Intangiriro
Gukusanya no gusesengura urujya n'uruza rw'abantu ku rubuga ni bwo buryo bwiza bwo kubona ibipimo by'imyitwarire y'abakoresha uru rubuga n'ibipimo byarwo. Bitewe no kunoza imikorere no kubungabunga ikigo cy'amakuru Q, gukusanya no gusesengura urujya n'uruza rw'abantu ku rubuga byabaye igice cy'ingenzi cy'ibikorwa remezo by'ikigo cy'amakuru. Ukurikije uko inganda zikoresha ubu, gukusanya urujya n'uruza rw'abantu ku rubuga ahanini bikorwa n'ibikoresho by'urujya n'uruza bifasha mu miterere y'uruza rw'abantu ku ruhande. Gukusanya urujya n'uruza rw'abantu ku rubuga bigomba gushyiraho uburyo burambuye bwo gukusanya urujya n'uruza rw'abantu ku murongo, uburyo nk'ubwo bwo gukusanya urujya n'uruza rw'abantu bushobora gufasha kunoza ibipimo by'imikorere y'uruza n'ubucuruzi no kugabanya ibyago byo gutsindwa.
Umuyoboro wo gukusanya amakuru ushobora gufatwa nk'umuyoboro wigenga ugizwe n'ibikoresho byo gukusanya amakuru kandi ugashyirwa hamwe n'umuyoboro w'ibikorwa. Ukusanya amakuru y'urusobe rw'amashusho ya buri gikoresho cy'itumanaho kandi ugakusanya amakuru y'urusobe rw'amashusho hakurikijwe urwego rw'akarere n'urw'ubwubatsi. Ukoresha uburyo bwo kuyungurura amakuru mu bikoresho byo gukusanya amakuru kugira ngo umenye umuvuduko wuzuye w'amakuru ku byiciro 2-4 by'iyungurura ry'agateganyo, ukuramo udupaki twibiri, gukata udupaki n'ibindi bikorwa by'ikoranabuhanga, hanyuma wohereza amakuru kuri buri sisitemu yo gusesengura amakuru. Umuyoboro wo gukusanya amakuru ushobora kohereza amakuru yihariye kuri buri gikoresho neza hakurikijwe ibisabwa na buri sisitemu, kandi ugakemura ikibazo cy'uko amakuru asanzwe adashobora gushungurwa no koherezwa, ibyo bikaba bikoresha imikorere yo gutunganya imiyoboro. Muri icyo gihe, moteri yo gukusanya amakuru n'iyungurura ry'umuyoboro wo gukusanya amakuru ikora ku gukusanya no kohereza amakuru mu gihe gito kandi yihuta cyane, igenzura ireme ry'amakuru yakusanyijwe n'umuyoboro wo gukusanya amakuru, kandi igatanga ishingiro ryiza ry'amakuru ku bikoresho byo gusesengura amakuru bikurikira.
Kugira ngo bigabanye ingaruka ku murongo w’umwimerere, kopi y’inzira y’umwimerere iboneka hakoreshejwe uburyo bwo gutandukanya imirasire, SPAN cyangwa TAP.
Gukoresha umuyoboro udafite aho ubogamiye (Optical Splitter)
Uburyo bwo gukoresha uburyo bwo gutandukanya urumuri kugira ngo ubone kopi y'urumuri bisaba ubufasha bw'igikoresho gitandukanya urumuri. Igitandukanya urumuri ni igikoresho gikoresha urumuri rudakoresha imbaraga gishobora kongera gukwirakwiza imbaraga z'ikimenyetso cy'urumuri hakurikijwe igipimo gikenewe. Igitandukanya urumuri gishobora kugabanya urumuri kuva kuri 1 kugeza kuri 2,1 kugeza kuri 4 na 1 kugeza ku miyoboro myinshi. Kugira ngo bigabanye ingaruka ku murongo w'umwimerere, ikigo cy'amakuru gikunze gukoresha igipimo cyo gutandukanya urumuri cya 80:20, 70:30, aho igipimo cya 70.80 cy'ikimenyetso cy'urumuri gisubizwa ku murongo w'umwimerere. Muri iki gihe, uduce dutandukanya urumuri dukoreshwa cyane mu gusesengura imikorere y'umuyoboro (NPM / APM), sisitemu yo kugenzura, isesengura ry'imyitwarire y'abakoresha, kumenya kwinjira mu muyoboro n'ibindi bintu.
