Tìm hiểu và khai thác các công cụ tấn công mạng

TRƯỜNG ĐẠI HỌC BÁCH KHOA
KHOA CÔNG NGHỆ THÔNG TIN
BỘ MÔN MẠNG VÀ TRUYỀN THÔNG
 


t i:Đề à

Cán bộ hướng dẫn  
Sinh viên  
 
Lớp  !"#

  !"#
$%&%&


 !"#$%
&'() *+,-$%$.) ./01$%$.234+"-!5'+67-!8-!
59-! :
*;9-!<-'-!;=+>-!"#$%?
--.;;3.?
$%.@$%%"/"-$" -!AB
$%.B
CD! 4>-3E<-'-!B
%6F-!2*22G-!8-!H
(59"ID@ID2""J-!AK
+ 4L-'-!IDK
CD! 4>-3E!(59"ID
%G-!8-!<-'-!!(59"ID
;MN3 O-

I 3"J.+0.
DO-;-
**#<-'-!I"&
%*"9;=+>-P-!9-"QR'-!S2TUV1
-! 4>-59-!&
C%*"9"Q-/W'-!-< ,-
%*"9"Q-/W2X-#-!
&*2G-!8-!
&Y3"";-!:
&#-Z-! 4S-59V[:
&<-'-!315+1-C(-!B
D! 4>-3E<-'-!B
C*2G-!8-!B
$\]DM\^_`D\`MabH
+S-R'-!Tc.+2=-<-'-!$%2"/"--!+" -! K
I.5"6F-!+,-c.+2K
MN) (&
+6RN-1-<-'-!&
C RN-1-<-'-!&
+S-R'-!Tc.+20123 !-;-/d/2""J=-<-'-!ID
/2""J-!
I.5"6F-!+,-
MN) (
&*-!*
>a 8D5eD! 4f--ghK:
 
# &'()*+,-
## ./0$&
@.;.//"-+"3A31RS i0O3PjiQ+6-!"5g
NC"Q5g-k5*NC+"-!D-14i6l;m-!iS-O-;-

*NC!n2"*!k-32kSiN-in-!iP
giC"!U5:C4.0167-!i6l0N;6;9-!.oj0*
NCV/"ji-14i6l0N;6;9-!/8.oj0P;TKKKKKYYYY31
5gil23Si(5C("iV5gNC31; 4-<j*
-1/(-o <X-2(!iik3>-$pVNC2X-#-!01i-;-V
-1  /(-  o <  /q  i6l  o*  i-  Cr  &  C4.  iX  p\  @p+!-s"-334  -) .
\; J.+A
i6l2t-315&3"9
u-/it4313"9i;m-!iSi9;-"5gNC; 4-<
u 3/it4313"9ii9;-"5g-k5*NC+"-!D
i6l;m-!+"-!+67-!l25g#-!;T-!kS5 8-+"iv05g-k5*
NCwx-!*!Wi5gC(--ki5 3/y<(*NC+"-!
-k5iL -O-01oW3P!k-+"-!R*NCG-39+"-!59-!/qCz) 
"#\%{-!|+l+ 4L-5 3/M5g!k-\%5 3/i6l+ 4L-
) 5gDji5 3/6F-!#-!0i\%/q31KKK.ooooooo
uw+";/i-14i9;-"<(*NC+"-!m-!5gDL
ik{-!k-!}31-N 5g!k-ki31YYYYYYYYYYYYi6l!Wi
,<(*NC+"-!DiL 2( -O-01oW3P
#1 234567
|NC+"-!8-!59-!Vn-!kP-<igi31
.;.//"-+"3@A015gi\-.+ %+"""3@\%A31
iV+;59-!!~-01"C>-+"-!NCj-k31; 4-<01R'-!L4iv
\%kS4iv."-!67/W;T-!m401"5'+67-!59-!$%315g
+"-!-•-!!"#V\%j#-Z-!V-k;m-!iSi-05g"/+"-!5g
2t-i"9-59-!Cx-!*2t-!(i\%+i$%=-2t-
!(i'-!) 5gN-+,-C+";/!k-iN-<(*"/+"-!59-!j
!k-ik#i\%V"/X-!"N2*"/+"-!59-!iL -O-i6l
!k-ik01; 4-<"/-1"ki\%+m-!0i\%+"-!!k-5
+(3739jG-39/q=ig-!;+"2!k-$%315g!"#N/#iF-!(-j-k
iF- X-k3"95.//!.FC(-/ 

