IT博客-gnaw0725博客-随笔分类-网络安全http://www.cnitblog.com/gnaw0725/category/8945.html活动目录、网络安全、系统管理zh-cnMon, 24 Aug 2015 15:49:43 GMTMon, 24 Aug 2015 15:49:43 GMT602015 H1 DDoS报告：DDoS攻击呈两极分化http://www.cnitblog.com/gnaw0725/archive/2015/08/24/90184.htmlgnaw0725gnaw0725Mon, 24 Aug 2015 02:11:00 GMThttp://www.cnitblog.com/gnaw0725/archive/2015/08/24/90184.htmlhttp://www.cnitblog.com/gnaw0725/comments/90184.htmlhttp://www.cnitblog.com/gnaw0725/archive/2015/08/24/90184.html#Feedback0http://www.cnitblog.com/gnaw0725/comments/commentRss/90184.htmlhttp://www.cnitblog.com/gnaw0725/services/trackbacks/90184.html100G的攻击有33起）并开始走向云端，小流量攻击（1分钟以下42.74%）变身脉冲及慢速攻击，主要针对行业业务特性。在此背景下，攻击流量呈现混合化，并以UDP混合流量为主（72%）。  阅读全文

gnaw0725 2015-08-24 10:11 发表评论
]]>PHP远程DoS漏洞深入分析
及防护方案http://www.cnitblog.com/gnaw0725/archive/2015/05/20/90104.htmlgnaw0725gnaw0725Wed, 20 May 2015 05:44:00 GMThttp://www.cnitblog.com/gnaw0725/archive/2015/05/20/90104.htmlhttp://www.cnitblog.com/gnaw0725/comments/90104.htmlhttp://www.cnitblog.com/gnaw0725/archive/2015/05/20/90104.html#Feedback0http://www.cnitblog.com/gnaw0725/comments/commentRss/90104.htmlhttp://www.cnitblog.com/gnaw0725/services/trackbacks/90104.html
一旦被利用成功，可以在迅速消耗被攻击主机的CPU资源，从而达到DoS的目的；
PHP在全球的部署量相当大，为攻击者提供了相当多可以攻击的目标；
PHP官方目前仅给出了5.4及5.5版本的补丁受此漏洞影响的软件及系统包括PHP的如下版本。
PHP 5.0.0 – 5.0.5
PHP 5.1.0 – 5.1.6
PHP 5.2.0 – 5.2.17
PHP 5.3.0 – 5.3.29
PHP 5.4.0 – 5.4.40
PHP 5.5.0 – 5.5.24
PHP 5.6.0 – 5.6.8
绿盟科技常年密切关注PHP的安全问题。绿盟科技威胁响应中心在获知相关信息后，随即启动应急机制，相关  阅读全文

gnaw0725 2015-05-20 13:44 发表评论
]]>2014绿盟科技互联网金融安全报告http://www.cnitblog.com/gnaw0725/archive/2015/05/15/90098.htmlgnaw0725gnaw0725Fri, 15 May 2015 07:37:00 GMThttp://www.cnitblog.com/gnaw0725/archive/2015/05/15/90098.htmlhttp://www.cnitblog.com/gnaw0725/comments/90098.htmlhttp://www.cnitblog.com/gnaw0725/archive/2015/05/15/90098.html#Feedback0http://www.cnitblog.com/gnaw0725/comments/commentRss/90098.htmlhttp://www.cnitblog.com/gnaw0725/services/trackbacks/90098.html阅读全文

gnaw0725 2015-05-15 15:37 发表评论
]]>IIS7 HTTP.sys漏洞深入分析http://www.cnitblog.com/gnaw0725/archive/2015/04/18/90067.htmlgnaw0725gnaw0725Sat, 18 Apr 2015 12:57:00 GMThttp://www.cnitblog.com/gnaw0725/archive/2015/04/18/90067.htmlhttp://www.cnitblog.com/gnaw0725/comments/90067.htmlhttp://www.cnitblog.com/gnaw0725/archive/2015/04/18/90067.html#Feedback0http://www.cnitblog.com/gnaw0725/comments/commentRss/90067.htmlhttp://www.cnitblog.com/gnaw0725/services/trackbacks/90067.html阅读全文

gnaw0725 2015-04-18 20:57 发表评论
]]>2014年绿盟科技DDoS威胁报告http://www.cnitblog.com/gnaw0725/archive/2015/03/11/90005.htmlgnaw0725gnaw0725Wed, 11 Mar 2015 09:29:00 GMThttp://www.cnitblog.com/gnaw0725/archive/2015/03/11/90005.htmlhttp://www.cnitblog.com/gnaw0725/comments/90005.htmlhttp://www.cnitblog.com/gnaw0725/archive/2015/03/11/90005.html#Feedback0http://www.cnitblog.com/gnaw0725/comments/commentRss/90005.htmlhttp://www.cnitblog.com/gnaw0725/services/trackbacks/90005.html阅读全文

gnaw0725 2015-03-11 17:29 发表评论
]]>你以为你了解DDoS攻击吗？http://www.cnitblog.com/gnaw0725/archive/2015/01/04/89924.htmlgnaw0725gnaw0725Sun, 04 Jan 2015 03:24:00 GMThttp://www.cnitblog.com/gnaw0725/archive/2015/01/04/89924.htmlhttp://www.cnitblog.com/gnaw0725/comments/89924.htmlhttp://www.cnitblog.com/gnaw0725/archive/2015/01/04/89924.html#Feedback0http://www.cnitblog.com/gnaw0725/comments/commentRss/89924.htmlhttp://www.cnitblog.com/gnaw0725/services/trackbacks/89924.html
绿盟科技安全+技术刊物再一张DDoS攻击信息图，看了你就知道：  阅读全文

