Koj yuav tsum ua dab tsi los tiv thaiv koj tus account Google los ntawm raug nyiag

Google tau luam tawm kawm "Yuav ua li cas zoo yog qhov yooj yim tus account kev huv hauv kev tiv thaiv tus account tub sab" hais txog dab tsi tus tswv account tuaj yeem ua los tiv thaiv nws los ntawm kev nyiag los ntawm cov neeg ua phem. Peb nthuav qhia koj txog kev txhais lus ntawm txoj kev tshawb no.
Muaj tseeb, txoj kev ua tau zoo tshaj plaws, uas yog siv los ntawm Google nws tus kheej, tsis suav nrog hauv daim ntawv tshaj tawm. Kuv yuav tsum tau sau txog txoj kev no kuv tus kheej thaum kawg.

Txhua hnub peb tiv thaiv cov neeg siv los ntawm ntau pua txhiab tus account hacking sim. Feem ntau tawm tsam los ntawm automated bots nrog rau kev nkag mus rau lwm tus neeg sab nrauv password cracking systems, tab sis phishing thiab cov phiaj xwm tawm tsam kuj muaj. Yav tas los peb tau hais li cas tsuas yog tsib kauj ruam yooj yim xwb, xws li ntxiv tus lej xov tooj, tuaj yeem pab koj nyob nyab xeeb, tab sis tam sim no peb xav ua pov thawj hauv kev xyaum.

Kev tawm tsam phishing yog ib qho kev sim ntxias tus neeg siv rau hauv kev yeem muab cov ntaub ntawv tawm tsam uas yuav muaj txiaj ntsig zoo hauv cov txheej txheem hacking. Piv txwv li, los ntawm kev theej lub interface ntawm daim ntawv thov raug cai.

Kev tawm tsam siv cov bots tsis siv neeg yog qhov kev sim nyiag nyiag loj heev tsis yog tsom rau cov neeg siv tshwj xeeb. Feem ntau nqa tawm siv cov software uas muaj rau pej xeem thiab tuaj yeem siv txawm tias tsis tau kawm "crackers". Cov neeg tawm tsam tsis paub dab tsi txog cov yam ntxwv ntawm cov neeg siv tshwj xeeb - lawv tsuas yog tso tawm qhov program thiab "catch" tag nrho cov ntaub ntawv pov thawj kev tshawb fawb tsis zoo nyob ib puag ncig.

Cov phiaj xwm tawm tsam yog nyiag ntawm cov nyiaj tshwj xeeb, uas cov ntaub ntawv ntxiv tau sau txog txhua tus account thiab nws tus tswv, sim cuam tshuam thiab txheeb xyuas cov tsheb khiav, nrog rau kev siv cov cuab yeej hacking nyuaj dua tuaj yeem ua tau.

(Tus txhais lus ceeb toom)

Peb tau koom tes nrog cov kws tshawb fawb los ntawm New York University thiab University of California kom paub seb qhov kev nyiam huv ntawm tus as khauj yog li cas ntawm kev tiv thaiv kev nyiag nyiaj.

Kev kawm txhua xyoo txog loj и tsom tawm tsam tau nthuav tawm hnub Wednesday ntawm lub rooj sib tham ntawm cov kws tshaj lij, cov tsim cai thiab cov neeg siv hu ua Web Conference.
Peb cov kev tshawb fawb qhia tau hais tias tsuas yog ntxiv tus lej xov tooj rau koj tus lej Google tuaj yeem thaiv txog 100% ntawm kev tawm tsam bots, 99% ntawm kev tawm tsam phishing ntau, thiab 66% ntawm kev tawm tsam hauv peb qhov kev tshawb nrhiav.

