.网路安全与异常之自动通告

1、网路平安与异常网路平安与异常之自动通告之自动通告2007 Susan Yang, Computer Center, National Central University. 報告大綱報告大綱q 1. 網路入侵來源q 2. 網路誤用(Abuse) Spam, infringement, portscanPkt floodingq 3. 網路誤用自動通告系統(AbNS)Rwhoisd IP管理資訊查詢服務 通告紀錄查詢網頁2007 Susan Yang, Computer Center, National Central University.1.網路入侵來源網路入侵來源q系統弱點系統弱點 Por

2、tscan-感染-埋後門- Zombie軍團q太簡易的密碼太簡易的密碼 字典式crackin- 猜中- Zombie軍團qVirus Mail Social engineering - 讀信-感染- Zombie軍團qToxic web page User browse the toxic webpage-感染- Zombie軍團qSpyware, Games, P2P file sharing, 2007 Susan Yang, Computer Center, National Central University.1.網路入侵來源網路入侵來源(cont.) q太簡易的用戶密碼太簡易的用戶

3、密碼 username = password123456 54321 abcdefg 等等q 建議之密碼選定項建議之密碼選定項(易記易記,易用為原則易用為原則): $ :如果你很愛錢的話 & :如果你落單 * :如果你看星星% :如果你愛統計生年,生月,生日,電話號碼, lucky name 2007 Susan Yang, Computer Center, National Central University.1.網路入侵來源網路入侵來源(cont.)q容易被用來掩護駭客發動網路攻擊PC未安裝防毒 (anti-virus) 軟體不及時更新微軟視窗系統 (Windows Updates)選用

4、過於簡單的密碼的連網主機q善用anti-virus/firewall工具扎實地做好網路防護措施維持良好的網路使用習慣根本阻截網路駭客與犯罪組織的橫行2007 Susan Yang, Computer Center, National Central University.2. Abuseq常見類型SpamPortScanPassword crackingPacket flooding2007 Susan Yang, Computer Center, National Central University.2. Abuse (cont.)q Spam 行為特徵2007 Susan Yang, C

5、omputer Center, National Central University.2007 Susan Yang, Computer Center, National Central University.2. Abuse (cont.)q PortScan 行為特徵2007 Susan Yang, Computer Center, National Central University.2007 Susan Yang, Computer Center, National Central University.2. Abuse (cont.)q Password cracking 行為特

6、徵2007 Susan Yang, Computer Center, National Central University.2007 Susan Yang, Computer Center, National Central University.2. Abuse (cont.)q Packet flooding 行為特徵Packet Flooding SourceVictimVictimVictimVictimSingle-Flow FllodingMultiple-FlowFlooding2007 Susan Yang, Computer Center, National Central

7、 University.2007 Susan Yang, Computer Center, National Central University.2007 Susan Yang, Computer Center, National Central University.3. 網路誤用通報系統網路誤用通報系統qRwhoisd IP管理資訊查詢服務管理資訊查詢服務Ip segments 所屬單位 學校名稱, 管理員 Email, Tel Address, Update date單位管轄的IP segments2007 Susan Yang, Computer Center, National Central University.2007 Susan Yang, Computer Center, National Central University.2007 Susan Yang, Computer Center, National Central University.2007 Susan Yang, Computer Center, National Central University.3. 網路誤用通報系統網路誤用通報系統(cont.)q單月通告紀錄q通告紀錄查詢網頁Date (year-month) 97-08 97-012007 Susa