Isingeniso: I-Kernel Isolation kanye Nobuqotho Benkumbulo ku I-Windows 10
Ku- izinhlelo zokusebenza Kubuchwepheshe besimanje, ukuphepha nokuvikelwa kwe-kernel kubalulekile ekuqinisekiseni indawo ethembekile yekhompyutha. Uma I-Windows 10, i-Microsoft isebenzise uchungechunge lwezinyathelo zokuhlukanisa i-kernel kanye nenkumbulo yobuqotho ukuze kuvikelwe i-kernel isistimu esebenzayo ngezinsongo ezingase zibe khona nokuhlasela okunonya.
I-Kernel isolation, eyaziwa nangokuthi i-KRAS, isibe esinye sezici zokuphepha eziyinhloko ku-Windows 10. Le nqubo inesibopho sokuhlukanisa ngokuphelele futhi ngempumelelo umnyombo wesistimu yokusebenza kuzo zonke ezinye izinqubo ezisebenzayo nezinhlelo zokusebenza. Lokhu kwahlukaniswa kuqinisekisa ukuthi noma yimaphi amaphutha noma ukuba sengozini kuhlelo lokusebenza akukwazi ukulimaza ubuqotho be-kernel kanye nokusebenza kwayo.
Ukwengeza, Windows 10 inesendlalelo esengeziwe sokuphepha esibizwa ngokuthi ubuqotho benkumbulo. Lesi sici sigxile ekuvikeleni idatha egcinwe kumemori yesistimu ngokumelene nanoma yimiphi imizamo yokuguqula engagunyaziwe. Kusetshenziswa isethi yamasu athuthukile nama-algorithms, ubuqotho benkumbulo buqinisekiswa njalo futhi buqashwe ukuze kuvinjelwe ukuhlasela okungase kusebenzise lobu bungozi.
Lezi zinyathelo zokuphepha zenziwa ngaphakathi Windows 10 azifuni nje kuphela ukuvikela ubumfihlo nobuqotho bedatha yomsebenzisi, kodwa futhi ziqinisekisa ukusebenza kahle kanye nolwazi lomsebenzisi olushelelayo. Kulesi sihloko, sizohlola ubuchwepheshe bokuhlukaniswa kwe-kernel kanye nobuqotho benkumbulo Windows 10 ngokuningiliziwe, sihlaziya ukuthi basebenza kanjani kanye nezinzuzo zabo mayelana nokuphepha nokuzinza kwesistimu yokusebenza.
1. Isingeniso sokuhlukaniswa kwe-kernel nobuqotho benkumbulo ku Windows 10
I-Kernel isolation kanye nobuqotho benkumbulo yizici ezibalulekile zokuvikela uhlelo lokusebenza, futhi kusetshenziswe izinyathelo ezihlukahlukene Windows 10 ukuthuthukisa lezi zici. Ngokuhlukaniswa kwe-kernel, inhloso ukuvikela inkumbulo nezisetshenziswa ezibalulekile zesistimu yokusebenza ekuhlaselweni nokuba sengozini. Ngakolunye uhlangothi, ubuqotho benkumbulo bubhekisela ekuqinisekiseni ukuthi ulwazi olugcinwe enkumbulweni alushintshwa yizinqubo ezinonya noma ezingagunyaziwe.
Ukuze kuzuzwe ukuhlukaniswa kwe-kernel okwanele ku-Windows 10, kusetshenziswa amasu nobuchwepheshe obuhlukahlukene, njenge-virtualization esekelwe ku-hardware (Hypervisor) kanye nokuvikelwa kwemodi ye-kernel (I-Kernel Mode Protection). Lezi zinyathelo zivumela i-kernel yesistimu yokusebenza ukuthi isebenze endaweni ehlukile, evikelekile, ivimbela ukufinyelela okungagunyaziwe futhi inciphise indawo yokuhlasela.
Mayelana nobuqotho benkumbulo, Windows 10 isebenzisa ubuchwepheshe be-Secure Boot, obuqinisekisa ubuqotho bezingxenye zesistimu yokusebenza phakathi nenqubo yokuqalisa. Ukwengeza, amasu okunciphisa ukuhlasela afana nokuvimbela ukukhishwa kwedatha (DEP) nokuvimbela ukukhishwa kwekheli (ASLR) asetshenziswa ukwenza kube nzima kakhulu ukuxhaphaza ubungozi benkumbulo. Lezi zinyathelo zisiza ukugcina ubuqotho besistimu yokusebenza futhi zivikeleke ezinsongweni zangaphandle.