u-$%$.) ./5*4P-/qz"1-59-!€ki\%-14•€
u-$%$.2345*4P-w+(375*4P-€'k\%ikjiV
'31€
>a 8D5eD! 4f--ghK:
:  !"#
u-$.0.+/.$%$.) ./5*4P-/qz"1-59-!€ki
-14•€
u-$.0.+/.$%$.2345*4P-w+(375*4P-€'kikji
\%V'31€
"/!W5g$%$.) ./01-O-i6l5g$%$.234‚5g"/wk=
+"-!59-! RN-+,--14"1-<j"/CN"/w/qk-6N
-1"N2."j"//q36 39/=S CNik3>-Cg-V5,-!ƒ31$%C3.
$%C3.!n2"/R'-!2(=-$%$.) ./iN-"/w5g3X--•
'() *+,-$%$.) ./01$%$.234+"-!D
+"-!D--4k"/"/j"/wj"/j"/I
u"/5 8-!"N20"/jiX >-/qC+";/!k-$%$.) /.
u"/-O-<4in-!\%V5,-3L-+(37V5,-'-!) !k-
$%$.234j*"/G-39/q;+"2!k$%$.) ./
u"/-O-i6liV"/01!-01"$%C3.
$%&!'()(*+*,'()(* "!/0'
#8 $9:;<676=:=>?676=@A;
;BC4
"9ig-!V$%+"-!5g5'+67-!2#92F-ik318-!59-!
!~-0- '-!) 5g$" .+
"/   g59-!5 8-!W!k - iN-"/ w  g 59-!w I" *
C+";/R'-!S+ 4L-) $" .+->-Rik"//qo.5$" .+-65g
X -845g+ -!!-@! AiS+ 4L-;•3 
+6ikj5*4/qCNi6li\%V$" .+@i.[4A01CN
i6l+x-!iS+ 4L-!k-w2(i) <(*'-!--60O4/qi6l
#+"-!5gC(-!!ƒ31C(-!i- 4N-@+" -!C3.Aw(-!i- 4N-."F

N-14i6l36 !•+"-!5|5*4w(-!i- 4N-#'-!-0L*.[4
iS+ 4O201"5g8-!59-!-1"ik^P;T+"-!+67-!l2+>-+"-!C(-!/q
>a 8D5eD! 4f--ghK:
 ?
++x-!iSiDw2() 2"+„V$" .+w(-!i- 4N-/qk#
i\%V2"+„a *+,-+ 4L-;•3 ."‚-!C6/ 
u"/!W5g$%+.) ./@C+";/AiS,5iV2"+„
u$" .++(37j -!<2""/iV2"+„
u"/+ 4L-!k-iN-2"+„V$" .+
u$" .+-O-i6l!k-‚"/j 4S-!k-+2"+„V$" .++"-!
!k-k#i\%V"/w$" .+/q!W$%+.) ./iS,5i
V"/w
u"/w/q+(37"$" .+CNiV5,- R-O-i6li
V"/wj$" .+!W!k-ViN-w
+>-=N-!"1;9-!C(-!i- 4N--14-!67G-;m-!26F-!2*2
2+"o4$%j+"-!ikk5gNCi(5-O--50T2t-!(i"<(
*NCR*."ik*5*4+95R'-!X-!•C(-!i- 4N--•$" .+
/qk-50T=-j+(37<(*$%+.) ./V<(*5*4
#D &EEF;567
"#$%31+<X-N01) -+ƒ-!+"-!8-!59-!j 4->-!"
#-14R'-!kP--Z-!o*=-1"(M5g"/-O-i6l!k-$%
$.234j-k"1-"1--6r-!015Q->-/W;T-!'-!-ikiS/W;T-!/ -14
51R'-!X-CN'-!-ikk2(+(37‚5g"/515,-5"-!5 8-4
R'-!$%R'-!kFN-1"iSRS5+0-1401+>-=N5g"/kS
<2-O-!k$%$.23451+6ikR'-!X-2(!W!k-$%$.) ./l
;T-!iL -14jR.+kS+S-R*26F-!#<-'-!-6-\-.
;;3.jI 3"J.+0.jY3"";-!
#D# $=$EEA=
(/WR.+5 8-.";…"/!r'-!-!,""/wX >-jR.+
/q!r!k$%$.234iN-"/0-g; -!31iVR.+01i

