成人小说亚洲一区二区三区,亚洲国产精品一区二区三区,国产精品成人精品久久久,久久综合一区二区三区,精品无码av一区二区,国产一级a毛一级a看免费视频,欧洲uv免费在线区一二区,亚洲国产欧美中日韩成人综合视频,国产熟女一区二区三区五月婷小说,亚洲一区波多野结衣在线

立即打開
又現(xiàn)黑客入侵,又見事故遲報(bào)

又現(xiàn)黑客入侵,又見事故遲報(bào)

Dan Mitchell 2011-06-13
花旗集團(tuán)最近報(bào)告了一起黑客入侵事件,但發(fā)生時(shí)間已經(jīng)是1個(gè)多月前了。大公司們是時(shí)候?qū)ο到y(tǒng)安全問題開誠布公了。

First 4 digits of a credit card

圖片來自維基百科

????鑒于近期頻頻發(fā)生網(wǎng)絡(luò)黑客入侵事件,引發(fā)廣泛關(guān)注,2011年或許可以稱為“黑客之年”。但問題在于,2012年的網(wǎng)絡(luò)完全形勢很可能將更加嚴(yán)峻。

????T惡意軟件專家蒂姆?阿姆斯特朗接受《網(wǎng)絡(luò)安全日報(bào)》(Security News Daily)采訪時(shí)稱,深層次原因在于“許多大型跨國公司的安全意識(shí)松懈”,“對(duì)于目的明確的團(tuán)體或個(gè)人,一些公司的(安全屏障)已變得微不足道?!?/p>

????最新曝光的這起黑客入侵事件發(fā)生在1個(gè)多月前,但直至上周四才公諸于眾。花旗集團(tuán)(Citigroup)表示,約21萬名客戶(占其北美信用卡持有者的1%)的信息被竊取,這些信息包括信用卡號(hào)和電子郵箱等聯(lián)系信息。該行表示,其他數(shù)據(jù),如社會(huì)保障號(hào)碼、出生日期、信用卡失效日期以及信用卡驗(yàn)證碼都安然無恙。

????花旗沿襲了目前此類事件常見的處理模式,沒有在事件發(fā)生的第一時(shí)間或是隨后的幾周發(fā)布任何警告。這一模式令人憂慮。事實(shí)上,如果不是《金融時(shí)報(bào)》(Financial Times) 上周三晚間曝出這則消息,迫使其不得不表態(tài),花旗可能會(huì)繼續(xù)保持沉默。花旗向媒體發(fā)布了一份聲明,但截至上周四下午,花旗集團(tuán)網(wǎng)站,包括其新聞稿一欄,都沒有明確提及黑客入侵事件。

????無獨(dú)有偶,今年4月份PlayStation網(wǎng)絡(luò)遭到入侵后,索尼(Sony)也決定延遲一周后再通知客戶;據(jù)報(bào)道此次入侵是“黑客行動(dòng)主義者”組織Anonymous所為。3月份,黑客入侵威脅到客戶洛克希德-馬丁航空航天公司(Lockheed Martin)的信息安全。事件曝光后,EMC信息安全部RSA Security上周早些時(shí)候提出為數(shù)百萬用戶更換新的ID安全令牌。

????立法委員們對(duì)此深感憂慮。美國參議員帕特里克?利奇(民主黨人-佛蒙特州)本周提出了《個(gè)人數(shù)據(jù)隱私和安全法案》(Personal Data Privacy and Security Act)。根據(jù)該法案,企業(yè)掩蓋數(shù)據(jù)被盜事件將構(gòu)成犯罪。該法案同時(shí)將建立一個(gè)全國統(tǒng)一的黑客事件報(bào)告標(biāo)準(zhǔn),取代目前各州各行其道的做法。

????很難說近期黑客入侵事件頻現(xiàn)背后有什么特別的原因。部分原因可能是在黑客和信息安保部門間無休止的貓捉老鼠游戲中,黑客目前暫時(shí)占據(jù)了上風(fēng)。

????但毫無疑問,這一系列黑客入侵事件在某種程度上也是一種跟風(fēng)行為。此次入侵花旗系統(tǒng)的黑客顯然是純罪犯,看中的是經(jīng)濟(jì)利益。而近期其他許多黑客入侵則是所謂的“灰帽”攻擊行為,目的是為了出名、找刺激、炫技,或者僅僅只是為了揭示某一機(jī)構(gòu)的電腦系統(tǒng)是多么不堪一擊。此類攻擊往往公開聲明支持某一事業(yè),比如LulzSec在攻擊PBS網(wǎng)絡(luò)服務(wù)器時(shí)宣稱是為了抗議Frontline對(duì)布蘭德利?曼寧/維基解密(Wikileaks)案的報(bào)道。顯然,近期其他幾宗黑客入侵案,包括Fox News和索尼的案子,該組織同樣難辭其咎。

????PlayStation入侵案曝光之后,LulzSec宣稱對(duì)數(shù)宗針對(duì)索尼系統(tǒng)的黑客入侵事件負(fù)責(zé)。其中最近的一起發(fā)生在上周四早間,據(jù)報(bào)道LulzSec宣稱從Sony Developer Network竊取了54兆的源代碼以及Sony BMG的內(nèi)部網(wǎng)絡(luò)圖。這些數(shù)據(jù)發(fā)布在BT跟蹤服務(wù)器網(wǎng)站Pirate Bay上。

????PlayStation黑客入侵案很可能是這一系列事件的導(dǎo)火索——顯然該公司的系統(tǒng)非常不安全,容易使其成為攻擊目標(biāo)。

????但不管如何,可以明確的是,包括私營企業(yè)和政府部門在內(nèi)的各個(gè)組織都將加大安全投入,同時(shí)在系統(tǒng)遭到入侵時(shí)采取更加開誠布公的態(tài)度。

????Given the number of recent, high-profile network security breaches, it might be tempting to call 2011 the Year of the Hack. The danger is that there's a good chance 2012 might be even worse.

