零日攻击的主动防范策略  

Active Defense Strategy of Zero-day Strategies

作　　者：吴翔毅[1] 

机构地区：[1]华侨大学计算机网络中心,福建泉州362021

出　　处：《泉州师范学院学报》2009年第4期7-10,共4页Journal of Quanzhou Normal University

摘　　要：针对零日攻击的攻击原理分析定时更新补丁、防火墙、入侵检测系统、防病毒软件、UTM网关等传统被动防御方式的不足,建议从网络入口、PC端点进行各个层次的防御,来实现主动防御零日攻击.通过综合使用网关防御、实施分级保护域以及部署主机型入侵防御系统,启发式行为检测反病毒软件等技术及安全管理策略对抗零日攻击,基本达到对零日攻击实现"零日防护"的目的.Based on the zero-day attack principle, the automatically in time update patch, firewall, intrusion detection systems,anti-virus software, UTM gateways and other traditional passive defense, active defense strategy is put forward. Recommendations from network border and desktops defenseing at all levels are suggested. Through the integrated use of gateway defense, implementation of the hierrchical protection domain,as well as the deployement of host-based intrustion prevention system, heuristic behavior detection technologies anti-virus software and security management strategy against zero-day attacks, the basic purpose can be achieved.

关 键 词：零日攻击 主动防御 分级保护 入侵防御系统 安全管理 

分 类 号：TP309.5[自动化与计算机技术—计算机系统结构]