Black hat

Black Hat Hacker (talaffuzi: Blek het haker) — oʻz foydasi uchun yoki yomon niyatda kompyuter xavfsizligi tizimini ishgʻol qiluvchi buzgʻunchi xaker^[1].

Kelib chiqishi

Bu atamaning kelib chiqishi koʻpincha xakerlik madaniyati nazariyotchisi Richard Stallmanga (garchi u yaratganini inkor etsa ham)^[2] taʼmirlashni talab qiluvchi kompyuter tizimlaridagi zaifliklarga eʼtibor qaratish orqali ekspluatatsiya qiluvchi xakerda himoya qiluvchi oq qalpoqli xakerlar bilan taqqoslashga bogʻliqdir^[3]. Qora/oq shlyapa terminologiyasi Amerika madaniyatiga oid gʻarb janrida paydo boʻlgan. Bunda qora va oq shlyapalar mos ravishda yomon va yaxshi qahramon kovboylarni anglatadi. Shuningdek, yaxshilik va yomonlikning qarama-qarshiligiga ham oʻxshashi tabiiy holatdir^[4].

"Black hat" xakerlar — koʻpincha ommaviy madaniyatda tasvirlangan stereotipik noqonuniy xakerlik guruhlari va „kompyuter jinoyatchisi“ terminida jamoatchilik qoʻrqadigan barcha narsalarning timsolidir^[5]. Black hat xakerlar baʼzi nozik maʼlumotlarni yoʻq qilish, oʻzgartirish yoki oʻgʻirlash, tizimlarni ruxsat etilgan tarmoq foydalanuvchilari uchun yaroqsiz qilish maqsadida tizimlarga buzib kirishadi^[6]^[7].

„White hat“ xakerlardan farqli oʻlaroq, qora shapkali xakerlar umumiy va standartlashtirilgan tizim yoki ichki tartibga ega emas^[8]^[9]. Biroq, tashkilotning baʼzi shakllari mavjud. Black hat qoʻngʻiroq markazlari va zararli dasturlar sotuvchilar shular jumlasidandir.

Tarixi

Agar yangiliklarni tomosha qilsangiz va texnologiyadan xabardor bo'lsangiz, siz xaker nima ekanligini bilasiz, lekin xakerlar Black hat, White hat va Grey hat deb nomlanuvchi turli toifalarga kirishini tushunmasligingiz mumkin. Bu atamalar 1950-yillarning g'arbiy qismida topilgan rang kodlash sxemasidan kelib chiqqan bo'lib, bu yerda yomon odamlar qora shlyapa kiygan va yaxshi odamlar oq yoki boshqa ochiq ranglarda bo'lgan.

Qora shlapalik xakerlar kompyuter tarmoqlariga yomon niyat bilan kiradigan jinoyatchilardir. Shuningdek, ular fayllarni yo'q qiladigan, kompyuterlarni garovda ushlab turadigan yoki parollar, kredit karta raqamlari va boshqa shaxsiy ma'lumotlarni o'g'irlaydigan zararli dasturlar ishlab chiqarishlari mumkin.

Buzg'unchilik hukumatlar uchun razvedka ma'lumotlarini yig'ishning asosiy vositasiga aylangan bo'lsa-da, qora qalpoqli xakerlar oson pul topish uchun yolg'iz yoki uyushgan jinoyatchilik tashkilotlari bilan ishlashlari odatiy holdir. 2017-yil may oyida chiqarilgan WannaCry to'lov dasturi bunga misoldir. Chiqarilgan dastlabki ikki hafta ichida u 150 ta mamlakatda 400 000 ga yaqin kompyuterni yuqtirgan. Yaxshiyamki, xavfsizlik bo'yicha mutaxassislar WannaCry dasturi paydo bo'lganidan keyin bir necha kun ichida shifrni ochish vositalarini chiqardilar va ularning tezkor javob berish vaqti tovlamachilik to'lovlarini taxminan 120 000 dollargacha cheklab qo'yadi. Bu mumkin bo'lgan yukning 1 foizidan bir oz ko'proq^[10].

