4 – amaliy ish. Mavzu: Retina skanerlashning audit funksiyasidan foydalanish. Audit yorlig'idan foydalanish

Veb-serverni sozlash

Biz veb-muhit sifatida bir qator nginx va php5-fpm dan foydalanamiz. Qurilish uchun sizga php5-gd komponentasi kerak bo'ladi.
# apt-get install nginx-light php5-fpm libphp-adodb php5-gd php-armut
# armutni o'rnatish --alldeps Image_Canvas kanali: //pear.php.net/Image_Canvas-0.3.5
# armutni o'rnatish --alldeps Image_Graph kanali: //pear.php.net/Image_Graph-0.8.0
Php5-fpm sozlamalarida TIMEZONE-ni o'rnatamiz:
# nano /etc/php5/fpm/php.ini
Date.timezone \u003d Evropa / Moskva
va qatorni almashtiring:
Error_reporting \u003d E_ALL & ~ E_DEPRECATED & ~ E_STRICT
Error_reporting \u003d E_ALL & ~ E_NOTICE
Vhost-ni sozlaymiz:
# cd / etc / nginx / sites-yoqilgan
# mv standart horlama
# nano snort
Server (tinglash 8080; server_name snort; root / var / www / snort-base; index index.php; location @rewrite (rewrite ^ / (. *) $ /Index.php?_url\u003d/$1;) location ~ \\. php $ (fastcgi_pass unix: /var/run/php5-fpm.sock; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $ document_root $ fastcgi_script_name; include / etc / nginx / fastcgi_params;))

BASE yordamida hujumlarni vizualizatsiya qilish

Aniqlangan hujumlarni tasavvur qilish uchun BASE-ni (Basic Analysis and Security Engine) o'rnating:
# wget http://sourceforge.net/projects/secureideas/files/BASE/base-1.4.5/base-1.4.5.tar.gz -qO- | tar xvzpf - -C / var / www / && mv /var/www/base-1.4.5 / var / www / snort-base
# chmod -R 0770 / var / www / snort-base && chown -hR www-data: www-data / var / www / snort-base
Keling, veb-xizmatlarni qayta ishga tushiramiz:
# /etc/init.d/php5-fpm qayta yoqing
# /etc/init.d/nginx qayta yoqing
Keling, BASE-ga ulanamiz va dastlabki ishga tushirishni amalga oshiramiz:
Adodbga yo'l: / usr / share / php / adodb;
Snort ma'lumotlar bazasiga ulanish parametrlarini aniqlaylik;
BASE-da avtorizatsiya qilish uchun foydalanuvchini o'rnating;
BASE-ni sozlash jarayoni BASE AG jadvalini yaratish bilan tugaydi - "Create BASE AG" va "5-qadam" havolasi orqali.
Xo'rsinishni boshlaymiz:
# xizmat snorti boshlandi
Endi Snort tomonidan yozilgan hujumlar ma'lumotlar bazasida saqlanadi va BASE veb-interfeysi orqali mavjud bo'ladi.

Bu tizimning o'rnatilishini va dastlabki konfiguratsiyasini yakunlaydi.