绿盟科技技术博客

主管机构如何应对大检查过程中所暴露的“七寸”

2016-12-12卢梁主管机构大检查, 绿盟云安全专家团队, 绿盟漏洞通报平台, 网络安全法, 限期整改通告, 高中危漏洞

今年11月7日，《网络安全法》由十二届全国人大常委会第二十四次会议表决通过，并于明年6月1日正式实施，该法案明年的正式落地标志着中国网络安全进入有法可依的时代。

Security Fabric：软件定义的弹性安全云

2016-12-12江国龙下一代的安全防护体系, 云安全, 创新中心, 安全资源池, 弹性安全云, 绿盟科技, 软件定义安全

软件定义安全的架构可成为对抗日益频繁安全事件的利器，但在云计算环境中存在诸多落地困难的问题，基于安全资源池的安全云方案可较好地解决软件定义的云安全解决方案在云计算中心部署的问题，并能提供弹性、按需和敏捷的安全服务。

你的云安全吗？

2016-12-12江国龙云安全, 云环境防护, 创新中心, 弹性安全云, 扫描服务, 绿盟科技, 网关服务, 软件定义安全

近年来，随着虚拟化技术的不断发展与完善，云计算得到了广泛的认可与接受，许多组织已经或者计划进行云平台建设。因此，一大批云计算服务提供商也涌现了出来，包括知名的Amazon AWS、Google GCE以及Microsoft Azure；同时，国内也出现了像阿里云、腾讯云、移动云、云杉网络等一批优秀的云服务提供商。

NSFOCUS 2016 Q3 Report on DDoS Situation and Trends

2016-12-09蒋红梅Attack Duration, Attack Type Distribution, DDoS Attack Trend, EnglishVersion, NSFOCUS 2016 Q3 Report, NSFOCUS 2016 Q3 Report on DDoS Situation and Trends, Peak Traffic of DDoS Attacks, Reflection Attacks

In Q3, the global distributed denial-of-service (DDoS) attacks increased by 40%.

In Q3, a total of 71,416 DDoS attacks were detected, up 40% from Q2 (50,988).

2016 NSFOCUS Security Report Regarding Network Video Surveillance Systems

2016-12-09蒋红梅2016-nsfocus-security-report-regarding-network-video-surveillance-systems, DDoS attack events, Distribution of NVSSs, EnglishVersion, High-Risk Vulnerabilities

With the robust development of the Internet of Things (IoT), more and more security issues are found with IoT devices. These imminent threats, especially those from network video surveillance systems (NVSSs) that account for a large majority of IoT devices, have drawn attention from security professionals from home and abroad. (In this paper, network video monitors (NVMs), web cameras, and digital video recorders (DVRs) are all referred to as NVSSs.)

【威胁通告】Firefox跨域设置cookie漏洞

2016-12-09绿盟科技cookie漏洞, Firefox 漏洞, Firefox跨域设置cookie漏洞, 漏洞验证, 绿盟科技

2016年12月6日，insert-script.blogspot.gr网站发布了一条关于Firefox跨域设置cookie的消息，该漏洞的成因是火狐浏览器允许元标签对浏览器cookie进行设置。

Firefox Remote Code Execution Vulnerability Technical Analysis and Solution

2016-12-08郝秀文EnglishVersion, Firefox Remote Code Execution Vulnerability, Unaffected Versions, Vendor Solutions, Vulnerability Analysis

On November 30, 2016, Mozilla Firefox released an emergency update on its official website to fix a vulnerability assigned CVE-2016-9079.

Nginx Local Privilege Escalation Vulnerability Technical Analysis and Solution

2016-12-08蒋红梅EnglishVersion, INC, Nginx, NSFOCUS, Vendor Solutions, Vulnerability Analysis, Vulnerability Verification

On November 15, 2016 (local time), legalhackers.com released an advisory about a privilege escalation vulnerability, assigned CVE-2016-1247, found in the Nginx server. Nginx web server packaging on Debian-based distributions, such as Debian or Ubuntu, was found to allow creating log directories with insecure permissions.