Isingeniso kuhlelo lokulinganisa amaphuzu olusebenzisa i-Exploit #
Uhlelo Lokulinganisa Ukubikezela Ukuxhashazwa (i-EPSS) luyimodeli eqhutshwa idatha ebikezela amathuba okuthi ubuthakathaka busetshenziswe ezinsukwini ezingu-30 ezizayo. Yasungulwa yi-FIRST.org, i-EPSS inika i-CVE ngayinye amaphuzu okungenzeka kusukela ku-0 kuya ku-1, okusiza amaqembu okuphepha ukuthi abeke phambili ngokusekelwe engcupheni yangempela, hhayi nje ubukhali bemfundiso. Ngokungafani ne-CVSS, elinganisa umthelela, amaphuzu e-EPSS agxila emathubeni, okwenza abe abalulekile ekuphathweni kobuthakathaka okuphumelelayo.
NgoMashi 2023, okwakamuva Inguqulo ye-EPSS (v3) kuqaliswe ukusebenza, okwandisa ukusebenza ngo-82% ekutholeni ubuthakathaka obungase busetshenziswe kabi. Ekugcineni, lokhu kuyenza ibe ithuluzi elibalulekile kunoma yiliphi isu lokuphepha.
Incazelo:
Kuyini i-EPSS? #
I-EPSS ibikezela amathuba okuthi abahlaseli bazosebenzisa ubuthakathaka phakathi nezinsuku ezingu-30 ezizayo. Amaphuzu abuyekezwa nsuku zonke, esiza izinhlangano ukuthi zigxile ebuthakathakeni obunengozi enkulu. Amaphuzu asukela ku-0 kuya ku-1—amaphuzu aphezulu abonisa amathuba amakhulu okuxhashazwa.
Iyini Isilinganiso Sokungakwazi Ukuzivikela se-EPSS Futhi Sibalwa Kanjani? #
Isikolo sobungozi se-EPSS sikutshela ukuthi abahlaseli bangase basebenzise kangakanani ubungozi ezinsukwini ezingu-30 ezizayo. Ngokungafani nezinhlelo zendabuko ezilinganisa ubucayi kuphela, siqokomisa ukuthi yiziphi izinkinga ezibeka engcupheni eshesha kakhulu, ukuze ithimba lakho likwazi ukulungisa okubaluleke kakhulu.
Lesi sibalo sisukela ku-0 kuya ku-1. Inani eliseduze no-1 lisho ukuthi abahlaseli banamathuba amaningi okusihlasela maduze. Isibonelo, iphutha elinomphumela ophansi we-CVSS kodwa elinomphumela ophezulu we-EPSS lingadinga ukunakwa okusheshayo ngoba abahlaseli sebevele bayalifuna.
Ngokusebenzisa i-EPSS, ithimba lakho lihlala ligxile ezinsongweni zangempela futhi lithuthukisa indlela ophatha ngayo ubuthakathaka kuyo yonke indawo yakho. pipeline.
The Isikolo se-EPSS idonsa idatha emithonjeni eminingi, okuhlanganisa:
- Isihlonzi se-CVE: Isihlonzi esiyingqayizivele esivela ku- Uhlu lwe-CVE lwe-MITRE enikeza imininingwane ebalulekile mayelana nobuthakathaka ngabunye.
- Isikolo se-EPSS: Isilinganiso samathuba esisukela ku- 0 ukuze 1, okubonisa amathuba okuxhashazwa.
- Isilinganiso sephesentiLokhu kubeka amaphuzu obuthakathaka ezingeni elifanele uma kuqhathaniswa namanye, okunikeza umongo wezinga lobungozi obuhlobene.