Tsis siv neeg proactive Google tiv thaiv tus account hijacking

Peb siv kev tiv thaiv tsis siv neeg tiv thaiv kom zoo dua tiv thaiv tag nrho peb cov neeg siv los ntawm kev nyiag nkas tus account. Nov yog qhov nws ua haujlwm li cas: Yog tias peb kuaj pom qhov tsis txaus ntseeg nkag mus sim (piv txwv li, los ntawm qhov chaw tshiab lossis khoom siv), peb yuav nug ntxiv pov thawj tias nws yog koj tiag tiag. Qhov kev lees paub no tuaj yeem ua pov thawj tias koj nkag mus rau tus lej xov tooj uas ntseeg siab, lossis teb cov lus nug uas tsuas yog koj paub cov lus teb raug.

Yog tias koj tau kos npe rau hauv koj lub xov tooj lossis muab tus lej xov tooj hauv koj tus lej account, peb tuaj yeem muab tib theem kev nyab xeeb raws li kev txheeb xyuas ob kauj ruam. Peb pom tias SMS code xa mus rau tus lej xov tooj rov qab tau pab thaiv 100% ntawm cov bots automated, 96% ntawm ntau phishing tawm tsam, thiab 76% ntawm kev tawm tsam. Thiab cov cuab yeej ceeb toom kom paub meej tias muaj kev hloov pauv, hloov pauv kev nyab xeeb dua rau SMS, pab tiv thaiv 100% ntawm kev siv bots, 99% ntawm kev tawm tsam loj, thiab 90% ntawm kev tawm tsam.

Kev tiv thaiv raws li ob qho tib si cov tswv cuab thiab kev paub txog qee qhov tseeb pab tiv thaiv bots automated, thaum cov cuab yeej tiv thaiv kev tiv thaiv pab tiv thaiv phishing thiab txawm tias muaj kev tawm tsam.

Yog tias koj tsis muaj tus lej xov tooj teeb tsa hauv koj tus as khauj, peb yuav siv cov txheej txheem kev nyab xeeb tsis muaj zog raws li peb paub txog koj, xws li qhov twg koj tau nkag mus rau hauv koj tus lej kawg. Qhov no ua haujlwm zoo tiv thaiv bots, tab sis qib ntawm kev tiv thaiv phishing tuaj yeem poob mus rau 10%, thiab tsis muaj kev tiv thaiv tiv thaiv kev tawm tsam. Qhov no yog vim cov nplooj ntawv phishing thiab cov neeg tawm tsam tuaj yeem yuam kom koj nthuav tawm cov ntaub ntawv ntxiv uas Google yuav nug kom muaj pov thawj.

Muab cov txiaj ntsig ntawm kev tiv thaiv zoo li no, ib tus yuav nug yog vim li cas peb tsis xav tau nws rau txhua tus nkag. Cov lus teb yog tias nws yuav tsim kev nyuaj ntxiv rau cov neeg siv (tshwj xeeb tshaj yog rau cov tsis npaj - approx. txhais lus.) thiab yuav ua rau kom muaj kev pheej hmoo ntawm kev ncua nyiaj. Qhov kev sim pom tias 38% ntawm cov neeg siv tsis tau nkag mus rau lawv lub xov tooj thaum nkag mus rau hauv lawv tus account. Lwm 34% ntawm cov neeg siv tsis tuaj yeem nco qab lawv qhov chaw nyob email thib ob.

Yog tias koj tsis nkag mus rau koj lub xov tooj lossis tsis tuaj yeem nkag mus, koj tuaj yeem rov qab mus rau lub cuab yeej ntseeg siab uas koj yav dhau los tau kos npe los ntawm kev nkag mus rau koj tus account.

Nkag siab txog hack-rau- ntiav tawm tsam

Qhov twg feem ntau automated tiv thaiv thaiv feem ntau bots thiab phishing tawm tsam, cov phiaj xwm kev tawm tsam ua rau muaj kev puas tsuaj ntau dua. Raws li ib feem ntawm peb cov kev siv zog txuas ntxiv mus kev soj ntsuam ntawm hacking hem, peb niaj hnub txheeb xyuas cov neeg ua phem txhaum cai tshiab-rau- ntiav pawg uas them qhov nruab nrab ntawm $ 750 rau hack ib tus account. Cov neeg tawm tsam no feem ntau tso siab rau phishing emails uas ua tus neeg hauv tsev neeg, cov npoj yaig, cov thawj coj hauv tsoomfwv, lossis txawm tias Google. Yog tias lub hom phiaj tsis tso tseg rau thawj qhov kev sim phishing, kev tawm tsam tom ntej txuas ntxiv rau ntau tshaj ib hlis.

