nyuuzyou/kompy huggingface dataset:
Remote Vulnerabilities | 137

Each finding will tell you how the vulnerability was detected.
In this case, OpenVAS
found a Ruby-based web page and sent it a request, attempting to make a system call.
The error message that resulted suggested to OpenVAS
that these system calls are
allowed through the application. Since system calls are used for important functions
like reading and writing files, gaining access to hardware and other important func‐
tions, these calls could potentially provide access to the
attacker or cause damage to
files on the system. It’s because of that potential level of access that the severity was
rated so high.
When you get a result like this, it’s worth trying as best as you can to duplicate it
manually. This is where you may want to turn up the logging as high as you can. This
can be done by going to the scanner preferences and turning on Log Whole Attack.
You can also check the application log from the target application to see exactly what
was done. Repeating the attack and then modifying it in useful ways can be impor‐
tant. For example, manual testing of the
vulnerability identified in
Figure 4-14
resul‐
ted in an error message indicating that the function was not implemented. What
OpenVAS tried wasn’t completely successful, so additional testing and research is
needed.
If you need help performing
the additional testing, the findings will have a list of
resources. These web pages will have more details on the vulnerability, which can
help you understand the attack so you can work on duplicating it. Often, these
resources point to the announcement of the vulnerability.
They may also provide
details from vendors about fixes or workarounds.
Another column to take a look at is the second column, which is labeled with just an
icon. This is the column indicating the solution type.
The solutions may include
workarounds, vendor fixes, or mitigations. Each finding will provide additional
details about the workarounds or fixes that may be possible.
One of the vulnerabilities
that was detected was features of an SMTP server that could lead an attacker to infor‐
mation about email addresses.
Figure 4-15
shows one of the findings and its solution.
This particular solution is a workaround. In this case, the workaround is to disable
the two functions in the mail server.
Figure 4-15. OpenVAS solution
Kasbga yo‘naltirishdan asosiy maqsad

|
Kasbga yo‘naltirishdan asosiy maqsad
|
bet | 24/95 | Sana | 29.11.2023 | Hajmi | 10,75 Mb. | | #107282 |
Bog'liq o\'quv qo\'llanmaKasbga yo‘naltirishdan asosiy maqsad - o‘sib kelayotgan yosh avlodni ongli va mustaqil ravishda kasb tanlashga tayyorlashdan iborat bo‘lib, bu jarayon shaxsning bo‘lg‘usi kasbiy faoliyat subyekti
sifatida shakllanishini nazarda tutadi hamda uning bozor iqtisodiyoti munosabatlariga moslashib borishiga ko‘maklashadi.Shu munosabat bilan o‘quvchilarga ilm-fan asoslarining mustahkam bilimlarini singdirish, ularda yuksak onglilikni tarbiyalash, umuminsoniy qadriyatni shakllantirish, yosh avlodni turmushga va mehnatga, ijtimoiy zarur kasblami ongli ravishda tanlashga tayyorlash mehnat ta’lim va tarbiyasining vazifalaridir.Hozirgi vaqtda ijtimoiy va ilmiy texnikaviy taraqqiyot sharoitida maktab o‘quvchilarini kasb va hunarga yo‘naltirishning muhimligi ancha oshdi.
O‘quvchilarni to‘g‘ri va erkin kasb tanlashga yo‘naltirish bugungi kunning dolzarb vazifalaridan biridir. To‘g‘ri kasb tanlash insonning kelajagini, hayot tarzini belgilashda katta ahamiyat ega. Har bir shaxs kasbni o‘z qiziqishi, qobiliyati va ijtimoiy muhit nuqtayi nazaridan tanlaydi.
O‘quvchilarni kasb-hunarga yo‘naltirish ishlarini olib borishda “Kasb o‘zi nima?” degan savol tug‘iladi. Kasb to‘g‘risida bir qancha ta’riflar berilgan.
Kasb bu - insonga ma’lum bir talablar qo‘yuvchi faoliyat turidir.
Kasb - insonni jamiyat tomonidan tan olinishidir.
Kasb - tiriklik va tirikchilik manbayi.
O‘quvchilami kasb tanlashga yo‘naltirishning asosiy yosh bosqichlari mazmuni quyidagilardan iborat:
Maktabgacha ta’lim yoshidagi - 1 bosqich;
Boshlang‘ich kichikyoshdagi (1-4 sinflar) - II bosqich;
O‘rta yoshdagi (5-7 sinflar) -III bosqich;
Katta yoshdagi (8-9 sinflar) - IV bosqich.
O‘quvchilarning kasbiy tayyorgarligini aniqlash mezoni, ko‘rsatkich va o‘lchovlari.
Birinchi bosqich - maktabgacha ta’lim yoshidagi bolalarda ularning mashg‘ulotlarida qo‘llaridan keladigan faoliyat turlari bo‘yicha dastlabki mehnat ko‘nikmalarini ijobiy, hissiy ta’sirchan shakllantirish:
Ikkinchi bosqich - kichik maktab yoshidagi o‘quvchilarni bilishga oid va o‘yin ko‘rinishdagi ijtimoiy foydali mehnat faoliyatini amalga tadbiq qilish orqali mehnatga hurmat, mehnat kasb turlari, yo‘nalishlari bilan tanishtirib borishini hamda ommaviy kasblarga bo‘lgan qiziqishini shakllantirish.
Uchinchi bosqich - o‘quvchilarni kasbga yo‘naltirish mazmuni ulardagi qiziqish, qobiliyat, layoqat va shaxs sifatida jamiyatdagi o‘z o'rnini topishdagi hamda ma’naviy-moddiy qadriyatning izlanuvchan- sinchkov ko‘rinishlarini shakllantirish.
To‘rtinchi bosqich - o‘quvchilarda kasbiy o‘zlikni anglashni shakllantirish davri, ya’ni o‘quvchilami aniq bir kasbni tanlashning shaxsiy ma’noga egalligini tushunib yetishi, jamiyat oldidagi burchini, javobgarlik xislatlarini shakllantirish.
|
| |
Mavzuga oid savol va topshiriqlar

