定时攻击经常攻击像智能卡这样的小的处理设备。本文说明了出现在通用软件系统中的定时攻击。特别地,我们设计了一个对OpenSSL(OpenSecuritySocketLayer,开放的加密套接字协议层)进行攻击的定时攻击。我们的试验说明,从本地网络中的一个基于OpenSSL的web服务器上盗取私人密钥是能做到的,证明了对网络服务器的定时攻击是普遍存在的,所以应该设计安全系统来对其进行防御。 Timing attacks often attack small processing devices like smart cards. This article describes timing attacks that appear in common software systems. In particular, we designed a timing attack that attacks OpenSSL (OpenSecuritySocketLayer, an open cryptographic socket protocol layer). Our experiment shows that it is possible to steal a private key from an OpenSSL-based web server on a local network, proving that timing attacks on web servers are ubiquitous and that a security system should be designed to do this defense.