\%V"/w
N2."jR.+/q!W!k$%$.234"/w0-g; -!31V5*4
R.+01\%V"/D60O4j("/01"/wiL N2-O-!k$%
$.234ik0136 01"+"-!$%C3.V5,-N-3n-14jR"/5 8-!W
'-!-iN-"/wj-k3L-+01"$%C3.<4i†k/‡-'-!-0Li
V"/w->-/q3<4'-!-ik+/W;T-!j-6-!=<iik
31VR.+U-!75*4P-VR.+/q5r#-Z-!!ƒ31\%Y"+[;-!
!n2 4S-(-g; -!51"/!W) "/w"/01"/w!"N2C,-
67-!01R'-!k(5!*C) 5*4+ -!!-315*4VR.++"-!+67-!
l2R*jR.+/q-!.3ˆ-'-!-‚5*4C9-iN-.[4D60O45ƒ1-
ig-!+\-.+ VC9-iL CR.+!39Nj;‰-iN-05<5**'-!-
-94(5g/8;9-!<-'-!/W;T-!RŠ O--.;;3.$%.j
ID2""J-!j‹R-!%/.//"-
>a 8D5eD! 4f--ghK:
B  !"#
#D## 67&=G677>6H
a. ARP Cache:
$%kS"-65gC(-!#5gO26F-!#-!!•*2X-#-!01*
i\%|NC+>-59-!iL k.+>-!S) *+,-2t-!(i
;f-+--kS/W;T-!**/ iS36 !•* +4+"-!.
uW;T-!$%.}-|i\%01i6F-!#-!i6l>5
5g*V'-!01"C(-!.01i6l; 4+,3t ;1
uW;T-!$%.ig-!\%012X-#-!i6l36 +"-!.Cx-!
2X-5L5*i-14i6l36 !•95701/ iki6l!ŒCz
$%.CN-5g) *+,-kS!t43†-!2P0L5Q7!-1-5g) *
+,-/W;T-!7!-5g* ) (Q;m0O4-kkSC~!Q25g/80<-iL
-6X-2(; 4+,C(-!.j>501"ik{-!kS* +4.C•{Ž
."7!-j0,0O4X-2(=N 3=i80* +4./ 5g
) †-!7!--1"ik
b. Nguyên l t!n công:

%6F-!2*2<-'-!-14"2ˆ2R•<-'-!@-x5+>-m-!5g/ C 0
*-9--t-V-kAkS-!.+g5<(*36 36l-!59-!!•*5*4P-
-9--t-t4315g+"-!-•-!,-#<-'-!iF-!(--<-6-! ) (
^!(59"C(-!$%P-313l;T-!C(-P-R'-!-"1-V!"#
$%M'-!!8-!-6*!"#R*j•-!9--6ID@kSi6l< ,-
iS<2-O-*O2-Oig-!R*-"1-Aj*NC/W;T-!!"#2t-
!(i@$%A/q<2-O-O2-OC<#3n-1"L -14k-!}+x-!C<#
NC-1"{-!kS!W!k$%+.234iN-5g5*4P-R*015*4P--14/q
O2-O01"C(-!$%.V-k-!4!*+5-14^!W5g!k$%
+.234RR'-!k+.) ./-1"i6l9"+i6l!ƒ310!W$%•0 0FŽM*
$%+.2340 0F-14iN-i6l*5*4P-i†!W+.) ./j5*4P-+.) ./-14/q
-!}+x-!ikP-31i86l-!5,-i-!,5RN5iS+ 4L-'-!j 4->-=
<ƒ39i-!+ 4L-'-!05gR•<-'-!
>a 8D5eD! 4f--ghK:
 H
$%1234356/'()*7
S=-26F-!2*2<-'-!-14kS/W;T-!5g/8'-!T-6
-eC.3j‘+./+R
c. Phương pháp phòng chống:
%G-!8-!<-'-!$%.!Q25g/8C<3l0,) *+,-$%o(4++"-!
NigCR!+" -;->-k+<PR(-Z-!kSiL RS-+=N2i6ln-!
M'-!k5g!(2*2TS-1"iS2G-!V•  -6-!m4,- 8-!k
S/W;T-!5g/826F-!2*2/ 
• $IJ67=
g*kSC("08-!390<-iLR'-!-"1-08-k+"-!*$%
+.) ./01$%+.23431=-5g) *+,-Rˆ5ig-!F-t4315gm4ƒ-
0,*5*4P-‘-;"[/"2ˆ2C9-kSCv/ -!* +4}-01"$%.
kSo.5$%.V5*4P-‘-;"[/Cx-!*5r5;01i*-01"ik
3-+2h
kS>5* +401";-/*-14Cx-!*/W;T-!3-+2h/’\%

II$c“’II$c“
>a 8D5eD! 4f--ghK:
K  !"#
+"-!*+67-!l2j< ,-59-!Pk/=4ivjkS9"5g;-/*
* +4$%}-01/W;T-!n-!"*3 '-!) 5gRC(-=ig-!
L -14/qC("i(5i6l*NC/q3 '-;=01"$%.-gCgVn-!
40,*$%+.) ./01$%+.234
• K;ABABL67=?3BM;<NI58
gC-2*22G-!8-!390!(59"$%.3126F-!2*2RS5+
36 36l-!59-!V*NCkS=-iL -1405g018-!
2*-ot5295@•-!9--6-"+A"Q'-!) *-Pi6lNRN
iQC"5TiP-14@-6o$%AL -14kSR(R) -t5
iN-5gNC-1"ikj 4->--k0‰-R*U-!RL-0106-!5~+"-!0!(
) 4N0"1-Cg2t-i"9-59-!
#D#1 29OGO@PH
a. Truy(n thông DNS:
"#I"5-D5-!4/.5@IDAi6li--!}+"-!$YK&”K&
kSi6lo.5-6315g+"-!-•-!!"#) -+ƒ-!-<i6l/W;T-!+"-!
\-.+ Dk-!~--!ƒ-iS;fS jC<#R-1"i*-5gi[.C•-!9-
-62””[[[!""!3."501"+,-; 4j4> X ID/qi6li6iN-5*4V
IDiS,5+i\%6F-!o#-!0>-5L-510‚-O2*+" .+01*
NCRN-8\-.+ /qR'-!S !""!3."531!,jn-!S *i
•-!9--6?HK&
*4VID3150Cx-!*36 5gF/r;•3 * +4@i6l!ƒ31C(-
!1-! 4>-Ai\%iSC(-iUk>-IDj+ 4L-'-!*C(-!1-! 4>-
ikiN-5*4R*01iN-5*4VIDR*it4/qR'-!i01"! *
RP9-0LRN-+n4O5P*RS 36 36l-!IDR*- j51!
 5g2>-!";IDFC(-
$8%!"9:-;<
ID"9ig-!.",-#+ 40<-01i*2+(@) .+4”+./2"-/.Ag5*4

