蜜罐在安全防护中扮演什么角色？
What role do honeypots play in security defense?
蜜罐是故意布置的诱饵系统，模拟有价值的目标来吸引攻击者。安全团队借此观察攻击手法、收集情报并争取响应时间。它本身不提供服务，所有连接几乎都可疑。
A honeypot is a deliberately placed decoy that mimics a valuable target to lure attackers. Security teams observe tactics, gather intelligence, and buy response time. It serves no real users, so nearly every connection is suspicious.
难度 专业 · 适合 初中(12-15)
CC BY 4.0 · 已核验 · Verified 2026-08-23 · 2 条独立证据
来源 · Source
Ferguson、Schneier、Kohno,《Cryptography Engineering》Wiley,2010
N. Ferguson, B. Schneier and T. Kohno, Cryptography Engineering, Wiley, 2010
独立核验依据 · Independent verification: 核验依据 2 OPENLIBRARY 标识 /works/OL16596906W：Cryptography engineeri
#蜜罐 #诱饵 #威胁情报
彩虹表是如何破解密码的？
How do rainbow tables crack passwords?
彩虹表是提前算好“明文到哈希”映射的大型查找表，用空间和预计算换取破解时间。加盐能让同一个密码产生不同哈希，使预先生成的表失效。因此现代系统几乎都会加盐并迭代哈希。
A rainbow table is a large precomputed lookup of plaintext-to-hash mappings, trading storage and precomputation for cracking speed. Salting makes the same password hash differently, invalidating prebuilt tables. That is why modern systems salt and iterate their hashes.
难度 专业 · 适合 初中(12-15)
CC BY 4.0 · 已核验 · Verified 2026-08-23 · 2 条独立证据
来源 · Source
Ferguson、Schneier、Kohno,《Cryptography Engineering》Wiley,2010
N. Ferguson, B. Schneier and T. Kohno, Cryptography Engineering, Wiley, 2010
独立核验依据 · Independent verification: 核验依据 2 OPENLIBRARY 标识 /works/OL16596906W：Cryptography engineeri
#彩虹表 #哈希 #加盐
“零信任”安全模型是什么意思？
What does the zero-trust security model mean?
零信任假定网络内外都不可信，任何访问都要持续验证身份、设备和权限，而不是默认内网安全。它强调最小权限和微隔离，降低横向移动的风险。这是应对现代远程和云环境的一种思路。
Zero trust assumes no implicit trust inside or outside the network; every access is continuously verified for identity, device, and permission rather than defaulting to internal safety. It emphasizes least privilege and micro-segmentation to limit lateral movement. It fits modern remote and cloud environments.
难度 专业 · 适合 初中(12-15)
CC BY 4.0 · 已核验 · Verified 2026-08-23 · 2 条独立证据
来源 · Source
Ferguson、Schneier、Kohno,《Cryptography Engineering》Wiley,2010
N. Ferguson, B. Schneier and T. Kohno, Cryptography Engineering, Wiley, 2010
独立核验依据 · Independent verification: 核验依据 2 OPENLIBRARY 标识 /works/OL16596906W：Cryptography engineeri
#零信任 #最小权限 #身份验证
公钥和私钥是如何配合工作的？
How do public and private keys work together?
非对称加密中，公钥可以公开，用来加密或验证签名；私钥必须保密，用来解密或生成签名。用公钥加密的内容只有对应私钥能解开，反过来私钥签名可用公钥验证身份。这种机制是安全通信和数字货币的基础。
In asymmetric cryptography, the public key is shared and used to encrypt or verify; the private key stays secret and is used to decrypt or sign. What the public key encrypts only the matching private key can open, and a private-key signature is verified with the public key. This underpins secure communication and digital currency.
难度 进阶 · 适合 大众
CC BY 4.0 · 已核验 · Verified 2026-08-23 · 2 条独立证据
来源 · Source
Ferguson、Schneier、Kohno,《Cryptography Engineering》Wiley,2010
N. Ferguson, B. Schneier and T. Kohno, Cryptography Engineering, Wiley, 2010
独立核验依据 · Independent verification: 核验依据 2 OPENLIBRARY 标识 /works/OL16596906W：Cryptography engineeri
#公钥 #私钥 #非对称加密
给密码“加盐”为什么更安全？
Why is salting a password more secure?
