{"id":6345,"date":"2022-11-08T17:23:41","date_gmt":"2022-11-08T10:23:41","guid":{"rendered":"https:\/\/cloud.z.com\/vn\/?p=6345"},"modified":"2022-12-27T15:42:57","modified_gmt":"2022-12-27T08:42:57","slug":"modsecurity","status":"publish","type":"post","link":"https:\/\/cloud.z.com\/vn\/news\/modsecurity\/","title":{"rendered":"Modsecurity l\u00e0 g\u00ec? Nh\u1eefng \u0111i\u1ec1u c\u1ea7n bi\u1ebft v\u1ec1 Modsecurity, Nginx Modsecurity"},"content":{"rendered":"

Modsecurity l\u00e0 g\u00ec? N\u1ebfu b\u1ea1n l\u00e0 m\u1ed9t nh\u00e0 x\u00e2y d\u1ef1ng v\u00e0 ph\u00e1t tri\u1ec3n website ch\u1eafc ch\u1eafn b\u1ea1n s\u1ebd quan t\u00e2m \u0111\u1ebfn nh\u1eefng v\u1ea5n \u0111\u1ec1 li\u00ean quan \u0111\u1ebfn b\u1ea3o m\u1eadt trang web. Modsecurity ch\u00ednh l\u00e0 m\u1ed9t c\u00f4ng c\u1ee5 h\u1ed7 tr\u1ee3 b\u1ea3o v\u1ec7 trang web \u0111\u01b0\u1ee3c nhi\u1ec1u ng\u01b0\u1eddi s\u1eed d\u1ee5ng hi\u1ec7n nay. C\u00f4ng c\u1ee5 n\u00e0y c\u00f3 nh\u1eefng \u0111\u1eb7c \u0111i\u1ec3m v\u00e0 t\u00ednh n\u0103ng nh\u01b0 th\u1ebf n\u00e0o. H\u00e3y c\u00f9ng Cloud.Z kh\u00e1m ph\u00e1 ngay t\u1ea1i b\u00e0i vi\u1ebft h\u00f4m nay nh\u00e9!<\/p>\n

\"Modsecurity<\/a><\/p>\n

1. Gi\u1edbi thi\u1ec7u v\u1ec1 ModSecurity<\/strong><\/h2>\n

1.1. ModSecurity l\u00e0 g\u00ec?<\/strong><\/h3>\n

ModSecurity c\u00f3 m\u1ed9t t\u00ean g\u1ecdi kh\u00e1c l\u00e0 Modsec, m\u1ed9t t\u01b0\u1eddng l\u1eeda \u1ee9ng d\u1ee5ng cho web m\u00e3 ngu\u1ed3n m\u1edf (WAF). Ban \u0111\u1ea7u ModSecurity \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf nh\u01b0 m\u1ed9t m\u00f4 \u0111un cho m\u00e1y ch\u1ee7 Apache HTTP. Sau n\u00e0y Mod Security \u0111\u01b0\u1ee3c ph\u00e1t tri\u1ec3n \u0111\u1ec3 cung c\u1ea5p t\u00ednh n\u0103ng l\u1ecdc ph\u1ea3n h\u1ed3i v\u00e0 y\u00eau c\u1ea7u giao th\u1ee9c truy\u1ec1n v\u0103n b\u1ea3n c\u00f9ng v\u1edbi nhi\u1ec1u t\u00ednh n\u0103ng b\u1ea3o m\u1eadt kh\u00e1c.<\/p>\n

Mod Security c\u00f3 th\u1ec3 ho\u1ea1t \u0111\u1ed9ng tr\u00ean nhi\u1ec1u n\u1ec1n t\u1ea3ng kh\u00e1c nhau nh\u01b0 M\u00e1y ch\u1ee7 Apache HTTP, Microsoft IIS v\u00e0 Nginx. Mod Security l\u00e0 m\u1ed9t ph\u1ea7n m\u1ec1m ho\u00e0n to\u00e0n mi\u1ec5n ph\u00ed v\u00e0 \u0111\u01b0\u1ee3c ph\u00e1t h\u00e0nh ra th\u1ecb tr\u01b0\u1eddng c\u0103n c\u1ee9 gi\u1ea5y ph\u00e9p Apache 2.0.<\/p>\n