|
Mavzuga oid savol va topshiriqlar
|
bet | 23/95 | Sana | 29.11.2023 | Hajmi | 10,75 Mb. | | #107282 |
Bog'liq o\'quv qo\'llanma Mavzuga oid savol va topshiriqlar.
Mehnat qo’shiqlarining qanday turlari bor?
Zardushtiylik dinida qaysi kasb ulug’langan?
Xalq ertaklaridan qaysilarida mehnat qilish, halol risq topish kerakligi targ’ib qlingan?
Alpomish dostonida xaql qanday mehnat turlari bilan shug’ullanganligi aytib o’tilgan?
MAVZU. TEXNOLOGIYA DARSLARIDA O‘QUVCHILARNI KASB-HUNARGA YO‘NALTIRISH TEXNOLOGIYALARI
Reja:
Texnologiya darslarida kasb-hunarga yo‘naltirish. 2.Kasbga oid ma‘lumotlar.
3.Kasbga yo‘naltirishda turli boshqotirmalardan foydalanish. 4.Kasbga yo‘naltirishga doir o‘yin texnologiyalaridan
foydalanish.
Mavzuga oid tayanch tushunchalar: Kasb-hunar, kasbga yo'naltirish, kasbga yo'naltirishda asosiy maqsad,kasbga yo'naltirishda mezonlar, o'qituvchi oldidagi maqsadlar, kasblar, "kasbni toping" o'yini, kasbiy qiziqish, kasbiy layoqat.
O'zbekiston Respublikasi o‘z mustaqilligiga erishganidan so‘ng ta’lim sohasida amalga oshirilayotgan islohotlar jarayonida asosiy bo‘g‘in hisoblangan umumiy o‘rta ta’lim maktablari faoliyatida o‘quvchilarni hayotga tayyorlash va kasb tanlashga yo‘naltirish muhim vazifalardan biri hisoblanadi. O'quvchilarni kasb-hunarga yo‘naltirish o‘qituvchi rahbarligida o‘quvchilar tomonidan bajariladigan aqliy va jismoniy harakat jarayonlaridan iborat bo‘lib, buning natijasida ular mehnat predmetlari, vosita va jarayonlari haqidagi bilimlarni hamda ma’lum sohadagi ishlab chiqarish mehnati va kasbga yo‘naltirish amaliy ko‘nikma va malakalarini egallaydilar, ongli ravishda kasb tanlashga hamda jamiyat va shaxs farovonligi yo‘lida mehnat faoliyatiga tezda qo‘shilishlariga imkon beruvchi shaxsiy sifatlari hamda tafakkurlarini rivojlantiradilar. Yangi iqtisodiy munosabatlar kasb-hunarga yo‘naltirishning yangicha munosabati sharoitida mehnat ko‘nikmalari va malakalarini maqsadli shakllantirishdan iborat bo‘lib, ongli va har tomonlama rivojlangan fuqoroni tarbiyalashning tarkibiy qismi hisoblanadi. O‘quvchilarni kasb-hunarga yo‘llash ishlari maqsadli texnologiya fanining maqsad va vazifalari bilan uyg‘unlikda namoyon bo‘ladi.
|
| |
Emosional holatlarning xilma-xilligi

130
o’zini boshqara olmaydi, nazorat keskin susayib ketadi, iroda o’ziga
buysunmaydi. Kayfiyatlar uncha kuchli bo’lmagan, lekin uzoq vaqt davom
etadigan barqaror hisdir. Kayfiyat shodu-xurramlik yoki qayguli, tetiklik yoki
lanjlik, hayajonli yoki mayuslik, jiddiy yoki yengiltaklik, jizzakilik yoki
muloyimlik kabilar tarzida kechadi.
Stress – kuchli hissiy zo’riqishdan iborat jarayon. Hissiy zo’riqish xavf-
xatar tug’ilgan, kishi xafa bo’lgan, uyalgan, tahlika ostida qolgan vaziyatlarda
ro’y beradi.
Ehtiroslar deb kishi hatti-harakatlari yo’nalishini belgilaydigan, barqaror,
chuqur va kuchli hislarga aytiladi. Masalan, rassomlikka, musiqaga ehtiros,
bedana urishtirish kabilarga ehtiros.
His-tuyg’ular hayvonlarga ham xos. Lekin insonning his-tuyg’ulari o’z
mazmuni va kechishiga ko’ra hayvonnikidan tubdan farq qiladi. Masalan,
jirkanish, faxrlanish, hasad qilish, shodu-xurramlik, zerikish, hurmat qilish,
burchni his etish kabilar faqat insonga xos bo’ladi.
Intellektual /aqliy/ his-tuyg’ularga bilishga qiziqish, ajablanish,
shubhalanish, taajjublanish, ishonch kabi hislar kiradi. Bo’larning barchasi
ijobiy xarakterga ega bo’lib kishini bilishga, o’rganishga, ishtiyoq bilan
ishlashga undaydi.
Ma’naviy his-tuyg’ularga do’stlik-o’rtoqlik, Vatanga muhabbat,
insonparvarlik, hamdardlik, sodiqlik, uyalish, mehnatni sevish kabi his-
tuyg’ular kiradi. Bizning axloqiy yetukligimiz, tarbiyalanganligimiz ana shu
hislar orqali belgilanadi.
Estetik his-tuyg’ularga bizning go’zal, chiroyli, yoqimli narsalardan
zavqlanishimiz, shodlanishimiz, ho’zur qilishimiz, rohatlanishimiz kabilar
kiradi. Bu hislarning manbai go’zal tabiat, san’at, adabiyot, chiroyli turmush
kabilar bo’lishi mumkin.
Intellektual, ma’naviy, estetik tuyg’ularni faoliyat va muomala
jarayonida boshdan kechiramiz. Sosial voqyelikka nisbatan butun hissiy
munosabatlar boyligini ifodalagani uchun ularni yuksak his-tuyg’ular deb ham
aytamiz.
Scanning for Targets

Scanning for Targets
We took a look at using modules in the preceding chapter. While we certainly can use
tools like
nmap
to get details about systems and services available on our target net‐
work, we can also use other modules that are in Metasploit. While a program like
nmap
has a lot of functionality and the scripts will provide
a lot of details about our
targets, many scanners are built into Metasploit. An advantage to using those is that
we’re going to be in Metasploit in order to run exploits, so perhaps it’s
just as easy to
start in Metasploit to begin with. All the results found will be stored in the database,
since they are being run from inside Metasploit.
Port Scanning
For our
purposes, we’re going to forego using
nmap
and concentrate on what’s in
Metasploit, so we’re going to use the auxiliary port scan modules. You’ll find that
Metasploit has a good collection of port scanners covering a range of needs. You can
see
the list in
Example 6-1
.
Example 6-1. Port scanners in Metasploit
msf > search portscan
Matching
Modules
================
Disclosure
Name
Date Rank Description
---- ---------- ---- -----------
auxiliary/scanner/http/wordpress_pingback_access normal Wordpress
Pingback
Locator
auxiliary/scanner/natpmp/natpmp_portscan
normal NAT-PMP
External
Port Scanner
auxiliary/scanner/portscan/ack normal TCP ACK
Firewall
Scanner
auxiliary/scanner/portscan/ftpbounce
normal FTP Bounce
Port Scanner
auxiliary/scanner/portscan/syn normal TCP SYN Port
Scanner
auxiliary/scanner/portscan/tcp
normal TCP Port
Scanner
auxiliary/scanner/portscan/xmas normal TCP
"XMas"
Port Scanner
auxiliary/scanner/sap/sap_router_portscanner
normal SAPRouter
Port Scanner
| Chapter 5: Automated Exploits

