{"id":594,"date":"2016-02-04T02:18:57","date_gmt":"2016-02-04T02:18:57","guid":{"rendered":"http:\/\/www.inforsec.org\/wp\/?p=594"},"modified":"2016-02-04T03:36:38","modified_gmt":"2016-02-04T03:36:38","slug":"%e6%95%b0%e5%ad%a6%e5%92%8c%e5%ae%89%e5%85%a8%e7%a0%94%e7%a9%b6%e7%9a%84%e5%85%b3%e7%b3%bb","status":"publish","type":"post","link":"http:\/\/202.112.238.40\/wp\/?p=594","title":{"rendered":"InForSec\u5b66\u672f\u8ba8\u8bba\uff1a\u6570\u5b66\u548c\u5b89\u5168\u7814\u7a76\u7684\u5173\u7cfb"},"content":{"rendered":"

\u4f5c\u8005\uff1a\u4e07\u6d9b\/\u534e\u4e3a\u52a0\u62ff\u5927<\/span><\/p>\n

1.\u6982\u8ff0<\/h2>\n

\u6570\u5b66\u662f\u4ece\u5c0f\u5b66\u3001\u4e2d\u5b66\u3001\u5230\u5927\u5b66\u7684\u5fc5\u4fee\u8bfe\u7a0b\uff0c\u6bcf\u4e2a\u4eba\u5728\u4e0a\u5b66\u671f\u95f4\u90fd\u82b1\u8d39\u4e86\u5927\u91cf\u7684\u65f6\u95f4\u5b66\u4e60\u548c\u7814\u7a76\u6570\u5b66\u3002\u90a3\u4e48\uff0c\u6570\u5b66\u5728\u5b9e\u9645\u5de5\u4f5c\u4e2d\uff0c\u5230\u5e95\u8d77\u4ec0\u4e48\u6837\u7684\u4f5c\u7528\u5462\uff1f \u6211\u4eec\u5e38\u5e38\u542c\u5230\u6709\u4eba\u8bf4\uff0c\u5728\u5de5\u4f5c\u4e2d\u57fa\u672c\u7528\u4e0d\u4e0a\u592a\u591a\u7684\u6570\u5b66\u3002\u4e5f\u6709\u4eba\u8bf4\uff0c\u6570\u5b66\u5bf9\u5176\u5de5\u4f5c\u8d77\u7740\u975e\u5e38\u91cd\u8981\u7684\u4f5c\u7528\u3002\u8fd9\u6837\u7684\u8ba8\u8bba\uff08\u5173\u4e8e\u6570\u5b66\u5728\u5de5\u4f5c\u4e2d\u7684\u5e94\u7528\u95ee\u9898\uff09\uff0c\u65f6\u65f6\u523b\u523b\u90fd\u53d1\u751f\u5728\u6211\u4eec\u8eab\u8fb9\u3002<\/span><\/p>\n

\u524d\u4e00\u77ed\u65f6\u95f4\uff0c InForSec\u5b66\u672f\u4ea4\u6d41\u5fae\u4fe1\u7fa4\u91cc\uff0c\u4e00\u7fa4\u4ece\u4e8b\u5b89\u5168\u7814\u7a76\u7684\u5b66\u8005\u548c\u7814\u7a76\u4eba\u5458\uff0c\u5c31\u6570\u5b66\u548c\u5b89\u5168\u7814\u7a76\u7684\u5173\u7cfb\uff0c\u8fdb\u884c\u4e86\u70ed\u70c8\u7684\u63a2\u8ba8\u3002\u672c\u6587\u5c06\u8fd9\u6b21\u8ba8\u8bba\u505a\u4e2a\u7b80\u5355\u7684\u603b\u7ed3\uff0c \u4ee5\u98e8\u8bfb\u8005\u3002\u603b\u7ed3\u4e0d\u8db3\u4e4b\u5904\uff0c\u5b8c\u5168\u8865\u5145\u62cd\u7816\u3002<\/span><\/p>\n

2.\u80cc\u666f<\/h2>\n

\u6570\u5b66\u548c\u5b89\u5168\u90fd\u662f\u975e\u5e38\u5e7f\u6cdb\u7684\u9886\u57df\uff0c\u5404\u81ea\u5305\u542b\u5f88\u591a\u7ec6\u5206\u9886\u57df\u3002\u6839\u636e\u4e2d\u56fd\u5b66\u79d1\u5206\u7c7b\u56fd\u5bb6\u6807\u51c6[1]\uff0c\u6570\u5b66\u53ef\u4ee5\u5206\u4e3a\u6570\u7406\u903b\u8f91\u3001\u6570\u8bba\u3001\u4ee3\u6570\u5b66\u3001\u51e0\u4f55\u5b66\u3001\u62d3\u6251\u5b66\u3001\u6570\u5b66\u5206\u6790\u3001\u51fd\u6570\u8bba\u3001\u5fae\u5206\u65b9\u7a0b\u3001\u79ef\u5206\u65b9\u7a0b\u3001\u8ba1\u7b97\u6570\u636e\u3001\u6982\u7387\u8bba\u3001\u6570\u7406\u7edf\u8ba1\u5b66\u3001\u8fd0\u7b79\u5b66\u3001\u79bb\u6563\u6570\u5b66\u548c\u7ec4\u5408\u6570\u5b66\u7b49\u9886\u57df\u3002<\/span><\/p>\n

