Papakupu Haumarutanga Xygeni
Papakupu Haumarutanga Whakawhanaketanga me te Tukunga Pūmanawa

He aha te Pāpāho

Te Tūhuratanga Taipitopito o te Pāpāho #

Ko tētahi o ngā rautaki tino pukumahi engari he tino mōrearea te patopatoKa whakamahia e tēnei tikanga ngā hapa ngāwari a te tangata—ina koa ko ngā ingoa rohe kua he te pato, ngā ingoa mōkihi rānei—hei whakahaere i ngā whakaeke kino. Ahakoa e aro ana ki ngā kaiwhakamahi takitahi, ki ngā mekameka tuku pūmanawa rānei, ka taea e te hapa pato te hua ake he raraunga kua pakaru, he mate kino, he urunga kore whakamanatanga rānei ki ngā pūnaha nui. He mea nui te mārama me te whakaiti i ēnei mōrearea hei pupuri i ngā parenga haumarutanga tukutuku pakari.

Nga wehewehe:

He aha te Typosquatting? #

Ko te Typosquatting he rautaki whakaeke ipurangi e rēhita ai ngā kaiwhakaeke i ngā ingoa rohe, i ngā ingoa mōkihi rānei e tino rite ana ki ngā ingoa tika, mā te whakamahi i ngā hapa tātuhi noa. Ka whakamahia tēnei rautaki hei tinihanga i ngā kaiwhakamahi kia toro atu ki ngā paetukutuku kino, kia tango i ngā pūmanawa kino, kia turuturu rānei i ngā mōhiohio tairongo.

Te Mahi a te Tātari Pāpāho: #

Ka pāngia e te patopato ngā hapa a te kaiwhakamahi, pērā i te pato "gooogle.com" kaua ki te "google.com." I roto i te whakawhanaketanga pūmanawa, ka whakamahia pea e ngā kaiwhakaeke ngā ingoa pēnei i te "expressjs" kaua ki te "express.js" hei tohatoha i ngā whare pukapuka kino. Tērā pea ka ngaro ēnei huringa iti, ka arahi ki ngā mōrearea haumarutanga nui, mai i te tahae raraunga ki ngā mate kino.

Ngā Tauira me ngā Whakamahinga mō te Tātari Kupu: #

Ka aro te typosquatting ki ngā kaiwhakamahi me ngā kaiwhakawhanake, i roto i ngā mekameka tuku pūmanawa. Hei tauira, ka taea e te kaiwhakawhanake te tango i tētahi mōkihi kino, kāore i te mōhio, nā te mea he iti noa ngā rerekētanga o te ingoa o tētahi whare pukapuka pono. E hono ana ēnei whakaeke ki ngā au o ngā mōkihi kino. Ka taea e koe te tūhura i a Xygeni Huarahi Anomaly he otinga e whakarato ana i te tiakitanga wā-tūturu mai i ngā mahi whakapae i roto i tō mekameka tuku pūmanawa mā te tautuhi me te whakaiti i aua tūponotanga i taua wā tonu.

Goggle.com: #

  • taipitopitoI te tau 2006, i rēhita a David Cenciotti i te kupu “Goggle.com,” ā, i whakamahia e ngā kaiwhakamahi te kupu “Google.com” hei hē i tā rātou pato. I whakaatuhia e te pae ngā pānuitanga, ā, i puta mai he moni whiwhi mai i tēnei hapa.
  • Nga whakautuI toro atu ngā kaiwhakamahi ki tētahi pae tinihanga i whakaatu i a rātou ki ngā pānuitanga me ngā mahi tinihanga pea. Ka whakaitihia e ēnei whakaeke te whakawhirinaki ki ngā waitohu tika, ka kitea te hiahia mō ngā otinga kimi matatau pērā i a Xygeni. Open Source Security (OSS), e matawai ana mō ngā ngoikoretanga i roto i ngā wāhanga pūtake tuwhera hei ārai i ngā mahi tinihanga ōrite.

Twitter.com: #

  • taipitopitoI te tau 2013, i tukuna e "twiter.com" (me te korenga o te 't') ngā kaiwhakamahi ki ngā tinihanga rangahau i hangaia hei tahae i ngā mōhiohio whaiaro.
  • Nga whakautuTe tahae i ngā mōhiohio whaiaro, te whakaaturanga rānei o ngā pūmanawa kino. Ngā taputapu pēnei i Ngā Mea Ngaro a Xygeni, te Haumarutanga āwhina ki te aukati i aua tūmomo tūmomo mōrearea mā te aukati i ngā turuturu ngaro i te wā e whakawhanake ana i ngā pūmanawa.