2. Izindlela zokuvikela i-Kernel ku-Windows 10
Ukuqinisekisa ukuphepha kwe-kernel ku Windows 10, iMicrosoft isebenzise izindlela zokuvikela ezahlukahlukene. Lezi zindlela zenzelwe ukuvimbela kanye nokubona noma yimuphi umzamo wokufaka engozini i-kernel yesistimu yokusebenza.
Enye yezindlela ezibaluleke kakhulu zokuvikela iWindows Defender Exploit Guard. Leli thuluzi lihlinzeka ngesendlalelo esengeziwe sokuvikela ngokuthola nokuvimbela izinto ezingase zibe khona ezizama ukufaka engcupheni i-kernel. Ngaphezu kwalokho, kunconywa ukuthi uhlale unolwazi uhlelo lokusebenza futhi wenze kusebenze iWindows Defender ukuze ivikele ezinsongweni ezaziwayo.
Enye indlela yokuvikela engukhiye i-Hardware-based Virtual Memory Enablement (HVCI). I-HVCI isebenzisa izici zehadiwe ukuze ihlukanise futhi ivikele i-kernel yesistimu yokusebenza. Ukunika amandla i-HVCI kunciphisa kakhulu ithuba lokuthi umhlaseli afake engozini i-kernel.
3. Ukubaluleka kobuqotho benkumbulo ku-Windows 10 ukuphepha
Ubuqotho bememori yingxenye ebalulekile yokuqinisekisa ukuphepha ku-Windows 10. Lokhu kubhekisela eqinisweni kanye nokuvumelana kolwazi olugcinwe kumemori yesistimu yokusebenza. Uma ubuqotho benkumbulo bufakwa engozini, okungukuthi, lapho ulwazi lushintshiwe noma lonakalisiwe, iminyango ivulelwa ekuhlaselweni okungase kube sengozini kusistimu yokusebenza.
Ukubaluleka kokugcina ubuqotho benkumbulo kusekunqandeni ukusetshenziswa kwekhodi enonya nokuvikela idatha egcinwe kumemori. Ukufeza lokhu, kubalulekile ukwenza uchungechunge lwezinyathelo zokuvimbela nokulungisa. Enye yezindlela zokuqinisekisa ubuqotho bememori iwukuvuselela njalo Windows 10 kanye nokufaka amapheshana okuphepha.
Ukwengeza, kuyatuseka ukuthi usebenzise amathuluzi okuthola uhlelo olungayilungele ikhompuyutha kanye namathuluzi okususa ukuze uskene njalo futhi uhlanze uhlelo. Esinye isici esibalulekile ukuqaliswa kwezinqubomgomo zokuphepha ezikhawulela ukwenziwa kwesofthiwe engagunyaziwe futhi zivikele ukuqalisa kanye nezinqubo zokulayisha zesistimu yokusebenza. Ubuqotho benkumbulo buyinto ephakathi Windows 10 ukuphepha, nokugcinwa kwayo okufanele kubalulekile ukuze kuqinisekiswe indawo ephephile yokwenza ikhompuyutha. kuphephile futhi kuthembekile kubasebenzisi.
4. I-kernel isolation architecture in Windows 10
Kuyingxenye ebalulekile yesistimu yokusebenza ehlinzeka ngesendlalelo esengeziwe sokuvikela ukuze kuvikelwe ubuqotho nokuvikeleka kwesistimu. Lesi sakhiwo sisekelwe ekusetshenzisweni kwezindlela ezihlukahlukene zokuvikela, ezifana ne-virtualization esekelwe ku-hardware, ukuhlukaniswa kwezinqubo, kanye nokusetshenziswa kwezinqubomgomo zokuphepha ezingeni le-kernel.
Esinye sezici eziyinhloko ze-kernel isolation architecture i-virtualization-based virtualization ngokusebenzisa i-Hyper-V. Lobu buchwepheshe buvumela izingxenye zesistimu ezibucayi, njengezishayeli zedivayisi, ukuthi zisebenze zodwa endaweni ebonakalayo, zinikeze isendlalelo esengeziwe sokuvikela ekuhlaselweni okunonya. Ukwengeza, kungenzeka futhi ukusebenzisa i-Hyper-V ukuze udale imishini ebonakalayo ephelele yokuhlukanisa izinhlelo zokusebenza nezimo ezithile.
