Skip to content

【世界密碼日】這些年，大家一起用的弱密碼

您知道每個五月的第一個星期四是世界密碼日嗎？現代生活每天都過得十分繁忙，您有好好關心過您的密碼嗎？趁著世界密碼日，好好的了解一下關於密碼容易被忽視的問題。

根據 splashdata 的統計，2019 年的十大弱密碼仍是那幾個熟面孔，和 2018 年的榜單做個比較，上榜的密碼大同小異，雖然「sunshine」掉出 Top 10 榜外但也仍是第30名，新進榜的還是更弱的「123123」。並且毫無意外的，仍是「123456」奪下弱密碼冠軍寶座。


什麼是弱密碼呢？就是特別容易被猜中，或是許多人愛用的同一種邏輯所設定的密碼：例如，去年一位國外工程師曾在推特發問，為何 ji32k7au4a83 這個看似安全的密碼在 Have I been pwned 資料庫中出現上百次。然而，這個問題竟然只有台灣網友答得出來，對照注音鍵盤 ji32k7au4a83 = 我的密碼。不僅如此，網友還發現和password、iloveyou相同邏輯的 au4a83、ji394su3 密碼使用量遠超過 ji32k7au4a83。

根據最新美國標準與科技研究院（NIST）所提出的建議，高強度的密碼設定原則，最好包括15個字元以上，並由幾個不相干的名詞或數字組成：例如，VisonExamAttention2020YouLove，這樣超長的密詞可套用自己才知道的邏輯進行組合，比亂數形成的密碼方便記憶，也不容易被破解。另外，若無任何證據顯示密碼有外流的情況，頻率過高的更換密碼，為難的不是入侵者，而是密碼的使用者！

密碼的保護，除了應避免使用弱密碼外，也必須考慮外來的嘗試與破解！當系統遭遇錯誤率過高的外來的密碼嘗試時，應直接封鎖嘗試的來源，而非將該帳號封鎖，這樣才能在避免「暴力破解(Brute-force attack)」、「字典檔攻擊(Dictionary attack)」與「密碼噴灑(Password Spraying)」的時候，不至於困擾擁有正確密碼的主人。

最後，也是大家最容易疏忽的事：千萬不要在多個服務都使用同一組密碼！
一旦任一服務有密碼外洩事件發生時，使用相同密碼的其他服務也跟著一起曝險！

ASRC 研究中心的帳密安全提醒
1. 選擇使用者保護較嚴謹的系統服務，例如一定要有防密碼濫猜的機制
2. 切記，不要一套密碼走天下。不同的服務間使用相同的密碼，只要一個服務的帳密外洩，很容易牽連其他服務帳戶，尤其網路銀行登入密碼更要避免重覆使用。
3. 避免使用公開在外或社群網站可見的生日、姓名、手機等資料做為密碼
4. 雙因子驗證的搭配使用，比定期更換密碼的保護效益有用許多

驗證郵件密碼強度，SPAM SQR 密碼強度檢測模組
企業的電子郵件密碼安全，可透過中華數位科技 SPAM SQR 密碼強度檢測模組定期實施密碼稽核，確保密碼強健度，降低密碼被猜中的風險，避免員工的弱密碼成為資安破口。詳情請洽中華數位科技 02-25422526。

About Version 2

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products. Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

關於中華數位科技 Softnext Technologies Corp.
創立於2000年8月。
秉持著【We Secure Your Content】的服務理念，以提供企業資訊應用管理服務及打造資訊內容安全防護為宗旨。專精於提供網路應用服務技術，根據市場需求推出多款資訊內容安全的解決方案及應用服務，能夠協助企業透過符合資安管理規範並遵循法規的方式進行資訊內容安全管理，以維護員工的生產力、提升企業經營績效。

關於 ASRC 垃圾訊息研究中心
ASRC 垃圾訊息研究中心 (Asia Spam-message Research Center)，長期與中華數位科技合作，致力於全球垃圾郵件、惡意郵件、網路攻擊事件等相關研究事宜，並運用相關數據統計、調查、趨勢分析、學術研究、跨業交流、研討活動..等方式，促成產官學界共同致力於淨化網際網路之電子郵件使用環境。更多資訊請參考 www.asrc-global.com .