Summary
Kali comes with exploit tools. What you use will depend on the systems you are tar‐
geting. You might use some of the Cisco exploit tools. You might also use Metasploit.
This is pretty much a one-stop shop for exploiting systems and devices. Ideas to take
away from this chapter include the following:
• Several utilities will target Cisco devices, since Cisco switches and routers are so
common in networks.
• Metasploit is an exploit development framework.
• Regular exploits are released for Metasploit that can be used without alteration.
• Metasploit also includes auxiliary modules that
can be used for scanning and
other reconnaissance activities.
• The database in Metasploit will store hosts, services, and vulnerabilities that it
has found either by scanning or by import.
• Getting a command shell is not the only outcome
that might happen from an
exploit module.
Useful Resources
• Offensive Security’s free ethical hacking course,
“Metasploit Unleashed”
• Ric Messier’s
“Penetration Testing with the Metasploit Framework” video
(Infin‐
ite Skills, 2016)
• Felix Lindner’s Black Hat slide deck,
“Router Exploitation”
• Rapid7’s
blog post,
“Cisco IOS Penetration Testing with Metasploit”
Summary | 173
CHAPTER 6
Owning Metasploit
In this chapter, we are going to extend the content of the preceding chapter. You
know the basics of interacting with Metasploit. But Metasploit is a deep resource,
and, so far we’ve managed to just scratch the surface. In this chapter, we’re going to
dig a little deeper. We’ll walk through an entire exploit from start to finish in the pro‐
cess. This includes doing scans of
a network looking for targets, and then running an
exploit to gain access. We’ll take another look at Meterpreter, the OS-agnostic inter‐
face that is built into some of the Metasploit payloads. We’ll see how the payloads
work on the systems so you understand the process. We’ll
also take a look at gaining
additional privileges on a system so we can perform other tasks, including gathering
credentials.
One last item that’s really important is pivoting. Once you have gained access to a sys‐
tem in an enterprise,
especially a server, you will likely find that it is connected to
other networks. These networks may not be accessible from the outside world, so
we’ll need to take a look at how to gain access from the outside world by using our
target system as a router and passing traffic through it
to the other networks it has
access to. This is how we start moving deeper into the network, finding other targets
and opportunities for exploitation.
Ethical Note
As you are moving deeper into the network and exploiting addi‐
tional systems, you need to pay close attention to the scope of your
engagement. Just because you can pivot
into another network and
find more targets doesn’t mean you should. Ethical considerations
are essential here.
AWS — ilg‘or simsiz xizmatlar

321
IMT kengaytirilgan diapazoni
2001-yilda Radioaloqa bo‘yicha umumjahon konferensiyasi
2500—2690MGs diapazonida IMT-2000 yer sirti radioaloqa xiz-
matlarini rivojlantirish uchun uchta qo‘shimcha chastota polosa-
larini aniqlagan edi. Unga muvofiq 2008-yildan boshlab Yevropa-
da bosqichma-bosqich FDD dupleksli IMT-2000 (hozirgi kunda
IMT-Advanced ham) tizimlari uchun 140MGs lik umumiy polo-
sa ajratilmoqda. Bunda “yuqoriga” yo‘nalishda 2500—2570MGs,
“pastga” yo‘nalishda esa 2620—2690MGs polosalari egallanmoq-
da. TDD dupleksi asosida juft bo‘lmagan kanallar yaratish uchun
50MGs lik qo‘shimcha polosa ajratilgan (2570–2620MGs). Dun-
yoning barcha hududlari uchun bu chastota polosalarining taq-
simlanishini garmonizatsiyalash tufayli ishlab chiqarish hajmini
oshirish va shuni hisobiga tejamkorlikka erishish va “global rou-
ming”ni ta’minlash ko‘zda tutiladi. Taxmin qilinishicha, LTE
tarmoqlari, birinchi navbatda, FDD juft polosalaridan foydalanib,
aynan shu polosalarda quriladi (hozircha bu LTE tijorat tarmoqla-
rini 2009—2011-yillarda tatbiq etilishi bilan tasdiqlanib kelmoq-
da). Bundan tashqari, aynan shu diapazon 20MGs kenglikdagi
kanallarni ta’minlash hisobiga LTE tarmoqlarini “to‘laqonli” ish-
latishga imkon beradigan kamyob diapazonlar sarasiga kiradi. Shu
munosabat bilan, mobil aloqa operatorlari keng polosali va yuqori
tezlikli aloqa xizmatlarini taqdim etish uchun, avvalo 20MGs lik
kanallarni sinashi va zaxiralashi tabiiydir.
• BCH (ingl. Broadcast Channel) 
—
keng-qamrovli uzatish 
kanali;
•

• BCH (ingl. Broadcast Channel) —
keng-qamrovli uzatish
kanali;
• PCH (ingl. Paging Channel) —
chaqiruv “peydjing” kanali;
• DL-SCH (ingl. Downlink Shared Channel) —
“pastga” yo‘na-
lishning umumiy kanali;
• MCH (ingl. Multicast Channel) —
guruhli uzatish kanali;
Fizik darajada “pastga” yo‘nalishda uchta fizik kanal ishlatiladi:
• PDSCH (ingl. Physical Downlink Shared Channel) —
“past-
ga” yo‘nalishning umumiy fizik kanali;
306
• PDCCH (ingl. Physical Downlink Control Channel) —
“past-
ga” yo‘nalishning boshqaruv fizik kanali;
• CCPCH (ingl. Common Control Physical Channel) —
umumiy
boshqaruv fizik kanali.
PDSCH kanali yuqori tezlikda multimedia va ma’lumotlarni
uzatish uchun mo‘ljallangan. Bu kanalda QPSK, 16-QAM, 64-
QAM modulyatsiya turlari va signallarni fazoviy multiplekslashdan
foydalaniladi. PDSCH kanali AUlar uchun maxsus boshqaruv ax-
borotlarini uzatadi va faqat QPSK modulyatsiyasidan foydalanadi.
Bu kanal har bir subkadrning birinchi slotidagi birinchi uchta
OFDM-simvollarini egallaydi. CCPCH kanali esa keng qamrov-
li uzatish bo‘yicha xizmat axborotlarini uzatadi va, shuningdek,
faqat QPSK modulyatsiyasidan foydalanadi.
Modulyator
YCH signal
sintezi
Modulyatsion
signallarni
shakllantirish
skrebllash
Kanalli
kodlash
Transport
bloklari
Qarlamlar
MAC darajasidan
antenna portlari
Qatlamlar
bo‘yicha
taqsimlash
(antenna
portlariga)
Resurs
elementlari
bo‘yicha
OFDM
signal sintezi
Resurs
elementlari
bo‘yicha
taqsimlash
OFDM signal
sintezi
Modulyatsion simvollari
S
0
f
0
S
1
f
1
S
k-1
0
0
0
0
0
f
K-1
f
N
M nuqtali KTFK
Siklik
prefiksni
qo‘shish
20.4-rasm.“Pastga” kanalda signalning shakllanish sxemasi.
307
E-UTRAN tarmog‘idagi “pastga” kanalda transport va fizik
kanallarining o‘zaro taqsimlanishi 20.5-rasmda tasvirlangan.
“Pastga” liniya
transport kanallari
“Pastga” liniya
fizik kanallari
BCH
PCH
CCPCH
PDSCH
PDCCH
DL-SCH
MCH
20.5-rasm.E-UTRAN tarmog‘ida “pastga” yo‘nalishda trans- port kanallarini fizik kanallariga taqsimlanishi.
“Yuqoriga” yo‘nalishdagi kanalni tashkil etilishi

