Mene ne harin DDoS?

Ana amfani da Trojans da sauri don kaddamar da hare-haren Sake Kasuwanci (DDoS) a kan tsarin da aka yi niyya, amma abin da ake nufi da kai hari DDoS kuma yaya aka yi su?

A matsayinta mafi mahimmanci, ƙaddamarwar Kuskuren sabis ɗin (DDoS) ta kaddamar da tsarin ƙirar tare da bayanan, kamar yadda za a mayar da martani daga tsarin da aka saba ko tsayar da gaba daya. Domin ƙirƙirar adadin yawan zirga-zirga, ana amfani da cibiyar sadarwa na zombie ko kwakwalwar kwakwalwa.

Kwayoyin cuta ko kwakwalwa sune kwakwalwa da aka yi wa masu kai hari, ta hanyar amfani da Trojans, suna barin waɗannan tsarin sulhuntawa da su sarrafa su. Gaba ɗaya, ana amfani da waɗannan tsarin don ƙirƙirar hawan ƙananan zirga-zirga da ake bukata don haifar da harin DDoS.

An yi amfani da waɗannan shafukan yanar gizo sau da yawa kuma suna sayarwa a tsakanin masu kai hari, saboda haka tsarin sulhu zai iya kasancewa ƙarƙashin ikon masu aikata laifuka - kowannensu yana da ma'ana daban. Wasu masu kai farmaki na iya amfani da botnet a matsayin siginar gizo-gizo, wasu suyi aiki a matsayin wani shafin saukewa don code marar kyau, wasu don karɓar rashawa na phishing, da sauransu don hare-haren DDoS da aka ambata.

Za'a iya amfani da dabaru da yawa don sauƙaƙe kai hari kan Kuskuren sabis. Biyu daga cikin mafi yawan suna buƙatun HTTP GET da kuma SYN Floods. Ɗaya daga cikin misalan da aka fi sani da wani harin HTTP GET ya fito ne daga kututtukan MyDoom, wanda ya kera shafin yanar gizon SCO.com. Hakan na GET yana aiki kamar yadda sunansa ya nuna - yana aika buƙatar don takamaiman shafi (yawanci shafin yanar gizo) zuwa uwar garken manufa. A game da kututtukan MyDoom , ana buƙatar buƙatun 64 a kowace biyu daga kowane kamuwa da cuta. Tare da dubban kwakwalwa da aka kiyasta cewa MyDoom yana kamuwa da shi, harin ya yi sauri a kan SCO.com, yana ƙaddamar da shi na offline don kwanaki da yawa.

Jirgin ruwan SYN shine mahimmanci mai tsattsauran ra'ayi. Hanyoyin sadarwa na Intanit suna amfani da hanyoyi guda uku. Mai gabatarwa ya fara tare da SYN, uwar garken yayi amsa tare da SYN-ACK, kuma abokin ciniki ya kamata ya amsa da ACK. Amfani da adiresoshin IP, wanda mai amfani ya aika da SYN wanda ke kawo SYN-ACK zuwa wani adireshin da ba a buƙatar (kuma ba a samo shi) ba. Sannan uwar garken yana jira don amsawar ACK ba wani amfani. Lokacin da aka aika da manyan lambobin wadannan sakonnin SYN zuwa cikin manufa, sunadaran uwar garken sun ƙare kuma uwar garken ya shiga SYN Flood DDoS.

Ana iya kaddamar da hare-haren DDoS da yawa daban-daban, ciki har da Attarancin Kashi na UDP, Ruwan ICC, da Ping of Mutuwa. Don ƙarin bayani game da irin hare-haren DDoS, ziyarci Cibiyar Sadarwar Neman Networking (ANML) da kuma sake duba Sakamakon Rarraba Kasuwanci (DDoS).

Dubi kuma: Shin kwamfutarka a zombie?