网络入侵逃逸及其防御和检测技术综述  

Overviews of Network Intrusion Evasion and Defense Techniques

作　　者：史婷婷[1] 赵有健[1] 

机构地区：[1]清华大学计算机科学与技术系,北京100084

出　　处：《信息网络安全》2016年第1期70-74,共5页Netinfo Security

基　　金：国家自然科学基金[61233007]

摘　　要：互联网的普及和广泛应用使得网络安全备受重视,然而网络攻击的手段和方法也在不断更新。利用入侵逃逸技术能够伪装数据流量,对特征码进行混淆,致使入侵检测系统无法识别攻击,给网络安全带来了极大威胁和挑战。文章介绍了入侵逃逸技术的产生发展及其原理,描述了五种基本的逃逸技术,总结了高级逃逸技术的主要特点。另外,还给出了一些逃逸检测和防御方法,最后得出结论。Popularity and wide application of the Internet makes network security much more attention, but the methods of network attack are constantly updated. The intrusion evasion technique is used to disguise the data traffi c. By confusing the signature, the intrusion detection system can not recognize the attack. It has brought great threats and challenges to the network security. This paper introduces the development and principle of intrusion evasion techniques. It describes five basic evasion techniques and summarizes the main features of advanced evasion techniques. In addition, it lists some methods of evasion defense and detection. Finally, we come to the conclusions.

关 键 词：网络安全 入侵检测系统 入侵逃逸技术 高级逃逸技术 逃逸防御技术 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]