Ubugebengu be-Cybercrime buyiqiniso elidabukisayo kulezi zinsuku; ayikho inkampani noma inhlangano ephephile, kungakhathalekile ukuthi ukhuluma ngezinto ezizimele noma zebhizinisi ngobubanzi. Inkinga ngeke ibe ngcono kulezi zinsuku ngaphandle uma singasebenzisa iphrothokholi yethu ngesisombululo senethiwekhi esisebenzayo.
Ongoti babikezele ukuthi ubugebengu be-inthanethi buzolimaza izindleko zomhlaba ngamadola ayizigidigidi ezingama-25 ekupheleni kuka-2025; ongaziwa, akunjalo?
Esinye isibikezelo seForbes sithi ukusetshenziswa njalo kwemishini ephathwayo kukhulisa izinga lobugebengu bamakhompiyutha, futhi akukho ukukuvimba. Ngakho-ke, umhlaba wedijithali uyangena ukuze uthole amasu amasha okuqinisa ukuphepha ku-inthanethi. Lezi zibikezelo ziningi kangangokuthi awukakakulungeli ukuzilalela noma ukuzicubungula engqondweni yakho.
Namuhla, sifuna iphrothokholi yenethiwekhi yokuqinisekisa ye-Kerberos. Asihlehlise amakhethini sazi yini i-Kerberos?
Iyini i-Kerberos?
I-inthanethi iyindawo engavikelekile. Amanye amasistimu asebenzisa ama-firewall ukuvimbela ukufinyelela okungagunyaziwe kumakhompyutha. Kodwa ama-firewall acabanga ukuthi abantu ababi bangaphandle, futhi lokho kuyinkinga. Imizamo eminingi enonya yenziwa ngaphakathi.
Isebenzisa i-cryptography eqinile, i-Kerberos iyiphrothokholi yokuqinisekisa izicelo zesevisi yenethiwekhi phakathi kwabasingathi abathembekile kuyo yonke inethiwekhi engathenjwa. Isebenzisa i-cryptography yokhiye wokuqinisekisa ubunikazi kanye nenkampani yangaphandle ethenjwayo ukuze isungule izinhlelo zokusebenza zeseva yeklayenti kanye nokuqinisekisa ubunikazi babasebenzisi.
I-Kerberos iphrothokholi yokuqinisekisa esekelwe endleleni yokuthenga amathikithi lapho iklayenti lizifakazela ubuqiniso Kuseva Yokuqinisekisa (AS) futhi ithole ithikithi (izinyathelo ezihlukahlukene ezihilelekile phakathi kokuxhumana Nesikhungo Sokusabalalisa Okubalulekile) elingaphinde lisebenzise kuwo wonke ama-node lisebenzisa okufanayo. I-KDC. Ngakho-ke, kunethiwekhi yangaphakathi, ungakwazi ukufinyelela amanodi ngokuziqinisekisa wena ku-AS bese usebenzisa kabusha ithikithi ukuze ufinyelele amanye amanodi.
Iphi i-Kerberos protocol esetshenziswa kakhulu?
I-Kerberos isetshenziswa kakhulu kumasistimu avikelekile adinga ukuhlolwa okuthembekile nezici zokuqinisekisa. Isetshenziswa ekuqinisekiseni i-Posix, enye isistimu yokuqinisekisa ye-ssh, i-POP, ne-SMTP, ku-Active Directory, NFS, Samba, kanye namanye amaphrojekthi ambalwa afanayo. Ingasetshenziswa njalo njengohlelo lokudonsela phansi kunoma yini eqonda ukuqinisekiswa kwe-POSIX, okuyingcosana.
Iphrojekthi yokuqala ye-OpenAuth isebenzise isistimu efanayo, enamathokheni athatha indawo yomqondo wethikithi ngokombono weklayenti. Yazi okungenani okunye ukusetshenziswa okumbalwa okusebenzise ukuqinisekiswa kwesitayela se-Kerberos nokuhlola izendlalelo zokuxhumana zesevisi yewebhu kumasistimu wamafu.
Kuwuhlelo oluhle, noma ngenxa ye-POSIX, uzokwazi ukuthola ukugunyazwa okuncane, kepha njengezinto eziningi, ungakwazi “ukugoqa owakho,” futhi lonke uhlelo lokusebenza luzohlonipha ngendlela ofuna ngayo. . Kuyasiza futhi ukuthi ukugunyazwa kufanele kwenziwe njalo, kuyilapho ukuqinisekiswa kwenzeka kuphela ngoxhumo olusha lapho ithikithi langaphambilini liphelelwa yisikhathi noma ngemva kokulahlekelwa uxhumano noma ukunqanyulwa.
Yiziphi izinzuzo zokuqinisekisa kwe-Kerberos?
I-Kerberos iletha ithoni yezinzuzo kunoma yikuphi ukusethwa kwe-cybersecurity. Izinzuzo eziyinhloko yilezi:
- Ukulawula ukufinyelela okusebenzayo: I-Kerberos inikeza abasebenzisi iphuzu elilodwa ukuze balandelele izibambiso nokusetshenziswa kwenqubomgomo yokungena.
- Ukufinyelela okuvikelekile kwempilo yonke kwamathikithi abalulekile: Ithikithi ngalinye le-Kerberos linesitembu sesikhathi sethikithi, idatha yempilo yonke, kanye nomugqa wesikhathi wokufakazela ubuqiniso olawulwa umlawuli.
- Ukuqinisekiswa kwephuzu: Amanye amasistimu wesevisi nabasebenzisi bangaqinisekisa futhi basebenzisane ngokuqinisekisana.
