Shellshock暴露互联网如履薄冰

2014-10-09 18:01:15来源：可可英语

　　The Shellshock bug that has left vast swaths of theinternet vulnerable to cyber criminals for more than20 years highlights how the basic foundations of thenetwork are not fit for the 21st century web,security experts have warned.

　　安全专家警告说，“Shellshock漏洞”暴露了互联网在超过20年的时间里为网络犯罪分子留下的大量可乘之机，这凸显出最基本的网络基础设施已经不适应21世纪网络的需要。

　　The fundamental flaw that was discovered on Wednesday has been described as the worstbug exposed for about a decade, as it left the computer systems of governments, themilitary and companies open to manipulation from afar.

　　周三发现的这一基础性漏洞被称为近十年内发现的最严重漏洞。利用该漏洞，可以远程操纵政府机关、军方及企业的计算机系统。

　　Tal Klein, vice-president of strategy and marketing at US-based cloud security companyAdallom, warned there could be more bugs like this to be discovered because the whole internetwas built on a “sheet of very thin ice”.

　　Adallom副总裁塔尔•克莱因(Tal Klein)警告说，由于整个互联网都像是建在“一块极薄的冰层之上”，今后可能会发现更多这样的漏洞。Adallom是一家总部在美国的云安全公司。

　　“We continuously work on improving the security of the internet assuming the sheet of iceunderneath it is secure,” he said. “[But] very few people actively spend time on the securityof the underlying components. They are so old that people assume if no one hascompromised them yet then it is fine.”

　　他说：“我们一直在努力改善互联网的安全性，却想当然地认为互联网之下的冰层是安全的。极少有人主动花时间检验基础组件的安全性。这些组件使用的时间太久，人们理所当然地认为，既然人们还在用，就说明它们没什么问题。”

　　The threat of the Shellshock bug can be mitigated by updating, or patching, computersystems. But that will take time, as IT teams rush to work out which systems need updating,and Shellshock may be one of many vulnerabilities in the basic architecture of the internet.

　　通过升级电脑系统——或者为系统打上补丁——可以消除Shellshock漏洞的威胁。不过这么做需要花上一段时间，因为IT团队必须赶紧分析出哪些系统需要更新，而且Shellshock漏洞可能只是互联网基础设施的诸多漏洞之一。

　　Trey Ford, global security strategist for Rapid 7, said the problem was that innovations hadbeen bolted on top of a structure that was not built for what it was used for today.

　　Rapid 7全球安全策略师特雷•福特(Trey Ford)表示，问题在于人们一直在一种基础架构之上进行创新，而当初建立这种基础架构的目的却与今天使用它的目的不一致。

本文关键字: Shellshock暴露互联网如履薄冰