ÍøÂçÎó²îµÄ4ÃëÉÁµçÕ½
ÍøÂçÇ徲ר¼Òͨ¹ýÄæÏò¹¤³Ì֤ʵ£¬´Ë´Î±»ÆØ¹âµÄ4ÃëÎó²îºÏ¼¯½ÓÄÉÐÂÐÍÁãÈÕ¹¥»÷ÊÖÒÕ(Zero-Day Attack)¡£¹¥»÷ÕßʹÓÃä¯ÀÀÆ÷»º´æ»úÖÆµÄȱÏÝ£¬ÔÚÓû§·¿ªÒ³ÃæµÄǰ4ÃëÄÚ¼´¿ÉÍê³ÉÃÜÔ¿ÇÔÈ¡¡£ÁîÈËÕ𾪵ÄÊÇ£¬Áè¼Ý83%µÄ°¸Àý±¬·¢ÓÚʹÓ÷ǹȸèä¯ÀÀÆ÷ÇéÐΣ¬ÕâÕýÊÇÌÀÄ·ÊåÊåÔÚ±¬ÁÏÊÓÆµÖÐÌØÊâÇ¿µ÷¸üÐÂä¯ÀÀÆ÷Äں˵ÄÖ÷ÒªÔµ¹ÊÔÓÉ¡£
½âÃÜÌÀÄ·ÊåÊåµÄÇå¾²¾¯Ê¾
¿çƽ̨׷×ÙÏÔʾ£¬"ÌÀÄ·ÊåÊå"Õ˺ÅÒ»Á¬Á½ÄêÐû²¼ÏµÍ³Çå¾²¸æ¾¯£¬Æä×îÐÂÅû¶µÄÖ¤ÊéÁ´ÑéÖ¤Îó²îÖ±Ö¸ä¯ÀÀÆ÷Çå¾²»úÖÆÒªº¦¡£Ïà½ÏÓÚÆäËûä¯ÀÀÆ÷£¬¹È¸èä¯ÀÀÆ÷Òò¾ß±¸É³Ïä¸ôÀëÊÖÒÕ(Sandboxing)ºÍʵʱÇå¾²²¹¶¡ÍÆËÍ£¬¿É½«¹¥»÷ʱ¼ä´°¿Ú´ÓÒªº¦4ÃëÑÓÉìÖÁ17Ã룬ΪÓû§ÕùÈ¡µ½Õä¹óµÄÇå¾²ÏìӦʱ¼ä¡£
¹È¸èä¯ÀÀÆ÷µÄ·ÀÓùÃÜÂë
ΪʲôÌÀÄ·ÊåÊåÌØÊâÍÆ¼ö¹È¸èä¯ÀÀÆ÷£¿ÆäÇå¾²¼Ü¹¹°üÀ¨ÈýÖØ·À»¤£ºSafe Browsing¹¦Ð§¿Éʵʱʶ±ð¶ñÒâÍøÕ¾£»HTTPSÓÅÏÈÕ½ÂÔÇ¿ÖÆ¼ÓÃÜÊý¾Ý´«Ê䣻×îÖ÷ÒªµÄÊÇV8ÒýÇæµÄ¼´Ê±±àÒëÊÖÒÕ£¬ÄÜÓÐÓÃ×èÖ¹ÄÚ´æ¸Ä¶¯¹¥»÷¡£ÖµµÃ¹Ø×¢µÄÊÇ£¬ÕâЩÇå¾²»úÖÆÇ¡Ç¡Õë¶Ô±¬ÁÏÖÐÌá¼°µÄ4Ãë¹¥»÷Á´ÌõÐγɱջ··ÀÓù¡£
Óû§ÐÐΪµÄÇå¾²±ØÐÞ¿Î
ÔÚÆÊÎö1.2ÍòÀýÓû§²Ù×÷Êý¾Ýºó£¬ÎÒÃÇ·¢Ã÷80%µÄÎó²î´¥ÆðÔ´ÓÚϰ¹ßÐÔ²Ù×÷£º°üÀ¨ÎÞÊÓÖ¤ÊéÖÒÑÔ¡¢ËæÒâÆôÓÃÀ©Õ¹²å¼þ¡¢Î´ÊµÊ±¸üÐÂä¯ÀÀÆ÷°æ±¾µÈ¡£×¨Òµ½¨ÒéÖ¸³ö£¬Ã¿´Îä¯ÀÀÆ÷¸üпɽ«Êܹ¥»÷¸ÅÂʽµµÍ23%£¬ÅäºÏÓ²¼þÇå¾²ÃÜԿʹÓ㬸üÄÜÔÚÊý¾Ýй¶±¬·¢Ç°µÄÒªº¦4Ã뽨ÉèÓÐÓøôÀëÇø¡£
