黑客入侵前的信息收集（Information collection before hacking）.docVIP

黑客入侵前的信息收集（Information collection before hacking） I. importance of information collection The success of an invasion has a great relationship with the previous information collection. There are two kinds of information collection: 1. using various scanning tools for large-scale scanning of the invasion target, to obtain system information and service information. This involves the use of some scanning tools. 2. using a variety of means and query some information related to invasion, usually obtained by this way the information will be used by the social engineering and social engineering techniques of the intrusion, intrusion detection and prevention techniques is the most difficult. Social Engineering (Social Engineering): usually the use of public neglect of deception, so that victims fall into the trap. The trick is usually to talk, fraud, counterfeit or colloquial characters etc., obtain sensitive information from legitimate users such as user list, user password and network structure, even if very vigilant very carefully, as there may be damage to the interests of a means of social engineering, can be said to be impossible to guard against. Network security is a whole, for a common goal in Jiugong case, hackers will see the system administrator point to the target, because people in the whole is often the most insecure, hacking through the search engine to some personal information for the system administrator to search, such as email address, MSN QQ analysis of these keywords, the system administrators personal hobby, often go to the website, forum, and even personal real information. And then use the information and the system administrator pull the relationship, almost cheat each others trust, so that it gradually fell into the trap of hackers design, and eventually caused the invasion of the system. This is what we often say: there is no absolute security, only relative security, and only always vigilant, in order to exchange for the peace of the network..