- Ukuqaliswa kwezingqimba zokuphepha ezithuthukisiwe kusetshenziswa izivikelo zomlilo, ama-VPN kanye nezinhlelo zokuthola ukungena ukuze kuvikelwe ingqalasizinda.
- Ukuthuthukiswa kwehadiwe kanye nokwenza i-virtualization ukuze kukhuliswe ukusebenza kwesistimu yokusebenza kanye nokukhula kwayo.
- Ukusungulwa kwezinqubo zokulungisa zokuvimbela kanye namasu okulondoloza idatha ngaphansi kwemodeli ye-3-2-1.
Ake ucabange okwesikhashana ukuthi othile ukwazile ukungena enhliziyweni yesistimu yakho yekhompyutha. Asikhulumi nje ngewebhusayithi eyeka ukulayisha imizuzu embalwa, kodwa ngesimo lapho ukwebiwa kwedatha eyimfihlo nokulahlekelwa yimali engenayo kungonakalisa idumela lanoma iyiphi inkampani. Esimweni sanamuhla, lapho ukuhlaselwa kwe-cyber kwanda khona kakhulu, ukuba nengqalasizinda evikelekile sekusuke ekubeni yinto yokunethezeka kwaba yisidingo esibalulekile sokusinda kwebhizinisi .
Iseva empeleni ingumshini onesibopho sokuphatha nokusabalalisa izinsizakalo kwamanye amadivayisi axhunyiwe. Ebhizinisini elincane noma eliphakathi nendawo (i-SMB), lokhu kusho ukufaka ulwazi endaweni eyodwa , ukwenza kube lula ukubambisana kweqembu kungakhathaliseki ukuthi likuphi futhi kuqinisekiswe ukuthi inkampani ingakhula ngaphandle kokuthi ubuchwepheshe bayo buphelelwe yisikhathi. Kodwa-ke, ukusetha le ndawo kudinga ukuhlela ngokucophelela, njengoba iphutha ekucushweni kokuqala lingashiya umnyango uvulekele abahlaseli abanonya.
Ukuhlela Ihadiwe Nemvelo Ebonakalayo
Ngaphambi kokuthinta isofthiwe, udinga ukukhetha ihadiwe efanele. Akukhona nje ukuthenga inketho ebiza kakhulu, kodwa mayelana nokulinganisela amandla okucubungula nesabelomali sakho . Kubalulekile ukuhlaziya i-CPU, i-RAM, kanye nesitoreji; isibonelo, ama-SSD amahle kakhulu ekuvinjeni kokufunda nokubhala, yize ebiza kakhulu kune-hard drive yendabuko. Udinga futhi ukucabangela isici sefomu leseva , unqume phakathi kombhoshongo wakudala noma uhlelo lwe-rack uma ukukhulisa kuyinto eza kuqala.
Indawo nayo idlala indima ebalulekile. Ungaba neseva emahhovisi akho ukuze ulawule ngokuphelele futhi wehlise ukubambezeleka , noma uthembele esikhungweni sedatha sochwepheshe esiqinisekisa ukuphindaphindeka kwamandla kanye nokuphepha okuqinile ngokomzimba. Kukhona ngisho nenketho yefu, efanelekile kulabo abadinga ukwandisa izinsiza ngokushesha ngaphandle kokutshala imali eningi kuhadiwe kusengaphambili.
Kumelwe sikhumbule ukuthi ihadiwe iyazwela emvelweni. Ukushisa okweqile kungathosa izingxenye, ngakho-ke uhlelo lokupholisa olusebenzayo lubalulekile. Ngokufanayo, i-UPS (Uninterruptible Power Supply) ibalulekile ukuvimbela ukucima kukagesi okungazelelwe ekonakaliseni izizindalwazi noma ekulimaleni uhlelo lwamafayela lweseva.
Ukucushwa kwesofthiwe nenethiwekhi
Uma ikhompyutha isihlanganisiwe, sekuyisikhathi sokukhetha uhlelo lokusebenza. Umncintiswano lapha uvame ukuba phakathi kweWindows Server, enembile kakhulu futhi ehambisanayo, kanye neLinux, ekhululekile , eguquguqukayo, futhi eqinile kakhulu , yize idinga ulwazi oluthe xaxa ngomugqa womyalo. Ngemva kokufakwa, isinyathelo esilandelayo ukulungiselela inethiwekhi: nika ikheli le-IP elingaguquki, bese usetha i-subnet mask kanye ne-gateway ukuqinisekisa ithrafikhi yenethiwekhi ebushelelezi.
Kubalulekile ukuphatha ama-akhawunti abasebenzisi ngokulandela iSimiso Selungelo Elincane . Lokhu kusho ukuthi akekho okufanele abe nezimvume ezingaphezu kwalokho okudingekayo ukuze enze umsebenzi wakhe. Akuwona umqondo omuhle ukuthi wonke umuntu abe ngumlawuli; kuphephile kakhulu ukudala amaqembu anokufinyelela okulinganiselwe ukuvimbela iphutha lomuntu ngengozi ekususeni ifolda yesistimu ebalulekile.
