{"id":477460,"date":"2023-08-09T09:15:22","date_gmt":"2023-08-09T09:15:22","guid":{"rendered":""},"modified":"2023-09-05T11:14:47","modified_gmt":"2023-09-05T11:14:47","slug":"homograph-attack","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/homograph-attack\/","title":{"rendered":"\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb"},"content":{"rendered":"<p>\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\uff0c\u4e5f\u79f0\u4e3a\u540c\u5f62\u5f02\u5f62\u653b\u51fb\uff0c\u662f\u4e00\u79cd\u6b3a\u9a97\u6027\u7f51\u7edc\u653b\u51fb\uff0c\u6076\u610f\u884c\u4e3a\u8005\u5229\u7528\u4e0d\u540c\u811a\u672c\u6216\u5b57\u6bcd\u8868\u4e2d\u7684\u5b57\u7b26\u4e4b\u95f4\u7684\u89c6\u89c9\u76f8\u4f3c\u6027\u6765\u6b3a\u9a97\u7528\u6237\u3002\u901a\u8fc7\u4f7f\u7528\u770b\u8d77\u6765\u4e0e\u5408\u6cd5\u5b57\u7b26\u51e0\u4e4e\u76f8\u540c\u7684\u5b57\u7b26\uff0c\u653b\u51fb\u8005\u4f1a\u6b3a\u9a97\u7528\u6237\uff0c\u8ba9\u4ed6\u4eec\u76f8\u4fe1\u4ed6\u4eec\u6b63\u5728\u4e0e\u53d7\u4fe1\u4efb\u7684\u7f51\u7ad9\u3001\u7535\u5b50\u90ae\u4ef6\u6216\u6d88\u606f\u8fdb\u884c\u4ea4\u4e92\u3002\u8fd9\u79cd\u9634\u9669\u7684\u7b56\u7565\u53ef\u80fd\u5bfc\u81f4\u5404\u79cd\u7f51\u7edc\u72af\u7f6a\uff0c\u4f8b\u5982\u7f51\u7edc\u9493\u9c7c\u3001\u8eab\u4efd\u76d7\u7a83\u548c\u4f20\u64ad\u6076\u610f\u8f6f\u4ef6\u3002<\/p>\n<h2>\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u7684\u8d77\u6e90\u5386\u53f2\u53ca\u5176\u9996\u6b21\u63d0\u53ca<\/h2>\n<p>\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u7684\u6982\u5ff5\u4e8e 2001 \u5e74\u7531 Evgeniy Gabrilovich \u548c Alex Gontmakher \u5728\u4ed6\u4eec\u9898\u4e3a\u201c\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u201d\u7684\u7814\u7a76\u8bba\u6587\u4e2d\u9996\u6b21\u63d0\u51fa\u3002\u4ed6\u4eec\u6f14\u793a\u4e86\u653b\u51fb\u8005\u5982\u4f55\u64cd\u7eb5\u56fd\u9645\u5316\u57df\u540d (IDN) \u6765\u521b\u5efa\u5728\u89c6\u89c9\u4e0a\u7c7b\u4f3c\u4e8e\u77e5\u540d\u7f51\u7ad9\u4f46\u5177\u6709\u4e0d\u540c\u5e95\u5c42 Unicode \u8868\u793a\u5f62\u5f0f\u7684\u57df\u3002<\/p>\n<h2>\u6709\u5173\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u7684\u8be6\u7ec6\u4fe1\u606f<\/h2>\n<p>\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u4e3b\u8981\u5229\u7528\u4e0d\u540c\u4e66\u5199\u7cfb\u7edf\u4e2d\u53ef\u7528\u7684\u5927\u91cf\u5b57\u7b26\u96c6\uff0c\u7279\u522b\u662f Unicode\u3002 Unicode \u662f\u4e00\u79cd\u901a\u7528\u5b57\u7b26\u7f16\u7801\u6807\u51c6\uff0c\u5141\u8bb8\u8868\u793a\u4e16\u754c\u5404\u5730\u5404\u79cd\u8bed\u8a00\u548c\u6587\u5b57\u7684\u5b57\u7b26\u3002\u5728 Unicode \u4e2d\uff0c\u67d0\u4e9b\u5b57\u7b26\u5c3d\u7ba1\u662f\u4e0d\u540c\u7684\u5b9e\u4f53\uff0c\u4f46\u5728\u89c6\u89c9\u4e0a\u5374\u76f8\u4f3c\u3002<\/p>\n<p>\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u7684\u5185\u90e8\u7ed3\u6784\u6d89\u53ca\u4ee5\u4e0b\u6b65\u9aa4\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u5b57\u7b26\u6620\u5c04<\/strong>\uff1a\u653b\u51fb\u8005\u8bc6\u522b\u6765\u81ea\u4e0d\u540c\u811a\u672c\u7684\u5b57\u7b26\uff0c\u8fd9\u4e9b\u5b57\u7b26\u4e0e\u76ee\u6807\u811a\u672c\u4e2d\u7684\u5b57\u7b26\u76f8\u4f3c\u3002\u4f8b\u5982\uff0c\u62c9\u4e01\u8bed\u201ca\u201d(U+0061) \u548c\u897f\u91cc\u5c14\u8bed\u201c\u0430\u201d(U+0430) \u770b\u8d77\u6765\u51e0\u4e4e\u76f8\u540c\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u57df\u540d\u6ce8\u518c<\/strong>\uff1a\u653b\u51fb\u8005\u4f7f\u7528\u8fd9\u4e9b\u6b3a\u9a97\u6027\u5b57\u7b26\u6ce8\u518c\u57df\u540d\uff0c\u521b\u5efa\u4e00\u4e2a\u5728\u89c6\u89c9\u4e0a\u4e0e\u5408\u6cd5\u57df\u540d\u76f8\u540c\u7684\u57df\u540d\u3002\u4f8b\u5982\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u6ce8\u518c\u201cexample.com\u201d\u800c\u4e0d\u662f\u201cexample.com\u201d\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6b3a\u9a97\u6027\u6c9f\u901a<\/strong>\uff1a\u6709\u4e86\u6b3a\u9a97\u6027\u57df\uff0c\u653b\u51fb\u8005\u5c31\u53ef\u4ee5\u5236\u4f5c\u7f51\u7edc\u9493\u9c7c\u7535\u5b50\u90ae\u4ef6\u3001\u521b\u5efa\u6b3a\u8bc8\u6027\u7f51\u7ad9\uff0c\u751a\u81f3\u53d1\u9001\u770b\u4f3c\u6e90\u81ea\u5408\u6cd5\u57df\u7684\u6076\u610f\u6d88\u606f\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u540c\u5f62\u5f02\u4e49\u653b\u51fb\u7684\u5173\u952e\u7279\u5f81\u5206\u6790<\/h2>\n<p>\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u5177\u6709\u51e0\u4e2a\u4f7f\u5176\u7279\u522b\u5371\u9669\u7684\u5173\u952e\u7279\u5f81\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u9690\u8eab<\/strong>\uff1a\u8be5\u653b\u51fb\u5229\u7528\u4eba\u7c7b\u89c6\u89c9\u611f\u77e5\uff0c\u4f7f\u7528\u6237\u5f88\u96be\u533a\u5206\u5408\u6cd5\u5b57\u7b26\u548c\u6b3a\u9a97\u6027\u5b57\u7b26\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8de8\u5e73\u53f0<\/strong>\uff1a\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u4e0d\u9650\u4e8e\u7279\u5b9a\u64cd\u4f5c\u7cfb\u7edf\u6216\u7f51\u9875\u6d4f\u89c8\u5668\uff0c\u5f71\u54cd\u4e0d\u540c\u5e73\u53f0\u7684\u7528\u6237\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u72ec\u7acb\u4e8e\u8bed\u8a00<\/strong>\uff1a\u7531\u4e8e\u653b\u51fb\u5229\u7528 Unicode\uff0c\u56e0\u6b64\u5b83\u53ef\u4ee5\u9488\u5bf9\u4f7f\u7528\u975e\u62c9\u4e01\u811a\u672c\u7684\u4efb\u4f55\u8bed\u8a00\u7684\u7528\u6237\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u591a\u529f\u80fd\u6027<\/strong>\uff1a\u653b\u51fb\u8005\u53ef\u4ee5\u4f7f\u7528\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u8fdb\u884c\u5404\u79cd\u7f51\u7edc\u72af\u7f6a\uff0c\u5305\u62ec\u7f51\u7edc\u9493\u9c7c\u3001\u6076\u610f\u8f6f\u4ef6\u5206\u53d1\u548c\u793e\u4f1a\u5de5\u7a0b\