摘要
计算机中存在一个单独的区块:活动内存,任何一个攻击者都愿意把手伸到这个存储有敏感信息完全未加密的区块。系统为了方便调用,在内存中存储了多种有价值信息;全盘加密机制也必须在内存的某个地方存储密钥。同样,Wi-fi密钥也是如此存储的。Windows在内存中存有注册表键值,系统和SAM hive。许多剪贴板内容和应用程序密码也在存储于内存中。即问题在于,内存存储了系统在某时刻需要的大量有价值信息。攻击者要获得它,需要使用一些同样的取证技术。本文有助于向渗透测试工具包中增加这些技术。
there is a single block computer： memory, any attacker would reachthe store sensitive information completely une ncryptedblock.System for the convenience of the call, stored in the memory of a variety of valuable information; full disk enc ryption mechanism must be somewhere in the storage key memory.Similarly, the Wi-fi key is stored.In memory Windows entityr egistry key, and SAM hive.Many of the contents of the clipboard andapplication code is stored in the memory.The problem is, memory storagesystem need at some point and a lot of valuable information.The attacker to obtain it, need to use some of the s ame forensics technology.This paperhelps to increase the penetration test kit.
出处
《网络安全技术与应用》
2014年第3期18-18,20,共2页
Network Security Technology & Application
