09雅思阅读实战训练(十四)

　　Study Finds Web Antifraud Measure Ineffective

　　Published: February 5， 2007 New York Times

　　1. Internet security experts have long known that simple passwords do not fully defend online bank accounts from determined fraud artists. Now a study suggests that a popular secondary security measure provides little additional protection.

　　2.The study， produced jointly by researchers at Harvard and the Massachusetts Institute of Technology， looked at a technology called site-authentication images. In the system， currently used by financial institutions like Bank of America， ING Direct and Vanguard， online banking customers are asked to select an image， like a dog or chess piece， that they will see every time they log in to their account.

　　3.The idea is that if customers do not see their image， they could be at a fraudulent Web site， dummied up to look like their bank’s， and should not enter their passwords.

　　4.The Harvard and M.I.T. researchers tested that hypothesis. In October， they brought 67 Bank of America customers in the Boston area into a controlled environment and asked them to conduct routine online banking activities， like looking up account balances. But the researchers had secretly withdrawn the images.

　　5.Of 60 participants who got that far into the study and whose results could be verified， 58 entered passwords anyway. Only two chose not to log on， citing security concerns.

　　6.“The premise is that site-authentication images increase security because customers will not enter their passwords if they do not see the correct image，” said Stuart Schechter， a computer scientist at the M.I.T. Lincoln Laboratory. “From the study we learned that the premise is right less than 10 percent of the time.”

　　7.He added: “If a bank were to ask me if they should deploy it， I would say no， wait for something better，” he said.

　　8.The system has some high-power supporters in the financial services world， many trying to comply with new online banking regulations. In 2005， the Federal Financial Institutions Examination Council， an interagency body of federal banking regulators， determined that passwords alone did not effectively thwart intruders like identity thieves.

　　9.It issued new guidelines， asking financial Web sites to find better ways for banks and customers to identify each other online. January 2007 was set as the compliance date， though the council has yet to begin enforcing the mandate.

　　10.Banks immediately knew what they did not want to do: ask customers to download new security software， or carry around hardware devices that feed them PIN codes they can use to authenticate their identities. Both solutions would add an extra layer of security but， the banks believed， detract from the convenience of online banking.

　　11.The image system， introduced in 2004 by a Silicon Valley firm called PassMark Security， offered banks a pain-free addition to their security arsenals. Bank of America was among the first to adopt it， in June 2005， under the brand name SiteKey， asking its 21 million Web site users to select an image from thousands of possible choices and to choose a unique phrase they would see every time they logged in.

　　12.SiteKey “gives our customers a fairly easy way of authenticating the Bank of America Web site，” said Sanjay Gupta， an e-commerce executive at the bank. “It was very well received.”

　　13.The Harvard and M.I.T. researchers， however， found that most online banking customers did not notice when the SiteKey images were absent. When respondents logged in during the study， they saw a site maintenance message on the screen where their image and phrases should have been pictured. The error message also had a conspicuous spelling mistake， further suggesting something fishy.

　　14.Mr. Gupta of Bank of America said he was not troubled by the results of the survey， and stressed that SiteKey had made the bank’s Web site more secure. He also said that the system was only a single part of a larger security blanket. “It’s not like we’re betting the bank on SiteKey，” he said.

　　15.Most financial institutions， like Bank of America， have other ways to tell if a customer is legitimate. The banks often drop a small software program， called a cookie， onto a user’s PC to associate the computer with the customer. If the customer logs in from another machine， he may be asked personal questions， like his mother’s maiden name.

　　16.Rachna Dhamija， the Harvard researcher who conducted the study， points out that swindlers can use their dummy Web sites to ask customers those personal questions. She said that the study demonstrated that site-authentication images are fundamentally flawed and， worse， might actually detract from security by giving users a false sense of confidence.

　　17.RSA Security， the company that bought PassMark last year， “has a lot of great data on how SiteKey instills trust and confidence and good feelings in their customers，” Ms. Dhamija said. “Ultimately that might be why they adopted it. Sometimes the appearance of security is more important than security itself.”

　　Do the following statements agree with the information given in the passage? Please write

　　TRUE if the statement agrees with the writer

　　FALSE if the statement does not agree with the writer

　　NOT GIVEN if there is no information about this in the passage

　　1.According to internet security experts， secondary security measures provide little additional protection against fraud.

　　2.In the Harvard and MIT study， two subjects didn’t log on without seeing the correct pictures.

