here2dl
   
 ▃︴
|
分享:
▼
x1
|
 [心得分享] [原创] 网路安全基础 (中文/英文)
目录 Index [原创] 关于Internet Security #1 (中文/英文) [原创] Internet Security Guide - 个人密码 (中文/英文) [原创] Internet Security Guide - 保护你的电脑 (中文/英文) [原创] Internet Security Guide - 小心电脑身分外漏 (中文/英文) [原创] Internet Security Guide - 甚么是VPN (中文/英文) [原创] Internet Security Guide - 运用VPN (中文/英文) [原创] Internet Security Guide - 防火墙 (中文/英文) [原创] Internet Security Guide - VPN与防火墙 (中文/英文) [原创] Internet Security Guide - 邮件炸弹 (中文/英文) [原创] Internet Security Guide - 木马屠城 (中文/英文) [原创] Internet Security Guide - 网页攻击 (中文/英文) 其他相关: [原创] 商务与VPN基础 (中文/英文) http://bbs.mychat.to/read.php?tid=6628[原创] 关于Internet Security #1 (中文/英文)
日期: 2000年8月至2001年2月
作者: Stephen Lin (stephen930@hotmail.com)
曾发表于ICRT美军广播电台每日新闻中(Aug.2000~Feb.2001)
目前文章只发表于数位男女http://bbs.mychat.to
-严禁转贴-
If you’re apprehensive about security while roaming the internet, you’re not alone. A recent survey in the United States shows that nearly 70-percent of netizens fear online attacks from hackers…and a whopping 84-percent say they’re concerned about online businesses invading their privacy. As a matter of fact, a major global furniture retailer had to shut down its web site after a privacy breach exposed the personal information of thousands of customers.
你在上网遨游的同时，会担心安全的问题吗？美国最近一项调查指出，全美所有的网路使用者中，有将近七成担心网路骇客的攻击，另外更有高达百分之八十四的人，表示害怕网路商业会侵犯个人隐私。事实上，最近一家大型的国际家具经销商，正因保密措施不当，泄露了数千名顾客的个人资讯而被迫关闭网站。
Yet even as netizens express anxiety about being monitored online, consumer’s ability to protect their privacy is hampered by their own unfamiliarity with the basic mechanics of internet security. For example, 56-percent didn’t even know what an Internet cookie is. Compounding the problem--many web surfers forget common-sense, and freely respond to email from strangers or leave personal information available online.
尽管网路消费者对可能在线上遭到监视而感到不安，他们保护隐私的能力，却更因本身对网路安全的基本架构了解不多，而大打折扣。更糟的是，许多人上网却忘了基本常识，而随意回覆来自陌生人的电子邮件，或在网站上留下个人资讯。在隐私可能被侵犯、信用资料可能被窃取的情况下，消费者及商家各应采取何种网路安全措施？这是一个你我都应切身思考的问题。
As e-commerce become more and more prevalent; whether you’re selling or buying over the net, it’s time to beef up your security.
by here2dl
[原创] Internet Security Guide - 个人密码 (中文/英文)
日期: 2000年8月至2001年2月
作者: Stephen Lin (stephen930@hotmail.com)
曾发表于ICRT美军广播电台每日新闻中(Aug.2000~Feb.2001)
目前文章只发表于数位男女http://bbs.mychat.to
-严禁转贴-
Today, passwords are an important tool for protecting your privacy. But on the Internet, passwords can only provide the most basic of protection. To maximize their effectiveness, keep these pointers in mind. First, and most importantly, avoid any password that includes your name, birth date or telephone number. Although these may be easy to remember, they’re also easy to crack.
我们都知道，密码是保护个人隐私的工具之一。虽然在网路世界里，密码只能做到最基本的防护，你仍旧能采取一些措施来让它发挥最大的功效。很重要的一点是，设定密码时，绝对不要为了方便记忆，而选择有意义的字串，如姓名、生日、电话等，这样只会增加被猜中的机率。
Experts suggest the ideal password involves a random combination of letters, numbers and punctuation marks. Plus, change your password regularly. These steps will make the password more difficult for interlopers to guess, and hackers to crack. If you find a random password too difficult to remember, and feel the need to jot it down, exercise caution. Remember to hide it somewhere safe from prying eyes, and never tape it to your computer or desk where curious eyes might find it.
