使用可信计算技术防范网络仿冒攻击

网络仿冒攻击已经成为互联网上最大的安全威胁之一,给金融机构和普通消费者造成了巨大的损失,严重影响了网上银行和电子商务的发展。我们分析了当前网络浏览器存在的安全漏洞,讨论了在线用户验证的问题,并且提出了使用可信计算平台对在线用户验证的方法。这种方法不仅能使很多网络仿冒攻击失效,而且可以防范其他在线攻击。

Preventing Phishing Attacks Using Trusted Computing Technology

Phishing attacks,which have became one of the most severe threats on the Internet,have caused heavy losses for financial institutions and common customers.Phishing has blocked the develop of online banking and electronic commerce.We analyze the vulnerabilities of current web browsers,discuss online user authentication,and a method for online user authentication using trusted computing platforms is proposed.The proposed approach makes a class of phishing attacks ineffective;moreover,the proposed method can also be used to protect against other online attacks.