1.2. B\u1ed9 quy t\u1eafc Mod security<\/strong><\/h3>\n

\u0110\u1ec3 Modsecurity ho\u1ea1t \u0111\u1ed9ng c\u1ea7n c\u00f3 m\u1ed9t b\u1ed9 quy t\u1eafc. B\u1ed9 quy t\u1eafc n\u00e0y \u0111\u01b0\u1ee3c ph\u00e1t tri\u1ec3n d\u1ef1a tr\u00ean s\u1ef1 h\u1ee3p t\u00e1c gi\u1eefa SpiderLabs v\u00e0 OWASP. Hai \u0111\u01a1n v\u1ecb \u0111\u00e3 c\u00f9ng nhau ph\u00e1t tri\u1ec3n b\u1ed9 quy t\u1eafc generic \u0111\u01b0\u1ee3c d\u00f9ng cho c\u00e1c ch\u1ee9c n\u0103ng c\u1ee7a Modsecurity.<\/p>\n

\u0110\u1ec3 c\u00f3 nh\u1eefng th\u00f4ng tin chi ti\u1ebft v\u1ec1 c\u00e1c b\u1ed9 quy t\u1eafc n\u00e0y b\u1ea1n c\u00f3 th\u1ec3 tham kh\u1ea3o th\u00eam c\u00e1c th\u00f4ng tin t\u1eeb owasp-modsecurity-crs. Ngo\u00e0i ra b\u1ea1n c\u0169ng c\u00f3 th\u1ec3 t\u1ef1 t\u1ea1o m\u1ed9t b\u1ed9 quy t\u1eafc, ho\u1eb7c mua b\u1ed9 quy t\u1eafc t\u00f9y ch\u1ec9nh theo nhu c\u1ea7u c\u1ee7a b\u1ea1n.<\/p>\n

\n

D\u1ecaCH V\u1ee4 CLOUD SERVER T\u1ed0C \u0110\u1ed8 X\u1eec L\u00dd V\u01af\u1ee2T TR\u1ed8I<\/cite><\/p>\n

\n

\"\"<\/a><\/p>\n<\/div>\n<\/div>\n

2. Nginx Modsecurity l\u00e0 g\u00ec?<\/strong><\/h2>\n

Nginx l\u00e0 m\u1ed9t m\u00e1y ch\u1ee7 website. Nginx c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng l\u00e0m m\u1ed9t Proxy ng\u01b0\u1ee3c, m\u1ed9t b\u1ed9 c\u00e2n b\u1eb1ng t\u1ea3i c\u0169ng nh\u01b0 b\u1ed9 \u0111\u1ec7m HTTP. Nginx l\u00e0 m\u1ed9t ph\u1ea7n m\u1ec1m m\u00e3 ngu\u1ed3n m\u1edf ho\u00e0n to\u00e0n mi\u1ec5n ph\u00ed \u0111\u01b0\u1ee3c ph\u00e1t h\u00e0nh b\u1edfi Igor Sysoev v\u00e0o n\u0103m 2004.<\/p>\n

Ph\u1ea7n m\u1ec1m n\u00e0y \u0111\u01b0\u1ee3c ph\u00e1t h\u00e0nh theo gi\u1ea5y ph\u00e9p BSD 2. Nginx cung c\u1ea5p ng\u00f4n ng\u1eef c\u1ea5u h\u00ecnh quy t\u1eafc l\u00e0 'SecRules' d\u00f9ng \u0111\u1ec3 theo d\u00f5i, ghi nh\u1eadt k\u00fd c\u0169ng nh\u01b0 l\u1ecdc c\u00e1c th\u00f4ng tin li\u00ean l\u1ea1c.<\/p>\n