ESET upgrades security management for organizations running Microsoft Azure

Bratislava – ESET has upgraded its Security Management Center for Microsoft Azure, providing organizations with complete, real-time network visibility and allowing them to oversee thousands of servers, desktops and mobile devices via a single pane of glass.

ESET Security Management Center for Microsoft Azure is a cloud-based management solution that gives businesses the capability to deploy, update and manage all ESET security solutions from a single console. The upgraded management console is ideal for both small and large organizations already utilizing Microsoft Azure, and requires no additional hardware or license fees.

The comprehensive solution enables businesses to easily manage all physical and virtual desktops and servers running on Windows, macOS and Linux, as well as supporting full Mobile Device Management (MDM) of Android and iOS devices. ESET Security Management Center seamlessly combines the management of multiple endpoint products, including ESET Enterprise Inspector and ESET Dynamic Threat Defense in one easy-to-use hub, also accessible via browser. This means organizations are equipped with multilayered protection that addresses the key tenets of a strong cybersecurity strategy: threat prevention, detection, assessment and response.

In addition, the solution features a fully customizable notification system, allowing users to configure notifications with the exact information they wish to be notified about.

Igor Hula, Product Manager at ESET, commented: “We are dedicated to providing our users with the very best in IT security, and our wide range of product offerings for a variety of platforms and devices exemplifies this. We believe every business should be equipped with cutting-edge technology in order to keep both their employees and customers safe and secure, and we are continuously improving and adapting our solutions to ensure this. It is vital that businesses of all sizes are supported by a comprehensive cybersecurity strategy – advanced and easy-to-use solutions mean businesses can focus on their goals, knowing they are securely protected.”

For further information on ESET Security Management Center for Microsoft Azure, please click here.

 

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

Internews and ESET develop security partnership to protect human rights defenders

Bratislava – Global nonprofit Internews has partnered with cybersecurity company ESET to distribute antivirus software to civil society and at-risk groups worldwide. The pilot project will protect more than 1000 devices, reaching a network of journalists, human rights groups, and members of civil society who are highly vulnerable to digital threats.

“These licenses will fill a critical gap among the most at-risk communities around the globe,” said Megan DeBlois, Information Security Advisor at Internews. “The consequences of online attacks against human rights defenders can be life altering — leading to silencing, arrests, or worse. We’re grateful to partner with ESET for helping us provide stronger protections to human rights defenders at such a vital time for information provision.”

Internews supports media organizations and other information providers globally with resources, training, and funding so they can deliver trustworthy and accurate information to local communities. This includes providing direct technological support to those working in some of the most restrictive regimes worldwide.

“We’re thrilled to be working with Internews to help better protect those on the front lines, the people providing information at this time of crisis,” said Alexis Dorais-Joncas, Security Intelligence Team Lead at ESET. “First responders in human rights communities often operate with very limited resources while they face some of the most advanced and dedicated threat actors. It’s meaningful to all of us at ESET to be able to support these communities with high-quality tools and protections that might not be available to them otherwise.”

“This pilot project with ESET enables beneficiaries to access antivirus tools which are otherwise prohibitively expensive, limited to free-tier services, in short supply for NGO licenses, and/or reliant on advertising models,” said Jon Camfield, director of Global Technology Strategy at Internews. “While antivirus is not a cure-all or appropriate for all threat models, it is a critical tool for reducing risk.”

The Internews/ESET partnership is intended to strengthen connections between civil society and the private sector, enabling a greater exchange of ideas and needs from end users to tech developers. This connection is a core principle of Internews’ global technology efforts.

“Identifying and flagging malign actions helps improve security for everyone, not just the individual or group targeted,” said DeBlois. “As companies like ESET have greater visibility into the offensive tactics being deployed against civil society, they’re even better equipped to design effective defensive strategies to protect all users from these advanced threat actors.”

The initiative comes as cyberattacks are on the rise as more and more people move to operating online in response to the COVID-19 situation, and forms part of Internews’ broader work in ensuring vital information can reach all sectors of society at this crucial time. 

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

ESET to support EU CERTs with free access to Threat Intelligence during COVID-19

Bratislava – ESET, a global leader in cybersecurity, has implemented measures to assist national Computer Emergency Response Teams within the EU (EU CERTs) in mitigating threats during the COVID-19 crisis. As a fellow EU-based vendor, ESET is dedicated to partnering with organizations across the EU to ensure that its citizens are safe and secure online.

