Intangiriro
Mu myaka ya vuba aha, umubare wa serivisi zo mu bicu mu nganda z'Ubushinwa uri kwiyongera. Ibigo by'ikoranabuhanga byafashe amahirwe yo mu cyiciro gishya cy'impinduramatwara mu ikoranabuhanga, bikora impinduka mu ikoranabuhanga, byongera ubushakashatsi n'ikoreshwa ry'ikoranabuhanga rishya nka cloud computing, big data, artificial intelligence, blockchain na Internet of things, kandi byongera ubushobozi bwa serivisi za siyansi n'ikoranabuhanga. Hamwe n'iterambere rikomeje ry'ikoranabuhanga ryo mu bicu no gukoresha virtualization, sisitemu nyinshi zo gukoresha amakuru mu bigo by'amakuru zimuka ziva ku ishuri ry'umwimerere rya physical campus zijya ku rubuga rw'ibicu, kandi urujya n'uruza rw'abantu mu bicu mu bigo by'amakuru ruriyongera cyane. Ariko, umurongo usanzwe wo gukusanya amakuru ntushobora gukusanya urujya n'uruza rw'abantu mu bicu, bigatuma urujya n'uruza rw'abantu mu bicu ruhinduka agace ka mbere. Byabaye ikintu kidasubirwaho cyo gukura amakuru mu bicu mu bicu. Ishyirwaho ry'ikoranabuhanga rishya ryo gukusanya amakuru mu bicu rituma sisitemu yo gukoresha amakuru ikoreshwa mu bicu nayo igira ubufasha buhagije bwo gukurikirana, kandi iyo habayeho ibibazo n'ibibazo, isesengura ryo gufata amakuru rishobora gukoreshwa mu gusesengura ikibazo no gukurikirana urujya n'uruza rw'amakuru.
1. Urujya n'uruza rw'ibicu ruturuka iburasirazuba n'iburengerazuba ntirushobora gukusanywa mu buryo butaziguye, ku buryo sisitemu yo gukoresha porogaramu mu bicu idashobora gukoresha uburyo bwo kugenzura amakuru ashingiye ku mikorere nyayo y'ubucuruzi, kandi abakozi bakora n'abashinzwe kubungabunga ntibashobora kuvumbura ku gihe imikorere nyayo ya sisitemu yo gukoresha porogaramu mu bicu, ibyo bikaba bizana inyungu zimwe na zimwe zihishe ku mikorere myiza kandi ihamye ya sisitemu yo gukoresha porogaramu mu bicu.
2. Urujya n'uruza rw'abantu mu bicu byo mu burasirazuba n'iburengerazuba ntirushobora gukusanywa mu buryo butaziguye, ibyo bigatuma bidashoboka gukuramo amakuru mu buryo butaziguye kugira ngo asesengurwe iyo habayeho ibibazo mu bikorwa by'ubucuruzi mu bicu byo mu kirere, ibyo bigatera ingorane zimwe na zimwe mu gace k'amakosa.
3. Bitewe n’ibisabwa bikomeye mu mutekano w’umuyoboro w’itumanaho n’igenzura ritandukanye, nko kugenzura ibikorwa bya BPC, uburyo bwo kumenya abinjira muri IDS, uburyo bwo kugenzura imeri n’abakiriya, icyifuzo cyo gukusanya amakuru y’abakiriya mu bicu by’uburasirazuba nacyo kirimo kuba cyihutirwa cyane. Hashingiwe ku isesengura ryavuzwe haruguru, byabaye ikintu kidasubirwaho cyo gukusanya amakuru y’abakiriya mu bicu by’uburasirazuba, no gushyiraho ikoranabuhanga rishya ryo gukusanya amakuru y’abakiriya mu bicu by’uburasirazuba kugira ngo sisitemu yo gukoresha porogaramu ikoreshwa mu bicu nayo ishobore kugira ubufasha buhagije bwo kuyikurikirana. Iyo habayeho ibibazo n’ibibazo, isesengura ryo gufata amapaki rishobora gukoreshwa mu gusesengura ikibazo no gukurikirana urujya n’uruza rw’amakuru. Kugira ngo hamenyekane uburyo bwo gukusanya no gusesengura uburyo abakiriya mu bicu by’uburasirazuba n’uburengerazuba bakoreshwa mu bicu ni intwaro ikomeye y’ubumaji yo kwemeza ko sisitemu zo gukoresha porogaramu zikoreshwa mu bicu by’uburasirazuba zikora neza.