\"Modsecurity<\/a><\/p>\n

Nginx Modsecurity hay Modsecurity Nginx ch\u00ednh l\u00e0 Mod Security \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t tr\u00ean n\u1ec1n t\u1ea3ng Nginx. Nginx Modsecurity cung c\u1ea5p c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o v\u1ec7 \u0111\u1ec3 ch\u1ed1ng l\u1ea1i c\u00e1c l\u1ed7 h\u1ed5ng chung b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng B\u1ed9 quy t\u1eafc OWASP ModSecurity (CRS).<\/p>\n

3. C\u1ea5u tr\u00fac v\u00e0 th\u00e0nh ph\u1ea7n c\u1ee7a Modsecurity core ruler<\/strong><\/h2>\n

3.1. Modsecurity core ruler l\u00e0 g\u00ec?<\/strong><\/h3>\n

Modsecurity l\u00e0 m\u1ed9t t\u01b0\u1eddng l\u1eeda \u1ee9ng d\u1ee5ng cho website v\u00ec v\u1eady b\u1ea3n th\u00e2n n\u00f3 kh\u00f4ng c\u00f3 nhi\u1ec1u kh\u1ea3 n\u0103ng ph\u00f2ng ch\u1ed1ng c\u00e1c t\u1ea5n c\u00f4ng m\u1eb7c \u0111\u1ecbnh. N\u00f3 c\u0169ng kh\u00f4ng c\u00f3 s\u1eb5n c\u00e1c rule \u0111\u01b0\u1ee3c c\u1ea5u h\u00ecnh c\u1ea9n th\u1eadn. \u0110\u1ec3 t\u1eadn d\u1ee5ng nh\u1eefng t\u00ednh n\u0103ng c\u1ee7a Mod security c\u00f3 s\u1eb5n, nh\u00e0 ph\u00e1t tri\u1ec3n l\u1eadp ra m\u1ed9t lu\u1eadt ch\u1eb7t ch\u1ebd, \u0111\u1ea7y \u0111\u1ee7 v\u00e0 ho\u00e0n to\u00e0n mi\u1ec5n ph\u00ed.<\/p>\n

\"Modsecurity<\/a><\/p>\n

Kh\u00e1c v\u1edbi c\u00e1c h\u1ec7 th\u1ed1ng d\u00f2 t\u00ecm, ph\u00e1t hi\u1ec7n m\u1ed1i nguy hi\u1ec3m x\u00e2m nh\u1eadp kh\u00e1c, c\u00e1c core rule n\u00e0y c\u00f3 t\u00ednh n\u0103ng cung c\u1ea5p s\u1ef1 b\u1ea3o v\u1ec7 t\u1eeb nh\u1eefng th\u00e0nh ph\u1ea7n ch\u01b0a \u0111\u01b0\u1ee3c bi\u1ebft \u0111\u1ebfn \u1edf c\u00e1c \u1ee9ng d\u1ee5ng web.<\/p>\n

Breach security khuy\u1ebfn c\u00e1o r\u1eb1ng v\u1edbi nh\u1eefng core rule \u0111\u00e3 \u0111\u01b0\u1ee3c x\u00e2y d\u1ef1ng s\u1eb5n n\u00e0y th\u00ec ch\u1ec9 s\u1eed d\u1ee5ng nh\u01b0 m\u1ed9t b\u1ea3n h\u01b0\u1edbng d\u1eabn \u0111\u1ec3 tri\u1ec3n khai cho h\u1ec7 th\u1ed1ng Mod Security.<\/p>\n

3.2. N\u1ed9i dung c\u1ee7a Modsecurity rule <\/strong><\/h3>\n

\u0110\u1ec3 cung c\u1ea5p s\u1ef1 b\u1ea3o v\u1ec7 cho website m\u1ed9t c\u00e1ch bao qu\u00e1t nh\u1ea5t, th\u00e0nh ph\u1ea7n c\u1ee7a core rule s\u1ebd g\u1ed3m c\u00f3:<\/p>\n

Th\u00e0nh ph\u1ea7n b\u1ea3o v\u1ec7 lu\u1ed3ng d\u1eef li\u1ec7u HTTP:<\/strong> \u0110\u00e2y l\u00e0 th\u00e0nh ph\u1ea7n c\u00f3 ch\u1ee9c n\u0103ng ph\u00e1t hi\u1ec7n c\u00e1c h\u00e0nh vi vi ph\u1ea1m c\u1ee7a giao th\u1ee9c HTTP v\u00e0 c\u00e1c ch\u00ednh s\u00e1ch s\u1eed d\u1ee5ng \u0111\u00e3 \u0111\u01b0\u1ee3c \u0111\u1ecbnh ngh\u0129a theo core rule.<\/p>\n

