時(shí)至今日，互聯(lián)網(wǎng)上已有上千萬(wàn)的惡意軟件橫行，上萬(wàn)的駭客使用各種手段去欺騙容易受騙的網(wǎng)民。他們使用著數(shù)年或數(shù)十年內(nèi)慣用的攻擊手段，毫無(wú)新意的利用網(wǎng)名的懶惰、誤判及一些“純白癡”行為。

同時(shí)，每年反惡意軟件研究員在惡意軟件或者是惡意攻擊中都會(huì)遇到一些引人側(cè)目的技術(shù)，這些有靈感的技術(shù)在不斷擴(kuò)展惡意攻擊的邊界，也導(dǎo)致越來(lái)越多的聰明人上當(dāng)受騙。近日PCWorld對(duì)當(dāng)今世界最常用的7個(gè)攻擊策略進(jìn)行盤(pán)點(diǎn)，以下為譯文：

1. 虛假無(wú)線接入點(diǎn)
虛假WAP（wireless access point）已成為當(dāng)今世界最容易完成攻擊的策略，任何人使用一些簡(jiǎn)單的軟件及一張無(wú)線網(wǎng)卡都可以將其電腦偽裝成可用的WAP，然后將這個(gè)WAP連接到一個(gè)本地中現(xiàn)實(shí)、合法的WAP。

?試想一下你或者你的用戶每次在本地咖啡店、機(jī)場(chǎng)及公共聚集地使用的免費(fèi)無(wú)線網(wǎng)絡(luò)，在星巴克的駭客將其WAP起名為“Starbucks Wireless Network”，在亞特蘭大機(jī)場(chǎng)的駭客將其起名為“Atlanta Airport Free Wireless”，可以想象數(shù)分鐘之內(nèi)就有各行各業(yè)的人接入。

隨后駭客就可以輕易讀取這些未經(jīng)保護(hù)的數(shù)據(jù)流，如果你明白肯定會(huì)驚訝于這些數(shù)據(jù)的內(nèi)容，即使是密碼都是通過(guò)明文發(fā)送的。

更邪惡一點(diǎn)的攻擊者可能會(huì)要求用戶在其WAP上建立一個(gè)賬戶，糟糕的是，通常情況下用戶都會(huì)使用一個(gè)通用的用戶名或者是電子郵箱。隨后這些攻擊者就會(huì)使用這些通用的認(rèn)證信息登錄一些常用網(wǎng)站，比如Facebook、Twitter、Amazon、iTunes等，而受害者對(duì)此卻是毫不知情。

經(jīng)驗(yàn)教訓(xùn)：你不可以相信公共的WAP，因?yàn)槟愕臋C(jī)密信息總是會(huì)通過(guò)這些WAP發(fā)送。嘗試使用一個(gè)VPN鏈接，它將保護(hù)你的通信，同樣也不要在一些公共或者私人站點(diǎn)上使用相同的認(rèn)證信息。

2. 竊取cookie
瀏覽器cookie通過(guò)保存用戶“state”來(lái)提升用戶的網(wǎng)站瀏覽體驗(yàn)，網(wǎng)站給通過(guò)給用戶主機(jī)發(fā)送這些小的文本來(lái)跟蹤用戶行為，大幅度方便用戶的相關(guān)操作。那么cookie又會(huì)給用戶帶來(lái)什么不好的方面？

?

當(dāng)攻擊者竊取到用戶cookie后，他就可以通過(guò)這些文件來(lái)模仿用戶，通過(guò)其中的認(rèn)證信息來(lái)登錄這些網(wǎng)站，這個(gè)策略已成為當(dāng)下越來(lái)越頻繁的攻擊途徑。

不錯(cuò)，竊取cookie可以追溯到Web的誕生，但是新的工具已經(jīng)發(fā)展到只需要敲擊空格就可以完成整個(gè)竊取過(guò)程；比如Firesheep，一個(gè)火狐瀏覽器附加組件，允許用戶來(lái)偷取別人的cookie。當(dāng)與虛假WAP配合使用時(shí)，cookie的竊取將變得異常簡(jiǎn)單。Firesheep可以顯示被發(fā)現(xiàn)cookie的名稱(chēng)和位置，只需要簡(jiǎn)單的敲擊鼠標(biāo)，攻擊者就可以竊取到session（更多詳情請(qǐng)?jiān)L問(wèn)Codebutler的博客“how easy it is to use Firesheep”）。