\u5b89\u5168\u5219\u548c\u4fdd\u62a4\u7684\u5bf9\u8c61\u6709\u5173\u3002\u9664\u4e86\u5b89\u5168\u7684\u57fa\u7840\u9886\u57df\u5982\u5bc6\u7801\u5b66\u4ee5\u5916\uff0c\u53ef\u4ee5\u6839\u636e\u88ab\u4fdd\u62a4\u5bf9\u8c61\u7684\u5bf9\u5b89\u5168\u7814\u7a76\u8fdb\u884c\u5212\u5206\uff0c\u5982\u7f51\u7edc\u5b89\u5168\u3001\u64cd\u4f5c\u7cfb\u7edf\u5b89\u5168\u3001\u5e94\u7528\u5b89\u5168\u548c\u6570\u636e\u5b89\u5168\u7b49\u3002 \u5176\u4e2d\u4e0a\u8ff0\u4efb\u4f55\u5b50\u9886\u57df\uff0c\u8fd8\u53ef\u4ee5\u7ee7\u7eed\u7ec6\u5206\u3002<\/span><\/p>\n

3.\u53c2\u4e0e\u4eba\u5458<\/h2>\n

InForSec\u5b66\u672f\u4ea4\u6d41\u7fa4\uff0c\u805a\u96c6\u4e86\u4e00\u6279\u5728\u5b89\u5168\u9886\u57df\u4ece\u4e8b\u6559\u5b66\u548c\u7814\u7a76\u7684\u6559\u6388\u5b66\u8005\u548c\u7814\u7a76\u4eba\u5458\u3002\u4ed6\u4eec\u6765\u81ea\u4e2d\u56fd\u548c\u6d77\u5916\u7684\u5b66\u672f\u754c\u548c\u5de5\u4e1a\u754c\u3002\u53c2\u4e0e \u201c\u6570\u5b66\u548c\u5b89\u5168\u7814\u7a76\u5173\u7cfb\u201d \u8fd9\u4e2a\u8bdd\u9898\u8ba8\u8bba\u7684\u4e3b\u8981\u4eba\u5458\u6709\uff1a \u6bb5\u6d77\u65b0\uff08\u6e05\u534e\u5927\u5b66\uff09\u3001\u6768\u73c9\uff08\u590d\u65e6\uff09\u3001 \u97e6\u97ec\uff08\u767e\u5ea6\uff09\u3001\u6c5f\u5065\uff08UC Berkeley\uff09\u3001 \u674e\u6656\uff08\u897f\u7535\uff09\u3001\u5f20\u514b\u73af\uff08\u9999\u6e2f\u4e2d\u6587\u5927\u5b66\uff09\u3001\u82cf\u749e\u777f\uff08\u4e2d\u79d1\u9662\u8f6f\u4ef6\u6240\uff09\u3001\u4e01\u4e3d\u840d\uff08\u4e2d\u79d1\u9662\u8f6f\u4ef6\u6240\uff09\u3001\u5434\u77f3\uff08keen\uff09\u3001yuange\u3001 \u6768\u5180\u9f99\uff08\u77e5\u9053\u521b\u5b87\uff09\u3001\u674e\u821f\u519b\uff08\u5317\u822a\uff09\u3001\u9f9a\u5f81\uff08\u534e\u5357\u5e08\u5927\uff09\u3001\u8096\u665f\uff08\u6e56\u5357\u5927\u5b66\uff09\u3001\u738b\u8dc3\u6b66\uff08\u4e2d\u79d1\u9662\u4fe1\u5de5\u6240\uff09\u3001\u6f58\u67f1\u5ef7\uff08\u542f\u660e\u661f\u8fb0\uff09\u3001\u738b\u4f1f\u8d85\uff08uncc\uff09\u3001 \u9b4f\u5f3a\uff08\u4fe1\u606f\u5de5\u7a0b\u5927\u5b66\uff09\u3001\u4e01\u52c7\uff08\u6842\u7535\uff09\u3001\u59dc\u8a89\uff08\u9ed1\u9f99\u6c5f\u5927\u5b66\uff09\u3001\u5510\u52c7\uff08\u56fd\u9632\u79d1\u5927\uff09\u3001\u90c1\u6631\uff08\u4e0a\u6d77\u4ea4\u5927\uff09\u3001\u9ec4\u743c\uff08\u534e\u519c\uff09\u3001\u9ec4\u65d7\u660e\uff08\u5317\u79d1\u5927\uff09\u3001\u4f59\u6c34\uff08Deakin)\u3001\u4e8e\u7ee7\u4e07\uff08\u534e\u4e3a\u4e0a\u6d77\uff09\u3002<\/span><\/p>\n

4.\u8ba8\u8bba\u5185\u5bb9<\/h2>\n

\u8ba8\u8bba\u7684\u8bdd\u9898\u975e\u5e38\u5e7f\u6cdb\uff0c\u5927\u5bb6\u5404\u6292\u5df1\u89c1\u3002\u73b0\u5c06\u5927\u5bb6\u57fa\u672c\u8fbe\u6210\u5171\u8bc6\u7684\u4e00\u4e9b\u8ba8\u8bba\u603b\u7ed3\u5982\u4e0b\u3002<\/span><\/p>\n

A. \u6570\u5b66\u5bf9\u4e8e\u903b\u8f91\u601d\u7ef4\u7684\u8bad\u7ec3\u5f88\u91cd\u8981\uff0c\u800c\u6e05\u6670\u7684\u903b\u8f91\u601d\u7ef4\u5bf9\u5b89\u5168\u7814\u7a76\u5f88\u91cd\u8981<\/b>\u3002<\/span><\/p>\n