Ph\u00f2ng ch\u1ed1ng c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng ph\u1ed5 bi\u1ebfn v\u00e0o Web server: <\/strong>T\u00ednh n\u0103ng n\u00e0y gi\u00fap ph\u00e1t hi\u1ec7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e0o nh\u1eefng \u1ee9ng d\u1ee5ng b\u1ea3o m\u1eadt c\u1ee7a web server.<\/p>\n

M\u1ed9t s\u1ed1 t\u00ednh n\u0103ng kh\u00e1c:<\/strong> T\u1ef1 \u0111\u1ed9ng ph\u00e1t hi\u1ec7n Bots, c\u00e1c m\u00e1y d\u00f2 t\u00ecm v\u00e0 c\u00e1c m\u00e3 \u0111\u1ed9c h\u1ea1i. Ph\u00f2ng ch\u1ed1ng v\u00e0 ph\u00e1t hi\u1ec7n nh\u1eefng truy c\u1eadp c\u1ee7a Trojan horses. Ph\u00e1t hi\u1ec7n c\u00e1c l\u1ed7i t\u1ea5n c\u00f4ng v\u00e0 c\u00e1c th\u00f4ng b\u00e1o t\u1eeb Web server.<\/p>\n

3.3. C\u1ea5u tr\u00fac c\u1ee7a Core rule l\u00e0 g\u00ec?<\/strong><\/h3>\n

C\u1ea5u h\u00ecnh c\u1ee7a Rule modsecurity s\u1ebd g\u1ed3m c\u00f3 c\u00e1c th\u00f4ng tin kh\u00e1c nhau, c\u00e1c y\u00eau c\u1ea7u kh\u00e1c nhau v\u1ec1 n\u1ed9i dung. Sau \u0111\u00e2y l\u00e0 m\u1ed9t s\u1ed1 c\u1ea5u tr\u00fac c\u1ee7a Rule modsecurity:<\/p>\n

C\u1ea5u tr\u00fac bao g\u1ed3m c\u00e1c ch\u1ec9 th\u1ecb, c\u00e1c h\u00e0m chuy\u1ec3n \u0111\u1ed5i, c\u00e1c bi\u1ebfn v\u00e0 c\u00e1c signature, action t\u01b0\u01a1ng \u1ee9ng cho ph\u00e9p ho\u1eb7c kh\u00f4ng cho ph\u00e9p.<\/p>\n

\"Modsecurity<\/a><\/p>\n

Th\u00f4ng tin y\u00eau c\u1ea7u v\u1ec1 logic v\u1ec1 vi\u1ec7c ph\u00e1t hi\u1ec7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng.<\/p>\n

Th\u00f4ng tin thi\u1ebft l\u1eadp c\u00e1c ch\u00ednh s\u00e1ch \u0111\u01b0a ra m\u1ed9t h\u00e0nh \u0111\u1ed9ng x\u1eed l\u00fd c\u1ee5 th\u1ec3 n\u1ebfu ph\u00e1t hi\u1ec7n m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng.<\/p>\n

Modsecurity cho ph\u00e9p x\u1eed l\u00fd t\u1eebng th\u00e0nh ph\u1ea7n t\u1ea5n c\u00f4ng kh\u00e1c nhau. V\u1ec1 c\u01a1 b\u1ea3n th\u00ec Core rule \u0111\u01b0\u1ee3c x\u00e2y d\u1ef1ng d\u1ef1a tr\u00ean m\u1eabu c\u00f3 s\u1eb5n v\u00e0 c\u00f3 th\u1ec3 t\u1ef1 thay \u0111\u1ed5i th\u00eam ho\u1eb7c b\u1edbt c\u00e1c core rule.<\/p>\n

