[推荐] Google报告：恶意网站有上升势头

　　据Google的高级软件工程师Neils Provos表示，在过去的一年中Google通过对互联网上几十亿页面地址进行抓取，已经发现300万个网站存在恶意软件，这意味着每打开1000个页面，就有一个是存在恶意软件的。泵阀技术论坛http://www.lanbeng-pump.net
　　这些攻击类型即所谓的“隐蔽强迫下载”（drive-by downloads），安全专家发现近些年这种攻击方式已经变得比蠕虫病毒或者其他病毒更加普遍。网络上的罪犯利用这种攻击方式，在网站上寻找各种编程漏洞，然后利用漏洞放上了这些恶意软件。在过去的一年中，有不少网站就被这种方式所攻击，例如美国前副总统戈尔的环保宣传片《不可忽视的真相》网站曾经被黑客放上恶意程序，MySpace上的文件漏洞也曾被黑客利用来攻击游客。转载请注明出处：http://www.lanbeng-pump.net
　　对此，Google在搜索结果中对存在恶意软件的网页提出警告，在Google搜索结果的前几页，有1.3%的网站被Google检查出了恶意软件。据Google的研究结果显示，中国的恶意站点占到了总数的67%，而美国为15%，俄罗斯4%，马来西亚2.2%，韩国2%。而根据调查结果，恶意站点有逐步上升的势头。泵阀技术论坛 http://www.lanbeng-pump.net
Google Technical Report provos-2008a泵阀技术论坛 (兰泵论坛)http://www.lanbeng-pump.net
All Your iFRAMEs Point to Us本文章来源于:泵阀技术论坛--http://www.lanbeng-pump.net/
Niels Provos Panayiotis Mavrommatis Moheeb Abu Rajab Fabian Monrose泵阀技术论坛 http://www.lanbeng-pump.net
Abstract泵阀技术论坛 (兰泵论坛)http://www.lanbeng-pump.net
As the web continues to play an ever increasing role in information exchange, so too is it泵阀技术论坛http://www.lanbeng-pump.net
becoming the prevailing platform for infecting vulnerable hosts. In this paper, we provide a泵阀技术(论坛)http://www.lanbeng-pump.net
detailed study of the pervasiveness of so-called drive-by downloads on the Internet. Drive-by转载请注明出处：http://www.lanbeng-pump.net
downloads are caused by URLs that attempt to exploit their visitors and cause malware to be泵阀技术论坛 http://www.lanbeng-pump.net
installed and run automatically. Our analysis of billions of URLs over a 10 month period shows泵阀技术论坛 (兰泵论坛)http://www.lanbeng-pump.net
that a non-trivial amount, of over 3 million malicious URLs, initiate drive-by downloads. An even泵阀技术论坛http://www.lanbeng-pump.net
more troubling finding is that approximately 1.3% of the incoming search queries to Google’s本文章来源于:www.lanbeng-pump.net/
search engine returned at least one URL labeled as malicious in the results page. We also explore
本文章来源于:www.lanbeng-pump.net/ several aspects of the drive-by downloads problem. We study the relationship between the user
泵阀技术论坛 (兰泵论坛)http://www.lanbeng-pump.netbrowsing habits and exposure to malware, the different techniques used to lure the user into the
泵阀技术论坛 http://www.lanbeng-pump.netmalware distribution networks, and the different properties of these networks.