勒索软件:过去、现在和未来

Ransom Ware:Past, Present and Future

近几年来,勒索软件增长迅猛,给全球的网络安全带来巨大威胁。从1989年第一个勒索软件问世至今,其勒索目标越来越多样、勒索产业链逐渐形成、勒索手段逐步走向高端、虚拟货币支付越来越普遍且影响范围不断扩大。勒索软件得以爆发式增长与其高收益、低成本的特点,受害人防范意识和防御能力的缺乏以及相关监管和技术防控不足有关。目前勒索软件呈现出数量持续增长且变种增多、攻击目标针对性强、危害后果日益严重的发展趋势,为此我国应完善包括国家层面、社会机构层面和个人层面的综合网络安全防护体系,做好勒索软件的预警、拦截、预防、治理工作,以全面、系统地保障网络安全。

In recent years, the amount of ransom ware has grown rapidly, leading to an increasing number of severe technical extortion events. Since the advent of the first ransom ware in 1989, the victims have been more and more diversified, the industry chain has gradually formed, the means of extortion has been more sophisticated, the virtual currency payment has been becoming more and more common and the influence has expanded globally, increasingly causing harmful consequences. The explosive growth of ransom ware is related to its feature of high profit and low cost, the lack of awareness and defense capability of victims, and the lack of relevant supervision and technical prevention and control. In the future, similar technical extortion events are expected to continue to grow, with more variants, more targeted victims and more severe consequences. So our country should improve the comprehensive cyber security prevention system including national level, institution level and individual level, thereby achieving the warning, interception, prevention and treatment work of ransom ware so that we can ensure the cyber security in a comprehensive way.