UGoogle ucebisa ukuseka imigaqo emitsha yokuphucula ukhuseleko lomthombo ovulekileyo

Ukhuseleko lwesoftware yomthombo ovulekileyo litsale umdla kwishishini, kodwa izisombululo zifuna ukuvumelana kwimingeni nentsebenziswano ekuphunyezweni.

Ingxaki inzima kwaye zininzi iinkalo zokugubungela, Ukusuka kwityathanga lonikezelo, kulawulo lokuxhomekeka, kubuni, phakathi kwezinye izinto Ukwenza oku, uGoogle kutsha nje ukhuphe isikhokelo ("Yazi, Thintela, Lungisa") esichaza ukuba ishishini linokucinga njani ngobungozi kumthombo ovulekileyo kunye neendawo ezithile ekufuneka zijongiwe kuqala.

UGoogle ucacisa izizathu zakhe:

“Ngenxa yeziganeko zamva nje, ilizwe lesoftware lifumene ukuqonda okunzulu ngomngcipheko wokwenyani wohlaselo lokunikezelwa kwempahla. Isoftware yomthombo ovulekileyo kufuneka ibe semngciphekweni omncinci ngokwembono yezokhuseleko, njengoko yonke ikhowudi kunye nokuxhomekeka kuvulekile kwaye kuyafumaneka ukuze kuhlolwe kwaye kuqinisekiswe. Kwaye ngelixa oku kuyinyani ngokubanzi, kucingelwa ukuba ngabantu abenza lo msebenzi wokuhlola. Ngokuxhomekeka okuninzi, akunakwenzeka ukuba ubeke iliso kubo bonke kwaye uninzi lweephakeji zemithombo evulekileyo azigcinwanga kakuhle.

Kuqhelekile ukuba inkqubo ixhomekeke, ngokuthe ngqo okanye ngokungathanga ngqo, kumawakawaka eephakeji nakumathala eencwadi. Umzekelo, iiKubernetes ngoku zixhomekeke kwiiphakheji ezili-1000. Umthombo ovulekileyo mhlawumbi usebenzisa ukuxhomekeka endaweni yesoftware yokuthengisa kwaye uvela kuluhlu olubanzi lwabathengisi; inani lezinto ezizimeleyo ezinokuthenjwa linokuba likhulu kakhulu. Oku kwenza ukuba kube nzima kakhulu ukuqonda ukuba umthombo ovulekileyo usetyenziswa njani kwiimveliso kunye nokuba zeziphi izinto ezisengozini ezinokuthi zichaphazele. Akukho siqinisekiso sokuba into eyakhiweyo iya kuhambelana nekhowudi yemvelaphi.

Kwisakhelo esicetywayo nguGoogle, kuyacetyiswa ukwahlula obu bunzima kwiindawo ezintathu ezizimeleyo ezinengxaki, nganye ineenjongo ezithile:

Yazi ukuba sesichengeni kwesoftware yakho

Ukwazi ukuba sesichengeni kwesoftware yakho kunzima kunokuba ungalindela ngenxa yezizathu ezininzi. Ewe kulungile zikhona iindlela zokuxela ubungozi, Akucaci ukuba ngaba zichaphazela ngokwenene iinguqulelo ezithile zesoftware oyisebenzisayo:

• Injongo: Idatha yokuChaphazeleka ngokuchanekileyo: Okokuqala, kubalulekile ukufaka imethadatha echanekileyo yokuba semngciphekweni kuyo yonke imithombo yolwazi ekhoyo. Umzekelo, ukwazi ukuba loluphi uhlobo oluveze ukuba sesichengeni kunceda ekuboneni ukuba ngaba isoftware ichaphazelekile, kunye nokwazi xa kuthe kwafunyanwa iziphumo kwizilungiso ezichanekileyo nangexesha elifanelekileyo (kunye nefestile emxinwa yokuxhaphaza okunokubakho). Ngokufanelekileyo, olu hambo lokuhamba komsebenzi kufuneka luzenzekelayo.
• Okwesibini, ubukhulu becala ubungozi buxhomekeke ekuxhomekekeni kwakho, endaweni yekhowudi oyibhalayo okanye oyilawulayo ngokuthe ngqo. Ke xa ikhowudi yakho ingatshintshi, imeko-bume yokuba sesichengeni echaphazela isoftware yakho inokutshintsha rhoqo- ezinye zilungisiwe kwaye ezinye ziyongezwa.
• Injongo: Ischema esemgangathweni yolwazi lwedatha yokuba sesichengeni Iziseko zophuhliso kunye nemigangatho yemizi-mveliso kufuneka ilandelwe kwaye igcinwe isesichengeni semithombo evulekileyo, iyayiqonda imiphumo, kwaye ilawule ukunciphisa kwayo. Iskimu somngcipheko esemgangathweni siya kuvumela izixhobo eziqhelekileyo ukuba zisebenze kwindawo ezininzi ezinobungozi kwaye zenze lula umsebenzi wokulandela umkhondo, ngakumbi xa ubungozi buthe saa kwiilwimi ezininzi okanye kwiinkqubo ezingaphantsi.

Kuphephe ukongeza ubuthathaka obutsha

Kuya kuba kuhle ukunqanda ukwenziwa kobuthathaka Kwaye ngelixa izixhobo zokuvavanya kunye nohlalutyo zinokunceda, ukuthintela kuya kuhlala kuyinto enzima.

Apha, UGoogle ucebisa ukuba agxile kwimicimbi emibini:

• Qonda ubungozi xa uthatha isigqibo sokuxhomekeka ngokutsha
• Ukuphucula iinkqubo ezibalulekileyo zophuhliso lwesoftware

Ukulungisa okanye ukususa ubungozi

UGoogle uyavuma ukuba ingxaki ngokubanzi yokulungisa ingaphaya kokubona kwayo, kodwa Umshicileli ukholelwa ukuba kuninzi okunokwenziwa ngabadlali ukulungisa le ngxaki ekhethekileyo yokulawula ukuba semngciphekweni kokuxhomekeka.

Ikwakhankanya: 

“Namhlanje alukho uncedo oluncinci kule nto, kodwa njengoko siphucula ukuchaneka, kuyanceda ukutyala imali kwiinkqubo kunye nezixhobo ezitsha.

Olunye ukhetho, ewe, kukubeka ubungozi ngqo. Ukuba ungakwenza oku ngendlela ebuyela umva ehambelanayo, isisombululo siyafumaneka kuye wonke umntu. Kodwa umceli mngeni kukuba akunakulindeleka ukuba ube namava ngengxaki okanye ubuchule ngqo bokwenza utshintsho. Ukulungisa ukuba semngciphekweni kukwathatha ukuba abo banoxanduva lokugcina isoftware bayayazi ingxaki kwaye banolwazi kunye nezixhobo zokubhengeza ukuba semngciphekweni.

Umthombo: https://security.googleblog.com