更糟糕的是，當(dāng)下攻擊者甚至可以竊取通過(guò)SSL/TLS保護(hù)的cookie以及輕易的發(fā)現(xiàn)它們。在2011年9月，一個(gè)被創(chuàng)造者冠以“BEAST”之名的攻擊證實(shí)了SSL/TLS保護(hù)的cookie同樣可以被獲得。經(jīng)過(guò)這些天的提高和精煉后，其中包括CRIME，讓竊取及重用加密cookie變得更加簡(jiǎn)單。

在每次cookie攻擊發(fā)布后，網(wǎng)站及應(yīng)用開(kāi)發(fā)者都被告知如何去保護(hù)他們的用戶。有些時(shí)候這個(gè)問(wèn)題的答案就是使用最新的加密技術(shù)，有些時(shí)候則是關(guān)閉一些人們不常使用的特性。問(wèn)題的關(guān)鍵在于所有Web開(kāi)發(fā)者必須使用安全的開(kāi)發(fā)技術(shù)去減少cookie竊取。如果你的站點(diǎn)已經(jīng)數(shù)年沒(méi)有更新加密技術(shù)，風(fēng)險(xiǎn)隨之產(chǎn)生。

經(jīng)驗(yàn)教訓(xùn)：即使加密的cookie仍然存在被竊取的可能，連接使用安全開(kāi)發(fā)并經(jīng)常更新加密技術(shù)的網(wǎng)站。你的HTTPS網(wǎng)站同樣需要使用最新的加密技術(shù)，包括TLS Version 1.2。