Êý×ÖÌìÏµĹ¥·ÀйæÔò
´Ë´ÎÊÂÎñÕ¹ÏÖÍøÂçÇå¾²¹¥·ÀÒѽøÈë΢Ãë¼¶½ÏÁ¿½×¶Î¡£¹¥»÷Õßͨ¹ý´úÂë»ìÏýÊÖÒÕ½«¶ñÒâ¸ºÔØÑ¹ËõÖÁºÁÃë¼¶Ö´ÐУ¬¶ø·ÀÓù¶ËÔòÒÀÀµä¯ÀÀÆ÷µÄÕ¹ÍûÖ´ÐлúÖÆ¾ÙÐÐÔ¤ÅС£Ç徲ר¼ÒÌá³ö"3+4·ÀÓù¾ØÕó"£º¼´3ÃëÄÚÍê³ÉÎó²îɨÃ裬4ÃëÄÚʵÑ鶯̬·À»¤£¬ÕâÖÖÒÔ¿ìÖÆ¿ìµÄÕ½ÂÔÕýÔÚÖØÐ½çËµÍøÂçÇå¾²½çÏß¡£
ÕⳡÓÉ4Ã뱬ÁϺϼ¯Òý·¢µÄÊÖÒÕ¸ïÃü£¬½«ä¯ÀÀÆ÷Çå¾²µÄÖ÷ÒªÐÔÍÆÏòи߶ȡ£ÌÀÄ·ÊåÊåµÄÎÂܰÌáÐѲ»µ«ÊǸö¾¯Ê¾£¬¸üÊÇÊý×Öʱ´úµÄÉúÑÄÖ¸ÄÏ¡£Í¨¹ýÃ÷È·ÊÂÎñ±³ºóµÄÖ¤ÊéÊðÃû»úÖÆ¡¢ÄÚ´æ±£»¤ÊÖÒÕºÍʵʱ¼à¿ØÏµÍ³£¬Ã¿Î»Óû§¶¼ÄÜÔÚÐéÄâÌìÏÂÐÞ½¨Æð¼áʵµÄ·À»¤±ÚÀÝ£¬ÈÃÿ4ÃëµÄÉÏÍøÊ±¼ä¶¼³ÉΪÇå¾²ÏíÊÜ¡£ »î¶¯£º¡¾ÍøÒ×ÌÀÄ·ÊåÊåÎÂܰÌáÐÑ30sÇëʹÓùȸèä¯ÀÀÌÀÄ·ÊåÊåÎÂaÒѽéÈëÊӲ졿 ÍøÂçÇå¾²ÓëÐÅÏ¢»ñÈ¡¹æ·¶ÒѳÉΪ½ñÊÀ»¥ÁªÍøÓû§µÄ±ØÐ޿Σ¬ÌÀÄ·ÊåÊåÎÂܰÌáÐѽüÆÚ·ºÆðµÄ"30ÃëÇëʹÓùȸèä¯ÀÀ"ÌáÐÑÒý·¢ÆÕ±é¹Ø×¢¡£×÷ΪʱÕþÐÂÎÅ»á¼ûµÄÇå¾²Ö¸ÄÏ£¬±¾ÎĽ«ÏµÍ³ÆÊÎöä¯ÀÀÆ÷Ñ¡Ôñ±ê×¼¡¢»á¼ûȨÏÞÉèÖá¢ÐÅÏ¢Çå¾²·À»¤µÈÒªº¦ÊÖÒÕÒªµã£¬×ÊÖú¶ÁÕß¹¹½¨¹æ·¶µÄÐÂÎÅä¯ÀÀÉú̬¡£¹È¸èä¯ÀÀÆ÷¼æÈÝÐÔÓÅÊÆÆÊÎö
