ӹ豸չ', ), 99 => array ( 'zhid' => '76078', 'title' => '2020ھŽϺʳƷչ', ), ); $dateline=1582820475; ?> ȫƹذȫ(ȫ)2019Ȱȫ--˹ʵ-й˹-Powered by www.AiLab.cn
ڳ
չϢչȫ

ȫƹذȫ(ȫ)2019Ȱȫ
Դ   ڣ2020-01-21 15:22   444  ֵ༭QQҷϢ

ǰ

ƼĿǰѾΪ,˸Ľ׶,ƼϢѳΪ̬Ŀǰڶû ,ͳ+ڲ˽ƻ+ƻ+(ҵ)ֻƳȫӪȨͿȨת,γ˹Ƶı仯ȫιƵս

,繥򹥻б,Σ©(0day1dayNday),APT򹥻,ڿ(֡ڼⷢ)Ű,ܻܶڹʽȫ豸()¹ֶ,ԼԶв,ֶʵֵĴͳȫȻ޷ЧӦƻٵȫսȫвνЧȫΪЩҵûձעҪ,ڹڴģʵսƶ,ⲿֵȫԵΪС

ȫ,ȫ ƹȫ ȫ ķ,ԷĿǰ󲿷ҵûƷ̬ITǶ ƹȫ ༼:

ƹ:ƼؼĹڵ,˴ͳϵͳ˽Ƽڵ㡢DockerڵԼ΢ȡ

ƹȫ:ƹصȫ,ܹ©աв⡢ӦԼȫȷΪƹṩȫı

ڱȫ,ͨ ƹ2019ȫص ƹ2019ȫв ƹȫƷڴ͹еļֵ ƹδչ 4½ϸ

һƹȫ(ȫ)2019꼼ص

CWPP(ƹȫƽ̨)Gartner2017Ժ,ÿ궼вСı仯,2019,GartnerԹ(workload)µڹ,ݳȵIJͬΪServerless,ȫͼҲԭ11ɾ8,ҽײ άϰ ӹ̡© ,ͬʱɾ ۹ ,,ݵľ̬ܴ󲿷¶Ƴṩ, ̬laas Ҳɾˡֵע,ͼǿ˶вӦҪ,ҲǸ͹Server EDRҪԡ

ͨοGartner¸µCWPP(ƹȫƽ̨)еļҪ,ԼڶͿͻӦʵ,ܽ2019¼ص:

SERVER EDRļƷӦ

ڹеӦ

Agent΢뼼Ӧ

©ּȫù

ȫ

ƹȫ(ȫ)2019ȫв

ȫ©Ͳ޸

2019,ϵͳ⻯ƽ̨ȸƹصȫ©¶,Ӧӡ

ȫʵҶ2019깫ĸ©ݵʾ,2019ȫ깲ϵͳ©1086,⻯ƽ̨(VMWareXenVirtualBoxHyper-VQEMU)©166,( Docker)©13

ƹ¼Ӹ߲

ںڿַ,ƽǼɱ,ɹʸ,Լ۱ȽϸߵһַֹֻҪиûֵ⼴ɽƹʵʩ,һƳɹܻüȨ,ܸ繥ߵϲ

ڿȶȲ

ȫвڿڽȻֻԾĹĿ ݱ ص ,߼ֵĿﷸе,ԽԽĶ򹥻,رҵλڿ󲡶ƫ뽩ʬ,ڿ󲡶Яģ,ĿڸȾû,ܽ󻯡

WebshellвϾ

վWebshellļͷһ̸ˡ2019ȫ,DzWeb˷ִɨWebshellϴWebshellΪ,ڲҲɨWebshellľͳ,ȫȫ깲ɨWebshellļ2,275,350,ͨ(վȫ)صWebshellϴΪ24,424,837,WebshellɨΪ14,545,681Ρ

ؼĺ͸ֶβ

һ뵽Ŀ,һнкƶ,ȻٻȡݡĴʹ,ƶĻ,ƶĹ̬

ԽȨƷв෱

ԽȨƷҲǹ߽ƶйؼһ,µ绷,Ȩ⻯ݡȨ

ƹȫ(ȫ)ڴ͹еļֵ

ڽĺԿ,ƹȫƽ̨൱á

췽ӽ

⵽:ⲿӱ¶Ĺ淢ʵս

ڵ:ͻƵڲ,ƽƺΡи(:ҵ)Ѱмֵʲ,й

ڵ:ں͸׶Ρý׶ָǺ췽Ȩ޺,ԸûȨ޵άֺ͸"ɹ"ʱһʹ÷shellȷʽԼķַ

ӽ

췽ӽ,췽ʵ©ﵽȨ޻ȡĿġ⵽ڡڵڡڵԿڵƹȫش,ҪĸάȽƹȫ⡣:

:ľ䲡ȱݼ⡢˺ļΪ

:ϵͳ㡢㡢Ӧò㡢ݲȫ

Ӫ:©ʲùͨѶӻϹߺ˲

Ӧ:ȫԴΣ¼

ġƹȫ(ȫ

1ȫ

,ǵǰƼ֮һDockerǵѡ(2019гռȴ79%)DevOpsı,ܵҵƳ硣Ȼ, Dockerȫ дȫ,еҪܿص㼰ӦĹܿطнܡ

ȫ

ٷչ,ͳ ܹ ԳĽٲʱԵ, ΢ܹ Ϊһϵͳ˼·Ӧ˶,δ

ܹ΢ܹIJ±ʾ֪,ڽһЩʱŴ˹,һЩȫ

ΪЩȫ, ȫ ȫά ֡

΢ܹܹӦ˶WebӦԵȫҲ봫ͳӦͬ,Լ׷ȫȫάԼҷȫƷзµҪս

3ATT&CKServer EDRеӦ

ATT&CKģMITRE˾2013, 2015귢˵һܡĿ˽⹥ͻֹ,ȷ,ԼζӦ͹Ļָ

в

MITER ATT&CKǻʵ۲칥սͼ֪ʶ,ATT&CKܿӦEDRƷвʹ

Ʒ

ʹMITER ATT&CKնȫƷ,ȫƷвļԳΪһijĿǰIJݳѾֶ֧ATT&CKеIJTTPмͷ֡

ȫ̶,ATT&CKԿԴķʽ,乥߿,ATT&CK߼еӦ߽вԲȫƷļڼ׷,ԸATT&CK鱨鱨Թ֯ķȫƷļ2020ATT&CKΪȫר˽͵߷𹥻ıҪߡ

ȫĿɹעȫ ΢Źںţͨʷ²ء

վ

˹ʵ

ȴʣ

չ
Copyright © 2010-2020 AiLab Team. ˹ʵ Ȩ    | ϵ | | ˾̬ | | ˽ | | չ