event.weibo.com/2572660
event.weibo.com/2572880
event.weibo.com/2573034
qing.blog.sina.com.cn/3790270974/e1eaf1fe3300474d.html
qing.blog.sina.com.cn/3790270974/e1eaf1fe3300474e.html
qing.blog.sina.com.cn/3790270974/e1eaf1fe3300474f.html
qing.blog.sina.com.cn/3790270974/e1eaf1fe3300474g.html
qing.blog.sina.com.cn/3790270974/e1eaf1fe3300474j.html
kan.weibo.com/con/3631156302874749?_from=title
kan.weibo.com/con/3631155791169556?_from=title
kan.weibo.com/con/3631153727571559?_from=title
kan.weibo.com/con/3631153169729006?_from=title
kan.weibo.com/con/3631152632857959?_from=title
blog.sina.com.cn/s/blog_e1eaf1fe0101bzet.html
blog.sina.com.cn/s/blog_e1eaf1fe0101bzes.html
blog.sina.com.cn/s/blog_e1eaf1fe0101bze8.html
blog.sina.com.cn/s/blog_e1eaf1fe0101bze5.html
blog.sina.com.cn/s/blog_e1eaf1fe0101bze1.html
mzwlkj503.blog.sohu.com/279708881.html
mzwlkj503.blog.sohu.com/279709127.html
mzwlkj503.blog.sohu.com/279709263.html
mzwlkj503.blog.sohu.com/279709263.html
event.weibo.com/2575304
event.weibo.com/2575380
event.weibo.com/2575420
t.163.com/event/info/eventId/-1691666635567965853
t.163.com/event/info/eventId/-2081335337170265088
t.163.com/event/info/eventId/-7086196866618650281
t.163.com/event/info/eventId/3026682333798781543
t.163.com/event/info/eventId/-2599083041402382331
t.163.com/event/info/eventId/3391224563825063495
4shared.com/photo/1_Oi9XbK/_20131008.html
4shared.com/photo/HkjUak7K/_20131008.html
4shared.com/photo/CWWt6Nud/_20131008.html
4shared.com/photo/WvtJJCOn/_20131008.html
4shared.com/photo/PMcRwuAk/_20131008.html
pan.baidu.com/s/1n9HSp
pan.baidu.com/s/1CClEG
pan.baidu.com/s/1qX5O5
pan.baidu.com/s/1l7Q1v
pan.baidu.com/s/17S3Qm
meilishuo.com/group/50827513
meilishuo.com/group/50827637
meilishuo.com/group/50827681
meilishuo.com/group/50827795
meilishuo.com/group/50827869
wenku.baidu.com/album/view/930ad5c6aa00b52acfc7cac2
wenku.baidu.com/album/view/d443cdd428ea81c758f578cd
wenku.baidu.com/album/view/ff12d18ca0116c175f0e48cc
wenku.baidu.com/album/view/3dab7f1d59eef8c75fbfb3cf
wenku.baidu.com/album/view/bd34bcd276eeaeaad1f330cf
home.xywy.com/xiaoerjibing/296188.html
bibitie.com/zhengzhou/erke/x142x15276867.html
bibitie.com/zhengzhou/erke/x142x15276903.html
bibitie.com/zhengzhou/erke/x142x15276925.html
home.xywy.com/xiaoerjibing/296195.html
bibitie.com/luoyang/erke/x142x15277002.html
bibitie.com/luoyang/erke/x142x15277021.html
bibitie.com/luoyang/erke/x142x15277154.html
sz-art.com/bbs/dispbbs.asp?boardid=8&id=16162&page=1&star=1
sz-art.com/bbs/dispbbs.asp?boardid=8&id=16163&page=1&star=1
sz-art.com/bbs/dispbbs.asp?boardid=8&id=16164&page=1&star=1
sz-art.com/bbs/dispbbs.asp?boardid=8&id=16165&page=1&star=1
sz-art.com/bbs/dispbbs.asp?boardid=8&id=16166&page=1&star=1
366club.com/users/817966/article/1360351.html
bbs.hc360.com/thread-4045450-1-1.html
bbs.hc360.com/thread-4045454-1-1.html
bbs.hc360.com/thread-4045459-1-1.html
366club.com/users/817966/article/1360906.html
bbs.hc360.com/thread-4045464-1-1.html
bbs.hc360.com/thread-4045465-1-1.html
club.baobao.sohu.com/primary_scho/thread/1tebav6kf9y
club.baobao.sohu.com/primary_scho/thread/1tebdarjwko
club.baobao.sohu.com/primary_scho/thread/1tebhdmk7jb
club.baobao.sohu.com/father/thread/1tebnqckgg6
club.baobao.sohu.com/father/thread/1tebphyd0we
club.baobao.sohu.com/father/thread/1tebslw4gci
player.56.com/deux_127128087.swf