Enye indlela ebalulekile ukuhlukaniswa kwezinqubo, lapho izinhlelo zokusebenza nezinsizakalo ezihlukene zisebenza ezindaweni ezihlukene ezingeni lenqubo. Lokhu kusiza ukuvimbela ukusabalala kwezinsongo futhi kukhawulele umthelela wamaphutha okuvikela noma ubungozi kusistimu. Ukwengeza, i-kernel isolation architecture ivumela izinqubomgomo zokuphepha ukuthi zisetshenziswe ezingeni le-kernel, ukuqinisekisa ukuthi izingxenye ezithenjwayo kuphela ezinezimvume ezifanele ezingafinyelela izinsiza zesistimu ebalulekile.
Ngamafuphi, inhlanganisela yobuchwepheshe nezindlela zokuphepha ezihlinzeka ngokuvikeleka okuqinile kwesistimu yokusebenza. I-virtualization esekelwe ku-Hardware, ukuhlukaniswa kwezinqubo, kanye nezinqubomgomo zokuphepha zezinga le-kernel yizingxenye ezibalulekile ekuqiniseni ukuphepha kwesistimu nobuqotho. Ngokusebenzisa lezi zinyathelo, Windows 10 abasebenzisi bangajabulela indawo ephephile nethembekile ukwenza imisebenzi yabo yansuku zonke.
5. Ukuqaliswa nokusebenza kokuhlukaniswa kwe-kernel ku-Windows 10
I-Kernel isolation iwumsebenzi obalulekile ku Windows 10 uhlelo lokusebenza olunikeza isendlalelo esengeziwe sokuvikela ukugcina izinqubo ze-kernel nabashayeli bephephile. Ukusebenzisa lesi sici kubalulekile ukuze uvimbele ukuhlasela okunonya futhi unciphise izingozi zokuphepha. Kulesi sihloko, sizohlaziya inqubo ye-.
Ukuqala, kubalulekile ukuqaphela ukuthi ukusebenzisa i-kernel isolation ku Windows 10 kudinga amalungelo okuphatha. Ngaphambi kokuqhubeka, qiniseka ukuthi unezimvume ezidingekayo zokwenza izinguquko ohlelweni. Uma lokhu sekuqinisekisiwe, ungalandela lezi zinyathelo ukuze unike amandla ukuhlukaniswa kwe-kernel kusistimu yakho:
1. Ngena ngemvume ku-akhawunti yakho Uhlelo lweWindows 10 njengomlawuli.
2. Vula "Iphaneli Yokulawula" bese ukhetha "Izinhlelo".
3. Chofoza okuthi “Vula noma uvale izici ze-Windows” kwesokunxele sewindi.
4. Ohlwini lwezici, bheka okuthi “Kernel Isolation” bese uqoka ibhokisi elihambisanayo.
5. Chofoza "KULUNGILE" bese ulinda iWindows ukwenza izinguquko ezidingekayo. Ungase ucelwe ukuthi uqalise kabusha isistimu yakho ukuze izinguquko zisebenze.
Uma ukuhlukaniswa kwe-kernel sekunikwe amandla, uzobona ukuthi isistimu yakho manje inesendlalelo esengeziwe sokuvikela ezinsongweni ezingaba khona. I-Kernel isolation ihlinzeka ngomgoqo wokuvikela osiza ukuvikela ukuhlaselwa kwe-malware kanye nabashayeli abangavikelekile ekufakeni engozini ubuqotho besistimu. Kubalulekile ukuqaphela ukuthi ukuhlukaniswa kwe-kernel kungaba nomthelela ekusebenzeni kwesistimu ezimeni ezithile, ikakhulukazi uma usebenzisa abashayeli abadala noma izinhlelo zokusebenza ezingasekelwe. Ngakho-ke, kunconywa ukwenza ukuhlola okubanzi ngemva kokunika lesi sici amandla futhi uqinisekise ukuhambisana kwawo wonke abashayeli nezinhlelo zokusebenza ezibucayi ngaphambi kokusithumela endaweni yokukhiqiza.
Kafushane, ukusebenzisa i-kernel isolation ku Windows 10 kubalulekile ukuqinisa ukuphepha kwe uhlelo lwakho lokusebenza. Ngokulandela izinyathelo ezishiwo ngenhla, ungavumela lokhu kusebenza futhi uzuze ekuvikelekeni okukhulu ezinsongweni ezinonya. Hlala ukhumbula ukusebenzisa ukuqapha lapho wenza izinguquko ekucushweni kwesistimu futhi wenze ukuhlola okufanele ngaphambi kokuphakela lesi sici endaweni yokukhiqiza.