\u4f8b\u5982\uff0c\u5317\u822a\u7684\u674e\u821f\u519b\u8001\u5e08\u63d0\u5230\uff0c\u4ed6\u4e00\u76f4\u5728\u7ed9\u672c\u79d1\uff0c\u7855\u58eb\u548c\u535a\u58eb\u4e0a \u201c\u79bb\u6563\u6570\u5b66\u201d \u7b49\u6570\u5b66\u57fa\u7840\u8bfe\u3002\u674e\u8001\u5e08\u8ba4\u4e3a\uff0c\u6570\u5b66\u5bf9\u4e8e\u57f9\u517b\u548c\u8bad\u7ec3\u5b66\u751f\u7684\u903b\u8f91\u601d\u7ef4\u548c\u62bd\u8c61\u80fd\u529b\u5fc5\u4e0d\u53ef\u5c11\u3002Keen Team\u7684\u5434\u77f3\u63d0\u5230\uff0c\u6570\u5b66\u53ef\u4ee5\u5e2e\u52a9\u63d0\u9ad8\u62bd\u8c61\u80fd\u529b\u548c\u903b\u8f91\u601d\u7ef4\u80fd\u529b\u3002\u800c\u8fd9\u4e24\u70b9\u5bf9\u4e8e\u5b89\u5168\u7814\u7a76\uff08\u6216\u4efb\u4f55\u79d1\u5b66\u7814\u7a76\uff09\u90fd\u81f3\u5173\u91cd\u8981\u3002\u9ed1\u9f99\u6c5f\u5927\u5b66\u7684\u59dc\u8a89\u8001\u5e08\u4e00\u76f4\u5728\u7ed9\u5b66\u751f\u8bb2\u6388\u79bb\u6563\u6570\u5b66\uff0c\u5e76\u6307\u51fa\u5176\u56db\u4e2a\u4e3b\u8981\u90e8\u5206\uff08\u6570\u91cf\u903b\u8f91\u3001\u96c6\u5408\u8bba\u3001\u56fe\u8bba\u3001\u548c\u4ee3\u6570\u7ed3\u6784\uff09\u90fd\u53ef\u4ee5\u5e2e\u52a9\u8bad\u7ec3\u601d\u7ef4\uff0c\u5c24\u5176\u6570\u7406\u903b\u8f91\u53ef\u4ee5\u5f3a\u5316\u8bad\u7ec3\u903b\u8f91\u601d\u7ef4\u3002\u59dc\u8001\u5e08\u8fd8\u63a8\u8350Coursera\u7684\u6570\u5b66\u601d\u7ef4\u5bfc\u8bba\u8bfe\u7a0b\u3002<\/span><\/p>\n

UC Berkeley\u7684\u6c5f\u5065\u535a\u58eb\u4e5f\u63d0\u5230\uff0c\u5b89\u5168\u5b66\u672f\u8bba\u6587\u8981\u6709\u4e25\u5bc6\u7684\u903b\u8f91\u6027\u3002\u5e73\u65f6\u770b\u70b9\u6570\u5b66\u65b9\u9762\u7684\u4e66\u7c4d\uff0c\u5373\u4f7f\u548c\u6240\u4ece\u4e8b\u7684\u5b89\u5168\u7814\u7a76\u6ca1\u6709\u76f4\u63a5\u5173\u7cfb\uff0c\u4e5f\u53ef\u4ee5\u5e2e\u52a9\u81ea\u5df1\u8bad\u7ec3\u63d0\u9ad8\u903b\u8f91\u601d\u8def\u80fd\u529b\uff0c\u4ece\u800c\u5e2e\u52a9\u53d1\u73b0\u8bba\u6587\u4e2d\u7684\u8df3\u8dc3\u903b\u8f91\u3002\u53e6\u5916\u6c5f\u5065\u535a\u58eb\u6307\u51fa\uff0c\u4e2d\u56fd\u7684\u6570\u5b66\u6559\u80b2\u5f80\u5f80\u5f3a\u8c03\u7528\u5b9a\u7406\u6765\u89e3\u9898\uff0c\u4f46\u5f88\u5c11\u80fd\u591f\u8bb2\u6e05\u695a\u8fd9\u4e9b\u5b9a\u7406\u80cc\u540e\u7684\u610f\u4e49\u548c\u5176\u4ed6\u4e8b\u60c5\u7684\u8054\u7cfb\u3002\u4e2d\u79d1\u9662\u8f6f\u4ef6\u6240\u7684\u82cf\u749e\u777f\u8001\u5e08\u8ba4\u4e3a\uff0c\u5b89\u5168\u7814\u7a76\u9700\u8981\u6709\u6e05\u6670\u7684\u903b\u8f91\uff0c\u8981\u61c2\u5f97\u4ec0\u4e48\u662f\u524d\u56e0\u540e\u679c\u3002<\/span><\/p>\n

B. \u5bc6\u7801\u5b66\u662f\u5b89\u5168\u7684\u57fa\u7840\uff0c\u5176\u5bf9\u6570\u5b66\uff08\u4f8b\u5982\u6570\u8bba\uff09\u7684\u8981\u6c42\u975e\u5e38\u9ad8<\/b><\/p>\n

