HW2 CYBERSEC 2021 心得報告

Group content visibility: 
Use group defaults

  這次參加資安大會,看了許多有關資訊安全的攤位,其中有個攤位主要針對釣魚信件做介紹,讓我特別有興趣。

  電子郵件基本上是一間公司與駭客之前攻防的最前線,近年讓企業損失慘重的金融詐騙、勒索軟體、持續性滲透攻擊 (APT)等資安事件,都由一封釣魚郵件起頭的。駭客會利用偽裝過的釣魚郵件進行攻擊,這些釣魚郵件通常會偽裝的讓人難以肉眼分辨,以便誘導受害者執行釣魚郵件中要求的動作。

  傳統的郵件攻擊採用撒網的方式。這種方法以非特定的收件人為目標,大量廣發含有隱藏在本文或附件惡意程式的電子郵件。正如釣魚的名稱,採用的是一種願者上鉤的方式,然而現在的人也變得更警覺了,魚兒變得比較聰明而不再咬餌。這種隨機攻擊的成功率比起以往也就低了許多。

魚叉式網路釣魚

  現在新型的釣魚方式則稱為魚叉式網路釣魚(Spear Phishing)。魚叉式網路釣魚是一種少量動作而高度針對性的攻擊。

駭客在製作這些魚叉式網路釣魚郵件時,通常鎖定特定個人或某機構的特定員工及其社群媒體帳號,並且從社交網路和公共網站收集收件人的相關資訊。然後,駭客侵入一個合法的網域或伺服器,以便讓他們的郵件擁有一個良好聲譽的位址。它們會調查得知目標收件人的資訊,精心製作出很有說服力的電子郵件內容,並且在電子郵件當中挾帶可造成感染的附件檔案和連結。當收件人點擊郵件嵌入的網址,通常是連結到一個合法但已遭入侵的網站,電腦就會自動下載惡意程式。

  魚叉式網路釣魚非常的有效,因為它來自可信任的來源,而且不一定都會與惡意程式相關,因此能夠繞過一般的安全防護。此外,它也不會使用一些經常出現在垃圾郵件的文字,而且掃描實際的訊息也沒有包含惡意程式。

防範魚叉式網路釣魚

  許多型態的網路釣魚都可能造成資料外流,如果放任這些郵件不管,企業就可能遭到針對性攻擊/鎖定目標攻擊(Targeted attack ),進而導致大規模資料外洩。

現在,許多中小企業也成為駭客的攻擊對象,他們視這些中小企業為滲透大型企業的跳板,中小企業的IT人員相對不足,資安防護措施也相對較差,因此駭客更容易入侵。

  由於電子郵件是針對性攻擊入侵企業最普遍的管道,因此,防範魚叉式網路釣魚攻擊是一項非常重要的工作。而要防範網路釣魚,員工的教育就非常重要。訓練員工觀察郵件內的拼字錯誤、奇怪用詞,以及其他可疑的徵兆,就能預防一定程度的魚叉式網路釣魚。      總結一下,企業內需要完整的多層次防護,讓系統管理員確切掌控網路的狀況,進而降低針對性攻擊的風險,防範各種攻擊途徑,如此才可以對於企業內的資訊安全有更安全的防護。

  資安大會內還有許多體驗的遊戲和講座,像是我們就玩了實境解謎,也拿了不少的贈品,整體相當的有趣。

回應

Our Call Girls in Islamabad are professional and experience in their field and providing you the best service
and satisfy you in Islamabad escort . They give you the best erotic moments and enjoyable time in Islamabad Escorts .
 Are well mannered with a cool personality. We have a huge range of all type of female Escorts in Islamabad .
 Just call us or hire our at any time.
Contact me:- 03090966660
visit our website:- https://www.hotescortsinislamabad.com/

You guys are looking for Beautiful Call girls in Islamabad to spend your day and night with then in Islamabad Escorts.
We have the best range of Top Models Pakistani Girls for you in Islamabad Escort and all the areas of Islamabad.
We have High Profile girls and Luxurious models in Islamabad Escorts.
These Models have attractive figure Elite Escorts in Islamabad on your own conditions and as per your needs without any difficulty or problems available.
Contact me:- 03090966660
visit our website:- http://www.hotescortsinislamabad.com/

Islamabad Escorts will entertain you and help you to enjoy the Night they can be a great source of entertainment and physical satisfaction for you.
Our goal is to provide unique Islamabad escort service in our industry.
Contact me:- 03090966660
visit our website:- http://www.islamabadescorts.site/

Independent Females Lahore Escorts Services Cheap College Call Girls in Lahore.
Air Hostesses, Students, Celebrities, Housewives,
Models for Sex Dating in Lahore Escort.
Contact me:- 03090966660
visit our website:- https://www.lahoreescorts.site/

I have seen some great stuff here. Worth bookmarking for revisiting. I surprise how much effort you put to create such a great informative website. Your work is truly appreciated around the clock and the globe. Angora goat

It's appropriate time to make some plans for the future and it is time to be happy. I have read this post and if I could I wish to suggest you few interesting things or advice. Perhaps you could write next articles referring to this article. I desire to read even more things about it! mazatapec magic mushroom

Wonderful article. Fascinating to read. I love to read such an excellent article. Thanks! It has made my task more and extra easy. Keep rocking. https://top1asiaqq.net/

Wonderful blog! Do you have any tips and hints for aspiring writers? Because I'm going to start my website soon, but I'm a little lost on everything. Many thanks! smm panel

Remarkable article, it is particularly useful! I quietly began in this, and I'm becoming more acquainted with it better! Delights, keep doing more and extra impressive! smm panel india

Very interesting blog. Alot of blogs I see these days don't really provide anything that I'm interested in, but I'm most definately interested in this one. Just thought that I would post and let you know. hasta yatağı

You made such an interesting piece to read, giving every subject enlightenment for us to gain knowledge. Thanks for sharing the such information with us to read this... su arıtma cihazı

Hey, this day is too much good for me, since this time I am reading this enormous informative article here at my home. Thanks a lot for massive hard work. hasta yatağı

A great content material as well as great layout. Your website deserves all of the positive feedback it's been getting. I will be back soon for further quality contents. masa sandalye kiralama