Siku Sifuri
Mandhari
Siku Sifuri (Zero-Day) ni udhaifu wa programu au mfumo wa kompyuta ambao haujulikani kwa watengenezaji wake na bado haujafanyiwa marekebisho. Mara nyingi hudhihirika kwa mara ya kwanza wakati mshambuliaji tayari ameutumia kufanya shambulio, jambo linaloongeza hatari kubwa katika usalama wa mtandao.[1]
Asili
[hariri | hariri chanzo]Neno Siku Sifuri linatokana na hali ambapo hakuna siku hata moja imepita tangu kugunduliwa kwa udhaifu hadi kutumika kwake, hivyo watumiaji na watengenezaji hawana muda wa kujiandaa.[2]
Matumizi
[hariri | hariri chanzo]Mashambulio ya siku sifuri hutumiwa na wavamizi wa mtandao, magaidi wa kidijitali, au hata mashirika ya kiserikali kwa ujasusi. Mashambulio haya yamehusishwa na mifumo muhimu kama gridi ya umeme, miundombinu ya serikali, na taasisi za kifedha.[3]
Marejeo
[hariri | hariri chanzo]- ↑ Anderson, R. Security Engineering: A Guide to Building Dependable Distributed Systems. Wiley, 2020
- ↑ Schneier, B. Secrets and Lies: Digital Security in a Networked World. Wiley, 2015
- ↑ Singer, P. W. & Friedman, A. Cybersecurity and Cyberwar: What Everyone Needs to Know. Oxford University Press, 2014