分布式主动型防火墙  

Distributed Active Firewall

作　　者：纪翀[1] 胡静[1] 陈春玲[1] 

机构地区：[1]南京邮电学院计算机科学与技术系,江苏南京210003

出　　处：《微机发展》2004年第2期97-99,共3页Microcomputer Development

摘　　要：介绍了分布式防火墙的概念与模型,分析了分布式防火墙不依赖于网络拓朴结构的优点。为克服分布式防火墙在防止拒绝服务攻击中的不足,提出了分布式主动型防火墙的模型:不被动地防止攻击,而是将内部的攻击拒绝在攻击者处。运用策略分解的方法,将一条KeyNote语言描述的策略分为两部分再发放给相应主机。此方法有效地防止了来自内部的拒绝服务攻击,使服务器能正常提供服务。Introduces the concept and model of DFW(Distributed Firewall), and analyzes the advantage of not depending on the topology of network.In order to overcome the shortage in defending DoS(Denial of Service) attack of DFW,illustrates the model of distributed active firewall: Not defending passively, but stop the internal attack at the place of attacker.Breaks down the policy written in KeyNote into two parts, and they will be sent to the corresponding hosts.This method prevents the server from DoS attack from inside,so the server can work normally.

关 键 词：分布式主动型防火墙 网络拓朴结构 网络安全 计算机网络 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]