الأمن السيبراني

تفاصيل السياسة

سجل التغييرات
مبادئ السياسة
ندرك أن سلامة مستخدمينا تتضمن أمن معلوماتهم الشخصية وحساباتهم وملفاتهم الشخصية وكيانات Meta الأخرى التي قد يديرونها، بالإضافة إلى منتجاتنا وخدماتنا بشكل أوسع. وتعد محاولات تجميع المعلومات الشخصية الحساسة أو المشاركة في عمليات وصول غير مُصرح بها بطرق خادعة أو إقحامية أمرًا ضارًا لأجواء المصداقية والانفتاح والأمان التي نسعى إلى تعزيزها.
لا نسمح بما يلي:
محاولة اختراق الحسابات أو الوصول إليها بطرق خادعة بما في ذلك:
  • الوصول إلى الحسابات أو الملفات الشخصية أو كيانات Meta الأخرى بخلاف تلك الخاصة بالمستخدم بطرق خادعة أو دون إذن صريح من مالك الحساب أو الملف الشخصي أو الكيان.
  • الحصول على معلومات تسجيل الدخول أو المعلومات الشخصية أو معلومات المستخدم الحساسة الأخرى أو الوصول إليها أو طلبها بغرض الوصول غير المصرح به، بما في ذلك من خلال الأساليب التالية:
    • التصيد الاحتيالي، ويُعرّف بأنه ممارسة إنشاء مراسلات أو مواقع ويب مصممة لتبدو وكأنها مراسلات أو مواقع ويب أكثر موثوقية أو حسنة السمعة بغرض الحصول على معلومات المستخدم الحساسة عن طريق الاحتيال.
    • الهندسة الاجتماعية، مثل المحاولات المتكررة أو المتواصلة لجمع أو الحصول على إجابات عن الأسئلة الشائعة الخاصة باستعادة الحساب أو كلمة السر.
    • البرامج الضارة أو البرامج الرمادية أو برامج التجسس أو غيرها من الرموز البرمجية الضارة، كما هو موضّح أدناه.
محاولات مشاركة أو تطوير أو استضافة أو توزيع رموز برمجية خبيثة أو ضارة، بما في ذلك:
  • تشجيع المستخدمين أو خداعهم بغرض تنزيل أو تشغيل ملفات أو تطبيقات أو برامج من شأنها اختراق حساب المستخدم على الإنترنت أو تعريض أمان بياناته للخطر، بما في ذلك على سبيل المثال لا الحصر:
    • البرامج الضارة، والتي يتم تعريفها على أنها رموز برمجية أو برامج مصممة لإلحاق الضرر بالأنظمة أو الوصول إليها بشكل غير مصرح به. ويتضمن ذلك البرامج المصممة لإلحاق الضرر بأنظمة الكمبيوتر، بالإضافة إلى البرامج المصممة لانتزاع الأموال من الضحايا، مثل فيروس الفدية.
    • برامج التجسس، والتي يتم تعريفها على أنها رموز برمجية أو برامج تقوم بجمع البيانات عن المستخدمين وإرسالها إلى جهات خارجية دون الحصول على موافقة واضحة من المستخدم، أو تستخدم البيانات لأغراض غير مشروعة (على سبيل المثال، الابتزاز الجنسي، أو الابتزاز، أو الوصول غير المشروع إلى الأنظمة).
    • البرامج الرمادية، والتي يتم تعريفها على أنها رموز برمجية أو برامج تقلل من أداء الأجهزة أو البرامج وقد يكون من الصعب إزالتها من نظام الكمبيوتر أو الشبكة.
  • إنشاء أو مشاركة أو استضافة برامج ضارة بما في ذلك ملحقات متصفح الإنترنت وتطبيقات الهواتف المحمولة، على المنصة أو خارجها، والتي من شأنها تعريض مستخدمينا أو منتجاتنا وخدماتنا للخطر.