56.com/p72/v_MTI3MTI4MTE3.html
zhihu.com/question/21770265?guide=1
zhihu.com/question/21770270?guide=1
zhihu.com/question/21770276?guide=1
zhihu.com/question/21770279?guide=1
zhihu.com/question/21770281?guide=1
zhengzhou.zhaotie.com/yiyuanzhensuo/1886702x.htm
zhengzhou.zhaotie.com/yiyuanzhensuo/1886710x.htm
zhengzhou.zhaotie.com/guanggaomeiti/1886714x.htm
zhengzhou.zhaotie.com/yanjiutang/1886715x.htm
zhengzhou.zhaotie.com/zhongbiao/1886718x.htm
user.qzone.qq.com/1848669038/blog/1381226259
user.qzone.qq.com/1848669038/blog/1381226324
user.qzone.qq.com/1848669038/blog/1381226359
user.qzone.qq.com/1848669038/blog/1381226401
user.qzone.qq.com/1848669038/blog/1381226445
xici.net/d194352052.htm
xici.net/d194395197.htm
xici.net/d194395228.htm
kuaipan.cn/file/id_190142776334090241.htm
kuaipan.cn/file/id_190142776334090245.htm
kuaipan.cn/file/id_190142776334090244.htm
kuaipan.cn/file/id_190142776334090243.htm
kuaipan.cn/file/id_190142776334090242.htm
ask.fm/marrythree/answer/69958579250
ask.fm/marrythree/answer/69958714930
ask.fm/marrythree/answer/69958919474
ask.fm/marrythree/answer/69958992178
ask.fm/marrythree/answer/69959074610
bbs.e23.cn/thread-175873945-1-1.html
xfw.cn/forum.php?mod=viewthread&tid=968824&fromuid=229702
xfw.cn/forum.php?mod=viewthread&tid=968825&fromuid=229702
xfw.cn/forum.php?mod=viewthread&tid=968826&fromuid=229702
xfw.cn/forum.php?mod=viewthread&tid=968827&fromuid=229702
xfw.cn/forum.php?mod=viewthread&tid=968828&fromuid=229702
haolaba.com/zhengzhou/erke/31239065.html
haolaba.com/zhengzhou/erke/31239071.html
haolaba.com/zhengzhou/baojianpin/31239085.html
haolaba.com/zhengzhou/guanggao/31239092.html
haolaba.com/zhengzhou/zhuangxiu/31239098.html
366club.com/users/817966/article/1366515.html
bbs.e23.cn/thread-175874082-1-1.html
wo.poco.cn/174385174/post/id/6406333
wo.poco.cn/174385174/post/id/6406342
wo.poco.cn/174385174/post/id/6406349
wo.poco.cn/174385174/post/id/6406358
wo.poco.cn/174385174/post/id/6406361
wo.poco.cn/174385174/post/id/6406368
event.weibo.com/2572474
event.weibo.com/2572584
event.weibo.com/2572694
event.weibo.com/2572836
event.weibo.com/2572912
event.weibo.com/2572976
book.weibo.com/booklist/511500
book.weibo.com/booklist/511514
book.weibo.com/booklist/511528
book.weibo.com/booklist/511536
book.weibo.com/booklist/511551
qing.blog.sina.com.cn/3547858114/d37804c233004dnz.html
qing.blog.sina.com.cn/3547858114/d37804c233004do0.html
qing.blog.sina.com.cn/3547858114/d37804c233004do1.html
qing.blog.sina.com.cn/3547858114/d37804c233004do2.html
qing.blog.sina.com.cn/3547858114/d37804c233004do3.html
blog.sohu.com/s/MjkzMDQyNDkz/279708853.html
blog.sohu.com/s/MjkzMDQyNDkz/279710205.html
blog.sohu.com/s/MjkzMDQyNDkz/279711472.html
blog.sohu.com/s/MjkzMDQyNDkz/279713369.html
blog.sohu.com/s/MjkzMDQyNDkz/279714712.html
blog.sina.com.cn/s/blog_d37804c20101g0gb.html
blog.sina.com.cn/s/blog_d37804c20101g0gd.html
blog.sina.com.cn/s/blog_d37804c20101g0ge.html
blog.sina.com.cn/s/blog_d37804c20101g0gg.html
blog.sina.com.cn/s/blog_d37804c20101g0gj.html
t.163.com/event/info/eventId/8850971022155925955
t.163.com/event/info/eventId/-8155978772986732982
t.163.com/event/info/eventId/-5454415439366805112
t.163.com/event/info/eventId/-3423694413771180282
t.163.com/event/info/eventId/556922698065672538
t.163.com/event/info/eventId/4339152182745536985
