现在,勒索病毒、恶意挂马、大规模数据泄露等网络攻击的目标也渐渐由商业网站波及校园网络。高校网络中的商业机密等内容虽少,但许多国家重点课题、国防工业项目等相关信息价值极大。一旦高校关键网络节点被攻陷,也会直接将大量教学电脑和学生自用笔记本等计算机暴露在网络攻击之下。因此,在高校网络的运维过程中,对各类网络安全威胁绝不可掉以轻心。2016年底,我们对北京市某些高校网络进行了安全渗透测试,其内容包括Web站点、服务器配置、无线Wi Fi接入、校园 Now, the target of cyber attacks such as ransomware, malicious trapping, large-scale data breach, and so on are gradually spreading from the commercial websites to the campus network. Although there are few contents such as trade secrets in college network, the relevant information of many national key projects and national defense industry projects is of great value. Once the key network nodes in colleges and universities were compromised, a large number of teaching computers and students’ laptops and other computers will be directly exposed to the cyberattack. Therefore, in the process of operation and maintenance of university network, all kinds of network security threats must not be taken lightly. At the end of 2016, we conducted a security penetration test on some university networks in Beijing, including Web sites, server configuration, wireless Wi-Fi access, and campus