选择密码时，最好是字母、数字和符号一起使用，并且定期更换，这样除了不易被猜中，也能增加骇客破解的时间。另外，如果你觉得密码太复杂，必须写下来才不会忘记，那也请把写下来的密码妥善收在隐密的地方，而不要大方地贴在电脑萤幕或桌面上，否则岂不是白费工夫？
by here2dl
[原创] Internet Security Guide - 保护你的电脑 (中文/英文)
日期: 2000年8月至2001年2月
作者: Stephen Lin (stephen930@hotmail.com)
曾发表于ICRT美军广播电台每日新闻中(Aug.2000~Feb.2001)
目前文章只发表于数位男女http://bbs.mychat.to
-严禁转贴-
Did you ever realize that whenever your computer’s connected to the Internet, it’s like a house with its doors and windows wide open? Most PC’s don’t have any special hardware or software protection to prevent prying eyes from accessing your data port, and from there, invading your computer while you’re online.
如果你的个人电脑正连结到网际网路上，对线上的其他人而言，它看起来就像是一栋大门和窗户都没有上锁的房子。个人电脑是透过通讯埠来连结广大的网际网路的。不幸的是，不是所有的埠都是单向的。它们就像是虚拟的门，除非你把它们都锁好，否则任何有心人士都可经由这些门来入侵你的电脑。
Your PC is just like a virtual home on the Internet, and unless you lock the door, you have no way to stop others from coming inside. And don’t fool yourself by thinking that hackers only target high-profile web sites. With the right equipment, hackers can easily scan to see who’s online. And, with your door wide open, they can take a look at what’s inside, steal files, and worse yet, delete data or leave behind a virus. Don’t you think it’s time to lock those “doors” to your computer?
不要以为你只是一般的网路使用者；透过通讯埠扫描器，骇客可轻易找到你连线时洞开的电脑大门，把你的电脑当他们自己的电脑使用，偷窥你的邮件、盗取档案、引进程式病毒…现在，你要不要关那些门啊？
by here2dl
[原创] Internet Security Guide - 小心电脑身分外漏 (中文/英文)
日期: 2000年8月至2001年2月
作者: Stephen Lin (stephen930@hotmail.com)
曾发表于ICRT美军广播电台每日新闻中(Aug.2000~Feb.2001)
目前文章只发表于数位男女http://bbs.mychat.to
-严禁转贴-
When you’re online, your PC is assigned an IP number—a long series of digits and “dots”. This IP number acts as your computer’s ID, or online address, allowing other computers and web sites to know where to direct the information you request. IP numbers come in two forms, dynamic and static. If you’re connected to the Internet around the clock, then you have static—or fixed—IP. If you have a modem connection for occasional access, then you have a dynamic IP—one that changes each time you go online.
由一连串数字与句号所组成的IP位址，是你在网路上的身份号码；换句话说，它是你在数位地球村的住址。IP位址可分静态与动态。使用全天候连线的宽频网路，你的位址就是静态的，不会改变。如果透过数据机拨接上网，你每次登入就会被分配到不同的、动态的位址。
Obviously with a static IP it’s easier for hackers to locate your computer on the Internet—making static IPs more dangerous. How can you fix this security hazard? One simple solution is to use an anonymous web and email server, which will hide your “footprints” as you roam the Internet. Another option is a firewall—software that erects a virtual wall between your computer and the Internet. Today, there are even several easy-to-use firewall applications designed for the home user in mind.
静态的位址比较危险，有心人可不断猜测你的位址直到猜中为止，然后侵入你的电脑。要防止位址被找到，方法之一是使用匿名网路邮件服务，它会消除你的资讯足迹，让你匿名浏览网路。更有效的方法是使用防火墙软体，目前市面上已出版数种个人防火墙软体，您可以上网比较。
by here2dl
[原创] Internet Security Guide - 甚么是VPN (中文/英文)
日期: 2000年8月至2001年2月
作者: Stephen Lin (stephen930@hotmail.com)
曾发表于ICRT美军广播电台每日新闻中(Aug.2000~Feb.2001)
目前文章只发表于数位男女http://bbs.mychat.to
-严禁转贴-
Virtual Private Network – definition
In the realm of Internet technology, one of the hottest topics is “VPN”, or Virtual Private Network. In simple terms, the idea behind a VPN is similar to the bus only traffic lanes that are common in many major cities—creating a special “traffic lane” for your data. But, a VPN features two important additions: data encryption and identity verification. So, the users’ identity must be verified at each end of the transmission, keeping other Internet users out of this private network.