techbbs.zol.com.cn/10/55_93268.html
techbbs.zol.com.cn/10/55_93287.html
techbbs.zol.com.cn/10/55_93303.html
techbbs.zol.com.cn/10/55_93314.html
techbbs.zol.com.cn/10/55_93329.html
kan.weibo.com/con/3631157816636486?_from=title
kan.weibo.com/con/3631158819075370?_from=title
kan.weibo.com/con/3631159603792679?_from=title
kan.weibo.com/con/3631160337413687?_from=title
kan.weibo.com/con/3631161176274653?_from=title
kan.weibo.com/con/3631161910660344?_from=title
366club.com/users/803874/article/1356119.html
366club.com/users/803874/article/1356393.html
366club.com/users/803874/article/1358452.html
366club.com/users/803874/article/1360587.html
366club.com/users/803874/article/1360891.html
user.qzone.qq.com/2695470241/blog/1381221145
user.qzone.qq.com/2695470241/blog/1381221163
user.qzone.qq.com/2695470241/blog/1381221182
user.qzone.qq.com/2695470241/blog/1381221203
user.qzone.qq.com/2695470241/blog/1381221235
bibitie.com/zhengzhou/erke/x142x15275741.html
bibitie.com/zhengzhou/erke/x142x15275964.html
bibitie.com/zhengzhou/erke/x142x15276111.html
bibitie.com/zhengzhou/erke/x142x15276240.html
bibitie.com/zhengzhou/erke/x142x15276408.html
xici.net/d194391230.htm
xici.net/d194391420.htm
xici.net/d194391603.htm
xici.net/d194391748.htm
xici.net/d194391883.htm
bbs.ifeng.com/viewthread.php?tid=16524878
bbs.ifeng.com/viewthread.php?tid=16524904
bbs.ifeng.com/viewthread.php?tid=16524928
bbs.ifeng.com/viewthread.php?tid=16524964
bbs.ifeng.com/viewthread.php?tid=16524990
meilishuo.com/group/50834825
meilishuo.com/group/50835081
meilishuo.com/group/50835175
meilishuo.com/group/50835269
meilishuo.com/group/50835355
4shared.com/photo/rWwkYdsb/_20131008.html
4shared.com/photo/JyejlVH3/_20131008.html
4shared.com/photo/2Vp8aE-K/_20131008.html
4shared.com/photo/sXMrX3db/_20131008.html
4shared.com/photo/CTPAHegn/_20131008.html
bbs.hc360.com/thread-4045458-1-1.html
bbs.hc360.com/thread-4045467-1-1.html
bbs.hc360.com/thread-4045471-1-1.html
bbs.hc360.com/thread-4045476-1-1.html
bbs.hc360.com/thread-4045479-1-1.html
bbs.e23.cn/thread-175873511-1-1.html
bbs.e23.cn/thread-175873540-1-1.html
bbs.e23.cn/thread-175873552-1-1.html
bbs.e23.cn/thread-175873562-1-1.html
bbs.e23.cn/thread-175873567-1-1.html
blog.39.net/w051233/a_16222596.html
blog.39.net/w051233/a_16222601.html
blog.39.net/w051233/a_16222609.html
blog.39.net/w051233/a_16222618.html
blog.39.net/w051233/a_16222625.html
douban.com/note/309242256/
douban.com/note/309242973/
pan.baidu.com/s/1EEfo4
pan.baidu.com/s/1wxlOn
pan.baidu.com/s/1qr8zd
pan.baidu.com/s/1kRTNe
sz-art.com/bbs/dispbbs.asp?boardid=8&id=16173&page=1&star=1
sz-art.com/bbs/dispbbs.asp?boardid=8&id=16174&page=1&star=1
sz-art.com/bbs/dispbbs.asp?boardid=8&id=16175&page=1&star=1
sz-art.com/bbs/dispbbs.asp?boardid=8&id=16176&page=1&star=1
sz-art.com/bbs/dispbbs.asp?boardid=8&id=16177&page=1&star=1
home.xywy.com/xiaoerjibing/296309.html
home.xywy.com/xiaoerjibing/296312.html
home.xywy.com/xiaoerjibing/296313.html
home.xywy.com/xiaoerjibing/296314.html
home.xywy.com/xiaoerjibing/296316.html
ask.fm/w120833/answer/103071446427
ask.fm/w120833/answer/103071468443
ask.fm/w120833/answer/103071477403
ask.fm/w120833/answer/103071497115
ask.fm/w120833/answer/103071513243

總結(jié)

以上是生活随笔為你收集整理的PCWorld的全部?jī)?nèi)容，希望文章能夠幫你解決所遇到的問(wèn)題。

如果覺(jué)得生活随笔網(wǎng)站內(nèi)容還不錯(cuò)，歡迎將生活随笔推薦給好友。