基于入侵容忍原理的服务器防护技术  

The Security Strategy of Servers Based on the Intrusion Tolerance

作　　者：邓林[1] 余刘琅[1] 韩江洪[1] 

机构地区：[1]合肥工业大学信息中心,安徽合肥230009

出　　处：《微电子学与计算机》2008年第6期143-146,150,共5页Microelectronics & Computer

基　　金：教育部博士点基金项目(20050359004)

摘　　要：针对服务器安全保护中存在的问题,对网络边界防火墙作用的有限性进行了研究,讨论了防火墙无关性的攻击模型,提出了以策略限制、文件操作阻断、注册表数据库权限控制以及本地应用层过滤等多方面综合防护的技术方案,并对入侵容忍模式下的防护效果评估问题进行了原则性分类,从而实现服务器在存在未知漏洞情况下的安全运行.实际测试表明提出的防护措施具有极好的效果.The limitation of network boundary firewall＇ s ability of server protection was discussed and a comprehensive defending policy was proposed, which includes the invading model of firewall irrelevance, the strategy confining, the controlling right of file operation and the filtration of local application layer and so on. The assessment of defending effects under the intrusion tolerance mode was also classified in principle, which carries out the validity of servers security whether unknown vulnerability existing. The experiment shows that the protective means is very effective.

关 键 词：入侵容忍 防火墙无关性 防护评估 安全策略 未知漏洞 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]