Best Practices for Public Networks · 公共网络的最佳实践
| English | 中文 | Pinyin · 拼音 |
|---|---|---|
| exploits/ˈeksplɔɪts/ | 漏洞利用 | lòu dòng lì yòng |
| zero days/ˈzɪərəʊ deɪz/ | 零日漏洞 | líng rì lòu dòng |
| motivation/ˌməʊtɪˈveɪʃn/ | 动机 | dòng jī |
| evil twin/ˈiːvl twɪn/ | 双胞胎恶意热点 | shuāng bāo tāi è yì rè diǎn |
| access point/ˈækses pɔɪnt/ | 接入点 | jiē rù diǎn |
| SSID/ˌes es aɪ ˈdiː/ | 服务集标识符 | fú wù jí biāo shí fú |
| jamming/ˈdʒæmɪŋ/ | 干扰攻击 | gān rǎo gōng jī |
| denial of service/dɪˈnaɪəl ɒv ˈsɜːvɪs/ | 拒绝服务 | jù jué fú wù |
| war driving/wɔː ˈdraɪvɪŋ/ | 战争驾驶 | zhàn zhēng jià shǐ |
| encrypted/enˈkrɪptɪd/ | 加密的 | jiā mì de |
| virtual private network/ˈvɜːtʃuːəl ˈpraɪvət ˈnetwɜːk/ | 虚拟专用网络 | xū nǐ zhuān yòng wǎng luò |
Know your adversary
- Low-skilled attackers buy ready-made tools and reuse known exploits 漏洞利用.
- High-skilled attackers write their own tools and find zero days 零日漏洞.
- Their motivation 动机: greed, revenge, politics, or belief.
了解你的对手
- 低技能攻击者购买现成工具并重用已知的漏洞利用(exploits)。
- 高技能攻击者编写自己的工具并发现零日漏洞(zero days)。
- 他们的动机(motivation):贪婪、报复、政治或信仰。
Three wireless attacks
- Evil twin 双胞胎恶意热点: a fake access point 接入点 copies the real network name (SSID 服务集标识符).
- Jamming 干扰攻击: a strong signal floods the air — a denial of service (DoS) 拒绝服务.
- War driving 战争驾驶: driving around to detect networks and leaked signal.
三种无线攻击
- 双胞胎恶意热点(evil twin):假的接入点(access point)复制真实网络名称(SSID服务集标识符)。
- 干扰攻击(jamming):强信号淹没空中——一种拒绝服务(denial of service)。
- 战争驾驶(war driving):四处驾驶以探测网络和泄漏的信号。
Which wireless attack is it? · 这是哪种无线攻击？
An evil twin copies the SSID; jamming floods the air to block access; war driving hunts for networks. · 邪恶双胞复制 SSID；干扰通过淹没空气来阻止接入；战争驾驶搜寻网络。
An adversary sets up a fake access point copying the real SSID. This is a(n)... · 对手设置了一个伪造的接入点，复制了真实的 SSID。这是一种……
Copying the SSID to lure victims is the evil twin. · 复制 SSID 以诱骗受害者是邪恶双胞。
An undocumented vulnerability that no patch exists for yet is called a... · 一种尚未有补丁存在的未记录漏洞被称为……
A zero day is a brand-new, unpatched hole. · 零日漏洞是一个全新的、未打补丁的漏洞。
Protecting yourself
- Check the network name exactly matches the one you want.
- Prefer encrypted 加密的 sites (HTTPS) so an evil twin cannot read them.
- Use a virtual private network (VPN) 虚拟专用网络 to encrypt all traffic.
保护你自己
- 核对网络名称与你想连接的完全一致。
- 优先使用加密的(encrypted)网站(HTTPS),这样双胞胎热点无法读取。
- 使用虚拟专用网络(virtual private network)加密所有流量。
Connecting to free Wi-Fi called "CoffeeShop" does not prove it is the real one. An evil twin copies the name exactly. Verify the network with staff before joining.
连接到名为"CoffeeShop"的免费Wi-Fi并不能证明它是真的。双胞胎恶意热点会精确复制名称。加入前向工作人员核实网络。
On an evil-twin network, HTTPS sites still keep your data encrypted. · 在邪恶双胞网络上，HTTPS 网站仍然保持您的数据加密。
HTTPS encryption protects you even if traffic is intercepted. · 即使流量被拦截，HTTPS 加密也能保护您。
A tool that encrypts all your traffic to its operator is a . · 一种将所有流量加密并传输给其操作者的工具是。
A VPN (virtual private network) encrypts your traffic. · VPN（虚拟专用网络）加密您的流量。
Which protect you on public Wi-Fi? (Choose all) · 哪些能在公共 Wi-Fi 上保护您？（多选）
Turning off your firewall makes you less safe. · 关闭防火墙会使您更安全/不安全。
You join "Airport_Free_WiFi" and log into your bank. If it was an evil twin, the adversary sees your traffic — but because the bank uses HTTPS, your login stays encrypted and safe. HTTPS is your seatbelt on public Wi-Fi.
你加入"Airport_Free_WiFi"并登录银行。如果它是双胞胎热点,对手会看到你的流量——但因为银行使用HTTPS,你的登录仍被加密且安全。HTTPS是你在公共Wi-Fi上的安全带。
Adversaries differ by skill and motivation. On public Wi-Fi, beware the evil twin, jamming, and war driving. Protect yourself by verifying the network name, preferring HTTPS, and using a VPN.
对手在技能和动机上各不相同。在公共Wi-Fi上,提防双胞胎热点、干扰和战争驾驶。通过核实网络名称、优先HTTPS和使用VPN来保护自己。