��Ϣ��ȫ��ǿ�� ½ذ�ȫ©��

2012-8-13

��2012��ϰ��꣬�ҹ��Ҫ��Ϣ��Ʋ��ֹۡ��°��꣬�߼��ɳ��Ե��Թ��ƶ��ն˶��ҹ��Ϣ��ȫ��С��ս��ͬʱ��ݷ��밲ȫ��ںϷ�չ��򽫸��ҹ��Ϣ��ȫ��Ͳ�ҵ��չ��

��2012��ϰ��꣬�ҹ��Ҫ��Ϣϵͳ��ȫ�¼��෢��Ϣ��ȫ��Ʋ��ֹۣ��Ҫԭ��Ϣ��Ʒ�߶��ڡ��ȫ��ʩ��㡢��Ϣ��ȫ��в�仯ȱ��ЧӦ�Եȡ��°��꣬�߼��ɳ��Ե��Թ��ƶ��ն˶��ҹ��Ϣ��ȫ��С��ս��ͬʱ��ݷ��밲ȫ��ںϷ�չ��򽫸��ҹ��Ϣ��ȫ��Ͳ�ҵ��չ��

����ϰ��ƽ�� ȫ��̴�

��1.��Ϣ��ƽ�ȡ�

��ϰ��꣬�ҹ��Ϣ��ƽ�ȣ��Ǹ��ָ��δ��ɽϴ�Ӱ��Ļ��й��ϣ�δ��ش��簲ȫ�¼��Ϊ��Ҫ��ɣ��ϵͳ��˼��ȫ�¼��δ��ɴ��Ӱ�죬��¼��Ի��簲ȫ��в��ֵ�ù�ע��磬1��30�գ��ϵͳ��ϣ��ڲ��ֵ��ֶ��ݷ��ʹ��ϣ�2��7�գ��Ϸ˽��ƹ��վ֮��ҹ��ʳ��Լ��ϡ��֡��ա��㶫��㽭�ȶ��ʡ�ݵ��쳣��

��2.��Ҫ��ϢϵͳƵ�⹥��

��ϰ��꣬�ҹ��ҵ��ں��վƵ�⹥��վ��֡��۸ĺͱ��Ȱ�ȫ�¼��෢��ݹ��һ��Ӧ��(CNCERT)��⣬2012��1�¡�4�£��ҹ��ڱ��۸��վ��ֱ�Ϊ1888��1853��2035��1957��ҵ��վռ��й��Ϣ��ȫ©��(CNNVD)��⣬2012��1��-4�£��ҹ��ڱ��վ�ֱ�Ϊ5106��9608��6683��3715��ҵ��վռ��2012��1��-4�£��й��վ��϶��վ8451��֧��ࡢ��֤ȯ��վռ��90%�ķݶ

��ҹ��Ҫ��Ϣϵͳ�Ĺ��У��ֵ�ù�ע��һ�ǳ��ζ��Ĺ��ϰ��꣬��ҹ��ġ��ζ��ĺڿͻ��Ƶ��磬3��Ϊ��й��ĺڿ��֯��ҹ��500��վ��Ŀ��Ǵݻ١��й��Ĵ��ǽ��4�£��ҵ�֮��ɱ��ڿ͹��ҹ��վ��Ǹ߼��ɳ��Թ��(APT)��3�£��ƿƼ��й��⵽һ��Խ��ҵ��APT��ò��Ҫ��֤ȯ��еȽ��ҵ�û��û��Ѿ��һ��ʱ�䡣

��3.�ƶ��ն˶��Ѹ��

��ֻ��Ŀ��ռ��ƶ��ȫ��͹�ԡ��Ѷ�ƶ��ȫʵ��ݣ�2012��1��-5�£��ػ��ֻ��5�·ݴﵽ��8089��У��԰�׿ƽ̨�Ķ��Ѹ�ͣ�4�¡�5�·��ﵽ70%��5�·ݰ�׿ƽ̨��ռ��Ľ�80%��û��ɶ��۷ѡ��ȡ��˽��⴫��ƭ��թ��ʷ��ĵ��𺦡��磬��ʳ��㡱��αװ��60��Ӧ�ã�ͨ��ָ��ѣ��Ϸ��顱��αװ��Ϸ��˽��200��û��ܺ��

��4.��Ϣ��й¶�¼��෢��

��ǰıȡ��Ǻڿ͹��ҪĿ��֮һ��ϰ��꣬�ҹ��񡢽��ڵȻ��Ϣй¶�¼��㷺��ע��磬��̳ǡ��1�ŵ�ȵ��վ��˻��Ϣй¶��û��˲�ͬ�̶ȵ��ʧ��й��类��ΪSwagg Sec�ĺڿ��֯��ƣ��900��Ա��û��Ϣ��ȡ��⣬��һЩ�ڲ��Ա��й��¼��磬��̡��̵��Ա��ͼ��ۿͻ��ű��п��Ϣ��¿ͻ��ʽ𱻵��

