CAJ | 학술논문

文章从基于社会工程学的邮件攻击方式和造成的危害出发,对利用社会工程学的电子邮件攻击进行了深入的分析.目前利用社会工程学技巧依托电子邮件发起攻击已是常见攻击方法,是当前恶意代码流行的重要手段.文章依托捕获的一些安全事件,对邮件的传播手段、附件文件的攻击方法进行了关联分析.最后,通过提取同类特征挖掘出更多的类似攻击邮件,并进行了整体的关联分析与总结.
문장종기우사회공정학적유건공격방식화조성적위해출발,대이용사회공정학적전자유건공격진행료심입적분석.목전이용사회공정학기교의탁전자유건발기공격이시상견공격방법,시당전악의대마류행적중요수단.문장의탁포획적일사안전사건,대유건적전파수단、부건문건적공격방법진행료관련분석.최후,통과제취동류특정알굴출경다적유사공격유건,병진행료정체적관련분석여총결.
Starting from the email attacks and hazards of view based on social engineering, the paper deeply analysis email attacks based on social engineering. Currently, email attack based on social engineering techniques is a common method of attack, and is an important channel of the malicious code. This paper relies on a number of captured events, and correlative analysis attack method by means of communication and attachment file of email. Finally, by extracting similar characteristic, the paper digs out more similar attack email, and gives the overall correlation analysis and summary.