Ibipimo by'ingenzi byo gufata amakuru ajyanye n'urusobe rw'itumanaho (Virtual Network Traffic Capture)
1. Imikorere yo gufata amakuru ku rubuga
Urujya n'uruza rw'abantu bava mu burasirazuba bajya mu burengerazuba rugizwe n'abantu barenga kimwe cya kabiri cy'urujya n'uruza rw'abantu bava mu kigo cy'amakuru, kandi ikoranabuhanga ryo kubona amakuru rifite ubushobozi bwo hejuru rirakenewe kugira ngo ikusanyirizo ryose rigerweho. Mu gihe kimwe cyo kugura amakuru, indi mirimo yo gutunganya amakuru mbere yo kuyakoresha nko kuyakuraho, kuyagabanya, no kuyakuraho ibyifuzo bigomba kurangizwa kuri serivisi zitandukanye, ibyo bikaba byongera ibisabwa mu mikorere.
2. Amafaranga y'ibanze ku mutungo
Uburyo bwinshi bwo gukusanya amakuru mu burasirazuba buva mu burengerazuba bugomba kwibanda ku mikoreshereze y’ikoranabuhanga, ububiko n’imiyoboro y’itumanaho bishobora gukoreshwa muri serivisi. Uretse gukoresha ayo mahirwe make ashoboka, haracyakenewe gutekereza ku bushobozi bwo gushyira mu bikorwa imicungire y’ikoranabuhanga ryo kugura. Cyane cyane iyo ingano y’amanode yaguka, niba ikiguzi cy’imicungire kigaragaza ko izamuka ku murongo.
3. Urwego rw'ubwinjiranyi
Ikoranabuhanga risanzwe rikoreshwa ubu rikenera kongeramo politiki y’ubuguzi kuri hypervisor cyangwa ibice bifitanye isano. Uretse amakimbirane ashobora kubaho n’amahame y’ubucuruzi, izi politiki zikunze kongera umutwaro kuri hypervisor cyangwa ibindi bice by’ubucuruzi kandi zigira ingaruka kuri serivisi ya SLA.
Dukurikije ibisobanuro byavuzwe haruguru, bigaragara ko gufata urujya n'uruza rw'abantu mu bicu bigomba kwibanda ku gufata urujya n'uruza rw'abantu mu burasirazuba hagati y'imashini zikoresha ikoranabuhanga n'ibibazo by'imikorere. Muri icyo gihe, bitewe n'imiterere y'urubuga rw'ibicu, ikusanyirizo ry'abantu mu bicu rigomba guca mu buryo busanzwe bw'indorerwamo gakondo, no gushyira mu bikorwa ikusanyirizo ry'abantu mu buryo bworoshye kandi bwikora, kugira ngo bihuze n'intego y'imikorere n'iy'ubuziranenge bw'urusobe rw'ibicu. Ikusanyirizo ry'abantu mu bicu rigomba kugera ku ntego zikurikira:
1) Menya imikorere yo gufata urujya n'uruza rw'iburasirazuba hagati y'imashini zikoresha ikoranabuhanga
2) Gufata bishyirwa ku gice cy’ikoranabuhanga, kandi imiterere y’ikusanyirizo ry’amakuru akwirakwizwa ikoreshwa mu kwirinda ibibazo by’imikorere n’ubudahangarwa biterwa n’indorerwamo y’imashini
3) Ishobora kumva impinduka mu buryo bwimbitse ku miterere y'ibikoresho by'imashini zikora mu bicu, kandi ingamba zo gukusanya zishobora guhindurwa mu buryo bwikora hamwe n'impinduka z'ibikoresho by'imashini zikora mu buryo bwikora.
4) Igikoresho cyo gufata gikwiye kugira uburyo bwo kurinda umutwaro mwinshi kugira ngo kigabanye ingaruka kuri seriveri
5) Igikoresho cyo gufata ubwacyo gifite inshingano yo kunoza uburyo abantu basura urubuga
6) Urubuga rwo gufata amashusho rushobora gukurikirana urujya n'uruza rw'imashini zikora amashusho
Guhitamo uburyo bwo gufata amakuru ku mashini zikoresha ikoranabuhanga mu bicu
Uburyo bwo gufata urujya n'uruza rw'imashini mu bicu bugomba gushyira igikoresho cyo gukusanya amakuru ku gice cy'ikoranabuhanga. Dukurikije aho ahantu ho gukusanya amakuru hashobora gushyirwa ku gice cy'ikoranabuhanga, uburyo bwo gufata urujya n'uruza rw'imashini mu bicu bushobora kugabanywamo uburyo butatu:Uburyo bw'umukozi, Uburyo bwa mashini ikora kuri interinetinaUburyo bwa Host.
