Duba cutar na'ura

Duba cutar na'ura a kowane shafi da muke karɓar bakunci

Kowane shafin da muke karɓar baƙuncinsa yana da kariya ta hanyar tarin tsaro na kasuwanci: duba ƙwayoyin cuta na malware, WAF mai faɗakarwa wanda ke toshe hare-hare kafin a fitar da facin gyara, tsarin kariya na network firewall, kariya daga hare-haren brute-force, da tace martabar IP. Binciken malware, WAF, da keɓancewa a matakin kwayar tsarin (kernel-level isolation) suna cikin kowane tsari — saboda shafin da ya kamu da cuta barazana ne ga maƙwabtansa, ba kawai ga mai shi ba. Idan wani abu ya sami nasarar wucewa, ana iya siyan tsaftacewa da dannawa ɗaya da kuma gyaran kutse da ma'aikata ke gudanarwa. Samuwa: takaita amfani da rumbun adana bayanai ga kowane shafi da ƙididdigar albarkatun kowane shafi suna kan ci gaba kuma ba a gama ba tukuna. Duk sauran abubuwan da aka bayyana a nan suna aiki a yau.

Fara kyauta Duba farashi

700,000+shafukan da aka karɓi bakuncinsu a duka duniya
Kowace ranabinciken manhaja mai cutarwa, a kowane tsari
An haɗabincike, WAF mai kariya da keɓancewa
Kwanaki 30adana bayanan ajiya na yau da kullum, dawo da bayanai da dannawa daya

Abin da ke aiki a kowane shafi, tun daga tura na farko

Kowane shafin da muke karɓar baƙuncinsa ana duba shi don gano manhaja mai cutarwa a kowace rana, kuma duk abin da aka samu ana cire shi kai tsaye — an haɗa shi a kan kowane tsari, ba tare da buƙatar saita komai ba. A kan rukunin na'urorinmu na kashin kanmu muna ƙara matsawa gaba: Imunify360 yana lura da fayiloli yayin da ake loda su kuma yana cire manhaja mai cutarwa da aka sani a take, don haka lodin da aka yi wa kutse yawanci yana fita kafin kowa ya ziyarci shafin. Shafukan da ke cikin rukunin da muke sake sayarwa ana duba su a kowace rana ta dandalin da suke aiki a kai. Ko ta yaya, abin da aka samu da abin da muka yi a kansa yana jiranku a cikin allon sarrafawarku, kuma kuna iya fara sabon bincike da kanku a kowane lokaci.

Duba cutar na'ura

Ana binciken fayiloli gabaɗaya ba tare da jiran aikin cron na dare ba, don haka ana gano duk wata barazana da zaran ta bayyana maimakon bayan awanni da dama. Binciken yana kunshe a cikin kowane tsari, a kowane rukunin samfurori.

WAF Mai Kariya ta Farko

Rundunar kariya mai aiki tun da wuri tana toshe sanannun dabarun kutse kafin ma a samu facin raunin da ke ciki — gibin da ke jefa shafukan da ke amfani da manhaja ko jigo marasa faci cikin matsala.

Kariyar hanyar sadarwa da kariya daga kutsen karfi da yaji

Wata kariya ta matakin hanyar sadarwa, kariyar harin ƙarfi a kan hanyoyin shiga, da kuma tace martabar IP suna tsaye a gaban rukunin yanar gizon, suna toshe kwararar cusa bayanan sirri da binciken kutse wanda sau da yawa ke gabatar da laƙwame WordPress.

Tsaftacewa da dannawa ɗaya

Idan an tabbatar da kamuwa da cuta, gyarawa aiki ne guda ɗaya maimakon binciken fayil-da-fayil da hannu. Ana sayar da sharewa a matsayin ƙarin sabis — kowane lokaci ko kuma a matsayin biyan kuɗi na yau da kullun — yayin da binciken da ke gano kamuwa da cutar a koyaushe yana ciki.

Gano shi yana da matakai daban-daban, saboda ƙwayar cutar kwamfuta da wuya take bayyana kanta

Na'urar daukar hoto ita kadai tana rasa kura-kuran da ke bayyana a cikin dabi'a kawai. Muna danganta siginoni masu zaman kansu da yawa don haka duk wanda ya fara aiki zai kama shafin da aka yi wa kutse.

