internet security 网络安全论文

InternetSecurityInternetsecurityisakindofcomputersecurityspecificallyrelatedtotheInternet,ofteninvolvingbrowsersecuritybutalsonetworksecurityonamoregenerallevelasitappliestootherapplicationsoroperatingsystemsonawhole。ItsobjectiveistoestablishrulesandmeasurestouseagainstattacksovertheInternet.TheInternetrepresentsaninsecurechannelforexchanginginformationleadingtoahighriskofintrusionorfraud,suchasphishing.Differentmethodshavebeenusedtoprotectthetransferofdata，includingencryptionandfrom-the—ground-upengineering.WhencomputerusersfacewiththeproblemofInternetSecurity,acomputerusercanbetrickedorforcedintodownloadingsoftwareontoacomputerthatisofmaliciousintent。Suchsoftwarecomesinmanyforms，suchasviruses，Trojanhorses,spyware,andworms。However，peoplehaverealizedthenetworksecuritycrisis，Someonlinesitesoffercustomerstheabilitytouseasix—digitcodewhichrandomlychangesevery30–60secondsonasecuritytoken。Thekeysonthesecuritytokenhavebuiltinmathematicalcomputationsandmanipulatenumbersbasedonthecurrenttimebuiltintothedevice.Thismeansthateverythirtysecondsthereisonlyacertainarrayofnumberspossiblewhichwouldbecorrecttovalidateaccesstotheonlineaccount。Thewebsitethattheuserisloggingintowouldbemadeawareofthatdevices'serialnumberandwouldknowthecomputationandcorrecttimebuiltintothedevicetoverifythatthenumbergivenisindeedoneofthehandfulofsix—digitnumbersthatworksinthatgiven30-60secondcycle。After30–60secondsthedevicewillpresentanewrandomsix-digitnumberwhichcanlogintothewebsite,andtherearetoomanyfirewallssuchasPacketfilterStatefulpacketinspectionApplication-levelgatewayWhynowthehackersarealsooverbearing？Frommyperspective,itisduetothecurrentlegalloopholesandthelackofInternetusers’safetyconsciousness.Ithinkthatthecurrentlawsofnetworksecurityarenotstrongenough,inmyopinion，anetworksecuritylaw,isagenericdocumentthatoutlinesrulesforcomputernetworkaccess，determineshowpoliciesareenforcedandlaysoutsomeofthebasicarchitectureofthecompanysecurity/networksecurityenvironment。Thedocumentitselfisusuallyseveralpageslongandwrittenbyacommittee。Asecuritypolicygoesfarbeyondthesimpleideaof"keepthebadguysout”。It'saverycomplexdocument,meanttogoverndataaccess,web-browsinghabits,useofpasswordsandencryption，emailattachmentsandmore.Itspecifiestheserulesforindividualsorgroupsofindividualsthroughoutthecompany。Securitylawshouldkeepthemalicioususersoutandalsoexertcontroloverpotentialriskyuserswithinyourorganization.Thefirststepincreatingapolicyistounderstandwhatinformationandservicesareavailable（andtowhichusers)，whatthepotentialisfordamageandwhetheranyprotectionisalreadyinplacetopreventmisuse.Inaddition,thesecuritylawshoulddictateahierarchyofaccesspermissions;thatis，grantusersaccessonlytowhatisnecessaryforthecompletionoftheirwork。Whilewritingthesecuritydocumentcanbeamajorundertaking，agoodstartcanbeachievedbyusingatemplate。NationalInstituteforStandardsandTechnologyprovidesasecurity—policyguideline.Thelawscouldbeexpressedasasetofinstructionsthatcouldbeunderstoodbyspecialpurposenetworkhardwarededicatedforsecuringthenetwork。Thereportshowsthatonly18.36%ofrespondents,Changethepasswordonaregularbasisandthepeoplewhowhentheyhaveaproblemtheychangethepasswordare64。59％ofrespondents,17.05％ofrespondentsneverchangethepassword。Inteenagedays，thejuniorhighschoolstudent，James,throughself—study”hackers"technologybatchingothercustomers'bankcards'informationandpasswordbymeansofnetworkattack,heusetheloopholeofpaymenttostealothersinformationandmakeexorbitantprofits。Inconclusion,itis。hightimethatwedidsomethingtokeepinformationsecure。Personally，lawsandregulationmustbeestablished。Besidestoimprovetechnologyisanthersolution。Meanwhile，wearesupposedtorousetheawarenessofself-protection。Onlyinthiswaycanweensureourrightsandinterest。ReferencesGralla,Preston（2007)。HowtheInternetWorks。Indianapolis:QuePub。ISBN 0-7897—2132—5.Rhee，M。Y。(2003）。InternetSecurity:CryptographicPrinciples，AlgorithmsandProtocols。Chichester：Wiley。ISBN 0-470-85285—2。MargaretRouse(September2005）。"Whatisasecuritytoken?”.SearchSecurity。com。Retrieved2014-02—14.WWW.BAIDU.COMWekipedia