加盐是在每个密码后拼接一段随机字符串再哈希，使相同密码也得到不同结果。这能抵御彩虹表等预先计算的攻击，并防止通过比对哈希批量猜出常用密码。即使数据库泄露，破解成本也大幅提高。
Salting appends a random string to each password before hashing, so identical passwords yield different digests. This defeats precomputed attacks like rainbow tables and stops bulk guessing by hash comparison. Even if the database leaks, cracking cost rises sharply.
难度 进阶 · 适合 大众
CC BY 4.0 · 已核验 · Verified 2026-08-23 · 2 条独立证据
来源 · Source
Ferguson、Schneier、Kohno,《Cryptography Engineering》Wiley,2010
N. Ferguson, B. Schneier and T. Kohno, Cryptography Engineering, Wiley, 2010
独立核验依据 · Independent verification: 核验依据 2 OPENLIBRARY 标识 /works/OL16596906W：Cryptography engineeri
#加盐 #哈希 #密码存储
什么是 DDoS 攻击？
What is a DDoS attack?
DDoS（分布式拒绝服务）攻击指大量被控制的设备同时向目标发送请求，耗尽其带宽或计算资源，使正常用户无法访问。它利用僵尸网络放大流量。防御通常靠流量清洗和分布式的负载分担。
A DDoS (distributed denial-of-service) attack floods a target with requests from many compromised devices, exhausting its bandwidth or compute so legitimate users cannot reach it. It uses botnets to amplify traffic. Defense relies on traffic scrubbing and distributed load sharing.
难度 进阶 · 适合 大众
CC BY 4.0 · 已核验 · Verified 2026-08-23 · 2 条独立证据
来源 · Source
Ferguson、Schneier、Kohno,《Cryptography Engineering》Wiley,2010
N. Ferguson, B. Schneier and T. Kohno, Cryptography Engineering, Wiley, 2010
独立核验依据 · Independent verification: 核验依据 2 OPENLIBRARY 标识 /works/OL16596906W：Cryptography engineeri
#DDoS #僵尸网络 #可用性
什么是 SQL 注入？
What is SQL injection?
SQL 注入是攻击者把恶意 SQL 代码混进输入，让数据库误执行非预期命令，从而窃取或破坏数据。根源在于把用户输入直接拼接进查询语句。预防靠参数化查询和输入校验。
SQL injection plants malicious SQL inside user input so the database runs unintended commands, stealing or destroying data. The root cause is concatenating input directly into queries. Parameterized queries and input validation prevent it.
难度 进阶 · 适合 大众
CC BY 4.0 · 已核验 · Verified 2026-08-23 · 2 条独立证据
来源 · Source
Ferguson、Schneier、Kohno,《Cryptography Engineering》Wiley,2010
N. Ferguson, B. Schneier and T. Kohno, Cryptography Engineering, Wiley, 2010
独立核验依据 · Independent verification: 核验依据 2 OPENLIBRARY 标识 /works/OL16596906W：Cryptography engineeri
#SQL注入 #Web安全 #参数化
网站的 Cookie 如何被用于追踪用户？
How can website cookies be used to track users?
Cookie 是网站存在你浏览器里的小数据，能记住登录状态和浏览行为。第三方 Cookie 可被广告网络跨站读取，拼出你的兴趣画像。浏览器正逐步限制它们以保护隐私。
A cookie is small data a site stores in your browser to remember login state and behavior. Third-party cookies can be read across sites by ad networks, building a profile of your interests. Browsers are gradually restricting them to protect privacy.
难度 进阶 · 适合 大众
CC BY 4.0 · 已核验 · Verified 2026-08-23 · 2 条独立证据
来源 · Source
Ferguson、Schneier、Kohno,《Cryptography Engineering》Wiley,2010
N. Ferguson, B. Schneier and T. Kohno, Cryptography Engineering, Wiley, 2010
独立核验依据 · Independent verification: 核验依据 2 OPENLIBRARY 标识 /works/OL16596906W：Cryptography engineeri
#Cookie #追踪 #隐私
端到端加密和普通加密有何区别？
How does end-to-end encryption differ from ordinary encryption?
普通加密可能只在你和设备服务商之间加密，服务商仍可能看到内容。端到端加密让只有通信双方持有密钥，连服务提供商也无法解密。聊天软件和视频通话常用它保护隐私。
Ordinary encryption may protect data only between you and the service provider, which can still see content. End-to-end encryption keeps keys only with the two parties, so even the provider cannot decrypt. Messaging and calls use it to protect privacy.
