局域网防御蠕虫病毒方案的探讨  

The Study in Defending Worm Virus in Local Area Network

作　　者：周绯菲 王文杰[2] 郝晓冰[3] 王观海[3] 赵军[4] 

机构地区：[1]交通部管理干部学院计算机系,北京100020 [2]中国科学院研究生院,北京100080 [3]燕山大学图书馆,河北秦皇岛066004 [4]燕山大学机械工程学院,河北秦皇岛066004

出　　处：《河北师范大学学报（自然科学版）》2009年第1期33-36,共4页Journal of Hebei Normal University：Natural Science

基　　金：国家"863"计划(2007AA01Z132-1)

摘　　要：蠕虫是对局域网安全产生严重威胁的病毒.为解决现阶段中型规模的局域网所面临的蠕虫泛滥的问题,以某单位局域网为研究对象,在相关理论研究的基础上结合该单位局域网的安全设计工程进行了安全方案的研究.设计了将计费网关与漏洞扫描及流量监测技术相结合的方案,解决了局域网客户端用户主机补丁包升级、局域网客户端主机漏洞扫描、漏洞主机提示以及暂时中止中毒主机访问互联网等问题.Worms is a virus that could critically threat to LAN. In order to solve the problem of worms flooding in middle scale LAN, the LAN in an institute is studied. Based on the analyses of the situation of the present campus network as well as the related theories,a security scheme is researched and designed both from the theoretical and practical perspectives in combination with the Three phase security improvement project in the LAN. Adding a charging gateway in combination with leak scanning and net flow monitoring technology is proposed. The scheme intends to solve the problems in several aspects： patching operation system, scanning serious leak, promoting computers that have serious leaks,and fighting against worms. It is able to suspend the Internet-visiting qualification on computers which have been infected by worms until such worms are cleared. It is able to notify the users who have some serious leaks in their operation systems or have not patched their operation systems in time in login page of the charging gateway.

关 键 词：安全威胁 局域网 防御蠕虫 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]