6. Amathuluzi okuphepha kanye nezici zokuqinisekisa ubuqotho bememori ngaphakathi Windows 10
Okunye okukhathazayo okubaluleke kakhulu ekuqinisekiseni ubuqotho benkumbulo ku Windows 10 ukuba namathuluzi afanele nezici zokuphepha. Ngenhlanhla, isistimu yokusebenza inikeza izinketho ezimbalwa ezisivumela ukuthi sivikele idatha yethu futhi sigweme ubungozi obungaba khona. Okulandelayo, sizokukhombisa amanye amathuluzi aphawuleka kakhulu:
- Isivikelo seWindows: Leli thuluzi le-antivirus elihlanganiswe kulo Windows 10 libalulekile ukuvikela inkumbulo yethu kuma-malware kanye nezinsongo zegciwane. Qiniseka ukuthi uyisebenzise futhi uyibuyekeza njalo ukuze ugcine ukuvikeleka okuphezulu.
- I-BitLocker: Uma ufuna ukuvikela idatha yakho egcinwe ku- i-hard drive ngokumelene nokufinyelela okungagunyaziwe, i-BitLocker iyindlela efanelekile. Lesi sici se Windows 10 sikuvumela ukuthi ubhale ngemfihlo inkumbulo futhi uyivikele ngephasiwedi, ngaleyo ndlela uvimbele ukwebiwa okungenzeka kolwazi olubucayi.
- I-Windows Firewall: I-Windows Firewall iyithuluzi elibalulekile lokulawula ithrafikhi yenethiwekhi nokuvimbela uhlelo olungayilungele ikhompuyutha ukuthi lungangeni ngoxhumo olungavikelekile. Qiniseka ukuthi uyinike amandla futhi uyilungiselele kahle ukuze uvimbele ukufinyelela okungagunyaziwe kumemori.
Elinye iphuzu elibalulekile okufanele ulikhumbule ukubuyekezwa njalo kwesistimu yokusebenza. I-Microsoft ihlale ikhipha izibuyekezo zokuphepha ezilungisa ubungozi obaziwayo. Gcina okwakho Windows 10 kusesikhathini samanje ukuze uqinisekise ukuthi ufake amapeshi okuvikela akamuva.
Ngamafuphi, ukuba namathuluzi okuvikela afanele nezici kubalulekile ukuze uqinisekise ubuqotho benkumbulo ku-Windows 10. I-Windows Defender, i-BitLocker, ne-Windows Firewall ngezinye zezinketho ezitholakalayo zokuvikela idatha yakho nokuvimbela izinsongo ezingaba khona. Ungakhohlwa ukugcina uhlelo lwakho lokusebenza ibuyekeziwe ukuze ivikelwe ezingozini zakamuva.
7. Izinzuzo kanye nezinzuzo zokuhlukaniswa kwe-kernel nobuqotho benkumbulo ngaphakathi Windows 10
Ukuhlukaniswa kwe-Kernel nobuqotho benkumbulo yizici zokuphepha ezibalulekile ngaphakathi Windows 10 enikeza izinzuzo nezinzuzo eziningi kubasebenzisi. Le misebenzi isebenza ndawonye ukuze ivikele isistimu yokusebenza kanye nedatha egcinwe kuyo, okuqinisekisa ukumelana okukhulu nokuhlaselwa nokuba sengozini.
Enye yezinzuzo eziyinhloko zokuhlukaniswa kwe-kernel yikhono layo lokukhawulela ukufinyelela kwenqubo ku-kernel yesistimu yokusebenza. Lokhu kusho ukuthi noma ngabe uhlelo lokusebenza olunonya noma inqubo ikwazi ukuzuza amalungelo okubulala, amandla alo okwenza izenzo ezilimazayo azoncishiswa kakhulu. Ukwengeza, ubuqotho benkumbulo buqinisekisa ukuthi idatha egcinwe ku-RAM ayilungiswa noma yonakaliswa izinhlelo ezingagunyaziwe, enikeza isendlalelo esengeziwe sokuvikela ekuhlaselweni kwenkumbulo.
Enye inzuzo eyinhloko yokuhlukaniswa kwe-kernel nobuqotho benkumbulo ukuthuthukisa ukuzinza nokusebenza kwesistimu yokusebenza. Ngokukhawulela ukufinyelela okuqondile ku-kernel nokuvikela ubuqotho bememori, unciphisa amathuba okuthi isiphazamisi kuhlelo lokusebenza sibangele ukuphahlazeka kwesistimu iyonke. Ukwengeza, lezi zici zingathola futhi zivikele ukuziphatha okunonya noma okungafunwa, okuholela ekuzizwiseni komsebenzisi okuphephile futhi okuthembekile.
