网络已知攻击类型的防御方法  

Defensive Methods on the Type of Known Network Attacks

作　　者：王换招[1] 王灏[1] 李健[1] 

机构地区：[1]西安交通大学电子与信息工程学院,西安710049

出　　处：《计算机工程与应用》2003年第21期171-174,共4页Computer Engineering and Applications

摘　　要：随着网络的发展,网络的安全问题逐渐被人们所认识。网络攻击行为的不断发生,促使网络安全系统的诞生。该文提出的一个分布式入侵检测模型,能够对常见的具有攻击特征的入侵行为进行防御,同时在设计模型时,注意了标准化的设计,因此系统具有很高的升级性、可扩充性和适应性。最后,给出的端口扫描、嗅探器和IP欺骗防御代理设计,说明了如何进行标准化的代理设计满足模型目标。With the development of the computer network,more and more people concern network security.Network security systems have been developed because network attacks happen everyday.A Distributed Intrusion Detection System Model is put forward in this paper to defend various attacks with certain attack features.At the same time ,great attention is paid to standardized design,so our system has excellent expansibility,scalability and adaptability.Lastly,three defensive agents,which are port-scanning agent ,sniffer agent and IP spoofing agent are designed in detail in order to explain how to conduct a standardized agent to meet our model objective.

关 键 词：分布式入侵检测模型 端口扫描 嗅探器 IP欺骗 网络安全 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]