  • التهديد بارتكاب أعمال الاختراق، أو الإقرار بها، أو تمكينها - ويشمل ذلك مشاركة أو الإعلان عن برامج أو دورات تدريبية أو منتجات تتيح للأشخاص التحايل على أنظمة الأمان، بما في ذلك البرامج التي تشجع على اختراق البرامج أو بيانات الاعتماد
  • تقديم بنية أساسية على الإنترنت، بما في ذلك خدمات استضافة الويب وخوادم نظام أسماء النطاقات والشبكات الإعلانية، التي تُمكِّن من استخدام الروابط المسيئة، بحيث تنتهك غالبية هذه الروابط على خدماتنا بنود قسمي "المحتوى غير المهم أو الاحتيالي" و"الأمن السيبراني" في معايير المجتمع.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Meta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
We do not allow:
Attempts to compromise or access accounts via unauthorized means, including:
  • Accessing accounts, profiles, or other Meta entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
    • Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
    • Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
    • Malware, Greyware, Spyware or other malicious code, as described below.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
  • Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
    • Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
    • Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
    • Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
  • Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
  • Threatening, admitting to, or enabling hacking - Including by Ssharing or advertising software, courses, or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
  • Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on our services violate the spam or cybersecurity sections of the Community Standards.
This policy has been updated to reflect the consolidation of all existing policies related to malicious hacking under the Cybersecurity policy.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other FacebookMeta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
We do not allow:
Attempts to compromise or access accounts via unauthorized means, including:
  • Accessing accounts, profiles, or other Meta, Inc., entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
    • Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
    • Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
    • Malware, Greyware, Spyware or other malicious code, as described below.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
  • Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
    • Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
    • Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
    • Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
  • Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
  • Sharing or advertising software or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
  • Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on Facebook or Instagramour services violate the spam or cybersecurity sections of the Community Standards.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Facebook entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive userpersonalinformation or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster. Therefore, we do not allow attempts to gather sensitive user personalinformation or engage in unauthorized access through the abuse of our platform, products, or services.
Do not:We do not allow:
Attempts to compromise or access accounts via unauthorized means, including:
  • Accessing accounts, profiles, or other Meta, Inc., entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
    • Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
    • Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
    • Malware, Greyware, Spyware or other malicious code, as described below.
Attempt to compromise user accounts, profiles, or other Facebook entities, abuse our products or services, gather sensitive information through deceptive means, or attempt to engage in unauthorized access, including:
  • Gaining access to accounts, profiles Facebook, Inc. entities, or user data other than your own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Attempting to obtain, acquire or request another user’s login credentials, personal information or other sensitive data - whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites) or the use of malicious software or websites.
  • Publicly sharing your own or others’ login information, either on platform or through a third party service.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
  • Encouraging or deceiving users to download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
  • Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
    • Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
    • Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
    • Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
  • Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
  • Sharing or advertising software or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
  • Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the spam or cybersecurity sections of the Community Standards.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Meta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
Do not:
Attempt to compromise user accounts, profiles, or other Facebook entities, abuse our products or services, gather sensitive information through deceptive means, or attempt to engage in unauthorized access, including:
  • Gaining access to accounts, profiles Facebook, Inc. entities, or user data other than your own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Encouraging or deceiving users to download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
  • Attempting to obtain, acquire or request another user’s login credentials, personal information, or other sensitive informationdata - whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites) or the use of malicious software or websites.
  • Publicly sharing your own or others’ login information, either on platform or through a third party service.
  • Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
  • Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the spam or cybersecurity sections of the Community Standards.
We are making minor clarifications to the policy to better reflect the types of deceptive links we remove, including deceptive links that lead elsewhere on our family of apps and services.
Policy Rationale
We recognize that the safety of our users extends toincludes the security of their personal information and accounts and our services.accounts, profiles, and other Facebook entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster, and can be used to compromise user accounts and our services. Therefore, we do not allow attempts to gather sensitive user information through or engage in unauthorized accessthe abuse of our platform and products., and products, or services.
Do not:
Attempt to compromise user accounts, profiles, or other Facebook entities, abuse our products or services, or gather sensitive information through unauthorizeddeceptive means,, or attempt to engage in unauthorized access,defined as:including:
  • Gaining access to any accounts , profiles, Facebook, Inc. entities, or user data other than your ownthrough deceptive means or without explicit permission from the account, profile, or entity owner.