8. Izinselelo kanye nemikhawulo ekusebenziseni i-kernel isolation kanye nobuqotho benkumbulo Windows 10
Ukusebenzisa i-kernel isolation kanye nobuqotho bememori ku Windows 10 iveza izinselelo ezimbalwa kanye nemikhawulo ebalulekile okufanele icatshangelwe. Enye yezinselelo ezinkulu ukuhambisana nezingxenyekazi zekhompuyutha ezindala kanye nabashayeli, njengoba lokhu kungase kungahambisani nezinyathelo ezintsha zokuphepha ezisetshenzisiwe. Lokhu kungase kubangele isidingo sokuthuthukisa noma ukufaka esikhundleni sezingxenyekazi zekhompuyutha ezishiwo noma umshayeli ukuze kuqinisekiswe ukuqaliswa ngempumelelo kokuhlukaniswa kwe-kernel nobuqotho benkumbulo.
Enye inselele enkulu ihlobene nokuhambisana kwezinhlelo zokusebenza zezinkampani zangaphandle kanye nesofthiwe. Uma usebenzisa lezi zinyathelo zokuphepha, ezinye izinhlelo zokusebenza zenkampani yangaphandle noma isofthiwe ingase ibe nezinkinga zokusebenzisana. Kubalulekile ukwenza ukuhlola okubanzi ukuhlonza noma yikuphi ukungqubuzana nokubheka amasu okusebenza noma izibuyekezo ezibhekana nalezi zinkinga.
Ukwengeza, kubalulekile ukuqaphela ukuthi ukusebenzisa i-kernel isolation kanye nobuqotho bememori kungaba nomthelela ekusebenzeni kwesistimu. Ukwengeza izendlalelo ezengeziwe zokuphepha kungase kubangele ukwehla ekusebenzeni kohlelo lonke. Kubalulekile ukuhlola umthelela ekusebenzeni futhi uthole ibhalansi phakathi kokuphepha kwesistimu nokusebenza kahle.
Kafushane, ukusebenzisa i-kernel isolation kanye nobuqotho bememori ku Windows 10 iveza izinselelo ezihlobene nehadiwe kanye nokuhambisana komshayeli, ukuhambisana kwesicelo somuntu wesithathu, kanye nomthelela ekusebenzeni kwesistimu. Kubalulekile ukubhekana nalezi zinselele ngokuhlolwa okubanzi, ukubuyekezwa kwesofthiwe, nokuhlola ukusebenza ngokucophelela ukuze kuqinisekiswe ukuqaliswa okuyimpumelelo.
9. Sebenzisa izimo nezimo zohlelo lwalezi zinyathelo zokuphepha Windows 10
Ku-Windows 10, kunezimo ezihlukahlukene zokusebenzisa kanye nezimo zohlelo zokuphepha ezingasiza ukuvikela idivayisi yakho kanye nedatha yakho yomuntu siqu. Ngezansi ezinye izibonelo zendlela yokusebenzisa lezi zinyathelo:
1. Ukuvikelwa kwamafayela namafolda abucayi: Windows 10 inesici esibizwa nge-BitLocker, esikuvumela ukuthi ubhale ngemfihlo amadrayivu okugcina afana nama-hard drive angaphakathi noma amadrayivu e-USB. Ngokuvula i-BitLocker, amafayela namafolda awafinyeleleki ngaphandle kokhiye wokubhala ohambisanayo. Ukuze unike lesi sici amandla, iya kokuthi Izilungiselelo > Uhlelo > Mayelana > Izilungiselelo ezihlobene nedivayisi > Ulwazi lwesistimu > Izilungiselelo zohlelo ezengeziwe > Ukuphathwa kwe-BitLocker.
2. Ukulawulwa kwe-akhawunti yomsebenzisi: Esinye isimo esibalulekile sokusetshenziswa ukuphatha ama-akhawunti omsebenzisi kudivayisi yakho. Windows 10 ikuvumela ukuthi unikeze amaleveli okufinyelela ahlukene kuma-akhawunti, angasiza ekuvimbeleni ukufinyelela okungagunyaziwe kwezinye izinhlelo zokusebenza noma izilungiselelo. Ukuze ushintshe izimvume ze-akhawunti yomsebenzisi, hamba kokuthi Izilungiselelo > Ama-akhawunti > Umndeni nabanye abasebenzisi. Lapho ungangeza, ususe futhi uphathe ama-akhawunti akhona.