308
SC-FDMA texnologiyasi OFDM texnologiyasi bilan ko‘plab
o‘xshashliklarga ega bo‘lib, ulardan asosiysi shundaki, “pastga”
yo‘nalishda chastotaviy ortogonallik sota ichidagi abonentlar
orasida tashkil qilingan va bu sota ichidagi interferensiya hajmini
boshqarishga imkon beradi. Shuningdek, SC-FDMA kuchaytir-
gich quvvatini tushishini kamaytiradi va bu bilan AUning akku-
mulyatorining xizmat muddatini cho‘zishga va aloqa uzoqligini
oshirishga imkon beradi. SC-FDMA texnologiyasida signalni
qayta ishlashni asosini taqsimlangan OFDM-simvollarini diskretli
Fure tezkor o‘zgartirish usuli tashkil etadi (20.6-rasm).
Modulyator
YCH-signal
sintezi
0
0
0
0
0
0
0
0
0
Sikl
prefiksni
qo‘shish
f
0
S
0
S
1
S
M-1
f
M-1
f
M-1
f
N-1
f
1
f
0
f
1
N-nuqtali FTTO’
M-nuqtali
FDO’
Modulyatsiya
simvollari
Mavzu yuzasidan test savollari

|
Mavzu yuzasidan test savollariBog'liq O‘zbekiston respublikasi oliy va o‘rta maxsus ta’lim vazirligiMavzu yuzasidan test savollari:
1. Mustaqil va original tarzda yangi obrazlarni hosil qilish bu:
A) ixtiyoriy xayol, B) ixtiyorsiz xayol, C) ijodiy xayol, D) orzu
2. Tafakkur jarayonining o‘ziga xos xususiyati tomonlarini aniqlang.
A) tafakkur voqelikni bevosita aks ettirish demakdir
B) tafakkur-sezgi – idrok - tasavvur
C) narsa va xodisalarning butunligicha aks ettirishdir
D) narsa va xodisalar o‘rtasidagi aloqa hamda muhim bog‘lanishlarni aks
ettirishdir
3. Narsa va xodisalar o‘rtasidagi o‘xshashlik va tafovutni tafakkur
operatsiyalaridan qaysisi orqali aniqlanadi?
A) sintez, B) mavhum, C) umumlashtirish, D) taqqoslash
4. Quyidagi hukmlardan qaysi biri tafakkurni to‘g‘ri ifodalaydi?
A) ongimizda mavjud bilimlarni birlashtirish asosida yangi obrazlar yaratish
B) voqelikni umumlashtirgan holda va vositali ravishda aks ettirilishi
C) voqelikni analiz va sintez qilish
D) bizga ta’sir etib turgan narsa va xodisalarning ongimizda aks ettirilishi
5. Tafakkur jarayonining o‘ziga xos xususiyati tomonlarini aniqlang.
A) tafakkur voqelikni bevosita aks ettirish demakdir
B) tafakkur yangilikni izlash va ochish demakdir
C) narsa va xodisalar o‘rtasidagi aloqa hamda muhim bog‘lanishlarni aks
ettirishdir
D) narsa va xodisalarni butunligicha aks ettirishdir
6. Tafakkur shakllarini aniqlang.
A) hukm, xulosa, tushuncha
B) mulohaza, muhokama, muammo
C) xulosa, fikr, gipoteza
D) hukm, umumlashtirish, taqqoslash
7. Xissiy bilish – bu:
A) fikrlarni muxokama kilib narsa va xodisalarni bilib olish;
B) fikirlarni amaliy faoliyatda aks ettirish;
C) vokeani nutk ishtirokida aks ettirish;
D) narsa va xodisalarni sezgi, idrok, tasavvurlarda aks ettirish.
8. Fikr yuritish jarayonlari – bu:
A) tushuncha, xukm; B) induksiya, deduksiya xulosalash; C) analogiya;
D) analiz, sintez, takkoslash, umumlashtirish.
|
| |
-rasm - Raqamli mobil aloqa

309
SC-FDMA signalining bevosita shakllanish jarayoni
quyidagi
tarzda amalga oshadi. Kanal kodlashi, skrembllash va modu l-
yatsion simvollar shakllanganidan so‘ng bu simvollar
M simvollar
bloklariga guruhlanadi (SC-FDMA sub-simvollari). Bu sub-sim-
vollarni 15kGs lik nimeltuvchilarga joylashtirib bo‘lmaydi,
chunki
ular endi kengroq bo‘lib qolishdi va
N marta kengroq chastota
talab qilishadi (bu yerda,
N uzatish uchun yaroqli nimeltuvchi-
lar soni). Shuning uchun
M moduliyatsion
simvollardan iborat
guruhlarni shakllantirib (bunda
M < N), ularni
M nuqtali Fure
diskret o‘zgartirish jarayonidan o‘tkaziladi, ya’ni analog signa-
li yaratiladi. So‘ng
N nuqtali teskari Fure tezkor o‘zgartirish
mexa nizmi yordamida har bir eltuvchini mustaqil modulyatsiya-
ga mos signal sintezlanadi, siklik prefiks qo‘shiladi va chiquvchi
YUCH-signal generatsiya qilinadi.
TFO‘ algoritmidan signalni o‘zgartirish
mexanizmi sifatida
foydalanishning afzalligi yana shundaki, u tufayli “yuqoriga”
yo‘nalishdagi SC-FDMA signalining miqdoriy xarakteristika-
lari spektrni juda yaxshi to‘ldirgan holda “pastga” yo‘nalishdagi
OFDMA signalning xarakteristikalariga mos keladi. “Yuqori-
ga” kanalning resurs to‘ri “pastga” kanalning to‘riga to‘liq mos
bo‘ladi: bunda har bir PRB fizik resurs bloki chastota sathi-
da 15 kGs kenglikdagi 12 nimeltuvchilarga va vaqt sathida 0,5
ms lik 1 slotga ega bo‘ladi. Resurs blokining uzunligi standart
CP siklik prefiks ishlatilganda 7
OFDM-simvolga, kengaytiril-
gan SR da esa 6 simvolga teng bo‘ladi. SC-FDMA simvolining
uzunligi (SR prefiksisiz) OFDMA simvolining uzunligiga teng
bo‘lib, 66,67mks ni tashkil etadi. Qisqa va uzun SR prefikslarini
uzunliklari ham bir biriga teng. Resurs to‘rida 6 dan 100
gacha
resurs bloklari bo‘lishi mumkin, lekin ularning soni 2, 3 yoki
5 sonlarga karrali bo‘lishi kerak, chunki bu Fure diskret qay-
ta o‘zgartirish jarayoni bilan bog‘liq. SC-FDMAning yana bir
xususiyati shundan iboratki, AU da 64-QAM modulyatsiyasini
qo‘llab-quvvatlanishi “otsional” (ya’ni majburiy emas)
va ishlab
chiqaruvchilarning o‘z ixtiyoriga qoldirilgan.
310
OFDMA da har bir nimeltuvchida bir vaqtni o‘zida uni modul-
yatsion simvoli uzatiladi. SC-FDMAda esa nimeltuvchilar bir
vaqtni o‘zida va bir xil modulyatsiyalanadi, lekin modulyasion
simvollar vaqt bo‘yicha qisqaroq bo‘ladi. Ya’ni
OFDMAda sim-
vollar parallel ravishda, SC-FDMAda esa ketma-ket ravishda
uzatiladi (20.7-rasm).
Uzatilayotgan QPSK-simvollar ketma-ketligi
QPSK-
modulyatsiya
Q
V
Vaqt
Vaqt
OFDMA
OFDMA-simvoli
OFDMA-simvoli
SC-FDMA
simvoli
SC-FDMA
simvoli
SC-FDMA
Chastota
Chastota
15 kGs
60 kGs
-1, -1
-1, -1
1, -1
-1, -1
-1, -1
-1, -1
-1, -1
1, 1
1, 1
-1, 1
-1, 1
1, -1
1, -1
-1, 1
-1, 1
-1, 1
-1, 1
-1, 1
-1, 1
1, 1
1, 1
1, 1
1, 1
1, 1
Cisco Attacks | 151 - Learning Kali Linux