　　3.According to Schechter， more than 90% of online banking customers studied logged on without seeing the right pictures.

　　4.The image system is the only security measure that the banks mentioned in the passage have currently.

　　5.Bank of America is the first bank that adopted the image system.

　　Questions 6-13

　　Answer the following questions or complete the following sentences by choosing NO MORE THAN THREE WORDS for each answer.

　　6.What is ING Direct and Vanguard?

　　7.What might online banking customers be cheated to give at a fraudulent Web site?

　　8.What may stop online banking customers from using new verification methods?

　　9.The key to online banking security is to verify the ______ of customers.

　　10.Where is PassMark Security located?

　　11.What is the reason why SiteKey is popular among online banking customers?

　　12.What was used instead of images in the Harvard and M.I.T. study?

　　13.How many security methods are mentioned in this passage?

　　Answer keys

　　1. 第一段“Now a study suggests that a popular secondary security measure provides little additional protection.”似与问题文字很接近，但是原文中a popular secondary security measure是指特定的一个措施，而非泛指所有secondary security measure。原文没有其它secondary security measure安全有效性的内容。故应选择NG。

　　2. 见第4、5段内容。第四段 “But the researchers had secretly withdrawn the images.”即研究人员撤下了图形，第五段“Only two chose not to log on， citing security concerns.”，有两个人因为安全考虑未进入。

　　3. T 见第6段。

　　4. F 见第11、14段。

　　5. F 见第11段“Bank of America was among the first to adopt it”，可见首批采用图形识别软件的银行并非Bank of America一家。

　　6. A financial institution 见第二段。

　　7. passwords 见第三段。

　　8. less convenience 见第十段。

　　9. identity 见第八、十段。

　　10. Silicon Valley 见第十一段。

　　11. easy to use 见第十二段。

　　12. site maintenance message 见第十三段“When respondents logged in during the study， they saw a site maintenance message on the screen where their image and phrases should have been pictured.”

　　13. 4 分别见第十段的“download new security software”和“hardware devices that feed them PIN codes”，第十五段的“a small software program， called a cookie”，以及本文提到的site-authentication images

　　雅思阅读的题型一直是考生比较关注的问题，分析认为主要有以下两个原因：

　　1. 有相对简单和相对费时的题型;

　　2.每个考生都有自己擅长的和较害怕的题型。具体来说：对于词汇不足的考生可能最害怕段落标题匹配题及摘要归纳填空题;对于词汇量较大的考生来说，是非无判断题，段落标题匹配题和摘要归纳填空题可能是比较简单的。选择题和其它匹配题是相对来说比较费时的，所以大部分考生都很害怕这类题型。

　　那么，面对上面所提到的这些情况，考生应该在题型方面怎样备考呢?

　　首先，专家认为考生必须从心理上准备迎接所有的题型，在备考中要尽可能喜欢所有题型。有的考生会一次次地祈祷：“希望这次考试不要有选择题或段落细节信息定位题!”这样做，其实是无形中给自己制造了负面的影响。考试题型不是我们所能预料和控制的，一旦有了上述心理，很有可能一看到题型就慌了，一开始就没有一个好的状态。还有一部份考生喜欢跟着考题回忆和机经走，看到上次考了什么题就在备考中只关注那些题型。考题回忆和机经可以看看，但只能做参考，考生千万不要被它们所左右。否则就是自己给自己制造障碍。

　　其次，考生必须对各类题型的题型特点和答题注意事项了如指掌。雅思阅读考试时间之短，文章之学术性，题量之大，题型之多等特点决定了考生势必会感觉时间不够。考生要在有限的时间内答完所有的题并尽可能地保证较高的正确率确实不是一件容易的事情。考生除了要有一定的词汇量和阅读速度之外，常见的雅思阅读技巧和解题策略是必须的。而解题策略很多时候是建立在考生熟悉题型特点的基础之上的。比如说，考生拿到一篇文章绝不是从第1题接到13题，而是应该分析各组题型的特点和难易，由易到难。同样，考生也可以根据3篇各自的题型来初步判断哪一篇的题型可能对自己比较有利，那篇可能较难，以便能灵活地采取合适的策略。

　　最后，专家建议考生在考前进行练习时，不要光做套题，而应该偶尔穿插一些专题的练习，重点练习自己没什么把握的题型。注意练习时时间的掌控是很重要的，不要给自己30分钟完成6道是非无，那样不能达到训练的目的，不能保证良好的效果。