Ngaphandle kwezikolo zesikhathi sangempela, i-EPSS iphinde inikeze idatha yomlando, evumela amaqembu ukulandelela izitayela zengozi ngokuhamba kwesikhathi futhi alungise amasu awo ngokufanele. Njengoba ivuselelwa nsuku zonke, amaqembu okuphepha angahlala ethembele kudatha yakamuva kakhulu ukuze enze ulwazi olunolwazicisama-ion. Ngaphezu kwalokho, amaqembu angalanda idatha ngefomethi ye-CSV, okwenza kube lula ukuhlaziya ubuthakathaka nokubeka phambili imizamo yokulungisa.
Sekukonke, amaphuzu okuba sengozini kwe-EPSS anika amaqembu amandla okuhlala phambili kubahlaseli ngokugxila ekungabatheni okubangela ingozi enkulu ezimweni zangempela. Ngezibuyekezo zansuku zonke kanye nedatha ethembekile evela emithonjeni eminingi, inikeza indlela yokuphatha ukuba sengozini
Indlela Imodeli ye-EPSS Ebikezela Ngayo Ukuxhashazwa Kokusengozini #
Uhlelo Lokubikezela Ukuxhashazwa lubikezela amathuba okuxhashazwa kobuthakathaka ngenqubo enezinyathelo ezinhlanu:
- Data Collection: Ukuqoqa ulwazi emithonjeni efana I-NVD, I-Exploit-DB, Futhi CISA.
- Ubufakazi Bokuxhashazwa: Ukulandelela umsebenzi wokuxhashazwa wangempela.
- Ukuqeqeshwa Kwemodeli: Ukusebenzisa ukufunda komshini ukuqonda ubudlelwano phakathi kobuthakathaka kanye nokuxhashazwa.
- Ukuthuthukisa: Ukuhlaziya ngokuqhubekayo ukunemba kwemodeli.
- Ukuvuselelwa Kwansuku Zonke: Ukushicilela kubukeza amaphuzu obuthakathaka nsuku zonke, okunikeza amaqembu ulwazi ngesikhathi sangempela.
I-EPSS vs CVSS: Uyini Umehluko Futhi Kungani Kubalulekile #
Nakuba kungaba yiqiniso ukuthi i-CVSS igxile emthonjeni wemfundiso wobuthakathaka, i-Exploit Prediction Scoring System igcizelela amathuba okuxhashazwa ezweni langempela. Ngokuhlanganisa kokubili, amaqembu ezokuphepha angenza ubuhlakani obuhlakaniphile nobunolwazi ngezingozi.cisions.
- I-CVSS = kungaba kubi kangakanani
- EPSS = kungenzeka kangakanani ukuthi kwenzeke
Ngakolunye uhlangothi, i-CVSS ichaza umonakalo ongaba khona ongabangwa ubuthakathaka. Ngakolunye uhlangothi, i-Exploit Prediction Scoring System ikhomba ukuthi yibaphi abahlaseli bobuthakathaka abangase basebenzise kakhulu esikhathini esiseduze. Ngakho-ke, amaqembu okuphepha asebenzisa zombili izinhlelo ndawonye angenza ubuthakathaka bube ngcono kakhulu futhi alungise okubaluleke ngempela.
Ukuze uthole okwengeziwe mayelana nokuhlanganisa i-EPSS kanye ne-CVSS, Hlola Ibhulogi likaXygeni mayelana nokuthola amaphuzu e-CVE noma New Standard
Amathuluzi Okuphepha e-Xygeni OSS: Anikwe amandla yi-EPSS #
Kwa-Xygeni, sisebenzisa i-Exploit Prediction Scoring System ku- Open Source Security Amathuluzi ukusiza amaqembu agxile ebuthakathakeni abahlaseli abangase basebenzise kakhulu. Nansi indlela esisebenzisa ngayo i-EPSS ukwenza ukuphathwa kobuthakathaka kube ngcono:
- Ukulinganisa i-CVE kanye nokuhlanganiswa kwe-EPSS: Amathuluzi ethu e-OSS ahlanganisa i-Exploit Prediction Scoring System kanye ne-CVSS ukuze kubekwe ubungozi ngokususelwa ekusetshenzisweni kwabo. Isibonelo, sibeka phambili ubungozi obufana ne-CVE-2021-44228, obunamaphuzu aphezulu e-CVSS kanye namaphuzu aphezulu e-EPSS obungozi.