VPN，也就是虚拟私有网路，是目前网路领域中最常被讨论的名词之一。VPN的全名是Virtual Private Network，做法，就像在一般公用马路上规划公车专用道一样，只不过VPN是透过加解密和身分确认的技术，在公众网路上规划出私人的虚拟专线；除非经过对方的认证与授权，一般人是无法介入这个私人网路的。
The benefits of a VPN are tremendous. Corporate and private users can enjoy the security and privacy of a dedicated network, without the prohibitive costs. By providing a low-cost solution for online privacy, VPN has become an important tool for corporations to maintain their competitive advantage.
透过虚拟私有网路，企业及个人网路使用者不必花费庞大的经费来租用专线，便能保持资料传输的机密性。在既能节省经费、又能保持隐私的有利条件下，VPN已成为未来企业维持商业竞争力的关键。
by here2dl
[原创] Internet Security Guide - 运用VPN (中文/英文)
日期: 2000年8月至2001年2月
作者: Stephen Lin (stephen930@hotmail.com)
曾发表于ICRT美军广播电台每日新闻中(Aug.2000~Feb.2001)
目前文章只发表于数位男女http://bbs.mychat.to
-严禁转贴-
For most corporations today, their greatest fear is a hacker attack on their network servers…vandalizing web pages or even forcing a shut-down of the network. The conventional solution to this problem is for corporations to connect their various locations using dedicated data lines. But, the costs for these dedicated lines and hardware is astronomical, making this solution prohibitive for small to medium sized companies. Plus, remote users must often call into the company’s main server via long distance phone lines, a process that is expensive and tedious.
一般而言，企业网站最担心伺服器遭入侵、网页遭窜改、或系统受攻击而瘫痪；因此传统上会使用专线相互连结。但是专线的线路及硬体费用庞大，对一般中小型企业是沉重的负担。尤其远端用户必须拨长途电话才能连结回企业内部，不但昂贵、且时效性大打折扣。
Luckily, a Virtual Private Network can solve all of these headaches. Using a VPN, when workers are on the road, a local phone call to a nearby Internet Service Provider will provide them easy access to your private and secure network. Likewise, branch offices can keep in contact with headquarters using a conventional Internet connection.
虚拟私有网路能一次解决这些问题。透过VPN，您的员工出差时只要打市内电话便可经由VPN的安全网路连线回公司；而分公司也同样可轻易与总公司或其他分公司连线。总而言之，VPN可为企业用户节省电话使用费和网路设备的成本，并提高网路使用的弹性、以及连线的时效性。您是否该开始选择一个适合您企业的VPN方案了呢？
by here2dl
[原创] Internet Security Guide - 防火墙 (中文/英文)
日期: 2000年8月至2001年2月
作者: Stephen Lin (stephen930@hotmail.com)
曾发表于ICRT美军广播电台每日新闻中(Aug.2000~Feb.2001)
目前文章只发表于数位男女http://bbs.mychat.to
-严禁转贴-
Firewall – definition
One of the best solutions for ensuring Internet safety is a firewall. But if you’re like many laymen…you’re probably wondering just what’s a firewall. Imagine it as a secure checkpoint on a fortified defense line…and all network transmissions must pass through this narrow checkpoint. Firewalls succeed because they integrate security hardware and software at this one checkpoint, making it the sole gateway between a company’s private internal network and the internet.
防火墙是目前网路安全防护的最佳解决方案。它到底是什么？试着把防火墙想像成一个国防上的要塞，所有进出的传输，都必须通过这个唯一而又狭窄的检查点。防火墙之所以有效，是因为它把所有保全硬体和软体都集中在这个检查点上，这个点，也就是你企业的内部网路、与公共的网际网路的连接点。
But the security firewalls provide comes at a big price…in dollars and cents. Firewalls demand special hardware requirements, as well as trained personnel standing guard 24-hours a day. Plus firewalls can be breached…although generally the mistake lies with improper set-up, lax security protocols or poor management…and is not generally the fault of the firewall itself.
不过防火墙的架设十分耗费成本。除了硬体，你还必须雇请数位安全专家来全天候监视设定纪录。大部分对防火墙的安全破坏，是针对设定上的错误或弱点。但出问题的不见得是防火墙本身的品质或特色，反倒是管理上的疏失及设定不正确所导致。
Although firewalls are the most important security precaution for a corporate network, yet their set up and hardware comes at a very hefty price. And, with a shortage of specially trained human resources, firewall management becomes a daunting task. For most small-to-medium sized businesses, the most economical alternative is to hire a professional firewall management company to handle their Internet security.
