Attack surface un tamam points ka majmua hota hai jahan koi ghair-manzoor shuda user system mein dakhil hone, wahan se data nikalne, ya nuqsan pohanchane ki koshish kar sakta hai.
Attack surface ko aksar is baat ka sarsari andaza lagane ke liye istemal kiya jata hai keh system kitna exposed hai. Choti attack surface hone ka matlab hai keh attacker ke paas system mein dakhil hone ke tareeqe kam hain, is liye isay kam karna secure design ka bunyadi usool hai. Lekin yeh baat yaad rakhna zaruri hai keh choti attack surface us nuqsan ko kam nahi karti jo attacker system mein dakhil hone ke baad kar sakta hai. Yeh sirf un tareeqon ki tadaad kam karti hai jin se woh system mein shamil ho sakta hai.
System mein shamil hone ka rasta dhoondhne ke liye, attacker ko aksar sirf ek kamzor point ki zarurat hoti hai. Ziada munazzam koshishon mein, woh pehle system ka jaiza le sakte hain, us ke devices aur connections ki list tayyar kar sakte hain, aur phir har node par kamzoriyon ko talash karne ke baad yeh faisla karte hain keh hamla kahan karna hai.
Ziada mehfooz systems banane ke liye ek aam sa tareeqa yeh hai keh attack surface ko kam kiya jaye. Is mein madad dene wale kuch bunyadi iqdamat mein darj zel shamil hain:
Code ko mukhtasir rakhna: aam tor par code ki kam lines hone ka matlab hai keh attack karne ke mumkina raste bhi kam ho jayein.
Entry points ko mehdood rakhna: system tak rasai ke kam tareeqe aam tor par ghair majaz users ke liye kam mawaqqe chorte hain.
Ghair zaruri features ko band karna: Bohat kam users ki janib se istemal ki jane wali services ko band kar dene se wo functions khatam ho jate hain jinhein attacker nishana bana sakte hain.
In tareeqon ko mila kar istemal kiya jaye to yeh system ko ziada simple rakhne aur aam tor par samjhote ke khilaf ziada muzahmat barqarar rakhne mein madad karte hain, lekin kisi bhi tareeqsy se khatre ko mukammal tor par khatam nahi kiya ja sakta.
Binance Academy Editorial