DDoS(Distributed Denial of Service) ni ubwoko bw'igitero cya interineti aho mudasobwa cyangwa ibikoresho byinshi byangiritse bikoreshwa mu kuzura sisitemu cyangwa umuyoboro w'itumanaho ryibasiwe n'umubare munini w'abantu, bigatera ingaruka mbi ku mikorere yaryo. Intego y'igitero cya DDoS ni ugutuma sisitemu cyangwa umuyoboro w'itumanaho wemewe n'amategeko bitagerwaho n'abakoresha bemewe.
Dore ingingo z'ingenzi ku bitero bya DDoS:
1. Uburyo bwo kugaba igitero: Ibitero bya DDoS bikunze kuba byibasira ibikoresho byinshi, bizwi nka botnet, bigenzurwa n'uwateye. Ibi bikoresho akenshi biba byandujwe na malware ituma uwateye ashobora kugenzura no guhuza igitero kure.
2. Ubwoko bw'ibitero bya DDoS: Ibitero bya DDoS bishobora gufata imiterere itandukanye, harimo ibitero by'ubwinshi bw'amakuru bikwirakwira ku ntego hamwe n'urujya n'uruza rw'abantu benshi, ibitero by'urwego rw'ibikorwa byibasira porogaramu cyangwa serivisi runaka, hamwe n'ibitero bya protocole bikoresha intege nke muri protocole za network.
3. Ingaruka: Ibitero bya DDoS bishobora kugira ingaruka zikomeye, biganisha ku ihungabana rya serivisi, igihe cyo kudakora, igihombo cy'amafaranga, kwangirika kw'izina ry'umukoresha, ndetse no kwangirika k'uburambe bw'abakoresha. Bishobora kugira ingaruka ku nzego zitandukanye, harimo imbuga za interineti, serivisi zo kuri interineti, urubuga rw'ubucuruzi bwo kuri interineti, ibigo by'imari, ndetse n'imiyoboro yose.
4. Kugabanya ingaruka: Imiryango ikoresha uburyo butandukanye bwo kugabanya DDoS kugira ngo irinde sisitemu zayo n'imiyoboro yayo. Harimo gushungura urujya n'uruza rw'abantu, kugabanya igipimo, kumenya ibitagenda neza, gutandukanya urujya n'uruza rw'abantu, no gukoresha ibikoresho byihariye cyangwa porogaramu bigamije kumenya no kugabanya ibitero bya DDoS.
5. Kwirinda: Gukumira ibitero bya DDoS bisaba uburyo bwo gukora ibishoboka byose bukubiyemo gushyira mu bikorwa ingamba zikomeye zo kurinda umutekano w’umuyoboro, gukora isuzuma rihoraho ry’ingaruka, gukosora intege nke za porogaramu, no kugira gahunda zo guhangana n’ingaruka kugira ngo uhangane n’ibitero neza.
Ni ngombwa ko amashyirahamwe akomeza kuba maso kandi akitegura guhangana n'ibitero bya DDoS, kuko bishobora kugira ingaruka zikomeye ku mikorere y'ubucuruzi no ku cyizere cy'abakiriya.
Ibitero byo kurwanya DDoS mu ngabo
1. Gushungura serivisi n'ibyambu bitari ngombwa
Ibikoresho bya Inexpress, Express, Forwarding n'ibindi bishobora gukoreshwa mu gushungura serivisi n'amadirishya bitari ngombwa, ni ukuvuga gushungura ip y'impimbano kuri router.
2. Gusukura no kuyungurura amazi adasanzwe
Sukura kandi uhuze urujya n'uruza rw'abantu badasanzwe binyuze muri firewall ya DDoS, kandi ukoreshe ikoranabuhanga ryo ku rwego rwo hejuru nko kuyungurura amategeko y'amakuru, kuyungurura ibikumwe byo kumenya uko amakuru agenda, no kuyungurura ibikubiye mu makuru kugira ngo umenye neza niba urujya n'uruza rw'abantu baturutse hanze ari ibisanzwe, kandi ubuzanye kuyungurura urujya n'uruza rw'abantu badasanzwe.
3. Ubwugarizi bw'amatsinda akwirakwijwe
Ubu ni bwo buryo bwiza bwo kurinda umuryango w’umutekano w’ikoranabuhanga ibitero bikomeye bya DDoS. Iyo agace k’umutekano gatewe kandi kadashobora gutanga serivisi, sisitemu izimukira ku kandi gace k’umutekano hakurikijwe imiterere y’ibanze, kandi igasubiza amakuru yose y’uwagabye igitero aho yohererejwe, bigahagarika aho igitero cyaturutse kandi bikagira ingaruka ku kigo uhereye ku byemezo by’umutekano byimbitse.