3. Ukuvikelwa kuma-software anonya: Ukuze uvimbele isofthiwe eyingozi ukuthi ingafakwa futhi isebenze kudivayisi yakho, kutuswa ukuba usebenzise isisombululo esithembekile sokuvikela amagciwane. Windows 10 ihlanganisa i-Windows Defender, uhlelo lokuvikela olwakhelwe ngaphakathi olunikeza ukuvikeleka ngesikhathi sangempela ngokumelene namagciwane, uhlelo olungayilungele ikhompuyutha nezinye izinsongo. Ungakwazi ukwenza lesi sici sisebenze kokuthi Izilungiselelo > Ukubuyekeza & nokuvikeleka > Ukuphepha kwe-Windows > Ukuvikelwa kwegciwane nosongo.
Khumbula ukuthi lezi ezimbalwa nje zezinyathelo eziningi zokuphepha ezitholakala ku-Windows 10. Kubalulekile ukuhlola izidingo zakho ezithile futhi uhlole izinketho ezihlukene zokuphepha ukuze uqinisekise ukuvikeleka okuphelele kwedivayisi yakho nedatha.
10. Ukucatshangelwa kanye nemikhuba engcono kakhulu yokugcina ukuhlukaniswa kwe-kernel nobuqotho benkumbulo ku-Windows 10
Ukugcina ukuhlukaniswa kwe-kernel nobuqotho bememori ku Windows 10, kubalulekile ukulandela ukucatshangelwa okuningi nezindlela ezihamba phambili. Ngezansi amanye amathiphu abalulekile okufeza lo mgomo:
- Buyekeza uhlelo lwakho lokusebenza njalo: Ukugcina Windows 10 ukwaziswa kwamuva kubalulekile ukuze kuqinisekiswe ukuthi ubungozi obaziwayo obungase bube khona bulungiswa. Faka iziqephu zokuphepha zakamuva nezibuyekezo ezinikezwe yi-Microsoft.
- Sebenzisa ikhambi elithembekile le-antivirus: Isofthiwe ye-antivirus eyikhwalithi inganqanda futhi ibone izinhlobo ezahlukene zohlelo olungayilungele ikhompuyutha ezingase zithinte ubuqotho besistimu nenkumbulo. Qiniseka ukuthi ugcina i-antivirus yakho ivuselelwe futhi usebenzise izikena zesistimu ezijwayelekile ukuze ubone izinsongo ezingaba khona.
- Setha futhi usebenzise Ukulawulwa Kwe-Akhawunti Yomsebenzisi (UAC): I-UAC isiza ukuvikela izinguquko ezingagunyaziwe ohlelweni ngokubika izimvume eziphakeme. Lungisa izilungiselelo ze-UAC ngokusekelwe kokuncamelayo kwezokuphepha, futhi uqiniseke ukuthi uhlaziya noma yiziphi izicelo ngaphambi kokuvumela izinguquko zesistimu.
Ukwengeza, kubalulekile ukulandela imikhuba emihle elandelayo:
- Nciphisa ukusetshenziswa kwamalungelo okuphatha: Gwema ukusebenzisa i-akhawunti yomlawuli ngemisebenzi yansuku zonke futhi udale i-akhawunti yomsebenzisi ejwayelekile yomsebenzi wakho wansuku zonke. Ngale ndlela, unciphisa ingcuphe yokwenza izinguquko ezingafuneki noma ukusebenzisa izinhlelo zokusebenza ezinonya ngaphandle kwemvume yakho.
- Qalisa isofthiwe ethembekile kuphela: Faka kuphela izinhlelo zokusebenza ezisuka emithonjeni ethembekile futhi ugweme ukulanda isofthiwe kumasayithi angaqinisekisiwe. Funda izibuyekezo futhi uhlole isithunzi sesofthiwe ngaphambi kokuyifaka.
- Sebenzisa izinyathelo zokuphepha ezengeziwe: Cabangela ukusebenzisa izixazululo ezihambisanayo zokuphepha, njenge-firewall namathuluzi okuthola ukungena, ukuze uqinise ukuvikeleka kwesistimu yakho yokusebenza.
11. Ukuqhathaniswa kwezinye izixazululo zokuphepha ne-kernel ku-Windows 10
Emhlabeni wokuphepha kwekhompyutha, ukuvikelwa kwe-kernel kubaluleke kakhulu ukuze kuqinisekiswe ubuqotho nobumfihlo be-Windows 10 uhlelo lokusebenza Ngokuhamba kwesikhathi, izixazululo ezihlukahlukene ziye zathuthukiswa ngenhloso yokuqinisa lesi sigaba sokuphepha esibalulekile. Ngezansi, sizokwethula ukuqhathanisa kwezinye zalezi zixazululo, sigqamisa amandla nobuthakathaka bazo.
