Information Technology Threats

1
????????????????????? ( Information Technology
Threats )
2
10 ?????????????????????? 2007 (Top 10 Cyber
Threats Year 2007)

• ?????????? ??? ??????????????????? (Malware with
  Social Engineering Technique Attack)
• ??????????? (SPAM Mail Attack)
• ????????????????????????? IM ??? P2P
  ??????????????????????? (IM and P2P Attack)
• ????????????????????????????????????????? ???
  ??????????????????????????? (PHISHING, PHARMING
  ??? GOLD FARMING Attack)
• ??????????????????????? DoS ???? DDoS (Denial of
  Services and Distributed Danial of Services
  Attack)

3
10 ?????????????????????? 2007 (Top 10 Cyber
Threats Year 2007)
6. ??????????? Web Server ??? Web Application
(Web Server and Web Application Attack) 7.
???????????????????? (BOTNETS Attack) 8.
????????????????? (ROOTKITS Attack) 9.
????????????????????? (Mobile and Wireless
Attack) 10. ????????????????? Google (Google
Hacking Attack)
4
?????????????????????????????????? ( Information
Security Easy Trips )
5
10 ?????????????????????????????????? ( 10
Information Security Easy Trips )

• ???????????? Windows XP ????????????? Service
  Pack 2 (SP2)
• ?????????? Patch ?????????????? Windows XP SP2
  ???????????? ??? Update Virus and MalWare
  Signature ???????????????????
• ????? Attached File ??????????? ? ??????? ZIP
  File ?????????????????????????????????
• ?????????? Windows XP ??????????????????
• ????????? Outlook 2003 ???????????? SPAM Mail
  ??????? Email ???????????? Text Format

6
10 ?????????????????????????????????? ( 10
Information Security Easy Trips )
6. ???????????? download ??? Instant Messenger
(IM) ???? MSN ???? ICQ ??? ??? SPAM ???? IM
??????????? SPIM (SPAM IM) 7. ????? Phishing
Link ???????????? Email ???? URL Link
????????????? Instant Massaging 8. ?????
Malicious Cookies ??? Web Site ??? Site
???????????????????? 9. ??????? ActiveX Control
???????????? 10. ??????????????????????????????
(MalWare) ???????????????????? ???????????????????
??
7
??????????????????????????? ( Virus, Worm,
Trojan, Backdoor, Spyware )
8
??????? 10 ??????????????????????????????????? (
Virus, Worm, Trojan, Backdoor, Spyware )

• ??????????????????????? Information Security
  ????????????????? ??????????? Update Patch
• ??????? Personal Firewall ????????????? Windows
  Client
• ????????????? Anti-Virus
• ?????????????????????????????????????????????
• ???????????????? (Outgoing Traffic)
  ????????????????????????????

9
??????? 10 ??????????????????????????????????? (
Virus, Worm, Trojan, Backdoor, Spyware )
6. ???????????????????????????????????????????????
??????????????????????? Virus ????? 7.
?????????????????????????????????????? ????????
"Layer Security" ???? "Defense In-Depth" 8.
??????????? IDS (Intrusion Detection system) 9.
????????????????????? Packet Sniffer ???? RMON
Probe Traffic Analyzer 10. ????????????????
(Security Policy) ?????????????????????????????
10
???????????????????????????????????? ( Virus,
Worm, Trojan, Backdoor, Spyware )
11
14 ????????????????????????????????????

• Network Access Control (NAC) ???? Endpoint
  Security
• Web Application and Source Code Vulnerability
  Security Scanner
• Database Security and Database Activity Monitor
• Converged Client Security Technology
• Instant Messaging (IM) and Peer-to-peer (P2P)
  Security
• Security Information and Event Management (SIEM)

12
14 ????????????????????????????????????
7. Data-at-Rest Encryption Appliance 8. Content
Monitoring and Filtering 9. Digital Right
Management (DRM) 10. Trusted Computing Platform
11. URL Filtering 12. Spam Filtering 13.
Vulnerability Management (VM) ??? Patch
Management (PM) 14. Managed Security Services
Provider (MSSP)