R*X-2t-!(ID"5gi\%-1"ik/q!Wi5g+ 40<-iN-5*4
VIDj5*4VID-14/q!W'-!-i6l4> X +"-!!ki*2+(V-k
#-!r!kig5*4R*jk!ko <-3n-1431+ 40<-01i*2+(
>a 8D5eD! 4f--ghK:
 
$=%!"9:-;<35:>+"
b. Nguyên l giả mạo DNS:
k-L *iSkS=-0<-iL!(59"IDit4/q,5S RŠ
 O!(59"ID\I
|+ 40<-IDi6l!W) 59-!iL k#5g/8-O-;9-!; 4-<j
5TiPV/8-O-;9-!-1431iS2t-C*+ 40<-01i*2+(n-!L -14
k-!}+x-!-N 5g5*4P-i-!<-'-!Vn-!kSQ-5g+ 40<-
ID-1"iki6l!Wi‚5gNCTSj,<(-•-!!,n-!X-=
-319"5g!k!(59"k#/8-O-;9-!ikiS!k;•3 iki6l<2-O-
Cr5T> 
n-!/q"1-<) *+,--14Cx-!*=-C605g'-!T
iF-!(-X >-jn-!X-!(59"$%.NC5T> iSi- 4N-39
36 36l-!V-k) "/i-!<-'-!V5,-j‚ikkSQ-4> X ID01
!Wi!k;•3 !(59"TiPVRC(--14313‚-!67;m-!+"-!59-!
5T> + 4O201"[.C/.ig40,[.C/.51ƒi-!8!~-!+ 4O2
$?%6/;<356/;<@;
kS/W;T-!'-!Tc.+2iS=-5'2z-!<-'-!!(59"ID
c. Phòng chống t!n công giả mạo DNS:
^2G-!V0<-'-!!(59"IDR*RkRZ-0,kP*;<  iS
-O-CNC<-'-!'-!67-!jR'-!LCNIDV5,-C!(59""
RiL iko(4+MN) (-O-i6l315g+-![.CR*"1-"1-/"0
-•-!!,5"-!il+"-!*<-'-!0ViP3-j+<kS-!67;m-!/q
R'-!LCN+x-!5,-i†C3‚-O2*'-!-) -+ƒ-!V5,-01"5g
[.C/.!(59" it4315g/826F-!2*22G-!V<-'-!!(59"ID
>a 8D5eD! 4f--ghK:

  !"#
•w("0*5*4P-C>-+"-!V59-!*<-'-!!8-!-6+>-67-!
i6l=‚C>-+"-!59-!DN *NC59-!-"1-,/q!(5i6l
R(-Z-!*"/Cz201i6l/W;T-!iSRr94<-'-!!(59"
•M'-!;=01"ID"*8-!C("5O+>-*8-!-"1-01
kig-94(5"jR'-!; 4\-.+ +>--k31*=-8-<iSR'-!
/W;T-!iN-IDDN ;m-!2X-5L5/W;T-!"/-5.iS=-5g/8'-!
0V-k,n-!X-2(i6liL -"2ml2+"-!J3.< ,-NC
•W;T-!\Ig8-!2*-ot5-O2jRi6liQ01+S-R
in-!jkS095Q*,-#!(59"$%.01!(59"ID
•W;T-!IDcIDc315g!(2*24N5"IDj/W;T-!
*C(-!IDk•REiSC("i(5/=l23kVi*2+(+ 40<- 4
IDc0‰-6i6l+S-R(+g-!+†-6-!-ki†i6l<2 O-31•6F-!3
VIDŽ
d. Kết luận:
(59"ID315g,-#<-'-!\R*-! 4S5Ri6li/W;T-!
05TiPZ-~2'-!-W;T-!'-!-!-14-•-!R•<-'-!kSO-
;T-!*RŠ O!(59"iSi*-~2*'-!-) -+ƒ-!V-!67;m-!j4
1iQ53[+.+>-5gvi}CR*j"Q!t4+5g<-'-!‚8;0T
#D1 O=AP=;?=
g g<-'-!‚8;0T@<-'-!I"A4<-'-!‚8;0T
2t-*-@<-'-!II"A31) *+,-315"1-! 4>-V5g5*4P-R'-!S
/W;T-!i6l-x501"-•-!-!67;m-!V-kQ;m26F-!-iSN-1-j
ig-!Fj5T> V<-'-!‚8;0T31R*- j-6-!-k -!-k!U5
k/=28l2j/=8!~-!*EV5g-!674-L -!67iS8-!39\-.+ 
/."Q/.+0.@;0T‘.CA0O-1- ) ("Q+"-!<(j95745g
*R'-!o*i-V295–-'-!‚8;0T-x501"*5T> /.
4/.+0.+> CS -6-!t-1-!jv-!-"*-•P-;T-!01O5PID
+""/.+0.+/
g26F-!#<-'-!2vCN-Rˆ"."/=C†""15*45T> 0*4>

