Kua puta ake ngā ture YARA hei taputapu nui mō te tautuhi, te whakarōpū, me te whakautu ki ngā tūmomo riri kino. I te mea e anga whakamua ana ngā whakahaere ki ngā whakaekenga ipurangi uaua haere, e whanake haere ana, ka whakaratohia e ngā anga haumarutanga YARA he otinga ngāwari me te kaha mō te kimi riri, e tuku ana i te tiakitanga puta noa i ngā kōnae, ngā tukanga, me te haereere whatunga. Ka tūhuratia e tēnei papakupu whānui he aha ngā ture YARA, me pēhea te mahi, me tō rātou hiranga i roto i ngā rautaki haumarutanga ipurangi hou.
Nga wehewehe:
He aha ngā Ture a YARA? #
He taputapu taurite tauira ngā ture YARA i hangaia hei kimi me te whakarōpū i ngā pūmanawa kino mā te matawai i ngā kōnae, ngā tukanga, me ngā taonga pūnaha mō ngā āhuatanga motuhake. I whakawhanakehia tuatahitia e VirusTotal, ka āwhina ngā ture YARA i ngā tohunga haumarutanga tukutuku ki te tautuhi i ngā pūmanawa kino e mōhiotia ana me ngā pūmanawa kino e kore e mōhiotia ana mā te rapu i ngā aho, i ngā raupapatanga hexadecimal, i ngā Tohu Whakatutukitanga (IoC) uaua ake rānei. Ka taea te whakarite i ēnei ture kia kitea ai te whānuitanga o ngā tūmomo riri, ka waiho hei poutokomanawa mō ngā rautaki haumarutanga YARA. Ka whakamahia ngā ture YARA me ngā taputapu haumarutanga pēnei i te pūmanawa ārai huaketo me ngā Pūnaha Kitenga Urupare (IDS), e whakarato ana i tētahi paparanga tiaki pakari ake i ngā whakaeke pūmanawa kino.
Ngā Āhuatanga Matua o ngā Ture YARA #
- Tauira Whakaōrite: Ka matawaihia e ngā ture YARA ngā kōnae mō ngā tauira motuhake, pērā i ngā aho kuputuhi, ngā kīanga auau, ngā raupapatanga hauono-ira rānei, hei tautuhi i ngā momo pūmanawa kino e mōhiotia ana me ngā momo rerekē.
- Arorau Pūreana: Ka whakamahia e ēnei ture te arorau Boolean hei whakakotahi i ngā tikanga maha, kia taea ai te whakamahi i ngā tikanga o mua.ciste kimi i ngā tūmomo mōrearea.
- Whakamahinga Ripeka: Ka taea e YARA te matawai i te whānuitanga o ngā momo kōnae (hei tauira, ngā kōnae whakahaere, ngā PDF, ngā pūranga) puta noa i ngā papaaho maha, ā, he tino whānuitia ana.
Hanganga o ngā Ture YARA #
E toru ngā wāhanga matua o te ture YARA:
- Wāhanga Meta: Ka whakarato i ētahi atu kōrero mō te ture, pēnei i tōna ingoa, kaituhi, me tōna whakaahuatanga.
- Wāhanga Aho: Ka whakarārangi i ngā tauira, i ngā aho rānei e rapua ana e YARA i roto i tētahi kōnae, i tētahi tukanga rānei.
- Wāhanga Āhuatanga: E tautuhi ana me pēhea te taurite o ēnei tauira ki te kimi i te keu.
Te Mahi a ngā Ture YARA #
E rua ngā wāhanga matua e hanga ana i ngā ture YARA
- Ngā tikanga: Tautuhia ngā āhuatanga me taurite e tētahi kōnae, e tētahi tukanga rānei kia kiia ai he kino. Ka taea ēnei te hangai ki ngā āhuatanga pēnei i ngā aho kuputuhi, ngā kīanga auau, ngā raraunga raraunga kōnae rānei.
- Ngā raraunga matua: Mā tēnei ka whakaratohia he kōrero tāpiri mō te ture, pērā i te ingoa, te kaituhi, me te whakaahuatanga, kia māmā ake ai te whakahaere me te tohutoro.
Ngā Painga Matua o ngā Ture YARA #
- Whakaaetanga: Ka taea e koe te whakarite i ngā ture YARA kia kitea ai te whānuitanga o ngā momo pūmanawa kino, kia taea ai te urutau ki ngā hiahia haumarutanga rerekē.
- te kaha: He tere te tukanga, ā, he pai mō te kimi i ngā pūmanawa kino i te wā tūturu.
- Taea: Ka taea e ia te whakahaere i ngā rahinga raraunga nui, kia pai ai te mahi i roto i ngā taiao he whānui ngā pūnaha kōnae me ngā whatunga.
- Tautoko Hapori: He hapori kaha tō YARA o ngā kaiwhakamahi e whakapuaki ana i ngā aratohu, ngā mahi pai, me ngā whakahōutanga hei whakatika i ngā tūmomo mōrearea haumarutanga hou.