4. K\u1ebft lu\u1eadn <\/strong><\/h2>\n

Nh\u01b0 ch\u00fang t\u00f4i \u0111\u00e3 gi\u1edbi thi\u1ec7u \u1edf tr\u00ean, ModSecurity l\u00e0 m\u1ed9t \u1ee9ng d\u1ee5ng b\u1ed5 \u00edch c\u00f3 vai tr\u00f2 quan tr\u1ecdng trong vi\u1ec7c b\u1ea3o v\u1ec7 trang web c\u1ee7a b\u1ea1n kh\u1ecfi nh\u1eefng cu\u1ed9c t\u1ea5n c\u00f4ng nguy hi\u1ec3m.<\/p>\n

N\u1ebfu b\u1ea1n kh\u00f4ng c\u00e0i \u0111\u1eb7t ModSecurity b\u1ea1n kh\u00f3 c\u00f3 th\u1ec3 tr\u00e1nh kh\u1ecfi vi\u1ec7c g\u1eb7p ph\u1ea3i nh\u1eefng cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e0 h\u1eadu qu\u1ea3 \u0111\u00e1ng ti\u1ebfc. Tuy nhi\u00ean, \u0111\u1ec3 ph\u1ea7n m\u1ec1m n\u00e0y ho\u1ea1t \u0111\u1ed9ng hi\u1ec7u qu\u1ea3 nh\u1ea5t b\u1ea1n n\u00ean th\u01b0\u1eddng xuy\u00ean c\u1eadp nh\u1eadt \u0111\u1ec3 c\u00f3 b\u1ea3n v\u00e1 l\u1ed7i m\u1edbi nh\u1ea5t.<\/p>\n

Ngo\u00e0i ra, tr\u01b0\u1edbc khi \u0111\u01b0a ra m\u1ed9t quy\u1ebft \u0111\u1ecbnh \u0111\u1ea7u t\u01b0 cho m\u1ed9t b\u1ed9 quy t\u1eafc c\u1ee7a Mod Security b\u1ea1n c\u1ea7n tham kh\u1ea3o k\u1ef9 l\u01b0\u1ee1ng c\u00e1c th\u00f4ng tin t\u01b0 v\u1ea5n c\u1ee7a k\u1ef9 thu\u1eadt vi\u00ean v\u00e0 h\u1ecfi \u00fd ki\u1ebfn c\u1ee7a nh\u00e0 ph\u00e1t tri\u1ec3n web \u0111\u1ec3 c\u00f3 l\u1ef1a ch\u1ecdn t\u1ed1t nh\u1ea5t.<\/p>\n

Ngo\u00e0i ra, n\u1ebfu b\u1ea1n \u0111\u1ecdc c\u00f3 b\u1ea5t c\u1ee9 c\u00e2u h\u1ecfi th\u1eafc m\u1eafc n\u00e0o hay mu\u1ed1n tham kh\u1ea3o th\u00f4ng tin v\u1ec1 Mod Security h\u00e3y li\u00ean l\u1ea1c v\u1edbi Cloud.Z \u0111\u1ec3 \u0111\u01b0\u1ee3c t\u01b0 v\u1ea5n th\u00f4ng tin ch\u00ednh x\u00e1c. C\u1ea3m \u01a1n b\u1ea1n \u0111\u1ecdc \u0111\u00e3 quan t\u00e2m theo d\u00f5i!<\/p>\n

C\u00e1c t\u00ecm ki\u1ebfm li\u00ean quan \u0111\u1ebfn ch\u1ee7 \u0111\u1ec1 \u201cmodsecurity\u201d<\/h4>\n\n\n\n\n
\n
\n
\n
modsecurity-nginx<\/div>\n<\/div>\n<\/div>\n<\/td>\n
modsecurity\u00a0apache<\/td>\nmodsecurity\u00a0iis<\/td>\nmodsecurity\u00a0cpanel<\/td>\n<\/tr>\n
modsecurity\u00a0waf<\/td>\nmodsecurity\u00a0features<\/td>\nmodsecurity\u00a0configuration<\/td>\nmodsecurity\u00a0rules<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

B\u00e0i li\u00ean quan<\/strong><\/p>\n