Security for enterprises and ISPs

从科学到娱乐，从政府到工业，从经济到我们的文化，互联网已经成为现代生活几乎所有方面不可或缺的一部分，这是一个不言而喻的事实。但是，虽然互联网的开放架构一直是其爆炸式增长的主要推动力，但同样的开放性，加上安装在终端主机上的大量不安全商业软件，为攻击者提供了几乎取之不尽的易受攻击的主机，这些主机要么是主要受害者，要么是攻击链中的中间步骤。其中一些漏洞导致了大规模的攻击，如蠕虫、病毒和分布式拒绝服务攻击，在整个互联网中造成了企业和路由子系统的重大中断。

It is a truism that the Internet has become integral to nearly all aspects of modern life, from science to entertainment, from government to industry, from the economy to our culture. But while the open architecture of the Internet has been the chief enabler of it's explosive growth, this same openness, combined with the abundance of insecure commercial software installed in end-hosts, has provided attackers with a nearly inexhaustible supply of vulnerable hosts to exploit, either as primary victims or as intermediate steps in a chain of exploits. Some of these exploits have resulted in attacks of massive scale such as worms, viruses, and distributed denial of service attacks, creating major disruptions in enterprises and routing subsystems throughout the Internet.