Esinye sezixazululo eziqashelwa kakhulu yi-Windows Defender Exploit Guard, ithuluzi elinikeza inhlobonhlobo yokuvikela ezingozini ezaziwayo nezingaziwa. Lesi sixazululo sivumela ukuxhashazwa ukuthi kuncishiswe ngesikhathi sokubulawa, kuvinjwe amasu anonya nokuziphatha. Kodwa-ke, ukugxila kwayo ikakhulukazi ekuhlaselweni kwezinga lomsebenzisi futhi ayinikezi ukuvikeleka okuphelele kwe-kernel.
Enye inketho okufanele icatshangelwe i-Windows Defender Application Guard, isisombululo esisebenzisa i-virtualization ukuhlukanisa izinhlelo zokusebenza ezisolisayo endaweni evikelekile. Le nqubo inikezela ngesendlalelo esengeziwe sokuvikela, esinciphisa ubungozi bokuhlasela okuthinta i-kernel. Kodwa-ke, kubalulekile ukuqaphela ukuthi lesi sixazululo singaba nomthelela omubi ekusebenzeni kwesistimu, ikakhulukazi kumakhompiyutha avinjelwe izinsiza.
12. Iqhaza lomphakathi othuthukayo ekuthuthukiseni ukuhlukaniswa kwe-kernel nobuqotho benkumbulo Windows 10
Ekuthuthukisweni kwe-Windows 10, umphakathi wokuthuthuka ubambe iqhaza elibalulekile ekuthuthukiseni ukuhlukaniswa kwe-kernel nobuqotho benkumbulo. Lezi zici zibalulekile ukuze kuqinisekiswe ukuvikeleka nokuzinza kwesistimu yokusebenza. Ngokuhlangenwe nakho kwabo nokusebenzisana, onjiniyela bakwazile ukusebenzisa izindlela ezisebenzayo zokuvikela ubungozi nokuvikela inkumbulo ye-kernel.
Ukuqhubekisela phambili ukuhlukaniswa kwe-kernel, umphakathi othuthukayo ugxile ekuthuthukiseni ukuvikelwa kwemodi ye-kernel ekuhlaselweni. Basebenzise amasu okunciphisa ubungozi afana ne-kernel address space randomization (KASLR) nokusebenzisa idatha kuphela ezindaweni zememori ezikhethiwe. Lezi zinyathelo zenza kube nzima kakhulu ukuxhaphaza ubungozi futhi kwandise ukumelana nokuhlaselwa kwezinsuku eziyiziro.
Ngokuphathelene nobuqotho benkumbulo, umphakathi wokuthuthukisa uthuthukise amathuluzi futhi wasebenzisa amasu okuvikela, njengokusayinda ikhodi nokuqinisekisa isiginesha ngesikhathi sokuqalisa isistimu. Lokhu kusiza ukuvimbela ukulayishwa kwezishayeli ezingasayiniwe noma ezishintshiwe, ezingafaka engozini ukuphepha kwesistimu. Ukwengeza, izinqubomgomo zokuziphatha zethulwe ukuze kuqashwe futhi kuphoqelelwe ubuqotho bedatha yenkumbulo, ukuthola ukukhohlisa okunonya noma imizamo yokujova.
13. Ukuthuthukiswa kwesikhathi esizayo kanye nezibuyekezo ezihlelelwe ukuhlukaniswa kwe-kernel nobuqotho benkumbulo ngaphakathi Windows 10
I-Kernel isolation kanye nobuqotho benkumbulo yizici ezibalulekile zokuqinisekisa ukuphepha nokuzinza kwe-Windows 10 isistimu yokusebenza ye-Microsoft imemezele uchungechunge lwezinguquko ezizayo nezibuyekezo ezizosetshenziswa ukuze kuqhutshekwe nokuqinisa lezi zici.
Enye yentuthuko ehleliwe ukwethulwa kwamasu amasha okuhlukanisa i-kernel, azohlinzeka ngokuvikeleka okukhulu ekukhuphukeni kokuhlaselwa kwelungelo futhi kunciphise ubungozi obungaba khona. Lezi zindlela zizofaka phakathi ukuhlukanisa i-kernel ibe izendlalelo eziningi kanye nokukhawulela amalungelo omshayeli we-kernel.
Esinye isibuyekezo esilindelekile ukuthuthukiswa kobuqotho benkumbulo. Amasu amasha okuqinisekisa idatha azosetshenziswa enkumbulweni, okuzovumela ukuguqulwa okungagunyaziwe ukuthi kutholwe futhi kuvinjwe. Ngaphezu kwalokho, uhlelo lokuvikela inkumbulo luzoqiniswa ngokumelene nokuhlaselwa okusekelwe ekukhohlakaleni kwedatha.