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u7684\u7c7b\u578b<\/h2>\n<p>\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u53ef\u4ee5\u6839\u636e\u653b\u51fb\u8005\u5229\u7528\u7684\u89c6\u89c9\u76f8\u4f3c\u6027\u8fdb\u884c\u5206\u7c7b\u3002\u4ee5\u4e0b\u662f\u4e00\u4e9b\u5e38\u89c1\u7684\u7c7b\u578b\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th>\u7c7b\u578b<\/th>\n<th>\u4f8b\u5b50<\/th>\n<th>\u89e3\u91ca<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>\u56fd\u9645\u5316\u57df\u540d\u540c\u5f62\u5f02\u4e49\u8bcd<\/strong><\/td>\n<td>amazon.com\uff08\u0430 \u4e0e a\uff09<\/td>\n<td>\u5229\u7528\u4e0d\u540c\u811a\u672c\u4e2d\u7684\u5b57\u7b26\u3002<\/td>\n<\/tr>\n<tr>\n<td><strong>\u6587\u5b57\u540c\u5f62\u5f02\u4e49\u8bcd<\/strong><\/td>\n<td> .com\uff08\u4e0e B\uff09<\/td>\n<td>\u4f7f\u7528\u4e0d\u540c Unicode \u811a\u672c\u4e2d\u7684\u5b57\u7b26\u3002<\/td>\n<\/tr>\n<tr>\n<td><strong>Punycode\u540c\u5f62\u5f02\u4e49\u8bcd<\/strong><\/td>\n<td>xn--80ak6aa92e.com<\/td>\n<td>\u64cd\u4f5c\u57df\u7684 Punycode \u8868\u793a\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u7684\u4f7f\u7528\u65b9\u6cd5\u3001\u4f7f\u7528\u8fc7\u7a0b\u4e2d\u9047\u5230\u7684\u95ee\u9898\u4ee5\u53ca\u89e3\u51b3\u65b9\u6848<\/h2>\n<p>\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u7ed9\u4e92\u8054\u7f51\u7528\u6237\u3001\u4f01\u4e1a\u548c\u7f51\u7edc\u5b89\u5168\u4e13\u5bb6\u5e26\u6765\u4e86\u91cd\u5927\u6311\u6218\u3002\u653b\u51fb\u8005\u4f7f\u7528\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u7684\u4e00\u4e9b\u65b9\u5f0f\u5305\u62ec\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u7f51\u7edc\u9493\u9c7c<\/strong>\uff1a\u653b\u51fb\u8005\u6a21\u4eff\u5408\u6cd5\u7f51\u7ad9\u7a83\u53d6\u767b\u5f55\u51ed\u636e\u3001\u4fe1\u7528\u5361\u8be6\u7ec6\u4fe1\u606f\u7b49\u654f\u611f\u4fe1\u606f\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6076\u610f\u8f6f\u4ef6\u5206\u5e03<\/strong>\uff1a\u6b3a\u9a97\u6027\u6d88\u606f\u6216\u7f51\u7ad9\u7528\u4e8e\u5411\u6beb\u65e0\u6212\u5fc3\u7684\u7528\u6237\u5206\u53d1\u6076\u610f\u8f6f\u4ef6\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u793e\u4f1a\u5de5\u7a0b\u5b66<\/strong>\uff1a\u653b\u51fb\u8005\u53d1\u9001\u770b\u4f3c\u6765\u81ea\u53ef\u4fe1\u6765\u6e90\u7684\u7535\u5b50\u90ae\u4ef6\u6216\u6d88\u606f\u6765\u64cd\u7eb5\u7528\u6237\u91c7\u53d6\u67d0\u4e9b\u64cd\u4f5c\u3002<\/p>\n<\/li>\n<\/ol>\n<h3>\u95ee\u9898\u53ca\u89e3\u51b3\u65b9\u6848\uff1a<\/h3>\n<ul>\n<li>\n<p><strong>\u7f3a\u4e4f Unicode \u610f\u8bc6<\/strong>\uff1a\u8bb8\u591a\u7528\u6237\u4e0d\u77e5\u9053\u89c6\u89c9\u4e0a\u76f8\u4f3c\u7684\u5b57\u7b26\u7684\u5b58\u5728\uff0c\u4f7f\u4ed6\u4eec\u5bb9\u6613\u53d7\u5230\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6d4f\u89c8\u5668\u548c\u8f6f\u4ef6\u6f0f\u6d1e<\/strong>\uff1a\u67d0\u4e9b\u6d4f\u89c8\u5668\u548c\u5e94\u7528\u7a0b\u5e8f\u53ef\u80fd\u65e0\u6cd5\u6b63\u786e\u5448\u73b0 