I te nuinga o te wā, ka arotahi ngā tīma haumarutanga ki ngā tūmomo riri e kitea whānuitia ana pērā i te ransomware, ngā trojan, ngā taputapu tango raraunga (me ētahi atu), engari he tūponotanga marino kei muri: te pūmanawa hina. Ko ēnei ngā tono e āhua tika ana engari e mahi ana i runga i ngā hiahia o te kaiwhakamahi, o te whakahaere rānei. Kāore pea e kino tika ana ki ngā pūnaha, engari ka whakaiti i te haumarutanga, te tūmataitinga, me te mahi i ngā huarahi tino uaua ki te kite.
Mā te mārama ki te tikanga o te pūmanawa hina ka āwhina i ngā tīma DevSecOps me ngā kaiārahi haumarutanga me ngā tohunga ki te tautuhi i tētahi momo pūmanawa e whakamahi ana i te whakawhirinaki me ngā mana whakahaere kaupapa here ngoikore, kaua i ngā ngoikoretanga e mōhiotia ana.
Te Tikanga me te Whakarōpūtanga o te Grayware #
Ko te tikanga o te pūmanawa hina-pūmanawa ka uru ki roto i ngā pūmanawa katoa e noho ana i te te āputa koretake i waenga i te pai me te kino. Kāore i te tino haumaru, kāore hoki i te tino mōrearea. Engari, ka puta mai ngā hua kāore e hiahiatia ana, pērā i te pānuitanga nui rawa, te aroturukitanga huna, te kohikohi raraunga kāore i whakamanahia rānei.
Ko ngā kāwai hina noa ko:
- Tiaki: e werowero ana i ngā pānuitanga kāore i tonoa ki roto i ngā pūtirotiro, i ngā taupānga rānei
- Pūmanawa tirohia: e kohi ana i ngā raraunga whanonga, pūnaha rānei, me te kore whakaae mārama
- Ngā Papatono Kāore Pea e Hiahiatia (PUP): e honoa ana ki ngā kaiwhakauru, ki ngā taputapu "kore utu" rānei
- Ngā tuhinga aroturuki me ngā pihikete: kei roto i ngā pūmanawa, i ngā paetukutuku rānei e tika ana ēnei
He maha ngā wā ka whakamahia e ēnei kaupapa ngā hongere tohatoha tika, ngā toa taupānga pono, ngā putea pūmanawa kore utu, ngā putunga tuwhera rānei, ā, ka uaua ake te whakarōpū i a rātou hei tūmomo mōrearea. Heoi, ka whakaitihia te tūmataitinga, ka puta he mōrearea whakahaere i roto i te wā.
Ngā Āhuatanga Whanoke me te Pānga ki te Haumarutanga #
Ka mahi te Grayware i raro iho i te paepae tirohanga o standard ngā otinga ārai huaketo. He āhua noa iho te āhua o ana whanonga engari ka whakararu i te pono me te whakawhirinaki o te kaiwhakamahi.
Ko ētahi o ngā tauira noa ko:
- Te whakahaere tonu i ngā tukanga papamuri e pau ana te CPU me te mahara
- Tuku raraunga puku ki ngā tūmau mamao mō te whakarārangi, te tātari rānei
- Te werohanga o ngā huānga UI kāore e hiahiatia, te tukunga atu rānei ki ngā whatunga pānuitanga
- Ngā huringa whirihoranga pūnaha kāore i whakamanahia, te tahae pūtirotiro rānei
I roto i ngā taiao whakahaere, ka taea e ēnei whanonga te takahi i ngā anga tiaki raraunga pēnei i te GDPR, CCPA, HIPAA rānei. Mō ngā kaiwhakahaere haumarutanga me ngā tīma DevSecOps, ko te kore o te whakaaro kino e kitea whānuitia ana ehara i te mea hei whakakore i te mōrearea; engari ka whakanuia ake.
Ko te mārama ki te tikanga o te "grayware" ko te mōhio ka puta te kino ki te ingoa pai me te tūponotanga ki te tutuki i ngā ture mai i ngā ratonga "kore kino".
Pūmanawa hina me te Pūmanawa kino: Te Whāinga me te Ture #
I te taumata hangarau, ko te rerekētanga i waenga i te pūmanawa hina me te pūmanawa kino he mea āta whakaarohia. Kua hangaia te pūmanawa kino hei whara, tahae raraunga, whakamuna kōnae, me te whakararuraru i ngā mahi. He rerekē a Grayware, e mahi ana i roto i ngā rohe hina ture. Ka whakawhirinaki ana kaiwhakawhanake ki ngā kupu whakaae koretake, ki te mangere rānei o te kaiwhakamahi hei whakatika i te whanonga pokanoa.
Tauira: he toronga pūtirotiro e whakaari ana i ngā āhuatanga whakaputa hua engari e whakauru ana i ngā aroturuki mō ngā inenga pānuitanga. Kua whakaaturia te mahi, i roto i ngā tikanga ratonga, engari he onge te māramatanga o ngā kaiwhakamahi.
