社会工程学攻击之钓鱼邮件分析  

Phishing Email Analysis of Social Engineering Attacks

作　　者：门嘉平 肖扬文 马涛 Men Jiaping;Xiao Yangwen;Ma Tao(Department of Computer Science and Technology,Tsinghua University,Beijing 100084;Center of Information,State Administration for Market Regulation,Beijing 100820)

机构地区：[1]清华大学计算机科学与技术系,北京100084 [2]国家市场监督管理总局信息中心,北京100820

出　　处：《信息安全研究》2021年第2期166-170,共5页Journal of Information Security Research

摘　　要：钓鱼邮件作为一种普遍的社会工程学攻击方法,是黑客常用的攻击手段.APT攻击综合运用社会工程学和多个漏洞实施攻击,通常具有较强的隐蔽性,钓鱼邮件是APT成功实施的关键因素之一.深刻认识钓鱼邮件的极大危害,提高对钓鱼邮件的防范意识,明确切实可行的防范措施非常必要.Phishing emails,as a common social engineering attack method,are commonly used by hackers.APT attackers combine social engineering with multiple vulnerabilities to implement attacks,which are usually highly stealthy.Phishing emails are one of the key factors for the successful implementation of APT.It is necessary to have a deep understanding of the great harm of phishing emails,to improve the awareness of preventing phishing emails,and to clarify feasible preventive measures.

关 键 词：钓鱼邮件 社会工程学 网络攻击 APT攻击 网络安全 

分 类 号：TP309.5[自动化与计算机技术—计算机系统结构]