\u4fe1\u606f\u5de5\u7a0b\u5927\u5b66\u7684\u9b4f\u5f3a\u8ba4\u4e3a\uff0c\u6570\u5b66\u5728\u5bc6\u7801\u9886\u57df\u4e0d\u53ef\u7f3a\u5c11\uff0c\u5bc6\u7801\u5b66\u5728\u4fe1\u606f\u5b89\u5168\u9886\u57df\u4e5f\u662f\u4e0d\u53ef\u7f3a\u5c11\u7684\u3002<\/span>\u767e\u5ea6\u7684\u97e6\u97ec\u63d0\u5230\uff0c\u5bc6\u7801\u5b66\u662f\u5b89\u5168\u7684\u4e00\u6839\u652f\u67f1\uff0c\u5bc6\u7801\u7684\u7814\u7a76\u5bf9\u6570\u5b66\u77e5\u8bc6\u8981\u6c42\u975e\u5e38\u9ad8\u3002\u897f\u7535\u7684\u674e\u6656\u8001\u5e08\u4e3e\u4f8b\u8bf4\u660e\uff0c\u4ed6\u8fd9\u4e24\u5e74\u4e00\u76f4\u5728\u7814\u7a76\u5168\u540c\u6001\u548c\u591a\u7ebf\u6027\u6620\u5c04\uff0c\u5176\u4e2d\u591a\u7ebf\u6027\u6620\u5c04\u53ef\u4ee5\u7528\u4e8e\u4e00\u8f6e\u591a\u65b9\u5bc6\u94a5\u534f\u5546\uff0c\u4f46\u4e00\u76f4\u6ca1\u6709\u627e\u5230\u597d\u7684\u6570\u5b66\u6784\u9020\u65b9\u6cd5\u3002<\/span><\/p>\n

C.\u67d0\u4e9b\u5b89\u5168\u7684\u7ec6\u5206\u9886\u57df\uff0c\u5bf9\u6570\u5b66\u7684\u8981\u6c42\u4e5f\u5f88\u9ad8<\/b><\/p>\n

\u5317\u822a\u7684\u674e\u821f\u519b\u8ba4\u4e3a\u6709\u4e9b\u5b89\u5168\u9886\u57df\uff0c\u5982\u7a0b\u5e8f\u5206\u6790\u548c\u534f\u8bae\u5206\u6790\u7b49\u5bf9\u6570\u5b66\u8981\u6c42\u5f88\u9ad8\u3002UNCC\u7684\u738b\u4f1f\u8d85\u4e5f\u8ba4\u4e3a\uff0c\u534f\u8bae\u5206\u6790\u548c\u8bc1\u660e\uff0c\u5927\u91cf\u4f7f\u7528\u4e86\u6570\u5b66\u77e5\u8bc6\u3002\u4e2d\u79d1\u9662\u8f6f\u4ef6\u6240\u7684\u4e01\u4e3d\u840d\u8ba4\u4e3a\uff0c\u67d0\u4e9b\u5b89\u5168\u95ee\u9898\uff0c\u4f1a\u5bf9\u6570\u5b66\u63d0\u51fa\u4e00\u4e9b\u7279\u6b8a\u7684\u9700\u6c42\uff0c\u4f8b\u5982\uff0c\u5979\u4eec\u4e00\u76f4\u5728\u7814\u7a76\u7684\u5dee\u5206\u9690\u79c1\u4fdd\u62a4\u3002<\/span><\/p>\n

D.\u79bb\u6563\u6570\u5b66\u5728\u5b89\u5168\u7814\u7a76\u4e2d\u5f88\u6709\u7528\u5904<\/b><\/p>\n

\u767e\u5ea6\u7684\u97e6\u97ec\u6307\u51fa\uff0c\u521d\u7b49\u6570\u5b66\u3001\u7279\u522b\u662f\u79bb\u6563\u6570\u5b66\u548c\u5e94\u7528\u7edf\u8ba1\u5b66\uff0c\u5bf9\u5b89\u5168\u7814\u7a76\u5f88\u91cd\u8981\u3002 \u590d\u65e6\u7684\u6768\u73c9\u8001\u5e08\u4e5f\u8ba4\u4e3a\u79bb\u6563\u6570\u5b66\uff08\u4f8b\u5982\u56fe\u8bba\uff09\u5728\u5b89\u5168\u7814\u7a76\u4e2d\u6bd4\u8f83\u6709\u7528\u3002\u9ed1\u9f99\u6c5f\u5927\u5b66\u7684\u59dc\u8a89\u8001\u5e08\u8fdb\u4e00\u6b65\u6307\u51fa\uff0c\u79bb\u6563\u6570\u5b66\u5728\u8bbe\u8ba1\u5b89\u5168\u65b9\u9762\u7684\u7b97\u6cd5\uff08\u4e0d\u5c40\u9650\u4e8e\u5bc6\u7801\u5b66\uff09\u65f6\u4f1a\u7528\u5230\u3002\u4f8b\u5982\uff0c\u4fe1\u5de5\u6240\u9648\u607a\u535a\u58eb2015\u5e74USENIX Security \u7684\u6587\u7ae0[2]\u4e2d\u7528\u7684\u56fe\u8bba\uff0c\u4f7f\u5f97\u6a21\u578b\u5f88\u6e05\u6670\u7b80\u6d01\u3002\u7b14\u8005\u6ce8\uff1a2013\u5e74USENIX Security\u7684 Best Studnet Paper [3]\u4e5f\u662f\u57fa\u4e8e\u56fe\u8bba\uff0c\u6765\u5efa\u7acb\u7684\u653b\u9632\u6a21\u578b\u3002 \u53e6\u5916\u59dc\u8001\u5e08\u81ea\u5df1\u5173\u4e8e\u5783\u573e\u90ae\u4ef6\u8fc7\u6ee4\u7684\u6587\u7ae0[4]\uff0c\u5e94\u7528\u4e86\u504f\u5e8f\u5173\u7cfb\u3002\u59dc\u8001\u5e08\u8fdb\u4e00\u6b65\u6307\u51fa\uff0c\u96c6\u5408\u8bba\u4e2d\u51fd\u6570\u7684\u6982\u5ff5\u3001 \u7b49\u4ef7\u5173\u7cfb\u3001\u504f\u5e8f\u5173\u7cfb\u5728\u5b89\u5168\u7814\u7a76\u4e2d\u90fd\u6709\u76f4\u63a5\u5e94\u7528\u3002\u53e6\u5916\uff0c\u4ee3\u6570\u7ed3\u6784\u4e5f\u662f\u5bc6\u7801\u5b66\u7684\u57fa\u7840\u3002<\/span><\/p>\n

