个人信息盗窃灰色产业链的技术手段与法律规制

Technical Path and Legal Responsibility of Gray Industrial Chain about Personal Information Theft Behaviors

大数据时代个人信息由于蕴含巨大的商业价值近年来频遭犯罪分子大规模非法窃取,从而引发社会对于个人信息安全的普遍关注。个人信息盗窃手段花样繁多,例如恶意捆绑、WIFI钓鱼、路由器入侵、远程控制后门技术、木马病毒等黑客攻击技术,以及各类社会工程学攻击技术。个人信息盗窃已经形成一条庞大、复杂的个人信息盗窃灰色产业链,造成了严重的社会影响。应当从个人信息盗窃产业链入手,明确产业链中不同的主体类型、行为方式,以现行法律法规为基础,对违法行为实施有效规制。

Because of huge commercial value,the personal information has been frequently and illegally stolen in recent years,causing widespread concern about the security of personal information. There are many means about theft of personal information,for example,malicious bundle,WIFI fishing,routers invasion,backdoor remote control technology,Trojan horses and other hacking techniques and a variety of social engineering attack techniques. Personal information theft has become a huge,complicated gray industrial chain. We should analyze the internal formal structure,and implement effective regulation to prohibit illegal acts based on existing laws and regulations.