Unicode \u5b57\u7b26\uff0c\u4ece\u800c\u5bfc\u81f4\u4e0d\u540c\u5e73\u53f0\u4e4b\u95f4\u7684\u4e0d\u4e00\u81f4\u3002<\/p>\n<\/li>\n<\/ul>\n<p>\u4e3a\u4e86\u5e94\u5bf9\u8fd9\u4e9b\u6311\u6218\uff0c\u6f5c\u5728\u7684\u89e3\u51b3\u65b9\u6848\u5305\u62ec\uff1a<\/p>\n<ul>\n<li>\n<p><strong>\u7edf\u4e00\u6559\u80b2<\/strong>\uff1a\u63d0\u9ad8\u5bf9\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u548c Unicode \u5b57\u7b26\u53d8\u4f53\u7684\u8ba4\u8bc6\u53ef\u4ee5\u5e2e\u52a9\u7528\u6237\u8bc6\u522b\u53ef\u7591\u57df\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6d4f\u89c8\u5668\u548c\u8f6f\u4ef6\u6539\u8fdb<\/strong>\uff1a\u5f00\u53d1\u4eba\u5458\u53ef\u4ee5\u589e\u5f3a\u8f6f\u4ef6\u4ee5\u6e05\u6670\u5730\u663e\u793a\u89c6\u89c9\u4e0a\u76f8\u4f3c\u7684\u5b57\u7b26\u6216\u8b66\u544a\u7528\u6237\u6709\u5173\u6b3a\u9a97\u6027\u57df\u7684\u4fe1\u606f\u3002<\/p>\n<\/li>\n<\/ul>\n<h2>\u4e3b\u8981\u7279\u70b9\u53ca\u4e0e\u540c\u7c7b\u672f\u8bed\u7684\u5176\u4ed6\u6bd4\u8f83<\/h2>\n<p>\u4ee5\u4e0b\u662f\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u548c\u7c7b\u4f3c\u672f\u8bed\u4e4b\u95f4\u7684\u6bd4\u8f83\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th>\u5b66\u671f<\/th>\n<th>\u89e3\u91ca<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb<\/strong><\/td>\n<td>\u6b3a\u9a97\u6027\u5730\u4f7f\u7528\u89c6\u89c9\u4e0a\u76f8\u4f3c\u7684\u5b57\u7b26\u3002<\/td>\n<\/tr>\n<tr>\n<td><strong>\u7f51\u7edc\u9493\u9c7c<\/strong><\/td>\n<td>\u8bd5\u56fe\u901a\u8fc7\u6b3a\u8bc8\u624b\u6bb5\u8bf1\u9a97\u7528\u6237\u6cc4\u9732\u4fe1\u606f\u6216\u6267\u884c\u64cd\u4f5c\u3002<\/td>\n<\/tr>\n<tr>\n<td><strong>\u6b3a\u9a97<\/strong><\/td>\n<td>\u5192\u5145\u53ef\u4fe1\u5b9e\u4f53\u4ee5\u83b7\u53d6\u4f18\u52bf\u6216\u6b3a\u9a97\u7528\u6237\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u4e0e\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u76f8\u5173\u7684\u672a\u6765\u524d\u666f\u548c\u6280\u672f<\/h2>\n<p>\u968f\u7740\u6280\u672f\u7684\u8fdb\u6b65\uff0c\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u53ef\u80fd\u53d8\u5f97\u66f4\u52a0\u590d\u6742\u4e14\u96be\u4ee5\u68c0\u6d4b\u3002\u4e00\u4e9b\u672a\u6765\u7684\u89c2\u70b9\u548c\u6280\u672f\u5305\u62ec\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u5148\u8fdb\u7684\u89c6\u89c9\u68c0\u6d4b<\/strong>\uff1a\u53ef\u4ee5\u5f00\u53d1\u4eba\u5de5\u667a\u80fd\u548c\u673a\u5668\u5b66\u4e60\u7b97\u6cd5\u6765\u66f4\u6709\u6548\u5730\u8bc6\u522b\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u3002<\/p>\n<\/li>\n<li>\n<p><strong>DNS \u5b89\u5168\u589e\u5f3a<\/strong>\uff1aDNS \u5b89\u5168\u6027\u7684\u6539\u8fdb\u6709\u52a9\u4e8e\u9632\u6b62\u6b3a\u9a97\u6027\u57df\u540d\u6ce8\u518c\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u66f4\u4e25\u683c\u7684\u57df\u540d\u6ce8\u518c\u89c4\u5219<\/strong>\uff1a\u6ce8\u518c\u7ba1\u7406\u673a\u6784\u53ef\u80fd\u4f1a\u5b9e\u65bd\u66f4\u4e25\u683c\u7684\u89c4\u5219\u6765\u9632\u6b62\u6ce8\u518c\u6b3a\u9a97\u6027\u57df\u540d\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u5982\u4f55\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6216\u5982\u4f55\u5c06\u4ee3\u7406\u670d\u52a1\u5668\u4e0e\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u5173\u8054\u8d77\u6765<\/h2>\n<p>\u4ee3\u7406\u670d\u52a1\u5668\u65e2\u53ef\u4ee5\u5e2e\u52a9\u6267\u884c\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\uff0c\u53c8\u53ef\u4ee5\u63d0\u4f9b\u9488\u5bf9\u8fd9\u4e9b\u653b\u51fb\u7684\u4e00\u5c42\u4fdd\u62a4\uff1a<\/p>\n<ul>\n<li>\n<p><strong>\u653b\u51fb\u8005\u7684\u533f\u540d\u6027<\/strong>\uff1a\u653b\u51fb\u8005\u53ef\u4ee5\u5728\u53d1\u8d77\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u65f6\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6765\u9690\u85cf\u5176\u771f\u5b9eIP\u5730\u5740\uff0c\u4ece\u800c\u4f7f\u8ffd\u8e2a\u53d8\u5f97\u66f4\u52a0\u56f0\u96be\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8fc7\u6ee4\u548c\u68c0\u67e5<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u914d\u5907\u5b89\u5168\u529f\u80fd\uff0c\u5728\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u5230\u8fbe\u7528\u6237\u4e4b\u524d\u68c0\u6d4b\u5e76\u963b\u6b62\u5b83\u4eec\u3002<\/p>\n<\/li>\n<\/ul>\n<h2>\u76f8\u5173\u94fe\u63a5<\/h2>\n<p>\u6709\u5173\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb\u548c\u7f51\u7edc\u5b89\u5168\u6700\u4f73\u5b9e\u8df5\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u60a8\u53ef\u4ee5\u53c2\u8003\u4ee5\u4e0b\u8d44\u6e90\uff1a<\/p>\n<ol>\n<li><a href=\"https:\/\/en.wikipedia.org\/wiki\/IDN_homograph_attack\" target=\"_new\" rel=\"noopener nofollow\">\u540c\u5f62\u5f02\u4e49\u8bcd\u653b\u51fb - \u7ef4\u57fa\u767e\u79d1<\/a><\/li>\n<li><a href=\"https:\/\/home.unicode.org\/\" target=\"_new\" rel=\"noopener nofollow\">\u7edf\u4e00\u7801\u8054\u76df<\/a><\/li>\n<li><a href=\"https:\/\/www.cisa.gov\/cybersecurity\" target=\"_new\" rel=\"noopener nofollow\">\u7f51\u7edc\u5b89\u5168\u548c\u57fa\u7840\u8bbe\u65bd\u5b89\u5168\u5c40 (CISA)<\/a><\/li>\n<\/ol>","protected":false},"featured_media":477461,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477460","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Homograph Attack: Deceptive Characters Unveiled<\/mark>","faq_items":[{"question":"What is a Homograph attack?","answer":"<p>A Homograph attack, also known as a Homoglyph attack, is a deceptive cyber attack where malicious actors use visually similar characters from different scripts or alphabets to deceive users. They create fraudulent domains and messages that appear identical to legitimate ones, leading to phishing, identity theft, and malware distribution.