E.\u5927\u90e8\u5206\u5b89\u5168\u9886\u57df\uff0c\u5982\u7cfb\u7edf\u5b89\u5168\u3001\u7f51\u7edc\u5b89\u5168\u548c\u5e94\u7528\u5b89\u5168\u5bf9\u6570\u5b66\u77e5\u8bc6\u7684\u8981\u6c42\u4e0d\u9ad8\u3002<\/b><\/p>\n

\u6e05\u534e\u7684\u6bb5\u6d77\u65b0\u8001\u5e08\u8ba4\u4e3a\uff0c\u7cfb\u7edf\u5b89\u5168\u548c\u7f51\u7edc\u5b89\u5168\u9886\u57df\uff0c<\/span>\u4e00\u4e2a\u903b\u8f91\u6e05\u6670\u7684\u5934\u8111\uff0c\u6bd4\u5b66\u4e00\u5927\u5806\u6c38\u8fdc\u4e5f\u7528\u4e0d\u4e0a\u7684\u6570\u5b66\u66f4\u91cd\u8981<\/span>\uff0c\u5e76\u4e3e\u4f8b\u8bf4\u660e\u3002USENIX Security (\u56db\u5927\u9876\u7ea7\u5b89\u5168\u4f1a\u8bae\u4e4b\u4e00\uff09\u4e24\u6b21Best of time award \u5206\u522b\u53d1\u7ed9\u4e86TOR[5]\uff0c \u548c\u5806\u6808\u968f\u673a\u5316\u4fdd\u62a4\uff08Canary)[6]. \u4e24\u7bc7\u6587\u7ae0\u90fd\u662f\u7ecf\u5386\u4e86\u5386\u53f2\u7684\u8003\u9a8c\uff0c\u6709\u5f88\u5927\u7684\u5b9e\u7528\u4ef7\u503c\uff0c\u4f46\u90fd\u6ca1\u6709\u7528\u5230\u9ad8\u6df1\u7684\u6570\u5b66\u77e5\u8bc6\u3002<\/span><\/p>\n

\u6bb5\u8001\u5e08\u8fd8\u63d0\u5230\uff0c\u7f51\u7edc\u6216\u7cfb\u7edf\u7684\u5b89\u5168\u95ee\u9898\uff0c\u6709\u7684\u53ef\u4ee5\u62bd\u8c61\u6216\u7b80\u5316\u6210\u6570\u5b66\u95ee\u9898\u3002\u4f46\u66f4\u591a\u7684\u5b89\u5168\u95ee\u9898\uff0c\u7531\u4e8e\u8fc7\u4e8e\u590d\u6742\u800c\u96be\u4ee5\u62bd\u8c61\uff0c\u4ee5\u81f3\u4e8e\u7528\u6570\u5b66\u65b9\u6cd5\u5efa\u7acb\u6a21\u578b\u4ee5\u540e\uff0c\u5df2\u7ecf\u4e25\u91cd\u504f\u79bb\u4e86\u5b9e\u9645\u95ee\u9898\u3002\u6700\u540e\u7528\u6570\u5b66\u7684\u65b9\u5f0f\u6765\u89e3\u51b3\u7684\u95ee\u9898\uff0c\u53ea\u80fd\u662f\u5047\u60f3\u7684\u3001\u8131\u79bb\u5b9e\u9645\u7684\u95ee\u9898\uff0c\u5bfc\u81f4\u65e0\u6cd5\u5728\u5b9e\u9645\u7684\u7f51\u7edc\u6216\u7cfb\u7edf\u4e2d\u5e94\u7528\u3002\u5b89\u5168\u7814\u7a76\u7684\u662f\u4eba\u4e0e\u4eba\u7684\u5bf9\u6297\uff0c\u800c\u4eba\u7684\u60f3\u6cd5\u662f\u5f88\u96be\u7528\u6570\u5b66\u6765\u63cf\u8ff0\u7684\u3002\u9762\u5411\u73b0\u5b9e\u95ee\u9898\u7684\u7814\u7a76\uff0c\u5e94\u8be5\u4ece\u7406\u89e3\u95ee\u9898\u672c\u8eab\u51fa\u53d1\uff08\u6bd4\u5982\u4e86\u89e3\u653b\u51fb\uff09\uff0c\u5bfb\u627e\u771f\u6b63\u6709\u6548\u7684\u89e3\u51b3\u65b9\u6cd5\uff08\u5f80\u5f80\u5f88\u7b80\u6377\u3001\u4fbf\u4e8e\u5b9e\u73b0\u6216\u90e8\u7f72\uff09\uff0c\u800c\u4e0d\u662f\u770b\u4e0a\u53bb\u5f88\u201c\u6570\u5b66\u201d\u3002\u77e5\u9053\u521b\u5b87\u7684\u6768\u5180\u9f99\u63d0\u5230\uff0c\u5176\u5728\u5b89\u5168\u7814\u7a76\u4e2d\uff0c\u7528\u5230\u6700\u591a\u7684\u662fSVM\u548c\u8d1d\u53f6\u65af\uff0c\u6709\u65f6\u4f1a\u7528\u7684\u795e\u7ecf\u5143\u65b9\u9762\u7684\u77e5\u8bc6\u3002<\/span><\/p>\n

