个人防火墙穿透技术研究  

Study on Penetration Technology of Personal-firewall

作　　者：刘福超[1] 倪佑生[1] 付素明 

机构地区：[1]上海交通大学信息安全工程学院,上海200240 [2]厦门市同安区73151部队,福建厦门361100

出　　处：《信息安全与通信保密》2009年第9期94-95,97,共3页Information Security and Communications Privacy

摘　　要：为了防范恶意的网络攻击行为，越来越多的联网主机采用了个人防火墙。论文介绍了Windows平台下个人防火墙工作原理，常用的网络数据包截获技术的原理和特点，以及几种穿透个人防火墙的方法，并在NDISHOOK的层次实现数据通信，经过测试，它能穿透目前l丰流的防火墙。In order to prevent malicious behavior of network attack, more and more networked hosts have adopted personal firewall technology. This paper describes the principle of personal firewall on windows platform, the principle and characteristics of network data packet intercepting technology, several methods for penetrating the Personal firewall. And the digital communication are used for firewall penetration on NDIS Hook level. Experiment test indicate the these methods function well and could effectively penetrate the main-stream firewalls on the market.

关 键 词：个人防火墙技术 端口复用 DLL远程注入 NDIS HOOK 防火墙穿透 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]