Ibyiza:
1. Igikoresho cy’urumuri gikozwe mu buryo bw’ikoranabuhanga cyizewe cyane, kandi gikozwe mu buryo bw’ikoranabuhanga;
2. Ntiyinjira mu mwanya w'imashini, ibikoresho byigenga, nyuma yaho bishobora kwaguka neza;
3. Nta mpamvu yo guhindura imiterere y'imashini, nta ngaruka ku bindi bikoresho;
4. Gukusanya amakuru yose, nta gushungura paki z'amakuru, harimo n'amapaki y'amakosa, n'ibindi.
Ibibi:
1. Gukenera gukata urusobe rw'itumanaho byoroshye, gufunga fibre y'umugongo n'agace k'imashini igabanya urumuri, bizagabanya imbaraga z'urusobe rw'urusobe rw'urugongo rw'amazi.
SPAN (Indorerwamo yo ku cyambu)
SPAN ni imikorere iza na switch ubwayo, bityo ikaba igomba guhindurwa kuri switch. Ariko, iyi function izagira ingaruka ku mikorere ya switch kandi igatera gutakaza paki iyo amakuru yuzuye.
Ibyiza:
1. Ntabwo ari ngombwa kongeramo ibindi bikoresho, shyiraho switch kugira ngo wongere aho amashusho asohoka ajyanye nayo
Ibibi:
1. Koresha aho gusimbuza (switch port)
2. Hagomba gushyirwaho uburyo bwo guhuza itumanaho, busaba ubufatanye n'abakora porogaramu za gatatu, byongera ibyago byo kwangirika k'umuyoboro w'itumanaho.
3. Gukurikirana inzira zinyuramo mu ndorerwamo bigira ingaruka ku mikorere ya port na switch.
Umuyoboro ukora TAP (TAP Aggregator)
Network TAP ni igikoresho cyo hanze cy’umuyoboro gifasha gukora indorerwamo y’aho unyura kandi kigatanga kopi y’urujya n’uruza rw’abantu kugira ngo gikoreshwe n’ibikoresho bitandukanye byo kugenzura. Ibi bikoresho bishyirwa ahantu mu nzira y’umuyoboro hagomba kwitabwaho, kandi bigakoporora paki za IP z’amakuru hanyuma bikayohereza mu gikoresho cyo kugenzura umuyoboro. Guhitamo aho igikoresho cya Network TAP gihurira biterwa n’aho urujya n’uruza rw’umuyoboro rwibanda - impamvu zo gukusanya amakuru, gukurikirana isesengura n’itinda, kumenya kwinjira, nibindi. Ibikoresho bya Network TAP bishobora gukusanya no kwerekana amakuru ku gipimo cya 1G kugeza kuri 100G.
Ibi bikoresho bigeraho bitabaye ngombwa ko igikoresho cya TAP cy’umuyoboro gihindura uburyo amakuru agenda mu buryo ubwo aribwo bwose, hatitawe ku gipimo cy’amakuru agenda mu muyoboro. Ibi bivuze ko urujya n’uruza rw’umuyoboro rudakurikiranwa cyangwa ngo rukorerwe imbonerahamwe, ibyo bikaba ari ingenzi mu kubungabunga ubusugire bw’amakuru mu gihe cyo kuyashyira mu bikoresho by’umutekano no gusesengura.
