I-Cybercrime yinto engathandekiyo kule mihla; akukho nkampani okanye umbutho ukhuselekile, kungakhathaliseki ukuba uthetha ngabucala okanye ishishini ngokubanzi. Ingxaki ayizuphucuka kwezi ntsuku ngaphandle kokuba singasebenzisa umthetho olandelwayo kunye nesisombululo esisebenzayo sothungelwano.
Iingcaphephe ziye zaxela kwangaphambili ukuba ulwaphulo-mthetho lwe-intanethi luya konakalisa iindleko zehlabathi nge-25trillion ye-$ ekupheleni kuka-2025; engaqhelekanga, akunjalo?
Esinye isibikezelo sikaForbes sithi ukusetyenziswa rhoqo kwezixhobo eziphathwayo kwandisa izinga lobugebengu be-cybercrime, kwaye akukho kumisa. Ngenxa yoko, ihlabathi ledijithali lingena ukufumana izicwangciso ezintsha zokuqinisa ukhuseleko lwe-cyber. Ezi ziqikelelo zininzi kangangokuba awukakulungeli ukumamela okanye ukuqhubekeka engqondweni yakho.
Namhlanje, sikhangela iprotokholi yenethiwekhi yokuqinisekisa iKerberos. Masitsale amakhethini size sazi ukuba yintoni iKerberos?
Yintoni iKerberos?
I-Intanethi yindawo engakhuselekanga. Ezinye iisistim zisebenzisa i-firewall ukuthintela ukufikelela okungagunyaziswanga kwiikhompyuter. Kodwa i-firewall icinga ukuba abantu ababi bangaphandle, kwaye yingxaki leyo. Uninzi lweenzame ezikhohlakeleyo zenziwa ngaphakathi.
Isebenzisa i-cryptography eyomeleleyo, i-Kerberos yiprothokholi yokuqinisekisa izicelo zenkonzo yenethiwekhi phakathi kweenginginya ezithenjiweyo kwinethiwekhi engathembekanga. Isebenzisa i-cryptography yesitshixo sokhuseleko kunye nomntu wesithathu othembekileyo ekusekeni usetyenziso lweseva yomxhasi kunye nokuqinisekisa ubuni babasebenzisi.
I-Kerberos yiprothokholi yoqinisekiso olusekwe kwindlela yokuthenga itikiti apho umxhasi aziqinisekisa kwiSeva yoQinisekiso (AS) kwaye afumane itikiti (amanyathelo ngamanyathelo abandakanyekayo phakathi konxibelelwano neZiko loSabelo oluPhambili) enokuthi iphinde iyisebenzise ngazo zonke iindawo isebenzisa okufanayo. KDC. Ke, kuthungelwano lwangaphakathi, unokufikelela kwiindawo ngokuziqinisekisa kwi-AS kwaye uphinde usebenzise itikiti ukufikelela kwezinye iindawo.
Iphi iKerberos protocol esetyenziswa kakhulu?
I-Kerberos isetyenziswa ikakhulu kwiinkqubo ezikhuselekileyo ezifuna ukuphicothwa okuthembekileyo kunye neempawu zokuqinisekisa. Isetyenziswa kwiPosix yoqinisekiso, enye indlela yoqinisekiso ye ssh, POP, kunye ne SMTP, Kuvimba weefayili oSebenzayo, NFS, Samba, kunye neeprojekthi ezimbalwa ezifanayo. Ingasetyenziswa rhoqo njengenkqubo yokulahla kuyo nantoni na eqonda uqinisekiso lwePOSIX, oluncinci.
Iprojekthi yoqobo ye-OpenAuth isebenzise inkqubo efanayo, eneempawu ezithatha indawo yengqikelelo yetikiti ngokwembono yomxhasi. Yazi ubuncinci obunye uphumezo olusebenzise ungqinisiso lwesitayile seKerberos kunye nophicotho lweenkonzo zonxibelelwano lweeleya kwiinkqubo zamafu.
Yinkqubo enkulu, nangona ngenxa yePOSIX, uya kukwazi ukufumana isigunyaziso esincinci, kodwa njengezinto ezininzi, "ungaqengqeleka eyakho," kwaye sonke isicelo siya kuhlonipha ngendlela ofuna ngayo. . Kukwanceda ukuba ugunyaziso lwenziwe rhoqo, ngelixa ukuqinisekiswa kwenzeka kuphela ngoqhagamshelo olutsha xa itikiti langaphambili liphelelwa okanye emva kokulahleka konxibelelwano okanye ukuyekiswa.
Ziziphi iingenelo zokuqinisekiswa kwe-Kerberos?
I-Kerberos izisa iitoni zeenzuzo kulo nakuphi na ukusetwa kwe-cybersecurity. Iinzuzo eziphambili zezi:
- Ulawulo lofikelelo olusebenzayo: I-Kerberos inika abasebenzisi inqaku elinye lokugcina umkhondo wokhuseleko kunye nokunyanzeliswa komgaqo-nkqubo wokungena.
- Ufikelelo olukhuselekileyo lobomi kumatikiti abalulekileyo: Itikiti ngalinye le-Kerberos linesitampu sexesha letikiti, idatha yobomi bonke, kunye nexesha lokuqinisekisa elilawulwa ngumlawuli.
- Ungqinisiso lwendawo: Ezinye iisistim zenkonzo kunye nabasebenzisi banokuqinisekisa kwaye basebenzisane ngokuqinisekiswa okufanayo.
