Tekereza ufunguye imeri isa n'isanzwe, hanyuma mu kanya gato, konti yawe ya banki iba irimo ubusa. Cyangwa urimo ureba kuri interineti ubwo ecran yawe ifunga maze ubutumwa bw'ikiguzi bukagaragara. Ibi bice si filime za siyansi, ahubwo ni ingero z'ibitero bya interineti. Muri iki gihe cya interineti ya byose, interineti si ikiraro cyoroshye gusa, ahubwo ni n'ahantu ho guhiga abajura. Kuva ku buzima bwite kugeza ku mabanga y'ibigo kugeza ku mutekano w'igihugu, ibitero bya interineti biri hose, kandi imbaraga zabyo z'uburiganya n'uburiganya zirateye ubwoba. Ni ibihe bitero bidutera ubwoba? Bikora bite, kandi ni iki cyakorwa kuri byo? Reka turebe ibitero umunani bikunze kugaragara kuri interineti, bikujyana mu isi isanzwe n'iyidasanzwe.
Malware
1. Malware ni iki? Malware ni porogaramu mbi yagenewe kwangiza, kwiba, cyangwa kugenzura sisitemu y'umukoresha. Yinjira mu bikoresho by'umukoresha binyuze mu nzira zisa n'aho zitagize icyo zitwaye nko gushyira kuri imeri, kuvugurura porogaramu zihishe, cyangwa gukuramo amakuru ku mbuga bitemewe n'amategeko. Iyo imaze gukora, malware ishobora kwiba amakuru y'ibanga, gupfuka amakuru, gusiba dosiye, cyangwa no guhindura igikoresho "igipupe" cy'umutera.
2. Ubwoko busanzwe bwa malware
Virusi:Ifatanye na porogaramu zemewe, nyuma yo kuyikoresha, kuyikora ubwayo, kwanduza izindi dosiye, bigatuma imikorere ya sisitemu yangirika cyangwa igatakaza amakuru.
Inyo:Ishobora gukwirakwira ku giti cyayo nta porogaramu ya host. Ni ibisanzwe kwikwirakwiza binyuze mu ntege nke za network no gukoresha umutungo wa network. Trojan: Kwigira nka software yemewe kugira ngo itume abayikoresha bashyiraho backdoor ishobora kugenzura ibikoresho cyangwa kwiba amakuru.
Porogaramu za Spy:Gukurikirana mu ibanga imyitwarire y'abakoresha, kwandika imirongo y'amajwi cyangwa amateka yo gusura porogaramu, akenshi bikoreshwa mu kwiba amagambo y'ibanga n'amakuru ya konti ya banki.
Ransomware:Gufunga igikoresho cyangwa amakuru ahishe kugira ngo gifungurwe byagaragaye cyane mu myaka ya vuba aha.
3. Kwamamaza no Kwangiza Malware ikunze gukwirakwizwa binyuze mu itangazamakuru rifatika nka za emails za phishing, Malvertising, cyangwa USB keys. Ingaruka zishobora kuba zirimo gusohora amakuru, guhomba kwa sisitemu, igihombo cy'amafaranga, ndetse no gutakaza izina ry'ikigo. Urugero, malware ya Emotet yo mu 2020 yabaye inzozi mbi z'umutekano w'ikigo kuko yanduje ibikoresho bya miliyoni ku isi binyuze mu nyandiko za Office zihishe.
4. Ingamba zo kwirinda
• Shyiramo kandi uvugurure buri gihe porogaramu irwanya virusi kugira ngo ibone dosiye ziteye amakenga.
• Irinde gukanda ku mahuza atazwi cyangwa gukura porogaramu mu masoko atazwi.
• Kongera amakuru y'ingenzi buri gihe kugira ngo wirinde igihombo kidasubirwaho giterwa na ransomware.
• Koresha inkuta z'umuriro kugira ngo zibuze abantu kwinjira kuri interineti batabifitiye uburenganzira.
Ransomware
1. Uburyo Ransomware ikora Ransomware ni ubwoko bwihariye bwa malware bufunga by'umwihariko igikoresho cy'umukoresha cyangwa bugahisha amakuru y'ingenzi (urugero: inyandiko, ububiko bw'amakuru, kode y'isoko) kugira ngo uwahohotewe atabasha kuyageraho. Abatera bakunze gusaba kwishyurwa mu buryo bugoye gukurikirana nka bitcoin, kandi bagatera ubwoba bwo kwangiza amakuru burundu niba amafaranga adatanzwe.
