Dabarun ‘yan dandatsa (hackers) da hanyoyin dakile su (1)

Darasi Na (02): “Scanning Networks” Bayan darasi kan yadda ake tattaro bayanai kan kwamfuta ko kamfani ko wata na’urar da ake son isa gare ta.  A darasi na biyu mai take: “Scanning Networks,” ana karantar da dalibai ne yadda zasu yi amfani da bayanan da suka samo daga wancan bincike, wajen isa ga wata kwamfuta […]

Darasi Na (02): “Scanning Networks”

Bayan darasi kan yadda ake tattaro bayanai kan kwamfuta ko kamfani ko wata na’urar da ake son isa gare ta.  A darasi na biyu mai take: “Scanning Networks,” ana karantar da dalibai ne yadda zasu yi amfani da bayanan da suka samo daga wancan bincike, wajen isa ga wata kwamfuta ko na’ura ta musamman da suka samo adireshi ko sunanta.  Kafin nan, zai dace mai karatu ya fahimci cewa, duk wata kwamfuta da kake iya isa gareta a tsarin sadarwa na zamani, tana ajiye ne a wani zangon sadarwa na musamman, da ke wani wuri na musamman, a wata kasa ko jiha ko gari na musamman, cikin ginin wani kamfani ko ofishi ko gida ko daki na musamman.  Wannan zango shi ake kira: “Local Area Network” (LAN), wanda mun yi darasi kan shi a kasidarmu mai take: “Tsarin Sadarwa Tsakanin Kwamfutoci,” a shekarun baya.

Wannan zango mai suna LAN a gajarce, yana dauke ne da kwamfutoci da aka hada alaka a tsakaninsu.  Misali, hokumomin gwamnati da wasu kamfanoni masu zaman kansu suna da kwamfutoci da suke amfani dasu a ma’aikatansu.  Wadannan kwamfutoci an hada su da juna ne, ta yadda za ka iya isa wata kwamfutar daga kwamfutar da kake aiki a kai, muddin an ba ka iznin yin hakan.  Daga cikin wadannan kwamfutoci, duk kwamfutar da ke jone da Intanet, a matsayin Uwar Garke (Web Serber), idan aka gudanar da bincike mai kyau ana iya samun lambarta, wato: “IP Address”.  Idan an yi sa’a  ma har da sunanta (Host Name), da sunayen ma’aikatan da ke hukumar (Username), da lambobin wasu kwamfutocin da ke zangon baki daya.  Wanda shi ne tsarin da darasin baya ke karantarwa.  Da zarar ka iya samun wadannan bayanai, sai matakin tantance kwamfutocin ta hanyar bayanan da ka samu a matakin farko.  Wannan shi ake kira: “Scanning Networks.”

Manufa da Tsari

Babbar manufar wannan mataki shi ne: “Tantance kwamfutoci da na’urorin sadarwar da ke wani zango na sadarwa, don tabbatar da masu rai daga cikinsu, da abubuwan da suke dauke da su.”  A wannan mataki dai za a karantar da dalibi ne yadda zai kwankwasa kofar wani zangon sadarwa, don sanin wadanda ke cikin zangon, da bayanan da suke dauke da su, don sanin hanyar da zai bi don daukowa ko nadewa ko saukar da duk abin da yake bukata.  Hakan na yiwuwa ne ta hanyar shigar da lambar kwamfutar (IP Address, misali: 192.168.115.12) a kan wata manhaja ta musamman da aka tanada, don nemo bayanan da suka shafeta.  

Daga cikin bayanan kuwa akwai nau’in babbar manhaja (Operating System), da zubinta (bersion), da kafofin sadarwar da kwamfutar ke dauke da su, wato: “Ports” da manhajojin sadarwar da ke dauke a kowace kafar sadarwa.  Misali, a kafar sadarwa mai lamba ta: 25 ne ake samun manhajar sadarwar Imel, wato: “Simple Mail Transfer Protocol” (SMTP).  A kafar sadarwa mai lamba ta 80 kuma ake samun manhajar ka’idar sadarwa ta Intanet, wadda da ita ce kwamfuta ke iya sadar da keg a Intanet, wato: “Hypertedt Transfer Protocol” (HTTP).  