Ana kama miyagun manhajoji da kayan kutsen phishing ta hanyar binciken malware, sannan a duba su da jerin toshewa na Google Safe Browsing, PhishTank da SURBL/APWG.
Ana lura da saƙonnin da ake aikawa don gano alamomin shafin da aka yi wa kutse: ƙaruwar yawan saƙonni kwatsam, yawan komowar saƙonni da ba su isa ba, shiga RBL da tarkon spam, da ƙorafe-ƙorafen martani, tare da sanya iyakokin adadin aikawa ga kowane shafi.
Alamar spam tare da alamar manhaja mai cutarwa ana ɗaukar su a matsayin tabbaci mai ƙarfi na kutse — wanda ta haka ne ake ɗaukar mataki a kan shafin da aka yi wa kutse a cikin mintuna kaɗan maimakon sai bayan an saka shi a jerin toshewa.
Masu hakar crypto da sauran amfani da albarkatu ba bisa ƙa'ida ba suna bayyana ta hanyar CloudLinux LVE, wanda ke rikodin kuskuren CPU da IO ga kowane shafi kuma yana takaita su kai tsaye.
Kowane bayanin tsaro — sakamakon binciken na'ura, matsalolin imel, kuskuren LVE, rahotannin cin zarafi da aka aiko zuwa akwatin cin zarafi namu — yana shiga cikin Sashen Kula da Cin Zarafi guda ɗaya, inda ake tattara su, cire masu maimaita kansu, da kuma ba su fifiko.

Kariya da farko, domin kamuwa da cuta ta kasance matsalar shafi ɗaya kawai

Gano matsala ba shi da muhimmanci sosai idan aka kwatanta da abin da ke faruwa a 'yan mintoci bayan hakan. Kowane shafi yana cikin keɓaɓɓiyar kariyarsa a matakin ƙwayar tsarin aiki (kernel), don haka ana killace kowane kutsawa yayin da ake magance shi.

Kariyar tsarin fayil na CageFS

Kowane mai amfani yana samun keɓantaccen duba na tsarin fayil kuma ba zai iya ganin sauran masu amfani, wasu shafuka, ko fayilolin tsari masu mahimmanci ba. CloudLinux ta bayyana wannan a matsayin killace ɓarnar tsaro — faɗin tasirin kutse yana kasancewa a cikin kejin maimakon ya bazu a duk faɗin sabar.

Iyakar albarkatun LVE

Ana kayyade CPU, RAM, IO, IOPS, hanyoyin gudanarwa da hanyoyin shiga ga kowane shafi. Mai hakar ma'adinai, ambaliyar wasiku ko shafin da aka kai wa hari ana takaita shi a cikin kejin kansa maimakon hana maƙwabtansa albarkatun.

Shaida da aka adana kafin sharewa

Keɓe fayiloli yana kulle fayiloli tare da dakatar da aiki yayin da yake adana rukunin yanar gizon yadda aka same shi, ta yadda binciken diddigi da kowace rigima da za ta biyo baya za su sami sahihan hujjojin da za a yi aiki da su.

Ajiyayyun bayanan da ba za a iya canzawa ba a matsayin madadin kariya

Ajiyar bayanai na kowane shafi ba sa canzawa, ana ajiye su a waje kuma an ware su daga rukunin sabar da ke aiki, tare da dawo da bayanan da aka gwada maimakon tsammani kawai. Tsare-tsaren Footprint-Free suna riƙe ajiyar bayanai na yau da kullun har na tsawon kwanaki 30 tare da dawo da bayanan ta hanyar danna sau ɗaya.

Abin da ke faruwa idan aka sanya wa shafi alama

Aiwatarwa tana tafiya ne a hankali, ana iya juyawa kuma ana bin diddigin dalili — tsari ne na na'ura da aka rubuta, ba wai kawai canjin kunna/kashewa na kai tsaye ba. Ana yin rikodin kowane sauyi tare da dalilinsa da hujjarsa, ana sanar da ku tare da yadda za a warware shi, kuma ana iya ɗaukaka ƙara.

An gano manhaja mai cutarwa → an takaita

Shafin yana nan a bayyane amma an tauye aikinsa — an kashe aika saƙonni, an kashe cron, an toshe POST — kuma ana ba da damar tsaftacewa. Za a cire matsayin takunkumi kai tsaye da zarar an gyara shafin.

Mai tsanani ko wanda ba a warware ba → an killace

Shafin zai fita daga aiki tare da kulle fayiloli ba tare da aiwatarwa ba, an keɓe shi don binciken ƙwaƙwaf. Ana cire keɓe bayan tsaftacewa da bita — babu sakin kansa tsaye a bincike na gaba.

An tabbatar da satar bayanai ta yanar gizo → an killace nan take

Tabbataccen zamba ta hanyar yanar gizo yana haifar da haɗarin shari'a ga kowa a kan dandalin, don haka yana tsallake tsarin mataki-mataki kuma ana keɓe shi nan take.