Ukuze sithuthukise izinsiza, i-virtualization iyithuluzi eliyisihluthulelo. Isisiza ukuthi sakhe imishini eminingi ebonakalayo ngaphakathi kweseva eyodwa ebonakalayo, okusiza ukuhlanganisa ingqalasizinda nokonga amandla . Ngaphezu kwalokho, uma umshini obonakalayo wehluleka, singawuthuthela kwenye i-node ngaphandle kokuphazamiseka kwesevisi, ngaleyo ndlela siqinisekise ukutholakala kwedatha okuphezulu.
Izinyathelo Zokuphepha Nokuvikela Isistimu
Ukuze kuvinjelwe abaduni ukuthi bangabi nosuku lokungena enkundleni, ukuqina kohlelo kuyadingeka . Lokhu kuhilela ukuvala wonke amachweba angasetshenziswanga nokukhubaza izinsizakalo ezingadingekile . Esikhundleni sokusebenzisa amaphasiwedi alula angaqagelwa ngomzuzwana, ikhambi elifanele ukusebenzisa okhiye be-SSH , abasebenzisa i-cryptography yokhiye womphakathi nowangasese ukuqinisekisa ukufinyelela ngokuphephile kakhulu.
I-firewall iwumugqa wokuqala wokuzivikela, ukuhlunga ukuthi ubani ongena nokuthi ubani ophumayo. Ukuze iqiniswe, izinhlelo zokuthola ukungena (i-IDS) kanye nezinhlelo zokuvimbela ukungena (i-IPS) zingasetshenziswa. Ngenkathi i-eyokuqala ikuxwayisa lapho othile ezama ukufinyelela, i-eyokugcina ivimba ngokuzenzakalelayo ikheli le-IP lomhlaseli . Ukugcwalisa lokhu ngomhlahlandlela ophelele we-VPN ovela kochwepheshe kuvumela abaphathi ukuthi baxhumane ngendlela ebethelwe, kuvimbele abantu besithathu ukuthi bangahlangani nokuxhumana.
Ezingeni lesicelo, ukufaka izitifiketi ze-SSL/TLS kuyimpoqo ukuqinisekisa ukuphequlula okuphephile kanye nokudluliswa kwedatha okubethelwe. Kunconywa futhi ukusebenzisa amathuluzi afana ne-Fail2Ban ku-Linux ukuvimba ukuhlaselwa kwe-brute-force noma i-ClamAV ukuthola i-malware kanye ne-rootkits ngaphambi kokuba kubangele umonakalo. Ukuphepha akuyona inqubo yesikhathi esisodwa, kodwa umjikelezo oqhubekayo wokuhlolwa kanye nokubuyekezwa okwenziwa njalo.
Ukugcinwa Kokuvimbela kanye Nokulondoloza Izipele
Iseva engabuyekezwanga iyiseva ehlulekayo. Ama-patch okuphepha alungisa ubuthakathaka obusetshenziswa abahlaseli nsuku zonke, ngakho-ke ukugcina uhlelo lokusebenza lusesikhathini kubalulekile. Ngaphezu kwalokho, ukuqapha izinsiza ngesikhathi sangempela kubalulekile ukuthola izithiyo ze-CPU noma ze-RAM ngaphambi kokuba iseva yehlise ijubane futhi ithinte umkhiqizo wabasebenzi .
Ama-backup abaluleke kakhulu. Isu elithembekile kakhulu yi-3-2-1: gcina amakhophi amathathu edatha yakho kumidiya emibili ehlukene yokugcina, okungenani ikhophi eyodwa itholakala ngaphandle kwendawo (isibonelo, efwini). Ngale ndlela, noma ngabe kube nomlilo ehhovisi noma ukuhlaselwa kwe-ransomware okubethela amadrayivu endawo, inkampani ingabuyisela ukusebenza kungakapheli imizuzu.
Okokugcina, kufanelekile ukubheka izitayela zamanje. Ubuhlakani bokwenziwa busetshenziswa kakade ekuphathweni kokuhluleka kokubikezela , ukuxwayisa abaphathi ngaphambi kokuba i-hard drive ihluleke. Ngokufanayo, i-edge computing kanye namafu e-hybrid kuvumela ukucutshungulwa kwedatha okusheshayo nokuyimfihlo, okuzivumelanisa nezidingo zemakethe ezishintshayo.
Ukugcina ingqalasizinda ye-IT eqinile kuhilela ukuhlanganisa izinketho zehadiwe ezihlakaniphile nesofthiwe esesikhathini kanye nenqubomgomo yokuphepha eqinile. Ukusebenzisa ama-firewall, ukuphatha izimvume zabasebenzisi ngokuqinile, kanye nokwenza ngokuzenzakalelayo ama-backup angaphandle kwesayithi kudala indawo ezinzile ekwazi ukumelana nezinsongo eziningi zedijithali nokuqinisekisa ukuthi ingqalasizinda ye-IT yenkampani ayiyeki ukusebenza.
