关于钓鱼邮件平台搭建和钓鱼邮件防范的论述  

Discussion on Construction of Phishing Email Platforms and Prevention of Phishing Emails

作　　者：王媛媛 Wang Yuan-yuan(China Telecom Corporation Limited Cloud Network Operation Department Intelligent Cloud Network Business Operation Center Shanghai Branch,Shanghai 200120,China)

机构地区：[1]中国电信集团公司云网运营部智能云网业务运营中心,上海200120

出　　处：《科学与信息化》2024年第15期63-65,共3页Technology and Information

摘　　要：邮件钓鱼攻击是一种网络攻击活动,通过发送伪装的电子邮件获取用户信任,诱骗用户点击链接、下载附件从而获取收件人敏感信息或者在收件人设备上执行恶意操作。钓鱼攻击是目前网络攻击经常使用也是非常有效的一个方法。通过钓鱼攻击,攻击方可以快速获得内网的访问权限和储存在用户本机上的账号密码等信息。因此,在现代的网络安全防范体系中,防止钓鱼攻击是必不可少的内容。本文描述了钓鱼邮件平台搭建的原理,并给出了钓鱼邮件防范的一般原则。A phishing attack is a type of cyberattack that uses fraudulent emails to gain trust of users,tricks users into clicking on links and downloading attachments to obtain sensitive data of recipients,or performs malicious actions on the device of recipients.Phishing attack is a commonly used and effective method for cyberattacks at present.Through phishing attacks,attackers can quickly obtain access to the intranet and information such as accounts and passwords stored on the computer of user.Therefore,in the modern network security prevention system,preventing phishing attacks is indispensable.This paper describes the principles of phishing email platform construction and gives general principles for preventing phishing emails.

关 键 词：安全教育 钓鱼攻击 GOPHISH 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]