Management Protocols
Cisco devices support several management protocols. These include SNMP, SSH, Tel‐
net, and HTTP. Cisco devices have embedded web servers. These web servers can be
attacked, both from the standpoint of compromised credentials as well as attacking
the
web server itself, to create denial-of-service attacks and other compromises of the
device. Various tools can be used to attack these management protocols. One of these
is
cisco-torch
.
The program
cisco-torch
is a scanner that can search for
Cisco devices on the network
based on these different protocols. It also can identify vulnerabilities within the web
server that may be running on the Cisco devices. The program uses a set of text files
to perform fingerprinting on the devices it finds in order to identify issues that may
exist in those files.
Additionally, it uses multiple threads to perform the scans faster. If
you want to alter the configuration or see the files that are used for its operation, you
can look at the configuration file at
/etc/cisco-torch/torch.conf
, as shown in
Example 5-1
.
Example 5-1. /etc/cisco-torch/torch.conf File
root@yazpistachio:/etc/cisco-torch# cat torch.conf
$max_processes
=
50;
#Max process
$hosts_per_process
=
5;
#Max host per process
$passfile
=
"password.txt"
;
#Password word database
$communityfile
=
"community.txt"
;
#SNMP community database
$usersfile
=
"users.txt"
;
# Users word database
$brutefile
=
"brutefile.txt"
;
#TFTP file word database
$fingerprintdb
=
"fingerprint.db"
;
#Telnet fingerprint database
$tfingerprintdb
=
"tfingerprint.db"
;
#TFTP fingerprint database
$tftprootdir
=
"tftproot"
;
# TFT root directory
$tftpserver
=
"192.168.77.8"
;
#TFTP server hostname
$tmplogprefix
=
"/tmp/tmplog"
;
#Temp file directory
$logfile
=
"scan.log"
;
#Log file filename
$llevel
=
"cdv"
;
#Log level
$port
=
80;
#Web service port
The files mentioned in the configuration
file can be found in
/usr/share/cisco-torch
.
One of the listings you can see in the configuration file is the list of passwords that
can be used. This is where
cisco-torch
can be used as an exploitation tool. The pro‐
gram can be used to launch brute-force password attacks against devices it identifies.
If the password file used by
cisco-torch
is
not extensive enough, you can change the
file used in the configuration settings and use one you have found or created. A larger
password file can provide a higher degree of success, of course, though it will also
increase the amount of time spent on the attack.
The more passwords you try, the
more failed login entries you will create in logs, which may be noticed.
Identifying New Vulnerabilities

Boundary testing
occurs when you go after the bounds of expected input. You test the
edges of
the maximum or minimum values, and just outside the maximum or mini‐
mum—checking for errors and correct handling of the input.
Sending applications data they don’t expect is a way to identify bugs in a program.
You may get error messages that provide information that may be useful, or you may
get a program crash. One way of accomplishing this is to use a class of applications
called
fuzzers
. A fuzzer generates random or variable data to provide to an applica‐
tion. The input is programmatically generated based on a set of rules.
Fuzzing may be considered black-box
testing by some people,
because the fuzzing program has no knowledge of the inner work‐
ings of the service application. It sends in data, regardless of what
the program is expecting the input to look like. Black-box testing is
about viewing the software under test as a black box—the inner
workings can’t be seen. Even if you
have access to the source code,
you are not developing the tests you run with a fuzzer with respect
to the way the source code looks. From that standpoint, the appli‐
cation may as well be a black box, even if you have the source code.
Kali has a few fuzzers installed and more that can be installed. The first one to look at,
sfuzz
, used to send network traffic to servers.
sfuzz
has a collection
of rules files that
tells the program how to create the data that is being sent. Some of these are based on
Borlikni bevosita aks ettirish

128
abstrakt, nazariy,amaliy
D) mustakillik, tankidiylik.
Tavsiya etiladigan adabiyotlar:
1.
G‘oziev E.G. Umumiy psixologiya. Toshkent. 2002.1-2 kitob.
2.
Dyui D. Psixologiya i pedagogika mыshleniya.- M., 1998
3.
Karimova V.M. va b.k.lar Mustaqil fikrlash.- T.- SHark, 2000
4.
Karimova V., Sunnatova R. Mustaqil fikrlash bo‘yicha mashg‘ulotlarni
tashkil etish yuzasidan uslubiy qo‘llanma.- T.: SHark, 2000
5.
“Psixologiya” Uch.T-2. “Prospekt”. Moskva - 2004.
6.
Psixologiya i pedagogika. Pod redaksiey A.A.Radugina. Izd. “Sentr” 2003
7.
Gamilton. YA.S. “CHto takoe psixologiya”. “Piter”, 2002.
8.
Ananev B.G. “CHelovek kak predmet poznaniya”. “Piter”, 2001.
9.
Drujinina V. “Psixologiya “. Uchebnik. “Piter”, 2003.
10. Burlachuk F. Psixodiagnostika. “Piter”, 2002.
11. Ayzenk M. Psixologiya dlya nachinayuщix. “Piter”, 2000.
12. Bolotova A.K, Makarova I.V. Prikladnaya Psixologiya: Uchebnik dlya
vuzov.- M.Aspekt Press, 2002 – 383 s.
13. Nemov R.S. Prakticheskaya Psixologiya Poznanie sebya: Vliyanie na
lyudey:Posobie dlya uch-sya-M:Gumanit. Izd.Sentr VLADOS, 2003.320 s.
14. Spravochnik po resheniyu krossvordov i skanvordov .- Rostov n\D: Vladis,
2002. – 640 s.
Mavzu yuzasidan internet tarmog‘i bo‘yicha veb-saytlar ro‘yhati:
1. www.expert.psychology.ru
2. www.psycho.all.ru
Auditing Devices - Learning Kali Linux

used to gather information about configuration as well as system status. The older
version of SNMP uses a community string for authentication,
which is provided in
clear text because the first version of SNMP doesn’t use encryption.
CAT
uses a word
list of potential community strings, though it was common for the read-only commu‐
nity
string to be
public
and the read-write community string to be
private
for a long
time. They were
the defaults in many cases, and unless the configuration of the sys‐
tem was changed, that’s what you would need to supply.
CAT
is an easy program to run. It’s a Perl script that calls individual modules for
SNMP and brute-force runs. As I’ve noted, it does require you to provide the hosts.
You can provide a single host or a text file with a list of hosts in it.
Example 4-6
shows
the
help output for
CAT
and how to run it against Cisco devices.
Example 4-6. CAT output
root@rosebud:~# CAT
Cisco Auditing Tool - g0ne
[
null0
]
Usage:
-h hostname
(
particular protocols. For instance