2. Imibare isanzwe
Igitero cy’umuyoboro w’ubukoloni mu 2021 cyatunguye isi. DarkSide ransomware yapfundikiye sisitemu yo kugenzura umuyoboro munini w’ibikomoka kuri lisansi ku nkombe y’iburasirazuba bwa Leta Zunze Ubumwe za Amerika, bituma itangwa rya lisansi rihagarara ndetse n’abagabye igitero basaba ikiguzi cya miliyoni 4.4 z’amadolari. Iki gikorwa cyagaragaje ko ibikorwa remezo by’ingenzi bishobora kwangizwa na ransomware.
3. Kuki ransomware yica cyane?
Guhisha cyane: Ransomware ikunze gukwirakwizwa binyuze mu buhanga mu mibanire y’abantu (urugero, kwihindura amabaruwa yemewe), bigatuma bigorana kuyibona.
Gukwirakwira vuba: Binyuze mu gukoresha intege nke za interineti, ransomware ishobora kwanduza vuba ibikoresho byinshi mu kigo.
Kugarura ibintu bigoranye: Hatabayeho kopi yemewe y’ingwate, kwishyura incungu bishobora kuba ari bwo buryo bwonyine bwo kwishyura, ariko bishobora kudashoboka kugarura amakuru nyuma yo kwishyura incungu.
4. Ingamba zo Kwirwanaho
• Buri gihe kora kopi y'amakuru utari kuri interineti kugira ngo amakuru y'ingenzi ashobore kugaruka vuba.
• Sisitemu yo Gusuzuma no Gusubiza Ibitekerezo (EDR) yashyizweho kugira ngo ikurikirane imyitwarire idasanzwe mu gihe nyacyo.
• Gutoza abakozi kumenya ubutumwa bwa phishing kugira ngo butazaba ibitero by'abajura.
• Gukoresha uburyo bwo gupatch system na software mu gihe gito kugira ngo bigabanye ibyago byo kwinjira mu buryo butunguranye.
Ubujura bw'amakuru (Phishing)
1. Imiterere ya Phishing
Ubujura bw'amakuru (Phishing) ni ubwoko bw'igitero cy’ubuhanga mu mibanire y’abantu aho umuntu uteye, yigira nk'ikigo cyizewe (nk'ibanki, urubuga rw'ubucuruzi bwo kuri interineti, cyangwa mugenzi we), atuma uwahohotewe atanga amakuru y'ibanga (nk'amagambo y'ibanga, nimero z'ikarita y'inguzanyo) cyangwa agakanda ku murongo w'amakuru mabi akoresheje imeri, ubutumwa bugufi, cyangwa ubutumwa bwihuse.
2. Imiterere rusange
• Ubujura bwo kuri interineti: Imeri zemewe n'amategeko kugira ngo zikurure abakoresha kwinjira ku mbuga za interineti z'impimbano no kwinjiza ibyangombwa byabo.
Ubujura bw'amajwi: Igitero cyihariye kigamije kugaba igitero ku muntu cyangwa itsinda runaka rifite igipimo cyo gutsinda kiri hejuru.
• Gusmya: Kohereza ubutumwa bugufi bw'impimbano kugira ngo ushishikarize abakoresha gukanda ku mbuga nkoranyambaga mbi.
• Gushaka: kwigira nk'umuntu ubifitiye ububasha kuri telefoni kugira ngo ubone amakuru y'ibanga.
3. Ingaruka n'ibyago
Ibitero bya Phishing birahendutse kandi biroroshye gushyira mu bikorwa, ariko bishobora gutera igihombo kinini. Mu 2022, igihombo cy’imari ku isi giterwa n’ibitero bya Phishing cyageze kuri miliyari z’amadolari, birimo kwibwa kw’amakonti y’abantu ku giti cyabo, kwangiza amakuru y’ibigo, n’ibindi.
4. Ingamba zo guhangana n'ibibazo
• Suzuma aderesi y'uwohereje niba nta makosa y'imyandikire cyangwa amazina adasanzwe y'urubuga.
• Koresha uburyo bwo kwemeza ibintu byinshi (MFA) kugira ngo ugabanye ibyago nubwo amagambo y'ibanga yaba yangiritse.
• Koresha ibikoresho byo kurwanya ubujura bw'amakuru (phishing) kugira ngo ufungure amabaruwa n'amakuru y'abajura babi.
• Gutanga amahugurwa ahoraho yo kumenyekanisha umutekano kugira ngo abakozi barusheho kuba maso.
Akaga gakomeye gahoraho (APT)
1. Ibisobanuro bya APT
Igitero gikomeje gutera (APT) ni igitero kigoye kandi cy’igihe kirekire gikorerwa kuri interineti, gikunze gukorwa n’amatsinda y’abajura b’inzererezi bo ku rwego rwa leta cyangwa udutsiko tw’abagizi ba nabi. Igitero cya APT gifite intego isobanutse neza kandi gifite ubushobozi bwo guhindura ibintu ku rwego rwo hejuru. Abagaba igitero binjira mu byiciro byinshi kandi bakihisha igihe kirekire kugira ngo bibe amakuru y’ibanga cyangwa bangize sisitemu.
