h**********c
发帖数: 4120 | 1 【编者按】国土安全和联邦调查局合作发布联合调查报告。文档提供美国大选期间，俄
罗斯内务或军事情报机构如何攻击并利用和选举相关的网络和终端，以及一系列美国政
府的，政策相关的，亦或私人的实体。美国政府对俄方的行动，冠以代号--熊出没的平
原GRIZZLY STEPPE。
恶意攻击者使用一系列手段干扰（目标）信息系统。主要有注入后门，跨站脚本，和利
用主机防护的薄弱点。
报告提供了基本的防卫措施，应用和系统升级，建立可靠应用清单，严格的管理员权限
设置，网络分段设置和安全区设置，网站用户输入的安全检查，文件可信机制，理解防
火墙的作用。
报告对以上措施有进一步详尽的解释。
https://www.us-cert.gov/sites/default/files/publications/JAR_16-20296.pdf
Google Translation:
Homeland Security and the Federal Bureau of Investigation jointly issued a
joint investigation report. The document provides information about how the
Russian House or Military Intelligence Agency attacked, used and elected
networks and terminals during the US presidential election, as well as a
range of US government, policy-related, or private entities. The US
government action on the Russian side, dubbed the code - Bear - infested
plains GRIZZLY STEPPE.
A malicious attacker uses a series of means to interfere with (target) the
information system. Mainly into the back door, cross-site scripting, and the
use of host vulnerability protection.
The report provides basic defenses, application and system upgrades, a list
of reliable applications, strict administrator rights settings, network
segmentation and security zone settings, security checks for site user input
, file trust mechanisms, and understanding the role of firewalls .
The report provides further detailed explanations for the above measures |
