This paper based on a concrete CA, introduces the security vulnerability, intrusion from inside and outside, and the measures to protect the system.

• 本文根据一个实际的CA系统，介绍了CA系统存在的总体脆弱性和可能存在的内外部攻击方式及防范措施。