Berkeley\u7684\u6c5f\u5065\u4e5f\u63d0\u5230\uff0c\u5b89\u5168\u5de5\u7a0b\u9886\u57df\u7684\u5f88\u591a\u95ee\u9898\u662f\u7531\u4eba\u4e3a\u56e0\u7d20\u5bfc\u81f4\u7684\uff0c\u5f88\u96be\u7528\u6570\u5b66\u95ee\u9898\u6765\u63cf\u8ff0\u3002\u767e\u5ea6\u7684\u97e6\u97ec\u4e3e\u4f8b\u8bf4\u660e\uff0c\u4ee3\u7801\u7684\u5b89\u5168\u6027\u8bc1\u660e\uff0c\u7531\u4e8e\u5176\u627f\u8f7d\u7740\u590d\u6742\u7684\u903b\u8f91\uff0c\u76ee\u524d\u7684\u6570\u5b66\u5e76\u4e0d\u64c5\u957f\u3002\u542f\u660e\u661f\u8fb0\u7684\u6f58\u67f1\u5ef7\u8ba4\u4e3a\uff0c\u4e0d\u662f\u6240\u6709\u6709\u4ef7\u503c\u7684\u5b89\u5168\u7814\u7a76\u90fd\u662f\u76f4\u63a5\u4f9d\u8d56\u6570\u5b66\u3002\u5e76\u8ba4\u4e3a\u6570\u5b66\u662f\u5929\u82b1\u677f\uff0c\u5728\u65e5\u5e38\u7684\u5b89\u5168\u7814\u7a76\u4e2d\u662f\u611f\u89c9\u4e0d\u5230\u7684\u3002\u4e2d\u79d1\u9662\u8f6f\u4ef6\u6240\u7684\u4e01\u4e3d\u840d\u8ba4\u4e3a\uff0c\u6570\u5b66\u65b9\u6cd5\u6709\u65f6\u662f\u89e3\u51b3\u95ee\u9898\u7684\u74f6\u9888\u3002\u4f8b\u5982\u540c\u6001\u52a0\u5bc6\uff0c\u5982\u679c\u6709\u597d\u7684\u6570\u5b66\u65b9\u6cd5\u80fd\u89e3\u51b3\u6027\u80fd\u95ee\u9898\uff0c\u5c31\u53ef\u4ee5\u5e26\u6765\u5e94\u7528\u4e0a\u7684\u7a81\u7834\u3002<\/span><\/p>\n

F.\u5b89\u5168\u7814\u7a76\u7684\u91cd\u70b9\u662f\u653b\u9632<\/b><\/p>\n

Keen Team\u7684\u5434\u77f3\u63d0\u5230\uff0c\u653b\u51fb\u7814\u7a76\u662f\u5b89\u5168\u7814\u7a76\u7684\u57fa\u77f3\u3002\u5f53\u67d0\u4e2a\u9886\u57df\u7684\u653b\u51fb\u7814\u7a76\u6ca1\u6709\u8fdb\u6b65\u65f6\uff0c\u8fd9\u4e2a\u9886\u57df\u7684\u7814\u7a76\u4e5f\u5c31\u6b7b\u4e86\u3002\u6e05\u534e\u7684\u6bb5\u6d77\u65b0\u8001\u5e08\u4e5f\u63d0\u5230\uff0c\u5b89\u5168\u7814\u7a76\u7684\u662f\u4eba\u4e0e\u4eba\u7684\u5bf9\u6297\uff0c\u8981\u4e86\u89e3\u9996\u5148\u660e\u786e\u653b\u51fb\u9632\u5fa1\u65b9\u6848\u624d\u6709\u610f\u4e49\u3002\u897f\u7535\u7684\u674e\u6656\u8001\u5e08\u8ba4\u4e3a\u7f51\u7edc\u7a7a\u95f4\u5b89\u5168\u5b66\u79d1\u533a\u522b\u4e8e\u73b0\u6709\u5b66\u79d1\u7684\u4e3b\u8981\u7279\u70b9\u662f\u5bf9\u6297\u548c\u535a\u5f08\u3002\u5e76\u4e3e\u5bc6\u7801\u5b66\u4e3a\u4f8b\u8bf4\u660e\uff0c\u5bc6\u7801\u8bbe\u8ba1\u662f\u9632\uff0c\u5bc6\u7801\u5206\u6790\u662f\u653b\u3002\u540c\u65f6\u6307\u51fa\uff0c\u653b\u9632\u6280\u672f\u4e0d\u4ec5\u9700\u8981\u7406\u8bba\u6307\u5bfc\uff0c\u4e5f\u4f1a\u968f\u7740\u81ea\u8eab\u7684\u53d1\u5c55\u5f62\u6210\u65b0\u7684\u7406\u8bba\u3002\u4e0a\u6d77\u4ea4\u5927\u7684\u90c1\u6631\u8001\u5e08\u548c\u6bb5\u8001\u5e08\u90fd\u6307\u51fa\uff0c\u5bc6\u7801\u5b66\u5c31\u662f\u7814\u7a76\u653b\u9632\uff0c\u5e76\u5728\u653b\u9632\u4e2d\u4e0d\u65ad\u8fdb\u6b65\u53d1\u5c55\u7684\u3002 \u767e\u5ea6\u7684\u97e6\u97ec\u6307\u51fa\uff0c\u65af\u5766\u798f\u5927\u5b66\u7684\u5bc6\u7801\u5b66\u5927\u725bDan Boneh \u5728Cousera\u4e0a\u5f00\u7684\u5bc6\u7801\u5b66\u8bfe\u7a0b\uff0c\u6709\u5927\u91cf\u7684\u5185\u5bb9\u662f\u63cf\u8ff0\u5bc6\u7801\u5b66\u662f\u5982\u4f55\u5728\u653b\u9632\u5bf9\u6297\u4e2d\u53d1\u5c55\u7684\u3002\u897f\u7535\u7684\u674e\u6656\u8001\u5e08\u7ed9\u5b66\u751f\u4e0a\u5bc6\u7801\u5b66\u4e5f\u662f\u91c7\u7528\u4e86\u7684Dan Boneh \u7684\u516c\u5f00\u8bfe\u3002\u4e2d\u79d1\u9662\u8f6f\u4ef6\u6240\u7684\u82cf\u749e\u777f\u8001\u5e08\u8ba4\u4e3a\uff0c\u5bc6\u7801\u5b66\u7684\u653b\u9632\u548c\u7cfb\u7edf\u5b89\u5168\u7684\u653b\u9632\u6709\u4ea4\u53c9\uff0c\u4f46\u4e5f\u6709\u5f88\u5927\u7684\u5dee\u522b\u3002<\/span><\/p>\n