- Uqinisekiso olusebenzisekayo kwakhona: nabani na osebenzisa ungqinisiso lweKerberos angaphinda asebenzise kwaye yomelele, efuna ukuba umsebenzisi ngamnye aqinisekiswe yinkqubo kube kanye. Ukuya kuthi ga ngoku itikiti lisebenziseka, umsebenzisi akayi kunyanzeleka ukuba agcine iinkcukacha zakhe ngeenjongo zokuqinisekisa.
- Amanyathelo okhuseleko aqinileyo kunye ahlukeneyo: I-Kerberos inokhuseleko lokuqinisekisa ukhuseleko lokusebenzisa i-cryptography, izitshixo ezininzi eziyimfihlo, kunye nogunyaziso lomntu wesithathu, ukudala ukhuseleko oluthembekileyo nolukhuselekileyo. Enye into malunga ne-Kerberos kukuba amagama ayimfihlo awathumeli kwinethiwekhi, ngelixa izitshixo zabucala zifihliwe.
Yintoni i-Kerberos protocol flow overview?
Nalu uguqulelo oluneenkcukacha ngakumbi malunga nokuba ungqinisiso lwe-Kerberos lumalunga nantoni. Kwakhona, yazi indlela esebenza ngayo ngokuyiqhekeza ibe ngamanyathelo ahlukeneyo kunye namacandelo ayo angundoqo.
Nanga amaziko aziintloko agxininiswe kuhambo lweKerberos protocol.
- umxhasi: Umxhasi usebenza egameni lamava omsebenzisi kwaye usebenza njengonxibelelwano lwesicelo senkonzo.
- Umncedisi: Umncedisi ubamba umsebenzisi ofuna ukufikelela kuyo.
- Iseva yoqinisekiso (AS): I-AS yenza uqinisekiso lomxhasi olufunekayo. Ukuba uqinisekiso luqaliswe ngempumelelo, umxhasi ufumana itikiti elibizwa ngokuba yi-TGT (itikiti lokunika itikiti), ngokusisiseko isiqinisekiso sokuba abanye abancedisi abancedisi baqinisekisiwe.
- Iziko loSabelo elingundoqo (KDC): Kwi-atmosphere ye-Kerberos, uqinisekiso lwahlulwe ngokwengqiqo kwiindawo ezintathu ezahlukeneyo
- Isiseko sedatha
- Iseva yoqinisekiso (AS)
- Itikiti lokunika itikiti (TGT)
La malungu mathathu ayasebenza, ajike kwaye abekhona kumncedisi omnye obizwa ngokuba nguMzindi woSabelo oluPhambili (KDC).
Uqukuqelo lweprotocol lunala manyathelo alandelayo:
Inyathelo 1 : Ekuqaleni, isicelo sokuqinisekiswa komthengi siyahamba. Umsebenzisi ucela i-TGT kwiseva yokuqinisekiswa (AS), equka i-ID yomthengi ukuze aqinisekise.
Inyathelo lesi-2 : I-KDC iqinisekisa le nkqubo ingentla ngeziqinisekiso zomthengi. I-AS ijonga idatha yokhuseleko lomthengi kwaye ifumana zombini ezi xabiso; ikhupha isitshixo esiyimfihlo somthengi, isebenzisa igama eligqithisiweyo ngamagama arhabaxa.
Inyathelo lesi-3 : Umthengi udlulisela umyalezo. Umthengi okanye umsebenzisi usebenzisa isitshixo esiyimfihlo sokususa ukubethela umyalezo aze avelise i-SK1 kunye ne-TGT yoqinisekiso oluqinisekisa itikiti lomthengi.
Inyathelo lesi-4 : Umthengi usebenzisa amatikiti ukufikelela kwisicelo esenziweyo. Abathengi bafuna itikiti kwiseva enikezela ngenkonzo ngokuthumela isitshixo kwaye benze uqinisekiso kwi-TGS.
Inyathelo lesi-5 : I-KDC ivelisa itikiti leseva yefayile. Emva koko i-TGT isebenzisa isitshixo esiyimfihlo se-TGS ukuchaza i-TGT efunyenwe ngumsebenzisi ukuze ikhuphe i-SK1. I-TGS ijonga ukuba idatha iyahambelana na ne-ID yomthengi kunye nedilesi.
Okokugqibela, i-KDC yenza itikiti lenkonzo eliqulethe i-ID yomxhasi, idilesi, isitampu sexesha, kunye ne-SK2.
Inyathelo lesi-6 : Umthengi usebenzisa ithikithi yeseva yefayile ukuqinisekisa i-Sk1 kunye ne-Sk2.
Inyathelo lesi-7 : Iseva ekujoliswe kuyo ifumana i-decryption kunye ne-authentication. Umntu ekujoliswe kuye usebenzisa isitshixo esiyimfihlo seseva ukuze akhuphe i-SK2 kwitikiti ekhutshiweyo.
Nje ukuba iitshekhi zidibene, iseva ekujoliswe kuyo ithumela umyalezo womxhasi oqinisekisa umxhasi kunye ne-AS enye kwenye. Umsebenzisi ngoku ulungele ukuzibandakanya kwiseshoni ekhuselekileyo.
isiphelo
Ekupheleni kwenqaku, sinethemba lokuba ufumene ulwazi oluchazayo malunga nokuba yintoni iKerberos. Ukuze ufumane ulwazi oluthe kratya malunga neKerberos, iSimplilearn inikezela ngeSimplilearn yokufunda kwi-intanethi kubo bonke abantu abafuna ukufunda iKerberos.