Micorosft.com: #

  • taipitopito: I rēhitahia e ngā kaipahua ipurangi a “Micorosft.com” (he hē te tuhi o te kupu Microsoft), me te tinihanga i ngā kaiwhakamahi kia whakauru ki roto i ā rātou login taipitopito tuakiri.
  • Nga whakautuNgā tohu tuakiri tahaetia e arahi ana ki te takahi raraunga me te urunga pūkete kore whakamanatanga. Me Xygeni's ASPM pūhara, ka taea e ngā tīma te kite me te whakaiti i aua tūponotanga puta noa i ngā putunga waehere me CI/CD pipelines​​.

Amazon.com: #

  • taipitopitoNā te rohe "amazoon.com" i ārahi ngā kaiwhakamahi ki ngā pae hītinihanga, ā, ka hua ake he mate kino, he tahaetia rānei login taipitopito.
  • Nga whakautuTe urunga kore whakamanatanga ki ngā pūkete whaiaro, ki ngā mate kino rānei. Xygeni's Software Supply Chain Security (SSCS) ngā haumarutanga o te papaaho CI/CD pipelines, e tiaki ana i a rātou mai i ngā mahi tāhae me ngā whakaeke pūmanawa kino.

Hei ārai i ngā whakaekenga rite, ko ngā taputapu a Xygeni—mai i OSS Tuhinga o mua Haumarutanga Ngā Mea Ngaro a ASPM—e whakarato ana i te tiakitanga whānui mō tō mekameka tuku pūmanawa. Mō ētahi atu mōhiohio, pukapuka te demo i tēnei rā, tirohia me pēhea e taea ai e Xygeni te tiaki i tō tukanga whanaketanga.

Ngā Huanga Whānui o te Tātari Pāpāho #

  1. Panui: Ka mamingatia ngā kaiwhakamahi kia tukuna ngā mōhiohio tairongo pēnei i te ingoa kaiwhakamahi, te kupuhipa me ngā taipitopito kāri nama.
  2. Haumaru: Mā te toro atu ki tētahi pae patopato ka pāngia pea koe e te pūmanawa kino, ka tahae raraunga, ka kino ngā kōnae, ka tango rānei i te mana whakahaere o te pūrere a te kaiwhakamahi.
  3. Ngarohanga Putea: Ka pāngia pea ngā kaiwhakamahi e ngā mate pūtea mai i ngā whakawhitiwhitinga kore whakamanatanga, i te tahae tuakiri rānei.
  4. Te Horoi o te Tiakitanga: Mā te tūtaki pinepine ki ngā pae patopato ka memeha te whakawhirinaki ki ngā paetukutuku tika me ngā ratonga ipurangi.

Me pēhea te ārai i te tuhipoka #

Ko te aukati i te hapa patopato me whai i ngā mahi matatau me te whakamahi i ngā taputapu haumarutanga matatau. Xygeni e tuku ana i ngā otinga whānui hei āwhina i ngā whakahaere kia ārai i ngā whakaekenga hapa tuhituhi, inā koa i roto i te whanaketanga pūmanawa me ngā mekameka tuku. Pēnei te mahi:

  1. Xygeni Open Source Security:
    Xygeni's Open Source Security Ka aroturuki tonu te tūāpapa i ngā whakawhirinakitanga pūtake tuwhera mō ngā mōkihi kino, tae atu ki ngā mea e ngana ana ki te hapa pato. Mā te tātari i ngā ingoa me ngā whanonga mōkihi, ka kitea, ka āraia hoki e Xygeni ngā mōkihi whakapae e whakamahi ana i ngā hapa pato noa (hei tauira, "expressjs" hei utu mō "express.js"). Mā tēnei ka whakarite kia kore he mōkihi kino e uru ki roto i tō taiao whanaketanga.
  2. CI/CD Whakauru ki te Pre-Commit Hooks:
    Te whakauru i a Xygeni ki roto i tō pūnaha CI/CD pipeline ka taea te matawai i te waehere me ngā whakawhirinakitanga i te wā tūturu i mua i te taenga ki te whakaputanga. Pre-commit hooks Ka taea te whakarite mā te whakamahi i ngā taputapu a Xygeni, me whakarite kia tautuhia, kia āraia hoki ngā mōkihi hapa pato i ngā wāhanga whakawhanake.
  3. Ngā Whakatūpato Aunoa mō ngā Mōkihi Whakahē:
    Ka whakaratohia e te tūāpapa a Xygeni matohi wa-tūturu mō ngā mahi rerekē katoa i kitea i roto i tō mekameka tuku, tae atu ki ngā whakaekenga e hangai ana ki te pato. Mēnā ka kitea he rohe, he mōkihi rānei e pato ana i te pato, ka whakamōhio tonu te pūnaha i tō rōpū mā te īmēra, ngā papaaho karere, te tukutuku rānei.hooks.
  4. Te Aroturukitanga Rohe me te Mōkihi:
    Ka taea e Xygeni te aroturuki i ngā hapa tāpae pea mā te tātari i ngā rerekētanga o ō rohe, o ō kete pūmanawa rānei. Mā tēnei āhuatanga matatau ka tohua wawetia ngā tūmomo riri pea, ā, ka taea e koe te mahi i mua i te pānga kino.
  5. Te Parenga i te Pōhēhētanga o te Whakawhirinakitanga:
    He hononga tata te patopato ki te pōhēhētanga o te whakawhirinakitanga, te wāhi e rēhita ai ngā kaiwhakaeke i ngā ingoa mōkihi tūmatanui e taupatupatu ana ki ngā ingoa tūmataiti. A Xygeni Open Source Security Ka ārai i tēnei mā te tautuhi i ngā rerekētanga i waenga i ngā mōkihi ā-roto me waho, me te aukati i ngā kaiwhakaari kino kei whakamahi i ēnei pakanga ingoa.
  6. Te Huringa Ora o te Whakawhanaketanga Pūmanawa Haumaru (SDLC):
    Xygeni
    e whakapūmau ana i tō SDLC Mā te whakauru i ngā matawai aunoa me ngā tirotiro ngoikoretanga puta noa i te tukanga. Mā te matawai i ia wāhanga o te whanaketanga pūmanawa mō ngā tūponotanga hapa pato, ka whakarato a Xygeni i te tiakitanga tonu mai i te tīmatanga ki te mutunga.

