Linux系统防扫描技术研究  

Research on Anti-scanning Technique of Linux System

作　　者：赵天福[1] 周丹平[1] 

机构地区：[1]江南计算技术研究所,江苏无锡214083

出　　处：《信息安全与通信保密》2007年第6期192-194,共3页Information Security and Communications Privacy

摘　　要：文章首先对现有的一些防扫描技术进行分析,指出了各自存在的问题。然后,提出了一种基于SHT算法的扫描检测技术,并设计了基于netfilter架构的Linux防扫描体系。这种防扫描体系可以较好地弥补现有防扫描技术的不足。In this paper some existing anti-scanning techniques are first introduced, and then the problems existed in each of these anti-scanning means are also pointed out. The third part describes a new anti-scanning technique based on Sequential Hypothesis Testing algorithm. And an anti-scanning system of Linux based on netfilter architecture is described in the last part. This anti-scanning system can well remedy the defects of existing anti-scanning systems.

关 键 词：防扫描 SHT算法 netfilter架构 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]