Bayan haka, ta wannan hanya ne za a sanar da dalibi yadda zai gane ko wadancan kafafe na sadarwa a kunne suke ko a kashe suke.  Sannan ta haka zai iya gane wasu manhajoji ne a kunne a kafar.  Wadannan kananan manhajoji su ake kira: “Serbices.”  Sannan idan kafafen a toshe suke, akwai yadda za ka iya gane dabarun da aka yi amfani dasu wajen toshe su.  Sannan idan zangon sadarwa na dauke da wasu manhajojin  tsaro da aka sa, irin su: “Intrusion Detection System” (IDS), ko “Intrusion Prebention Sysmte” (IPS), ko “Firewall” (Garkuwar wuta), duk za ka iya ganewa.  A karshe kuma a koya maka yadda za ka iya waske wadannan hanyoyin tsaro cikin sauki.

Nau’ukan Hanyoyin Tantancewa

Tsarin haka alaka tsakanin kwamfutoci ya kasu kashi biyu ne: akwai tsari na kai tsaye wanda ke amfani da lambar IP.  Wannan shi ake kira: “IP/TCP Connection.”  Wannan tsarin ya fi aminci, wajen tabbatar da samuwar alaka tsakanin kwamfutoci wajen aika sakonni a tsakaninsu.  Komai a bayyane yake.  Tsari na biyu shi ake kira: “UDP Connection.”  A wannan tsari, wanda yana amfani ne da tsarin wayar-iska (wato: “Connectionless system”), ba ka iya gane isar sakonni tsakanin kwamfutoci, sun isa ko basu isa ba?  A tsarin farko, idan ka aika sako zuwa ga wata kwamfuta, idan a kashe take, nan take za a dawo maka da sakonka, kai tsaye.  Amma a tsari na biyu, muddin sakon bai je ba, sai dai ka ji shiru.

karkashin wannan darasi za a koya maka yadda za iya nemo kwamfuta ta wadannan hanyoyi guda biyu.  Tsarin iya magana da kwamfuta dai shi ake kira: “Three way handshake.”  Tsarin nemo kwamfuta ta hanyar “IP/TCP Connection” ya kunshi hanyoyi masu yawa, saboda ingancinsa.  Duk za a karantar daku wadannan hanyoyi, wadanda suka hada da: “TCP Connect” ko “Full Open Scan”, da “Half-open Scan”, da “Inberse TCP Flag Scanning,” da ACK Flag Probe Scanning” da kuma “IDLE/IP ID Header Scanning.”  Shi tsarin “Inberse TCP Flag Scanning” ya kasu kashi uku.  Akwai “dmas Scan,” da “FIN Scan,” da kuma “NULL Scan.”  A nasa bangaren, tsarin “UDP Scanning” wanda nace ba shi da tabbas, tsari ne guda.  Kuma ana amfani da shi ne a wasu lokuta idan abubuwa suka rikice.  Wadannan duka hanyoyi ne da ake amfani da su wajen daburtar da kwamfuta yayin mika mata umarni, don ta maido irin jawaban da ake so ta maido, ko ba ta so. 

Manhajoji na Musamman

Gudanar da wannan aiki na yiwuwa ne ta hanyar manhajoji na musamman.  Akwai babbar manhajar kwamfuta ta musamman da aka gina ta dauke da galibin wadannan manhajoji.  Wannan babbar manhaja dai ta asalin Linud ce, ana kiranta: “Kali Linud.”  Tsohon sunan da ta shahara da shi a baya shi ne: “Backtrack.”  Wannan babbar manhajar kyauta ake samunta. Haka idan kana da babbar manhajar Linud nau’in “Ubuntu,” kana iya loda mata dukkan manhajojin dake dauke kan “Kali Linud” cikin sauki.  Idan kuma babbar manhajar “Windows” kake amfani da ita, akwai manhajoji daidaiku na musamman da za ka saukar don gudanar da wannan aiki cikin sauki.