4. Isesengura rya DNS ry’ubwenge ku mutekano mwinshi
Uruvange rwiza rwa sisitemu y’ubuhanga ya DNS na sisitemu yo kurinda ya DDoS biha ibigo ubushobozi bwo gutahura ibintu bikomeye bishobora guteza ibibazo by’umutekano. Muri icyo gihe, hari kandi uburyo bwo kumenya impanuka, bushobora guhagarika ubutasi bwa seriveri ya IP igihe icyo ari cyo cyose kugira ngo busimbuze IP isanzwe ya seriveri, kugira ngo umuyoboro w’ikigo ushobore kugumana serivisi idahagarara.
Kurwanya ibitero bya DDoS ku mutekano w'umuyoboro w'imari wa banki. Gucunga, gutahura no gusukura urujya n'uruza rw'abantu:
1. Igisubizo cya Nanosecond, cyihuse kandi gisobanutse. Kwigira ku giti cyawe mu buryo bw'ubucuruzi hamwe n'ikoranabuhanga ryo kumenya ubujyakuzimu bw'amapaki byakoreshejwe. Iyo urujya n'uruza rudasanzwe n'ubutumwa bibonetse, ingamba zo kwirinda zihita zitangizwa kugira ngo harebwe ko gutinda hagati y'ibitero n'ubwirinzi bitarenze amasegonda 2. Muri icyo gihe, igisubizo cyo gusukura urujya n'uruza rudasanzwe gishingiye ku byiciro by'ibitekerezo byo gusukura akayunguruzo, binyuze mu byiciro birindwi byo gutunganya isesengura ry'urujya n'uruza, kuva ku izina rya IP, urwego rw'ubwikorezi n'urwego rw'ikoreshwa, kumenya imikorere, isuzuma mu ngingo zirindwi, imyitwarire y'umuyoboro, imiterere y'urujya n'uruza kugira ngo hirindwe ko hakorwa isesengura ry'ibimenyetso intambwe ku yindi, kunoza imikorere rusange y'ubwirinzi, garanti ifatika y'umutekano w'umuyoboro w'amakuru ya banki ya XXX.
2. Gutandukanya igenzura n'igenzura, mu buryo bunoze kandi bwizewe. Gahunda itandukanye yo gushyira mu bikorwa ikigo cy'ibizamini n'ikigo cy'isukura ishobora kwemeza ko ikigo cy'ibizamini gishobora gukomeza gukora nyuma y'uko ikigo cy'isukura cyananiwe, no gutanga raporo y'ibizamini n'amatangazo y'ibizamini mu gihe nyacyo, bishobora kwerekana igitero cya banki ya XXX ku rugero runini.
3. Gucunga neza, kwagura nta mpungenge. Uburyo bwo kurwanya ddos bushobora guhitamo uburyo butatu bwo gucunga: gupima nta gusukura, gupima no gusukura byikora, no kurinda imikoranire n'intoki. Gukoresha neza uburyo butatu bwo gucunga bishobora kuzuza ibisabwa na banki ya XXX mu rwego rwo kugabanya ibyago byo gushyira mu bikorwa no kunoza uburyo bwo kuboneka igihe ubucuruzi bushya buzaba butangizwa.
Agaciro k'umukiriya
1. Koresha neza uburyo bwo gukoresha umuyoboro wa interineti kugira ngo wongere inyungu z'ibigo
Binyuze mu gisubizo rusange cy’umutekano, impanuka y’umutekano w’umuyoboro wa interineti yatewe n’igitero cya DDoS ku bucuruzi bwo kuri interineti bw’ikigo cyayo cy’amakuru yari 0, kandi gutakaza uburyo bwo gusohora amakuru bw’umuyoboro wa interineti byatewe n’urujya n’uruza rw’abantu rudakora neza ndetse n’ikoreshwa ry’umutungo wa seriveri byaragabanutse, ibyo bikaba byaratumye banki ya XXX yongera inyungu zayo.
2. Kugabanya ibyago, gushimangira ko umuyoboro w'itumanaho uhamye kandi ubucuruzi bugakomeza
Gushyira ibikoresho bya anti-ddos mu buryo butaziguye ntibihindura imiterere y’imiyoboro isanzweho, nta ngaruka zo gucika kw’imiyoboro, nta ngaruka na imwe yo gutsindwa, nta ngaruka ku mikorere isanzwe y’ubucuruzi, kandi bigabanya ikiguzi cyo gushyira mu bikorwa n’ikiguzi cyo gukora.
3. Kunoza uburyo abakoresha banyurwa, guhuza abakoresha basanzwe no guteza imbere abakoresha bashya
Guha abakoresha urubuga nyarwo rw'itumanaho, amabanki yo kuri interineti, ibibazo by'ubucuruzi kuri interineti n'ibindi bishimisha abakoresha kuri interineti byarushijeho kunozwa cyane, bishimangira ubudahemuka bw'abakoresha, kugira ngo abakiriya babone serivisi nyazo.
Igihe cyo kohereza: Nyakanga-17-2023