难度 进阶 · 适合 大众
CC BY 4.0 · 已核验 · Verified 2026-08-23 · 2 条独立证据
来源 · Source
Ferguson、Schneier、Kohno,《Cryptography Engineering》Wiley,2010
N. Ferguson, B. Schneier and T. Kohno, Cryptography Engineering, Wiley, 2010
独立核验依据 · Independent verification: 核验依据 2 OPENLIBRARY 标识 /works/OL16596906W：Cryptography engineeri
#端到端加密 #密钥 #隐私
什么是 HTTPS，和普通 HTTP 有何不同？
What is HTTPS and how does it differ from HTTP?
HTTPS 是在 HTTP 之上加入 TLS 加密的协议，让浏览器和网站之间的通信被加密且可验证身份。它能防止他人窃听、篡改或冒充网站。地址栏出现锁形图标通常就表示使用了 HTTPS。
HTTPS is HTTP with TLS encryption added, so traffic between your browser and a site is encrypted and the site's identity can be verified. It prevents eavesdropping, tampering, and impersonation. A lock icon in the address bar usually means HTTPS is on.
难度 入门 · 适合 大众
CC BY 4.0 · 已核验 · Verified 2026-08-23 · 2 条独立证据
来源 · Source
Ferguson、Schneier、Kohno,《Cryptography Engineering》Wiley,2010
N. Ferguson, B. Schneier and T. Kohno, Cryptography Engineering, Wiley, 2010
独立核验依据 · Independent verification: 核验依据 2 OPENLIBRARY 标识 /works/OL16596906W：Cryptography engineeri
#HTTPS #TLS #加密
双因素认证有什么用？
What is the use of two-factor authentication?
双因素认证要求除了密码外再提供第二种证明，如手机验证码或指纹。即便密码泄露，攻击者没有第二因素也难以登录。它显著提升了账号安全性。
Two-factor authentication requires a second proof beyond the password, such as a phone code or fingerprint. Even if the password leaks, the attacker lacks the second factor and cannot easily log in. It greatly strengthens account security.
难度 入门 · 适合 大众
CC BY 4.0 · 已核验 · Verified 2026-08-23 · 2 条独立证据
来源 · Source
Ferguson、Schneier、Kohno,《Cryptography Engineering》Wiley,2010
N. Ferguson, B. Schneier and T. Kohno, Cryptography Engineering, Wiley, 2010
独立核验依据 · Independent verification: 核验依据 2 OPENLIBRARY 标识 /works/OL16596906W：Cryptography engineeri
#双因素 #身份验证 #安全
防火墙是做什么的？
What does a firewall do?
防火墙像一道关卡，按规则检查进出网络的数据包，拦截可疑或未经允许的流量。它可以部署在个人电脑、路由器或云端。防火墙减少攻击面，但不能替代杀毒和加密。
A firewall acts like a checkpoint, inspecting incoming and outgoing packets against rules and blocking suspicious or unauthorized traffic. It can sit on a PC, a router, or the cloud. It shrinks the attack surface but does not replace antivirus or encryption.
难度 入门 · 适合 大众
CC BY 4.0 · 已核验 · Verified 2026-08-23 · 2 条独立证据
来源 · Source
Ferguson、Schneier、Kohno,《Cryptography Engineering》Wiley,2010
N. Ferguson, B. Schneier and T. Kohno, Cryptography Engineering, Wiley, 2010
独立核验依据 · Independent verification: 核验依据 2 OPENLIBRARY 标识 /works/OL16596906W：Cryptography engineeri
#防火墙 #访问控制 #网络
为什么不应该在多个网站用同一个密码？
Why shouldn't you reuse one password across sites?
一旦某个网站发生泄露，攻击者会拿这套账号密码去尝试其他网站，称为“撞库”。不同网站使用不同密码，可把损失限制在一个账户内。配合密码管理器更易做到。
If one site leaks, attackers try the same credentials elsewhere, called credential stuffing. Using different passwords per site confines the damage to a single account. A password manager makes this easier.
难度 入门 · 适合 大众
CC BY 4.0 · 已核验 · Verified 2026-08-23 · 2 条独立证据
来源 · Source
Ferguson、Schneier、Kohno,《Cryptography Engineering》Wiley,2010
N. Ferguson, B. Schneier and T. Kohno, Cryptography Engineering, Wiley, 2010
独立核验依据 · Independent verification: 核验依据 2 OPENLIBRARY 标识 /works/OL16596906W：Cryptography engineeri
#密码复用 #撞库 #账户安全