==========================================================================
[
18:16:35
]
attempting fuzz -
2
(
len: 50057
)
.
[
18:16:35
]
info: tx fuzz -
(
50057
bytes
)
- scanning
for
reply.
[
18:16:35
]
read
:
220
rosebud.washere.com ESMTP Postfix
(
Debian/GNU
)
250
rosebud.washere.com
==========================================================================
[
18:16:35
]
attempting fuzz -
3
(
len: 50057
)
.
[
18:16:35
]
info: tx fuzz -
(
50057
bytes
)
- scanning
for
reply.
[
18:16:36
]
read
:
220
rosebud.washere.com ESMTP Postfix
(
Debian/GNU
)
250
rosebud.washere.com
==========================================================================
One of the issues with using fuzzing attacks is that they may generate program
crashes. While this is ultimately the intent of the exercise, the question is how to
determine when the program has actually crashed. You can do it manually, of course,
by running the program under test in a debugger session so the debugger catches the
crash. The problem with this approach is that it may be hard to know which test case
caused the crash and, while finding a bug is good, just getting a program crash isn’t
enough to identify vulnerabilities or create exploits that take advantage of the vulner‐
ability. A bug, after all, is not necessarily a vulnerability. It may simply be a bug. Soft‐
ware packages can be used to integrate program monitoring with application testing.
You can use a program like
valgrind
to be able to instrument your analysis.
In some cases, you may find programs that are targeted at specific applications or
protocols. Whereas
sfuzz
is a general-purpose fuzzing program that can go after mul‐
tiple protocols, programs like
protos-sip
are designed specifically to test the SIP, a
common protocol used in VoIP implementations. The
protos-sip
package is a Java
application that was developed as part of a research program. The research turned
into the creation of a company that sells software developed to fuzz network proto‐
cols.
Not all applications are services that listen on networks for input. Many applications
take input in the form of files. Even something like
sfuzz
that takes definitions as
input, takes those definitions in the form of files. Certainly word processing, spread‐
sheet programs, presentation programs, and a wide variety of other types of software
use files. Some fuzzers are developed for the purpose of testing applications that take
files as input.
One program that you can use to do a wider range of fuzz testing is
zzuf
. This pro‐
gram can manipulate input into a program so as to feed it unexpected data.
Example 4-11
shows a run of
zzuf
against the program
pdf-parser
, which is a Python
script used to gather information out of a PDF file. What we are doing is passing the
"psixologiya" - bet 100

129
11-MAVZU: EMOTSIYA VA IRODA PSIXOLOGIYASI
Aniqlashtirilgan o’quv
maqsadlari
.
Talaba bu mavzuni to’la
o’zlashtirgandan so’ng:
- Hissiyot va uning hosil bo’lish manbalarini biladi;
- Affekt va stress o’rtasidagi farqni tushuntiradi;
- Irodaviy harakatlar va irodaviy boshqarish tushunchasiga ta’rif beradi;
Tayanch so’z va iboralar:
Affekt , stress, maqsad, motiv, motivlar kurashi, iroda, iroda akti,
irodaviy zo’r berish, qaror, qarorni ijro etish, ijroga baho berish, dadillik,
qat’iyatlilik, matonatlilik, sabr-toqatlilik.
Asosiy savollar
:
1.
Emosional jarayonlarning umumiy xarakteristikasi.
2.
Emosional holatlarning xilma-xilligi.
3.
Iroda. Irodaviy harakatlar va irodaviy boshqarish. Irodani tarbiyalash
1. Emosional jarayonlarning umumiy xarakteristikasi.
His-tuyg’ular kishining o’z hayotida nimalar yuz berayotganiga, nimalarni
bilib olayotganiga yoki nima bilan mashg’ul bo’layotganiga nisbatan o’zicha
turli xil shaklda bildiradigan ichki munosabatidir. His-tuyg’ular o’zining
kechishiga ko’ra o’zgarib turadigan psixik jarayondir.
His-tuyg’ularni boshdan kechirishning turli shakllari - Emotsiya, affekt,
kayfiyat, kuchli hayajonlanish /stress/, ehtiros ko’rinishlariga ega bo’ladi. His-
tuyg’ular shaxsning emosional sohasini tashkil etadi.
Kishida his-tuyg’ular uning ehtiyojlari qondirilishi jarayoni qanday
kechayotganligi belgisi sifatida namoyon bo’ladi.
Barcha psixik jarayonlar kabi emosional holatlar, his-tuyg’ularning
kechishi ham miya faoliyatining natijasi bo’lib hisoblanadi. Emotsiyaning
paydo bo’lishi tashqi olamda ro’y beradigan o’zgarishlardan boshlanadi. Bu
o’zgarishlar kishi hayoti va faoliyatining jonlanishiga yoki pasayishiga, bir xil
ehtiyojlarning paydo bo’lishiga yoki yo’qolishiga, kishi organizmi ichida yuz
beradigan jarayonlardagi o’zgarishlarga olib boradi. His-tuyg’ular kechishiga
oid fiziologik jarayonlar ham murakkab shartsiz va shartli reflekslar bilan
bog’liqdir.
for
scanning single hosts
)
-f hostfile 
(
for

Example 4-7. Output from cisco-torch
root@rosebud:~# cisco-torch -t -s -w 192.168.86.0/24
Using config file torch.conf...
Loading include and plugin ...
###############################################################
# Cisco Torch Mass Scanner #
# Because we need it... #
# http://www.arhont.com/cisco-torch.pl #
###############################################################
List of targets contains
256
host
(
s
)
Will fork
50
additional scanner processes
Range Scan from 192.168.86.12 to 192.168.86.17
17855: Checking 192.168.86.12 ...
HUH db not found, it should be in fingerprint.db
Skipping
Telnet fingerprint
Range Scan from 192.168.86.6 to 192.168.86.11
17854: Checking 192.168.86.6 ...
HUH db not found, it should be in fingerprint.db
Skipping Telnet fingerprint
Range Scan from 192.168.86.18 to 192.168.86.23
17856: Checking 192.168.86.18 ...
Partially because of Cisco’s market share and the amount of time its devices have been
used on the internet, Cisco devices have known vulnerabilities. Identifying devices
isn’t the same as identifying vulnerabilities. As a result, we need to know what vulner‐
abilities may be on the devices we find. Fortunately, in addition to using OpenVAS for
vulnerability
scanning, a Perl script comes with Kali to look for Cisco vulnerabilities.
This script,
cge.pl
, knows about specific vulnerabilities related to Cisco devices.
Example 4-8
shows the list of vulnerabilities that can be tested with
cge.pl
as well as
how to run the script, which takes a target and a vulnerability number.
Example 4-8. Running cge.pl for Cisco vulnerability scanning
root@rosebud:~# cge.pl
Usage :
perl cge.pl
Vulnerabilities list :
[
1
]
- Cisco 677/678 Telnet Buffer Overflow Vulnerability
[
2
]
- Cisco IOS Router Denial of Service Vulnerability
[
3
]
- Cisco IOS HTTP Auth Vulnerability
[
4
]
- Cisco IOS HTTP Configuration Arbitrary Administrative Access Vulnerability
[
5
]
- Cisco Catalyst SSH Protocol Mismatch Denial of Service Vulnerability
[
6
]
- Cisco
675
Web Administration Denial of Service Vulnerability
[
7
]
- Cisco Catalyst
3500
XL Remote Arbitrary Command Vulnerability
[
8
]
- Cisco IOS Software HTTP Request Denial of Service Vulnerability
| Chapter 4: Looking for Vulnerabilities

