1.Internet security experts have long known that simple passwords do not fully defend online bank accounts from determined fraud artists.Now a study suggests that a popular secondary security measure provides little additional protection.

　　2.The study，produced jointly by researchers at Harvard and the Massachusetts Institute of Technology，looked at a technology called site-authentication images.In the system，currently used by financial institutions like Bank of America，ING Direct and Vanguard，online banking customers are asked to select an image，like a dog or chess piece，that they will see every time they log in to their account.

　　3.The idea is that if customers do not see their image，they could be at a fraudulent Web site，dummied up to look like their bank's，and should not enter their passwords.

　　4.The Harvard and M.I.T.researchers tested that hypothesis.In October，they brought 67 Bank of America customers in the Boston area into a controlled environment and asked them to conduct routine online banking activities，like looking up account balances.But the researchers had secretly withdrawn the images.

　　5.Of 60 participants who got that far into the study and whose results could be verified，58 entered passwords anyway.Only two chose not to log on，citing security concerns.

　　6.“The premise is that site-authentication images increase security because customers will not enter their passwords if they do not see the correct image,” said Stuart Schechter，a computer scientist at the M.I.T.Lincoln Laboratory.“From the study we learned that the premise is right less than 10 percent of the time.”

　　7.He added: “If a bank were to ask me if they should deploy it，I would say no，wait for something better,” he said.

　　8.The system has some high-power supporters in the financial services world，many trying to comply with new online banking regulations.In 2005，the Federal Financial Institutions Examination Council，an interagency body of federal banking regulators，determined that passwords alone did not effectively thwart intruders like identity thieves.

　　9.It issued new guidelines，asking financial Web sites to find better ways for banks and customers to identify each other online.January 2007 was set as the compliance date，though the council has yet to begin enforcing the mandate.

　　10.Banks immediately knew what they did not want to do: ask customers to download new security software，or carry around hardware devices that feed them PIN codes they can use to authenticate their identities.Both solutions would add an extra layer of security but，the banks believed，detract from the convenience of online banking.

 

 

    参考答案

　　1. 第一段“Now a study suggests that a popular secondary security measure provides little additional protection.”似与问题文字很接近，但是原文中a popular secondary security measure是指特定的一个措施，而非泛指所有secondary security measure。原文没有其它secondary security measure安全有效性的内容。故应选择NG。

　　2. 见第4、5段内容。第四段 “But the researchers had secretly withdrawn the images.”即研究人员撤下了图形，第五段“Only two chose not to log on, citing security concerns.”，有两个人因为安全考虑未进入。

　　3. T 见第6段。

　　4. F 见第11、14段。

　　5. F 见第11段“Bank of America was among the first to adopt it”，可见首批采用图形识别软件的银行并非Bank of America一家。

　　6. A financial institution 见第二段。

　　7. (their) passwords 见第三段。

　　8. less convenience 见第十段。

　　9. identity 见第八、十段。

　　10. Silicon Valley 见第十一段。

　　11. easy to use 见第十二段。

　　12. site maintenance message 见第十三段“When respondents logged in during the study, they saw a site maintenance message on the screen where their image and phrases should have been pictured.”

　　13. 4 分别见第十段的“download new security software”和“hardware devices that feed them PIN codes”，第十五段的“a small software program, called a cookie”，以及本文提到的site-authentication images。