gnaw0725 2015-01-04 11:24 发表评论
]]>DDoS攻击防御http://www.cnitblog.com/gnaw0725/archive/2014/12/30/89920.htmlgnaw0725gnaw0725Tue, 30 Dec 2014 01:30:00 GMThttp://www.cnitblog.com/gnaw0725/archive/2014/12/30/89920.htmlhttp://www.cnitblog.com/gnaw0725/comments/89920.htmlhttp://www.cnitblog.com/gnaw0725/archive/2014/12/30/89920.html#Feedback0http://www.cnitblog.com/gnaw0725/comments/commentRss/89920.htmlhttp://www.cnitblog.com/gnaw0725/services/trackbacks/89920.html阅读全文

gnaw0725 2014-12-30 09:30 发表评论
]]>揭秘DDoS攻击http://www.cnitblog.com/gnaw0725/archive/2014/12/29/89917.htmlgnaw0725gnaw0725Mon, 29 Dec 2014 05:05:00 GMThttp://www.cnitblog.com/gnaw0725/archive/2014/12/29/89917.htmlhttp://www.cnitblog.com/gnaw0725/comments/89917.htmlhttp://www.cnitblog.com/gnaw0725/archive/2014/12/29/89917.html#Feedback0http://www.cnitblog.com/gnaw0725/comments/commentRss/89917.htmlhttp://www.cnitblog.com/gnaw0725/services/trackbacks/89917.html阅读全文

gnaw0725 2014-12-29 13:05 发表评论
]]>抗ddos设备http://www.cnitblog.com/gnaw0725/archive/2014/12/26/89912.htmlgnaw0725gnaw0725Fri, 26 Dec 2014 02:14:00 GMThttp://www.cnitblog.com/gnaw0725/archive/2014/12/26/89912.htmlhttp://www.cnitblog.com/gnaw0725/comments/89912.htmlhttp://www.cnitblog.com/gnaw0725/archive/2014/12/26/89912.html#Feedback0http://www.cnitblog.com/gnaw0725/comments/commentRss/89912.htmlhttp://www.cnitblog.com/gnaw0725/services/trackbacks/89912.html阅读全文

gnaw0725 2014-12-26 10:14 发表评论
]]>DDoS攻击防御方案 http://www.cnitblog.com/gnaw0725/archive/2014/12/25/89908.htmlgnaw0725gnaw0725Thu, 25 Dec 2014 02:31:00 GMThttp://www.cnitblog.com/gnaw0725/archive/2014/12/25/89908.htmlhttp://www.cnitblog.com/gnaw0725/comments/89908.htmlhttp://www.cnitblog.com/gnaw0725/archive/2014/12/25/89908.html#Feedback0http://www.cnitblog.com/gnaw0725/comments/commentRss/89908.htmlhttp://www.cnitblog.com/gnaw0725/services/trackbacks/89908.html阅读全文

gnaw0725 2014-12-25 10:31 发表评论
]]>DDoS攻击态势http://www.cnitblog.com/gnaw0725/archive/2014/12/24/89906.htmlgnaw0725gnaw0725Wed, 24 Dec 2014 06:48:00 GMThttp://www.cnitblog.com/gnaw0725/archive/2014/12/24/89906.htmlhttp://www.cnitblog.com/gnaw0725/comments/89906.htmlhttp://www.cnitblog.com/gnaw0725/archive/2014/12/24/89906.html#Feedback0http://www.cnitblog.com/gnaw0725/comments/commentRss/89906.htmlhttp://www.cnitblog.com/gnaw0725/services/trackbacks/89906.html阅读全文

gnaw0725 2014-12-24 14:48 发表评论
]]>DDoS流量清洗方案http://www.cnitblog.com/gnaw0725/archive/2014/12/23/89903.htmlgnaw0725gnaw0725Tue, 23 Dec 2014 05:27:00 GMThttp://www.cnitblog.com/gnaw0725/archive/2014/12/23/89903.htmlhttp://www.cnitblog.com/gnaw0725/comments/89903.htmlhttp://www.cnitblog.com/gnaw0725/archive/2014/12/23/89903.html#Feedback0http://www.cnitblog.com/gnaw0725/comments/commentRss/89903.htmlhttp://www.cnitblog.com/gnaw0725/services/trackbacks/89903.html阅读全文

gnaw0725 2014-12-23 13:27 发表评论
]]>2014年DDoS攻击事件分析http://www.cnitblog.com/gnaw0725/archive/2014/12/22/89898.htmlgnaw0725gnaw0725Mon, 22 Dec 2014 01:55:00 GMThttp://www.cnitblog.com/gnaw0725/archive/2014/12/22/89898.htmlhttp://www.cnitblog.com/gnaw0725/comments/89898.htmlhttp://www.cnitblog.com/gnaw0725/archive/2014/12/22/89898.html#Feedback0http://www.cnitblog.com/gnaw0725/comments/commentRss/89898.htmlhttp://www.cnitblog.com/gnaw0725/services/trackbacks/89898.html阅读全文

gnaw0725 2014-12-22 09:55 发表评论
]]>