X 3>-39C>--!"1jiN-5#-kR'-!Si*2#-!!"'-!l22*2j"Qi*2
#-!) *O5+"-!iL R- -!j* g<-'-!I"i6lCv/ -!Crˆ2
5*45T> Rrig-!39"Q> TN1-! 4>-V-kiN-5#-kR'-!
 -!<2;0Tj"Q315~-!q-3>-39!•-!67/W;T-!01-9--t-
#D1# QE4
I<  V5g g<-'-!‚8;0T!U5k
• 9-!=O5R*67-!@5rJ3.4+ 4O2‘.C/.A
• M'-!S;m-!5g‘.C/.TS
• M'-!S+ 4O2C<R—‘.C/.-1"
• Z-!36l-!6+*-O-i6l
>a 8D5eD! 4f--ghK:
 &
<-'-!‚8;{-!kS;‰-0<-iL0L-*-59-!V5*4i-!C
<-'-!^P;TCZ-!'-!V+" .+!•\-.+ 01-kSC> TCr<-
'-!j315v-9R'-!5*4P-Ei-<-'-!51G-31"1-S59-!
#D11 &5O
a. Phá hoại dựa trên tính giới hạn hoặc không thể phục hồi của
tài nguyên mạng:
• '-!) RN-8MS <-'-!DJ3"";
l;T-!*#"9ig-!VRN-8%”\%jR.+C~iX ) *+,-N
3O25gRN-8%”\%5T> 5 8-<-'-!51R'-!!W+(!k-Mj
RN-"5T> 3 '-+F01"+9-!*7@il!k-M‚2P4> X N
3O2RN-8A013>-T!W!k-DMiSN3O2RN-8g*R*31!(
59"i\%-! U-V!k-4> X N3O2RN-8D01{-!-6+67-!l2
+>-j5*4P-iP{-!+F01"+9-!*70,*!k-DMR'-!Si
iN-iP;"i\%-! U-31R'-!kOMS <-'-!DJ3"";i6l*
R.+*2;T-!iS<-'-!5g8-!59-!kCZ-!'-!3-F-8-!V
R.+

$A%B<CD.//E

• l;T-!-! U-1-! 4>-VP--9--t-iS<-'-!
uMS <-'-!-;RMS <-'-!-;R{-!6F-!=-6D
J3"";j-6-!R.+/W;T-!P-\%V5T> X-<-'-!iS;m-!315i\%
-! U-+"-!!k-ji–45T> 01"5g0G-!3Q20'O-R8!~-!N3O2RN-8
0P--k
uMS <-'-!I%J3"";R.+!W!k-I%."0i\%-! U-31
v-!3""2CRVP-5T> X-<-'-!"QV5g5*4P-+"-!m-!
59-!^5T> /W;T-!v-!I%."@2"+?AiSN3O20!W01-O-*
!k-."+>-5*4P-@"Q!•5T> 0P--k-N 5T> k< ,-
v-!3""2CRAjRN-"5*4P--14;X-;X-/W;T-!NCZ-!'-!Vn-!j
01(-+r"9ig-!/•1-! 4>-59-!V*5*4P-R*+"-!59-!
>a 8D5eD! 4f--ghK:
  !"#
• W;T-!CZ-!'-!<-'-!RS II"@I/+C .;I 3"J.+0.A
t431*#<-'-!+<-! 4S5R.+ot5-O201"*8-!5*4
P-j1iQ*6F-!+,-iL RS-‚oj01/qRP"9iU-!7*6F-!
+,--1401"m-!5g7iS5iSiU-!3"9<-'-!01"5g5T> ^II"j
*R.+kS 4ig-!1-!+Z5O5P1-!-!1-5*4P-m-!5!
<-'-!m-!5g7iS5@m401"/= –-C+6ikVR.+A01kS
€-!8-€NCZ-!'-!V5T> +"-!-*45~