14. Iziphetho Zokugcina Ze-Kernel Isolation kanye Nobuqotho Benkumbulo ngaphakathi Windows 10
Kafushane, ukuhlukaniswa kwe-kernel kanye nobuqotho benkumbulo yizici ezimbili ezibalulekile zokuqinisekisa ukuvikeleka nokuzinza kwe-Windows 10. Phakathi nalokhu kuhlaziywa, ukubaluleka kokugcina lezi zinto ezimbili zivikelekile futhi zivuselelwe ukuze kuvinjelwe ubungozi nokuhlaselwa kwekhompyutha kuye kwaboniswa.
Kunezinyathelo ezimbalwa ezingathathwa ukuze kuthuthukiswe i-kernel isolation kanye nobuqotho bememori ku-Windows 10. Okokuqala, kunconywa ukugcina uhlelo lokusebenza kanye nabashayeli kusesikhathini. Lokhu kuhlanganisa ukufaka izibuyekezo zakamuva ze-Windows kanye nokuqinisekisa ukuthi izishayeli zezingxenyekazi zekhompuyutha zakho zibuyekezelwa ezinguqulweni zakamuva.
Ukwengeza, kubalulekile ukusebenzisa amathuluzi ezokuphepha engeziwe, njenge-antivirus kanye nezixazululo zokulwa ne-malware, ukuthola nokuqeda izinsongo ezingaba khona. Lawa mathuluzi angaskena isistimu ukuze athole uhlelo olungayilungele ikhompuyutha kanye nobunye ubungozi, futhi anikeze isendlalelo esengeziwe sokuvikela. Okokugcina, kunconywa ukuthi ulandele imikhuba emihle yokuvikela, njengokugwema ukulanda isofthiwe emithonjeni engathembekile, ukusebenzisa amagama ayimfihlo aqinile, futhi ungachofozi izixhumanisi ezisolisayo noma ukuvula okunamathiselwe kwe-imeyili okungaziwa.
Kafushane, i-Kernel isolation kanye nobuqotho benkumbulo ku Windows 10 idlala indima ebalulekile ekuvikeleni uhlelo lokusebenza ngokumelene nokuba sengozini nokuhlaselwa kwe-cyber. Ngokusebenzisa amasu athuthukile afana ne-virtualization esekelwe ku-hardware nokuvikela inkumbulo, i-Microsoft ikwazile ukuqinisa ukuphepha kwe-kernel nokuqinisekisa ubuqotho bedatha ohlelweni.
Ukuhlukaniswa kwe-Kernel, nemodi yayo yokusebenzisa evikelekile, kudala isendlalelo esengeziwe sokuvikela ngokuvikela i-kernel yesistimu emizamweni enonya yokufinyelela noma ukuguqula izinsiza ezikhethekile. Ngokufanayo, ubuqotho benkumbulo bugcina ubumfihlo nobumfihlo bedatha, kugwema izinguquko ezingagunyaziwe.
Lezi zici zifaka isandla ekudaleni indawo evikelekile nethembekile Windows 10 abasebenzisi, okwenza kube mancane amathuba okuthi baxhashazwe izigebengu ze-inthanethi. Ngokuqapha njalo nezibuyekezo zokuphepha, iMicrosoft ilwela ukugcina amandla nokwethembeka kwalezi zici ohlelweni lwayo lokusebenza, ngaleyo ndlela iqinisekise ukuvikelwa kwabasebenzisi nokuqhubeka nokusebenza kwayo.
Sengiphetha, ukuhlukaniswa kwe-Kernel nobuqotho benkumbulo ku Windows 10 yizingxenye ezibalulekile ekwakhiweni kwezokuphepha kohlelo lokusebenza, ezihlinzeka ngokuvikeleka okuqinile ezinsongweni ze-inthanethi nokuqinisekisa ukuzinza nokuthembeka kwayo. Njengoba ubungozi bezokuphepha buqhubeka nokuvela, iMicrosoft iyaqhubeka nokutshala imali kulobu buchwepheshe ukuze ihlale iphambili ekuvikeleni abasebenzisi bayo futhi. idatha yakho.
Ngingu-Sebastián Vidal, unjiniyela wekhompyutha ozifelayo ngobuchwepheshe kanye ne-DIY. Ngaphezu kwalokho, ngingumdali we tecnobits.com, lapho ngabelana khona ngezifundo zokwenza ubuchwepheshe bufinyeleleke kakhudlwana futhi buqonde wonke umuntu.