Yana qarang

Manbalar

↑ Silic, Mario; Lowry, Paul Benjamin (2019-09-04). „Breaking Bad in Cyberspace: Understanding why and how Black Hat Hackers Manage their Nerves to Commit their Virtual Crimes“. Information Systems Frontiers. 23-jild, № 2. 329–341-bet. doi:10.1007/s10796-019-09949-3. ISSN 1387-3326.
↑ Laskow. „The Counterintuitive History of Black Hats, White Hats, And Villains“. Atlas Obscura (2017-yil 27-yanvar). — „In early hacking circles, there was a whole separate term to refer to malicious hacking: those people were called crackers. Across the internet, Richard Stallman, who founded the GNU Project and Free Software Foundation, is often credited with coining the term 'black hat' hacker, but he says that’s not correct. 'I have never used the terms 'X-hat hacker' because I reject the use of 'hacking' to refer to breaking security,' he says. Where did the term come from then? 'I don't know where,' he says.“. 2018-yil 29-iyunda asl nusxadan arxivlangan. Qaraldi: 2018-yil 29-iyun.
↑ O'Brien, Marakas, James, George. Management Information Systems. New York, NY: McGraw-Hill/ Irwin, 2011 — 536–537-bet. ISBN 978-0-07-752217-9.
↑ Wilhelm, Thomas. Ninja Hacking: Unconventional Penetration Testing Tactics and Techniques. Elsevier, 2010 — 26–7-bet. ISBN 9781597495899.
↑ Moore, Robert. Cybercrime: Investigating High-Technology Computer Crime, 1st, Cincinnati, Ohio: Anderson Publishing, 2006. ISBN 978-1-59345-303-9.
↑ „Here Are The Top 5 Hackers Arrested in 2016“. Techworm.net.
↑ Filiol, Eric; Mercaldo, Francesco; Santone, Antonella (2021). „A Method for Automatic Penetration Testing and Mitigation: A Red Hat Approach“. Procedia Computer Science (inglizcha). 192-jild. 2039–2046-bet. doi:10.1016/j.procs.2021.08.210.
↑ Silic, Mario; Lowry, Paul Benjamin (April 2021). „Breaking Bad in Cyberspace: Understanding why and how Black Hat Hackers Manage their Nerves to Commit their Virtual Crimes“. Information Systems Frontiers (inglizcha). 23-jild, № 2. 329–341-bet. doi:10.1007/s10796-019-09949-3. ISSN 1387-3326.
↑ Ric Messier. CEH v11 Certified Ethical Hacker Study Guide, 2021. ISBN 9781119800286. (Wayback Machine saytida 2021-10-27 sanasida arxivlangan)
↑ Kaspersky „What is a Black-Hat hacker?“. Kaspersky.com. Qaraldi: 15-iyun 2022-yil.

[1] Silic, Mario; Lowry, Paul Benjamin (2019-09-04). „Breaking Bad in Cyberspace: Understanding why and how Black Hat Hackers Manage their Nerves to Commit their Virtual Crimes“. Information Systems Frontiers. 23-jild, № 2. 329–341-bet. doi:10.1007/s10796-019-09949-3. ISSN 1387-3326.

[Counterintuitive-2] Laskow. „The Counterintuitive History of Black Hats, White Hats, And Villains“. Atlas Obscura (2017-yil 27-yanvar). — „In early hacking circles, there was a whole separate term to refer to malicious hacking: those people were called crackers. Across the internet, Richard Stallman, who founded the GNU Project and Free Software Foundation, is often credited with coining the term 'black hat' hacker, but he says that’s not correct. 'I have never used the terms 'X-hat hacker' because I reject the use of 'hacking' to refer to breaking security,' he says. Where did the term come from then? 'I don't know where,' he says.“. 2018-yil 29-iyunda asl nusxadan arxivlangan. Qaraldi: 2018-yil 29-iyun.

[3] O'Brien, Marakas, James, George. Management Information Systems. New York, NY: McGraw-Hill/ Irwin, 2011 — 536–537-bet. ISBN 978-0-07-752217-9.

[4] Wilhelm, Thomas. Ninja Hacking: Unconventional Penetration Testing Tactics and Techniques. Elsevier, 2010 — 26–7-bet. ISBN 9781597495899.

[moore2006-5] Moore, Robert. Cybercrime: Investigating High-Technology Computer Crime, 1st, Cincinnati, Ohio: Anderson Publishing, 2006. ISBN 978-1-59345-303-9.

[6] „Here Are The Top 5 Hackers Arrested in 2016“. Techworm.net.

[7] Filiol, Eric; Mercaldo, Francesco; Santone, Antonella (2021). „A Method for Automatic Penetration Testing and Mitigation: A Red Hat Approach“. Procedia Computer Science (inglizcha). 192-jild. 2039–2046-bet. doi:10.1016/j.procs.2021.08.210.

[8] Silic, Mario; Lowry, Paul Benjamin (April 2021). „Breaking Bad in Cyberspace: Understanding why and how Black Hat Hackers Manage their Nerves to Commit their Virtual Crimes“. Information Systems Frontiers (inglizcha). 23-jild, № 2. 329–341-bet. doi:10.1007/s10796-019-09949-3. ISSN 1387-3326.

[9] Ric Messier. CEH v11 Certified Ethical Hacker Study Guide, 2021. ISBN 9781119800286. (Wayback Machine saytida 2021-10-27 sanasida arxivlangan)

[10] Kaspersky „What is a Black-Hat hacker?“. Kaspersky.com. Qaraldi: 15-iyun 2022-yil.

[1]

[2]

[3]

[4]

[5]

[6]

[7]

[8]

[9]

[10]