2. Urugendo rw'igitero
Kwinjira kwa mbere:Kwinjira binyuze mu butumwa bwa phishing, ubujura, cyangwa ibitero by'uruhererekane rw'ibikoresho.
Shyiraho inkingi:Shyiramo inzugi z'inyuma kugira ngo ukomeze kuzinjiramo igihe kirekire.
Ingendo zo ku ruhande:gukwirakwira mu miyoboro y’itumanaho kugira ngo haboneke ubuyobozi bwo hejuru.
Ubujura bw'amakuru:Gukuramo amakuru y'ibanga nk'umutungo bwite mu by'ubwenge cyangwa inyandiko z'ingamba.
Gupfuka umurongo:Kuraho inyandiko kugira ngo uhishe igitero.
3. Imibare isanzwe
Igitero cya SolarWinds mu 2020 cyari impanuka isanzwe ya APT aho abajura b’amakuru bashyize amakuru mabi binyuze mu gitero cy’uruhererekane rw’ibikoresho, biganisha ku bihumbi by’ubucuruzi n’ibigo bya leta hirya no hino ku isi ndetse bakiba amakuru menshi y’ibanga.
4. Amanota yo kwirwanaho
• Shyiraho uburyo bwo kugenzura ukwinjira mu itumanaho (IDS) kugira ngo ukurikirane urujya n'uruza rw'itumanaho rudasanzwe.
• Shyira mu bikorwa ihame ry’uburenganzira buke kugira ngo hagabanywe ingendo z’abagaba igitero ku ruhande.
• Gukora igenzura ry’umutekano buri gihe kugira ngo hamenyekane amakuru ashobora kuba ari inyuma y’aho umuntu akorera.
• Gukorana n'urubuga rw'ubutasi bw'ibitero kugira ngo hamenyekane uko ibitero bigezweho bigenda.
Umuntu mu gitero cyo hagati (MITM)
1. Ibitero by'abantu hagati bikora bite?
Igitero cyo hagati (MITM) ni igihe umuntu uteye ashyira, agafata, akanahindura uburyo bwo kohereza amakuru hagati y’abantu babiri baganira batabizi. Umuntu uteye ashobora kwiba amakuru y’ibanga, guhindura amakuru, cyangwa kwiyitirira undi muntu kubera uburiganya.
2. Imiterere rusange
• Ubujura bwa Wi-Fi: Abagabye igitero bakora ahantu hazwi nka Wi-Fi hotspot kugira ngo bashishikarize abakoresha guhuza amakuru kugira ngo bibe amakuru.
Uburiganya bwa DNS: guhindura ibibazo bya DNS kugira ngo uyobore abakoresha imbuga za interineti zirimo amakosa.
• Ubujura bwa SSL: Gukora impapuro mpimbano za SSL kugira ngo uhunge urujya n'uruza rw'abantu bahishe.
• Kwiba ubutumwa bwa elegitoroniki: Kwakira no kwangiza ibikubiye muri e-mail.
3. Ibyago
Ibitero bya MITM biteza akaga gakomeye kuri sisitemu za banki zo kuri interineti, ubucuruzi bwo kuri interineti, n'itumanaho, bishobora gutuma konti zibwe, ibikorwa byangiritse, cyangwa itumanaho ryihishe.
4. Ingamba zo kwirinda
• Koresha imbuga za interineti za HTTPS kugira ngo urebe neza ko itumanaho ryashyizwe mu buryo buhishe.
• Irinde gukoresha Wi-Fi rusange cyangwa gukoresha VPN kugira ngo uhishe urujya n'uruza rw'abantu.
• Koresha serivisi yo gukemura DNS mu buryo bwizewe nka DNSSEC.
• Reba niba icyemezo cya SSL ari ingenzi kandi ube maso ku birebana n'amakuru ajyanye n'ibidasanzwe.
Gutera SQL
1. Uburyo bwo Gushyiramo SQL
SQL injection ni igitero cyo gutera amakuru ya SQL aho umuntu utera amakuru ya SQL mabi mu buryo bwo gushyiramo porogaramu ya interineti (urugero: agasanduku ko kwinjira, umurongo wo gushakisha) kugira ngo ashuke ububiko bw'amakuru kugira ngo bushyire mu bikorwa amategeko atemewe n'amategeko, bityo yibe, ahindure cyangwa asibe amakuru.
2. Ihame ry'igitero
Tekereza ku kibazo gikurikira cya SQL kugira ngo ubone fomu yo kwinjira:
Uwateye yinjira:
Ikibazo kiba:
Ibi binyura mu kwemeza amakuru kandi bigatuma uwateye yinjira.