Shahararriya cikin jerin wadannan manhajoji dai ita ce: “Nmap” (http://nmap.org), wanda babba kuma kwararre a fannin kwamfuta da sadarwa, Mista. Gordon Lyon ya gina a shekarar 1997, shekaru 20 ke nan da suka wuce.  Wannan manhaja ita ce uwa a fannin zakulo bayanai kan kowace irin kwamfuta ne da bayanan da take dauke da su a duniyar sadarwa.  Manhajar nau’i biyu ce: akwai wacce ake amfani da ita ta karkashin kasa (Command Line Interface bersion), da kuma wadda za ka iya amfani da kai tsaye (GUI bersion).  Manhajar “nmap” ba ta da na biyu a wannan fanni.

Wasu daga cikin manhajojin sun hada da: “SuperScan” (http://mcafee.com) na kamfanin McAfee da ke kasar Amurka.  Sauran sun hada da “PRTG Network Monitor” (http://paessler.com) mai taimaka maka gano bayanai kan wani zangon sadarwa na musamman da abubuwan da ke dauka cikinsa.  Da manhajar “Network Inbentory Edplorer” (http://10-strike.com), da “Global Network Inbentory Scanner” (http://magnetsoft.com), da manhajar “Net Tools” (http://mabsoft.com), da “IP Tools” (http://ks-soft.net), da “Adbanced Port Scanner” (http://radmin.com) da kuma “MegaPing” da ke shafin http://magnetsoft.com.  Wadannan duk kana iya saukar da su kan kwamfutarka kyauta, ko kayi amfani da wasunsu a kan shafinsu da ke Intanet, don gudanar da bincikenka.

Akwai kuma wasu manhajoji na musamman da aka gina don amfani da su kan wayar salula.  Daga cikinsu akwai: “IP Network Scanner” da “Fing” da “Umit Network Scanner” da kuma “PortDroid Network Analysis.”  

Wadannan kadan ne daga cikin jerin manhajojin da “Hackers” ke amfani da su wajen tattaro bayanai kan kwamfutocin da ke wani zangon sadarwa da sauran na’urorin sadarwa makamantansu, don sanin hanyar riskarsu kai tsaye, ba tare da wani bata lokaci ba.  karkashin wannan darasi na biyu duk za a karantar da dalibi dabarun da ake amfani da wadannan manhajoji, da kuma yadda zai kare kamfani ko kwamfutar da aka ba shi amanar karewa cikin sauki.

Hanyoyin Kariya

Duk da cewa duk kwamfutar din da ke jone da Intanet a ko ina take a duniya, ana iya riskar bayanan da suka shafeta ta wannan hanya, tare da kokarin kaiwa gareta cikin sauki, akwai hanyoyi da na musamman da ake iya ba ta kariya.  Za a koyar da dalibi yadda ake kimtsa kwamfuta ta yadda idan an kutso cikin zangon sadarwar da kwamfutar ke dauke, za a ba ta kariya.  Sannan da yadda ake tsara manhajar baiwa kwamfuta kariya, wato: “Intrusion Detection System” da “Intrusion Prebention System,” don tabbatar da cewa duk wata manhaja da za ta kutso cikin zangon sadarwar, an tsare.

A darasi na gaba cikin makon gobe in Allah Ya yarda, za mu kawo bayani kan darasi na uku, wato: “Enumeration,” darasin da ke dauke da bayanai kan dabarun da ake bi wajen isa ga hakikanin kafofin sadarwar dake kwamfuta.