- Ukufakazela ubuqiniso obusebenziseka kabusha: noma ubani osebenzisa ukuqinisekiswa kwe-Kerberos angaphinda asebenzise futhi aqinile, okudinga umsebenzisi ngamunye ukuthi aqinisekiswe isistimu kanye nje. Ngokusebenzisa ithikithi, umsebenzisi ngeke kudingeke ukuthi agcine imininingwane yakhe ngezinjongo zokuqinisekisa.
- Izinyathelo zokuphepha eziqinile nezihlukile: I-Kerberos inokuvikelwa kokuqinisekisa ukuphepha ukuze isebenzise i-cryptography, okhiye abambalwa abayimfihlo, nokugunyazwa okuvela eceleni, idala ukuvikela okuthembekile nokuvikelekile. Into eyodwa nge-Kerberos ukuthi amaphasiwedi awathumeli ngamanethiwekhi, kuyilapho okhiye abayimfihlo bebethelwe.
Kuyini ukugeleza kwephrothokholi ye-Kerberos?
Nansi inguqulo enemininingwane eyengeziwe yokuthi ukuqinisekiswa kwe-Kerberos kumayelana nani. Futhi, yazi ukuthi isebenza kanjani ngokuyihlukanisa ibe yizinyathelo ezahlukene kanye nezingxenye zayo eziyinhloko.
Nawa amabhizinisi ayinhloko agxile ekugelezeni kwephrothokholi ye-Kerberos.
- Client: Iklayenti lisebenza egameni lomsebenzisi futhi lisebenza njengokuxhumana ngesicelo sesevisi.
- Iseva: Iseva isingatha umsebenzisi ofuna ukuyifinyelela.
- Iseva yokuqinisekisa (AS): I-AS yenza ukuqinisekiswa kweklayenti okudingekayo. Uma ukuqinisekiswa kwethulwa ngempumelelo, iklayenti lithola ithikithi elibizwa nge-TGT (ithikithi lokunikeza ithikithi), ngokuyisisekelo isiqinisekiso sokuthi amaseva amanye amaklayenti aqinisekisiwe.
- Isikhungo Sokusabalalisa Okubalulekile (KDC): Emkhathini we-Kerberos, ukufakazela ubuqiniso kuhlukaniswe ngokunengqondo izingxenye ezintathu ezihlukene
- Isizindalwazi
- Iseva yokuqinisekisa (AS)
- Ithikithi lokunikeza ithikithi (TGT)
Lezi zingxenye ezintathu zisebenza, ziyajika futhi zikhona kuseva eyodwa ebizwa ngokuthi i-Key Distribution Center (KDC).
Ukugeleza kwephrothokholi kuqukethe izinyathelo ezilandelayo:
Isinyathelo 1: Ekuqaleni, isicelo sokuqinisekisa iklayenti siyahamba. Umsebenzisi ucela i-TGT kuseva yokuqinisekisa (AS), efaka i-ID yeklayenti ukuze kube nobufakazi.
Isinyathelo 2: I-KDC iqinisekisa inqubo engenhla ngemininingwane yeklayenti. I-AS ihlola idatha ngokuvikeleka kweklayenti futhi ithola womabili amanani; ikhipha ukhiye weklayenti oyimfihlo, isebenzisa igama eliyimfihlo elinamagama ahlabayo.
Isinyathelo 3: Iklayenti lidlulisela umlayezo. Iklayenti noma umsebenzisi usebenzisa ukhiye oyimfihlo ukususa ukubhala umlayezo futhi akhiqize i-SK1 ne-TGT yokuqinisekisa eqinisekisa ithikithi leklayenti.
Isinyathelo 4: Iklayenti lisebenzisa amathikithi ukuze lifinyelele isicelo esikhiqiziwe. Amaklayenti adinga ithikithi elivela kuseva enikeza isevisi ngokuthumela ukhiye nokudala ukuqinisekiswa ku-TGS.
Isinyathelo 5: I-KDC ikhiqiza ithikithi leseva yefayela. I-TGT ibe isisebenzisa ukhiye oyimfihlo we-TGS ukuchaza i-TGT etholwe kumsebenzisi ukuze ikhiphe i-SK1. I-TGS ihlola ukuthi idatha ifana yini ne-ID yeklayenti nekheli.
Ekugcineni, i-KDC idala ithikithi lesevisi eliqukethe i-ID yeklayenti, ikheli, isitembu sesikhathi, kanye ne-SK2.
Isinyathelo 6: Iklayenti lisebenzisa ithikithi leseva yefayela ukuze liqinisekise i-Sk1 ne-Sk2.
Isinyathelo 7: Iseva eqondisiwe ibe isithola ukucaciswa nokuqinisekiswa. Umuntu okuqondiwe usebenzisa ukhiye oyimfihlo weseva ukuze asuse ukubhala ngekhodi ithikithi elikhishiwe futhi akhiphe i-SK2.
Uma ukuhlola sekuhlangatshezwane, iseva eqondisiwe ithumela umlayezo weklayenti oqinisekisa iklayenti kanye ne-AS komunye nomunye. Umsebenzisi manje ulungele ukuhlanganyela kuseshini evikelekile.
Isiphetho
Ekupheleni kwe-athikili, sithemba ukuthi uthole umbono ochazayo wokuthi i-Kerberos iyini. Ukuze ufunde kabanzi nge-Kerberos, i-Simplilearn inikeza I-Simplilearn yokufunda online kubo bonke abafisa ukufunda i-Kerberos.
