Cybercrime ndizovuta masiku ano; palibe kampani kapena bungwe lomwe liri otetezeka, mosasamala kanthu za kuyankhula zachinsinsi kapena bizinesi yonse. Vuto silikuyenda bwino masiku ano pokhapokha titagwiritsa ntchito protocol yathu yokhala ndi netiweki yabwino.
Akatswiri aneneratu kuti umbava wa pa intaneti udzawononga ndalama zapadziko lonse ndi $25trillion pakutha kwa 2025; zachilendo, sichoncho?
Ulosi wina wa Forbes ukunena kuti kugwiritsa ntchito zida zam'manja mosalekeza kukuchulukitsa kuchuluka kwa milandu yapaintaneti, ndipo palibe kuyimitsa. Chifukwa chake, dziko la digito likulowa kuti lipeze njira zatsopano zolimbikitsira chitetezo cha cyber. Maulosi awa ndi ochuluka kwambiri kotero kuti simunakonzekere kumvetsera kapena kuchita m'maganizo mwanu.
Lero, tikuyang'ana protocol yotsimikizira netiweki ya Kerberos. Tiyeni tibweze makataniwo ndikudziwa Kerberos ndi chiyani?
Kodi Kerberos ndi chiyani?
Intaneti ndi malo opanda chitetezo. Makina ena amagwiritsa ntchito zozimitsa moto kuti aletse makompyuta osaloledwa. Koma ma firewall amaganiza kuti anthu oipa ali kunja, ndipo ndilo vuto. Zoyeserera zoyipa zambiri zimachitika kuchokera mkati.
Pogwiritsa ntchito ma cryptography amphamvu, Kerberos ndi njira yotsimikizira zopempha zapaintaneti pakati pa makamu odalirika pamanetiweki osadalirika. Imagwiritsa ntchito chinsinsi chachinsinsi chachitetezo komanso munthu wina wodalirika pokhazikitsa mapulogalamu a kasitomala-seva ndikutsimikizira zomwe ogwiritsa ntchito.
Kerberos ndi ndondomeko yovomerezeka yotengera njira yopezera matikiti momwe kasitomala amadzitsimikizira yekha ku Authentication Server (AS) ndipo amalandira tikiti (njira zosiyanasiyana zomwe zimakhudzidwa pakati pa kulumikizana ndi Key Distribution Center) zomwe angagwiritsenso ntchito ndi ma node onse pogwiritsa ntchito zomwezo. KDC. Chifukwa chake, mu netiweki yamkati, mutha kupeza ma node podzitsimikizira nokha ku AS ndikugwiritsanso ntchito tikiti kuti mupeze ma node ena.
Kodi Kerberos protocol imagwiritsidwa ntchito pati?
Kerberos imagwiritsidwa ntchito makamaka pamakina otetezeka omwe amafunikira kuwunika kodalirika komanso kutsimikizira. Amagwiritsidwa ntchito potsimikizira Posix, njira ina yotsimikizira ssh, POP, ndi SMTP, mu Active Directory, NFS, Samba, ndi ntchito zina zofananira. Itha kugwiritsidwa ntchito nthawi zonse ngati njira yotsitsa pachilichonse chomwe chimamvetsetsa kutsimikizika kwa POSIX, komwe kuli pang'ono.
Pulojekiti yoyambirira ya OpenAuth idagwiritsa ntchito njira yofananira, yokhala ndi zizindikiro zolowa m'malo mwa malingaliro a kasitomala. Dziwani zinanso zingapo zomwe zidagwiritsa ntchito kutsimikizika kwa mawonekedwe a Kerberos ndikuwunika pazolumikizana zapaintaneti pamakina amtambo.
Ndi dongosolo labwino, ngakhale chifukwa cha POSIX, mudzatha kupeza chilolezo chocheperako, koma monga zinthu zambiri, mutha "kugudubuza zanu," ndipo ntchito ina yonse idzalemekeza momwe mukufunira. . Zimathandizanso kuti chilolezo chizichitika pafupipafupi, pomwe kutsimikizika kumangochitika ndi maulumikizidwe atsopano tikiti yam'mbuyomu ikatha ntchito kapena kutayika kapena kuyimitsa.
Kodi maubwino a Kerberos ndi chiyani?
Kerberos imabweretsa zabwino zambiri pakukhazikitsa kulikonse kwa cybersecurity. Ubwino waukulu ndi:
- Kuwongolera koyenera: Kerberos imapatsa ogwiritsa ntchito mfundo imodzi yoti azitha kuyang'anira chitetezo ndi malamulo olowera.
- Matikiti otetezedwa otetezedwa kwa moyo wawo wonse: Tikiti iliyonse ya Kerberos ili ndi sitampu yanthawi ya tikiti, deta yanthawi zonse, komanso nthawi yotsimikizira yomwe imayendetsedwa ndi woyang'anira.
- Kutsimikizika Pamalo: Makina ena othandizira ndi ogwiritsa ntchito amatha kutsimikizira ndikugwiritsa ntchito wina ndi mnzake potsimikizirana.
