Introduction
簡介
Put yourself in the shoes of a ship captain in dangerous waters " there are pirates everywhere! You are carrying valuable cargo, so your ship is always at risk. These pirates attacking you are clever; every time you invent a new way to protect your ship, they find a way around it. Keeping your crew and cargo safe depends on your ability to know common ways of attack and to predict their next moves!
想像你是一位航行於危險海域的船長，到處都有海盜！你載運著珍貴的貨物，因此你的船隨時處於風險之中。攻擊你的這些海盜非常狡猾；每當你發明一種新方法來保護你的船，他們就會找到方法繞過它。要讓你的船員和貨物保持安全，取決於你是否能了解常見的攻擊手法並預測他們的下一步行動！
Just like a ship captain needs to understand pirate tactics, a network engineer needs to understand the different security threats to their network. By learning about security threats like malware, social engineering, and Distributed Denial-of-Service (DDoS) attacks, you can create ways to prevent breaches and protect your organization’s data and reputation. Staying informed and proactive helps you to stop cyberattacks and keep your network safe.
就像船長需要了解海盜的戰術一樣，網路工程師也需要了解網路面臨的各種安全威脅。透過學習惡意軟體、社交工程以及分散式阻斷服務（DDoS）攻擊等安全威脅，你可以建立防範外洩的方法，保護組織的資料與聲譽。保持消息靈通並主動因應，有助於你阻止網路攻擊、維護網路安全。
Just like a ship at sea, your network faces many threats. It's crucial to understand these dangers to protect your network effectively.
就像海上的船隻一樣，你的網路也面臨許多威脅。了解這些危險，對於有效保護你的網路至關重要。
 | What types of security threats do you think networks commonly face, and how would you approach identifying and mitigating these threats to ensure network safety? 你認為網路通常會面臨哪些類型的安全威脅？你會如何著手辨識並緩解這些威脅，以確保網路安全？ |
Here is what you will learn in this course:
以下是你在本課程中將學到的內容：
- Describe the security threat landscape, identify common cyber threats, and different types of malware and hacking tools.描述安全威脅態勢，辨識常見的網路威脅，以及不同類型的惡意軟體和駭客工具。
- Differentiate between DoS, DDoS, reflection, and amplification attacks, and understand spoofing techniques.區分 DoS、DDoS、反射式及放大式攻擊，並了解偽造（spoofing）技巧。
- Define social engineering, understand phishing evolution, and identify password attack methods and protection strategies.定義社交工程，了解網路釣魚的演變，並辨識密碼攻擊方法與防護策略。
- Explain buffer overflow, man-in-the-middle attacks, reconnaissance methods, and vectors of data loss and exfiltration risks.說明緩衝區溢位、中間人攻擊、偵察方法，以及資料遺失與外洩風險的途徑。