Cloud Gate leakage challenges: hacking into a new battleground for mobile terminal – cloud computing, leaked, mobile, terminal
\"Since the panic of those who know the leaks, I put Paypal, money paid through the accounts of all types of online payment cleared. \"White-collar work in the Beijing Zhongguancun Meng Ling on the\" First Financial Daily \"said. She told reporters that she found his account stolen horizon, decided to at least six months, in addition to online shopping U have to use online banking to pay outside the shield, as long as the cash on delivery online payment will not choose the way .
Her face may not be a case. This caused the leak from the beginning CSDN wave, more and more risk in the industry caused by the butterfly effect. Despite the payment of corporate disclosure of user information, said only the account without a password, but many online payment account is the user's e-mail, and if the user's e-mail address and password has been compromised, then the third-party payment account may also become and then security.
For CSDN, End of the World and other large-scale leak site, the site only need to send a letter of apology letters to inform the user changes the password on the line, but if the property related to the user's online banking, Paypal information stolen by hackers, it is hard to calm.
Worse than that. As more and more companies enthusiastically participated in the cloud, when the oncoming mobile Internet when concerns after another: the information we really safe?
Cloud Gate times
\"Leak door\" is a challenge for cloud computing, the Sony is a precedent.
April 17 from last year so far, Sony's gaming platform, Play Station Network (PSN) suffered at least three times a hacker attack. Hackers have stolen over 100 million users' personal information, including registration PSN ID, email account, password or credit card account with the relevant information.
Sony PSN public cloud platform shortly after the invasion, that is listed on the hacker forum sell millions of Sony's PSN network data leakage from the victim's personal information, even though Sony had claimed that credit card information is encrypted, but in fact in the database content has been read out.
Cloud computing often means \"on demand\" self-service, large shared pool of resources, lower costs and higher efficiency. However, these advantages behind vast amounts of data being transferred outside the scope of control to the user's machine, how to store large amounts of important information to ensure that the \"cloud\" security, but inadvertently been overlooked.
\"A series of leaks is easy to see, in many aspects of Internet companies are relatively weak internal security, if the mass of information coming into the business 'cloud', the first of their own mental capacity is a huge challenge. \"Cloud computing security vendors Nebula Sun Dawei, director of financial innovation in marketing, told reporters.
Cloud computing generally can be summarized as IaaS (Infrastructure as a Service), PaaS (Platform as a Service) and SaaS (Software as a Service) three levels, Sun Dawei told reporters that 90% of hacking attacks occurred in the SaaS level, but in fact from the bottom to the top, with a variety of hacking routes.
Network security expert Dr. Zou Shihong Qin chief is admitted to reporters, personal or business information security concerns for the cloud, cloud computing has become a popular one of the biggest challenges. \"In the cloud era, is difficult to draw the boundaries of data protection, and cloud computing industry for how to store and protect data also no uniform implementation of standards. \"
According to the different clients, cloud computing is generally divided into public and private clouds into two categories, the former refers to the general public within the scope of services for the target cloud computing services, which generally refers to the social unit of the building for their own needs its own cloud computing service model. Sun Dawei told reporters, many financial institutions and health care is out of security considerations, not the use of public cloud model, but to build a private cloud in its internal system.
However, Sun Dawei, Zou Shihong believe that this is a security leak from the recessive to dominant issue preview, not unworthy because of leak, denied cloud computing for business and personal value. Prior to CCID Consulting releases the \"White Paper on China cloud computing industry,\" predicts that by 2012, China's cloud computing market will reach 60.678 billion yuan, \"five-second\" period, China's cloud computing industry chain-scale up to 750 billion to 1 trillion yuan.
\"Mobile\" risk
Mobile terminal has become a hacker \"new battlefield.\"
China's earliest hackers founder of Green Corps, the organization of information security is now the founder COG Gong Wei predicted that the leak is just a larger security incidents before the show, expected events in 2012 outbreak affecting hundreds of millions of Chinese mobile end-user.
This is not alarmist. Zou Shihong told reporters that last year alone 24,794 new mobile phone models malicious software, malware sample 2943, which total infections in China in the year 10.78 million smart phones.
Which accounted for half of the Android smart phone into a \"disaster area.\" Shi Xiaohong told a reporter, the Android system open source, open and free nature, Trojan horses can be put right through the system vulnerability, access to the phone up to access (root access), which can be perceived in the case of the user without the system file operations, including delete system files, steal private data, implanted more Trojans, etc.; and iOS call the underlying file system restrictions particularly strict, relatively safe, but once the \"escape\", the software will be granted more rights, security issues not optimistic.
Not long ago, the foreign security companies have said that in less than six months, the platform has doubled the number of malicious programs as much as four-digit number the first time. Most of these suspicious applications in third-party applications store, which could lead to identity disclosure, SMS costs rise and other issues, while serious in some regions such as Russia, Israel and China, the number of malicious software, even up to 4% of the total number of .
The rise of mobile payments also stimulate greater interest among hackers. Previously, Analysys International predicts that by 2012 mobile payment users is expected to reach 220 million, the market revenue will grow 78.8% to reach 5.24 billion yuan. 2013 is expected to exceed 20 billion yuan, up 23.51 billion yuan.
Analysys analysis pointed out that, although the mobile payment market outlook is excellent, but the account security is the user to select the main gateway to mobile payment users on the Internet payment security are kept questioned, let alone in the new field of mobile payments.
\"Mobile users in the smart phone to make payments on the activities and interests directly linked to the hacker can use to trick users into installing malicious software, in order to gain more privacy information, and now there have been such signs. \"Zou Shihong said.
List of major leaks in recent years, the network
December 2011
CSDN site users, hackers in the online public database, more than 600 million mailboxes account and password disclosure. After a few days, including a distant community, Sina microblogging, Dangdang and many other Internet sites are involved.
July 2011
Nate one of Korea's three major portals and social networking sites \"Cyworld\" hacked, 35 million users of information leakage.
April 2011 to May
Sony's PlayStation website has been invaded, Sony's PS3 hackers and music, animation, cloud service network Qriocity user's personal login information, spread to 57 countries and regions of the hundreds of millions.
2008
South Korea's leading e-commerce website was hacked Auction took place about 18 million users of information leakage accident.
2004
Yahoo Japan, an outsourced employee theft of 4.5 million copies of personal information, resulting in the user's personal information confidential.
Microblogging punch
@ Tiejun: I thought that the password leaked the news last toss of the week, how have most of the users also have to change the password. And two 90 users in the chat after it learned that the child had not the case. One passage they are, and do not know to change the password. Two in the horizon, Mop account are stolen, one of the treasure to pay the balance not the. Acquired a group of rice to grab phone, hoping that they all right.
@ LIU Yuan move: the major sites have benefits account disclosure, I actually forgot my back through this long-End of the World account. You can also try.
@ Two fat wheat: If one day you find that he had pure, pleasant girlfriend, suddenly on the microblogging Let's talk about dirty jokes, or your humble boyfriend, even launched a Pornographic, do not rush to get angry. Not that they changed, but their accounts stolen. (Man / First Financial Daily)