????The underlying reason for this is the "lax security posture of many large-scale global companies," the malware expert Tim Armstrong told Security News Daily. It has, he added, "now become almost trivial for a motivated group or individual to find a way in."

????The latest known hack, which occurred more than a month ago, was announced this morning: Citigroup (C) said information for about 210,000 customers, or 1% of its credit-card holders in North America, was stolen. The information included card numbers and contact information including email addresses. The bank said other data, such as Social Security numbers, birth date, expiration dates and card verification numbers were not compromised.

????In what is becoming a disturbingly familiar pattern, Citi decided not to issue any warnings about the breach when it occurred, or for several weeks following. In fact, it might still be mum if the Financial Times had not broken the story late last night, prompting Citi to confirm it. The company issued a statement to the media, but as of Thursday afternoon, there is no obvious mention on Citigroup's website of the attack, including on its press-release page.

????Likewise, Sony (SNY) decided to wait a week to inform its customers in April when its PlayStation Network was breached, reportedly by the "hacktivist" group Anonymous. Earlier this week, RSA Security, a division of EMC (EMC), offered to replace millions of customer secure ID tokens after it became known that a hack into its system back in March exposed its customer, Lockheed Martin (LMT), to a security breach.

????Lawmakers are becoming frustrated. U.S. Sen. Patrick Leahy (D-Vt.) this week introduced the Personal Data Privacy and Security Act, which would make it a crime for companies to conceal data breaches, and would create a national standard for reporting hacks, replacing the many disparate state laws now in place.

????It's hard to cite any particular reason why there have been so many high-profile hacks recently. Partly, it could be that in the endless cat-and-mouse game between hackers and security teams, the hackers have jumped ahead.

????But it's also no doubt partly trendmongering. The Citi hackers are apparently pure criminals, motivated by financial gain. Many of the other recent hacks are so-called "grey-hat" attacks. That is, they're done for publicity, for thrills, just to show off, or to reveal how bad an organization's computer security is. Often they're ostensibly done in support of a cause, as when LulzSec claimed it hacked PBS's Web servers to protest Frontline's coverage of the Bradley Manning/Wikileaks case. That group is apparently responsible for several other recent hacks as well, including on Fox News and Sony.

????LulzSec has claimed credit for several hacks on Sony's systems in the wake of the PlayStation breach. The latest came just this morning, when the group reportedly claimed to have lifted 54 megabytes of source code from the Sony Developer Network, along with maps of Sony BMG's internal network. The data was posted to Pirate Bay, the Bittorrent tracker site.

????The PlayStation hack likely motivated the subsequent attacks – the company's systems clearly are woefully insecure, making them a tempting target.

????Whatever the motivations though, it seems clear that organizations including private companies and governments going to have to invest more in security, and they're going to have to start being more forthcoming when their systems are breached.

掃描二維碼下載財(cái)富APP
欧美日韩免费观看| 久久久久青草线蕉综合超碰| 三级全黄的视频在线观看| 国产农村一级毛片新婚之夜| 亚洲成无码人在线观看| 日韩一区二三区国产好的精华| 久久天天躁狠狠躁夜夜爽| 国语对白露脸XXXXXX,亚州av综合色区无码一区| 成人午夜a级毛片免费| 人与禽性视频77777| 久久精品www人人爽人人| 99久久国产综合精品五月天喷水| 大学生高潮无套内谢视频| 国产大屁股喷水视频在线观看| 亚洲AV永久纯肉无码精品动漫| 亚洲天天做日日做天天谢日日欢| 亚洲日韩最大精品无码网站| 亚洲第一综合天堂另类专| 精品国产乱码一区二区三区麻豆| 成人无码高潮av在线观看| 在线看国产三级在线| 国产午夜激无码av毛片不卡| 亚洲高清国产av拍精品青青草原| 我国产码在线观看AV哈哈哈网站| 色视频一区二区三区网网网网 | 色欲aⅴ蜜臀视频一区二区| 一二三四在线观看免费高清在线观看动漫版| 久久中文字幕人妻熟AV女| 一级特黄AAA大片在线观看| 精品无码一区二区三区 | 欧美成人性毛片视频| 国产精品麻豆成人AV| 免费一级欧美片在线观看亚| 在线点播亚洲日韩国产欧美| 日韩a片免费无码完整版电影| 国产一级精品无码免费视频| 一级特黄AA大片欧美视频| 亚洲AV日韩AV无码AV| 国产做床爱无遮挡免费视频| 国产熟妇人妻ⅩXXXX麻豆| av电影在线观看不卡的|