MSN : dmliu99999@hotmail.com Email : dmliu@ms4.hinet.net Mobile : 0932-212-913 2008 ( ) email:dmliu@ms4.hinet.net P 1
? Firewall IDS IPS/IDP Viruswall Authrority? Policy Rules Rules Pattern ID/PWD ACL IE MSN TCP-80 TCP- 1864 2008 ( ) email:dmliu@ms4.hinet.net P 2
(.doc.ppt.mdb )(.rar).exe.com.scr.pif.bat.cmd.reg.lnk.hta.zip.rar.doc.xls.pps,t.mdb.swf 2008 ( ) email:dmliu@ms4.hinet.net P 3
2008/01/23 2007/08/30 2008 ( ) email:dmliu@ms4.hinet.net P 4
2008/01/23 2007/09/01 2008/01/23 2007/11/27 2008 ( ) email:dmliu@ms4.hinet.net P 5
2008/01/23 2008/01/02 2008 ( ) email:dmliu@ms4.hinet.net P 6
2008/04/07?! (Local Virus).exe.com.scr.pif.bat.cmd.reg.lnk.hta.zip.rar.doc.xls.pps,t.mdb.swf 2008 ( ) email:dmliu@ms4.hinet.net P 7
exe!!! RAR(exe) 2008 ( ) email:dmliu@ms4.hinet.net P 8
FTP/Blog/BBS/Forum... :::::: :::::: :::::: :::::: 2008 ( ) email:dmliu@ms4.hinet.net P 9
: (1) (Web Middle Attack ) Www.abcBank.com.tw :::::: :::::: :::::: :::::: Www.abcBank.com tw.abcbank.com Www.abcB.ank.com.tw Www.abcBank.com.tu Www.abc.Bank.com.tw <a href= http://www.abc.com.tw > Www.abcBank.com.tw </a> : (2) (Web Middle Attack ) ABC Www.abcBank.com.tw / Www.abcBank.com ABC ABC ( ) tw.abcbank.com Www.abcB.ank.com.tw Www.abcBank.com.tu Www.abc.Bank.com.tw <a href= http://www.abc.com.tw > Www.abcBank.com.tw </a> 2008 ( ) email:dmliu@ms4.hinet.net P 10
2008 ( ) email:dmliu@ms4.hinet.net P 11
2008 ( ) email:dmliu@ms4.hinet.net P 12
2008 ( ) email:dmliu@ms4.hinet.net P 13
MSN FTP/Blog/BBS/Forum (1) (2)MSN (3) MSN... :::::: :::::: MSN USB :::::: :::::: 2008 ( ) email:dmliu@ms4.hinet.net P 14
EXESCR SCR RAR MSN ( + +) 2008 ( ) email:dmliu@ms4.hinet.net P 15
2008 ( ) email:dmliu@ms4.hinet.net P 16
(2), IE (3),, (1) (4),, 2008 ( ) email:dmliu@ms4.hinet.net P 17
P2P? P2P, Peer to Peer, HTTP/FTP (Client-Server Mode) P2P P2P P2P Skype P2P Peer to Peer, MP3 A MP3 A MP3 A MP3 A MP3 A MP3 A MP3 A A-1 A-2 A-4 A-5 A-6 A-n A-3 2008 ( ) email:dmliu@ms4.hinet.net P 18
P2P BitTorrent (BT) BitTorrent, BitComet, BTspirit BitTorando edonkeyedonkey, emule, GnuTellaGnuTella, ezpeer, Mxie, Foxy FastTrackFastTrack, KaZaA, WinMxWinMx, Winny, NapMx, P2P Winny 2008 ( ) email:dmliu@ms4.hinet.net P 19
P2P Winny P2P Winny 2008 ( ) email:dmliu@ms4.hinet.net P 20
P2P Winny P2P 2008 ( ) email:dmliu@ms4.hinet.net P 21
P2P P2P 2008 ( ) email:dmliu@ms4.hinet.net P 22
P2P P2P P2P P2P P2P P2Pmp3 mpeg, avi P2P 2008 ( ) email:dmliu@ms4.hinet.net P 23
emule Http://www.emule.org Http://www.emule-project.net P2P P2P BitTorrent Gnutella emule WinMx P2P BitTorrent Gnutella emule WinMx ( ) ( ) ( ) 2008 ( ) email:dmliu@ms4.hinet.net P 24
1. P2P ( ) 2. (IM) 3. 4. (1234,12345,qazplm,qwert, ) ( = ) (6-8,+ ) (1) (2) (3) (exe,dll,scr,bat,pif,com,vbs,pps, ) (4) (5) () USB 2008 ( ) email:dmliu@ms4.hinet.net P 25
( ) () ( ) (exe,pif) (doc,xls,pps) ( ) Palm USB () - - - - - ( ) - ( ) 2008 ( ) email:dmliu@ms4.hinet.net P 26
Q&A 1: 2: :. http://www.diamondinfotech.com.tw 2008 ( ) email:dmliu@ms4.hinet.net P 27