  • Encouraging or deceiving users and entities to download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites.. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
  • Attempting to obtain, acquireAcquiring or requesting another user’s login credentialsor other sensitive information, , whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites)or the use of malicious software or websites..
  • Attempting to obtain the sensitive information of others such as usernames, passwords, or other personal information, through deceptive means or the use of malicious software or websites.
  • Publicly sharing your own or others’ login information, either on platform or through a third party service.
  • Creating, sharing, or hosting malicious software or malicious browser extensions to compromise accounts or gain access to user data.
  • Creating, sharing, or hosting malicious software browser extensions and mobile applications, on or off platform that put our users or products and services at risk.
  • Providing online infrastructure, including Web Hosting Services, Domain Name System servers, and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the Spam or Cybersecurity sections of the Community Standards.
Section 19: Cybersecurity:
Policy Rationale
We recognize that the safety of our users extends to the security of their personal information. Attempts to gather sensitive personal information by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster. Therefore, we do not allow attempts to gather sensitive user information through the abuse of our platform and products.
We recognize that the safety of our users extends to the security of their personal information and accounts and our services. Attempts to gather sensitive personal information by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster, and can be used to compromise user accounts and our services. Therefore, we do not allow attempts to gather sensitive user information through the abuse of our platform and products.
Section 19: Cybersecurity (New):
Policy Rationale
We recognize that the safety of our users extends to the security of their personal information. Attempts to gather sensitive personal information by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster. Therefore, we do not allow attempts to gather sensitive user information through the abuse of our platform and products.
Do not:
Attempt to compromise user accounts or gather sensitive information through unauthorized means, defined as:
  • Gaining access to any account or user data other than your own without explicit permission from the account owner.
  • Encouraging or deceiving users and entities to download or run files or programs that will compromise a user’s online or data security. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
  • Acquiring or requesting another user’s login credentials, whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites).
  • Attempting to obtain the sensitive information of others such as usernames, passwords, or other personal information, through deceptive means or the use of malicious software or websites.
  • Publicly sharing your own or others’ login information on platform or through a third party service.
  • Creating, sharing, or hosting malicious software or malicious browser extensions to compromise accounts or gain access to user data.
  • Providing online infrastructure, including Web Hosting Services, Domain Name System servers, and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the Spam or Cybersecurity sections of the Community Standards.
تجارب المستخدمين
يمكنك الاطلاع على بعض الأمثلة عن كيفية إنفاذ السياسات فيما يتعلق بالأشخاص على فيسبوك، مثل: كيفية الإبلاغ عن محتوى ترى أنه لا ينبغي أن يكون على فيسبوك، وكيفية إخطارك بانتهاك معايير مجتمعنا، وظهور شاشة تحذيرية فوق محتوى معين.
ملاحظة: نعمل على تحسين خدماتنا باستمرار، لذا قد يكون ما تراه هنا قديمًا بعض الشيء مقارنةً بما نطبقه حاليًا.
تجربة المستخدم
الإبلاغ
تجربة المستخدم
مراسلات ما بعد البلاغ
تجربة المستخدم
تجربة الإزالة
تجربة المستخدم
الشاشات التحذيرية
الإنفاذ
نطبق السياسات نفسها في جميع أنحاء العالم على كل مستخدمي فيسبوك.
فِرق المراجعة
يعمل فريق مراجعينا العالمي الذي يضم أكثر من 15000 مراجعٍ كل يوم للحفاظ على أمان الأشخاص على فيسبوك.
تفاعل الجهات المعنية
يساهم الخبراء الخارجيون والأكاديميون والمنظمات غير الحكومية وصناع السياسات في إثراء معايير مجتمع فيسبوك.
الحصول على مساعدة بشأن الأمن السيبراني
تعرَّف على ما يمكنك القيام به إذا رأيت شيئًا على فيسبوك يخالف معايير المجتمع الخاصة بنا.
زيارة مركز المساعدة