<\/p>"},{"question":"How did the Homograph attack originate?","answer":"<p>The concept of the Homograph attack was first introduced in 2001 by Evgeniy Gabrilovich and Alex Gontmakher in their research paper titled \"The Homograph Attack.\" They demonstrated how attackers could exploit internationalized domain names (IDNs) using visually similar characters.<\/p>"},{"question":"How does the Homograph attack work?","answer":"<p>The attack involves character mapping, where attackers identify similar-looking characters from different scripts. They then register deceptive domains and use them to send fraudulent emails or set up fake websites that trick users into believing they are legitimate.<\/p>"},{"question":"What are the key features of a Homograph attack?","answer":"<p>The Homograph attack is stealthy, cross-platform, language-independent, and versatile. It preys on human visual perception, affects users on various platforms, can target any language, and is used for phishing, malware distribution, and social engineering.<\/p>"},{"question":"What are the types of Homograph attacks?","answer":"<p>Homograph attacks can be categorized into IDN Homograph, Script Homograph, and Punycode Homograph attacks. Each type exploits different visual similarities between characters.<\/p>"},{"question":"How do attackers use Homograph attacks?","answer":"<p>Attackers use Homograph attacks for phishing, stealing sensitive information, distributing malware, and engaging in social engineering tactics.<\/p>"},{"question":"What are the problems and solutions related to Homograph attacks?","answer":"<p>Users' lack of Unicode awareness and software vulnerabilities contribute to the success of Homograph attacks. Solutions involve educating users about Unicode characters and enhancing software to detect and warn about deceptive domains.<\/p>"},{"question":"How does the future look for Homograph attacks?","answer":"<p>As technology advances, Homograph attacks may become more sophisticated. Future perspectives include AI-based visual detection, improved DNS security, and stricter domain registration rules.<\/p>"},{"question":"How can proxy servers help with Homograph attacks?","answer":"<p>Proxy servers can both aid attackers in executing Homograph attacks by providing anonymity, and protect users by filtering and blocking malicious content before it reaches them.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/477460","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/477460\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media\/477461"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media?parent=477460"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}