Ho itšetleha ka kotsi ho tsamaisa sengoloa sa sona sa ho kenya hang feela ha moqapi a kenya, nako e telele pele mang kapa mang a tseba hore ke kotsi. Li-skena tsa hau tsa khoutu li ne li shebile polokelo. Lisebelisoa tsa hau tsa ntlha ea ho qetela li bone ts'ebetso, eseng sephutheloana. Thebe e lutse holim'a ntlha ea ho qetela ea moqapi 'me e e thibela pele e e kenya tšebetsong.
Moemeli a le mong ea bobebe · Libaka tsa mosebetsi, li-server le li-CI tse tsamaisang · Leano le laoloa bohareng
Thibela ho itšetleha ka mekhoa e kotsi le lingoloa hore li se ke tsa sebetsa ka ho sireletsa libaka tsa ho qetela tsa moqapi moo litlhaselo li qalang teng.
Shield e thibela ho kenngwa ha diphuthelwana ka nako ya sebele mme e di hlahloba kgahlanong le bohlale ba malware ba Xygeni. Diphuthelwana tse kotsi di a thibelwa nakong ya ho kenngwa, ha di tshwailwe tlalehong hoseng ho hlahlamang. Ho tshwana le ho marangrang: dikgokelo ho meralo ya motheo e tsebahalang e kotsi di a kgaolwa pele ntho efe kapa efe e tloha mochining.
Hlalosa melao hang 'me Shield e e sebelise mochining o mong le o mong mokhatlong oa hau: lilemo tse fokolang tsa sephutheloana, manane a ho lumella le ho hana, lingoliso tse amohetsoeng, le libaka tsa sephethephethe tse tsoang.
Ha ntho ea bohlokoa e oela pheletsong, Shield e ka khaola likhokahano tsa marang-rang tsa mochini oo, ka bohona kapa ha ho hlokahala, kahoo ketsahalo e emisa ho laptop e le 'ngoe ho e-na le ho hasana mokhatlong.
Seboholi sa Runtime bakeng sa Ntlha ea ho Qetela ea Moqapi.
Ho kenya sephutheloana se seng le se seng hoa thibeloa le ho netefatsoa ka nako ea sebele. Temoso ea pele ea malware ea Xygeni e tšoara liphutheloana tse kotsi tseo lisebelisoa tse thehiloeng botumo li ntseng li li tšepa, ntle le ho emela CVE, keletso, kapa saeno e phatlalalitsoeng. Ho thibela ho etsahala pele sengoloa sa ho kenya se qala.
Litlhaselo tsa ketane ea phepelo tse tsamaeang ka potlako li fihla ka mefuta e mecha ea liphutheloana. Shield e u lumella ho thibela liphutheloana tse phatlalalitsoeng morao tjena ho feta moeli oa hau, ho beha molao oa lefats'e le ho o fetola ho latela tikoloho, le ho etsa qeto ea se etsahalang ha letsatsi la phatlalatso le sa khone ho fumanoa: ho lemosa le ho lumella, kapa ho thibela.
Etsa qeto ea seo bahlahisi ba hau ba ka se hulang le hore na ba tla se sebelisa hokae. Boloka manane a lumellang le ho hana a hlakileng, 'me u thibele ho kenya mananeo ho li-registry tseo mokhatlo oa hau o li amohetseng.
Mohlala o tšoanang o sebetsa le likhokahano. Shield e hlahloba sephethephethe se tsoang ho tloha pheletsong khahlanong le bohlale ba marang-rang ba morao-rao 'me e fokotsa likhokahano ho li-IP tse tsejoang tse kotsi le libaka tse nkiloeng ho tsoa lipontšong tsa tšokelo, kahoo se kentsoeng mochineng se ke ke sa fihla meralong ea motheo eo se hahiloeng ho e bitsa. Ho feta moo, u ka thibela sephethephethe ho ea libakeng tse kotsi haholo ka jeokrafi. Khokahano e 'ngoe le e 'ngoe e thibetsoeng e rekotoa le sebaka seo e lekileng ho fihla ho sona.
Arola mochini o senyehileng 'me u khaole sephethephethe sohle se tsoang ntle le kanale ea moemeli, e le hore u lule u laola ntlha ea qetello ha u ntse u e laola. Bulela mokhoa oa paranoid 'me karohano e kopuoa ka bohona hang ha temoso ea bohlokoa e fihla ntlheng efe kapa efe ea qetello.
Bona sebatli se seng le se seng sa mosebetsi, seva le CI se tsamaisang moemeli oa Shield, ka sistimi ea eona ea ts'ebetso, mofuta oa moemeli, boemo ba hona joale, hore na e bonwe neng la pele le la ho qetela, le setulo sa eona sa laesense. Hlopha ka lebitso la moamoheli, mofuta oa ntlha ea ho qetela kapa boemo.
Boloko bo bong le bo bong bo fetoha ketsahalo sethaleng, ka boima, setempe sa nako, pheletso eo e etsahetseng ho yona, hore na ho pepeseha ho nkile nako e kae, le hore na hantle-ntle ho thibetsoe eng: sephutheloana le mofuta, kapa moo ho yang teng. Hlopha ka boima, sehlopha, mofuta, sebaka sa mosebedisi kapa letsatsi, le ho romela kantle ho naha.
Ntlha e 'ngoe le e 'ngoe e sirelelitsoeng e na le lethathamo la eona la tlhahlobo le lethathamo la likarolo, kahoo u ka haha bocha se etsahetseng mochining o itseng ha motho e mong a botsa.
Moemeli a le mong o bobebe o koahelang libaka tsa mosebetsi, li-server le li-CI runners, o nang le litulo tse phaphametseng e le hore tšireletso e latele batho ba hau ho fapana le lisebelisoa tsa hau.
Fumana le ho lokisa likotsi tsa API khoutung pele li fihla tlhahisong.
Code and dependency scanning analyses the repository. Endpoint tooling watches processes and connections but has no application-security context to interpret a package or a registry. Between those two sits the moment a malicious dependency actually executes, on a developer’s machine. That is where Shield operates.
Reputation and signature-based approaches tell you about a malicious package once somebody else has already been hit by it. Shield blocks on behaviour and risk analysis, which is what makes it useful on the day an attack is new, and backs it with current network intelligence so anything that does land cannot phone home.
Blocks, isolations and geo events land in the same console as your code, dependency, pipeline and secret findings, with one audit trail. Not another agent with another dashboard le e 'ngoe login.
Endpoint detection watches processes, files and connections at the operating system level. It does not know what a package registry is, whether a dependency is malicious, or whether a version was published yesterday. Shield brings application-security context to the developer endpoint and enforces policy on the things AppSec cares about.
Shield is a lightweight agent that checks installs as they happen. Developers only notice it when something is blocked, and the block comes with the reason.
Malicious and unauthorized package installs, packages that are newer than your minimum-age threshold, installs from registries you have not approved, packages on your deny list, outbound connections to known-malicious IPs and domains, and traffic to geographies you have restricted.
You decide. The minimum-age policy lets you either warn and allow, or block, when the publication date is unknown.
Yes. The global minimum-age threshold can be overridden per ecosystem, and disabled for a specific ecosystem if you need to.
It blocks all outbound traffic from that machine except the Shield agent’s own channel, so the endpoint is contained but still manageable. You can trigger it on demand, or enable paranoid mode so isolation is requested automatically when a critical alert lands.
On developer workstations, on servers, and on CI runners. Licensing uses floating seats.
Yes. Every block is an event with full detail, and each endpoint keeps its own audit trail. Events can be filtered and exported.
ka Sethala sa Xygeni All-In-One AppSec
