Study on Social Engineering Attack in Network Confrontation Technology

The Theory of Society Engineering and Its Philosophy Problem

社会工程学及其哲学问题

互联网摘选

Analysis of Mechanisms and Preventive Measures of Social Engineering Intruding Network

浅析社会工程学入侵网络的机制与防范措施

互联网摘选

Design the expert system based on CBR technology to realize the target classification and self-learning ability of system. To make attacking-decision according to similar case in case library which is searched based on the information of social engineering.

使用CBR技术设计专家系统，实现对目标对象分级和系统自学习，以社会工程学信息作为特征属性进行案例库检索，匹配相似案例进行攻击方案的决策。

互联网摘选

Phishing attacks, as a typical online fraud and criminal activities, having become increasingly rampant with the expansion and prosperous of the Internet related e-commerce trading platforms, gave rise to increasing economic losses.

钓鱼式网络攻击作为一种典型的网络欺诈犯罪活动，随着电子商务等互联网交易平台的兴起而日益猖獗，给人们带来了越来越大的经济损失。

互联网摘选

E-mail is at risk-vulnerable to external attack from viruses, spam, spyware and phishing technologies.

电子邮件存在风险&易受病毒，垃圾软件，间谍软件以及钓鱼技术的攻击。

互联网摘选

Cyber crime such as phishing attacks has numerous, the root of the problem is that digital identity is not reflected when Internet is designed.

钓鱼网站攻击，网络犯罪已经数不胜数，问题的根源是数字标识的概念没有体现在互联网的设计中。

互联网摘选

This could mean logging down all DNS queries& which is also useful to track down suspicious traffic trends from phishing attacks.

这可能意味着记录所有DNS查询-这对从钓鱼式攻击追捕可疑流量趋势也是有益的。

互联网摘选

The email correspondence that leaked in the wake of the recent hack showed that Sony Pictures Entertainment may have been operating without adequate protection against phishing attacks, remote-access Trojans, password management policies, proper use of encryption, data storage, and backups, Miliesky says.

米里夫斯基称，在最近的黑客攻击中泄露的电子邮件通讯，证明索尼影视娱乐公司没有采取足够措施来防范网络钓鱼攻击和远程访问木马，没有有效的密码管理策略，也没有恰当地进行加密、数据储存和备份操作。米里夫斯基表示：

互联网摘选

This time, Google laid the blame for the latest security intrusions on so-called phishing attacks or other similar techniques that had been used to trick e-mail users into giving away their passwords, rather than any breach in its own systems.

这一次，谷歌称最新的黑客行为是所谓钓鱼攻击，或是基于类似的技术。这类技术可以诱骗电子邮件用户泄露密码，而无需入侵系统本身。

互联网摘选

WebAuthn promises to protect users against phishing attacks and the use of stolen credentials as there will be nothing to steal, the authentication token is generated and used once by their specific device each time the user logs in.

“网络认证”标准将使用户无需担心受到网络钓鱼攻击，也不用担心认证信息被盗用，因为本身就没什么可偷的。每次用户登录网站，都会生成特定设备才可使用的一次性身份认证指令。

互联网摘选

The massive Phishing attacks, which usually spread by emails, make users suffering from significant financial losses and suspecting the websites about E-bank or E-commerce. It impacts the development of E-commerce.

网络钓鱼攻击主要是通过邮件方式传播的，大量的网络钓鱼攻击使得用户遭受到巨大的经济损失。巨额的损失导致用户不信任网上银行和电子商务网站，并严重影响到电子商务的发展。

互联网摘选

In order to avoid more losses of businesses and individuals, researchers proposed defense program to against phishing attacks gradually, anti-phishing has become a new hot spot in network security field.

为了避免更多的企业和个人遭受损失，研究人员提出针对网络钓鱼攻击的防御方案，反网络钓鱼成为网络安全领域一个新的热点。

互联网摘选

There are many angles to prevent phishing attack which can be divided into three categories: filtering phishing e-mail, filtering domain and using heuristic feature to detect visited pages.

反钓鱼攻击防御方法可分为三大类：对钓鱼邮件进行过滤、对网站域名进行过滤及利用启发式特征检测网页。

互联网摘选

Then, based on the characteristics of phishing, the paper proposes a kind of authentication model with both two-factor authentication advantages and two-way authentication advantages to defend against phishing.

然后，针对钓鱼攻击本身的特点，提出了一种同时具备双因素认证和双向认证优点的认证模型来防御钓鱼攻击。

互联网摘选

As well as phishing attacks, some gangs implant spying software-known as'malware'-on their targets'computers to track every website they visit and every password they use.

除了网络钓鱼攻击之外，一些团伙还在他们攻击对象的电脑上装入名为“恶意软件”的暗植间谍软件，以此来跟踪他们浏览过的网页并记录下他们所使用的每一个密码。

互联网摘选

The innocence of humans [ gullibility?] that allows criminals to trick them into installing malware on their machines, responding to phishing attacks, etc.

人的纯真[受骗？]受罪犯哄骗而在机器上安装恶意软件，响应网络钓鱼攻击，等等。

互联网摘选

Utilizing a spear phishing attack, hackers disabled the electronic controls that turned off the plant's furnaces, causing damage to the entire plant.

黑客利用网络钓鱼攻击，使得负责关闭熔炉的电子控制系统陷于瘫痪，最终造成整个工厂严重受损。

互联网摘选

Because most of phishing attacks would establish a fake website to get the victims' information, many defense programs aim at websites detection.

大多数钓鱼攻击都要建立一个仿冒的网站来获取被攻击者的信息，因此很多防御方案都是针对假冒网站进行检测。

互联网摘选

From the view of network attack, this paper abstracts three models of phishing and introduces detailedly its implement mechanism and key techniques.

论文从网络攻击的角度，提炼出了三种钓鱼攻击的模型，并对其实现机理、关键技术进行了比较详细的剖析。

互联网摘选

Network Phishing attacks use both social engineering and technical subterfuge to steal consumers' personal identity data and financial account credentials.

网络钓鱼攻击是指利用社会工程学和技术手段窃取消费者的个人资料以及金融账户身份认证证书。

互联网摘选