防火墙虽然是企业网路安全很重要的一道保护，但架设及硬体费用昂贵，且专业人力资源缺乏、管理不易。对一般中小型企业而言，最经济有效的方式，是聘用专业的防火墙管理公司。
Professional firewall management services offer many advantages, including trained personnel to monitor network security, plus regular maintenance schedules to keep your firewall up-to-date. And most importantly, they’re on guard 24-hours a day, ready to deal with any security breach as it develops. Another fringe benefit of hiring professional firewall consultants is they can help you formulate a comprehensive network security protocol, reducing your security risks to the absolute minimum.
专业的防火墙管理服务，除了有工程师监视变动与设定，还会提供定期的维护与更新；而它最有价值的一点，是全天候的服务，因为随时待命的紧急回应能力是很重要的。专业服务还有一个边际效益，就是协助你规划一个安全策略；这是适当管理防火墙的基本要素。总而言之，要将您企业网路安全的成效提升到最大，最好外聘专业的防火墙服务，如此不仅可提高成本优势，且能为你的公司提供高度的专业技术。
by here2dl
[原创] Internet Security Guide - VPN与防火墙 (中文/英文)
日期: 2000年8月至2001年2月
作者: Stephen Lin (stephen930@hotmail.com)
曾发表于ICRT美军广播电台每日新闻中(Aug.2000~Feb.2001)
目前文章只发表于数位男女http://bbs.mychat.to
-严禁转贴-
When corporate users are planning their network security strategy, it’s important to bear in mind the differences between firewalls and virtual private networks. A firewall is designed to screen and monitor the flow of information in and out of your network—whereas a VPN protects the security of your data as it travels over public networks through the addition of encryption and identity verification. So, while your data travels on the Internet, it is protected against theft and sabotage.
企业在考虑网路安全的做法时，请注意防火墙与虚拟私有网路的分别。防火墙的功用是在过滤与监视资料的进出，以达到防止攻击与入侵的效果；而虚拟私有网路的功用，则是在于资料加解密与身份认证，以达到资料在公众网际网路上传输过程中的隐密，并防止第三者窜改资料或复制使用者之机秘资料。
With the rapid expansion and development of e-commerce, today’s corporate users need to protect the privacy and integrity of online data, and must understand the complimentary protection firewalls and VPNs provide. Don’t try cutting costs by choosing one over the other, because if any confidential information on your network is ever compromised, you’ll have more headaches then simply rushing to plug the security whole. Your company’s reputation may also suffer a serious blow, which in turn will damage its “bottom line”.
在电子商务日益发达的今日，企业要保障隐私，必须结合防火墙以及虚拟私有网路的双重保护，千万不可存有侥幸的心理。因为公司如果有任何机密资料被窃取，不只是机密档案及客户资料外泄，连带公司的声誉也会备受质疑。
by here2dl
[原创] Internet Security Guide - 邮件炸弹 (中文/英文)
日期: 2000年8月至2001年2月
作者: Stephen Lin (stephen930@hotmail.com)
曾发表于ICRT美军广播电台每日新闻中(Aug.2000~Feb.2001)
目前文章只发表于数位男女http://bbs.mychat.to
-严禁转贴-
E-Mail Bomb 邮件炸弹
More and more today, the hackers “sabotage of choice” is the e-mail bomb—an easy way into your computer for wrecking the maximum havoc. The assailants take advantage of weaknesses or “back doors” in computer software to destroy data, or inundate a mail server until it “cracks” under the heavy load…resulting in a disruption of Internet services.
近来越来越多的网路骇客是以邮件炸弹的方式来攻击个人电脑。他们会选择一些脆弱及防护不佳的目标，以极快的速度，将重复的垃圾资料大量传送到被害者的电脑里，使其负荷过量而瘫痪。
On average, it takes about 5-10 minutes to prepare an email… to write the message and fill in the recipient’s address. But it only takes a fraction of a second to electronically send out that message. So the theory behind the most common email bombs is quite simple. Create a piece of software that causes a victim’s computer to keep sending out thousands of dummy messages per second. Not only will this cause the recipients computer to “choke” under the heavy load, but it can also inundate mail servers…causing them to fail. And with computer or server problems…on the job productivity falters.