$F%B;;/<
• W;T-!*-! U-1-! 4>-R*
M•<-'-!3l;T-!*-! U-1-! 4>-51-9--t-X-iN-iS<-'-!
D•-!R•<-'-!kS4iv;•3 01=/"ˆ2;•3 51-9--t-X-3>-
-L 3X-315%C) *(01*) *+,-oW3E;•3 Ci,-+
u<-'-!RS 5 +JRMS <-'-!-14X-5g8-!+<) -+ƒ-!j
ik3159-!R 4Ni9R.+;m-!iV5*4P-X-<-'-!Cx-!*!W
!k-\%."""1-Cg59-!@C+";/A*5*4P-+"-!59-!/qiU-!
3"9!W!k-\%+.234"5*4P-51R.+5 8-<-'-!MN) (315*4

P--14/qR'-!SoW3ER275g36l-!3-'-!-01;‰-C+."5*4

$G%B<!D'
u<-'-!RS .+I+"2+"-!59-! 4S-59!kj;•3 i6l1-
-L !k--zj5|!k-k5g!*+"JJ/.+>-!01kS+ 4L-i."-L
"-i67-!R*- iSiP9iPj-701"!*+"JJ/.V‚-!!k-51
>a 8D5eD! 4f--ghK:
 
;•3 39i6lRNl239-6C-iX l;T-!iL -14jR.+kS9"+-L
!k-k!*+"JJ/.+m-!3Q2- !WiN-5T> 5 8-<-'-!MN) (315*4
P-iPR'-!S/~2oN2i6l-•-!!k--1401;‰-C+."5*40,C€0~
R€R(-Z-!oW3E
b. Phá hoại hoặc chỉnh sửa thông tin c!u hình:
l;T-!0< ,-N -"1--60R'-!o*='-!-+"-!0
!W”-O-C(--O2-O@ 2;.AV+" .+51R•<-'-!/q4iv+=N2
"Q‚o*'-!-) -+ƒ-!-14jRN-"-•-!-!67;m-!l22*2R'-!
S/W;T-!;0T
^P;TR.+kSot5-O201"IDiS4iv'-!-j;‰-iN-) *+,-
C>-;>-5L-@;"5-A/-!i\%VIDC/3O ) (31*4>
X V5*4+95@3 A/q5g>-5L-R*@i†C4ivA40,>-5L-
5"-!5 8-
c. Phá hoại hoặc chỉnh sửa phần cứng:
l;T-!) 4L-9-VP-C(-t-R•<-'-!i80*NC+"-!
8-!59-!iSN2O-2*"9*NC2X-#-!-6+" .+j/[˜
#D18 &@R
O ) (51I"!t4+R'-!> 8--L L-C9j01'-!/#51
G-5<+<-L 7!-iSR~2T^,0O4j†4/W;T-!*C-2*2
/ iS2G-!8-!I"
• ',-8-!X-2(i6lot4;=-!l23Ej+*-2T g3‰-- ) *
5#wrR5gCg2O-!Q2/=8/q315(-6r-!"1-Cg8-!

• N3O25OR– 59-@/+"-!2//["+;AiSC("0*NC59-!01*
-! U-1-! 4>-) -+ƒ-!R*
• N3O2*5#o*=i80-!67/W;T-!{-!-6*-! U--+>-
59-!QCj->-N3O2Nigo*=RO2-O*'-!-i-
 4N-!•*+" .+
• „t4;=-!8-!3ƒ'-!-+>-+" .+jJ+.[33˜018-!C("0
8-!39DJ3"";
• RP"9*;0TX-Nj9570' "*01;‚-!*;0T
6k4> X "QR'-!/W;T-!
• „t4;=-!8-!i-5#j!9-"-!67/W;T-!j-x55TiP-!Z-
-!‚+67-!l2-!67/W;T-!*E5 8-3l;T-!*1-! 4>-+>-/.+0.+
iS<-'-!P-/.+0.+"Q59-!01/.+0.+R*
• >-TO2-Oj-!>-# jRS5+iS2*-*3|v-!C("5O01k
C-2*2R~2TR27
• W;T-!*C-2*2RS5+"9ig-!V8-!5g*3>-TiS
2*--!4-•-!1-ig-!C<C,-67-!
• „t4;=-!01+S-R8-!;=2G-!
>a 8D5eD! 4f--ghK:
:  !"#
#D8 $&SAE
*<-'-!-14{-!;m-!RŠ O$%%"/"--!51i86l-!-~5iN-31
[R.+/q!W-•-!!k$%$.234!(9"0/836l-!Rv-!3U-x5315
[oW3ER'-!R201+r->-) *(Mikj[/qR'-!iV/#S-
C(-<4.+V5,--•51C+";/!k-+"1-Cg*2"+V5,-
R.+;f;1-!C~i6l"1-Cg'-!-+"-!59-!
#D8# &5TKNU
^i6NC 4S-5901"5gDk-L 5TiP-6-!5TiP
) -+"-!-<31iS5gD+1--L 0m-!R*- -x5!(5S
0o -!ig!k-Rk) *-L NCi6l-801"m-!5g5'+67-!
+ 4L-;‰-*0m-!i6l2t--14i6l!ƒ31*"33/"-;"5-#-Z-!