Mō ngā tīma DevSecOps, he mea nui te tautuhi i ngā pūmanawa hina i roto i tēnei horopaki mō te aromatawai mōrearea. Tērā pea ka takahi tonu te waehere e tutuki ana i ngā whakaritenga hangarau i ngā kaupapa here a te kamupene, me te whakatutuki i ngā whakaritenga. standardngā tikanga matatika rānei.
Te horapa puta noa i ngā taiao? #
He rite te tohatoha Grayware ki ngā mekameka tuku pūmanawa tika. He maha ngā wā ka uru atu ki ngā pūnaha rauropi mā roto i ngā puna pono:
- Ngā kaiwhakauru kua whakakotahihia: Ngā taupānga kore utu e whakauru ana i ngā "taputapu āwhina" kōwhiringa.
- Ngā SDK tuatoru: Ngā whare pukapuka pānuitanga, tātaritanga rānei i roto i ngā taupānga pūkoro, tukutuku rānei.
- Toronga Pūtirotiro: He āhua pai ngā monomai e tono ana i ngā whakaaetanga kāore e hiahiatia.
- Īmēra, hononga pāpori rānei: Te whakatairanga i ngā ratonga kore utu, ngā "whakatairanga haumarutanga" rānei.
I tenei ra pipelines, me tino aro atu a DevSecOps ki ēnei kawe. Whakahaere whakawhirinakitanga aunoa ka taea te horapa ngāwari i ngā wāhanga kua whai kiko hina ki roto i ngā taiao hanga mena kāore i te tika te tirotiro.
Te Rapu me te Whakaiti #
He maha ngā wā ka warewarehia e ngā taputapu ārai huaketo tuku iho e hangai ana ki te waitohu te pūmanawa hina nā te mea kāore e whakamahi i ngā ngoikoretanga e mōhiotia ana rānei te whakahaere i ngā kawenga kino. Me tātari whanonga me te horopaki te kimi:
Ko nga rautaki whai hua ko:
- Te mōhiotanga o te kaiwhakamahi: Whakangunguhia ngā kaiwhakawhanake me ngā kaimahi kia mārama ki te tikanga o te kupu "grayware" me ōna mōrearea ngawari.
- Te Kimi me te Whakautu i te Pūwāhi Mutunga (BDU): Tāutuhia ngā mahi tukanga koretake, te rere raraunga kore whakamanatanga rānei.
- Tātaritanga Hanganga Pūmanawa (SCA): Kitea ngā whakawhirinakitanga e whakauru ana i ngā SDK pānuitanga, i ngā SDK telemetry rānei.
- Tātari whanonga: Aroturuki i ngā tono whatunga e haere atu ana, inā koa ki ngā rohe kāore i te mōhiotia.
- Te whakatinanatanga o ngā kaupapa here: Whakawhāitihia ngā monomai pūtirotiro kāore e tino hiahiatia me ngā tāutanga pūmanawa kore utu.
Grayware i roto i te Horopaki DevSecOps #
I ētahi wā ka whakakorehia e ngā taiao DevSecOps te pūmanawa hina, hei take kaiwhakamahi, kaua hei mōrearea wā-hanga, wā-haere rānei. He waimarie kei te huri taua tirohanga i te mea he maha ake ngā whakahaere e whakamahi ana i tēnei kaupapa. aunoa pipelines, ka taea e ngā pūmanawa hina kua whakauruhia ki roto i ngā whakawhirinakitanga, i ngā taputapu whakawhanake rānei te whakararu marie i te pono me te muna.
Te whakauru i te kimi pūmanawa hina ki roto CI/CD te matawai, te whakamana whakawhirinakitanga, me te aroturuki i te pito mutunga ka whakarite i te tiakitanga tonu. Ka whakakaha anō hoki i te mātāpono DevSecOps o te kawenga tiritahi, te wāhi e mahi tahi ai ngā kaiwhakawhanake, te haumarutanga, me ngā mahi whakahaere whakahaere i te whakawhirinaki ki ngā mekameka tuku pūmanawa.
He aha te mea nui o te mōhio ki te Grayware? #
Mā te mōhio ki te tikanga o te pūmanawa hina ka mārama ake ngā tīma haumarutanga ki te tautuhi i ngā tūponotanga kei waho o ngā kāwai pūmanawa kino tuku iho. Ehara i te mea ko te whakarōpūtanga anake te whakamārama i te tikanga o te pūmanawa hina; engari ko te mārama ki te whanonga, te whāinga, me te pānga. Kāore pea te pūmanawa hina e whakangaro i ngā pūnaha, engari ka ngoikore. Ka whiwhi moni mai i te whakawhirinaki, ka pau ngā rauemi, ā, ka whakaatu i ngā mōhiohio tairongo i raro i te āhua o te mana. Mā te whakauru i te tātari pūmanawa hina ki roto i ngā tukanga haumarutanga tonu, ka whakapakari ngā tīma DevSecOps i tō rātou manawanui me te pupuri i te pono puta noa i ngā pūnaha matihiko. Xygeni Ka āwhina i ngā whakahaere ki te kite me te ārai i ngā tūmomo riri pūmanawa hina i te wā wawe, me te tiaki i te pono o ngā mekameka tuku pūmanawa me ngā taiao DevSecOps.
