Ukugcina imodeli yokuqapha ithrafikhi yendabuko, esekelwe ekuhlaziyweni kwamaphakethe, ukutholwa kwezinkinga, kanye nokuhlolwa kwemingcele, kuwukuchitha isikhathi esiyigugu sethimba le-IT. Lokhu kungenxa yokuthi amasu athuthukile ayathuthukiswa ukuze kugwenywe ukutholakala yizinhlelo zakudala, kusetshenziswa ubuthakathaka obungabonakali kumathuluzi okuphepha ngokusekelwe kuphela kuthrafikhi yenethiwekhi.
Eqinisweni, ama-72% abaphendulile ocwaningweni lomhlaba wonke lwe-World Economic Forum 2025abike ukwanda kwezingozi ze-cyber zenhlangano, okubonisa indlela izinsongo eziguquka ngayo ukuze zigweme ukuzivikela okuvamile. Ngaphezu kwalokho, ukuhlaselwa okungenamafayela kunamathuba aphindwe kayishumi okuphumelela kunokuhlaselwa kwe-malware okuvamile okusekelwe kumafayela.
Izigebengu ze-inthanethi azisasebenzi ngokuzama namaphutha. Namuhla, zenza ngokunembile futhi azishiyi mkhondo. Zisebenzisa kakhulu ukuhlasela okungenamafayela, zisebenzisa amathuluzi esistimu asemthethweni njenge-PowerShell ne-WMI ukuze zenze imiyalo enonya ngaphandle kokuphakamisa izinsolo, futhi zihamba ngaphesheya kwenethiwekhi buthule, njengokungathi sezivele zisemvelweni.
Lolu hlobo lokuhlasela luklanyelwe ngamabomu ukuze lubonakale lusemthethweni; ithrafikhi ayivusi ukusola, amathuluzi awaziwa, futhi izehlakalo azilandeli amaphethini avamile okusongela. Kulesi simo, ngokusho kombiko we-World Economic Forum 2025, ama-66% ezinhlangano akholelwa ukuthi ubuhlakani bokwenziwa buzoba nomthelela omkhulu ekuphepheni kwe-cyber, kokubili kwezokuvikela kanye nokuhlasela, okubonisa ushintsho olubonakalayo.
Izixazululo zendabuko, njenge-firewalls, i-IDS, kanye nezinhlelo ezilula zokuhlanganisa, zehluleka ukunikeza isivikelo esidingekayo, ikakhulukazi njengoba izinhlangano ezingama-47% zikhomba intuthuko yokuphikisana eqhutshwa yi-AI ekhiqizayo njengento ebaluleke kakhulu. Ngaphezu kwalokho, izinhlangano ezinkulu ezingama-54% zikhomba ubuthakathaka beketanga lokuhlinzeka njengesithiyo esikhulu ekuqineni kwe-cyber, okwenza kube nzima nakakhulu inselelo.
Indima yokubonakala okubunjiwe
Ngenxa yalesi simo, ukubonakala okuhlanganisiwe kuvela njengesidingo esiyisisekelo sesu lokuphepha kwe-cyber eliphumelelayo. Kubhekisela ekhonweni lokubona, ngokuningiliziwe, ukuziphatha kwama-endpoints, abasebenzisi, izinqubo, ukugeleza kwangaphakathi, kanye nemisebenzi phakathi kwezinhlelo, ngendlela ehambisana nomongo futhi eqhubekayo.
Le ndlela idinga ukusetshenziswa kobuchwepheshe obuthuthukisiwe kakhulu, njenge-EDR (Endpoint Detection and Response), i-XDR (Extended Detection and Response), kanye ne-NDR (Network Detection and Response). Lawa mathuluzi aqoqa i-telemetry ezingqimbeni ezahlukahlukene, kusukela kunethiwekhi kuya ekugcineni, futhi asebenzise ukuhlaziywa kokuziphatha, ubuhlakani bokwenziwa, kanye nokuxhumana kwemicimbi ukuthola izinsongo ezingeke zibonwe ezindaweni eziqashwe kuphela yivolumu yethrafikhi.
Amasu asebenzisa ukungabonakali
Phakathi kwamaqhinga avame ukusetshenziswa ekuhlaselweni okuyimfihlo yile:
- Ukufakwa kwe-DNS tunneling, ukufakwa kwedatha emibuzweni ye-DNS ebonakala ijwayelekile;
- I-steganography yedijithali, ukufihla imiyalo enonya ngaphakathi kwamafayela esithombe, umsindo, noma ividiyo;
- Iziteshi zomyalo nokulawula ezibethelwe (C2) zinikeza ukuxhumana okuphephile phakathi kwe-malware nabalawuli bayo, okwenza kube nzima ukubamba
- Lezi zindlela azigcini nje ngokugwema izinhlelo zendabuko, kodwa futhi zisebenzisa amaphutha ekuxhumaneni phakathi kwezingqimba zokuphepha. Ithrafikhi ingase ibonakale ihlanzekile, kodwa umsebenzi wangempela ufihliwe ngemuva kokusebenza okusemthethweni noma amaphethini abethelwe.
Ukuqapha okuhlakaniphile nokunesimo
Ukuze kubhekanwe nalolu hlobo losongo, kubalulekile ukuthi ukuhlaziywa kudlulele ngale kwezinkomba zokuyekethisa (ama-IoC) bese kuqala ukucabangela izinkomba zokuziphatha (ama-IoB). Lokhu kusho ukuqapha hhayi kuphela "lokho" okufinyelelwe noma okudluliselwe, kodwa futhi "kanjani," "nini," "ngubani," kanye "nakusiphi isimo" isenzo esithile esenzeka.
Ngaphezu kwalokho, ukuhlanganiswa kwemithombo yedatha ehlukene, njengemibhalo yokuqinisekisa, ukwenziwa kwemiyalo, ukunyakaza okuseceleni, kanye nezingcingo ze-API, kuvumela ukutholakala kokuphambuka okucashile kanye nempendulo esheshayo nenembile kakhulu ezigamekweni.
Kusho ukuthini konke lokhu?
Ukwanda kobuchwepheshe bokuhlasela kwe-cyber kudinga ukuhlolwa kabusha okuphuthumayo kwemikhuba yokuzivikela yedijithali. Ukuqapha ithrafikhi kusadingeka, kodwa akusakwazi ukuba yinsika yokuvikela kuphela. Ukubonakala okuhlanganisiwe, ngokuhlaziywa okuqhubekayo, okuphathelene nomongo, kanye nokuhambisanayo, kuba yinto ebalulekile ukuthola nokunciphisa izinsongo ezingabonakali.
Ukutshala imali kubuchwepheshe obuthuthukisiwe bokuthola kanye namasu acabangela ukuziphatha kwangempela kwezinhlelo, namuhla, kuyindlela ewukuphela kwayo ephumelelayo yokubhekana nezitha ezaziyo ukufihla emehlweni.