Ib qho piv txwv ntawm tus txiv neej-hauv-the-middle phishing nres uas txheeb xyuas qhov tseeb ntawm tus password hauv lub sijhawm. Nplooj ntawv phishing tom qab ntawd ua rau cov neeg raug tsim txom nkag mus rau SMS authentication codes nkag mus rau tus neeg raug tsim txom tus account.

Peb kwv yees tias tsuas yog ib ntawm ib lab cov neeg siv khoom muaj kev pheej hmoo siab no. Attackers tsis tsom cov neeg random. Txawm hais tias kev tshawb fawb qhia tau tias peb cov kev tiv thaiv tsis siv neeg tuaj yeem pab qeeb thiab txawm tias tiv thaiv txog 66% ntawm cov phiaj xwm tawm tsam peb tau kawm, peb tseem pom zoo kom cov neeg siv khoom pheej hmoo siab rau npe nrog peb. kev pab tiv thaiv ntxiv. Raws li tau pom thaum peb tshawb nrhiav, cov neeg siv tshwj xeeb siv cov yuam sij kev nyab xeeb (uas yog, ob-kauj ruam authentication siv cov lej xa mus rau cov neeg siv - kwv yees. txhais lus), tau dhau los ua neeg raug hmuv phishing.

Siv sijhawm me ntsis los tiv thaiv koj tus account

Koj siv txoj siv sia los tiv thaiv txoj sia thiab ceg tawv thaum taug kev hauv tsheb. Thiab nrog kev pab ntawm peb tsib lub tswv yim koj tuaj yeem ua kom muaj kev ruaj ntseg ntawm koj tus account.

Peb qhov kev tshawb fawb qhia tau tias ib qho yooj yim tshaj plaws uas koj tuaj yeem ua los tiv thaiv koj tus account Google yog teeb tsa tus lej xov tooj. Rau cov neeg siv uas muaj kev pheej hmoo siab xws li cov neeg sau xov xwm, cov neeg ua haujlwm hauv zej zog, cov thawj coj ua lag luam thiab pab pawg tawm tsam nom tswv, peb txoj haujlwm Kev tiv thaiv Advanced yuav pab kom muaj kev ruaj ntseg siab tshaj plaws. Koj tseem tuaj yeem tiv thaiv koj cov nyiaj tsis yog Google los ntawm tus password hacks los ntawm kev txhim kho qhov txuas ntxiv Chrome Password Checkup.

Nws yog qhov nthuav tias Google tsis ua raws li cov lus qhia uas nws muab rau nws cov neeg siv. Google siv hardware tokens rau ob-factor authentication rau ntau tshaj 85 ntawm nws cov neeg ua haujlwm. Raws li cov neeg sawv cev ntawm lub tuam txhab, txij li thaum pib siv hardware tokens, tsis yog ib tug account tub sab nyiag lawm. Sib piv nrog cov nuj nqis uas tau hais hauv tsab ntawv ceeb toom no. Yog li nws yog qhov tseeb tias kev siv kho vajtse cov cim rau ob-factor authentication tib txoj kev txhim khu kev qha los tiv thaiv ob qho tib si nyiaj thiab cov ntaub ntawv (thiab qee zaum kuj nyiaj).

Txhawm rau tiv thaiv Google cov nyiaj, peb siv tokens tsim raws li tus qauv FIDO U2F, piv txwv xws. Thiab rau ob qhov kev lees paub tseeb hauv Windows, Linux thiab MacOS operating systems, cryptographic tokens.

(Tus txhais lus ceeb toom)

Tau qhov twg los: www.hab.com