- Ukuhlaziywa Kokufinyelela Okuthuthukisiwe: Asigcini nje ngokubona ubuthakathaka. Sihlola ukuthi bungasetshenziswa yini ngaphakathi kwendawo yakho ethile, siqinisekisa ukuthi ithimba lakho ligxila ezinsongweni ezingase zithathwe izinyathelo futhi eziyingozi kakhulu.
- Izexwayiso Zesikhathi Sangempela Nokuqapha Okuqhubekayo: Amathuluzi ethu e-OSS ahlala eqapha ubuthakathaka obusha futhi ahlinzeka ngezexwayiso zesikhathi sangempela lapho kuvela ubuthakathaka obuyingozi kakhulu. Le ndlela yokubhekana nobunzima igcina ithimba lakho liphambi kwabahlaseli.
Vikela Isofthiwe Yakho: Zama Amathuluzi e-OSS e-Xygeni nge-Demo Yamahhala noma Isivivinyo Samahhala #
Ukulungele ukuthuthukisa ukuphathwa kwakho kobuthakathaka? Amathuluzi e-OSS e-Xygeni, asebenza nge-EPSS, akusiza ukuthi ugxile ezinsongweni ezibucayi kakhulu. Cela a demo or Zama namuhla ukuze sibone ukuthi singakusiza kanjani ukuthi uhlale uphambi kwabahlaseli
imibuzo ejwayelekile ukubuzwa #
Empeleni, amaphuzu e-EPSS alinganisa amathuba okuthi ubuthakathaka buzosetshenziswa zingakapheli izinsuku ezingu-30 ezizayo. Ngokuqondile, la maphuzu asukela ku-0 kuya ku-1. Ngenxa yalokho, amaphuzu aphezulu abonisa ithuba elikhulu lokuxhashazwa emhlabeni wangempela—okusho ukuthi amaqembu ezokuphepha angakwazi ukubeka phambili ukuthi yiziphi ubuthakathaka okufanele abhekane nazo kuqala ngokusekelwe engcupheni yangempela, hhayi nje ebunzimeni obungokwemfundiso.
I-EIt imele i-Exploit Prediction Scoring System. Empeleni, iyimodeli elinganisela amathuba okusetshenziswa kabi kobuthakathaka. Ngenxa yalokho, isiza izinhlangano ukuthi zibeke phambili izimpendulo zokuphepha ngokusekelwe engcupheni yangempela.
Ibuyekezwa nsuku zonke ukuze ibonise ubuhlakani bamuva bezingozi kanye nemisebenzi yokuxhaphaza. Ngenxa yalokho, amaqembu ezokuphepha ahlala ehambisana nezingozi ezishintshashintshayo—ikakhulukazi ezindaweni ezishintshashintshayo lapho isikhathi sibaluleke khona.
Ungafinyelela amaphuzu okubikezela i-exploit ngqo ngaphakathi kwe-Xygeni—asikho isidingo sokusebenzisa okuhlukile dashboards. Ipulatifomu yethu isebenzisa ngokuzenzakalelayo la maphuzu ukuze ibeke phambili ubuthakathaka ngokusekelwe engcupheni yangempela, ukuze ulungise lokho okungenzeka kakhulu ukuthi kusetshenziswe kabi kuqala.
The Ubuthakathaka be-EPSS Isilinganiso sibikezela ukuthi kungenzeka kangakanani ukusebenzisa ubuthakathaka endle. Ihlala isebenzisa idatha yosongo lwangempela, i-metadata ye-CVE, kanye ne-ML ukuze ilinganisele izingozi ezingaba khona. Isilinganiso esiphezulu sobuthakathaka be-EPSS sisho ithuba elikhulu lokuxhashazwa ezinsukwini ezingu-30 ezizayo.