��⹥�� ڿͻƵ��

��1.��繥��ҹ��ٵ��Ҫ��в֮һ

��ڰ�ȫ��㡢��Ϣ��ȫ��ʶ��ԭ��ҹ��ڴ��ľ��ʬ��ơ��CNCERTͳ�ƣ�2011�꾳��н�4.7��IP��ַ��Ϊľ��ʬ��Ʒ��ҹ��ڽ�890��2012��1��-4�£��ľ��ʬ��Ʒ��IP��ֱ�Ϊ10287��8213��10711��9005��Ŀǰ��ձ��ͺ��Ǿ��繥��Ҫ��Դ��繥��ʹ��ܺ��ͬʱ��ͨ��ƾ��ҵĹ��Ӷ�ʹ�ҹ��ʵ�ϳ�Ϊ��Щ��ġ��򡱣��ҹ�Σ��ܴ�

��2.��Ϣ��Ʒ©��ࡢ��͸��õķ��ո�

��ǰ��ҹ��Ϣ��Ҫ��Ϣϵͳʹ�õ��Ϣ��Ʒ�ܶ��ǹ��Ʒ��Щ��Ʒ��ɱ��ش��ڰ�ȫ©��CNNVD��⣬2012��1��-5�£��ҹ��ȫ©��2619��Σ��͸�Σ©��1071��ռ��©��41%��Ʒ��ȫ©��һ��ã��в�ҹ��Ϣ��ȫ��磬2012��3�·��ֵ�Google Chrome��ִ��©��߿��ø�©��ִ��룻��磬Ӣ��о��Ա��ڲ��787��һЩ��õ��ϵͳ��Ӧ�õ�оƬ��ذ�ȫ©��ڿͿ��ø�©��ϵͳ��ϵͳ��ң�ز��ݡ�

��3.��Ϣ��Ҫ��Ϣϵͳ�İ�ȫ��ڲ��

��һ��棬��ǰȫ��簲ȫ��в��渴�ӣ��ҵ��֯��Ϊ��繥��壬��Ŀ�Ŀ��ƻ��ؼ��ʩ��µİ�ȫ��в��ͳ�İ�ȫ��ʩ��Ч��ã��Ҫ��ڷ��յġ��̬�ķ��ϵ��ҹ��̬�Ƹ�֪��Ӧ��в�ļ��з��ϻ��һ��棬��ǰ�ҹ��Ϣ��Ҫ��Ϣϵͳ�ڰ�ȫ��͹��в��λ�ĵط��磬��ҵ��վ��ķ�ʽ�洢��룻�й��Ž��Ա��Ҫ��Ϣ�洢��һ��ȫ��SQL��ϡ�

����°��Ԥ�⡡�Ϸ��Թ��

��1.��Ҷ��ҹ��ƽ��ǿ

��һֱ��Ҷ��ڳ��й��ڿ��в��ͼ��ҹ��Ϊ��簲ȫ��Ĺ��У��ҹ��չ��ϰ��꣬Ӣ��ý��ơ��й��ڿ�Ϊ��ȡ�鱨��α�챱Լ��ס��˺š��Ĵ��Ե��й��繥��Ϊ�ɣ��ܾ��Ϊ��˾��Ĺ��ҿ��Ŀ��ǰ��ʵ��е�˫�ر�׼��ʶ��̬��ս�Ծ��ռ䣬��ȴ��ڼ�ǿ��ռ�ġ��ᡱ��ڹ��ս��ͬ�ˡ��磬ŷ�޺��ձ��ȷ��ռ䣻��Լ��Ҫ�ڱ�Լ��ڽ��硰��͹��ȡ��°��꣬��ȴ��Ʊػ��ǿ��ϵ��衢��ʹ��ƶ��ȣ��ǿ��ռ�Ӱ��ͬʱ��һ��ʵʩ��ҹ��ơ�

��2.��Թ��ҹ��Ϣ��ȫ��ս

��ǰ��ȫ��簲ȫ��в��ڷ��µı仯��Ŀ��Ը�ǿ��Ե��繥��°��꣬�ҹ��Թ��ս��һ�Ǹ߼��ɳ��вʹ�ؼ��й¶�ķ��ռӴ󡣽��ϰ��꣬һ�ֱȡ��ӵġ��桱��ϯ��ж��ò��ʮ��ǿ��ռ��ҵ��ϢΪĿ�ģ��м�¼�û��˻��롢�Զ��Խ��ʱ��¼��ȹ��ܡ��ݼ�⣬�ò��Ѹ�Ⱦ�ҹ��⽫��ҹ��ҵ��Ҫ��ŵ��ݱ��в��Ǻڿ��֯��ζ��ܶ��ҹ��ҵĹ��2011��س�Ϊ�ڿͷ��ԭ��֮һ��ߡ�(Anonymous)��¬��Ȱ�ȫ��(LulzSec)�Ⱥڿ��֯��๥��ϰ�� й��ҹ��Ĺ��ƽ��Ը��վ��Ŀǰ��֯û�н�һ��ж��ų��°��ж��Ŀ��ԣ��佫��ѡ��ҹ�һЩ��վ��ԵĹ��С�֤ȯ��͵��֧��ȵĹ��࣬��Ӹ��ӡ��в��

