Chapter 50 Major Defects
Boss Xiong really kept his word, and the equipment installation of other departments of the city government was handed over to Niu Pengen, Liu Xiao took the company's people to install equipment every day, and he had to get hundreds of computers a day, and he was tired enough. OF COURSE, HE CAN STILL SEE THE FOREIGNER OF RE&KING EVERY DAY, AND THE FOREIGNER WILL ASK LIU XIAO FROM TIME TO TIME HOW HE THINKS ABOUT IT, AND LIU XIAO ALWAYS SAYS THAT THE COMPANY IS RESEARCHING.
Liu Xiao has already read the test report of the soft alliance, this product is indeed very powerful, and the protection index greatly exceeds that of similar products, and the soft alliance has used all the attack methods they can master, and it is difficult to break through the protection of this firewall. It is said that it is definitely a good thing to act as an agent for this product, but Liu Xiao can't make a decision, first, he is afraid that the soft alliance will have ideas, and second, he always thinks about stepping on the snow without a trace, and he is afraid that there will be something greasy on this product.
On this day, after Liu Xiao finished his own business, he stood behind the foreigner and watched him set up a firewall. IN THE PAST FEW DAYS, LIU XIAO HAS ALSO STUDIED THIS PRODUCT, AND DID NOT FIND ANYTHING SUSPICIOUS, THE ONLY SUSPICIOUS PLACE IS THAT THIS FIREWALL HAS THE FUNCTION OF AUTOMATIC FIRMWARE UPGRADE, AS LONG AS IT IS CONNECTED TO THE INTERNET, IT WILL AUTOMATICALLY GET THE VERSION INFORMATION FROM THE RE&KING SERVER, AND UPDATE ITS OWN FUNCTIONAL MODULES IN TIME. Liu Xiao also tested it with his own testing tools, and the data obtained was basically consistent with the soft alliance, and it seems that the strength of foreign hackers should not be underestimated.
"Mr. Miller, I have a question for you. Liu Xiao saw that the foreigner was almost busy, "Do you think it is useful to design an automatic update function for the firewall?"
"Of course it works!" the foreigner put down his work, "our firewall is both soft and hard, the software part needs to be updated in time, and now the attack methods are endless, if you can't come up with contingency measures in time, customers may be attacked." In addition, the functional modules embedded in our products may be found to have vulnerabilities and errors in the future, and it is impossible for us to send people to replace and debug them one by one, and automatic updates can solve a lot of unnecessary troubles. ”
"That's not right, right!" Liu Xiao frowned, "I see that the firewall rules you set today are slightly different from yesterday's, once they are automatically updated, these settings will become the default settings, so what you are doing now will not be in vain?"
"Uh......" foreigners are a little dumbfounded, they really didn't think of this problem when designing the firmware upgrade, he is now setting different rules according to different networks, but a little update, these settings will be restored to default, do you have to go and set them again one by one? Isn't that the same as not having automatic updates? The foreigner sweated a little on his head, "Thank you for reminding me, Mr. Liu, we were really negligent on this point, I will contact the headquarters now to see how to solve this problem." ”
After the foreigner finished speaking, he hurriedly packed his things and left in a hurry.
Liu Xiao looked at the foreigner's back and pouted, and said in his heart It's too late for you to solve it now, even if you can solve this problem in the next version, but the work that has been done before has to be done again.
Liu Xiao walked over to pack his things and beckoned his people to get ready to call it a day.
"Wang Gong, please come in!" A few people walked in with a person at the door, and one of the leaders introduced the person in the middle, "Wang Gong, all the equipment procurement and installation standards are done in accordance with your requirements, you accept it, if there is any problem, we will immediately find someone to change it!"
Wang Gong in the middle was about forty years old, bowed slightly, and said, "Okay, I'll take a look at it!"
Wang Gong looked around and found that Liu Xiao and the others were packing up their things, so he walked over and asked, "What are you responsible for?"
Liu Xiao stepped forward, "The equipment is installed, the wiring is connected, and the basic security settings of the computer are set." ”
"Thank you for your hard work!" Wang Gong nodded, walked around, did not find any problems, all the network cables were taken according to the requirements of the dark line, one is for safety and beauty, and the other is to prevent someone from wiring without permission, Wang Gong walked to a computer, random points, he wanted to see how the security settings of these computers were, while looking, he casually asked a few questions, all about construction standards and operational matters.
The question was very simple, and without waiting for Liu Xiao to answer, several other people in the company rushed to answer. Wang Gong was very satisfied, and walked up to Liu Xiao, "Well, it's very good, the basic safety settings are in place." ”
The people who accompanied Wang Gong were immediately overjoyed, and hurriedly came over, "Wang Gong, then let's check the others." ”
"Okay, let's take a look at the server's protections again!"
"Please follow me!" one led the way, and the others left.
"Let's call it a day!" Liu Xiao carried his bag and was about to leave, but found that there was an extra folder in front of the computer where Wang Gong had stayed just now, and it seemed that Wang Gong had forgotten to take it.
Liu Xiao went over and picked up the folder, opened it and looked at it, the title of the file, "Haicheng City Government Network Transformation Security Plan", looking at the name, this should be the detailed rules of this network transformation. Liu Xiao was a little curious, and didn't know what kind of security plan the government could design when it came to safety, so he casually flipped a few pages.
