网络攻击与防御技术的研究与实践  

Research and Practice of Network Attacks and Defense Techniques

作　　者：魏为民[1] 袁仲雄[1] 

机构地区：[1]上海电力学院计算机与信息工程学院,上海200090

出　　处：《信息网络安全》2012年第12期53-56,共4页Netinfo Security

基　　金：上海市自然科学基金[11ZR1414300];上海市教育委员会科研创新项目[11YZ194]

摘　　要：网络攻击与防御是信息安全领域的核心内容,采用攻防角色分组的情境实践模式,将其分解为扫描、网络嗅探、口令破解、欺骗攻击、拒绝服务攻击、缓冲区溢出攻击、Web攻击、SQL注入攻击、木马攻击、计算机病毒、手机病毒、防火墙与入侵检测等12个专题,对应12个学生小组,每组6名学生,攻击和防御各半。通过课程实践,有效培养学生的实际动手能力、自主学习、分析问题、解决问题的能力,以及团队协作和组织能力。Network attacks and defense,as core content in the field of the information security,introduce a kind of educational method called situational teaching which separate attacking roles as well as defending ones apart dividing this course into 12 subjects：scanning,network sniffing,password cracker,spoofing attacks,denial of services,buffer overflows,Web attacks,SQL injection,Trojan horse,computer virus,mobile virus,firewall as well as intrusion detection;each group containing 6 students have one task,half of whom belong to the attacking fields while the remaining should work on the opposite side.We sincerely hope that through this practice students＇ comprehensive capability including practical ability,self-learning ability and how to solve,analyze one problem as well as to get along with others can be improved to some extent.

关 键 词：网络攻击与防御 口令破解 欺骗攻击 SQL注入攻击 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]