一般人传送一封电子邮件，约须5到10分钟的时间，来输入信件内容及收件者的地址。邮件炸弹的攻击概念，则是每封信寄出只需要千分之一秒的时间来完成，于是每秒送出一千封信，如此不间断地持续下去。结果，收信方的电脑，将会因为无法瞬间处理数量如此庞大、且不间断的讯息传送，而产生当机，为使用者的日常工作带来极大的不便。
by here2dl
[原创] Internet Security Guide - 木马屠城 (中文/英文)
日期: 2000年8月至2001年2月
作者: Stephen Lin (stephen930@hotmail.com)
曾发表于ICRT美军广播电台每日新闻中(Aug.2000~Feb.2001)
目前文章只发表于数位男女http://bbs.mychat.to
-严禁转贴-
Trojan Horse木马屠城
Computer bugs come in many shapes and sizes. One of the most insidious is the Trojan horse. Just like it’s namesake, a computer Trojan horse enters your computer as a seemingly innocuous piece of software…perhaps as an attachment on an email. But once activated, the harmless-looking piece of software starts its mischief.
木马程式和电脑病毒一样，都是电脑程式软体的一种。它们的原理也很相似，两者都可以附加在挡案内，可以经由电子邮件在网路上传输，并且可以专为达成某个特定的目地而设计。
Unlike a computer virus…Trojan horses require the user to activate them, which is why they come camouflaged as seemingly harmless software. But, once the “soldiers” are released…the malicious software can destroy data, or open a silent back door to your PC. Through this invisible gateway, hackers can easily monitor your activities, intercept data and steal confidential passwords and credit information. Compounding matters, the victim usually doesn’t realize he’s been hit until it’s too late—after the damage has been done and the hacker has erased his tracks. For corporate users, blocking Trojan horses is a must…because the threat of losing confidential information is more than just a slight inconvenience.
不过木马程式和电脑病毒不同的地方是，电脑病毒是由程式本身自动启动来破坏电脑；木马程式则是透过远端操控，让骇客从另一台电脑监控并使用受害者的电脑。木马程式的应用很广泛，从窃取密码、资料、到进行破坏，尤其受害者往往并不知道资料已被窃取或窜改，导致它对企业的威胁更为严重，而破坏所带来的影响往往超过表面上的损失，企业必须多加注意与防范。
by here2dl
[原创] Internet Security Guide - 网页攻击 (中文/英文)
日期: 2000年8月至2001年2月
作者: Stephen Lin (stephen930@hotmail.com)
曾发表于ICRT美军广播电台每日新闻中(Aug.2000~Feb.2001)
目前文章只发表于数位男女http://bbs.mychat.to
-严禁转贴-
WEB PAGE ATTACK 网页攻击
Going online to read news and information is as common today as reading the morning newspaper. But even browsing the web carries potential risks. Take for example the “cookie”. Many web sites use cookies to keep track of users…freeing them from the hassle of having to enter a user name every time they visit, and allowing content providers to fine-tune their offerings by observing users’ choices. But in the wrong hands…cookies can pose a privacy risk.
对大部分的人来说，上网已经是每天例行的事项；不过其实光是上网浏览网页，暗中也藏有许多风险的。例如许多网站会在使用者的电脑内放置cookie档，来对使用者进行纪录或追踪；一般来讲这样并无大害，但有心人士仍旧可以丑化它的应用方式。
Another potential hazard is malicious web sites that utilize the “buffer overflow” to tell the web browser to open several new windows every second. Within seconds this action can overwhelm the computer system, and cause it to crash. On a Windows PC, immediately hit Control + Alt + Delete to “force quit” your browser. Plus, other interlopers take advantage of glitches in software designs to wreak their havoc…so play it safe, and always use the most up-to-date versions.
另外有些网页也可攻击使用者。比如说，当你进入某个恶作剧的网站后，该网站可以使用buffer overflow的方式，不停地每秒开启5到6个以上的小视窗，直到你的电脑当机为止。防范的方式，是同时按下Ctrl、Alt 和 Delete键，然后选择关闭浏览器。不过许多攻击方式是针对特定的软体弱点和漏洞，因此最好能常常更新软体，以降低被攻击的机会。
by here2dl
[ 此文章被here2dl在2005-01-30 00:29重新编辑 ]
|