Uburyo bwa mashini ikora kuri interineti: hashyizweho imashini ifata amashusho ya virtual kuri buri mashini ifatika mu bicu, hanyuma hagashyirwaho igikoresho cyo gufata amashusho ya virtual kuri mashini ifata amashusho ya virtual. Urujya n'uruza rw'amashusho rugaragara nk'imashini ifata amashusho ya virtual binyuze mu kwerekana urujya n'uruza rw'amakarita ya virtual kuri switch ya virtual, hanyuma mashini ifata amashusho ya virtual ikoherezwa kuri platform isanzwe yo gufata amashusho ya virtual binyuze kuri karita ya network yihariye. Hanyuma igashyirwa kuri buri platform yo gukurikirana no gusesengura. Inyungu ni uko softswitch bypass mirroring, idafite aho ihuriye n'amakarita ya virtual network na virtual machine isanzwe, ishobora kandi kubona impinduka za mashini ya virtual no kwimura politiki mu buryo bwikora binyuze mu buryo bumwe. Ingaruka mbi ni uko bidashoboka kugera ku buryo bwo kurinda umutwaro mwinshi ukoresheje gufata mashini ya virtual yakira amakuru gusa, kandi ingano y'urujya n'uruza ishobora kugaragara igenwa n'imikorere ya switch ya virtual, igira ingaruka ku buryo switch ya virtual ihagaze. Mu bidukikije bya KVM, platform ya virtual igomba gutanga imbonerahamwe y'urujya n'uruza rw'amashusho, bigoye kuyicunga no kuyibungabunga. Cyane cyane iyo mashini ifata amashusho yananiwe, mashini ifata amashusho ya virtual ni imwe na mashini ikora amashusho ya virtual kandi izimukira kuri host zitandukanye hamwe n'izindi mashini.
Uburyo bw'umukozi: Shyira porogaramu yo gufata amashusho (Agent Agent) kuri buri mashini isanzwe ikeneye gufata amakuru mu bicu, kandi ukuremo iburasirazuba n'iburengerazuba bw'ibicu binyuze muri porogaramu ya Agent agent, hanyuma uyikwirakwize kuri buri mashini isesengura. Ibyiza ni uko idashingiye kuri platform ya virtualization, ntigira ingaruka ku mikorere ya switch ya virtual, ishobora kwimukana na mashini isanzwe, kandi ishobora gukora filtering traffic. Ibyiza ni uko agents nyinshi zigomba gucungwa, kandi ingaruka za Agent ubwayo ntizishobora gukurwaho iyo ikosa ribaye. Ikarita y'umuyoboro w'ibikorwa isanzwe igomba gusangirwa kugira ngo traffic ikwirakwizwe, ibi bishobora kugira ingaruka ku mikoranire y'ubucuruzi.
Uburyo bwa Host: iyo ikoresheje igikoresho cyigenga cyo gukusanya soft probe kuri buri mashini ifatika mu bicu, ikora mu buryo bwa process kuri mashini, kandi yohereza traffic yafashwe kuri platform isanzwe yo gufata traffic. Ibyiza ni uburyo bwuzuye bwo gufata traffic, nta kwinjira muri mashini isanzwe, ikarita y'ubucuruzi na switch ya mashini isanzwe, uburyo bworoshye bwo gufata ibyuma, imicungire yoroshye, nta mpamvu yo kubungabunga mashini isanzwe, kubona mashini yoroheje kandi yoroshye bishobora kurinda umutwaro mwinshi. Nk'uburyo bwo kwakira mashini, ishobora gukurikirana mashini isanzwe n'ibikoresho bya mashini isanzwe n'imikorere yayo kugira ngo iyobore ishyirwa mu bikorwa rya mirror strategy. Imbogamizi ni uko igomba gukoresha ingano runaka y'ibikoresho bya mashini, kandi ingaruka z'imikorere zigomba kwitabwaho. Byongeye kandi, zimwe muri platform za computer zishobora kudashyigikira ishyirwa mu bikorwa rya porogaramu za computer kuri mashini isanzwe.
Ukurikije uko urwego ruhagaze ubu, uburyo bwa virtual machine bufite porogaramu mu gicu rusange, naho Uburyo bwa Agent na Host Mode bifite abakoresha bamwe mu gicu cyihariye.
Igihe cyo kohereza: Ugushyingo-06-2024
