基于RRP技术的防火墙系统的研究和实现  

Research and Implementation of the Firewall System Based on RRP Technique

作　　者：王艳峰[1] 孙琨[1] 吴功宜[1] 

机构地区：[1]南开大学计算机系,天津300071

出　　处：《计算机工程》2000年第9期57-59,共3页Computer Engineering

基　　金：天津市自然科学基金项目

摘　　要：传统防火墙技术可分为两大类：一类是基于包过滤技术，另一类是代理技术．当前各种防火墙的实现中，对非服务攻击（包括欺骗攻击、源路由攻击等）的防范乏力，而资料显示这类攻击又是极为常用和易成功的．该文提出了路由记录分析（ＲＲＰ）技术，专门用于解决该类问题．There are two sorts in the traditional firewall technology: one is Packet-filtering,which restricts data stream on Internet Protocol (IP) Layer; the other is called proxy, which implements more control on Application Layer. Meanwhile, among the various firewall systems today, there is less guard for the application-independent attack (such as spoof attack, source route attack etc). While there are some data indicating that this attack is more popular and succeeds more easily, so it is a real careless oversight. So, the authors bring forward the route recording and parse (RRP) technique, which aims at this attack.

关 键 词：防火墙 非服务攻击 RRP技术 计算机网络安全 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]