This workaround provides specifics on how to configure two mail servers. This par‐
ticular system uses Postfix, which is one of the details provided. However, other mail
servers may also expose this vulnerability. If you need
help with configuration of
those servers, you will have to do additional research.
The final columns to look at are the Host column and the Location. The host tells you
which system had the vulnerability. This is important so your organization knows
which system it needs to be performing the configuration work on.
The location tells
you which port the targeted service runs on. This lets you know where you should be
targeting your additional testing. When you provide details to the organization, the
system that’s impacted is important to include. I also include
any mitigations or fixes
that may be available when I write reports for clients.
Network Device Vulnerabilities
OpenVAS is capable of testing network devices. If your network devices are accessible
over
the networks you are scanning, they can get touched by OpenVAS, which can
detect the type of device and apply the appropriate tests. However,
programs also are
included with Kali that are specific to network devices and vendors. Cisco is a com‐
mon networking equipment vendor. Unsurprisingly, various programs will perform
testing on Cisco devices.
The more targets available, the better chance that someone
will be developing tools and exploits against those targets. Cisco has majority market
share
in routing and switching, so those devices make good targets for attacks.
Network devices are often managed over networks. This can be done through web
interfaces using HTTP or they may also be done on a console through a protocol like
SSH or—far less ideal but still possible—Telnet. Once you have any device on a net‐
work, it has the potential to be exploited. Using
the tools available in Kali, you can
start to identify potential vulnerabilities in the critical network infrastructure.
Mavzu yuzasidan test savollari

Mavzu yuzasidan test savollari: 1.Qa’tiy maqsad asosida amalga oshirilgan va ayrim qiyinchiliklarni engish bilan bog‘liq harakatlar bu: A) tafakkur B) ijod C) iroda D) xayol
2. Har qanday irodaviy harakat nimadan boshlanadi? A) maqsadsiz harakatdan B) ixtiyorsiz harakatlardan C) maqsadni belgilab
anglashdan D) qurqoqlikni engishdan
3. Nihoyatda kuchli, qisqa muddatli va tez orada o‘tib ketadigan emotsional holat bu: A) xotira B) affekt C) stress D) ijobiy emotsiya
4. Quyidagi sifatlar orasida ijobiy irodaviy sifatlar guruhini ajrating. A) dadillik, mustaqillik, jasurlik
B) og‘ir tabiatlilik, xushchaqchaqlik, sadoqatlilik
C) tashabbuskorlik, jo‘shqinlik, ehtiyotkorlik
D) epchillik, ishbilarmonlik
6. Layokat – bu: A) shaxsning yakka xususiyati; B) layokat qobiliyatning shakllanishiga ta’sir
kiladi C) qobiliyatning rivojlanishi tugma imkoniyat; D) tasavvurlar tuplami.
7. Istedod – bu: A) kishining muayyan faoliyatga layokati; B) instinkt; C) kunikma, malaka,
bilim; D) qobiliyatlarda namoyon buladigan tugma xususiyat.
1-Amaliy mashg’ulot mavzusi: Psixologiyaning predmeti, inson hayoti va faoliyatidagi ahamiyati va psixologiyaning amaliy o’rganish metodlari. Reja: 1. Psixologiya so’zini eshitganingizda fikringizga qanday so’zlar, iboralar
keladi. (Aqliy xujum) - 5 daqiqa
2. Psixologiyaning predmeti, inson hayoti va faoliyatidagi ahamiyati haqidagi
fikrlar munozarasi (3x4 pedagogik texnologiya asosida) -25 daqiqa
135
3. Psixologiyaning tarmoqlari (Klaster pedagogik texnologiyasi asosida) –10
daqiqa
4. Psixologiyaning amaliy o’rganish metodlari. (Kichik guruhlarda ishlash
metodi orqali) – 35 daqiqa
5. Darsga yakun yasash –
5 daqiqa
MGs diapazonining qayta taqsimlanishi

320
shunday ko‘rinadiki, LTE tarmoqlarining GSM tarmoqlari bilan
900MGs diapazonida birgalikda ishlashi yana 5–10 yil davom
etadi va faqat shundan keyingina GSM tizimlarining ishlatilishi
to‘liq to‘xtatilishi mumkin. 900MGs diapazonining keyingi taq-
simlanishi ko‘p jihatdan Yevropa Ittifoqi darajasida o‘tkaziladigan
muzokaralar va qabul qilinadigan qarorlarga bog‘liq.
-rasm - Raqamli mobil aloqa

311
• UL-SCH
(ingl. Uplink Shared Channel) — “yuqoriga” yo‘na-
lishdagi umumiy kanal.
“Yuqoriga” yo‘nalishning fizik darajasida uchta fizik kanallari
ajratilgan:
• PRACH
(ingl. Physical Randon Access Channel) — kam-
dan-kam ulanish fizik kanali;
• PUSCH
(ingl. Physical Uplink Control Channel) — “yuqori-
ga” yo‘nalishdagi
boshqaruv fizik kanali;
• PUSCH
(ingl. Physical Uplink Shared Channel) — “yuqori-
ga” yo‘nalishdagi umumiy fizik kanali.
Transport va fizik kanallarining bir-biriga taqsimlanishi
20.8-rasmda tasvirlangan.
“Yuqoriga” liniya
transport
kanallari
“Yuqoriga” liniya
fizik kanallari
PRACH
RACH
UL-SCH
PUSCH
PUCCH
20.8-rasm. E-UTRAN tarmog‘ida “yuqoriga” yo‘nalishdagi
transport va fizik kanallarining o‘zaro taqsimlanishi.
Nazorat savollari:
1. E-UTRA tarmog‘ida “pastga” va “yuqoriga” yo‘nalishlar-
da qanday kanallarni ajratish texnologiyalari tanlangan? Nima
uchun?
2. E-UTRA texnologiyasining asosiy
miqdoriy xarakteristikala-
rini keltiring.
312
3. E-UTRA freymining tuzilmasini keltiring.
4. OFDM texnologiyasiga qisqacha tavsif bering va uning asosiy
afzalliklarini sanab o‘ting.
5. “Pastga” yo‘nalishda OFDM/QAM modulyatsiyasi qanday
ishlaydi?
6. E-UTRA tarmoqlarida ko‘p antennali
tizimlar nima sabab-
dan va nima uchun ishlatiladi?
7. Dunyoning turli regionlarida 700MGs diapazonida chasto-
talarni qayta taqsimlash qanday amalga oshiriladi?
8. 900MGs diapazonida LTE tarmoqlarini qurish afzalliklari
nimada va bu diapazonda ularni qanday
qurilish ketma-ketligi
kutilmoqda?
9. IMT-2000 yer sirti xizmatlarini rivojlantirish bo‘yicha butun-
jahon radioaloqa konferensiyasi (BRK) tomonidan qanday chas-
totalar polosasi aniqlangan?
HAYVONLAR ORGANIZMIDA ENERGIYA MUVOZANATI

aniqlangan. Bular oziq moddalaming kalorik koeffisiyentlari
yoki d a r n in g
organizmda oksidlanishi natijasida hosil qiladigan issiqlik miqdoridir.
Hisob kitob paytida organizmda oziq moddalaming o‘zlashtirish
koeffisiyenti hisobga olinishi zarur.
Organizmga qabul qilingan oziq moddalaming vazni va tarkibi, uning
tarkibidagi oqsillar, yogiar va uglevodlar miqdori hamda o‘zlashtirilish
koeffisiyentlarini hisobga olgan holda organizmda oksidlangan oziq
moddalaming miqdorini aniqlash mumkin, demak organizmning energiya
muvozanatini hisoblash mumkin.
Oziq mahsulotlaming energetik qiymati (non, sabzavot, go‘sht va
boshq.) ulardagi to‘yimli moddalar (oqsillar, yogiar, uglevodlar)
miqdoriga bogiiq.
19-jadval
______ Turli ovqatlar iste’mol qilinganida energiya muvozanati.
Ovqatlar turi
Energiya yo‘qotilishi %
AYRIM MIKROELEMENTLARNING ORGANIZM