\u56fd\u9632\u79d1\u5927\u7684\u5510\u52c7\u8001\u5e08\u8ba4\u4e3a\uff0c\u5bf9\u6297\u662f\u5b89\u5168\u7814\u7a76\u7684\u9a71\u52a8\u529b\u548c\u751f\u547d\u529b\u4e4b\u4e00\uff0c\u56e0\u4e3a\u6f0f\u6d1e\u65e0\u6cd5\u907f\u514d\uff0c\u6240\u4ee5\u5bf9\u6297\u6c38\u8fdc\u5b58\u5728\u3002\u9999\u6e2f\u4e2d\u6587\u5927\u5b66\u7684\u5f20\u514b\u73af\u8001\u5e08\u4e5f\u8ba4\u4e3a\uff0c\u5b89\u5168\u7814\u7a76\u4e2d\u7684\u5b9e\u9645\u95ee\u9898\uff0c\u6839\u672c\u6765\u81ea\u4e8e\u653b\u9632\u53cc\u65b9\u7684\u5bf9\u6297\u3002\u5982\u540c\u519b\u4e8b\u9886\u57df\u7684\u5bf9\u6297\u5e26\u52a8\u4e86\u4e00\u5927\u6279\u76f8\u5173\u6280\u672f\u7684\u53d1\u5c55\u4e00\u6837\uff0c\u7f51\u7edc\u5b89\u5168\u7684\u5bf9\u6297\u4e5f\u662f\u4fc3\u8fdb\u5b89\u5168\u6280\u672f\u7684\u539f\u59cb\u52a8\u529b\u3002<\/span><\/p>\n

5.\u603b\u7ed3<\/h2>\n

\u6570\u5b66\u5bf9\u5b89\u5168\u7814\u7a76\uff0c\u6216\u8005\u5176\u5b83\u7684\u5b9e\u9645\u5de5\u4f5c\u662f\u5426\u6709\u5e2e\u52a9\uff0c\u8ddf\u7814\u7a76\u7684\u95ee\u9898\u548c\u5de5\u4f5c\u6027\u8d28\u6709\u5173\u3002\u6709\u7684\u5de5\u4f5c\u53ef\u80fd\u4e0d\u9700\u8981\u6570\u5b66\uff0c\u4f46\u6709\u7684\u5de5\u4f5c\u5219\u4f9d\u8d56\u4e8e\u6570\u5b66\u7684\u67d0\u4e2a\u5206\u652f\u3002\u4e0d\u7ba1\u4e00\u4e2a\u7814\u7a76\u9886\u57df\u662f\u5426\u9700\u8981\u9ad8\u6df1\u7684\u6570\u5b66\uff0c\u4e0d\u53ef\u5426\u8ba4\u7684\u662f\uff0c\u6570\u5b66\u5bf9\u903b\u8f91\u601d\u7ef4\u548c\u62bd\u8c61\u601d\u7ef4\u80fd\u529b\u7684\u57f9\u517b\u662f\u5f88\u6709\u5e2e\u52a9\u7684\u3002\u800c\u903b\u8f91\u601d\u7ef4\u548c\u62bd\u8c61\u80fd\u529b\uff0c\u4e0d\u4ec5\u5bf9\u5b89\u5168\u7814\u7a76\u6709\u7740\u91cd\u8981\u7684\u4f5c\u7528\uff0c\u5bf9\u5176\u5b83\u79d1\u5b66\u6216\u5de5\u7a0b\u7814\u7a76\uff0c\u4e5f\u90fd\u975e\u5e38\u91cd\u8981\u3002\u56e0\u6b64\uff0c\u5728\u5b66\u4e60\u6570\u5b66\u65f6\uff0c\u4e0d\u8981\u5f3a\u8c03\u6b7b\u8bb0\u786c\u80cc\uff0c\u548c\u505a\u9898\u5e94\u4ed8\u8003\u8bd5\u3002\u800c\u662f\u8981\u80fd\u641e\u6e05\u695a\u6570\u5b66\u89c4\u5f8b\uff08\u5982\u5b9a\u7406\uff09\u80cc\u540e\u7684\u903b\u8f91\u4ee5\u53ca\u548c\u5176\u5b83\u6570\u5b66\u95ee\u9898\u6216\u5176\u5b83\u9886\u57df\u76f8\u5173\u4e8b\u4ef6\u7684\u5173\u7cfb\uff0c\u4ece\u800c\u8fbe\u5230\u57f9\u517b\u81ea\u5df1\u903b\u8f91\u601d\u7ef4\u548c\u62bd\u8c61\u80fd\u529b\u7684\u76ee\u7684\u3002<\/span><\/p>\n

