What Liu Cheng has to do is very simple.

Find out how hackers break through the bank's network security system.

As for the others, each has its own role. If you should catch the thief, you should upgrade the U-Shield, and if you should upgrade the U-Shield, they will provide effective security upgrades for major banks.

Of course, this job is not free. All banks have signed confidentiality agreements with everyone on the spot and paid the appearance fee.

Emergency public safety incidents.

Liu Cheng got a few mobile hard drives, which contained their log files. He looked at Liu Yinuo and said, "You go back today. I will be busy here for a while. I probably won't be able to do it tomorrow morning. I'll leave it to you for taking Chen Wanruo's affairs."

Liu Yinuo looked at the busy people and nodded and said, "Do you want a midnight snack? I'll bring you all breakfast and lunch."

"It's okay." Liu Cheng nodded and walked towards the laboratory.

Some people are busy, which is Liu Cheng’s first impression.

The first small case was just a small test. The subsequent large-scale attack was the hackers' large-scale killer move. It was emptied overnight for more than 30,000 yuan. The major banks were helpless and had to ask the big touches who were on vacation to take action.

It is conceivable how difficult it is.

It is highly likely that Liu Cheng would ask for a pigeon, Chen Wanruo, and the Ditan Temple Fair tonight.

Even though Liu Cheng had overestimated the technical difficulty, he still underestimated the difficulty of this log inspection.

There was no problem, no strange place. The hackers were like the ones who were the card themselves, successfully transferred all the money in the account, and then disappeared without a trace.

It was not until the morning of the next day that Liu Cheng remembered a possible direction, but he was too tired and fell asleep drowsyly on the table.

When I woke up again, it was already noon. Liu Yinuo was sitting next to him and covered him with the down jacket.

Liu Cheng was so hungry that he was rumbled, but he turned on the monitor excitedly and said with great certainty: "I understand!"

Before he went to bed, he thought of a direction. In his dream, he kept having a messy dream intermittently. When he woke up, the vague fragments gradually became clear.

CSRF, that is, cross-domain request forgery, is a very, very common WEB attack method. It is easy to defend against, but it is ignored by countless developers. Its alias is called "Sleeping Giant".

Simply put, the user opens the China Merchants Bank Credit Card Center and logs in. The online banking returns the cookie to the front end, and the browser saves the cookie.

At this time, if the user does not log out of online banking and the browser opens a new website, the website is a dangerous website.

There is a hyperlink on the website that points to the China Merchants Bank Credit Card Center. When a user clicks on the hyperlink of this dangerous website, the browser's cookies will be stolen, or the money will be transferred directly.

"You have a bite first." Liu Yinuo looked at the cold lunch and shook his head vigorously. Liu Cheng was like this. Once he started working, he would ignore anything.

Liu Cheng built a project in Spring Boot and made two csrf projects, reproducing the hacker's attack methods.

He finally breathed a sigh of relief. After a day of trouble, he still thought that the complex technology was a very simple CSRF cross-domain request forgery. No wonder he couldn't see anything in the log.

He reproduced the attack again through the work server, wrote a report, and chose to submit.

"It's really exhausting." Liu Cheng stretched his waist and ate the already cold rice, and his croaking stomach felt satisfied and full.

Liu Chenghan asked vaguely: "Did Chen Wanruo receive it? Isn't it the morning plane?"

Liu Yinuo nodded. She still didn't understand what Liu Cheng was doing, but it didn't prevent her from knowing that Liu Cheng seemed to have solved a big problem.

She nodded and said, "I received it. She went back to her home. Didn't her mother buy her a house in the capital? She also took Aunt Liu and the driver A Biao from her family to the capital. She is fine, don't worry."

"That's it, okay, I'm writing a CSRF defense briefing to them, and I can get off work." Liu Cheng stretched out his body, went to the bathroom, and continued to fight.

It was not until the evening that Liu Cheng was finished.

CSRF's defense is very simple, but developers need to solve many problems to defend against such attacks. The server and client are working on both the workload.

It is precisely because of the huge workload that most developers try to save energy, either not deploying or directly writing a user agreement to remove all their responsibilities.

Major online game manufacturers can do this, but banks cannot. Liu Cheng wrote the security report and sent it to Tian Weide, stood up and found Tian Weide's office.

"Teacher Tian, ​​my work is done." Liu Cheng looked at Tian Weide who had been together all night and shook his head. The complexity of this matter was not something that could be done by finding a means of attack. It was just Liu Cheng's work. Tian Weide was responsible for handling this emergency security incident, which was very complicated.

The diversification and anonymization of cybercrime makes such emergencies even more difficult.

"Okay." Tian Weide was still busy, and he didn't have much time to greet him, nodding to indicate that Liu Cheng could leave.

Liu Cheng looked at Liu Yinuo's confused look and said with a smile: "They have to work hard for at least a week."

"My job is to find a thread in a mess for them. They can constantly dig out the people behind them by pulling the thread, but that has nothing to do with me."

Such problems are actually related to the current domestic Internet industry trend. At this time, Internet coders only pursue quantity and not quality, which leads to the fact that even banks can use the code.

This trend will change completely in two or three years.

But Indian programmers do not, they only pursue usefulness from beginning to end.

As for whether the car can be braked, and whether there are structural and framework loopholes, they don’t care at all.

Liu Yinuo nodded in a clear way, looked at the sky and asked, "Brother stinking, are you going to Chen Wanruo's place tonight?"

Liu Cheng thought seriously and said, "I won't go anymore. It's so late. Have a meal and go back to bed. Let's go tomorrow."

"Okay." Liu Yinuo smiled sweetly, and said with a sweet smile.

"I'm very tired today. Sister, please let me go!" Liu Cheng shivered when he looked at the smile.

Liu Yinuo immediately said, "There is no wheel battle today, so don't worry, let you have a good rest."

She said with her big eyes flashing, "But sister, I really want it."
Chapter completed!