Ārai i te Tāruarua #

Kei te hiahia koe ki te tiaki i tō pūmanawa mai i ngā hapa pato me ētahi atu tūmomo mōrearea ipurangi? Whakaritehia he whakaaturanga ki a Xygeni i tēnei rā whiwhi ranei a tria kore utul kia wheakohia ai te āhua o te aroturukitanga wā-tūturu me te whakaiti i ngā tūmomo mōrearea ki te tiaki i tō taiao whanaketanga. Mō te māramatanga hohonu ake ki te hanganga o ngā mōkihi kino me ngā auahatanga hou o tēnei ao, pānuihia ā mātou rangitaki pou.

Xygeni's Open Source Security

Pātai Auau #

Me pēhea te kimi i ngā hapa pato?

Ka kitea ngā hapa hapa mā te aroturuki i ngā rēhitatanga rohe me ngā putunga pūmanawa mō ngā ingoa e tino rite ana ki tō waitohu, ki ngā ingoa hua rānei. Ngā taputapu aroturuki a Xygeni ka āwhina i te aunoa i tēnei tukanga mā te matawai tonu mō ngā rohe, mō ngā mōkihi rānei e whakapaetia ana.

He aha te rerekētanga i waenga i te cybersquatting me te typosquatting?

Ko te cybersquatting he rēhita i ngā ingoa rohe he rite, he rite rānei ki ngā waitohu rongonui, ki ngā tohu hokohoko rānei, he maha ngā wā me te whakaaro ki te whai hua mā te hoko anō i aua ingoa ki ngā rangatira tika. Heoi, ko te typosquatting he mea hāngai ki ngā kaiwhakamahi e mahi ana i ngā hapa tā i te wā e whakauru ana i te URL, e tango ana rānei i ngā pūmanawa, ka arahina atu rātou ki ngā pae kino, ki ngā mōkihi kua takahia rānei. Ka taea e ngā rautaki e rua te kino ki te ingoa me te haumarutanga o te waitohu, engari ko te typosquatting he mea hāngai ki te whakamahi i ngā hapa a te kaiwhakamahi.

He aha te rerekētanga i waenga i te typosquatting me te copycat packages?

Ka whakamahia e te typosquatting ngā hapa iti o te tuhituhi i roto i ngā ingoa o te paetukutuku, o ngā mōkihi rānei hei tinihanga i te tangata kia tango mai i ngā pūmanawa kino, kia toro atu rānei ki ngā pae morearea. I tētahi atu taha, ka tāruatia e ngā mōkihi tārua ngā āhuatanga, te āhua rānei o ngā pūmanawa tūturu hei tinihanga i ngā kaiwhakamahi kia tāuta i ngā putanga morearea. He nui ngā mōrearea o ēnei e rua ki ngā mekameka tuku pūmanawa. Ka taea e koe te pānui atu mō ngā rerekētanga i roto i tā mātou pou rangitaki: Typosquatting vs. Ngā Mōkihi Tārua: Te Mārama ki ngā Rerekētanga.

Tīmata Koreutu

Tīmata mō te kore utu.
Kāore he kāri nama e hiahiatia.

Tīmata mā te pāwhiri kotahi:

Ka tiakina haumarutia ēnei mōhiohio e ai ki te Ngā o te Ratonga a Kaupapahere tūmataiti

Whakaahuamata o te taupānga