What caused me to be weak in information security technology

The overall strength of information security technology in our country is still very high, but the main reason is that the general group does not pay enough attention, and the cost is not affordable to ordinary people, that is, the funds limit us, and the traditional concept of security is no longer suitable for the rapid development of modern society, causing us to think that our information security is already very strong, and it is weak in comparison.

If you want to have a strong strength in information security and network security, you must be proficient in and familiar with the following computer knowledge: proficient programming of C language and assembly language, computer operating system principles, computer network principles and the frame format of information packets of various network protocols, as well as the underlying programming technology of the network, and be able to skillfully use various network tools and software to test and analyze various problems in the network.

The main threats to information system security are:

1. Information leakage: information is leaked or disclosed to unauthorized entities.

2. Destroying the integrity of information: Losses caused by data additions, deletions, modifications or destruction without authorization.

3. Denial of Service: Stop service and block legitimate access to information or other resources.

4. Unauthorized access: the use of network or computer resources without prior consent.

5. Authorization infringement: The use of authorization to use authority for other illegal purposes is also known as "internal attack".

6. Business flow analysis: Through long-term monitoring of the system, statistical analysis methods are used to study parameters such as communication frequency, communication information flow direction, and changes in the total amount of communication, so as to find valuable information and rules.

7. Eavesdropping: stealing information resources and sensitive information in the system with the help of relevant equipment and technical means. For example, the transmission signal in the communication line is monitored, or the electromagnetic leakage generated by the communication equipment in the process of work is used to intercept useful information.

8. Physical incursion: The intruder bypasses physical control and gains access to the system. For example, bypass control is when an attacker exploits a system's security flaws or security vulnerabilities to gain unauthorized rights or privileges to bypass the defense guards and infiltrate the interior of the system.

9. Malice: computer viruses, Trojan horses, worms, etc. damage computer systems or steal sensitive data in computers.

1. Impersonation and fraud: By deceiving the communication system (or user), illegal users pretend to be legitimate users, or users with small privileges pretend to become users with large privileges.

11. Denial: denying that he has ever released news, forging letters from the other party, etc.

12. Replay attack: also known as replay attack and replay attack, it means that based on illegal purposes, the attacker sends a packet that has been accepted by the destination host to achieve the purpose of deceiving the system. Replay attacks are mainly used in the authentication process to undermine the correctness of authentication.

13. Trap door: It is usually a means of entry that programmers deliberately establish when designing a system. When the program is running, pressing the right key at the right time, or providing the right parameters, can bypass the normal security detection and error tracking checks that the program provides.

14. Disposal: Obtaining sensitive information from discarded disks or printed storage media.

15. Carelessness of personnel: The authorized person leaks information to unauthorized persons for various benefits or due to carelessness.

(1) Information Disclosure: Information is leaked or disclosed to an unauthorized entity.

2) Destruction of the integrity of information: Data is lost due to unauthorized addition, deletion, modification or destruction.

3) Denial of Service: Legitimate access to information or other resources is unconditionally blocked.

4) Unauthorized use (unauthorized access): A resource is used by an unauthorized person or in an unauthorized manner.

5) Eavesdropping: Stealing information resources and sensitive information in the system by all possible legal or illegal means. For example, for communication.

The signal transmitted in the line is monitored by the wire, or the electromagnetic leakage generated by the communication equipment in the process of work is used to intercept useful information.

Wait. (6) Business flow analysis: Through long-term monitoring of the system, statistical analysis methods are used to analyze information such as communication frequency and communication.

Parameters such as the flow of information and the change of the total amount of communication are studied to find valuable information and rules.

7) Impersonation: By deceiving the communication system (or user) to achieve illegal users to pretend to be legitimate users, or to have few privileges.

The purpose of the user to impersonate himself as a privileged user. Hackers mostly use fake attacks.

Right. For example, an attacker can use various attack methods to discover some system "features" that should be kept secret but are exposed, and use these "features" to bypass the defense guards to break into the system.

9) Authorization Infringement: A person who is authorized to use a system or resource for a certain purpose, but uses this permission for other non-grants.

The purpose of the right is also called "internal attack".

10) Trojan Horse: Software contains an imperceptible harmful segment of the program that, when executed, destroys the user.

Safe. This application is called a Trojan horse.

11) Trap Door: A "trap" set up in a certain system or a certain component to allow violation of a specific data entry.

Security policy. (12) Denial: This is an attack from users, such as: denying that they have posted a certain message, forging a pair.

Fang Lai letter, etc. (13) Replay: Copying and resending a legal communication data intercepted for illegal purposes.

14) Computer virus: a program that can achieve infection and infringement functions during the operation of a computer system.

15) Personnel carelessness: An authorized person leaks information to an unauthorized person for some benefit, or due to carelessness.

16) Obsolete: Information is obtained from discarded diskettes or printed storage media.

17) Physical Intrusion: An intruder bypasses physical controls to gain access to the system.

18) Theft: The theft of important security items such as tokens or identity cards.

19) Business deception: A pseudo system or system component deceives legitimate users or systems to voluntarily give up sensitive information, etc.

At present, the main threat factors to China's information security include the following aspects:

Cyber attacks: These include hacking, phishing, malware, etc., which can lead to leakage of confidential information, system down, and more.

Data breaches: These include external attacks, internal employee mistakes, etc., which may lead to the leakage of personal privacy, confidential company information, etc.

Mobile device threats: These include lost mobile devices, unauthorized access, and malware, which can lead to data theft or remote control of devices.

Chain security issues: including security vulnerabilities, malware, malicious operations, etc., which will affect the information security of the enterprise itself.

Human factors: Lack of employee awareness, negligence, social engineering, etc., these threats can affect the information security within the enterprise.

Physical security issues: These include device loss, device damage, device theft, and more, which can lead to the leakage of device data.

To sum up, China's information security is facing a variety of threat factors, and enterprises need to take comprehensive measures to protect their information security.