Spam mai fita → rage sauri, sannan a takaita

Ana fara rage saurin saƙonnin da ake aikawa, sannan a kashe su a ƙarƙashin matsayi mai iyaka, kuma ana ɗaukar matakin dakatarwa ne kawai idan aka ci gaba da aikawa. Shafin da aka dakatar yana nuna shafi na musamman mai ɗauke da tambarin kamfani da kuma dalilin dakatarwar maimakon ya nuna shafin da ya lalace.

Wanda aka haɗa, aka siyar da ƙari, kuma aka gyara

Muna sanya iyaka a inda amincin rundunar jiragen ya sanya ta. Duk abin da ke kare maƙwabtanku yana ciki; duk aikin da aka yi a shafinku musamman yana da farashi.

An haɗa a kowane tsari: binciken malware, WAF mai kariya ta gaba, da keɓewar LVE tare da CageFS.
Ana sayarwa a matsayin ƙari: tsaftacewa da gyara malware da dannawa ɗaya, ga kowane aukuwa ko a matsayin rajista.
Ana kuma sayar da su a matsayin ƙarin abubuwa: matakan kariya na ci gaba — ingantattun ƙa'idodin WAF, fifikon binciken na'ura, sarrafa bot da matakan DDoS, da ƙa'idodin tacewar hanyar sadarwa na musamman.
Gyaran kutse wani ƙarin sabis ne na kamfani, wanda ake siya daga allon sarrafawa tare da kula da rumbun adana bayanai da inganta gudu. Ma'aikata ne ke aiwatar da ƙarin ayyukan ko kuma ta atomatik; a kowace hanya za a caje ku, a yi aikin, sannan a sanar da ku idan an kammala.
Ana ba da share-sharen a bisa yanayi — a kan shafin da dandamali ya riga ya yi wa alama — don kada ku riƙa neman sabis ɗin da ya dace a lokacin da aka lalata shafi.

An gina shi don hanyoyin sadarwa, ba kawai don shafuka guda ɗaya ba

Yawancin abokan cinikinmu ba sa gudanar da rukunin yanar gizo guda ɗaya kawai. An tsara binciken da aiwatarwa don masu gudanarwa da ke lura da daruruwansu.

Domin binciken yana gudana ne a kowane ma'aikaci maimakon a cikin kowane shafi, ƙara shafuka ba ya ƙara na'urorin bincike da za a saita ko lasisi da za a saya. Hanyar sadarwa ta shafuka biyar da hanyar sadarwa ta dubu biyu suna samun binciken manhaja mai cutarwa iri ɗaya, WAF mai kariya iri ɗaya da kuma tsarin killacewa iri ɗaya.

Ana iya daidaita manufofin aiwatarwa ga kowane layin samfuri da kowane abin jawo aiki, saboda matsalar biyan kudi, alamar cin zarafi da umarnin cirewa na shari'a ba su dace da lokaci iri daya na daukar mataki ba. Ko wace hanya shafi ya bi, ana rubuta sauyin, ana bayyana dalili, kuma ana gaya muku yadda za ku warware shi.

Tsarukan Footprint-Free sun haɗa da SSL na kyauta, 4 GB na ma'ajiyar diski da 100 GB na bandwidth a kowane shafi tare da damar ƙarawa a kowane lokaci, ajiyar bayanan yau da kullum da ake riƙewa na tsawon kwanaki 30, sauya wurin aiki na kyauta da kuma garantin mayar da kuɗi na kwanaki 30 ba tare da gardama ba — tushen tsaro yana cikin wannan, ba wani ƙarin caji ba ne a kai.

Tambayoyin da aka Fi Yi

Shin an haɗa da binciken muggan manhajoji, ko kuwa zan biya ƙarin kuɗi don hakan?

Ana haɗa duba ƙwayoyin cuta (malware) a cikin kowane tsari, tare da WAF mai faɗakarwa da kuma keɓewar LVE/CageFS. Mun haɗa su ne saboda shafin da ya kamu da cutar yana barazana ga maƙwabtansa, martabar uwar garken (server) da kewayon IP ɗinmu — saboda haka ba za a iya barin kariya a matsayin zaɓi ba. Abin da ake saka wa farashi daban shi ne gyara: tsabtace cutar malware ta dannawa ɗaya, ga kowace matsala ko kuma a matsayin rajista, tare da manyan matakan da suka ci gaba kamar ingantattun ƙa'idodin WAF, duba mai fifiko, sarrafa bot da ƙa'idodin tacewar hanyar sadarwa (firewall) na musamman.