- Kutsimikizika kogwiritsiridwanso ntchito: aliyense amene amagwiritsa ntchito kutsimikizira kwa Kerberos akhoza kugwiritsanso ntchito ndipo ndi yolimba, zomwe zimafuna kuti wogwiritsa ntchito aliyense atsimikizire ndi makina kamodzi kokha. Momwe tikiti ingagwiritsire ntchito, wogwiritsa ntchito sayenera kusunga zambiri kuti atsimikizire.
- Njira zotetezera zolimba komanso zosiyanasiyana: Kerberos ali ndi chitetezo chotsimikizika kuti agwiritse ntchito zilembo zachinsinsi, makiyi achinsinsi angapo, ndi chilolezo cha chipani chachitatu, kupanga chitetezo chodalirika komanso chotetezeka. Chinthu chimodzi chokhudza Kerberos ndikuti mapasiwedi samatumiza pamanetiweki, pomwe makiyi achinsinsi amasungidwa.
Kodi kuwunika kwa Kerberos protocol ndi chiyani?
Nayi mtundu watsatanetsatane wazomwe kutsimikizika kwa Kerberos kumakhudza. Komanso, dziwani momwe zimagwirira ntchito pozigawa m'masitepe osiyanasiyana ndi zigawo zake zazikulu.
Nawa mabungwe akulu omwe akhudzidwa ndikuyenda kwa protocol ya Kerberos.
- kasitomala: Makasitomala amachita m'dzina la wogwiritsa ntchito ndipo amakhala ngati kulumikizana kwa pempho lautumiki.
- Seva: Seva imakhala ndi wogwiritsa ntchito yemwe akufuna kuyipeza.
- Seva yotsimikizira (AS): AS imachita kutsimikizika kwa kasitomala. Ngati kutsimikizika kwakhazikitsidwa bwino, kasitomala amalandira tikiti yotchedwa TGT (tikiti yopereka matikiti), chitsimikizo kuti maseva amakasitomala enawo ndi ovomerezeka.
- Key Distribution Center (KDC): M'mlengalenga wa Kerberos, kutsimikizika kumagawidwa m'magawo atatu osiyanasiyana
- A database
- Seva yotsimikizira (AS)
- Tikiti yopereka matikiti (TGT)
Magawo atatuwa amathamanga, kutembenuka ndi kupezeka mu seva imodzi yotchedwa Key Distribution Center (KDC).
Kuyenda kwa protocol kumakhala ndi izi:
Intambwe ya 1: Poyambirira, pempho lotsimikizira kasitomala limapita. Wogwiritsa ntchito amafunsa TGT kuchokera pa seva yotsimikizira (AS), yomwe imaphatikizapo ID ya kasitomala kuti atsimikizire.
Intambwe ya 2: KDC imatsimikizira zomwe zili pamwambapa ndi zidziwitso za kasitomala. AS imayang'ana deta ya chitetezo cha kasitomala ndikupeza zonse zomwe zili zofunika; imatulutsa kiyi yachinsinsi ya kasitomala, kugwiritsa ntchito mawu achinsinsi ndi mawu aukali.
Intambwe ya 3: Wogula amatumiza uthenga. Makasitomala kapena wogwiritsa ntchito amagwiritsa ntchito kiyi yachinsinsi kuti alembe uthenga ndikupanga SK1 ndi TGT zotsimikizira zomwe zimatsimikizira tikiti ya kasitomala.
Intambwe ya 4: Wogula amagwiritsa ntchito matikiti kuti apeze zomwe apempha. Makasitomala amafunikira tikiti yochokera ku seva yomwe ikupereka ntchitoyi potumiza kiyi ndikupanga kutsimikizika ku TGS.
Intambwe ya 5: KDC imapanga tikiti ya seva ya fayilo. TGT ndiye imagwiritsa ntchito kiyi yachinsinsi ya TGS kufotokozera TGT yomwe idalandilidwa kuchokera kwa wogwiritsa ntchito kuti ichotse SK1. TGS imayang'ana ngati deta ikufanana ndi ID ya kasitomala ndi adilesi.
Pomaliza, KDC imapanga tikiti yantchito yokhala ndi ID ya kasitomala, adilesi, chidindo chanthawi, ndi SK2.
Intambwe ya 6: Makasitomala amagwiritsa ntchito tikiti ya seva ya fayilo kutsimikizira Sk1 ndi Sk2.
Intambwe ya 7: Seva yomwe ikuyang'aniridwa ndiye imalandira kusungidwa ndi kutsimikizika. Munthu amene akumufunayo amagwiritsa ntchito kiyi yachinsinsi ya seva kuti asinthe tikiti yomwe yatulutsidwa ndikuchotsa SK2.
Macheke akakwaniritsidwa, seva yomwe imayang'aniridwa imatumiza uthenga wa kasitomala kutsimikizira kasitomala ndi AS wina ndi mnzake. Wogwiritsa ntchito tsopano ali wokonzeka kuchita nawo gawo lotetezeka.
Kutsiliza
Pamapeto pa nkhaniyi, tikukhulupirira kuti muli ndi chidule cha zomwe Kerberos ali. Kuti mudziwe zambiri za Kerberos, Simplilearn amapereka Simplilearn kuphunzira pa intaneti kwa onse ofuna kuphunzira Kerberos.
