'Welcome to the Internet banking support service. To reset your security details please press 1. For all other enquiries press 2.'
Banking by telephone is hardly new. But it's not so much old-fashioned phones that have caused the banks problems as computers. They've allowed criminals to do from home what they used to do with a mask and a sawn-off shotgun. So now that telephony is moving onto the net should we be worried?
The real problem with VOIP is that it means that the telephone system is now going to be as secure as the Internet.
In other words yes, very worried. The Grug as he styles himself is a leading security expert specialising in Internet telephony or VOIP as it is often called.
What I expect we are going to be seeing in a few months, and what's already technically possible, is for an attacker to gain access to a call centre.
Because Internet telephony is software based it's vulnerable to hacking and it offers a way in for attackers with potentially serious consequences.
An attacker would be able to break into the call centre. He could then set up a server which would monitor all of the traffic and during the hold music it would be possible for an attacker to inject content such as, 'in order for us to better serve you please enter your account number and pin code.'
When I caught up with the Grug he was in Malaysia for the Hack In The Box Security Conference where he both gave a key note speech and held training sessions for security professionals.
In my training class I actually have several guys from banks who are freaking out because they had showed up hoping to learn how to secure VOIP and deploy VOIP internally within their own infrastructures. And they have learned that but they have also found out that that's not going to be enough. They need to make sure that everywhere, everyone who has a VOIP system that is connected to the Internet is secure. Otherwise the entire system falls apart. It's basically a house of cards.
“欢迎您使用网上银行服务支持系统。重设安全信息请按1,其他业务请按2。”
电话银行已经不算是新鲜事物了。但老式电话机造成的银行问题还是没有计算机造成的问题多。计算机使得以前戴着面具,举着短枪的歹徒现在在家中就可以进行犯罪。现在,电话业务已经被转移到了互联网上,我们是不是也要担心呢?
VOIP(因特网声传协议)的真正问题在于,电话系统的安全性现在正变得和互联网一样。
换句话说,是的,我们要非常担心。格拉格把自己称作因特网电话方面--或者经常被简称为VOIP方面的顶级安全专家。
我本来预期我们要几个月后才能见面,而现在黑客已经掌握了进入电话中心的技术了。
因为因特网电话是以软件为基础的,所以它不可避免会受到黑客的攻击,而且它为黑客提供的这条通道极有可能会产生严重后果。
黑客将可能进入电话系统,然后建立一个服务器,监测所有的电话。在等候音乐期间,黑客有可能加入一条信息,内容比如为“为了更好地为您服务,请输入您的账号和密码。”
当我终于和格拉格见面时,他正在马来西亚参加黑客安全大会。在大会上,他做了一个公开演讲,并对安全技术人员开展了相关培训。
在培训课上我亲身感受到,好几个银行方面的人员都异常激动,近乎失控。他们表现出极大的愿望,想要学习如何才能做好VOIP的安全工作,如何在他们的下属机构内部配备VOIP。他们已经学习了相关知识,但他们仍然觉得那些知识不够用。他们必需确保每个地方,每个人使用的VOIP系统都是连接到安全的因特网上。否则,整个系统就会分崩离析--那样的话,系统就只是一栋有着多张门卡的房子。
1.reset v.重新设定,重新放置,重新组合
例句:Lightly press the RESET button with a thin rod.
用细杆轻按RESET(重调)键
2.hardly adv.几乎没有, 几乎不
例句:He could hardly see anything.
他几乎什么也看不到。
I'm so tired that I can hardly walk.
我太累, 简直走不动了。
3.secure adj.牢固的; 可靠的
例句:That is a secure foothold.
那是一可靠的落脚点。
Foreign tourists feel happily secure while visiting the city.
外国游客访问这个城市时都很有安全感。
4.vulnerable adj.易受伤的, 脆弱的, 敏感的
例句:He volunteered to protect her as she looked so vulnerable.
她看上去很脆弱, 他就主动去保护她。
5.consequence n.结果, 后果
例句:Nobody can tell what the consequences may be.
没有人能说出可能的后果。
6.freaking adj.(用以加强语气)该死的,使人憎厌的,糟透的
7.otherwise conj.否则; 要不然
例句:You'd better go now, otherwise you'll miss the train.
你最好现在就走, 要不然就赶不上火车了。
1.What I expect we are going to be seeing in a few months, and what's already technically possible, is for an attacker to gain access to a call centre.
gain access to可以获得;进入
例句:Students must have/gain/ get access to a good library.
学生必须有机会利用好的图书馆。
2.When I caught up with the Grug he was in Malaysia for the Hack In The Box Security Conference where he both gave a key note speech and held training sessions for security professionals.
catch up with追上, 赶上
例句:You walk on and I'll catch up with you later.
你往前走吧, 我一会儿就赶上你了。
对…产生坏影响,对...产生预期的坏影响(或恶果)
例句:Smoking will catch up with you.
吸烟会害了你。
查出来并抓获
例句:He is always fooling in class, but the teacher will catch up with him some day.
他总是在班上捉弄人, 总有一天老师会抓住他的。
3.Otherwise the entire system falls apart. It's basically a house of cards.
fall apart散开, 崩溃, 破碎
例句:The book was old and soon fell apart.
这书已有年月, 没隔多久书页都脱落了。
This cup just fell apart in my hands.
不知怎的, 我手里的这只杯子破碎了。