To help protect the general public and infrastructure in their respective countries, ESET is offering public sector EU CERTs free access for six months to the ESET Threat Intelligence Data Feeds. The offering includes access to ESET’s Domain, URL, Malicious files and Botnet feeds.

The COVID-19 crisis has seen an increase in the number of digital threats, and it is vital that EU nations are equipped with the tools and resources needed to protect their citizens and systems against all potential threats. ESET Threat Intelligence is ESET’s threat reputation network. It uses information gathered from over 110 million sensors in order to share actionable threat intelligence with users.

Access to the ETI Data Feeds will enable the CERTs to monitor possible threats in order to mitigate the risk of an attack and strengthen their defenses. Collaboration is an essential part of threat intelligence and response, and ESET has reached out to 46 CERT institutions across the EU for partnership, with initial feedback very positive and several implementations already underway.

Ignacio Sbampato, Chief Business Officer at ESET, commented: “We believe everyone has the right to a safe and secure experience of technology, and this means that the public sector must be equipped with the resources to protect both its citizens and infrastructure. Unfortunately, there are malicious actors seeking to take advantage of the current crisis, and we are dedicated to assisting emergency response teams across the EU in mitigating and responding to these potential threats. As an EU-based organization, we hold the safety of our citizens close to our hearts, and we endeavor to do everything we can to support local CERT teams during this time.”

Learn more about ESET Threat Intelligence here.

 

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

ESET Science Award launches its second annual edition

Bratislava – At a time when the world is relying on scientists and science to help with the coronavirus pandemic, ESET Science Award is launching its second annual recognition contest. Its aim is to recognize outstanding scientists working in Slovakia and introduce them to the public, as well as to showcase the essential role that science plays in society. The international jury will once again be chaired by a Nobel Prize winner this year.

In 2019, ESET Science Award launched its second annual edition to recognize exceptional scientists and academics working in Slovakia. Laureates of the first award include chemist Ján Tkáč, molecular biologist Ľubomíra Tóthová, and bioinformatics scientist Tomáš Vinař.

One of the objectives of the ESET Science Award is to highlight the important role of science and scientists within society. “Today more than ever we, as a society, recognize that scientific knowledge can save thousands of lives and help us make better decisions,” says Richard Marko, CEO of ESET. “Results of a survey conducted before the launch of this year’s award show that as much as 86 percent of respondents agree that Slovakia needs stronger support for science and research. We believe that by recognizing outstanding personalities in science, we will be able to increase the public’s interest in the field, thus increasing the state’s support for it.”

The jury that decides on the laureates consists of world-renowned and respected representatives of science disciplines from around the world. The jury assesses the short-listed scientists in terms of the quality of their scientific work and research and how these overlap with society, with an emphasis on international standards. A complex evaluation process includes both quantitative and qualitative criteria, taking into account the analysis of professional work and its benefits for society, communication, and scientific ethics and integrity.

This year, a top-level evaluation process is to be overseen by an international jury chairman who is a Nobel Prize winner. As the award organizer, the ESET Foundation is hopeful that, despite the current situation with the coronavirus pandemic, it will be able to secure the chairman’s participation in person. “Accepting the award from a Nobel Prize winner has been an exceptional moment in my scientific career. Despite the laureates being decided by a high-quality international scientific jury, I am pleased that this award comes not only from scientific circles but also from the wider community. It symbolizes that society is slowly starting to recognize the role of science in people’s everyday lives,” says Jan Tkáč, the 2019 laureate in the main category, Outstanding Individual Contributor to Slovak Science.

Scientists, researchers, and academics working in Slovakia have until May 28, 2020, to submit an application for the ESET Science Award via the esetscienceaward.sk website. Like last year, this year’s award is to be split into three categories – Outstanding Individual Contributor to Slovak Science, Exceptional Young Scientist in Slovakia under the Age of 35, and Outstanding Academic. The award covers four scientific areas: natural sciences, medical and pharmaceutical sciences, technical sciences, and agricultural sciences. An award ceremony to announce the laureates is planned for October 14, 2020, subject to change based on the coronavirus pandemic situation. For more information, visit www.esetscienceaward.sk.

 

 

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.