3. Ibyago
Gushyiramo SQL bishobora gutuma ibikubiye muri database bisohoka, kwibwa kw'ibyangombwa by'abakoresha, cyangwa se bigafatwa na sisitemu zose. Gusenya amakuru ya Equifax mu 2017 byafitanye isano n'ingaruka mbi zo gukoresha SQL zagize ingaruka ku makuru bwite y'abakoresha miliyoni 147.
4. Kwirwanaho
• Koresha ibibazo byashyizwe mu byiciro cyangwa amagambo yateguwe mbere kugira ngo wirinde guhuza neza ibitekerezo by'abakoresha.
• Shyira mu bikorwa kwemeza no gushungura ibyashyizwemo kugira ngo uhakane inyuguti zidasanzwe.
• Kubuza uburenganzira bwo kubika amakuru kugira ngo wirinde ko abatera babikora mu buryo buteje akaga.
• Gushakisha buri gihe porogaramu za interineti kugira ngo urebe niba hari intege nke n'ingaruka mbi ku mutekano.
Ibitero bya DDoS
1. Imiterere y'ibitero bya DDoS
Igitero cya Distributed Denial of Service (DDoS) cyohereza ubusabe bwinshi kuri seriveri igamije kugenzura umubare munini wa robots, zigakoresha bandwidth yayo, umutungo wa session cyangwa imbaraga za mudasobwa, kandi bigatuma abakoresha basanzwe badashobora kubona serivisi.
2. Ubwoko busanzwe
• Ibitero by'imodoka: kohereza umubare munini w'amapaki no guhagarika umuyoboro w'itumanaho.
• Ibitero bya porotokole: Gukoresha intege nke za porotokole ya TCP/IP mu gukoresha umutungo wa seriveri.
• Ibitero byo mu rwego rwa porogaramu: Guhagarika seriveri za interineti wigana ubusabe bwemewe n'abakoresha.
3. Imibare isanzwe
Igitero cya Dyn DDoS mu 2016 cyakoresheje botnet ya Mirai kugira ngo isenye imbuga nyinshi zisanzwe zirimo Twitter na Netflix, bigaragaza ingaruka z'umutekano w'ibikoresho bya iot.
4. Ingamba zo guhangana n'ibibazo
• Shyiraho serivisi zo kurinda DDoS kugira ngo uhuze abakoresha impanuka mbi.
• Koresha umuyoboro wa CDN (Content Delivery network) kugira ngo ukwirakwize urujya n'uruza rw'abantu.
• Gushyiraho uburyo bwo gushyiramo ingufu kugira ngo wongere ubushobozi bwo gutunganya seriveri.
• Gukurikirana urujya n'uruza rw'abantu ku rubuga kugira ngo hamenyekane kandi hakorwe ibisubizo ku gihe.
Ibitero by'imbere mu gihugu
1. Ibisobanuro by'ikibazo cy'imbere mu gihugu
Ibitero by’imbere mu kigo bituruka ku bakoresha bemewe (urugero, abakozi, ba rwiyemezamirimo) mu kigo bashobora gukoresha nabi uburenganzira bwabo bitewe n’ubugome, uburangare, cyangwa gushukwa n’abagizi ba nabi bo hanze, bigatuma amakuru asohoka cyangwa kwangirika kwa sisitemu.
2. Ubwoko bw'Ibibazo
• Abantu babi: Kwiba amakuru nkana cyangwa gushyira mu kaga sisitemu kugira ngo ubone inyungu.
• Abakozi batita ku nshingano zabo: Kubera kutagira ubumenyi ku mutekano, imikorere mibi ituma habaho ibibazo by’ubukene.
• Konti zibwe: Abagabye igitero bagenzura konti z'imbere binyuze mu kwiba impapuro z'ubujura cyangwa ubujura bw'ibyangombwa.
3. Ibyago
Ibitero by’imbere mu kigo biragoye kubitahura kandi bishobora kunyura mu nzira zisanzwe zo gukingira umuriro n’uburyo bwo gushakisha abinjira. Mu 2021, ikigo cy’ikoranabuhanga kizwi cyane cyatakaje miliyoni amagana z’amadolari bitewe n’umukozi wo mu kigo wavumbuye kode y’aho akorera.
4. Ingamba zo Kwirwanaho Zihamye
• Shyira mu bikorwa imiterere y’ubuziranenge bw’ishingiro no kugenzura ubusabe bwose bwo kwinjira.
• Kugenzura imyitwarire y'umukoresha kugira ngo hamenyekane imikorere idasanzwe.
• Gutanga amahugurwa ku mutekano buri gihe kugira ngo abakozi barusheho kumenya ibijyanye n'umutekano.
• Kugabanya uburyo bwo kubona amakuru y'ibanga kugira ngo ugabanye ibyago byo gusohora amakuru.
Igihe cyo kohereza: Gicurasi-26-2025
