煤炭企业网络安全问题及对策研究  

Study on Problems and Countermeasures of Coal Enterprise Network Security

作　　者：汤丽娟[1] 孙克争[1] 

机构地区：[1]江苏商贸职业学院信息系,江苏连云港226000

出　　处：《煤炭技术》2013年第11期251-252,共2页Coal Technology

摘　　要：网络技术的快速发展,给煤炭企业带来极大的便利,但也给企业带来极大的风险。煤炭企业必须结合网络安全防范技术,制定有效的网络安全防御方案。分布式拒绝服务攻击的防御是当前网络安全研究领域中的难点,因为很难找到攻击源。为了能够根据追踪路径找到攻击源,重点对数据包标记技术进行了深入的研究,分析了它们的实现原理、效率及每种算法的优缺点,提出了一种改进的自适应分块包标记方案(AFMS),使得重构算法的收敛性大大提高,而且在误报率方面也大大降低,达到了高级包标记的水平,由于计算量下降重构时间缩短,也有效地防止假冒路由器的地址信息攻击,从而有效地保障煤炭企业网络能够正常提供服务。The rapid development of network technology, it brings great convenience to the coal enterprises, but also bring great risk. Coal enterprises should combine with the network security technology, and make effective network security defense scheme.The defense of DDoS attacks has become the difficult area in network security, because it is difficult to find attack source .According to trace path to find attack source, the research, with the emphasis on the packet marking trace back, analysis of their pricnciples,efficiency,and the advantages and disadvantages of each algorithm, and some improvements to probabilistic packet marking are given, AFMS scheme, which improves the reconstruct algorithm convergence ,and reduce false alarm rate, reduce the quality of data packet for reconstruction and computational complexity in the progress of reconstruct the attack tree. Reach Advanced Packet Marking level. On account of the computing amount decrease and reconstruction time shortened, it can effectively prevent the attack of counterfeit router address information.

关 键 词：分布式拒绝服务 拒绝服务 IP追踪 数据包标记 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]