P-V/[310O- 4S-*J+5.32) 39!•*"33/"-;"5--14
*"33/"-;"5--14G-i6l!ƒ31*i"9-D@D/.!5 A
SkS0O- 4S-P-o*i6l!k-iN-iPj/[X-2(k5g/F
iU*-o9!•iV*NC0O3P!~-6F-!#-!0v-!-1"V-k
FiU-14i6l36 39+"-!/[01i6l!ƒ31C(-!@"- ;;+.//
.5"+4A
a *+,-0O- 4S-!k-) /[kSi6l5'(-6/ 
™DN i-! U-V!k-6k+"-!C(-!y/[/qO2-O
0v-!6F-!#-!DN i-! U-i†U-9+"-!C(-!-6-!05g
v-!R*j/[/qC*"3|•J322-!Ž01 š!k-
™DN iiPV!k-31i5 3/"QiC+";/"Q31i
 -/-6-!*-o9Vi-14R'-!U-9+"-!C(-!+6ik,
!k-/qi6l!W+<(*v-!V/[+‚v-!51-k-O-i6l!k-
™DN iiPV!k-31i -/01*-o9ViU-9+"-!
C(-!iU-!7v-!51-k-O-i6l!k-R*0v-!51!k-X-i6l
 4S-i,-k/q!W!k-iN-P-o*v-!k+"-!C(-!
™*+67-!l2G-39j!k-/qC š
>a 8D5eD! 4f--ghK:
 ?
$H%1IJ"K<L7
+"-!0P;T+>-jR"/!WC(--iN-"/wI"/[6ki
Vw+"-!C(-!V5,-->-/[/q!WC+";/+5ƒv-!G-
39iU-!7/q36 39iV01"C(-! R"/w-O-i6l
C(--‚yw!W39-"Mikj/[i†kiV->-/q!W -/
2"+iU-!7O2-OiVw01"C(-!
*"*i80C(-!V5g/[›œ
So.5-g; -!C(-!V/[j;m-!3-
UV>UEE;=>>WXA=EYEE;=>>WEE;=>>Z
=;P=@=E[Z?A?AWE\
--14/q3R><(*i51/[ƒi6lDN 5 8-

TSF-jkS,5i6l0+PV"/i†!~-01"/[Cx-!*
+iV-k"QkS,5i6l-•-!ii†i6lƒ‚
5g!";--1"ik
„.5RP6C(-!V/[j;m-!3-
UV>UEE;=>>WXA=
„"***-o9+"-!C(-!j;m-!3-
UVA=;E;=>>WXA=EYEE;=>>WEE;=>>Z
-.+J.42.5";”- 5•03-03-u;œ
>a 8D5eD! 4f--ghK:
B  !"#
#D81 A;X9&$
a. Nguyên l t!n công:
MS <-'-!315+1-C(-!;=01"iS54N VNC 4S-59
C(-!#i6l5g/8• 9-**-o9@0P;T-6/[34/:KKK
kS#i6l8iBKKK*-o9A01**-o9-14R'-!2(U-95†5†
+"-!C(-!›œ 5gR"(-!7!--1"ikj67-!31&KK/y-N i
-14R'-!i6l;m-!+"-!0+"iv'-!-,-k/qC!ŒCzRzC(-!M
C(-!i6liL-iX4j<('-!-iN-/qi6l!WiN-<(*v-!V-k
+‚v-!-k-O-i6ln-14#-Z-!V/[R'-!R*!,#-Z-!V
5g C
+"-!,-;6j"/VR•<-'-!!Wi3>-T1-!3"9*C(--ki
-! U-31i!(59"@"/„01"/A[/qO2-OiV
*"/!(59"-1401"C(-!MN) (31R"/!W-iN-""/wyi
VwR'-!U-9+"-!C(-!->-!k-i6l/[!W+*v-!V-k01
C(--!W+>-!"w{-!/qi6l 4S-iN-
$% .M-361' 7
b. Cách phòng chống:
D! 4>-3P -!V*26F-!2*22G-!8-!31R'-!iS*!k-ki
39i) /[%6F-!2*22G-!8-! ) (-<31< ,-2"+
/. +4+>-/[t4315giQ+6-!< ,-"2ˆ2iL RS-0+ 4O2

