Ni ubuhe buryo bwa SSL / TLS?
SSL decryption, izwi kandi kwizina rya SSL / TLS, bivuga inzira yo guhagarika no gufungura Secure Sockets Layeri (SSL) cyangwa Umutekano wa Transport Layeri Umutekano (TLS) uhishe traffic traffic. SSL / TLS ni porotokoro ikoreshwa cyane itanga amakuru yohereza amakuru ku miyoboro ya mudasobwa, nka interineti.
SSL ibanga risanzwe rikorwa nibikoresho byumutekano, nka firewall, sisitemu zo gukumira kwinjira (IPS), cyangwa ibikoresho byabigenewe bya SSL. Ibi bikoresho bishyirwa mubikorwa murusobe kugirango bigenzure ibanga ryabitswe kubwumutekano. Intego yibanze nugusesengura amakuru ahishe kubishobora kubangamira, porogaramu zangiza, cyangwa ibikorwa bitemewe.
Kugirango ukore ibanga rya SSL, igikoresho cyumutekano gikora nkumuntu-hagati-hagati yumukiriya (urugero, mushakisha y'urubuga) na seriveri. Iyo umukiriya atangije SSL / TLS ihuza na seriveri, igikoresho cyumutekano gihagarika traffic ibanga kandi gishyiraho ibice bibiri bitandukanye bya SSL / TLS - kimwe numukiriya nundi hamwe na seriveri.
Igikoresho cyumutekano noneho gifungura urujya n'uruza rwumukiriya, rugenzura ibifunze, kandi rugakoresha politiki yumutekano kugirango umenye ibikorwa bibi cyangwa biteye amakenga. Irashobora kandi gukora imirimo nko gukumira amakuru yatakaye, kuyungurura ibiyirimo, cyangwa gutahura malware kumakuru yihishe. Imodoka imaze gusesengurwa, igikoresho cyumutekano cyongeye kugifunga ukoresheje icyemezo gishya cya SSL / TLS hanyuma kikohereza kuri seriveri.
Ni ngombwa kumenya ko ibanga rya SSL ritera ubuzima bwite n’umutekano. Kubera ko igikoresho cyumutekano gifite amakuru yifunguye, irashobora kureba amakuru yoroheje nkizina ryumukoresha, ijambo ryibanga, ibisobanuro byamakarita yinguzanyo, cyangwa andi makuru y'ibanga yoherejwe kumurongo. Kubwibyo, ibanga rya SSL rishyirwa mubikorwa mubisanzwe bigenzurwa kandi bifite umutekano kugirango hamenyekane ubuzima bwite nubusugire bwamakuru yafashwe.
SSL Decryption ifite uburyo butatu busanzwe, ni:
- Uburyo bwa Passive
- Uburyo bwinjira
- Uburyo bwo gusohoka
Ariko, ni irihe tandukaniro ryuburyo butatu bwa SSL Decryption?
| Uburyo | Uburyo bworoshye | Uburyo bwinjira | Uburyo bwo gusohoka |
| Ibisobanuro | Kohereza gusa traffic SSL / TLS idafite ibanga cyangwa ihinduka. | Kuramo ibyifuzo byabakiriya, gusesengura no gukoresha politiki yumutekano, hanyuma byohereza ibyifuzo kuri seriveri. | Kuramo ibisubizo bya seriveri, gusesengura no gukoresha politiki yumutekano, hanyuma yohereza ibisubizo kubakiriya. |
| Urujya n'uruza rw'imodoka | Icyerekezo | Umukiriya Kuri Seriveri | Seriveri Kuri Umukiriya |
| Uruhare rwibikoresho | Indorerezi | Umuntu-muri-Hagati | Umuntu-muri-Hagati |
| Ikibanza | Nta kubanga | Gufungura kumurongo wa perimeteri (mubisanzwe imbere ya seriveri). | Kurangiza kuri perimeteri y'urusobe (mubisanzwe imbere yumukiriya). |
| Kugaragara kw'imodoka | Ibanga ryibanga gusa | Ibanga ry'abakiriya basabye | Ibanga rya seriveri ibisubizo |
| Guhindura ibinyabiziga | Nta gihinduka | Irashobora guhindura traffic kugirango isesengurwe cyangwa intego zumutekano. | Irashobora guhindura traffic kugirango isesengurwe cyangwa intego zumutekano. |