He aha te Haumarutanga YARA Nga mea #
I tenei ra Haumarutanga YARA ngā rautaki, mā ēnei aratohu ka taea e ngā whakahaere te tautuhi wawe i ngā tūmomo riri, ka ārai i ngā kino pea i mua i te horapa haere. Ka taea te whakauru ki roto i ngā anga haumarutanga whānui hei kite i ngā momo pūmanawa kino i te wā tūturu, me te whakahaere aunoa i ngā urupare ki ngā mahi kino.
te Te Rōpū Urupare Āwhati Rorohiko (CERT), e whakawhanake ana, e tohatoha ana hoki i ngā kawa YARA hei āwhina i ngā whakahaere ki te kimi me te urupare ki ngā tūmomo mōrearea kino, ā, ka whai wāhi atu ki ngā mahi haumarutanga tukutuku o te ao. Mā ēnei ture tiritahi ka whakaratohia he taputapu nui ki ngā whakahaere mō te tautuhi me te whakakore i ngā tūmomo mōrearea i roto i ā rātou whatunga.
Ngā Utauta me ngā Hangarau e Pā Ana #
He maha ngā wā ka whakamahia ēnei paerewa me ētahi atu otinga haumarutanga tukutuku, pēnei i:
- Pūnaha Whakakitenga Whakauru (IDS)
- Pūmanawa Antivirus
- Ngā Pūhara Tātari Tūpāpaku
Ka whakarei ake ēnei taputapu tautoko i te tūnga haumarutanga whānui o ngā whakahaere mā te kimi, te tātari, me te whakaiti i te pūmanawa kino me ētahi atu tūmomo riri haumarutanga tukutuku.
Whakapūmautia tō Kaupapa ki a Xygeni #
Whakapaia he whakaaturanga i tenei ra kia kitea ai me pēhea e taea ai e Xygeni te whakarerekē i tō huarahi ki te haumarutanga pūmanawa.
Pātai Auau #
He taputapu taurite tauira tēnei e whakamahia ana i roto i te haumarutanga tukutuku hei tautuhi me te whakarōpū i ngā pūmanawa kino. Ka matawaihia e ia ngā kōnae, ngā tukanga, me ngā taonga pūnaha mō ngā huanga, ngā tauira rānei (pēnei i ngā aho, i ngā raupapa rua rānei) e tohu ana i ngā whanonga kino. Mā ēnei aratohu ka taea e ngā tohunga haumarutanga tukutuku te kite i ngā pūmanawa kino e mōhiotia ana, e kore hoki e mōhiotia mā te waihanga i ngā tauira kitenga kua whakaritea.
Hei waihanga i ngā ture YARA, ka tuhia e koe he waehere e tautuhi ana i ngā tauira, i ngā āhuatanga rānei e pā ana ki ngā momo pūmanawa kino motuhake. Kei roto i ia ture e toru ngā wāhanga matua: te wāhanga meta, e whakarato ana i ngā mōhiohio e pā ana ki te ture; te wāhanga aho, e whakarārangi ana i ngā tauira hei kitea; me te wāhanga āhua, e whakamārama ana i te huarahi e whakaoho ai te ture i te kitenga. Ka whai ēnei aratohu i tētahi whakatakotoranga hanganga e whakamahi ana i te reo YARA. I te wā e hanga ana i tētahi ture, ka tautuhia e koe ngā āhuatanga o te pūmanawa kino, pērā i ngā aho, i ngā whanonga rānei, e taea ai te tautuhi.
Ka taea e koe te whakahaere i ngā ture YARA mā te whakamahi i te taputapu raina whakahau YARA. I muri i te tuhi i te kawa, ka taea e koe te whakamahi mā te tohu i a YARA ki ngā kōnae, ki ngā whaiaronga rānei e hiahia ana koe ki te matawai. Ko te wetereo taketake ko:yara <rule_file> <target_file>
Ka matawaihia e tēnei whakahau te kōnae ūnga, ā, ka whakamahia ngā kawa kua tautuhia i roto i te kōnae ture. Ka tautokohia hoki e YARA te matawai whaiaronga auau me te matawai mahara.
Ka whakamahia tēnei e ngā kaitātari haumarutanga standard i roto i ngā āhuatanga pēnei i te kimi pūmanawa kino, te tātari taihara, me te urupare ki ngā aituā. Ka whakauruhia e rātou ngā ture YARA ki te pūmanawa ārai huaketo, ngā Pūnaha Kitenga Urupare (IDS), ngā taputapu tātari tūmau rānei hei kimi i ngā kōnae whakapae i te wā tūturu. Ka taea hoki e ēnei aratohu te whakahaere aunoa i ngā tirotiro haumarutanga i roto i CI/CD pipelines, te whakarite i ngā mahi whakawhanake pūmanawa haumaru
Me tautuhi koe i ngā wāhanga e toru:
Wāhanga Meta: Kei roto ngā raraunga ture pēnei i te kaituhi me te whakaahuatanga.
Wāhanga Aho: Ka whakarārangi i ngā tauira hei rapu, pērā i ngā aho kuputuhi, i ngā raupapatanga rua rānei.
Wāhanga Āhuatanga: E tohu ana me pēhea te ōrite o ngā tauira hei whakahohe i te kitenga.
Mā te wetereo a YARA ka taea te whakamahi i ngā āhuatanga motuhake o te pūmanawa kino, ka taea ai te whakamahi i muaciste kimi.