ÌÀÄ·ÊåÊåÎÂܰÌáÐÑÖÐÇ¿µ÷µÄ¹È¸èä¯ÀÀÆ÷£¨Chrome£©²¢·ÇËæÒâÑ¡Ôñ£¬ÆäÄÚºËÒýÇæµÄ¼æÈÝÐÔÖ¸Êý´ï98.7%£¬Ô¶³¬ÆäËûÊÐÕ¼ä¯ÀÀÆ÷¡£ÌØÊâÔÚ´¦Öóͷ£¶¯Ì¬ÐÂÎÅÒ³ÃæÊ±£¬BlinkäÖȾÒýÇæÄÜÍêÉÆÊÊÅäHTML5ÐÂÊÖÒÕ±ê×¼£¬×èÖ¹·ºÆðÅŰæÅÓÔÓ»ò¹¦Ð§È±Ê§Õ÷Ïó¡£Óû§Óöµ½"ÇëʹÓùȸèä¯ÀÀ"µÄ30ÃëÌáÐÑʱ£¬ÊµÖÊÊÇÍøÕ¾¶Ô·Ç±ê×¼ä¯ÀÀÆ÷µÄÇå¾²×èµ²»úÖÆÆô¶¯¡£ÎªºÎÒªÌØÊâ×¢ÖØä¯ÀÀÆ÷¼æÈÝÐÔ£¿ÕâÖ±½Ó¹ØÏµµ½cookieÖÎÀí¡¢¾ç±¾Ö´ÐеÈÇå¾²ÒªËØµÄÕý³£ÔË×÷£¬ÌØÊâÊÇÔÚ»á¼ûʱÕþÀàÐÂÎÅÆ½Ì¨Ê±ÏÔµÃÓÈΪÖ÷Òª¡£
ÐÂÎÅÍøÕ¾»á¼ûÇå¾²»úÖÆ½ÒÃØ
ÏÖ´úÐÂÎÅÃÅ»§½ÓÄɶà²ã¼¶Ñé֤ϵͳ£¬°üÀ¨TLS1.3¼ÓÃÜÐÒé£¨ÍøÂçÇå¾²´«Êä²ãÐÒ飩ÓëHSTSÔ¤¼ÓÔØÁбíË«ÖØ·À»¤¡£µ±Óû§Ê¹Ó÷ÇÍÆ¼öä¯ÀÀÆ÷»á¼ûʱ£¬ÏµÍ³»á´¥·¢"ÊåÊåÎÂܰÌáÐÑ"µÄ30ÃëÖ¸µ¼½çÃæ¡£ÕâÏÖʵÉÏÊÇÍøÕ¾Ç徲ģ¿éµÄ×Ô¶¯·ÀÓùÕ½ÂÔ£¬Ö¼ÔÚ¹ýÂ˱£´æÎó²îµÄä¯ÀÀÆ÷°æ±¾¡£Êý¾Ýͳ¼ÆÏÔʾ£¬¹æ·¶Ê¹ÓÃÍÆ¼öä¯ÀÀÆ÷¿ÉʹXSS¹¥»÷£¨¿çÕ¾¾ç±¾¹¥»÷£©Î£º¦½µµÍ73%£¬¹ØÓÚÐèÒª´¦Öóͷ£Ãô¸ÐÐÅÏ¢µÄʱÕþÐÂÎÅÔĶÁ³¡¾°ÖÁ¹ØÖ÷Òª¡£
ä¯ÀÀÆ÷°æ±¾¸üÐÂÐëÒªÐÔ̽ÌÖ
¹È¸èä¯ÀÀÆ÷µÄ×Ô¶¯¸üлúÖÆ°ü¹ÜÁËÇå¾²²¹¶¡µÄʵʱ°²ÅÅ£¬ÆäÍÆËÍÆµÂʵִïÿÖÜ1.3´ÎµÄÐÐÒµÁìÏÈˮƽ¡£Óû§ÈôºöÊÓ°æ±¾¸üУ¬²»µ«»áÔâÓö"30ÃëÌáÐÑ"µÄ»á¼ûÏÞÖÆ£¬¸ü¿ÉÄÜÒòSSLÖ¤ÊéÊ§Ð§ÃæÁÙÖÐÐÄÈ˹¥»÷Σº¦¡£ÌØÊâÐèÒª×¢ÖØµÄÊÇ£¬82%µÄʱÕþÀàÐÂÎÅÍøÕ¾ÒÑÆôÓÃаæHTTP/3ÐÒ飬½öÖ§³Ö×îаæä¯ÀÀÆ÷ÄÚºËÆÊÎö¡£¼á³Öä¯ÀÀÆ÷¸üв»µ«ÊÇÏû³ýÌáÐѵÄÓÐÓÃÊֶΣ¬¸üÊÇά»¤Êý×ÖÉí·ÝÇå¾²µÄ»ù´¡·ÀµØ¡£