References<\/b><\/p>\n

[1]<\/span>\u4e2d\u534e\u4eba\u6c11\u5171\u548c\u56fd\u5b66\u79d1\u5206\u7c7b\u4e0e\u4ee3\u7801\u56fd\u5bb6\u6807\u51c6\uff0chttps:\/\/zh.wikipedia.org\/wiki\/\u4e2d\u56fd\u5b66\u79d1\u5206\u7c7b\u56fd\u5bb6\u6807\u51c6\/110<\/span><\/a><\/p>\n

[2] Kai Chen, Peng Wang, Yeonjoon Lee, XiaoFeng Wang, Nan Zhang, Heqing Huang, Wei Zou, and Peng Liu.<\/span> Finding unknown malice in 10 seconds: Mass vetting for new threats at the google-play scale<\/b><\/a>. In <\/span>the\u00a0<\/span>Proceedings of the <\/span><\/i>24th USENIX Security Symposium<\/span><\/i>, August 2015.<\/span><\/p>\n

[3] Frank Imeson, et al. <\/span>Securing Computer Hardware Using 3D Integrated Circuit (IC) Technology and Split Manufacturing for Obfuscation<\/b>.<\/span><\/a> In <\/span>the\u00a0<\/span>Proceedings of the <\/span><\/i>22nd USENIX Security<\/span><\/i>. August 2013.<\/span><\/p>\n

[4]<\/span> \u5f20\u5c3c, \u59dc\u8a89, \u65b9\u6ee8\u5174, \u90ed\u8389. <\/span>\u57fa\u4e8e\u90ae\u4ef6\u8def\u5f84\u5730\u7406\u5c5e\u6027\u5206\u6790\u7684\u5783\u573e\u90ae\u4ef6\u8fc7\u6ee4\u7b97\u6cd5<\/b><\/a>. <\/span>\u901a\u4fe1\u5b66\u62a5<\/span><\/i> 2007, 28 (12): 90-95.<\/span><\/p>\n

[5] <\/span>Roger Dingledine, Nick Mathewson, and Paul Syverson.<\/span> Tor: the Second-Generation Onion Router<\/b><\/a>. <\/span>In the\u00a0<\/span>Proceedings of the 13th USENIX Security Symposium<\/span><\/i>, August 2004.<\/span><\/p>\n

[6] <\/span>Crispin Cowan, et al.<\/span> StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks<\/b>. <\/span><\/a>In the\u00a0<\/span>Proceedings of the 7th USENIX Security Symposium<\/span><\/i>, January 1998.<\/span><\/p>\n

\u4f5c\u8005\u7b80\u4ecb<\/h2>\n

\u4e07\u6d9b\u535a\u58eb, \u534e\u4e3a\u52a0\u62ff\u5927\u7814\u7a76\u6240\u7814\u7a76\u5458\uff0c\u957f\u671f\u4ece\u4e8b\u4e92\u8054\u7f51\u5b89\u5168\u9886\u57df\u7684\u7814\u7a76\u548c\u5f00\u53d1\u5de5\u4f5c, \u91cd\u70b9\u5173\u6ce8Web, mobile, CDN, Routing,\u00a0SDN, 5G, PKI, \u548cTLS\u7b49\u9886\u57df\u7684\u5b89\u5168\u3002\u5728NDSS\uff0c Oakland, USENIX Security \u548c ACM TISSEC\u00a0\u7b49\u5b89\u5168\u4f1a\u8bae\u548c\u5b89\u5168\u6742\u5fd7\u4e0a\u53d1\u8868\u8fc7\u6587\u7ae0\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

\u4f5c\u8005\uff1a\u4e07\u6d9b\/\u534e\u4e3a\u52a0\u62ff\u5927 1.\u6982\u8ff0 \u6570\u5b66\u662f\u4ece\u5c0f\u5b66\u3001\u4e2d\u5b66\u3001\u5230\u5927\u5b66\u7684\u5fc5\u4fee\u8bfe\u7a0b\uff0c\u6bcf\u4e2a\u4eba\u5728\u4e0a\u5b66\u671f\u95f4\u90fd\u82b1\u8d39\u4e86\u5927\u91cf… Continue reading → <\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-594","post","type-post","status-publish","format-standard","hentry","category-research"],"_links":{"self":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/594","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=594"}],"version-history":[{"count":7,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/594\/revisions"}],"predecessor-version":[{"id":626,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/594\/revisions\/626"}],"wp:attachment":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=594"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=594"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=594"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}