Liu Xiao really didn't guess wrong, this is indeed the detailed plan, which contains various standards for this transformation, including the adoption of equipment, the division of authority configuration, emergency plans, safeguard measures, staffing, etc., everything that is needed, there are detailed instructions in it. Liu Xiao has also done this thing, and the enterprise system he designed for Zhang's also includes the security plan, but the size is different, he is doing security planning for an enterprise, and this plan is for the entire city to do security planning, including government affairs system, public system, energy supply system, etc., the two are not at the same level, there is no comparison.
"What? can you understand?" Liu Xiao was looking at it vigorously, and at some point, Wang Gong returned, probably because he found that he had lost his documents, and turned around to look for it.
Liu Xiao closed the document and shook his head, "I don't understand it at all! I was packing up my things just now to call it a day, and I found that there was a document here, so I flipped through it casually." ”
Wang Gong took the folder, patted Liu Xiao's shoulder, and said with a smile: "Don't be discouraged, there is a specialization in the art industry, if it comes to wiring and wiring, I will definitely not be able to do such a beautiful job as you." Okay, I'll be busy first, and you will have to worry more about the rest of the departments. ”
Wang Gong came in a hurry, and went in a hurry, Liu Xiao checked it one last time, confirmed that nothing was left behind, and then picked up his bag and left.
On the way back, Liu Xiao has been thinking about the security plan, anyway, after looking at it just now, it seems that there is no problem at all, everyone who should consider it has considered it, and it should be foolproof, but Liu Xiao always feels that there is a problem, and he can't think of it after thinking about it, it is a vague feeling.
RETURNED HOME IN A DAZE, LIU XIAO TOOK OUT THE RE&KING PRODUCT AND TINKERED, HE TOUCHED THE CONSTRUCTION SITE SEVERAL TIMES IN THE PAST FEW DAYS, AND THERE WAS NO PROBLEM WITH OTHER LINKS AND EQUIPMENT, IF THE PROBLEM WAS TO BE SAID, IT COULD ONLY BE THIS PRODUCT, BUT LIU XIAO COULDN'T BE SURE, IT WAS JUST A GUESS.
Liu Xiao turned on the tool, hung it up and let it automatically test the product, and then the person went to bed, his eyes stared at the ceiling, and his mind began to think wildly, if there is no problem with this firewall, when the time comes, the drill will start, and this firewall will be used, how can he break through, and what can he do after breaking through?
"Breakthrough should not be a problem!" Liu Xiao said to himself, "You can use deception techniques, you can also directly attack the firewall and make it collapse, and you can also ......", Liu Xiao cited several methods in a row, he was sure that he could break through the firewall, but it really didn't work, so he used the ghostly method of stepping on the snow without a trace, and he could definitely pass through the firewall silently.
The key is what can be done after the breakthrough? Liu Xiao recalled the security plan he saw in the afternoon, Wang Gong did have his old spicy, he concentrated all the authority into a decision-making response center, the decision-making of each department must be submitted from the bottom up, and finally arrive at the response center, and the response center will issue relevant instructions after reviewing and passing, and the functional tools of each department can only make corresponding changes after receiving the instructions.
This means that even if a hacker breaks through this firewall and compromises the network of a functional department of the government, it will not get any real authority, and even if they disguise this department to send a decision request to the decision-making center, it will be difficult to pass the review level.
"That's not right!" Liu Xiao got up from the bed, "It still has an impact." He remembered that the plan said that the system of the response center has an emergency response mechanism, and the system will judge whether a major incident has been encountered according to the situation received, and once the judgment is confirmed, the system will automatically start emergency protection measures, and urgently issue a series of instructions to maintain the order of the city and ensure the safety of the city without the need for review.
"How can it be regarded as encountering a major incident?" Liu Xiao thought for a moment, floods, fires, and fires didn't seem to be caused by hackers, "So what else could it be?"
Liu Xiao sat on the edge of the bed and pondered for a long time, and he suddenly thought of a possibility, a method that was very easy to do, but could make this response center make a wrong judgment. In fact, this emergency response mechanism is basically designed to deal with major network incidents, and the wind and fire disaster is not something that a computer system can judge independently.
"I understand!" Liu Xiao got up from the bed, and said that there was a hacker organization that sneaked in in advance, and it was very likely that Haicheng's security response mechanism was faulty and could be used by hackers. Haicheng's network transformation has not yet been completed, how can hackers sneak in in advance, if they can really sneak in in advance, it is that there is a problem with the system itself, and there are weaknesses waiting for hackers to catch.
"It must be like this!" Liu Xiao clenched his fists, it must have been stolen by a hacker group this time, and they found a weakness in the response mechanism.
Liu Xiao paced in circles in the house, "What should I do now? I can't just watch Haicheng make a fool of myself during the exercise!" Liu Xiao didn't expect Haicheng's security response mechanism to have such a big loophole, which can simply be said that Haicheng has failed before the exercise has started, no matter what, Liu Xiao doesn't want to see Haicheng make jokes during the exercise.
Liu Xiao figured it out, grabbed his bag, and hurriedly went out, he had to find a way to plug this loophole.