Idan an yi kutse a wani shafi da ke kan uwar garke ɗaya, nawa yana da aminci?

An keɓe shi ne maimakon a raba shi. Kowace shafi tana gudana ne a cikin kejin albarkatunta na CloudLinux LVE da kuma tsarin fayilolinta na CageFS na kanta, don haka mai amfani da aka yi wa kutse ba zai iya ganin fayilolinku, bayanan sirri na rumbun adana bayananku ko fayilolin tsari masu mahimmanci ba, kuma ba zai iya cinye albarkatun da shafinku ke buƙata ba. Baya ga wannan, ana cire ƙwayar cuta ko zamba da aka tabbatar daga yanar gizo kuma a keɓe su don bincike. Babu wani mai masaukin da zai iya yin alƙawarin cewa maƙwabcin masauki ba zai taɓa shafar komai ba, amma an kera tsarin keɓewar musamman domin kutse ya tsaya a jikin bangon kejin.

Me zai faru a daidai lokacin da aka yiwa rukunin yanar gizon ku alama a matsayin wanda ya kamu da cutar?

Tsohuwar manufar tana mayar da shafin zuwa takaitacce: yana ci gaba da kasancewa a bayyane, amma ana kashe saƙonnin waje, cron da buƙatun POST domin kada matsalar ta haifar da ƙarin lahani, kuma ana ba da shawarar sharewa. Ana sanar da ku tare da dalili da kuma shaidar, kuma halin yana ƙarewa da zarar an gyara shafin. Lokuta masu tsanani ko waɗanda ba a warware ba suna haɓaka zuwa keɓewa — a wajen layi, an kulle fayiloli, babu aiwatarwa — wanda ake juyawa bayan sharewa da bita maimakon ta atomatik yayin sake dubawa.

Za ku iya share mini shafin da aka riga aka yi wa kutse?

I. Tsabtace malware da dannawa ɗaya yana magance matsalar kai tsaye, kuma gyaran kutse da ma'aikata ke yi yana samuwa a matsayin Extra na asali da aka saya daga dashboard, wanda ake turawa zuwa sashen da ya dace tare da sabunta halin da ake ciki yayin da aikin ke ci gaba. Idan mayar da ainihin bayanan da suka tsafta shi ne mafi kyawun hanya, ajiyar bayanai (backups) na kowane rukunin yanar gizo ba sa canzawa, suna wajen uwar garken kuma an keɓe su daga sauran tsarin da ke aiki, tare da gwajin mayar da bayanan — tsare-tsaren Footprint-Free suna adana bayanan yau da kullun na tsawon kwanaki 30 tare da mayarwa da dannawa ɗaya.

Shin binciken zai rage saurin shafina?

Ana gudanar da binciken na'urar a matakin mai masauki maimakon a cikin buƙatun ku na PHP, kuma LVE ce ke sanya iyakokin albarkatu ga kowane shafi tare da takaita nauyin ma'ajiyar bayanai ta hanyar MySQL Governor, don haka aikin tsaro ba ya yin gasa da maziyartan ku don rabon albarkatun shafin. Ba ma buga alkaluman ma'auni na nauyin na'urar binciken, don haka ba za mu yi ikirarin wata lamba da ba za mu iya nuna muku ba.

Menene proactive WAF, kuma ta yaya ya bambanta da firewall na yau da kullum?

Wata katangar kariya (firewall) mai aiki da sa hannu tana mayar da martani ne ga hare-haren da ta riga ta gani. Proactive WAF ta Imunify360 tana toshe dabarun cin gajiyar matsala da aka sani kafin a fitar da gyara (patch) na asalin raunin da ke akwai, wanda hakan shi ne ke kare rukunin yanar gizon da ke aiki da manhaja mai aibi da ba a gyara ba. Tana aiki tare da katangar kariya ta hanyar sadarwa, kariyar harin ƙarfi (brute-force), da tace kimar IP, duk an haɗa su a kowane tsari.

Masu dangantaka

Kariya wadda take aiki kafin ku tura aiki

Duba manhaja mai cutarwa, proɓactive WAF da keɓancewa a matakin kernel na aiki daga daƙiƙar da rukunin yanar gizonku na farko ya tafi kai tsaye. Gwada bakuncin Footprint-Free a gwajin kwanaki 14 ba tare da katin banki ba don har zuwa rukunin yanar gizo 5 — babu bayanan biyan kuɗi, kuma tare da garantin dawo da kuɗi na kwanaki 30 ba tare da tambaya ba a bayan kowane tsari.

Fara kyauta