimithombo engathembekanga. Iindlela ezipapashwe ngokubanzi zokufaka iinkqubo ezinemiyalelo enje nge "curl https: // install-url | I-sudo bash »yenza umba wokhuseleko lokwenyani
• Qinisekisa ukuba inkqubo yokuhlaziya iyasebenza kwaye iqwalasela uhlaziyo oluzenzekelayo lokhuseleko
• Ukuthatha ixesha lokumisela ngokufanelekileyo i-firewall-qinisekisa ukuba ingena kwimisebenzi yenethiwekhi, ibhloka izibuko ongazisebenzisiyo, kwaye inciphise inyawo lakho
• Sebenzisa ukungqinisisa esekwe kwi-SSH kwaye ukhusele amaqhosha ngamagama agqithisiweyo
• Sebenzisa i-2FA (ukuqinisekiswa kwezinto ezimbini) kunye nokugcina amaqhosha abuthathaka kwizixhobo zethokheni yangaphandle (umzekelo, Yubikey)
• Sebenzisa isinxibelelanisi sangaphandle kwebhendi yokujonga esweni kwaye uhlalutye unxibelelwano lwenethiwekhi kwiinkqubo zakho zeLinux
• Gcina ingqibelelo yenkqubo ephunyeziweyo yefayile kwaye ujonge amaxesha ngamaxesha ifayile yoqwalaselo yotshintsho
• Zilungiselele ukuhlaselwa ngokwasemzimbeni okanye ngaphakathi-sebenzisa ukubethela okugcweleyo kwidiski, izinto zokuqala ezikhuselekileyo nezithembekileyo, kwaye ubeke iiteyiphu zokhuselo ezinobungqina kwizixhobo zakho ezibalulekileyo.
• Ukuphicothwa kwenkqubo kwaye ujonge iilog zokufumana uhlaselo
• Yenza uvavanyo lokungena ngaphakathi kufakelo lwakho lweLinux
• Sebenzisa isisombululo sokhuseleko esizinikeleyo kunye nokukhuselwa kweLinux, njengokukhuseleka kwendawo yokuphela. Esi sisombululo sinika ukhuselo lwewebhu kunye nenethiwekhi ukufumana ubuqhetseba, iiwebhusayithi ezinobungozi, kunye nohlaselo lwenethiwekhi, kunye nolawulo lwesixhobo, ukuvumela abasebenzisi ukuba babeke imigaqo yokudlulisela idatha kwezinye izixhobo.

I-Kaspersky Hybrid Cloud Security yenza ukuba i-DevOps ikhuseleke, inike amandla ukuhlanganiswa kokhuseleko kumaqonga e-CI / CD nakwizikhongozeli, kunye nokutshekishwa komfanekiso ngokuchasene nokuhlaselwa kwetyathanga lonikezo

Ukuba ufuna ukwazi ngakumbi ngayo Ungajonga inqaku lokuqala Kule khonkco ilandelayo.