kasalligining kelib chiqishiga sabab bo‘ladi. Bu kasallikda hayvonlar
o‘sishdan qolib, nerv, muskul, qon tomirlarining faoliyati buziladi.
Mahsuldorligi
kamayib, jinsiy
moyilligi
susayadi.
Qo‘zilarning
organizmida misning kamchiligi ularda enzootik ataksiya kasalligining
kelib chiqishiga sabab bo‘ladi. Hayvonlar organizmining misga boigan
sutkalik ehtiyoji ularning temirga bo‘lgan ehtiyojiga nisbatan deyarli yetti
baravar kamdir.
Kobalt. Organizmda qon hosil bo‘lish jarayonlarida katta rol
o‘ynaydi. U antianemik modda vitamin B
12
ning tarkibiga kiradi.
Organizmning o‘sishiga, rivojlanishiga unda moddalar almashinuvining
kechishiga ta’sir ko‘rsatadi. Shu bilan birgalikda organizmda yurak-tomir
va nerv-endokrin tizimlarining faoliyatiga ta’sir qiladi. Organizmdagi
barcha hujayra va to‘qimalar tarkibida kobalt bo‘ladi. Ichki sekretsiya
bezlarida (gipofiz, buyrak usti bezlari, me’da osti bezida), taloqda ko‘proq
to‘planadi. Organizmda kobalt yetishmasligi qo‘ylarda, echkilarda va
buzoqlarda “suxotka” akobaltizim kasalligi kelib chiqishiga sabab boiadi.
Hayvonlar yetarli miqdorda kobalt olib tursa, katta qorinda ko‘proq B
– guruh uchun tarqatma material

166
Xarakterning tuzilishi
Inson shaxsining xarakteri hamisha ko’pqirralidir. Unda Alohida
xususiyatlar yoki tomonlar ajratilib ko’rsatilishi mumkin, lekin ular bir-
birlaridan ajratilgan, Alohida xolda bo’lmaydi, balki ma’lum darajada
xarakterning barkaror tuzilishini tashkil etgan xolda uzaro boglik bo’ladi.
Xarakterning strukturasi uning ayrim xususiyatlari o’rtasidagi konuniy
bogliklikda namoyon bo’ladi. Agar kishi kurkok bo’lsa,
u tashabbuskorlik,
kat’iylik va mustaqillik, fidokorlik va oliyximmatlilik fazilatlariga ega
bo’lmaydi, deb aytish uchun asoslar bor. Shu bilan birga xarakteri bo’yicha
kurkok kishidan itoatkorlik va xushomadguylikni, kuchli kishiga nisbatan
konformlilikni, kizgonchilikni, sotkinlikni, ishonchsizlik va extiyotkorlikni
ko’tish mumkin.
Xarakterning xususiyatlari
orasida ayrimlari asosiy, yetakchi bo’lib,
uning namoyon bo’lishining butun kompleksini rivojlantirishning umumiy
yunalishini belgilab beradi. Ular bilan bir qatorda ikkinchi darajali xususiyatlar
ham borki, ayrim xollarda ular asosiy deb belgilanishi, boshqalarida esa ular
bilan uygunlashmasligi ham mumkin.
Xarakter subyektning birgalikdagi faoliyatga qay tarzda faol jalb
qilinishiga qarab xatti-harakatlarda va ishlarda namoyon Bular ekan, ham
faoliyat mazmuniga, ham qiyinchilikning muvaffaqiyatli yoki muvaffaqqiyatsiz
bartaraf
etilishiga, ham asosiy xayotiy maqsadlarga erishishda uzoq va yaqin
istiqbollarga bog’lik bo’lib qoladi.
Shunday qilib xarakterning tarkib topishida kishining tevarak-atrofidagi
muxitga va o’z-o’ziga, boshqa kishiga qanday munosabatda bo’lishi muxim
hisoblanadi. Shu bilan birga bu munosabatlar xarakterning eng muxim
xususiyatlarini tasniflash uchun asos bo’ladi.
Yuqoridagilardan kelib chiqib xarakterning to’rtta sistemasini farqlash
mumkin:
1.
Jamoaga va ayrim odamlarga bo’lgan
munosabatlarni ifodalovchi
xarakter xususiyatlari: yaxshilik, mexribonlik, talabchanlik, takabburlik va
boshqalar.
2.
Mexnatga bo’lgan munosabatni ifodalovchi xarakter hislatlari:
mexnatsevarlik, vijdonlilik, inga mas’uliyat
bilan karash, boshlagan ishni
oxiriga yetkazish, yalkovlik, mas’uliyatsizlik kabilar.
3.
Narsalarga bo’lgan munosabatlarni ifodalovchi xarakter hislatlari:
ozodalik yoki ifloslik, narsalarni ayab ishlatish yoki ayamaslik, ularga nisbatan
extiyotkorlik yoki aksincha kabilar.
4.
Odamning o’z-o’ziga bo’lgan munosabatlarini ifodalovchi xarakter
hislatlari: izzat-nafslilik, uz sha’nini extiyot qilish, kamtarlik, o’ziga ortikcha
baxo bermaslik yoki shuxratparastlik, magrurlik, dimogdorlik,
uzini kata olish
kabilar.
• boshqa tarmoqlar bilan o‘zaro ta’sirlashish;
     
402
•

403
• SS/MS
(ingl. Subccriber Station/Mobile Station) — abonent
uskunasi/mobil stansiya;
• ASN
(ingl. Access Service Network) — ulanishni taqdim etish;
• BS (ingl. Base Station) — tayanch stansiya (ya’ni “ulanish
nuqtasi nomiga ega”), ASN tuzilmasiga kiradi;
• ASN-GW
(ingl. ASN Geteway) — ASN shlyuzi, u ham ASN
tuzilmasiga kiradi;
• CSN
(ingl. Connectivity Service Network) — kommutatsiya
tarmog‘i;
• HA
(ingl. Home Agent) — uy agenti, CSN tuzilmasiga kiradi;
• AAA Server
(ingl. Authentication,Authorization and Accoun ting
Server) — autentifikatsiyalashtirish, avtorizatsiya va qayd etish
serveri, u ham GSN tarkibiga kiradi;
• NAP
(ingl. Network Access Provider) — tarmoqqa ulanish
provayderi;
• NSR
(ingl. Network Service Provider) — tarmoq xizmatlari
provayderi.
Tarmoq tugunlariga bo‘lish mantiqiy darajada va har bir man-
tiqiy tugunlarda amalga oshirilgan. MS, ASN va CSN guruhli
funksionallikdan iborat bo‘lishi mumkin. Bunda tarmoq funksi-
yalari funksiyalarga bo‘lingan ham bir necha apparatlarida ishla-
tilishi mumkin. Uskunada funksiyalarni bo‘lish yoki birlashtirish
tizimni integratsiya modeli bilan aniqlanadigan yoki tizimning
xarakteristikalariga qo‘yiladigan talablarni tanlash hisoblanadi.
Tizim ichida o‘zaro ta’sirlashish tarmoqning funksional tugunlari
orasidagi o‘zaro ta’sirlashish protokollarini aniqlashda quriladi.