01"v-!/['-!) iVNC!~-01"
M/[-O-i6l5g!k- 4S-iN-j-k/qRS5+i-! U-
V!k-0;-/**ii†i6l< ,-+6ikDN i-14
R*- , —."/=< ,-V-!67) (-+51/[/qoW3P!k-iN-0
*5#igR*- 
*3-< ,-2"+/. +4
>a 8D5eD! 4f--ghK:
 H
™[@"-J!uJAž/[2"+5";..//
™[@"-J!uJAž/[2"+2"+u/. +4"2ˆ2v-!i6l"9ig-!+"-!
Nig2"+u/. +4
™[@"-J!uJAž/[2"+2"+u/. +45o5 503 .@ —ƒ-At 3-
"2ˆ2< ,-/8i8i51v-!kSƒ=ig-!01"2ˆ2*
NC-14+ 4L-;•3 ) Qi-,v-!"2ˆ25gi@5g
NCAi6l!*-01"01/8ikS-x5+"-!R"(-!‚iN-K
™[@"-J!uJAž/[2"+2"+u/. +45u;;+.//5d;;+.//@ —ƒ-A
C>-9-*< ,-"2ˆ2/[ƒ=ig-!iykS!*-}-5g
/8ikS+ 4O201"5g2"+DN /836l-!i!*-}-51-z
F-/8i/[kSƒ=ig-!,/8iG-39/qi6lƒ
=ig-!
™  [@"-J!uJAž  /[2"+  2"+u/. +4  0"3"-  Ÿ2+".  •  +./+  •
/ ;"[- @ —ƒ-At431*C-2*251-!67) (-+kSN-1-R
5g!k-iN-R'-!2ml204> X V2"+u/. +4@Rk-L F-/8i
8ii6lƒ"QR!k-iN-kiR*/"0*i
i†i6l< ,-}-A*C-2*2oW3PkS31
/ ;"[-v-!/qC-!‚-!"9ig-!yR'-!-O-01 4S-!k-
+./+v-!"2ˆ2*!k-kil23i) y*!k-0
295/qC šU-!7/836l-!*C(--0295/qi6l8-!R>01C*""
-!67) (-+CN
2+".{-!!8-!-6+"-!+67-!l2+./+j 4->-00295/qR'-!

i6l!39
%6F-!2*2-14 4k4> X '-!0V-!67) (-+Z-!3>-i'n 4
->--k3126F-!2*2+< ) (iSR"**!k-R'-!+…-! U-!8kE
i-<-'-!01"/[
1 6]^*]_`.a*2]a-+b
>a 8D5eD! 4f--ghK:
K  !"#
1# ;K c   de=;@F4
67@>;
1## O=BM;<e=;@
$%NO@):NO '1KP3N!/
$%1/QR!S*!-
>a 8D5eD! 4f--ghK:
 
$8%1/QR!S*!-7
$=%1/QR!S*!-7
>a 8D5eD! 4f--ghK:
  !"#
$?%1/QR!S*!-7
$A%1/QR!S*!-7
>a 8D5eD! 4f--ghK:
 &
1#1 f:9
a. Trước khi tiến hành t!n công :
$F%!QT'()*7
b. Sau khi tiến hành t!n công :
$G%<'()*77
>a 8D5eD! 4f--ghK:
  !"#
11 ;Kcde=;@?@AE>g>@P

F4O>@P
11# O=BM;<
$H%1QR!S*!- ,-//DUE,7
$%":V!N36;<
>a 8D5eD! 4f--ghK:
 
111 f:9
$%BP+6"QR!7
118 .
(59"ID315g,-#<-'-!\R*-! 4S5Ri6li/W;T-!
05TiPZ-~2'-!-W;T-!'-!-!-14-•-!R•<-'-!kSO-
;T-!*RŠ O!(59"iSi*-~2*'-!-) -+ƒ-!V-!67;m-!j4
1iQ53[+.+>-5gvi}CR*j"Q!t4+5g<-'-!‚8;0T
`]]h+*$*bi
>a 8D5eD! 4f--ghK:
:  !"#
›œ D! 4f-<-M'2;<M"Dj9ƒ
w*R"1D‡-!
›œ *-! U-5R("R*+>-59-!\-.+ 
>a 8D5eD! 4f--ghK:
O*$%&*k*_l
,-a *+,-$%$.) ./01$%$.234+"-!D:
,-Q-C~'-!-Cx-!*!(59"$%.H
,-&+ 40<-01Ui*2IDK
,-+ 40<-01Ui*2IDCx-!i) 4
,-<-'-!!(59"IDCx-!*!(59"ID\I
,-:MS <-'-!DJ3"";&
,-?MS <-'-!II"
,-BMS <-'-!5 +JR
,-H#-Z-! 4S-59V[?

,-K',-<-'-!315-!O2C(-!B
,-\%01iV*NC+"-!59-!K
,-< ,-"6F-!+,-c.+2K
,-&< ,-"6F-!+,-c.+2
,-< ,-"6F-!+,-c.+2
,-< ,-"6F-!+,-c.+2
,-:< ,-"6F-!+,-c.+2
,-?+6R<-'-!$%.&
,-B R<-'-!$%.&
,-H< ,-6F-!+,-c.+20123 !-/2""Jd;-/
,-K4iv!*+C(-!ID
,-MN) (R946F-!+,-