��ǿ�ƶ��ն˷��

��1.�ն˶��ƶ��ȫ��⽫��ͻ��

��ƶ��Ŀ��ٷ�չ��ƶ��ն˳�Ϊ��⹥��ҪĿ�꣬��׿ƽ̨��ڿ��Ը��ܵ��ƿƼ��˾�ı��棬�ں�ݮ��ƻ��iOS��΢��Windows Phone 7�Ͱ�׿��ϵͳ�У��׿ϵͳ�İ�ȫ��Ŀǰ��ڻ��ڰ�׿ƽ̨��ֻ��Ѿ�ռ��60%��ϵķݶ��׿ƽ̨��û��Ӧ��Ҳ�Ծ��˵��ٶ��ϰ��꣬�ҹ��԰�׿ƽ̨��ֻ��Ԥ��°��Խ��ܻ��ȡ�ֻ��豸��ݣ��λ�÷��û��ȣ��û��Ϣ��ȫ��ͬʱ��ƶ��豸�칫��ڱ�Խ��Խ��ҵ��ܡ�Ա��ʹ��Լ��ƶ��豸�칫��һ��ҵ��Ϣ��й¶�ķ��ա��Ҫԭ��ǣ��ҵ��ƶ��豸��¼��ҵ��δ��ȡ��Ҫ�İ�ȫ��ֶΣ��ݵ��ʾ��ȫ��֮һ��ҵ��ҵ��ȡ�˴�ʩ��Ա��ȫ��ʶ��㣬�ƶ��豸��ڰ�ȫ��⣻һЩԱ��ܻ��ҵ��֪��£�˽��ȡ��ҵ��ݺ��Ϣ��°��꣬Ԥ�ƽ��и��й��ҵ��Ƕ�Ա��Դ��ƶ��豸��ȫ��

��2.��ݷ��򽫴��簲ȫ��ı��

��ǰ��ȫ��Է��ٶ��ݳƣ�Ŀǰ��ڵ�90%��ڹ�ȥ��䣬��Щ��Դ��׼�¼��ͼ��Ƶ��罻ý�塢��־�ȡ��ʾ��2015��ȫ��ݴ洢��ﵽ800��PB��֯һ��ģ��й¶��ɵ��ʧ��ʮ�־޴󡣿��˵��ݶ��簲ȫ��ս��ͬʱ��ܹ��ȷʹ�ô��ݣ��ھ��õ��Ϣ��Ϳ��Ա��֯��ܸ߼��в�Ͷ��

��ٴ뱣��Ϣ��ȫ

��1.ǿ��Ϣ��Ҫ��Ϣϵͳ�İ�ȫ��

��ǿ��Ϣ��Ҫ��Ϣϵͳ�İ�ȫ��͹��Ҫ��Ϣϵͳ�ͻ��Ϣ��밲ȫ��ʩͬ��滮��ͬ��衢ͬ��С��ǿ��ȫ��簲ȫ��в�ļ��ӿ콨��з��ֺ��ֹ��в̬�Ƹ�֪��µ��Ϣ��ȫ��ϵ��

��2.�Ӵ�Թ��һ��ݺ��û��Ϣ�ı��

��ǿ��ҵ��羭�û�б��һ��ݵ��Ρ��ӿ��ƶ��Ϣ��ɷ��ĳ�̨��ϸ�綨��մ��û��Ϣ��ݵ��ҵ��Ϣ��ʹ��Ȩ�޼��Χ��Լ�й¶��Ӧ��е��ε��ݣ��ƶ��ر�׼�淶��ʵ��

��3.�ӿ��Ϣ��Ʒ�Թ��Ʒ��

��Ӵ��Ϣ��ȫ��ϻ��з��ʽ�Ͷ�룬��ǿ�߶�ͨ��оƬ��ϵͳ��ݿ⡢�м��Ȼ��أ��ҹ��Ϣ��ȫ��Ʒˮƽ��

��4.��ǿ�ҹ��ƶ��İ�ȫ��

��֯��к��оƬ��ϵͳ��ƽ̨�ȼ��硢�նˡ�Ӧ��İ�ȫ��ص㹥�أ��ͻ�Ƽ��ƿ��ҹ��ֺʹ��ṩҵ��Ϣ��ȫ��յ��

��5.���ĺ��

��Ϣ��ȫ�ش��в��ͨ��ƣ�̽��Ҽ䡢��Ӧ��ش�ͻ��¼��Ϣͨ��ٴ��Ļ��ƣ��ǿ��Ϣ��ȫ�¼�Ӧ��еĽ��

��Դ�� ��й��ӱ��