走过2013-搜狐.pdfVIP

信息安全走过2013 今天要讲  DDOS  Security as Service  Active Passive Web 2.0 App Scanner  Struts2  Iass、Paas对安全的提升  Mobile GSM Security 2 DDOS  Spamhaus 300 G  利用dns反射  攻击二级提供商及网络交换中心  The DDoS That Almost Broke the Internet 3 DDOS 4 DDOS  如何解决  收益分析  自建清洗中心  anycast  云清洗  运营商URPF 5 DDOS  打造你的“黑洞”  主动牵引  zebra(bgp)、netfilter、nginx  被动牵引  在被攻击服务器实施网络层牵引 iptables -t nat -A PREROUTING -i eth1 -p tcp -m tcp --dport 80 -j DNAT --to- destination X.X.X.X:80 6 •在防护设备实施清洗后代理到被攻击服务器 Security As Service  输出你的价值 En(de)crypt、Captcha Phish、Malware、Scanner Blacklist  降低使用难度 ACCESS_KEY = DG74KC39ZC6BJC5312A74D7BWURW42 SECRET_KEY = 1LCJ4f#CV6JY6pYdcXJG ENCRYPT_SERVICE_ENDPOINT = https://sasp/CipherServices/encrypt DECRYPT_SERVICE_ENDPOINT = https://sasp/CipherServices/decrypt encrypt: {sign:3fb9e70ca54788af5b87698f91f210,status:0,cipher:AAAAANVsKvYbwsiK32MVSnqIYI28vYYUSXj_x5fSQmzced-R} |key_version|iv|ciperdata| decrypt: 7 {sign:ab5fde10e6607e2fbda4ed0095974894fb90d3e3,status:0,plain:abcdef} Active Passive Web 2.0 App Scanner  Active WEB2.0 App Scanner  复杂的登陆及会话管理  遍历、点击、遍历、填表、点击、onsubmit...  QtWebKit  Passive Web 2.0 App Scanner  基于Proxy的被动扫描  ...