| Icyemezo cya SSL | Ntabwo ukeneye urufunguzo rwihariye cyangwa icyemezo | Irasaba urufunguzo rwihariye nicyemezo cya seriveri ifatwa | Irasaba urufunguzo rwihariye nicyemezo kubakiriya bafatwa |
| Igenzura ry'umutekano | Igenzura rito kuko ridashobora kugenzura cyangwa guhindura ibanga ryabitswe | Urashobora kugenzura no gushyira mubikorwa politiki yumutekano kubisabwa nabakiriya mbere yo kugera kuri seriveri | Urashobora kugenzura no gushyira mubikorwa politiki yumutekano kubisubizo bya seriveri mbere yo kugera kubakiriya |
| Ibibazo byihariye | Ntabwo igera cyangwa ngo isesengure amakuru ahishe | Ifite uburyo bwo gufungura ibyifuzo byabakiriya, kuzamura ibibazo byibanga | Ifite uburyo bwo gufungura ibisubizo bya seriveri, kuzamura ibibazo byihariye |
| Ibitekerezo byubahirizwa | Ingaruka ntoya ku buzima bwite no kubahiriza | Birashobora gusaba kubahiriza amabwiriza yerekeye ubuzima bwite | Birashobora gusaba kubahiriza amabwiriza yerekeye ubuzima bwite |
Ugereranije na seriveri yo gutondekanya uburyo bwogutanga umutekano, tekinoroji ya tekinoroji ya seriveri ifite aho igarukira.
Firewall hamwe numuyoboro wumutekano wumurongo wibanga traffic SSL / TLS akenshi binanirwa kohereza ibanga ryibanga kubindi bikoresho byo kugenzura no kubungabunga umutekano. Mu buryo busa nabwo, kuringaniza imizigo bikuraho traffic SSL / TLS kandi ikwirakwiza neza umutwaro hagati ya seriveri, ariko ikananirwa gukwirakwiza traffic mu bikoresho byinshi by’umutekano mbere yo kongera kubisobora. Hanyuma, ibyo bisubizo ntibigenzura kugenzura ihitamo ryumuhanda kandi bizagabura ibinyabiziga bidafite ibanga kuri wire-yihuta, mubisanzwe byohereza traffic yose kuri moteri yifungura, bitera ibibazo byimikorere.
Hamwe na Mylinking ™ SSL decryption, urashobora gukemura ibi bibazo:
1- Kunoza ibikoresho byumutekano bihari muguhuza no gupakurura ibanga rya SSL no kongera gushishoza;
2- Kugaragaza iterabwoba ryihishe, kutubahiriza amakuru, na malware;
3- Kubaha amakuru yerekeye ubuzima bwite bwubahiriza politiki ishingiye ku guhitamo uburyo bwo guhitamo;
4 -Urunani rwa serivise nyinshi zubwenge bwumuhanda nko gukata paki, guhisha, kugabanwa, no kuyungurura amasomo yo guhuza, nibindi.
5- Hindura imikorere y'urusobe rwawe, kandi uhindure ibikwiye kugirango uburinganire hagati yumutekano nibikorwa.
Nibimwe mubyingenzi byingenzi bya SSL kubanga muri net packet brokers. Mugukingura traffic SSL / TLS, NPBs zongera kugaragara no gukora neza mubikoresho byumutekano no kugenzura, bikarinda umutekano wuzuye hamwe nubushobozi bwo gukurikirana imikorere. SSL ibanga muri net packet brokers (NPBs) ikubiyemo kugera no gufungura ibanga ryabitswe kugirango bigenzurwe kandi bisesengurwe. Kugenzura ibanga n'umutekano byumuhanda wifunze ni ngombwa cyane. Ni ngombwa kumenya ko amashyirahamwe akoresha ibanga rya SSL muri NPB agomba kuba afite politiki nuburyo bunoze bwo kugenzura imikoreshereze y’imodoka zifunze, harimo kugenzura uburyo bwo kugenzura, gukoresha amakuru, na politiki yo kubika. Kubahiriza ibisabwa byemewe n'amategeko nibisabwa ni ngombwa kugirango umenye ibanga n'umutekano by'imodoka zifunze.
Igihe cyo kohereza: Nzeri-04-2023