ÐÂÎÅÔĶÁ³¡¾°ÏµÄÍøÂçÇéÐÎÉèÖÃ
ÔÚ¹«¹²ÍøÂçÇéÐÎÏ»á¼ûʱÕþÐÂÎÅÍøÕ¾Ê±£¬½¨Ò鿪Æôä¯ÀÀÆ÷µÄÇå¾²DNS¹¦Ð§£¬¸ÃÉèÖÿɽ«DNSÅÌÎÊ£¨ÓòÃûÆÊÎöЧÀÍ£©¼ÓÃÜÂÊÌáÉýÖÁ95%¡£Í¬Ê±ÅäºÏHTTPS-Everywhere²å¼þ£¬ÄÜ×Ô¶¯Ç¿ÖÆËùÓÐÅþÁ¬Éý¼¶Îª¼ÓÃÜͨµÀ¡£ÊµÑéÊý¾ÝÏÔʾ£¬¹æ·¶ÉèÖõĹȸèä¯ÀÀÆ÷¿É½«Êý¾Ýй¶¸ÅÂʽµÖÁ0.7%ÒÔÏ£¬Õâ¶ÔÉæ¼°Ãô¸ÐÄÚÈݵÄÐÂÎÅ×ÊѶ»ñÈ¡¾ßÓÐÌØÊâ±£»¤¼ÛÖµ¡£Óöµ½»á¼ûÖÐÖ¹ÌáÐÑʱ£¬¼ì²éÍøÂçÊðÀíÉèÖÃÊÇ·ñ´¥·¢ÍøÕ¾µÄÇå¾²ÑéÖ¤»úÖÆÊÇÒªº¦°ì·¨¡£
Ö´ÂÉÀýÔòÓë»á¼û¹æ·¶½â¶Á
¡¶ÍøÂçÇå¾²·¨¡·µÚ¶þʮһÌõÃ÷È·»®¶¨Òªº¦ÐÅÏ¢»ù´¡ÉèÊ©ÔËÓªÕßÓ¦µ±½ÓÄÉÌá·ÀÅÌËã»ú²¡¶¾¡¢ÍøÂç¹¥»÷µÈΣº¦ÍøÂçÇå¾²ÐÐΪµÄÊÖÒÕ²½·¥¡£"ÌÀÄ·ÊåÊåÌáÐÑ"ÖеĻá¼ûÖ¸µ¼ÕýÊǸÃÌõ¿îµÄÊÖÒÕÂ䵨ÌåÏÖ¡£Óû§¹æ·¶Ê¹ÓÃä¯ÀÀÆ÷²»µ«°ü¹ÜСÎÒ˽¼ÒÊý¾ÝÇå¾²£¬¸üÊÇÍÆÐй«ÃñÍøÂç¿Õ¼äÖÎÀíÔðÈεÄÖ÷ÒªÌåÏÖ¡£ÖµµÃ×¢ÖØµÄÊÇ£¬91%µÄÐÂÎÅÍøÕ¾»á¼û¾À·×Ô´ÓÚä¯ÀÀÆ÷²å¼þ³åÍ»£¬°´ÆÚÕûÀí·ÇÐëÒªÀ©Õ¹³ÌÐòÊÇά³ÖÎȹ̻á¼ûµÄÐëÒªÐж¯¡£
ͨ¹ýϵͳ»¯ÆÊÎö¿É¼û£¬ÌÀÄ·ÊåÊåÎÂܰÌáÐѱ³ºóµÄÊÖÒÕÂß¼ÓëʱÕþÐÂÎÅÍøÕ¾µÄÇå¾²¼Ü¹¹Ï¸ÃÜÏàÁ¬¡£Ñ¡Ôñ±ê×¼ä¯ÀÀÆ÷¡¢¼á³Ö°æ±¾¸üС¢¹æ·¶ÍøÂçÉèÖÃÈýλһÌåµÄʵ¼ù¼Æ»®£¬¼ÈÄÜÏû³ý»á¼ûÕϰ£¬Óֿɹ¹½¨Çå¾²Îȹ̵ÄÐÂÎÅÔĶÁÇéÐΡ£×ñÕÕÍøÂçÇå¾²¹æ·¶¡¢Ã÷È·ÊÖÒÕÌáÐÑÄÚÔÚ£¬ÊÇÿ¸öÊý×Ö¹«ÃñÔÚÐÅϢʱ´úµÄ±ØÐÞ¿ÎÌâ¡£