Bituma ibikoresho byo mu mpande z'umuyoboro bigenzura kopi z'inzira kugira ngo ibikoresho bya TAP by'umuyoboro bikore nk'indorerezi. Iyo wohereje kopi y'amakuru yawe ku bikoresho byose bihujwe, ubona neza aho umuyoboro uherereye. Mu gihe igikoresho cya TAP cy'umuyoboro cyangwa igikoresho cyo kugenzura cyananiwe, uba uzi ko urujya n'uruza rw'abantu rutazahinduka, bityo ukaba ugenzura ko sisitemu y'imikorere ikomeza kuba mu mutekano kandi iboneka.
Muri icyo gihe, iba intego rusange y'ibikoresho bya TAP bya interineti. Kubona paki bishobora gutangwa buri gihe nta kibazo cy'urujya n'uruza rw'abantu mu miyoboro, kandi ibi bisubizo byo kugaragara bishobora no gukemura ibibazo bigezweho. Ibikenewe mu kugenzura ibikoresho kuva ku miyoboro y'umuriro y'abazaza kugeza ku kurinda gusohora amakuru, kugenzura imikorere ya porogaramu, SIEM, ubugenzuzi bw'ikoranabuhanga, IPS, IDS n'ibindi, bituma ibikoresho bya TAP bya interineti bihinduka.
Uretse gutanga kopi yuzuye y'urujya n'uruza rw'abantu no kubungabunga uburyo bwo kuboneka, ibikoresho bya TAP bishobora gutanga ibi bikurikira.
1. Gushungura Paketi kugira ngo wongere imikorere yo kugenzura umuyoboro
Kuba igikoresho cya Network TAP gishobora gukora kopi ya paki 100% mu gihe runaka ntibivuze ko buri gikoresho cyo kugenzura no kurinda umutekano kigomba kubona byose. Gushyira amakuru ku bikoresho byose byo kugenzura no kurinda umutekano mu buryo nyabwo bizatuma habaho gutumiza ibintu byinshi, bityo bikabangamira imikorere y'ibikoresho n'umuyoboro muri icyo gikorwa.
Gushyira igikoresho cya Network TAP gikwiye bishobora gufasha mu gushungura amapaki iyo agejejwe ku gikoresho cyo gukurikirana, gukwirakwiza amakuru akwiye ku gikoresho gikwiye. Ingero z'ibikoresho nk'ibi zirimo uburyo bwo gutahura ukwinjira mu cyuho (IDS), gukumira ibura ry'amakuru (DLP), amakuru y'umutekano n'imicungire y'ibyabaye (SIEM), isesengura ry'ubucamanza, n'ibindi byinshi.
2. Amasano rusange yo gukorana neza n'abandi
Uko ibisabwa mu kugenzura no gucunga umutekano w’umuyoboro w’itumanaho byiyongera, abahanga mu by’ikoranabuhanga bagomba gushaka uburyo bwo gukoresha ingengo y’imari isanzweho y’ikoranabuhanga kugira ngo bagere ku mirimo myinshi. Ariko hari igihe, ntushobora gukomeza kongeramo ibikoresho bishya kuri stack no kongera ubukana bw’umuyoboro wawe w’itumanaho. Ni ngombwa gukoresha neza ibikoresho byo kugenzura no gucunga umutekano.
Ibikoresho bya TAP bya Network bishobora gufasha mu guhuza urujya n'uruza rw'amakuru menshi, ugana iburasirazuba n'ugana iburengerazuba, kugira ngo bigeze ku bikoresho bihujwe binyuze mu muyoboro umwe. Gukoresha ibikoresho byo kureba muri ubu buryo bizagabanya umubare w'ibikoresho byo kugenzura bikenewe. Uko urujya n'uruza rw'amakuru mu Burasirazuba no hagati y'ibigo by'amakuru, ibisabwa ku bikoresho bya TAP bya network ni ingenzi kugira ngo hakomeze kugaragara urujya n'uruza rw'amakuru mu buryo bwose.
Ingingo ijyanye nayo ishobora kuba ishimishije, sura hano:Nigute wafata urujya n'uruza rw'abantu kuri interineti? Network Tap vs Port Mirror
Igihe cyo kohereza: Ukwakira-24-2024
