Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add gathering #60

Merged
merged 2 commits into from
Apr 8, 2024
Merged

add gathering #60

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
9ec40b7
add gathering
aka-dag Apr 8, 2024
a9d56d2
prettier gathering
aka-dag Apr 8, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 29 additions & 0 deletions pages/_news/2024/2024-03-31-gathering-attack-and-defense-exercise-talk.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
---
title: "网络安全攻防演练杂谈"
author: "aka-dag"
date: "2024-03-31 15:00:00 +0800"
categories:
- LUG 活动
- LUG 小聚
tags: []
---

2024 年 3 月 31 日，校学生 Linux 用户协会举办了一场小聚活动。本次小聚我们有幸邀请到协会指导老师庄严老师来为同学们做一场关于网络安全攻防演练的杂谈。

![](https://ftp.lug.ustc.edu.cn/weekly_party/2024.03.31_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%94%BB%E9%98%B2%E6%BC%94%E7%BB%83%E6%9D%82%E8%B0%88/photos/IMG_5587.jpg)

首先，庄严老师向大家介绍了攻防演习的前世今生。攻防演习是指通过组织攻击方以尽可能模拟实际网络攻击的手法，对防守方的目标系统进行攻击，来检验防守方应对网络攻击的实际防护能力。庄老师说明了不同级别的攻防演习的区别，包括范围、关注内容、举办形式等等，让同学们对于这个话题有了初步的理解。

![](https://ftp.lug.ustc.edu.cn/weekly_party/2024.03.31_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%94%BB%E9%98%B2%E6%BC%94%E7%BB%83%E6%9D%82%E8%B0%88/photos/Snipaste_2024-04-04_16-29-06.png)

随后，庄老师从发布演练通知、规则制定、平台准备等方面介绍了攻防演练的基本情况与演练流程，分享了具体演练的结果，并解释了为何仅凭演练分数或报告很难评价一个单位的网络安全水平。

![](https://ftp.lug.ustc.edu.cn/weekly_party/2024.03.31_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%94%BB%E9%98%B2%E6%BC%94%E7%BB%83%E6%9D%82%E8%B0%88/photos/IMG_5596.jpg)

紧接着，庄老师详细介绍了攻击流程分析模型，主要包括信息收集、边界突破与内网渗透三个部分。正所谓“要想打点打得好，信息收集少不了”，前期的对目标单位的数据收集是攻防演练的必要部分。由于规则限定，对互联网暴露的业务或是应用是攻击队首选的攻击途径。庄老师以高校的 VPN 服务为例说明了系统在该层面的薄弱之处，各类弱口令、默认口令等会导致攻击者利用有效账号侵入校内。除此之外，文件上传与 Nday 漏洞利用也成了边界的突破口。边界突破环节揭示了当前众多系统的薄弱之处，如互联网信息泄露严重、暴漏面多、弱口令问题持续存在等。

![](https://ftp.lug.ustc.edu.cn/weekly_party/2024.03.31_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%94%BB%E9%98%B2%E6%BC%94%E7%BB%83%E6%9D%82%E8%B0%88/photos/Snipaste_2024-04-04_16-49-30.png)

在活动的最后，庄老师介绍了攻防演练的现状，总结了演练中的常见问题。庄老师鼓励同学们持续学习、不断提升自己的技能和知识水平，并且要积极与他人合作交流。通过本次活动，同学们对攻防演练的基本概念、流程以及攻击流程分析模型有更清晰的认识；相信大家能够汲取攻防演练中的精神力量，提升自身的网络安全意识和技能，为保护个人和组织的网络安全做出贡献。

小聚 PPT 已上传至 ftp：[网络安全攻防演练杂谈](http://ftp.lug.ustc.edu.cn/weekly_party/2024.03.31_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%94%BB%E9%98%B2%E6%BC%94%E7%BB%83%E6%9D%82%E8%B0%88/20230331%20%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%94%BB%E9%98%B2%E6%BC%94%E7%BB%83%E6%9D%82%E8%B0%88_%E8%84%B1%E6%95%8F%E5%88%86%E5%8F%91%E7%89%88.pdf)
6 changes: 6 additions & 0 deletions pages/_wiki/lug/events/weeklyparty.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,12 @@

## Time Table

### Spring 2024

| 时间 | 主持 | 地点 | 主题 | 讲稿 |
| :--------------- | :--- | :---- | :------------------- | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| 2024-03-31 15:00 | 庄严 | 3C102 | 网络安全攻防演练杂谈 | [Assets](http://ftp.lug.ustc.edu.cn/weekly_party/2024.03.31_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%94%BB%E9%98%B2%E6%BC%94%E7%BB%83%E6%9D%82%E8%B0%88/20230331%20%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%94%BB%E9%98%B2%E6%BC%94%E7%BB%83%E6%9D%82%E8%B0%88_%E8%84%B1%E6%95%8F%E5%88%86%E5%8F%91%E7%89%88.pdf) |

### Fall 2023

| 时间 | 主持 | 地点 | 主题 | 讲稿 |
Expand Down
Loading